@skillsmith/core 0.5.4 → 0.5.6

package/dist/security/scanner/SecurityScanner.helpers.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Security Scanner Helper Functions
+ * @module @skillsmith/core/security/scanner/SecurityScanner.helpers
+ */
+import type { SecurityFinding, SecurityFindingType, RiskScoreBreakdown, SecuritySeverity } from './types.js';
+/**
+ * Context information for each line in markdown content
+ */
+export interface LineContext {
+    lineNumber: number;
+    inCodeBlock: boolean;
+    inTable: boolean;
+    isIndentedCode: boolean;
+    isInlineCode: boolean;
+    /**
+     * SMI-4396 Wave 2: line falls within a YAML frontmatter block
+     * (between opening `---` at file start and the next `---`). SKILL.md
+     * authors legitimately include domain keywords (`password`, `secrets`,
+     * `privilege escalation`) in `description:` fields — findings in
+     * this context are documentation, not code.
+     */
+    inFrontmatter: boolean;
+}
+/**
+ * SMI-1532: Check if a regex pattern requires multi-line matching
+ * Patterns that contain newline/carriage-return characters or start with
+ * multi-line anchors need to be tested against full content, not line-by-line.
+ */
+export declare function isMultilinePattern(pattern: RegExp): boolean;
+/**
+ * Analyze markdown content and return context for each line
+ * Used to reduce false positives in documentation/examples
+ *
+ * SMI-4396 Wave 2: tracks YAML frontmatter context (the `---`-fenced block
+ * at the top of a SKILL.md). Opening `---` must be at line 0 (ignoring
+ * leading blank lines); closing `---` ends the block. Lines within are
+ * marked inFrontmatter=true so their keyword matches downgrade to
+ * documentation severity.
+ */
+export declare function analyzeMarkdownContext(content: string): LineContext[];
+/**
+ * Check if a line is in a documentation context (code block, table, example).
+ * Note: isInlineCode is intentionally excluded — it marks the entire line,
+ * but only specific match positions within backtick spans should reduce severity.
+ * Use isWithinInlineCode() for per-span granularity (SMI-3521).
+ *
+ * SMI-4396 Wave 2: inFrontmatter also counts as documentation context.
+ * SKILL.md authors legitimately include domain keywords in description:
+ * fields (1Password integrations, security-research skills, etc.).
+ */
+export declare function isDocumentationContext(ctx: LineContext): boolean;
+/**
+ * SMI-3521: Check if a match position falls within an inline code span (backtick-delimited).
+ * Unlike the line-level isInlineCode flag, this provides per-span granularity:
+ * only content actually between backticks is considered inline code.
+ */
+export declare function isWithinInlineCode(line: string, matchIndex: number): boolean;
+interface MultilineScanConfig {
+    type: SecurityFindingType;
+    messagePrefix: string;
+    patterns: RegExp[];
+    /** Severity pair: [inDocContext, normalContext] */
+    severities: [SecuritySeverity, SecuritySeverity];
+}
+/**
+ * Scan content for patterns that may span multiple lines.
+ * Multi-line patterns are tested against full content; single-line patterns per-line.
