@panguard-ai/atr 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (129) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +299 -0
  3. package/dist/cli.d.ts +12 -0
  4. package/dist/cli.d.ts.map +1 -0
  5. package/dist/cli.js +720 -0
  6. package/dist/cli.js.map +1 -0
  7. package/dist/coverage-analyzer.d.ts +43 -0
  8. package/dist/coverage-analyzer.d.ts.map +1 -0
  9. package/dist/coverage-analyzer.js +329 -0
  10. package/dist/coverage-analyzer.js.map +1 -0
  11. package/dist/engine.d.ts +127 -0
  12. package/dist/engine.d.ts.map +1 -0
  13. package/dist/engine.js +636 -0
  14. package/dist/engine.js.map +1 -0
  15. package/dist/index.d.ts +26 -0
  16. package/dist/index.d.ts.map +1 -0
  17. package/dist/index.js +18 -0
  18. package/dist/index.js.map +1 -0
  19. package/dist/loader.d.ts +21 -0
  20. package/dist/loader.d.ts.map +1 -0
  21. package/dist/loader.js +124 -0
  22. package/dist/loader.js.map +1 -0
  23. package/dist/mcp-server.d.ts +13 -0
  24. package/dist/mcp-server.d.ts.map +1 -0
  25. package/dist/mcp-server.js +220 -0
  26. package/dist/mcp-server.js.map +1 -0
  27. package/dist/mcp-tools/coverage-gaps.d.ts +13 -0
  28. package/dist/mcp-tools/coverage-gaps.d.ts.map +1 -0
  29. package/dist/mcp-tools/coverage-gaps.js +55 -0
  30. package/dist/mcp-tools/coverage-gaps.js.map +1 -0
  31. package/dist/mcp-tools/list-rules.d.ts +17 -0
  32. package/dist/mcp-tools/list-rules.d.ts.map +1 -0
  33. package/dist/mcp-tools/list-rules.js +45 -0
  34. package/dist/mcp-tools/list-rules.js.map +1 -0
  35. package/dist/mcp-tools/scan.d.ts +18 -0
  36. package/dist/mcp-tools/scan.d.ts.map +1 -0
  37. package/dist/mcp-tools/scan.js +75 -0
  38. package/dist/mcp-tools/scan.js.map +1 -0
  39. package/dist/mcp-tools/submit-proposal.d.ts +12 -0
  40. package/dist/mcp-tools/submit-proposal.d.ts.map +1 -0
  41. package/dist/mcp-tools/submit-proposal.js +95 -0
  42. package/dist/mcp-tools/submit-proposal.js.map +1 -0
  43. package/dist/mcp-tools/threat-summary.d.ts +12 -0
  44. package/dist/mcp-tools/threat-summary.d.ts.map +1 -0
  45. package/dist/mcp-tools/threat-summary.js +74 -0
  46. package/dist/mcp-tools/threat-summary.js.map +1 -0
  47. package/dist/mcp-tools/validate.d.ts +15 -0
  48. package/dist/mcp-tools/validate.d.ts.map +1 -0
  49. package/dist/mcp-tools/validate.js +45 -0
  50. package/dist/mcp-tools/validate.js.map +1 -0
  51. package/dist/modules/index.d.ts +144 -0
  52. package/dist/modules/index.d.ts.map +1 -0
  53. package/dist/modules/index.js +82 -0
  54. package/dist/modules/index.js.map +1 -0
  55. package/dist/modules/semantic.d.ts +105 -0
  56. package/dist/modules/semantic.d.ts.map +1 -0
  57. package/dist/modules/semantic.js +283 -0
  58. package/dist/modules/semantic.js.map +1 -0
  59. package/dist/modules/session.d.ts +70 -0
  60. package/dist/modules/session.d.ts.map +1 -0
  61. package/dist/modules/session.js +128 -0
  62. package/dist/modules/session.js.map +1 -0
  63. package/dist/rule-scaffolder.d.ts +39 -0
  64. package/dist/rule-scaffolder.d.ts.map +1 -0
  65. package/dist/rule-scaffolder.js +173 -0
  66. package/dist/rule-scaffolder.js.map +1 -0
  67. package/dist/session-tracker.d.ts +56 -0
  68. package/dist/session-tracker.d.ts.map +1 -0
  69. package/dist/session-tracker.js +175 -0
  70. package/dist/session-tracker.js.map +1 -0
  71. package/dist/skill-fingerprint.d.ts +96 -0
  72. package/dist/skill-fingerprint.d.ts.map +1 -0
  73. package/dist/skill-fingerprint.js +337 -0
  74. package/dist/skill-fingerprint.js.map +1 -0
  75. package/dist/types.d.ts +129 -0
  76. package/dist/types.d.ts.map +1 -0
  77. package/dist/types.js +6 -0
  78. package/dist/types.js.map +1 -0
  79. package/package.json +75 -0
  80. package/rules/agent-manipulation/ATR-2026-030-cross-agent-attack.yaml +175 -0
  81. package/rules/agent-manipulation/ATR-2026-032-goal-hijacking.yaml +135 -0
  82. package/rules/agent-manipulation/ATR-2026-074-cross-agent-privilege-escalation.yaml +115 -0
  83. package/rules/agent-manipulation/ATR-2026-076-inter-agent-message-spoofing.yaml +165 -0
  84. package/rules/agent-manipulation/ATR-2026-077-human-trust-exploitation.yaml +144 -0
  85. package/rules/context-exfiltration/ATR-2026-020-system-prompt-leak.yaml +175 -0
  86. package/rules/context-exfiltration/ATR-2026-021-api-key-exposure.yaml +176 -0
  87. package/rules/context-exfiltration/ATR-2026-075-agent-memory-manipulation.yaml +115 -0
  88. package/rules/data-poisoning/ATR-2026-070-data-poisoning.yaml +160 -0
  89. package/rules/excessive-autonomy/ATR-2026-050-runaway-agent-loop.yaml +134 -0
