@next-secure-check/rules 0.3.0 → 0.5.0

package/dist/command-ast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-ast.js","sourceRoot":"","sources":["../src/command-ast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEpD,MAAM,UAAU,sBAAsB,CACpC,UAAyB,EACzB,kBAAuC,EACvC,sBAA2C;IAE3C,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrG,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAyB;IAC5D,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,UAAU,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAA0D;IAClG,OAAO,QAAQ,KAAK,EAAE,CAAC,UAAU,CAAC,aAAa,IAAI,QAAQ,KAAK,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAmB;IAC7D,OAAO,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAyB;IAC/D,OAAO,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA0B;IAC3D,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACvI,CAAC;IAED,OAAO,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAA0B;IAChE,OAAO,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC"}

package/dist/command-discovery.d.ts

@@ -0,0 +1,8 @@
+import ts from "typescript";
+export type CommandDiscoveryFacts = {
+    commandIdentifiers: Set<string>;
+    childProcessNamespaces: Set<string>;
+    commandDeclarationNodes: ts.Node[];
+};
+export declare function collectCommandDiscovery(sourceFile: ts.SourceFile): CommandDiscoveryFacts;
+//# sourceMappingURL=command-discovery.d.ts.map

package/dist/command-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-discovery.d.ts","sourceRoot":"","sources":["../src/command-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAQ5B,MAAM,MAAM,qBAAqB,GAAG;IAClC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,sBAAsB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,uBAAuB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;CACpC,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,GAAG,qBAAqB,CAexF"}

package/dist/command-discovery.js

@@ -0,0 +1,92 @@
+import ts from "typescript";
+import { COMMAND_EXECUTION_NAMES, bindingElementLocalName, bindingElementName, isChildProcessSpecifier } from "./command-ast.js";
+export function collectCommandDiscovery(sourceFile) {
+    const commandIdentifiers = new Set();
+    const childProcessNamespaces = new Set();
+    const commandDeclarationNodes = [];
+    visitCommandDiscoveryNodes(sourceFile, (node) => {
+        collectChildProcessImports(node, commandIdentifiers, childProcessNamespaces, commandDeclarationNodes);
+        collectChildProcessRequires(node, commandIdentifiers, childProcessNamespaces, commandDeclarationNodes);
+    });
+    return {
+        commandIdentifiers,
+        childProcessNamespaces,
+        commandDeclarationNodes
+    };
+}
+function collectChildProcessImports(node, commandIdentifiers, childProcessNamespaces, declarationNodes) {
+    if (!ts.isImportDeclaration(node) || !isChildProcessSpecifier(node.moduleSpecifier)) {
+        return;
+    }
+    const importClause = node.importClause;
+    if (!importClause) {
+        return;
+    }
+    if (importClause.name) {
+        childProcessNamespaces.add(importClause.name.text);
+    }
+    const namedBindings = importClause.namedBindings;
+    if (namedBindings && ts.isNamespaceImport(namedBindings)) {
+        childProcessNamespaces.add(namedBindings.name.text);
+        return;
+    }
+    if (!namedBindings || !ts.isNamedImports(namedBindings)) {
+        return;
+    }
+    for (const importSpecifier of namedBindings.elements) {
+        const importedName = importSpecifier.propertyName?.text ?? importSpecifier.name.text;
+        if (!COMMAND_EXECUTION_NAMES.has(importedName)) {
+            continue;
+        }
+        commandIdentifiers.add(importSpecifier.name.text);
+        if (importedName === "exec" || importedName === "execSync") {
+            declarationNodes.push(importSpecifier);
+        }
+    }
+}
+function collectChildProcessRequires(node, commandIdentifiers, childProcessNamespaces, declarationNodes) {
+    if (!ts.isVariableDeclaration(node) || !node.initializer) {
+        return;
+    }
+    if (isRequireChildProcessCall(node.initializer)) {
+        if (ts.isIdentifier(node.name)) {
+            childProcessNamespaces.add(node.name.text);
+            return;
+        }
+        if (ts.isObjectBindingPattern(node.name)) {
+            for (const element of node.name.elements) {
+                const importedName = bindingElementName(element);
+                const localName = bindingElementLocalName(element);
+                if (!importedName || !localName || !COMMAND_EXECUTION_NAMES.has(importedName)) {
+                    continue;
+                }
+                commandIdentifiers.add(localName);
+                if (importedName === "exec" || importedName === "execSync") {
+                    declarationNodes.push(element);
+                }
+            }
+        }
+        return;
+    }
+    if (ts.isPropertyAccessExpression(node.initializer) && isRequireChildProcessCall(node.initializer.expression)) {
+        const importedName = node.initializer.name.text;
+        if (ts.isIdentifier(node.name) && COMMAND_EXECUTION_NAMES.has(importedName)) {
+            commandIdentifiers.add(node.name.text);
+            if (importedName === "exec" || importedName === "execSync") {
+                declarationNodes.push(node);
+            }
+        }
+    }
+}
+function isRequireChildProcessCall(node) {
+    if (!ts.isCallExpression(node) || !ts.isIdentifier(node.expression) || node.expression.text !== "require") {
