@j-schreiber/sf-cli-security-audit 0.8.2 → 0.8.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (151) hide show
  1. package/README.md +3 -3
  2. package/lib/commands/org/audit/init.d.ts +19 -0
  3. package/lib/commands/org/audit/init.js +72 -0
  4. package/lib/commands/org/audit/init.js.map +1 -0
  5. package/lib/commands/org/audit/run.d.ts +23 -0
  6. package/lib/commands/org/audit/run.js +124 -0
  7. package/lib/commands/org/audit/run.js.map +1 -0
  8. package/lib/commands/org/scan/user-perms.d.ts +20 -0
  9. package/lib/commands/org/scan/user-perms.js +87 -0
  10. package/lib/commands/org/scan/user-perms.js.map +1 -0
  11. package/lib/libs/conf-init/auditConfig.d.ts +35 -0
  12. package/lib/libs/conf-init/auditConfig.js +41 -0
  13. package/lib/libs/conf-init/auditConfig.js.map +1 -0
  14. package/lib/libs/conf-init/permissionsClassification.d.ts +17 -0
  15. package/lib/libs/conf-init/permissionsClassification.js +80 -0
  16. package/lib/libs/conf-init/permissionsClassification.js.map +1 -0
  17. package/lib/libs/conf-init/policyConfigs.d.ts +31 -0
  18. package/lib/libs/conf-init/policyConfigs.js +91 -0
  19. package/lib/libs/conf-init/policyConfigs.js.map +1 -0
  20. package/lib/libs/conf-init/presets/loose.d.ts +6 -0
  21. package/lib/libs/conf-init/presets/loose.js +85 -0
  22. package/lib/libs/conf-init/presets/loose.js.map +1 -0
  23. package/lib/libs/conf-init/presets/none.d.ts +30 -0
  24. package/lib/libs/conf-init/presets/none.js +54 -0
  25. package/lib/libs/conf-init/presets/none.js.map +1 -0
  26. package/lib/libs/conf-init/presets/strict.d.ts +4 -0
  27. package/lib/libs/conf-init/presets/strict.js +79 -0
  28. package/lib/libs/conf-init/presets/strict.js.map +1 -0
  29. package/lib/libs/conf-init/presets.d.ts +7 -0
  30. package/lib/libs/conf-init/presets.js +20 -0
  31. package/lib/libs/conf-init/presets.js.map +1 -0
  32. package/lib/libs/core/auditRun.d.ts +36 -0
  33. package/lib/libs/core/auditRun.js +86 -0
  34. package/lib/libs/core/auditRun.js.map +1 -0
  35. package/lib/libs/core/classification-types.d.ts +20 -0
  36. package/lib/libs/core/classification-types.js +23 -0
  37. package/lib/libs/core/classification-types.js.map +1 -0
  38. package/lib/libs/core/constants.d.ts +10 -0
  39. package/lib/libs/core/constants.js +20 -0
  40. package/lib/libs/core/constants.js.map +1 -0
  41. package/lib/libs/core/file-mgmt/auditConfigFileManager.d.ts +48 -0
  42. package/lib/libs/core/file-mgmt/auditConfigFileManager.js +145 -0
  43. package/lib/libs/core/file-mgmt/auditConfigFileManager.js.map +1 -0
  44. package/lib/libs/core/file-mgmt/schema.d.ts +123 -0
  45. package/lib/libs/core/file-mgmt/schema.js +69 -0
  46. package/lib/libs/core/file-mgmt/schema.js.map +1 -0
  47. package/lib/libs/core/mdapi/mdapiRetriever.d.ts +54 -0
  48. package/lib/libs/core/mdapi/mdapiRetriever.js +123 -0
  49. package/lib/libs/core/mdapi/mdapiRetriever.js.map +1 -0
  50. package/lib/libs/core/mdapi/metadataRegistryEntry.d.ts +40 -0
  51. package/lib/libs/core/mdapi/metadataRegistryEntry.js +46 -0
  52. package/lib/libs/core/mdapi/metadataRegistryEntry.js.map +1 -0
  53. package/lib/libs/core/mdapi/namedMetadataToolingQueryable.d.ts +33 -0
  54. package/lib/libs/core/mdapi/namedMetadataToolingQueryable.js +41 -0
  55. package/lib/libs/core/mdapi/namedMetadataToolingQueryable.js.map +1 -0
  56. package/lib/libs/core/mdapi/namedMetadataType.d.ts +20 -0