  90. package/rules/excessive-autonomy/ATR-2026-051-resource-exhaustion.yaml +137 -0
  91. package/rules/excessive-autonomy/ATR-2026-052-cascading-failure.yaml +153 -0
  92. package/rules/model-security/ATR-2026-072-model-behavior-extraction.yaml +115 -0
  93. package/rules/model-security/ATR-2026-073-malicious-finetuning-data.yaml +108 -0
  94. package/rules/privilege-escalation/ATR-2026-040-privilege-escalation.yaml +175 -0
  95. package/rules/privilege-escalation/ATR-2026-041-scope-creep.yaml +124 -0
  96. package/rules/prompt-injection/ATR-2026-001-direct-prompt-injection.yaml +265 -0
  97. package/rules/prompt-injection/ATR-2026-002-indirect-prompt-injection.yaml +214 -0
  98. package/rules/prompt-injection/ATR-2026-003-jailbreak-attempt.yaml +250 -0
  99. package/rules/prompt-injection/ATR-2026-004-system-prompt-override.yaml +204 -0
  100. package/rules/prompt-injection/ATR-2026-005-multi-turn-injection.yaml +181 -0
  101. package/rules/prompt-injection/ATR-PRED-2026-001.yaml +61 -0
  102. package/rules/prompt-injection/ATR-PRED-2026-002.yaml +58 -0
  103. package/rules/prompt-injection/ATR-PRED-2026-003.yaml +61 -0
  104. package/rules/prompt-injection/ATR-PRED-2026-005.yaml +55 -0
  105. package/rules/prompt-injection/ATR-PRED-2026-006.yaml +51 -0
  106. package/rules/prompt-injection/ATR-PRED-2026-007.yaml +57 -0
  107. package/rules/prompt-injection/ATR-PRED-2026-008.yaml +57 -0
  108. package/rules/prompt-injection/ATR-PRED-2026-009.yaml +51 -0
  109. package/rules/prompt-injection/ATR-PRED-2026-010.yaml +57 -0
  110. package/rules/prompt-injection/ATR-PRED-2026-011.yaml +53 -0
  111. package/rules/prompt-injection/ATR-PRED-2026-012.yaml +57 -0
  112. package/rules/prompt-injection/ATR-PRED-2026-023.yaml +56 -0
  113. package/rules/prompt-injection/ATR-PRED-2026-025.yaml +68 -0
  114. package/rules/prompt-injection/ATR-PRED-2026-026.yaml +66 -0
  115. package/rules/prompt-injection/ATR-PRED-2026-027.yaml +62 -0
  116. package/rules/skill-compromise/ATR-2026-060-skill-impersonation.yaml +153 -0
  117. package/rules/skill-compromise/ATR-2026-061-description-behavior-mismatch.yaml +98 -0
  118. package/rules/skill-compromise/ATR-2026-062-hidden-capability.yaml +96 -0
  119. package/rules/skill-compromise/ATR-2026-063-skill-chain-attack.yaml +96 -0
  120. package/rules/skill-compromise/ATR-2026-064-over-permissioned-skill.yaml +115 -0
  121. package/rules/skill-compromise/ATR-2026-065-skill-update-attack.yaml +93 -0
  122. package/rules/skill-compromise/ATR-2026-066-parameter-injection.yaml +106 -0
  123. package/rules/tool-poisoning/ATR-2026-010-mcp-malicious-response.yaml +237 -0
  124. package/rules/tool-poisoning/ATR-2026-011-tool-output-injection.yaml +185 -0
  125. package/rules/tool-poisoning/ATR-2026-012-unauthorized-tool-call.yaml +190 -0
  126. package/rules/tool-poisoning/ATR-2026-013-tool-ssrf.yaml +208 -0
  127. package/rules/tool-poisoning/ATR-PRED-2026-004.yaml +54 -0
  128. package/rules/tool-poisoning/ATR-PRED-2026-024.yaml +68 -0
  129. package/spec/atr-schema.yaml +375 -0
package/dist/engine.js ADDED
@@ -0,0 +1,636 @@
1
+ /**
2
+ * ATR Engine - Evaluates agent events against ATR rules
3
+ *
4
+ * Core detection engine that:
5
+ * 1. Loads ATR YAML rules from disk
6
+ * 2. Evaluates agent events (LLM I/O, tool calls, behaviors) against rules
7
+ * 3. Returns matched rules with confidence scores
8
+ * 4. Supports two condition formats:
9
+ * - Array format: conditions is an array of {field, operator, value} objects
10
+ * - Named format: conditions is an object map of named condition blocks
11
+ *
12
+ * @module agent-threat-rules/engine
13
+ */
14
+ import { loadRulesFromDirectory, loadRuleFile } from './loader.js';
15
+ /** Map agent event types to ATR source types */
16
+ const EVENT_TYPE_TO_SOURCE = {
17
+ llm_input: 'llm_io',
18
+ llm_output: 'llm_io',
19
+ tool_call: 'tool_call',
20
+ tool_response: 'mcp_exchange',
21
+ agent_behavior: 'agent_behavior',
22
+ multi_agent_message: 'multi_agent_comm',
23
+ };
24
+ /** Map agent event types to default field names */
25
+ const EVENT_TYPE_TO_FIELD = {
26
+ llm_input: 'user_input',
27
+ llm_output: 'agent_output',
28
+ tool_call: 'tool_name',
29
+ tool_response: 'tool_response',
30
+ agent_behavior: 'metric',
31
+ multi_agent_message: 'agent_message',
32
+ };
33
+ export class ATREngine {
34
+ config;
35
+ rules = [];
36
+ compiledPatterns = new Map();
37
+ constructor(config = {}) {
38
+ this.config = config;
39
+ }
40
+ /**
41
+ * Load rules from configured directory and/or pre-loaded rules.
