@prosopo/provider 4.15.14 → 4.15.16

package/dist/tasks/detection/getBotScore.js

@@ -1,45 +1,39 @@
 import m_dwIw from "./decodePayload.js";
-const getBotScore = async (payload, headHash, privateKeyString) => {
-  const result = await m_dwIw(
-    payload,
-    headHash,
-    privateKeyString
-  );
-  const baseBotScore = result.score;
-  const timestamp = result.timestamp;
-  const userId = result.userId;
-  const userAgent = result.userAgent;
-  const isWebView = result.isWebView ?? false;
-  const isIframe = result.isIframe ?? false;
-  const decryptedHeadHash = result.decryptedHeadHash;
-  const triggeredDetectors = result.triggeredDetectors;
-  const shadowDomPenalty = result.shadowDomPenalty;
-  const entropyMathRandomFingerprint = result.entropyMathRandomFingerprint;
-  const entropyCryptoFingerprint = result.entropyCryptoFingerprint;
-  const entropyWallClockOffsetMs = result.entropyWallClockOffsetMs;
-  const entropyMathRandomFirst = result.entropyMathRandomFirst;
-  if (baseBotScore === void 0 || Number.isNaN(baseBotScore)) {
-    return {
-      baseBotScore: 1,
-      timestamp: 0
-    };
-  }
-  return {
-    baseBotScore,
-    timestamp,
-    userId,
-    userAgent,
-    isWebView,
-    isIframe,
-    decryptedHeadHash,
-    triggeredDetectors,
-    shadowDomPenalty,
-    entropyMathRandomFingerprint,
-    entropyCryptoFingerprint,
-    entropyWallClockOffsetMs,
-    entropyMathRandomFirst
-  };
-};
-export {
-  getBotScore
+//#region src/tasks/detection/getBotScore.ts
+var getBotScore = async (payload, headHash, privateKeyString) => {
+	const result = await m_dwIw(payload, headHash, privateKeyString);
+	const baseBotScore = result.score;
+	const timestamp = result.timestamp;
+	const userId = result.userId;
+	const userAgent = result.userAgent;
+	const isWebView = result.isWebView ?? false;
+	const isIframe = result.isIframe ?? false;
+	const decryptedHeadHash = result.decryptedHeadHash;
+	const triggeredDetectors = result.triggeredDetectors;
+	const shadowDomPenalty = result.shadowDomPenalty;
+	const entropyMathRandomFingerprint = result.entropyMathRandomFingerprint;
+	const entropyCryptoFingerprint = result.entropyCryptoFingerprint;
+	const entropyWallClockOffsetMs = result.entropyWallClockOffsetMs;
+	const entropyMathRandomFirst = result.entropyMathRandomFirst;
+	if (baseBotScore === void 0 || Number.isNaN(baseBotScore)) return {
+		baseBotScore: 1,
+		timestamp: 0
+	};
+	return {
+		baseBotScore,
+		timestamp,
+		userId,
+		userAgent,
+		isWebView,
+		isIframe,
+		decryptedHeadHash,
+		triggeredDetectors,
+		shadowDomPenalty,
+		entropyMathRandomFingerprint,
+		entropyCryptoFingerprint,
+		entropyWallClockOffsetMs,
+		entropyMathRandomFirst
+	};
 };
+//#endregion
+export { getBotScore };

package/dist/tasks/dnsEvent/enrichDnsEvent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enrichDnsEvent.d.ts","sourceRoot":"","sources":["../../../src/tasks/dnsEvent/enrichDnsEvent.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EACX,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,OAAO,EACP,MAAM,gBAAgB,CAAC;AAIxB,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAEjC,eAAO,MAAM,cAAc,aAChB,OAAO,CAAC,UAAU,CAAC,GAAG,SAAS,iBAC1B,cAAc,cACjB,MAAM,KAChB,OAAO,CAAC,gBAAgB,GAAG,SAAS,CA8BtC,CAAC;AAEF,eAAO,MAAM,YAAY,SAClB,cAAc,GAAG,SAAS,KAC9B,MAAM,GAAG,SAAyD,CAAC;AAEtE,eAAO,MAAM,gCAAgC,aAClC,gBAAgB,GAAG,SAAS,KACpC,cAAc,EAMhB,CAAC;AA2BF,eAAO,MAAM,mBAAmB,aACrB,gBAAgB,GAAG,SAAS,gBACxB,cAAc,GAAG,SAAS,kBACxB,OAAO,CAAC,cAAc,CAAC,KACrC,MA+CF,CAAC"}