  57. package/lib/libs/core/mdapi/namedMetadataType.js +41 -0
  58. package/lib/libs/core/mdapi/namedMetadataType.js.map +1 -0
  59. package/lib/libs/core/mdapi/singletonMetadataType.d.ts +21 -0
  60. package/lib/libs/core/mdapi/singletonMetadataType.js +37 -0
  61. package/lib/libs/core/mdapi/singletonMetadataType.js.map +1 -0
  62. package/lib/libs/core/mdapi/usersRepository.d.ts +85 -0
  63. package/lib/libs/core/mdapi/usersRepository.js +126 -0
  64. package/lib/libs/core/mdapi/usersRepository.js.map +1 -0
  65. package/lib/libs/core/policies/connectedAppPolicy.d.ts +10 -0
  66. package/lib/libs/core/policies/connectedAppPolicy.js +78 -0
  67. package/lib/libs/core/policies/connectedAppPolicy.js.map +1 -0
  68. package/lib/libs/core/policies/permissionSetPolicy.d.ts +11 -0
  69. package/lib/libs/core/policies/permissionSetPolicy.js +62 -0
  70. package/lib/libs/core/policies/permissionSetPolicy.js.map +1 -0
  71. package/lib/libs/core/policies/policy.d.ts +31 -0
  72. package/lib/libs/core/policies/policy.js +100 -0
  73. package/lib/libs/core/policies/policy.js.map +1 -0
  74. package/lib/libs/core/policies/profilePolicy.d.ts +11 -0
  75. package/lib/libs/core/policies/profilePolicy.js +64 -0
  76. package/lib/libs/core/policies/profilePolicy.js.map +1 -0
  77. package/lib/libs/core/policies/salesforceStandardTypes.d.ts +58 -0
  78. package/lib/libs/core/policies/salesforceStandardTypes.js +2 -0
  79. package/lib/libs/core/policies/salesforceStandardTypes.js.map +1 -0
  80. package/lib/libs/core/policies/userPolicy.d.ts +11 -0
  81. package/lib/libs/core/policies/userPolicy.js +60 -0
  82. package/lib/libs/core/policies/userPolicy.js.map +1 -0
  83. package/lib/libs/core/policy-types.d.ts +18 -0
  84. package/lib/libs/core/policy-types.js +28 -0
  85. package/lib/libs/core/policy-types.js.map +1 -0
  86. package/lib/libs/core/policyRegistry.d.ts +23 -0
  87. package/lib/libs/core/policyRegistry.js +38 -0
  88. package/lib/libs/core/policyRegistry.js.map +1 -0
  89. package/lib/libs/core/registries/connectedApps.d.ts +13 -0
  90. package/lib/libs/core/registries/connectedApps.js +13 -0
  91. package/lib/libs/core/registries/connectedApps.js.map +1 -0
  92. package/lib/libs/core/registries/helpers/permissionsScanning.d.ts +29 -0
  93. package/lib/libs/core/registries/helpers/permissionsScanning.js +69 -0
  94. package/lib/libs/core/registries/helpers/permissionsScanning.js.map +1 -0
  95. package/lib/libs/core/registries/permissionSets.d.ts +11 -0
  96. package/lib/libs/core/registries/permissionSets.js +11 -0
  97. package/lib/libs/core/registries/permissionSets.js.map +1 -0
  98. package/lib/libs/core/registries/profiles.d.ts +11 -0
  99. package/lib/libs/core/registries/profiles.js +11 -0
  100. package/lib/libs/core/registries/profiles.js.map +1 -0
  101. package/lib/libs/core/registries/ruleRegistry.d.ts +37 -0
  102. package/lib/libs/core/registries/ruleRegistry.js +48 -0
  103. package/lib/libs/core/registries/ruleRegistry.js.map +1 -0
  104. package/lib/libs/core/registries/rules/allUsedAppsUnderManagement.d.ts +7 -0
  105. package/lib/libs/core/registries/rules/allUsedAppsUnderManagement.js +23 -0
  106. package/lib/libs/core/registries/rules/allUsedAppsUnderManagement.js.map +1 -0
  107. package/lib/libs/core/registries/rules/enforcePermissionPresets.d.ts +7 -0
  108. package/lib/libs/core/registries/rules/enforcePermissionPresets.js +58 -0
  109. package/lib/libs/core/registries/rules/enforcePermissionPresets.js.map +1 -0