42
+ */
43
+ async loadRules() {
44
+ this.rules = [];
45
+ this.compiledPatterns.clear();
46
+ if (this.config.rules) {
47
+ this.rules.push(...this.config.rules);
48
+ }
49
+ if (this.config.rulesDir) {
50
+ try {
51
+ const fileRules = loadRulesFromDirectory(this.config.rulesDir);
52
+ this.rules.push(...fileRules);
53
+ }
54
+ catch {
55
+ // Directory may not exist yet
56
+ }
57
+ }
58
+ // Pre-compile regex patterns for performance
59
+ for (const rule of this.rules) {
60
+ this.compilePatterns(rule);
61
+ }
62
+ return this.rules.length;
63
+ }
64
+ /**
65
+ * Load a single rule file and add it to the engine.
66
+ */
67
+ addRuleFile(filePath) {
68
+ const rule = loadRuleFile(filePath);
69
+ this.rules.push(rule);
70
+ this.compilePatterns(rule);
71
+ }
72
+ /**
73
+ * Add a pre-parsed rule to the engine.
74
+ */
75
+ addRule(rule) {
76
+ this.rules.push(rule);
77
+ this.compilePatterns(rule);
78
+ }
79
+ /**
80
+ * Evaluate an agent event against all loaded ATR rules.
81
+ * Returns all matching rules with details.
82
+ */
83
+ evaluate(event) {
84
+ const matches = [];
85
+ const eventSourceType = EVENT_TYPE_TO_SOURCE[event.type];
86
+ const allMatchedPatterns = [];
87
+ for (const rule of this.rules) {
88
+ // Skip deprecated and draft rules
89
+ if (rule.status === 'deprecated' || rule.status === 'draft')
90
+ continue;
91
+ // Source type filtering: skip rules that don't apply to this event type
92
+ if (eventSourceType && rule.agent_source.type !== eventSourceType) {
93
+ // Allow mcp_exchange rules to also match tool_call events
94
+ if (!(rule.agent_source.type === 'mcp_exchange' && eventSourceType === 'tool_call')) {
95
+ continue;
96
+ }
97
+ }
98
+ const matchResult = this.evaluateRule(rule, event);
99
+ if (matchResult) {
100
+ matches.push(matchResult);
101
+ allMatchedPatterns.push(...matchResult.matchedPatterns);
102
+ }
103
+ }
104
+ // Record the event in the session tracker if available
105
+ const sessionId = event.sessionId;
106
+ if (this.config.sessionTracker && sessionId) {
107
+ this.config.sessionTracker.recordEvent(sessionId, event, allMatchedPatterns);
108
+ }
109
+ // Sort by severity (critical first) then confidence
110
+ return matches.sort((a, b) => {
111
+ const severityOrder = { critical: 0, high: 1, medium: 2, low: 3, informational: 4 };
112
+ const aSev = severityOrder[a.rule.severity] ?? 4;
113
+ const bSev = severityOrder[b.rule.severity] ?? 4;
114
+ if (aSev !== bSev)
115
+ return aSev - bSev;
116
+ return b.confidence - a.confidence;
117
+ });
118
+ }
119
+ /**
120
+ * Evaluate a single rule against an event.
121
+ * Supports both array-format and named-map-format conditions.
122
+ */
123
+ evaluateRule(rule, event) {
124
+ const { detection } = rule;
125
+ const conditions = detection.conditions;
126
+ const allMatchedPatterns = [];
127
+ // Detect format: array or named map
128
+ if (Array.isArray(conditions)) {
129
+ return this.evaluateArrayConditions(rule, conditions, detection.condition, event, allMatchedPatterns);
130
+ }
131
+ return this.evaluateNamedConditions(rule, conditions, detection.condition, event, allMatchedPatterns);
132
+ }
133
+ /**
134
+ * Evaluate array-format conditions: [{field, operator, value}, ...]
135
+ * with condition: "any" | "all"
136
+ */
137
+ evaluateArrayConditions(rule, conditions, conditionExpr, event, allMatchedPatterns) {
138
+ const matchedConditionIndices = [];
139
+ const isAny = conditionExpr === 'any' || conditionExpr === 'or';
140
+ for (let i = 0; i < conditions.length; i++) {
141
+ const cond = conditions[i];
142
+ const result = this.evaluateArrayCondition(cond, event, rule.id, i, allMatchedPatterns);
143
+ if (result) {
144
+ matchedConditionIndices.push(i);
145
+ if (isAny)
146
+ break; // Short-circuit on first match for "any"
147
+ }
148
+ }
149
+ const matched = isAny
150
+ ? matchedConditionIndices.length > 0
151
+ : matchedConditionIndices.length === conditions.length;
152
+ if (!matched)
153
+ return null;
154
+ const baseConfidence = rule.tags.confidence === 'high' ? 0.9 : rule.tags.confidence === 'medium' ? 0.7 : 0.5;
155
+ const matchRatio = matchedConditionIndices.length / Math.max(conditions.length, 1);
156
+ const confidence = Math.min(baseConfidence + matchRatio * 0.1, 1.0);
157
+ return {
158
+ rule,
159
+ matchedConditions: matchedConditionIndices.map(String),
160
+ matchedPatterns: allMatchedPatterns,
161
+ confidence,
162
+ timestamp: new Date().toISOString(),
163
+ };
164
+ }
165
+ /**
166
+ * Evaluate a single array-format condition {field, operator, value}.