+ */
+export declare function scanPatternsWithMultilineSupport(content: string, config: MultilineScanConfig, lineContexts?: LineContext[]): SecurityFinding[];
+/**
+ * SMI-685: Calculate risk score from findings
+ * SMI-1513: Accounts for confidence levels (low confidence = reduced weight)
+ * Aggregates multiple findings into a risk score from 0-100
+ */
+export declare function calculateRiskScore(findings: SecurityFinding[]): {
+    total: number;
+    breakdown: RiskScoreBreakdown;
+};
+export {};
+//# sourceMappingURL=SecurityScanner.helpers.d.ts.map

package/dist/security/scanner/SecurityScanner.helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityScanner.helpers.d.ts","sourceRoot":"","sources":["../../../src/security/scanner/SecurityScanner.helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAElB,gBAAgB,EACjB,MAAM,YAAY,CAAA;AAQnB;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,OAAO,CAAA;IACvB,YAAY,EAAE,OAAO,CAAA;IACrB;;;;;;OAMG;IACH,aAAa,EAAE,OAAO,CAAA;CACvB;AAMD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAK3D;AAMD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,EAAE,CA0ErE;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAW5E;AAMD,UAAU,mBAAmB;IAC3B,IAAI,EAAE,mBAAmB,CAAA;IACzB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,mDAAmD;IACnD,UAAU,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;CACjD;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,mBAAmB,EAC3B,YAAY,CAAC,EAAE,WAAW,EAAE,GAC3B,eAAe,EAAE,CAoEnB;AAMD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG;IAC/D,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,kBAAkB,CAAA;CAC9B,CA+FA"}

package/dist/security/scanner/SecurityScanner.helpers.js

@@ -0,0 +1,292 @@
+/**
+ * Security Scanner Helper Functions
+ * @module @skillsmith/core/security/scanner/SecurityScanner.helpers
+ */
+import { SEVERITY_WEIGHTS, CATEGORY_WEIGHTS } from './weights.js';
+import { safeRegexTest } from './regex-utils.js';
+// ============================================================================
+// Pattern Helpers
+// ============================================================================
+/**
+ * SMI-1532: Check if a regex pattern requires multi-line matching
+ * Patterns that contain newline/carriage-return characters or start with
+ * multi-line anchors need to be tested against full content, not line-by-line.
+ */
+export function isMultilinePattern(pattern) {
+    const patternStr = pattern.source;
+    return (patternStr.includes('\\r') || patternStr.includes('\\n') || patternStr.startsWith('(?:^|\\n)'));
+}
+// ============================================================================
+// Markdown Context Analysis
+// ============================================================================
+/**
+ * Analyze markdown content and return context for each line
+ * Used to reduce false positives in documentation/examples
+ *
+ * SMI-4396 Wave 2: tracks YAML frontmatter context (the `---`-fenced block
+ * at the top of a SKILL.md). Opening `---` must be at line 0 (ignoring
+ * leading blank lines); closing `---` ends the block. Lines within are
+ * marked inFrontmatter=true so their keyword matches downgrade to
+ * documentation severity.
+ */
+export function analyzeMarkdownContext(content) {
+    const lines = content.split('\n');
+    const contexts = [];
+    let inFencedCodeBlock = false;
+    // SMI-4396 Wave 2: frontmatter state machine
+    // frontmatterState: 'pending' (before any non-blank line), 'open' (inside), 'closed' (after second fence).
+    let frontmatterState = 'pending';
+    let frontmatterOpenedAtLine = -1;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const trimmedLine = line.trim();
+        // SMI-4396 Wave 2: detect opening/closing frontmatter fence.
+        // Opening must be at file start (only blank lines precede); closing is
+        // the next `---` on its own line after the opening.
+        let lineInFrontmatter = false;
+        if (trimmedLine === '---') {
+            if (frontmatterState === 'pending') {
+                // Opening fence: only valid if no content lines have preceded.
+                frontmatterState = 'open';
+                frontmatterOpenedAtLine = i;
+                lineInFrontmatter = true; // the fence itself is part of frontmatter
+            }
+            else if (frontmatterState === 'open') {
+                frontmatterState = 'closed';
+                lineInFrontmatter = true; // the closing fence too
+            }
+        }
+        else if (frontmatterState === 'pending' && trimmedLine.length > 0) {
+            // First non-blank non-fence line: frontmatter never opened. Abort the pending state.
+            frontmatterState = 'closed';
+        }
+        else if (frontmatterState === 'open') {
+            lineInFrontmatter = true;
+        }
+        // Check for fenced code block boundaries (``` or ~~~). Frontmatter lines
+        // never participate — YAML is not markdown code fences.