  110. package/lib/libs/core/registries/rules/enforcePermissionsOnProfileLike.d.ts +7 -0
  111. package/lib/libs/core/registries/rules/enforcePermissionsOnProfileLike.js +26 -0
  112. package/lib/libs/core/registries/rules/enforcePermissionsOnProfileLike.js.map +1 -0
  113. package/lib/libs/core/registries/rules/enforcePermissionsOnUser.d.ts +8 -0
  114. package/lib/libs/core/registries/rules/enforcePermissionsOnUser.js +42 -0
  115. package/lib/libs/core/registries/rules/enforcePermissionsOnUser.js.map +1 -0
  116. package/lib/libs/core/registries/rules/noInactiveUsers.d.ts +9 -0
  117. package/lib/libs/core/registries/rules/noInactiveUsers.js +44 -0
  118. package/lib/libs/core/registries/rules/noInactiveUsers.js.map +1 -0
  119. package/lib/libs/core/registries/rules/noOtherApexApiLogins.d.ts +7 -0
  120. package/lib/libs/core/registries/rules/noOtherApexApiLogins.js +27 -0
  121. package/lib/libs/core/registries/rules/noOtherApexApiLogins.js.map +1 -0
  122. package/lib/libs/core/registries/rules/noUserCanSelfAuthorize.d.ts +7 -0
  123. package/lib/libs/core/registries/rules/noUserCanSelfAuthorize.js +31 -0
  124. package/lib/libs/core/registries/rules/noUserCanSelfAuthorize.js.map +1 -0
  125. package/lib/libs/core/registries/rules/policyRule.d.ts +19 -0
  126. package/lib/libs/core/registries/rules/policyRule.js +32 -0
  127. package/lib/libs/core/registries/rules/policyRule.js.map +1 -0
  128. package/lib/libs/core/registries/types.d.ts +37 -0
  129. package/lib/libs/core/registries/types.js +11 -0
  130. package/lib/libs/core/registries/types.js.map +1 -0
  131. package/lib/libs/core/registries/users.d.ts +10 -0
  132. package/lib/libs/core/registries/users.js +17 -0
  133. package/lib/libs/core/registries/users.js.map +1 -0
  134. package/lib/libs/core/result-types.d.ts +172 -0
  135. package/lib/libs/core/result-types.js +2 -0
  136. package/lib/libs/core/result-types.js.map +1 -0
  137. package/lib/libs/core/utils.d.ts +12 -0
  138. package/lib/libs/core/utils.js +31 -0
  139. package/lib/libs/core/utils.js.map +1 -0
  140. package/lib/libs/quick-scan/types.d.ts +17 -0
  141. package/lib/libs/quick-scan/types.js +2 -0
  142. package/lib/libs/quick-scan/types.js.map +1 -0
  143. package/lib/libs/quick-scan/userPermissionScanner.d.ts +22 -0
  144. package/lib/libs/quick-scan/userPermissionScanner.js +75 -0
  145. package/lib/libs/quick-scan/userPermissionScanner.js.map +1 -0
  146. package/lib/ux/auditRunMultiStage.d.ts +65 -0
  147. package/lib/ux/auditRunMultiStage.js +120 -0
  148. package/lib/ux/auditRunMultiStage.js.map +1 -0
  149. package/oclif.lock +13606 -10113
  150. package/oclif.manifest.json +253 -2
  151. package/package.json +13 -41
@@ -0,0 +1,120 @@
1
+ import { MultiStageOutput } from '@oclif/multi-stage-output';
2
+ import { capitalize } from '../libs/core/utils.js';
3
+ export const LOAD_AUDIT_CONFIG = 'Loading audit config';
4
+ export const RESOLVE_POLICIES = 'Resolving policies';
5
+ export const EXECUTE_RULES = 'Executing rules';
6
+ export const FINALISE = 'Formatting results';
7
+ export default class AuditRunMultiStageOutput {
8
+ mso;
9
+ stageSpecificBlocks;
10
+ polStats;
11
+ constructor(opts) {
12
+ this.stageSpecificBlocks = opts.stageSpecificBlock;
13
+ this.mso = AuditRunMultiStageOutput.initUx(opts);
14
+ this.polStats = {};
15
+ }
16
+ /**
17
+ * In unit tests, we stub the actual UX class to hide output in terminal.