+        return false;
+    }
+    const [specifier] = node.arguments;
+    return isChildProcessSpecifier(specifier);
+}
+function visitCommandDiscoveryNodes(node, callback) {
+    callback(node);
+    ts.forEachChild(node, (child) => visitCommandDiscoveryNodes(child, callback));
+}
+//# sourceMappingURL=command-discovery.js.map

package/dist/command-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-discovery.js","sourceRoot":"","sources":["../src/command-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,kBAAkB,CAAC;AAQ1B,MAAM,UAAU,uBAAuB,CAAC,UAAyB;IAC/D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;IACjD,MAAM,uBAAuB,GAAc,EAAE,CAAC;IAE9C,0BAA0B,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QAC9C,0BAA0B,CAAC,IAAI,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;QACtG,2BAA2B,CAAC,IAAI,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,kBAAkB;QAClB,sBAAsB;QACtB,uBAAuB;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,IAAa,EACb,kBAA+B,EAC/B,sBAAmC,EACnC,gBAA2B;IAE3B,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACpF,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACvC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;IACT,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;QACtB,sBAAsB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,aAAa,GAAG,YAAY,CAAC,aAAa,CAAC;IACjD,IAAI,aAAa,IAAI,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;QACzD,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,OAAO;IACT,CAAC;IAED,KAAK,MAAM,eAAe,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,EAAE,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QACrF,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/C,SAAS;QACX,CAAC;QAED,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YAC3D,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAClC,IAAa,EACb,kBAA+B,EAC/B,sBAAmC,EACnC,gBAA2B;IAE3B,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACzD,OAAO;IACT,CAAC;IAED,IAAI,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAChD,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACzC,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACjD,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACnD,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC9E,SAAS;gBACX,CAAC;gBAED,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAClC,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;oBAC3D,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;IACT,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9G,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAChD,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5E,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;gBAC3D,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAa;IAC9C,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC1G,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACnC,OAAO,uBAAuB,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAa,EAAE,QAAiC;IAClF,QAAQ,CAAC,IAAI,CAAC,CAAC;IACf,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/command-flow.d.ts

@@ -0,0 +1,25 @@
+import ts from "typescript";
+import { type BoundedFlowFacts, type BoundedFlowInvalidationReason } from "./analysis-facts.js";
+export type CommandFlowFacts = {
+    sourcePaths: ReadonlyMap<ts.CallExpression, string>;
+    safeCommandCalls: ReadonlySet<ts.CallExpression>;
+    boundedFlow: BoundedFlowFacts;
+};
+export type BoundedFlowContext = {
+    readonly scopeRoot: ts.Node;
+    readonly findSourcePathInExpression: (node: ts.Node) => string | undefined;
+    readonly findSourcePathInArguments: (node: ts.CallExpression) => string | undefined;
+    readonly recordSink: (node: ts.CallExpression, kind?: string) => void;
+    readonly recordEvidencePath: (node: ts.Node, path: string) => void;
+};
+export type BoundedFlowCallbacks = {
+    readonly onVariableDeclaration?: (node: ts.VariableDeclaration, context: BoundedFlowContext) => void;
+    readonly onAssignment?: (node: ts.BinaryExpression, context: BoundedFlowContext) => void;
+    readonly onCall?: (node: ts.CallExpression, context: BoundedFlowContext) => void;
+    readonly onTaggedTemplate?: (node: ts.TaggedTemplateExpression, context: BoundedFlowContext) => void;
+    readonly onInvalidation?: (identifier: string, reason: BoundedFlowInvalidationReason, context: BoundedFlowContext) => void;
+};
+export declare function isAnalyzableCommandExecutionCall(node: ts.CallExpression, commandIdentifiers: ReadonlySet<string>, childProcessNamespaces: ReadonlySet<string>): boolean;
+export declare function collectCommandSourcePaths(sourceFile: ts.SourceFile, commandIdentifiers: ReadonlySet<string>, childProcessNamespaces: ReadonlySet<string>): ReadonlyMap<ts.CallExpression, string>;
+export declare function collectCommandFlowFacts(sourceFile: ts.SourceFile, commandIdentifiers: ReadonlySet<string>, childProcessNamespaces: ReadonlySet<string>, callbacks?: BoundedFlowCallbacks): CommandFlowFacts;
+//# sourceMappingURL=command-flow.d.ts.map