+        if (!lineInFrontmatter && /^(`{3,}|~{3,})/.test(trimmedLine)) {
+            inFencedCodeBlock = !inFencedCodeBlock;
+        }
+        // Check for table row (starts with |)
+        const inTable = !lineInFrontmatter && trimmedLine.startsWith('|');
+        // Check for indented code block (4+ spaces or tab at start, not in list)
+        const isIndentedCode = !lineInFrontmatter &&
+            /^( {4,}|\t)/.test(line) &&
+            !inFencedCodeBlock &&
+            !trimmedLine.startsWith('-') &&
+            !trimmedLine.startsWith('*');
+        // Check for inline code (content between backticks on same line)
+        const isInlineCode = !lineInFrontmatter && /`[^`]+`/.test(line) && !inFencedCodeBlock;
+        contexts.push({
+            lineNumber: i + 1,
+            inCodeBlock: inFencedCodeBlock,
+            inTable,
+            isIndentedCode,
+            isInlineCode,
+            inFrontmatter: lineInFrontmatter,
+        });
+    }
+    // If we opened frontmatter but never closed it, unwind — do NOT mark the
+    // whole file as frontmatter. This is defensive against malformed files
+    // where a bare `---` sneaks in without a close.
+    if (frontmatterState === 'open' && frontmatterOpenedAtLine >= 0) {
+        for (let i = frontmatterOpenedAtLine; i < contexts.length; i++) {
+            contexts[i].inFrontmatter = false;
+        }
+    }
+    return contexts;
+}
+/**
+ * Check if a line is in a documentation context (code block, table, example).
+ * Note: isInlineCode is intentionally excluded — it marks the entire line,
+ * but only specific match positions within backtick spans should reduce severity.
+ * Use isWithinInlineCode() for per-span granularity (SMI-3521).
+ *
+ * SMI-4396 Wave 2: inFrontmatter also counts as documentation context.
+ * SKILL.md authors legitimately include domain keywords in description:
+ * fields (1Password integrations, security-research skills, etc.).
+ */
+export function isDocumentationContext(ctx) {
+    return ctx.inCodeBlock || ctx.inTable || ctx.isIndentedCode || ctx.inFrontmatter;
+}
+/**
+ * SMI-3521: Check if a match position falls within an inline code span (backtick-delimited).
+ * Unlike the line-level isInlineCode flag, this provides per-span granularity:
+ * only content actually between backticks is considered inline code.
+ */
+export function isWithinInlineCode(line, matchIndex) {
+    const backtickRegex = /`([^`]+)`/g;
+    let match;
+    while ((match = backtickRegex.exec(line)) !== null) {
+        const spanStart = match.index;
+        const spanEnd = match.index + match[0].length;
+        if (matchIndex >= spanStart && matchIndex < spanEnd) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Scan content for patterns that may span multiple lines.
+ * Multi-line patterns are tested against full content; single-line patterns per-line.