+{"version":3,"file":"enrichDnsEvent.d.ts","sourceRoot":"","sources":["../../../src/tasks/dnsEvent/enrichDnsEvent.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EACX,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,OAAO,EACP,MAAM,gBAAgB,CAAC;AAOxB,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAEjC,eAAO,MAAM,cAAc,aAChB,OAAO,CAAC,UAAU,CAAC,GAAG,SAAS,iBAC1B,cAAc,cACjB,MAAM,KAChB,OAAO,CAAC,gBAAgB,GAAG,SAAS,CA8BtC,CAAC;AAEF,eAAO,MAAM,YAAY,SAClB,cAAc,GAAG,SAAS,KAC9B,MAAM,GAAG,SAAyD,CAAC;AAEtE,eAAO,MAAM,gCAAgC,aAClC,gBAAgB,GAAG,SAAS,KACpC,cAAc,EAMhB,CAAC;AA2BF,eAAO,MAAM,mBAAmB,aACrB,gBAAgB,GAAG,SAAS,gBACxB,cAAc,GAAG,SAAS,kBACxB,OAAO,CAAC,cAAc,CAAC,KACrC,MAqDF,CAAC"}

package/dist/tasks/dnsEvent/enrichDnsEvent.js

@@ -1,78 +1,92 @@
+import { isDatacenterAllowlisted, isDatacenterDenylisted } from "../spam/checkTrafficFilter.js";
 import { trafficFilterAbuserScoreThresholdDefault } from "@prosopo/types";
-import { isDatacenterAllowlisted } from "../spam/checkTrafficFilter.js";
-const enrichDnsEvent = async (dnsEvent, ipInfoService, primaryIp) => {
-  if (!dnsEvent) {
-    return void 0;
-  }
-  const enriched = {
-    peerIp: dnsEvent.peerIp,
-    resolverIp: dnsEvent.resolverIp,
-    pathValid: dnsEvent.pathValid
-  };
-  const lookups = [];
-  const kinds = [];
-  if (dnsEvent.peerIp && dnsEvent.peerIp !== primaryIp) {
-    lookups.push(ipInfoService.lookup(dnsEvent.peerIp));
-    kinds.push("peer");
-  }
-  if (dnsEvent.resolverIp && dnsEvent.resolverIp !== primaryIp) {
-    lookups.push(ipInfoService.lookup(dnsEvent.resolverIp));
-    kinds.push("resolver");
-  }
-  if (lookups.length === 0) {
-    return enriched;
-  }
-  const results = await Promise.all(lookups);
-  kinds.forEach((k, i) => {
-    const info = results[i];
-    if (!info) return;
-    if (k === "peer") enriched.peerIpInfo = info;
-    else enriched.resolverIpInfo = info;
-  });
-  return enriched;
+//#region src/tasks/dnsEvent/enrichDnsEvent.ts
+var enrichDnsEvent = async (dnsEvent, ipInfoService, primaryIp) => {
+	if (!dnsEvent) return;
+	const enriched = {
+		peerIp: dnsEvent.peerIp,
+		resolverIp: dnsEvent.resolverIp,
+		pathValid: dnsEvent.pathValid
+	};
+	const lookups = [];
+	const kinds = [];
+	if (dnsEvent.peerIp && dnsEvent.peerIp !== primaryIp) {
+		lookups.push(ipInfoService.lookup(dnsEvent.peerIp));
+		kinds.push("peer");
+	}
+	if (dnsEvent.resolverIp && dnsEvent.resolverIp !== primaryIp) {
+		lookups.push(ipInfoService.lookup(dnsEvent.resolverIp));
+		kinds.push("resolver");
+	}
+	if (lookups.length === 0) return enriched;
+	const results = await Promise.all(lookups);
+	kinds.forEach((k, i) => {
+		const info = results[i];
+		if (!info) return;
+		if (k === "peer") enriched.peerIpInfo = info;
+		else enriched.resolverIpInfo = info;
+	});
+	return enriched;
 };
-const getIpInfoAsn = (info) => info?.isValid ? info.asnNumber : void 0;
-const extraIpInfosFromEnrichedDnsEvent = (enriched) => {