package/dist/command-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-flow.d.ts","sourceRoot":"","sources":["../src/command-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAc5B,OAAO,EAGL,KAAK,gBAAgB,EAErB,KAAK,6BAA6B,EACnC,MAAM,qBAAqB,CAAC;AAG7B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACpD,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;IACjD,WAAW,EAAE,gBAAgB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC;IAC5B,QAAQ,CAAC,0BAA0B,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,GAAG,SAAS,CAAC;IAC3E,QAAQ,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,KAAK,MAAM,GAAG,SAAS,CAAC;IACpF,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACtE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACpE,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,EAAE,OAAO,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACrG,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACzF,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACjF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,EAAE,OAAO,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACrG,QAAQ,CAAC,cAAc,CAAC,EAAE,CACxB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,6BAA6B,EACrC,OAAO,EAAE,kBAAkB,KACxB,IAAI,CAAC;CACX,CAAC;AAEF,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,EAAE,CAAC,cAAc,EACvB,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,EACvC,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAAC,GAC1C,OAAO,CAET;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,EAAE,CAAC,UAAU,EACzB,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,EACvC,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAAC,GAC1C,WAAW,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,CAExC;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,EAAE,CAAC,UAAU,EACzB,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,EACvC,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAAC,EAC3C,SAAS,GAAE,oBAAyB,GACnC,gBAAgB,CA6BlB"}

package/dist/command-flow.js

@@ -0,0 +1,467 @@
+import ts from "typescript";
+import { COMMAND_ALIAS_LIMIT, REQUEST_SOURCE_NAMES, ROUTE_PARAMS_NAMES, SEARCH_PARAMS_NAME, bindingElementLocalName, bindingElementName, commandExecutionName, isCommandAssignmentOperator, isCommandExecutionCall, isCommandMutationOperator } from "./command-ast.js";
+import { createBoundedFlowFactsBuilder, finalizeBoundedFlowFacts } from "./analysis-facts.js";
+import { hasCommandAllowlistGuard, isCommandAllowlistMembershipCall } from "./command-guards.js";
+export function isAnalyzableCommandExecutionCall(node, commandIdentifiers, childProcessNamespaces) {
+    return isCommandExecutionCall(node.expression, commandIdentifiers, childProcessNamespaces) && !isSafeStaticSpawnCall(node);
+}
+export function collectCommandSourcePaths(sourceFile, commandIdentifiers, childProcessNamespaces) {
+    return collectCommandFlowFacts(sourceFile, commandIdentifiers, childProcessNamespaces).sourcePaths;
+}
+export function collectCommandFlowFacts(sourceFile, commandIdentifiers, childProcessNamespaces, callbacks = {}) {
+    const factsBuilder = createBoundedFlowFactsBuilder();
+    collectFunctionBoundaryFacts(sourceFile, factsBuilder);
+    analyzeCommandScope(sourceFile, sourceFile, commandIdentifiers, childProcessNamespaces, factsBuilder, callbacks);
+    visitCommandNodes(sourceFile, (node) => {
+        if (!isCommandFunctionLike(node)) {
+            return;
+        }
+        const body = commandFunctionBody(node);
+        if (body) {
+            analyzeCommandScope(body, body, commandIdentifiers, childProcessNamespaces, factsBuilder, callbacks);
+        }
+    });
+    const boundedFlow = finalizeBoundedFlowFacts(factsBuilder);
+    const sourcePaths = new Map();
+    for (const [node, path] of boundedFlow.evidencePaths) {
+        if (ts.isCallExpression(node)) {
+            sourcePaths.set(node, path);
+        }
+    }
+    return {
+        sourcePaths,
+        safeCommandCalls: boundedFlow.guardedSinks,
+        boundedFlow
+    };
+}
+function isSafeStaticSpawnCall(node) {
+    const methodName = commandExecutionName(node.expression);
+    if (methodName !== "spawn" && methodName !== "spawnSync") {
+        return false;
+    }
+    const command = node.arguments[0] ? unwrapCommandExpression(node.arguments[0]) : undefined;
+    const argumentsArray = node.arguments[1] ? unwrapCommandExpression(node.arguments[1]) : undefined;
+    if (!command || literalText(command) === undefined || !argumentsArray || !ts.isArrayLiteralExpression(argumentsArray)) {
+        return false;
+    }
+    if (!argumentsArray.elements.every((element) => !ts.isSpreadElement(element) && literalText(element) !== undefined)) {
+        return false;
+    }
+    const options = node.arguments[2] ? unwrapCommandExpression(node.arguments[2]) : undefined;
+    if (!options) {
+        return true;
+    }
+    if (!ts.isObjectLiteralExpression(options)) {
+        return false;
+    }
+    return options.properties.every((property) => {
+        if (ts.isSpreadAssignment(property)) {
+            return false;
+        }
+        if (!ts.isPropertyAssignment(property)) {
+            return true;
+        }
+        const propertyName = ts.isIdentifier(property.name) || ts.isStringLiteral(property.name) ? property.name.text : undefined;
+        if (!propertyName) {
+            return false;
+        }
+        if (propertyName !== "shell") {
+            return true;
+        }
+        return property.initializer.kind === ts.SyntaxKind.FalseKeyword;
+    });
+}
+function analyzeCommandScope(scopeRoot, node, commandIdentifiers, childProcessNamespaces, factsBuilder, callbacks, state = createCommandFlowState(factsBuilder, scopeRoot, callbacks)) {
+    if (node !== scopeRoot && isCommandFunctionLike(node)) {
+        return;
+    }
+    if (ts.isVariableDeclaration(node)) {
+        recordCommandDeclaration(node, state);