+ */
+export function scanPatternsWithMultilineSupport(content, config, lineContexts) {
+    const findings = [];
+    const lines = content.split('\n');
+    const contexts = lineContexts ?? analyzeMarkdownContext(content);
+    const flaggedLines = new Set();
+    // First pass: multi-line patterns against full content
+    for (const pattern of config.patterns) {
+        if (isMultilinePattern(pattern)) {
+            const match = safeRegexTest(pattern, content);
+            if (match) {
+                const matchIndex = content.indexOf(match[0]);
+                const lineNumber = content.slice(0, matchIndex).split('\n').length;
+                const ctx = contexts[lineNumber - 1];
+                const matchLine = lines[lineNumber - 1] ?? '';
+                const lineOffset = content.lastIndexOf('\n', matchIndex - 1) + 1;
+                const matchCol = matchIndex - lineOffset;
+                const inInlineCode = ctx?.isInlineCode && isWithinInlineCode(matchLine, matchCol);
+                const inDocContext = ctx ? isDocumentationContext(ctx) || inInlineCode : false;
+                const confidence = inDocContext ? 'low' : 'high';
+                const severity = inDocContext ? config.severities[0] : config.severities[1];
+                const truncated = match[0].slice(0, 50);
+                findings.push({
+                    type: config.type,
+                    severity,
+                    message: `${config.messagePrefix}: "${truncated}${match[0].length > 50 ? '...' : ''}"`,
+                    location: match[0].trim().slice(0, 100),
+                    lineNumber,
+                    category: config.type,
+                    inDocumentationContext: inDocContext,
+                    confidence,
+                });
+                flaggedLines.add(lineNumber);
+            }
+        }
+    }
+    // Second pass: single-line patterns per-line
+    lines.forEach((line, index) => {
+        if (flaggedLines.has(index + 1))
+            return;
+        const ctx = contexts[index];
+        for (const pattern of config.patterns) {
+            if (isMultilinePattern(pattern))
+                continue;
+            const match = safeRegexTest(pattern, line);
+            if (match) {
+                const inInlineCode = ctx?.isInlineCode && isWithinInlineCode(line, match.index ?? 0);
+                const inDocContext = ctx ? isDocumentationContext(ctx) || inInlineCode : false;
+                const confidence = inDocContext ? 'low' : 'high';
+                const severity = inDocContext ? config.severities[0] : config.severities[1];
+                findings.push({
+                    type: config.type,
+                    severity,
+                    message: `${config.messagePrefix}: "${match[0].slice(0, 50)}${match[0].length > 50 ? '...' : ''}"`,
+                    location: line.trim().slice(0, 100),
+                    lineNumber: index + 1,
+                    category: config.type,
+                    inDocumentationContext: inDocContext,
+                    confidence,
+                });
+                break;
+            }
+        }
+    });
+    return findings;
+}
+// ============================================================================
+// Risk Score Calculation
+// ============================================================================
+/**
+ * SMI-685: Calculate risk score from findings
+ * SMI-1513: Accounts for confidence levels (low confidence = reduced weight)
+ * Aggregates multiple findings into a risk score from 0-100
+ */
+export function calculateRiskScore(findings) {
+    const breakdown = {
+        jailbreak: 0,
+        socialEngineering: 0,
+        promptLeaking: 0,
+        dataExfiltration: 0,
+        privilegeEscalation: 0,
+        suspiciousCode: 0,
+        sensitivePaths: 0,
+        externalUrls: 0,
+        aiDefence: 0,
+        ssrf: 0,
+        pii: 0,
+    };
+    const confidenceWeights = {
+        high: 1.0,
+        medium: 0.7,
+        low: 0.3,
+    };
+    for (const finding of findings) {
+        const severityWeight = SEVERITY_WEIGHTS[finding.severity];
+        const categoryWeight = CATEGORY_WEIGHTS[finding.type] ?? 1.0;