-  if (!enriched) return [];
-  const out = [];
-  if (enriched.peerIpInfo) out.push(enriched.peerIpInfo);
-  if (enriched.resolverIpInfo) out.push(enriched.resolverIpInfo);
-  return out;
+var getIpInfoAsn = (info) => info?.isValid ? info.asnNumber : void 0;
+var extraIpInfosFromEnrichedDnsEvent = (enriched) => {
+	if (!enriched) return [];
+	const out = [];
+	if (enriched.peerIpInfo) out.push(enriched.peerIpInfo);
+	if (enriched.resolverIpInfo) out.push(enriched.resolverIpInfo);
+	return out;
 };
-const computeDnsAsymmetry = (enriched, clientIpInfo, trafficFilter) => {
-  if (!enriched) return 0;
-  let score = 0;
-  if (enriched.pathValid === false) score += 0.3;
-  const countDc = (ip) => {
-    if (!ip?.isValid || !ip.isDatacenter) return false;
-    if (!trafficFilter) return true;
-    if (ip.isVPN && trafficFilter.blockVpn !== true || ip.isProxy && trafficFilter.blockProxy !== true || ip.isTor && trafficFilter.blockTor !== true || ip.isCrawler && trafficFilter.blockCrawler !== true) {
-      return false;
-    }
-    if (trafficFilter.blockDatacenter !== true) return false;
-    if (ip.providerType === "isp") return false;
-    return !isDatacenterAllowlisted(ip, trafficFilter.datacenterNameAllowlist);
-  };
-  const countAbuser = (ip) => {
-    if (!ip?.isValid || !ip.isAbuser) return false;
-    if (!trafficFilter) return true;
-    if (trafficFilter.blockAbuser === false) return false;
-    const threshold = trafficFilter.abuserScoreThreshold ?? trafficFilterAbuserScoreThresholdDefault;
-    const maxScore = Math.max(ip.abuserScore ?? 0, ip.companyAbuserScore ?? 0);
-    return maxScore >= threshold;
-  };
-  if (countDc(enriched.resolverIpInfo)) score += 0.3;
-  if (countAbuser(enriched.resolverIpInfo)) score += 0.2;
-  if (countDc(enriched.peerIpInfo)) score += 0.2;
-  if (countAbuser(enriched.peerIpInfo)) score += 0.2;
-  if (clientIpInfo?.isValid && clientIpInfo.providerType === "isp" && countDc(enriched.resolverIpInfo)) {
-    score += 0.2;
-  }
-  return Math.min(score, 1);
-};
-export {
-  computeDnsAsymmetry,
-  enrichDnsEvent,
-  extraIpInfosFromEnrichedDnsEvent,
-  getIpInfoAsn
+/**
+* Score the DNS path for asymmetry between the client's DNS resolver / peer
+* IPs and its connection IP. The score sums four kinds of signal:
+*
+*   - `pathValid=false` (protocol-layer failure — always counted)
+*   - resolver / peer classified `isDatacenter`
+*   - resolver / peer classified `isAbuser`
+*   - client IP is a consumer ISP but resolver is datacenter (compound)
+*
+* When `trafficFilter` is supplied, the datacenter and abuser contributions
+* are gated on the same rules `checkTrafficFilter` uses for the client IP:
+*
+*   - `blockDatacenter` must be opted in (default off); IPs whose
+*     `providerType === "isp"` short-circuit; named allowlist skips
+*   - `blockAbuser` opt-in (default on) with the abuser-score threshold
+*   - cross-category suppression: VPN / proxy / Tor / crawler IPs that also
+*     carry `isDatacenter=true` are NOT counted as datacenter when the
+*     operator hasn't opted into blocking that more specific category —
+*     mirrors the `datacenterSuppressedByCategory` rule in evaluateIpInfo.