+        state.callbacks.onVariableDeclaration?.(node, createBoundedFlowContext(state));
+    }
+    if (ts.isBinaryExpression(node) && isCommandAssignmentOperator(node.operatorToken.kind)) {
+        recordCommandAssignment(node, state);
+        state.callbacks.onAssignment?.(node, createBoundedFlowContext(state));
+    }
+    if (ts.isPrefixUnaryExpression(node) && isCommandMutationOperator(node.operator)) {
+        invalidateCommandTarget(node.operand, state, "mutation");
+    }
+    if (ts.isPostfixUnaryExpression(node) && isCommandMutationOperator(node.operator)) {
+        invalidateCommandTarget(node.operand, state, "mutation");
+    }
+    if (ts.isTaggedTemplateExpression(node)) {
+        state.callbacks.onTaggedTemplate?.(node, createBoundedFlowContext(state));
+    }
+    if (ts.isCallExpression(node)) {
+        state.callbacks.onCall?.(node, createBoundedFlowContext(state));
+        if (isAnalyzableCommandExecutionCall(node, commandIdentifiers, childProcessNamespaces)) {
+            state.factsBuilder.sinkFacts.set(node, { node, scope: scopeRoot, kind: commandExecutionName(node.expression) });
+            const sourcePath = findCommandSourcePathInArguments(node, state);
+            if (sourcePath) {
+                const guardIdentifier = guardedCommandIdentifier(node, state);
+                if (guardIdentifier) {
+                    state.factsBuilder.guardedSinks.add(node);
+                    state.factsBuilder.guardFacts.set(node, {
+                        node,
+                        scope: scopeRoot,
+                        kind: "command-allowlist",
+                        identifier: guardIdentifier
+                    });
+                }
+                else {
+                    state.factsBuilder.evidencePaths.set(node, sourcePath);
+                }
+            }
+            else {
+                invalidateTaintedReferences(node, state, "call-escape");
+            }
+        }
+        else if (!isCommandAllowlistMembershipCall(node) && !sourcePathForExpression(node, state)) {
+            invalidateTaintedReferences(node, state, "call-escape");
+        }
+    }
+    ts.forEachChild(node, (child) => analyzeCommandScope(scopeRoot, child, commandIdentifiers, childProcessNamespaces, factsBuilder, callbacks, state));
+}
+function guardedCommandIdentifier(node, state) {
+    const [commandArgument] = node.arguments;
+    if (!commandArgument) {
+        return undefined;
+    }
+    const normalized = unwrapCommandExpression(commandArgument);
+    if (!ts.isIdentifier(normalized) || !sourcePathForExpression(normalized, state)) {
+        return undefined;
+    }
+    return hasCommandAllowlistGuard(node, normalized.text) && !hasUntrustedSpawnArguments(node, state)
+        ? normalized.text
+        : undefined;
+}
+function hasUntrustedSpawnArguments(node, state) {
+    const methodName = commandExecutionName(node.expression);
+    if (methodName !== "spawn" && methodName !== "spawnSync") {
+        return false;
+    }
+    return node.arguments.slice(1).some((argument) => Boolean(findCommandSourcePathInExpression(argument, state)));
+}
+function createCommandFlowState(factsBuilder, scopeRoot, callbacks) {
+    return {
+        factsBuilder,
+        scopeRoot,
+        callbacks,
+        declared: new Set(),
+        initialized: new Set(),
+        invalidated: new Set(),
+        tracked: new Map()
+    };
+}
+function createBoundedFlowContext(state) {
+    return {
+        scopeRoot: state.scopeRoot,
+        findSourcePathInExpression: (node) => findCommandSourcePathInExpression(node, state),
+        findSourcePathInArguments: (node) => findCommandSourcePathInArguments(node, state),
+        recordSink: (node, kind) => {
+            state.factsBuilder.sinkFacts.set(node, { node, scope: state.scopeRoot, kind });
+        },
+        recordEvidencePath: (node, path) => {
+            state.factsBuilder.evidencePaths.set(node, path);
+        }
+    };
+}
+function recordCommandDeclaration(node, state) {
+    if (ts.isIdentifier(node.name)) {
+        state.declared.add(node.name.text);
+        if (!node.initializer) {
+            return;
+        }
+        state.initialized.add(node.name.text);
+        const value = sourcePathForAssignment(node.initializer, state, node.name.text);
+        recordIdentifierAlias(node, node.name.text, node.initializer, value, state);
+        trackCommandValue(node.name.text, value, state);
+        return;
+    }
+    if (!ts.isObjectBindingPattern(node.name) || !node.initializer) {
+        return;
+    }
+    const base = sourcePathForReference(node.initializer, state);
+    for (const element of node.name.elements) {
+        const localName = bindingElementLocalName(element);
+        const propertyName = bindingElementName(element);
+        if (!localName) {
+            continue;
+        }
+        state.declared.add(localName);
+        state.initialized.add(localName);
+        trackCommandValue(localName, base && propertyName ? commandProperty(base, propertyName) : undefined, state);
+    }
+}
+function recordCommandAssignment(node, state) {
+    const target = commandTargetIdentifier(node.left);
+    if (!target) {
+        invalidateTaintedReferences(node.left, state, "reassignment");
+        return;
+    }
+    if (node.operatorToken.kind !== ts.SyntaxKind.EqualsToken) {
+        invalidateCommandTarget(node.left, state, "mutation");