167
+ */
168
+ evaluateArrayCondition(cond, event, ruleId, index, matchedPatterns) {
169
+ const field = cond['field'];
170
+ const operator = cond['operator'];
171
+ const value = cond['value'];
172
+ if (!field || !operator || value === undefined)
173
+ return false;
174
+ const rawFieldValue = this.resolveField(field, event);
175
+ if (!rawFieldValue)
176
+ return false;
177
+ const fieldValue = normalizeUnicode(rawFieldValue);
178
+ switch (operator) {
179
+ case 'regex': {
180
+ // Try pre-compiled pattern first
181
+ const compiled = this.compiledPatterns.get(ruleId)?.get(String(index));
182
+ if (compiled && compiled.length > 0) {
183
+ // Test against both normalized and raw values so that patterns
184
+ // detecting zero-width/bidi characters can match before stripping
185
+ if (safeRegexTest(compiled[0], fieldValue) || safeRegexTest(compiled[0], rawFieldValue)) {
186
+ matchedPatterns.push(value);
187
+ return true;
188
+ }
189
+ return false;
190
+ }
191
+ // Fallback: compile on the fly
192
+ try {
193
+ const regex = new RegExp(normalizeRegex(value), 'i');
194
+ if (safeRegexTest(regex, fieldValue) || safeRegexTest(regex, rawFieldValue)) {
195
+ matchedPatterns.push(value);
196
+ return true;
197
+ }
198
+ }
199
+ catch {
200
+ // Invalid regex
201
+ }
202
+ return false;
203
+ }
204
+ case 'contains': {
205
+ if (fieldValue.toLowerCase().includes(value.toLowerCase())) {
206
+ matchedPatterns.push(value);
207
+ return true;
208
+ }
209
+ return false;
210
+ }
211
+ case 'exact': {
212
+ if (fieldValue === value) {
213
+ matchedPatterns.push(value);
214
+ return true;
215
+ }
216
+ return false;
217
+ }
218
+ case 'starts_with': {
219
+ if (fieldValue.toLowerCase().startsWith(value.toLowerCase())) {
220
+ matchedPatterns.push(value);
221
+ return true;
222
+ }
223
+ return false;
224
+ }
225
+ default:
226
+ return false;
227
+ }
228
+ }
229
+ /**
230
+ * Evaluate named-map-format conditions: {name: {field, patterns, match_type}, ...}
231
+ * with condition: "name1 AND name2" | "name1 OR name2" | "name1"
232
+ */
233
+ evaluateNamedConditions(rule, conditions, conditionExpr, event, allMatchedPatterns) {
234
+ const conditionResults = new Map();
235
+ const matchedConditionNames = [];
236
+ for (const [condName, condDef] of Object.entries(conditions)) {
237
+ const result = this.evaluateNamedCondition(condName, condDef, event, rule, allMatchedPatterns);
238
+ conditionResults.set(condName, result);
239
+ if (result) {
240
+ matchedConditionNames.push(condName);
241
+ }
242
+ }
243
+ // Evaluate the boolean expression
244
+ const finalResult = this.evaluateExpression(conditionExpr, conditionResults);
245
+ if (!finalResult)
246
+ return null;
247
+ const baseConfidence = rule.tags.confidence === 'high' ? 0.9 : rule.tags.confidence === 'medium' ? 0.7 : 0.5;
248
+ const matchRatio = matchedConditionNames.length / Math.max(Object.keys(conditions).length, 1);
249
+ const confidence = Math.min(baseConfidence + matchRatio * 0.1, 1.0);
250
+ return {
251
+ rule,
252
+ matchedConditions: matchedConditionNames,
253
+ matchedPatterns: allMatchedPatterns,
254
+ confidence,
255
+ timestamp: new Date().toISOString(),
256
+ };
257
+ }
258
+ /**
259
+ * Evaluate a single named condition against an event.
260
+ */
261
+ evaluateNamedCondition(condName, condDef, event, rule, matchedPatterns) {
262
+ const cond = condDef;
263
+ // Pattern matching condition (named format with patterns array)
264
+ if (cond['patterns'] && cond['field']) {
265
+ return this.evaluatePatternCondition(cond, event, rule.id, condName, matchedPatterns);
266
+ }
267
+ // Behavioral condition
268
+ if (cond['metric'] && cond['operator'] && cond['threshold'] !== undefined) {
269
+ return this.evaluateBehavioralCondition(cond, event);
270
+ }
271
+ // Sequence condition
272
+ if (cond['steps'] && Array.isArray(cond['steps'])) {
273
+ return this.evaluateSequenceCondition(cond, event);
274
+ }
275
+ return false;
276
+ }
277
+ /**
278
+ * Evaluate a pattern matching condition (named format with patterns array).
279
+ */
280
+ evaluatePatternCondition(cond, event, ruleId, condName, matchedPatterns) {
281
+ const rawFieldValue = this.resolveField(cond.field, event);
282
+ if (!rawFieldValue)
283
+ return false;
284
+ const fieldValue = normalizeUnicode(rawFieldValue);
285
+ // Get pre-compiled patterns
286
+ const compiled = this.compiledPatterns.get(ruleId)?.get(condName);
287
+ if (compiled) {
288
+ for (let i = 0; i < compiled.length; i++) {
289
+ if (safeRegexTest(compiled[i], fieldValue)) {
290
+ matchedPatterns.push(cond.patterns[i] ?? 'unknown');
291
+ return true;
292
+ }
293
+ }
294
+ return false;
295
+ }
296
+ // Fallback: direct string matching
297
+ const checkValue = cond.case_sensitive ? fieldValue : fieldValue.toLowerCase();
298
+ for (const pattern of cond.patterns) {
299
+ const checkPattern = cond.case_sensitive ? pattern : pattern.toLowerCase();
300
+ switch (cond.match_type) {
301
+ case 'contains':
302
+ if (checkValue.includes(checkPattern)) {
303
+ matchedPatterns.push(pattern);
304
+ return true;
305
+ }
306
+ break;
307
+ case 'exact':
308
+ if (checkValue === checkPattern) {
309
+ matchedPatterns.push(pattern);
310
+ return true;
311
+ }
312
+ break;
313
+ case 'starts_with':
314
+ if (checkValue.startsWith(checkPattern)) {
315
+ matchedPatterns.push(pattern);
316
+ return true;
317
+ }
318
+ break;
319
+ case 'regex':
320
+ default: {
321
+ try {
322
+ const flags = cond.case_sensitive ? '' : 'i';
323
+ const regex = new RegExp(pattern, flags);
324
+ if (safeRegexTest(regex, fieldValue)) {
325
+ matchedPatterns.push(pattern);
326
+ return true;
327
+ }
328
+ }
329
+ catch {
330
+ // Invalid regex, skip
331
+ }
332
+ break;
333
+ }
334
+ }
335
+ }
336
+ return false;
337
+ }
338
+ /**
339
+ * Evaluate a behavioral threshold condition.