18
+ *
19
+ * @param opts
20
+ * @returns
21
+ */
22
+ static initUx(opts) {
23
+ return new MultiStageOutput(opts);
24
+ }
25
+ /**
26
+ * This pattern allows to stub multi-stage outputs in tests to mute output
27
+ * to stdout during test execution.
28
+ *
29
+ * In your code, create a new instance like this
30
+ * ```
31
+ * const ms = AuditRunMultiStageOutput.create(sobj, flags.json);
32
+ * ```
33
+ *
34
+ * @param opts
35
+ * @param jsonEnabled
36
+ * @returns
37
+ */
38
+ static create(opts) {
39
+ return new AuditRunMultiStageOutput({
40
+ jsonEnabled: opts.jsonEnabled ?? false,
41
+ stages: [LOAD_AUDIT_CONFIG, RESOLVE_POLICIES, EXECUTE_RULES, FINALISE],
42
+ title: 'Auditing Org',
43
+ preStagesBlock: [
44
+ {
45
+ type: 'message',
46
+ get: () => `Auditing ${opts.targetOrg} with config from ${opts.directoryRootPath}`,
47
+ },
48
+ ],
49
+ postStagesBlock: [
50
+ {
51
+ type: 'static-key-value',
52
+ label: 'Status',
53
+ get: (data) => data?.currentStatus,
54
+ },
55
+ ],
56
+ stageSpecificBlock: [],
57
+ });
58
+ }
59
+ start() {
60
+ this.mso.goto(LOAD_AUDIT_CONFIG, { currentStatus: 'Initialising' });
61
+ }
62
+ startPolicyResolve(runInstance) {
63
+ this.mso.goto(RESOLVE_POLICIES, { currentStatus: 'Resolving' });
64
+ Object.entries(runInstance.configs.policies).forEach(([policyName, policy]) => {
65
+ if (policy.content.enabled) {
66
+ this.addPolicyStatsListener(policyName, runInstance);
67
+ this.stageSpecificBlocks.push({
68
+ stage: RESOLVE_POLICIES,
69
+ type: 'dynamic-key-value',
70
+ label: capitalize(policyName),
71
+ get: (data) => {
72
+ if (data?.policies?.[policyName]) {
73
+ return `${data.policies[policyName].resolved ?? 0}/${data.policies[policyName].total ?? 0}`;
74
+ }
75
+ else {
76
+ return '';
77
+ }
78
+ },
79
+ });
80
+ if (policy.content.rules && Object.keys(policy.content.rules).length > 0) {
81
+ const enabledRules = Object.values(policy.content.rules).filter((ruleConfig) => ruleConfig.enabled).length;
82
+ this.stageSpecificBlocks.push({
83
+ stage: EXECUTE_RULES,
84
+ type: 'message',
85
+ get: () => `Execute ${enabledRules} rule(s) for ${policyName}`,
86
+ });
87
+ }
88
+ }
89
+ });
90
+ this.mso.updateData({});
91
+ }
92
+ startRuleExecution() {
93
+ this.mso.goto(EXECUTE_RULES, { currentStatus: 'Executing' });
94
+ }
95
+ finish() {
96
+ this.mso.goto(FINALISE, { currentStatus: 'Completed' });
97
+ this.mso.stop('completed');
98
+ }
99
+ addPolicyStatsListener = (policyName, runInstance) => {
100
+ // multi stage output updates its entire internal state, but only "patches"
101
+ // data one level deep (e.g. policies property is replaced entierly)
102
+ // thats why we gather the statistics for each individual policy in a single variable
103
+ // and then update the multi stage data with aggregated data
104
+ runInstance.addListener(`entityresolve-${policyName}`, (data) => {
105
+ if (this.polStats[policyName]) {
106
+ if (data.resolved) {
107
+ this.polStats[policyName].resolved = data.resolved;
108
+ }
109
+ if (data.total) {
110
+ this.polStats[policyName].total = data.total;
111
+ }
112
+ }
113
+ else {
114