+        return;
+    }
+    if (state.invalidated.has(target) || state.initialized.has(target)) {
+        invalidateCommandTarget(node.left, state, "reassignment");
+        return;
+    }
+    state.declared.add(target);
+    state.initialized.add(target);
+    const value = sourcePathForAssignment(node.right, state, target);
+    recordIdentifierAlias(node, target, node.right, value, state);
+    trackCommandValue(target, value, state);
+}
+function recordIdentifierAlias(node, target, expression, value, state) {
+    const normalized = unwrapCommandExpression(expression);
+    if (!value || value.aliasDepth > COMMAND_ALIAS_LIMIT || !ts.isIdentifier(normalized) || normalized.text === target) {
+        return;
+    }
+    state.factsBuilder.aliasFacts.push({
+        node,
+        scope: state.scopeRoot,
+        from: normalized.text,
+        to: target,
+        depth: value.aliasDepth,
+        path: value.path
+    });
+}
+function trackCommandValue(name, value, state) {
+    if (!value || value.aliasDepth > COMMAND_ALIAS_LIMIT || state.invalidated.has(name)) {
+        state.tracked.delete(name);
+        return;
+    }
+    state.tracked.set(name, value);
+}
+function findCommandSourcePathInArguments(node, state) {
+    for (const argument of node.arguments) {
+        const sourcePath = findCommandSourcePathInExpression(argument, state);
+        if (sourcePath) {
+            return sourcePath;
+        }
+    }
+    return undefined;
+}
+function findCommandSourcePathInExpression(node, state) {
+    const directSource = sourcePathForExpression(node, state);
+    if (directSource) {
+        return directSource.path;
+    }
+    let sourcePath;
+    ts.forEachChild(node, (child) => {
+        if (sourcePath || isCommandFunctionLike(child)) {
+            return;
+        }
+        sourcePath = findCommandSourcePathInExpression(child, state);
+    });
+    return sourcePath;
+}
+function sourcePathForExpression(expression, state) {
+    const normalized = unwrapCommandExpression(expression);
+    if (ts.isBinaryExpression(normalized)) {
+        return sourcePathForExpression(normalized.left, state) ?? sourcePathForExpression(normalized.right, state);
+    }
+    if (ts.isConditionalExpression(normalized)) {
+        return sourcePathForExpression(normalized.whenTrue, state) ?? sourcePathForExpression(normalized.whenFalse, state);
+    }
+    if (ts.isIdentifier(normalized)) {
+        const tracked = state.tracked.get(normalized.text);
+        if (tracked && !state.invalidated.has(normalized.text)) {
+            return tracked;
+        }
+        if (ROUTE_PARAMS_NAMES.test(normalized.text)) {
+            return recordDirectSource(normalized, { path: normalized.text, aliasDepth: 0 }, state);
+        }
+        return undefined;
+    }
+    return sourcePathForReference(normalized, state);
+}
+function sourcePathForAssignment(expression, state, targetName) {
+    const normalized = unwrapCommandExpression(expression);
+    if (ts.isIdentifier(normalized)) {
+        const tracked = state.tracked.get(normalized.text);
+        if (tracked && !state.invalidated.has(normalized.text)) {
+            return commandAlias(tracked, targetName ?? normalized.text);
+        }
+    }
+    return sourcePathForExpression(normalized, state);
+}
+function sourcePathForReference(expression, state) {
+    const normalized = unwrapCommandExpression(expression);
+    if (ts.isIdentifier(normalized)) {
+        if (state.invalidated.has(normalized.text)) {
+            return undefined;
+        }
+        const tracked = state.tracked.get(normalized.text);
+        if (tracked) {
+            return tracked;
+        }
+        if (ROUTE_PARAMS_NAMES.test(normalized.text)) {
+            return recordDirectSource(normalized, { path: normalized.text, aliasDepth: 0 }, state);
+        }
+        return undefined;
+    }
+    if (ts.isPropertyAccessExpression(normalized)) {
+        const directSource = directCommandPropertySource(normalized);
+        if (directSource) {
+            return recordDirectSource(normalized, directSource, state);
+        }
+        const base = sourcePathForReference(normalized.expression, state);
+        return base ? commandProperty(base, normalized.name.text) : undefined;
+    }
+    if (ts.isElementAccessExpression(normalized)) {
+        const propertyName = normalized.argumentExpression && literalText(normalized.argumentExpression);
+        if (!propertyName) {
+            return undefined;
+        }
+        const directSource = directCommandElementSource(normalized, propertyName);
+        if (directSource) {
+            return recordDirectSource(normalized, directSource, state);
+        }
+        const base = sourcePathForReference(normalized.expression, state);
+        return base ? commandProperty(base, propertyName) : undefined;
+    }
+    if (ts.isCallExpression(normalized) && ts.isPropertyAccessExpression(normalized.expression)) {
+        const methodName = normalized.expression.name.text;
+        const receiver = normalized.expression.expression;
+        if ((methodName === "json" || methodName === "formData") && isRequestSourceReceiver(receiver)) {
+            return recordDirectSource(normalized, { path: `${commandExpressionLabel(receiver)}.${methodName}()`, aliasDepth: 0 }, state);
+        }
+        if (methodName === "get") {
+            if (isSearchParamsReceiver(receiver)) {