340
+ * When a session tracker is available and the event has a sessionId,
341
+ * supports session-derived metrics: call_frequency, pattern_frequency, event_count.
342
+ */
343
+ evaluateBehavioralCondition(cond, event) {
344
+ const metricValue = this.resolveMetricValue(cond, event);
345
+ if (metricValue === undefined)
346
+ return false;
347
+ switch (cond.operator) {
348
+ case 'gt': return metricValue > cond.threshold;
349
+ case 'lt': return metricValue < cond.threshold;
350
+ case 'eq': return metricValue === cond.threshold;
351
+ case 'gte': return metricValue >= cond.threshold;
352
+ case 'lte': return metricValue <= cond.threshold;
353
+ case 'deviation_from_baseline':
354
+ return Math.abs(metricValue) > cond.threshold;
355
+ default:
356
+ return false;
357
+ }
358
+ }
359
+ /**
360
+ * Resolve a metric value from event metrics or session tracker.
361
+ * Session-derived metrics use the format: "call_frequency:toolName" or "pattern_frequency:pattern".
362
+ */
363
+ resolveMetricValue(cond, event) {
364
+ // Check event-level metrics first
365
+ const directValue = event.metrics?.[cond.metric];
366
+ if (directValue !== undefined)
367
+ return directValue;
368
+ // Try session tracker for session-derived metrics
369
+ const tracker = this.config.sessionTracker;
370
+ const sessionId = event.sessionId;
371
+ if (!tracker || !sessionId)
372
+ return undefined;
373
+ const windowMs = this.parseWindowMs(cond.window);
374
+ if (cond.metric.startsWith('call_frequency:')) {
375
+ const toolName = cond.metric.slice('call_frequency:'.length);
376
+ return tracker.getCallFrequency(sessionId, toolName, windowMs);
377
+ }
378
+ if (cond.metric.startsWith('pattern_frequency:')) {
379
+ const pattern = cond.metric.slice('pattern_frequency:'.length);
380
+ return tracker.getPatternFrequency(sessionId, pattern, windowMs);
381
+ }
382
+ if (cond.metric === 'event_count') {
383
+ return tracker.getEventCount(sessionId, windowMs);
384
+ }
385
+ return undefined;
386
+ }
387
+ /**
388
+ * Parse a window string (e.g. "5m", "1h", "30s") to milliseconds.
389
+ * Defaults to 5 minutes if not specified or unparseable.
390
+ */
391
+ parseWindowMs(window) {
392
+ if (!window)
393
+ return 5 * 60 * 1000;
394
+ const match = window.match(/^(\d+)\s*(s|m|h)$/);
395
+ if (!match)
396
+ return 5 * 60 * 1000;
397
+ const value = parseInt(match[1], 10);
398
+ const unit = match[2];
399
+ switch (unit) {
400
+ case 's': return value * 1000;
401
+ case 'm': return value * 60 * 1000;
402
+ case 'h': return value * 60 * 60 * 1000;
403
+ default: return 5 * 60 * 1000;
404
+ }
405
+ }
406
+ /**
407
+ * Evaluate a sequence condition against the current event.
408
+ *
409
+ * Limitation (v0.1): This checks whether patterns from multiple steps
410
+ * co-occur in the current event's content. It does NOT track ordered
411
+ * execution across separate events or enforce time windows.
412
+ * Full session-aware sequence detection is planned for v0.2.
413
+ */
414
+ evaluateSequenceCondition(cond, event) {
415
+ const steps = cond['steps'];
416
+ if (!steps || steps.length === 0)
417
+ return false;
418
+ const content = normalizeUnicode(event.content);
419
+ let matchCount = 0;
420
+ for (const step of steps) {
421
+ const patterns = step['patterns'];
422
+ if (patterns) {
423
+ for (const pattern of patterns) {
424
+ try {
425
+ const regex = new RegExp(pattern, 'i');
426
+ if (safeRegexTest(regex, content)) {
427
+ matchCount++;
428
+ break;
429
+ }
430
+ }
431
+ catch {
432
+ // Invalid regex
433
+ }
434
+ }
435
+ }
436
+ }
437
+ return matchCount >= 2;
438
+ }
439
+ /**
440
+ * Resolve a field value from an agent event.
441
+ */
442
+ resolveField(fieldName, event) {
443
+ // Check explicit fields first
444
+ if (event.fields?.[fieldName]) {
445
+ return event.fields[fieldName];
446
+ }
447
+ // Map standard field names to event properties
448
+ const defaultField = EVENT_TYPE_TO_FIELD[event.type];
449
+ if (fieldName === defaultField || fieldName === 'content') {
450
+ return event.content;
451
+ }
452
+ // Common field aliases
453
+ switch (fieldName) {
454
+ case 'user_input':
455
+ return event.type === 'llm_input' ? event.content : event.fields?.['user_input'];
456
+ case 'agent_output':
457
+ return event.type === 'llm_output' ? event.content : event.fields?.['agent_output'];
458
+ case 'tool_response':
459
+ return event.type === 'tool_response' ? event.content : event.fields?.['tool_response'];
460
+ case 'tool_name':
461
+ return event.fields?.['tool_name'] ?? (event.type === 'tool_call' ? event.content : undefined);
462
+ case 'tool_args':
463
+ return event.fields?.['tool_args'];
464
+ case 'agent_message':
465
+ return event.type === 'multi_agent_message' ? event.content : event.fields?.['agent_message'];
466
+ default:
467
+ // Try metadata
468
+ return event.metadata?.[fieldName];
469
+ }
470
+ }
471
+ /**
472
+ * Evaluate a boolean expression string against condition results.