+        const confidenceWeight = confidenceWeights[finding.confidence ?? 'high'];
+        const score = severityWeight * categoryWeight * confidenceWeight;
+        switch (finding.type) {
+            case 'jailbreak':
+                breakdown.jailbreak += score;
+                break;
+            case 'social_engineering':
+                breakdown.socialEngineering += score;
+                break;
+            case 'prompt_leaking':
+                breakdown.promptLeaking += score;
+                break;
+            case 'data_exfiltration':
+                breakdown.dataExfiltration += score;
+                break;
+            case 'privilege_escalation':
+                breakdown.privilegeEscalation += score;
+                break;
+            case 'suspicious_pattern':
+                breakdown.suspiciousCode += score;
+                break;
+            case 'sensitive_path':
+                breakdown.sensitivePaths += score;
+                break;
+            case 'url':
+                breakdown.externalUrls += score;
+                break;
+            case 'ai_defence':
+                breakdown.aiDefence += score;
+                break;
+            case 'ssrf':
+                breakdown.ssrf += score;
+                break;
+            case 'pii':
+                breakdown.pii += score;
+                break;
+        }
+    }
+    // Cap each category at 100
+    breakdown.jailbreak = Math.min(100, breakdown.jailbreak);
+    breakdown.socialEngineering = Math.min(100, breakdown.socialEngineering);
+    breakdown.promptLeaking = Math.min(100, breakdown.promptLeaking);
+    breakdown.dataExfiltration = Math.min(100, breakdown.dataExfiltration);
+    breakdown.privilegeEscalation = Math.min(100, breakdown.privilegeEscalation);
+    breakdown.suspiciousCode = Math.min(100, breakdown.suspiciousCode);
+    breakdown.sensitivePaths = Math.min(100, breakdown.sensitivePaths);
+    breakdown.externalUrls = Math.min(100, breakdown.externalUrls);
+    breakdown.aiDefence = Math.min(100, breakdown.aiDefence);
+    breakdown.ssrf = Math.min(100, breakdown.ssrf);
+    breakdown.pii = Math.min(100, breakdown.pii);
+    const total = Math.min(100, Math.round(breakdown.jailbreak * 0.2 +
+        breakdown.socialEngineering * 0.11 +
+        breakdown.promptLeaking * 0.11 +
+        breakdown.dataExfiltration * 0.08 +
+        breakdown.privilegeEscalation * 0.11 +
+        breakdown.suspiciousCode * 0.07 +
+        breakdown.sensitivePaths * 0.04 +
+        breakdown.externalUrls * 0.04 +
+        breakdown.aiDefence * 0.12 +
+        breakdown.ssrf * 0.04 +
+        breakdown.pii * 0.08));
+    return { total, breakdown };
+}
+//# sourceMappingURL=SecurityScanner.helpers.js.map

package/dist/security/scanner/SecurityScanner.helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityScanner.helpers.js","sourceRoot":"","sources":["../../../src/security/scanner/SecurityScanner.helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAyBhD,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAA;IACjC,OAAO,CACL,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAC/F,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAkB,EAAE,CAAA;IAClC,IAAI,iBAAiB,GAAG,KAAK,CAAA;IAC7B,6CAA6C;IAC7C,2GAA2G;IAC3G,IAAI,gBAAgB,GAAkC,SAAS,CAAA;IAC/D,IAAI,uBAAuB,GAAG,CAAC,CAAC,CAAA;IAEhC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAE/B,6DAA6D;QAC7D,uEAAuE;QACvE,oDAAoD;QACpD,IAAI,iBAAiB,GAAG,KAAK,CAAA;QAC7B,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YAC1B,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACnC,+DAA+D;gBAC/D,gBAAgB,GAAG,MAAM,CAAA;gBACzB,uBAAuB,GAAG,CAAC,CAAA;gBAC3B,iBAAiB,GAAG,IAAI,CAAA,CAAC,0CAA0C;YACrE,CAAC;iBAAM,IAAI,gBAAgB,KAAK,MAAM,EAAE,CAAC;gBACvC,gBAAgB,GAAG,QAAQ,CAAA;gBAC3B,iBAAiB,GAAG,IAAI,CAAA,CAAC,wBAAwB;YACnD,CAAC;QACH,CAAC;aAAM,IAAI,gBAAgB,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpE,qFAAqF;YACrF,gBAAgB,GAAG,QAAQ,CAAA;QAC7B,CAAC;aAAM,IAAI,gBAAgB,KAAK,MAAM,EAAE,CAAC;YACvC,iBAAiB,GAAG,IAAI,CAAA;QAC1B,CAAC;QAED,yEAAyE;QACzE,wDAAwD;QACxD,IAAI,CAAC,iBAAiB,IAAI,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7D,iBAAiB,GAAG,CAAC,iBAAiB,CAAA;QACxC,CAAC;QAED,sCAAsC;QACtC,MAAM,