+                return recordDirectSource(normalized, { path: `${commandExpressionLabel(receiver)}.get()`, aliasDepth: 0 }, state);
+            }
+            const base = sourcePathForReference(receiver, state);
+            return base ? commandProperty(base, "get()") : undefined;
+        }
+    }
+    return undefined;
+}
+function recordDirectSource(node, value, state) {
+    state.factsBuilder.sourceFacts.set(node, {
+        node,
+        path: value.path,
+        scope: state.scopeRoot
+    });
+    return value;
+}
+function directCommandPropertySource(node) {
+    if (!isRequestSourceReceiver(node.expression) || (node.name.text !== "body" && node.name.text !== "query")) {
+        return undefined;
+    }
+    return { path: `${commandExpressionLabel(node.expression)}.${node.name.text}`, aliasDepth: 0 };
+}
+function directCommandElementSource(node, propertyName) {
+    if (!isRequestSourceReceiver(node.expression) || (propertyName !== "body" && propertyName !== "query")) {
+        return undefined;
+    }
+    return { path: `${commandExpressionLabel(node.expression)}.${propertyName}`, aliasDepth: 0 };
+}
+function commandProperty(value, propertyName) {
+    return {
+        path: `${value.path} -> ${propertyName}`,
+        aliasDepth: value.aliasDepth
+    };
+}
+function commandAlias(value, aliasName) {
+    return {
+        path: `${value.path} -> ${aliasName}`,
+        aliasDepth: value.aliasDepth + 1
+    };
+}
+function invalidateCommandTarget(node, state, reason) {
+    const target = commandTargetIdentifier(node);
+    if (target) {
+        recordInvalidation(node, target, reason, state);
+        state.tracked.delete(target);
+        state.invalidated.add(target);
+    }
+    invalidateTaintedReferences(node, state, reason);
+}
+function invalidateTaintedReferences(node, state, reason) {
+    const identifiers = new Set();
+    visitCommandNodes(node, (child) => {
+        if (!ts.isIdentifier(child) || !state.tracked.has(child.text)) {
+            return;
+        }
+        if (ts.isPropertyAccessExpression(child.parent) && child.parent.name === child) {
+            return;
+        }
+        identifiers.add(child.text);
+    });
+    for (const identifier of identifiers) {
+        recordInvalidation(node, identifier, reason, state);
+        state.tracked.delete(identifier);
+        state.invalidated.add(identifier);
+    }
+}
+function recordInvalidation(node, identifier, reason, state) {
+    state.factsBuilder.invalidationFacts.push({ node, scope: state.scopeRoot, identifier, reason });
+    state.callbacks.onInvalidation?.(identifier, reason, createBoundedFlowContext(state));
+}
+function commandTargetIdentifier(node) {
+    if (ts.isIdentifier(node)) {
+        return node.text;
+    }
+    if (ts.isPropertyAccessExpression(node) || ts.isElementAccessExpression(node)) {
+        return commandTargetIdentifier(node.expression);
+    }
+    return undefined;
+}
+function unwrapCommandExpression(expression) {
+    let current = expression;
+    while (ts.isParenthesizedExpression(current) ||
+        ts.isAwaitExpression(current) ||
+        ts.isNonNullExpression(current) ||
+        ts.isAsExpression(current) ||
+        ts.isTypeAssertionExpression(current)) {
+        current = current.expression;
+    }
+    return current;
+}
+function isRequestSourceReceiver(expression) {
+    return ts.isIdentifier(expression) && REQUEST_SOURCE_NAMES.test(expression.text);
+}
+function isSearchParamsReceiver(expression) {
+    if (ts.isIdentifier(expression)) {
+        return SEARCH_PARAMS_NAME.test(expression.text);
+    }
+    return ts.isPropertyAccessExpression(expression) && SEARCH_PARAMS_NAME.test(expression.name.text);
+}
+function commandExpressionLabel(expression) {
+    if (ts.isIdentifier(expression)) {
+        return expression.text;
+    }
+    if (ts.isPropertyAccessExpression(expression)) {
+        return `${commandExpressionLabel(expression.expression)}.${expression.name.text}`;
+    }
+    return "source";
+}
+function literalText(node) {
+    return ts.isStringLiteralLike(node) || ts.isNumericLiteral(node) ? node.text : undefined;
+}
+function isCommandFunctionLike(node) {
+    return (ts.isArrowFunction(node) ||
+        ts.isConstructorDeclaration(node) ||
+        ts.isFunctionDeclaration(node) ||
+        ts.isFunctionExpression(node) ||
+        ts.isGetAccessorDeclaration(node) ||
+        ts.isMethodDeclaration(node) ||
+        ts.isSetAccessorDeclaration(node));
+}
+function collectFunctionBoundaryFacts(sourceFile, factsBuilder) {
+    visitCommandNodes(sourceFile, (node) => {
+        if (isCommandFunctionLike(node)) {
+            factsBuilder.functionBoundaryFacts.push({ node });
+        }
+    });
+}
+function commandFunctionBody(node) {
+    return node.body;
+}
+function visitCommandNodes(node, callback) {
+    callback(node);
+    ts.forEachChild(node, (child) => visitCommandNodes(child, callback));
+}
+//# sourceMappingURL=command-flow.js.map