+ this.polStats[policyName] = { resolved: data.resolved ?? 0, total: data.total ?? 0 };
115
+ }
116
+ this.mso.updateData({ policies: structuredClone(this.polStats) });
117
+ });
118
+ };
119
+ }
120
+ //# sourceMappingURL=auditRunMultiStage.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"auditRunMultiStage.js","sourceRoot":"","sources":["../../src/ux/auditRunMultiStage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAA2B,MAAM,2BAA2B,CAAC;AAEtF,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACxD,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AACrD,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAC/C,MAAM,CAAC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AAmB7C,MAAM,CAAC,OAAO,OAAO,wBAAwB;IACpC,GAAG,CAAiC;IACpC,mBAAmB,CAAsC;IACxD,QAAQ,CAAmB;IAEnC,YAAmB,IAA2C;QAC5D,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,kBAAyD,CAAC;QAC1F,IAAI,CAAC,GAAG,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,MAAM,CAAC,IAA2C;QAC9D,OAAO,IAAI,gBAAgB,CAAe,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,MAAM,CAAC,MAAM,CAAC,IAA0B;QAC7C,OAAO,IAAI,wBAAwB,CAAC;YAClC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,KAAK;YACtC,MAAM,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,QAAQ,CAAC;YACtE,KAAK,EAAE,cAAc;YACrB,cAAc,EAAE;gBACd;oBACE,IAAI,EAAE,SAAS;oBACf,GAAG,EAAE,GAAG,EAAE,CAAC,YAAY,IAAI,CAAC,SAAS,qBAAqB,IAAI,CAAC,iBAAiB,EAAE;iBACnF;aACF;YACD,eAAe,EAAE;gBACf;oBACE,IAAI,EAAE,kBAAkB;oBACxB,KAAK,EAAE,QAAQ;oBACf,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,aAAa;iBACnC;aACF;YACD,kBAAkB,EAAE,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;IACtE,CAAC;IAEM,kBAAkB,CAAC,WAAqB;QAC7C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE;YAC5E,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACrD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;oBAC5B,KAAK,EAAE,gBAAgB;oBACvB,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC;oBAC7B,GAAG,EAAE,CAAC,IAAkB,EAAU,EAAE;wBAClC,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;4BACjC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;wBAC9F,CAAC;6BAAM,CAAC;4BACN,OAAO,EAAE,CAAC;wBACZ,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzE,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;oBAC3G,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;wBAC5B,KAAK,EAAE,aAAa;wBACpB,IAAI,EAAE,SAAS;wBACf,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,YAAY,gBAAgB,UAAU,EAAE;qBAC/D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAEM,kBAAkB;QACvB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IAC/D,CAAC;IAEM,MAAM;QACX,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7B,CAAC;IAEO,sBAAsB,GAAG,CAAC,UAAkB,EAAE,WAAqB,EAAQ,EAAE;QACnF,2EAA2E;QAC3E,oEAAoE;QACpE,qFAAqF;QACrF,4DAA4D;QAC5D,WAAW,CAAC,WAAW,CAAC,iBAAiB,UAAU,EAAE,EAAE,CAAC,IAAwB,EAAE,EAAE;YAClF,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAClB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;gBACrD,CAAC;gBACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;gBAC/C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACvF,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;CACH"}