+*
+* `pathValid` is a protocol signal, not a category — it always contributes
+* regardless of trafficFilter. When `trafficFilter` is omitted, all
+* datacenter / abuser flags count (preserves the pre-gating behaviour for
+* admin / diagnostic recompute callers).
+*/
+var computeDnsAsymmetry = (enriched, clientIpInfo, trafficFilter) => {
+	if (!enriched) return 0;
+	let score = 0;
+	if (enriched.pathValid === false) score += .3;
+	const countDc = (ip) => {
+		if (!ip?.isValid || !ip.isDatacenter) return false;
+		if (!trafficFilter) return true;
+		if (trafficFilter.blockDatacenter !== true) return false;
+		if (isDatacenterDenylisted(ip, trafficFilter.datacenterNameDenylist)) return true;
+		if (ip.isVPN && trafficFilter.blockVpn !== true || ip.isProxy && trafficFilter.blockProxy !== true || ip.isTor && trafficFilter.blockTor !== true || ip.isCrawler && trafficFilter.blockCrawler !== true) return false;
+		if (ip.providerType === "isp") return false;
+		return !isDatacenterAllowlisted(ip, trafficFilter.datacenterNameAllowlist);
+	};
+	const countAbuser = (ip) => {
+		if (!ip?.isValid || !ip.isAbuser) return false;
+		if (!trafficFilter) return true;
+		if (trafficFilter.blockAbuser === false) return false;
+		const threshold = trafficFilter.abuserScoreThreshold ?? trafficFilterAbuserScoreThresholdDefault;
+		return Math.max(ip.abuserScore ?? 0, ip.companyAbuserScore ?? 0) >= threshold;
+	};
+	if (countDc(enriched.resolverIpInfo)) score += .3;
+	if (countAbuser(enriched.resolverIpInfo)) score += .2;
+	if (countDc(enriched.peerIpInfo)) score += .2;
+	if (countAbuser(enriched.peerIpInfo)) score += .2;
+	if (clientIpInfo?.isValid && clientIpInfo.providerType === "isp" && countDc(enriched.resolverIpInfo)) score += .2;
+	return Math.min(score, 1);
 };
+//#endregion
+export { computeDnsAsymmetry, enrichDnsEvent, extraIpInfosFromEnrichedDnsEvent, getIpInfoAsn };

package/dist/tasks/dnsEvent/enrichDnsEvent.js.map

@@ -1 +1 @@
-{"version":3,"file":"enrichDnsEvent.js","sourceRoot":"","sources":["../../../src/tasks/dnsEvent/enrichDnsEvent.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,wCAAwC,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAIxE,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAClC,QAAyC,EACzC,aAA6B,EAC7B,SAAkB,EACsB,EAAE;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,GAAqB;QAClC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC7B,CAAC;IACF,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,KAAK,MAAM;YAAE,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;;YACxC,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAC3B,IAAgC,EACX,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC/C,QAAsC,EACnB,EAAE;IACrB,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,IAAI,QAAQ,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,cAAc;QAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACZ,CAAC,CAAC;AA2BF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAClC,QAAsC,EACtC,YAAwC,EACxC,aAAuC,EAC9B,EAAE;IACX,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK;QAAE,KAAK,IAAI,GAAG,CAAC;IAE/C,MAAM,OAAO,GAAG,CAAC,EAA8B,EAAW,EAAE;QAC3D,IAAI,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QACnD,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAGhC,IACC,CAAC,EAAE,CAAC,KAAK,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,CAAC;YAC7C,CAAC,EAAE,CAAC,OAAO,IAAI,aAAa,CAAC,UAAU,KAAK,IAAI,CAAC;YACjD,CAAC,EAAE,CAAC,KAAK,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,CAAC;YAC7C,CAAC,EAAE,CAAC,SAAS,IAAI,aAAa,CAAC,YAAY,KAAK,IAAI,CAAC,EACpD,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,aAAa,CAAC,eAAe,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACzD,IAAI,EAAE,CAAC,YAAY,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,CAAC,uBAAuB,CAAC,EAAE,EAAE,aAAa,CAAC,uBAAuB,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