package/dist/command-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-flow.js","sourceRoot":"","sources":["../src/command-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,mBAAmB,EAEnB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,EAIzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AA4BjG,MAAM,UAAU,gCAAgC,CAC9C,IAAuB,EACvB,kBAAuC,EACvC,sBAA2C;IAE3C,OAAO,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;AAC7H,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,UAAyB,EACzB,kBAAuC,EACvC,sBAA2C;IAE3C,OAAO,uBAAuB,CAAC,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,CAAC,WAAW,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAAyB,EACzB,kBAAuC,EACvC,sBAA2C,EAC3C,YAAkC,EAAE;IAEpC,MAAM,YAAY,GAAG,6BAA6B,EAAE,CAAC;IACrD,4BAA4B,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACvD,mBAAmB,CAAC,UAAU,EAAE,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAEjH,iBAAiB,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QACrC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,IAAI,EAAE,CAAC;YACT,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACvG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;QACrD,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,gBAAgB,EAAE,WAAW,CAAC,YAAY;QAC1C,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAuB;IACpD,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC,wBAAwB,CAAC,cAAc,CAAC,EAAE,CAAC;QACtH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;QACpH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC3C,IAAI,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1H,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AA0BD,SAAS,mBAAmB,CAC1B,SAAkB,EAClB,IAAa,EACb,kBAAuC,EACvC,sBAA2C,EAC3C,YAAqC,EACrC,SAA+B,EAC/B,QAA0B,sBAAsB,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC;IAEpF,IAAI,IAAI,KAAK,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO;IACT,CAAC;IAED,IAAI,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,KAAK,CAAC,SAAS,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxF,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrC,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;QAEhE,IAAI,gCAAgC,CAAC,IAAI,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,EAAE,CAAC;YACvF,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAChH,MAAM,UAAU,GAAG,gCAAgC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjE,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,eAAe,GAAG,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC9D,IAAI,eAAe,EAAE,CAAC;oBACpB,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC1C,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE;wBACtC,IAAI;wBACJ,KAAK,EAAE,SAAS;wBAChB,IAAI,EAAE,mBAAmB;wBACzB,UAAU,EAAE,eAAe;qBAC5B,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,2BAA2B,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5F,2BAA2B,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9B,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,CAClH,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAuB,EAAE,KAAuB;IAChF,MAAM,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACzC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,eAAe,CAAC,CAAC;IAC5D,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC;QAChG,CAAC,CAAC,UAAU,CAAC,IAAI;QACjB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAuB,EAAE,KAAuB;IAClF,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACjH,CAAC;AAED,SAAS,sBAAsB,CAC7B,YAAqC,EACrC,SAAkB,EAClB,SAA+B;IAE/B,OAAO;QACL,YAAY;QACZ,SAAS;QACT,SAAS;QACT,QAAQ,EAAE,IAAI,GAAG,EAAU;QAC3B,WAAW,EAAE,IAAI,GAAG,EAAU;QAC9B,WAAW,EAAE,IAAI,GAAG,EAAU;QAC9B,OAAO,EAAE,IAAI,GAAG,EAA4B;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAuB;IACvD,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,0BAA0B,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,iCAAiC,CAAC,IAAI,EAAE,KAAK,CAAC;QACpF,yBAAyB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,gCAAgC,CAAC,IAAI,EAAE,KAAK,CAAC;QAClF,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACzB,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,kBAAkB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACjC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,IAA4B,EAAE,KAAuB;IACrF,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/E,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5E,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC7D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9B,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,iBAAiB,CACf,SAAS,EACT,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EACtE,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAyB,EAAE,KAAuB;IACjF,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,2BAA2B,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAC1D,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACjE,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9D,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAkD,EAClD,MAAc,EACd,UAAyB,EACzB,KAAmC,EACnC,KAAuB;IAEvB,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,GAAG,mBAAmB,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACnH,OAAO;IACT,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC;QACjC,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,SAAS;QACtB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,KAAK,CAAC,UAAU;QACvB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAmC,EAAE,KAAuB;IACnG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,GAAG,mBAAmB,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,gCAAgC,CAAC,IAAuB,EAAE,KAAuB;IACxF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,iCAAiC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtE,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iCAAiC,CAAC,IAAa,EAAE,KAAuB;IAC/E,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAqB,EAAE,KAAK,CAAC,CAAC;IAC3E,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,IAAI,UAA8B,CAAC;IACnC