473
+ * Supports AND, OR, NOT operators.
474
+ */
475
+ evaluateExpression(expression, results) {
476
+ const expr = expression.trim();
477
+ // Simple single condition
478
+ if (results.has(expr)) {
479
+ return results.get(expr) ?? false;
480
+ }
481
+ // Handle NOT
482
+ if (expr.startsWith('NOT ') || expr.startsWith('not ')) {
483
+ const inner = expr.slice(4).trim();
484
+ return !this.evaluateExpression(inner, results);
485
+ }
486
+ // Handle OR (lower precedence — split first so AND binds tighter)
487
+ const orParts = this.splitByOperator(expr, 'OR');
488
+ if (orParts.length > 1) {
489
+ return orParts.some((part) => this.evaluateExpression(part, results));
490
+ }
491
+ // Handle AND (higher precedence — evaluated within each OR branch)
492
+ const andParts = this.splitByOperator(expr, 'AND');
493
+ if (andParts.length > 1) {
494
+ return andParts.every((part) => this.evaluateExpression(part, results));
495
+ }
496
+ // Handle parentheses
497
+ if (expr.startsWith('(') && expr.endsWith(')')) {
498
+ return this.evaluateExpression(expr.slice(1, -1), results);
499
+ }
500
+ // Default: treat as condition name
501
+ return results.get(expr) ?? false;
502
+ }
503
+ /**
504
+ * Split expression by operator, respecting parentheses.
505
+ */
506
+ splitByOperator(expr, operator) {
507
+ const parts = [];
508
+ let depth = 0;
509
+ let current = '';
510
+ const op = ` ${operator} `;
511
+ const opLower = ` ${operator.toLowerCase()} `;
512
+ for (let i = 0; i < expr.length; i++) {
513
+ const char = expr[i];
514
+ if (char === '(')
515
+ depth++;
516
+ if (char === ')')
517
+ depth--;
518
+ if (depth === 0) {
519
+ const remaining = expr.slice(i);
520
+ if (remaining.startsWith(op) || remaining.startsWith(opLower)) {
521
+ parts.push(current.trim());
522
+ current = '';
523
+ i += op.length - 1;
524
+ continue;
525
+ }
526
+ }
527
+ current += char;
528
+ }
529
+ if (current.trim()) {
530
+ parts.push(current.trim());
531
+ }
532
+ return parts;
533
+ }
534
+ /**
535
+ * Pre-compile regex patterns for a rule (performance optimization).
536
+ * Supports both array-format and named-map-format conditions.
537
+ */
538
+ compilePatterns(rule) {
539
+ const ruleMap = new Map();
540
+ const conditions = rule.detection.conditions;
541
+ if (Array.isArray(conditions)) {
542
+ // Array format: compile each {operator: regex, value: "pattern"} entry
543
+ for (let i = 0; i < conditions.length; i++) {
544
+ const cond = conditions[i];
545
+ if (cond['operator'] === 'regex' && typeof cond['value'] === 'string') {
546
+ try {
547
+ ruleMap.set(String(i), [new RegExp(normalizeRegex(cond['value']), 'i')]);
548
+ }
549
+ catch {
550
+ // Invalid regex, skip
551
+ }
552
+ }
553
+ }
554
+ }
555
+ else {
556
+ // Named format: compile patterns arrays
557
+ for (const [condName, condDef] of Object.entries(conditions)) {
558
+ const cond = condDef;
559
+ if (cond['patterns'] && Array.isArray(cond['patterns'])) {
560
+ const matchType = cond['match_type'] ?? 'regex';
561
+ const caseSensitive = cond['case_sensitive'] ?? false;
562
+ const flags = caseSensitive ? '' : 'i';
563
+ const compiled = [];
564
+ for (const pattern of cond['patterns']) {
565
+ try {
566
+ if (matchType === 'regex') {
567
+ compiled.push(new RegExp(normalizeRegex(pattern), flags));
568
+ }
569
+ else if (matchType === 'contains') {
570
+ compiled.push(new RegExp(escapeRegex(pattern), flags));
571
+ }
572
+ else if (matchType === 'exact') {
573
+ compiled.push(new RegExp(`^${escapeRegex(pattern)}$`, flags));
574
+ }
575
+ else if (matchType === 'starts_with') {
576
+ compiled.push(new RegExp(`^${escapeRegex(pattern)}`, flags));
577
+ }
578
+ }
579
+ catch {
580
+ // Invalid regex pattern, skip
581
+ }
582
+ }
583
+ ruleMap.set(condName, compiled);
584
+ }
585
+ }
586
+ }
587
+ this.compiledPatterns.set(rule.id, ruleMap);
588
+ }
589
+ /** Get loaded rule count */
590
+ getRuleCount() {
591
+ return this.rules.length;
592
+ }
593
+ /** Get all loaded rules */
594
+ getRules() {
595
+ return this.rules;
596
+ }
597
+ /** Get a rule by ID */
598
+ getRuleById(id) {
599
+ return this.rules.find((r) => r.id === id);
600
+ }
601
+ /** Get rules by category */
602
+ getRulesByCategory(category) {
603
+ return this.rules.filter((r) => r.tags.category === category);
604
+ }
605
+ }
606
+ function escapeRegex(str) {
607
+ return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
608
+ }
609
+ /**
610
+ * Strip inline flags like (?i) from regex patterns.