,EAA8B,EAAW,EAAE;QAC/D,IAAI,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,aAAa,CAAC,WAAW,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,SAAS,GACd,aAAa,CAAC,oBAAoB;YAClC,wCAAwC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,EAAE,EAAE,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC;QAC3E,OAAO,QAAQ,IAAI,SAAS,CAAC;IAC9B,CAAC,CAAC;IAEF,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,KAAK,IAAI,GAAG,CAAC;IACnD,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,KAAK,IAAI,GAAG,CAAC;IACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,KAAK,IAAI,GAAG,CAAC;IAC/C,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,KAAK,IAAI,GAAG,CAAC;IAEnD,IACC,YAAY,EAAE,OAAO;QACrB,YAAY,CAAC,YAAY,KAAK,KAAK;QACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC/B,CAAC;QACF,KAAK,IAAI,GAAG,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC"}
+{"version":3,"file":"enrichDnsEvent.js","sourceRoot":"","sources":["../../../src/tasks/dnsEvent/enrichDnsEvent.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,wCAAwC,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EACN,uBAAuB,EACvB,sBAAsB,GACtB,MAAM,+BAA+B,CAAC;AAIvC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAClC,QAAyC,EACzC,aAA6B,EAC7B,SAAkB,EACsB,EAAE;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,GAAqB;QAClC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC7B,CAAC;IACF,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3C,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,KAAK,MAAM;YAAE,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;;YACxC,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAC3B,IAAgC,EACX,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC/C,QAAsC,EACnB,EAAE;IACrB,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,IAAI,QAAQ,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,cAAc;QAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACZ,CAAC,CAAC;AA2BF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAClC,QAAsC,EACtC,YAAwC,EACxC,aAAuC,EAC9B,EAAE;IACX,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK;QAAE,KAAK,IAAI,GAAG,CAAC;IAE/C,MAAM,OAAO,GAAG,CAAC,EAA8B,EAAW,EAAE;QAC3D,IAAI,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QACnD,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,aAAa,CAAC,eAAe,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAIzD,IAAI,sBAAsB,CAAC,EAAE,EAAE,aAAa,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC;QACb,CAAC;QAGD,IACC,CAAC,EAAE,CAAC,KAAK,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,CAAC;YAC7C,CAAC,EAAE,CAAC,OAAO,IAAI,aAAa,CAAC,UAAU,KAAK,IAAI,CAAC;YACjD,CAAC,EAAE,CAAC,KAAK,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,CAAC;YAC7C,CAAC,EAAE,CAAC,SAAS,IAAI,aAAa,CAAC,YAAY,KAAK,IAAI,CAAC,EACpD,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,EAAE,CAAC,YAAY,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,CAAC,uBAAuB,CAAC,EAAE,EAAE,aAAa,CAAC,uBAAuB,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,EAA8B,EAAW,EAAE;QAC/D,IAAI,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,aAAa,CAAC,WAAW,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,SAAS,GACd,aAAa,CAAC,oBAAoB;YAClC,wCAAwC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,EAAE,EAAE,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC;QAC3E,OAAO,QAAQ,IAAI,SAAS,CAAC;IAC9B,CAAC,CAAC;IAEF,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,KAAK,IAAI,GAAG,CAAC;IACnD,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,KAAK,IAAI,GAAG,CAAC;IACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,KAAK,IAAI,GAAG,CAAC;IAC/C,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,KAAK,IAAI,GAAG,CAAC;IAEnD,IACC,YAAY,EAAE,OAAO;QACrB,YAAY,CAAC,YAAY,KAAK,KAAK;QACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC/B,CAAC;QACF,KAAK,IAAI,GAAG,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC"}