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QAC9B,IAAI,UAAU,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,UAAU,GAAG,iCAAiC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB,EAAE,KAAuB;IACjF,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAEvD,IAAI,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,uBAAuB,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,uBAAuB,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7G,CAAC;IAED,IAAI,EAAE,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,uBAAuB,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,uBAAuB,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrH,CAAC;IAED,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,kBAAkB,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,sBAAsB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,uBAAuB,CAC9B,UAAyB,EACzB,KAAuB,EACvB,UAAmB;IAEnB,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,YAAY,CAAC,OAAO,EAAE,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAyB,EAAE,KAAuB;IAChF,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAEvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,kBAAkB,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,YAAY,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,kBAAkB,CAAC,UAAU,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,CAAC;IAED,IAAI,EAAE,CAAC,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,kBAAkB,IAAI,WAAW,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACjG,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,YAAY,GAAG,0BAA0B,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1E,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,kBAAkB,CAAC,UAAU,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC;IAED,IAAI,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5F,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QAClD,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9F,OAAO,kBAAkB,CACvB,UAAU,EACV,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,QAAQ,CAAC,IAAI,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,EAC9E,KAAK,CACN,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YACzB,IAAI,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,OAAO,kBAAkB,CACvB,UAAU,EACV,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,EACpE,KAAK,CACN,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa,EAAE,KAAuB,EAAE,KAAuB;IACzF,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE;QACvC,IAAI;QACJ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,SAAS;KACvB,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAiC;IACpE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QAC3G,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAgC,EAAE,YAAoB;IACxF,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,OAAO,CAAC,EAAE,CAAC;QACvG,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,eAAe,CAAC,KAAuB,EAAE,YAAoB;IACpE,OAAO;QACL,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,OAAO,YAAY,EAAE;QACxC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAuB,EAAE,SAAiB;IAC9D,OAAO;QACL,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,OAAO,SAAS,EAAE;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAAa,EACb,KAAuB,EACvB,MAAqC;IAErC,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,MAAM,EAAE,CAAC;QACX,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAChD,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,2BAA2B,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAa,EAAE,KAAuB,EAAE,MAAqC;IAChH,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,iBAAiB,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACpD,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAa,EACb,UAAkB,EAClB,MAAqC,EACrC,KAAuB;IAEvB,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAa;IAC5C,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB;IACxD,IAAI,OAAO,GAAG,UAAU,CAAC;IACzB,OACE,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC;QACrC,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAC7B,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC/B,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC;QAC1B,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,EACrC,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB;IACxD,OAAO,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAyB;IACvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAyB;IACvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,UAAU,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,OAAO,GAAG,sBAAsB,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACpF,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAAmB;IACtC,OAAO,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAa;IAC1C,OAAO,CACL,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;QACxB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;QACjC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;QAC9B,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;QAC7B,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;QACjC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAC5B,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAyB,EAAE,YAAqC;IACpG,iBAAiB,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QACrC,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,YAAY,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAyB;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa,EAAE,QAAiC;IACzE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACf,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACvE,CAAC"}