611
+ * JavaScript RegExp uses flags as a constructor parameter, not inline.
612
+ */
613
+ function normalizeRegex(pattern) {
614
+ return pattern.replace(/^\(\?[imsx]+\)/, '');
615
+ }
616
+ /**
617
+ * Normalize Unicode text to NFC form and strip zero-width characters.
618
+ * This prevents evasion via combining characters, zero-width joiners, etc.
619
+ */
620
+ function normalizeUnicode(text) {
621
+ return text
622
+ .normalize('NFC')
623
+ .replace(/[\u200B\u200C\u200D\uFEFF\u2060\u180E\u200E\u200F\u202A-\u202E\u2066-\u2069]/g, '');
624
+ }
625
+ /** Maximum input length for regex evaluation to mitigate ReDoS */
626
+ const MAX_EVAL_LENGTH = 100_000;
627
+ /**
628
+ * Safely test a regex pattern against input with length limits.
629
+ * Returns false if input exceeds MAX_EVAL_LENGTH to prevent ReDoS.
630
+ */
631
+ function safeRegexTest(regex, input) {
632
+ if (input.length > MAX_EVAL_LENGTH)
633
+ return false;
634
+ return regex.test(input);
635
+ }
636
+ //# sourceMappingURL=engine.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"engine.js","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AASH,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGnE,gDAAgD;AAChD,MAAM,oBAAoB,GAA2B;IACnD,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,cAAc;IAC7B,cAAc,EAAE,gBAAgB;IAChC,mBAAmB,EAAE,kBAAkB;CACxC,CAAC;AAEF,mDAAmD;AACnD,MAAM,mBAAmB,GAA2B;IAClD,SAAS,EAAE,YAAY;IACvB,UAAU,EAAE,cAAc;IAC1B,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,QAAQ;IACxB,mBAAmB,EAAE,eAAe;CACrC,CAAC;AAaF,MAAM,OAAO,SAAS;IAIS;IAHrB,KAAK,GAAc,EAAE,CAAC;IACb,gBAAgB,GAAG,IAAI,GAAG,EAAiC,CAAC;IAE7E,YAA6B,SAA0B,EAAE;QAA5B,WAAM,GAAN,MAAM,CAAsB;IAAG,CAAC;IAE7D;;OAEG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAE9B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC/D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAgB;QAC1B,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAa;QACnB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,KAAiB;QACxB,MAAM,OAAO,GAAe,EAAE,CAAC;QAC/B,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,kBAAkB,GAAa,EAAE,CAAC;QAExC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,kCAAkC;YAClC,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;gBAAE,SAAS;YAEtE,wEAAwE;YACxE,IAAI,eAAe,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBAClE,0DAA0D;gBAC1D,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,cAAc,IAAI,eAAe,KAAK,WAAW,CAAC,EAAE,CAAC;oBACpF,SAAS;gBACX,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnD,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC1B,kBAAkB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,SAAS,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAC/E,CAAC;QAED,oDAAoD;QACpD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC3B,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,GAAG,IAAI,CAAC;YACtC,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,IAAa,EAAE,KAAiB;QACnD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAC3B,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;QACxC,MAAM,kBAAkB,GAAa,EAAE,CAAC;QAExC,oCAAoC;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;QACxG,CAAC;QAED,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACxG,CAAC;IAED;;;OAGG;IACK,uBAAuB,CAC7B,IAAa,EACb,UAAqB,EACrB,aAAqB,EACrB,KAAiB,EACjB,kBAA4B;QAE5B,MAAM,uBAAuB,GAAa,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,aAAa,KAAK,KAAK,IAAI,aAAa,KAAK,IAAI,CAAC;QAEhE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAA4B,CAAC;YACtD,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAExF,IAAI,MAAM,EAAE,CAAC;gBACX,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,KAAK;oBAAE,MAAM,CAAC,yCAAyC;YAC7D,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,KAAK;YACnB,CAAC,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC;YACpC,CAAC,CAAC,uBAAuB,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,CAAC;QAEzD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7G,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,UAAU,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QAEpE,OAAO;YACL,IAAI;YACJ,iBAAiB,EAAE,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC;YACtD,eAAe,EAAE,kBAAkB;YACnC,UAAU;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAC5B,IAA6B,EAC7B,KAAiB,EACjB,MAAc,EACd,KAAa,EACb,eAAyB;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAuB,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAuB,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAuB,CAAC;QAElD,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAE7D,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QACjC,MAAM,UAAU,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAEnD,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,iCAAiC;gBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvE,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpC,+DAA+D;oBAC/D,kEAAkE;oBAClE,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,UAAU,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,aAAa,CAAC,EAAE,CAAC;wBAC1F,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBAC5B,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,+BAA+B;gBAC/B,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;oBACrD,IAAI,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;wBAC5E,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBAC5B,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,gBAAgB;gBAClB,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAC3D,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC5B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;oBACzB,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC5B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAC7D,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC5B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,uBAAuB,CAC7B,IAAa,EACb,UAAmC,EACnC,aAAqB,EACrB,KAAiB,EACjB,kBAA4B;QAE5B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmB,CAAC;QACpD,MAAM,qBAAqB,GAAa,EAAE,CAAC;QAE3C,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;YAC/F,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,MAAM,EAAE,CAAC;gBACX,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QAC7E,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAE9B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7G,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,UAAU,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QAEpE,OAAO;YACL,IAAI;YACJ,iBAAiB,EAAE,qBAAqB;YACxC,eAAe,EAAE,kBAAkB;YACnC,UAAU;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAC5B,QAAgB,EAChB,OAAgB,EAChB,KAAiB,EACjB,IAAa,EACb,eAAyB;QAEzB,MAAM,IAAI,GAAG,OAAkC,CAAC;QAEhD,gEAAgE;QAChE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,wBAAwB,CAClC,IAAsC,EACtC,KAAK,EACL,IAAI,CAAC,EAAE,EACP,QAAQ,EACR,eAAe,CAChB,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC,2BAA2B,CAAC,IAAyC,EAAE,KAAK,CAAC,CAAC;QAC5F,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,wBAAwB,CAC9B,IAAyB,EACzB,KAAiB,EACjB,MAAc,EACd,QAAgB,EAChB,eAAyB;QAEzB,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QACjC,MAAM,UAAU,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAEnD,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAElE,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,UAAU,CAAC,EAAE,CAAC;oBAC5C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;oBACpD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,mCAAmC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAE/E,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAE3E,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;gBACxB,KAAK,UAAU;oBACb,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;wBACtC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC9B,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,MAAM;gBACR,KAAK,OAAO;oBACV,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;wBAChC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC9B,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,MAAM;gBACR,KAAK,aAAa;oBAChB,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;wBACxC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC9B,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,MAAM;gBACR,KAAK,OAAO,CAAC;gBACb,OAAO,CAAC,CAAC,CAAC;oBACR,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;wBAC7C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;wBACzC,IAAI,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;4BACrC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;4BAC9B,OAAO,IAAI,CAAC;wBACd,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,sBAAsB;oBACxB,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACK,2BAA2B,CACjC,IAA4B,EAC5B,KAAiB;QAEjB,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAE5C,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,IAAI,CAAC,CAAC,OAAO,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;YAC/C,KAAK,IAAI,CAAC,CAAC,OAAO,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;YAC/C,KAAK,IAAI,CAAC,CAAC,OAAO,WAAW,KAAK,IAAI,CAAC,SAAS,CAAC;YACjD,KAAK,KAAK,CAAC,CAAC,OAAO,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC;YACjD,KAAK,KAAK,CAAC,CAAC,OAAO,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC;YACjD,KAAK,yBAAyB;gBAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YAChD;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,kBAAkB,CACxB,IAA4B,EAC5B,KAAiB;QAEjB,kCAAkC;QAClC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC;QAElD,kDAAkD;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QAE7C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC7D,OAAO,OAAO,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC/D,OAAO,OAAO,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,MAA0B;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAElC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAEjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAEvB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC;YAC9B,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC;YACnC,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YACxC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,yBAAyB,CAC/B,IAA6B,EAC7B,KAAiB;QAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAmC,CAAC;QAC9D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE/C,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAyB,CAAC;YAC1D,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;wBACvC,IAAI,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;4BAClC,UAAU,EAAE,CAAC;4BACb,MAAM;wBACR,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,gBAAgB;oBAClB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,UAAU,IAAI,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,SAAiB,EAAE,KAAiB;QACvD,8BAA8B;QAC9B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAED,+CAA+C;QAC/C,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,uBAAuB;QACvB,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,YAAY;gBACf,OAAO,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;YACnF,KAAK,cAAc;gBACjB,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,cAAc,CAAC,CAAC;YACtF,KAAK,eAAe;gBAClB,OAAO,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC;YAC1F,KAAK,WAAW;gBACd,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACjG,KAAK,WAAW;gBACd,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC;YACrC,KAAK,eAAe;gBAClB,OAAO,KAAK,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC;YAChG;gBACE,eAAe;gBACf,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAuB,CAAC;QAC7D,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,kBAAkB,CACxB,UAAkB,EAClB,OAA6B;QAE7B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAE/B,0BAA0B;QAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;QACpC,CAAC;QAED,aAAa;QACb,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAED,kEAAkE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,mEAAmE;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7D,CAAC;QAED,mCAAmC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAY,EAAE,QAAgB;QACpD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,MAAM,EAAE,GAAG,IAAI,QAAQ,GAAG,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC;QAE9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;YACtB,IAAI,IAAI,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;YAC1B,IAAI,IAAI,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;YAE1B,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAChC,IAAI,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC3B,OAAO,GAAG,EAAE,CAAC;oBACb,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;oBACnB,SAAS;gBACX,CAAC;YACH,CAAC;YAED,OAAO,IAAI,IAAI,CAAC;QAClB,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,IAAa;QACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;QAE7C,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,uEAAuE;YACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAuC,CAAC;gBACjE,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACtE,IAAI,CAAC;wBACH,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAW,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;oBACrF,CAAC;oBAAC,MAAM,CAAC;wBACP,sBAAsB;oBACxB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,wCAAwC;YACxC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,GAAG,OAA6C,CAAC;gBAC3D,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;oBACxD,MAAM,SAAS,GAAI,IAAI,CAAC,YAAY,CAAY,IAAI,OAAO,CAAC;oBAC5D,MAAM,aAAa,GAAI,IAAI,CAAC,gBAAgB,CAAa,IAAI,KAAK,CAAC;oBACnE,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;oBAEvC,MAAM,QAAQ,GAAa,EAAE,CAAC;oBAC9B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,UAAU,CAAa,EAAE,CAAC;wBACnD,IAAI,CAAC;4BACH,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;gCAC1B,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;4BAC5D,CAAC;iCAAM,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;gCACpC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;4BACzD,CAAC;iCAAM,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;gCACjC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;4BAChE,CAAC;iCAAM,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;gCACvC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;4BAC/D,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,8BAA8B;wBAChC,CAAC;oBACH,CAAC;oBAED,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,4BAA4B;IAC5B,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,2BAA2B;IAC3B,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,uBAAuB;IACvB,WAAW,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,4BAA4B;IAC5B,kBAAkB,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAChE,CAAC;CACF;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI;SACR,SAAS,CAAC,KAAK,CAAC;SAChB,OAAO,CAAC,+EAA+E,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,kEAAkE;AAClE,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa;IACjD,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}