OAAO,GAAG,CAAC,iBAAiB,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QAEjE,yEAAyE;QACzE,MAAM,cAAc,GAClB,CAAC,iBAAiB;YAClB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YACxB,CAAC,iBAAiB;YAClB,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;YAC5B,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QAE9B,iEAAiE;QACjE,MAAM,YAAY,GAAG,CAAC,iBAAiB,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAA;QAErF,QAAQ,CAAC,IAAI,CAAC;YACZ,UAAU,EAAE,CAAC,GAAG,CAAC;YACjB,WAAW,EAAE,iBAAiB;YAC9B,OAAO;YACP,cAAc;YACd,YAAY;YACZ,aAAa,EAAE,iBAAiB;SACjC,CAAC,CAAA;IACJ,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,gDAAgD;IAChD,IAAI,gBAAgB,KAAK,MAAM,IAAI,uBAAuB,IAAI,CAAC,EAAE,CAAC;QAChE,KAAK,IAAI,CAAC,GAAG,uBAAuB,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/D,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,KAAK,CAAA;QACnC,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAgB;IACrD,OAAO,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,aAAa,CAAA;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,UAAkB;IACjE,MAAM,aAAa,GAAG,YAAY,CAAA;IAClC,IAAI,KAAK,CAAA;IACT,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAA;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAC7C,IAAI,UAAU,IAAI,SAAS,IAAI,UAAU,GAAG,OAAO,EAAE,CAAC;YACpD,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAcD;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAC9C,OAAe,EACf,MAA2B,EAC3B,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAChE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IAEtC,uDAAuD;IACvD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC7C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;gBAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;gBAClE,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC,CAAA;gBACpC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;gBAChE,MAAM,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAA;gBACxC,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;gBACjF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;gBAC9E,MAAM,UAAU,GAAsB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;gBACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;gBAC3E,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;gBAEvC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,QAAQ;oBACR,OAAO,EAAE,GAAG,MAAM,CAAC,aAAa,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG;oBACtF,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACvC,UAAU;oBACV,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,sBAAsB,EAAE,YAAY;oBACpC,UAAU;iBACX,CAAC,CAAA;gBACF,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;YAAE,OAAM;QACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE3B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,IAAI,kBAAkB,CAAC,OAAO,CAAC;gBAAE,SAAQ;YACzC,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC1C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;gBACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;gBAC9E,MAAM,UAAU,GAAsB,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;gBACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;gBAE3E,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,QAAQ;oBACR,OAAO,EAAE,GAAG,MAAM,CAAC,aAAa,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG;oBAClG,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACnC,UAAU,EAAE,KAAK,GAAG,CAAC;oBACrB,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,sBAAsB,EAAE,YAAY;oBACpC,UAAU;iBACX,CAAC,CAAA;gBACF,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA2B;IAI5D,MAAM,SAAS,GAAuB;QACpC,SAAS,EAAE,CAAC;QACZ,iBAAiB,EAAE,CAAC;QACpB,aAAa,EAAE,CAAC;QAChB,gBAAgB,EAAE,CAAC;QACnB,mBAAmB,EAAE,CAAC;QACtB,cAAc,EAAE,CAAC;QACjB,cAAc,EAAE,CAAC;QACjB,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,CAAC;QACZ,IAAI,EAAE,CAAC;QACP,GAAG,EAAE,CAAC;KACP,CAAA;IAED,MAAM,iBAAiB,GAAsC;QAC3D,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,GAAG;QACX,GAAG,EAAE,GAAG;KACT,CAAA;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACzD,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,CAAA;QAC5D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,CAAA;QACxE,MAAM,KAAK,GAAG,cAAc,GAAG,cAAc,GAAG,gBAAgB,CAAA;QAEhE,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,WAAW;gBACd,SAAS,CAAC,SAAS,IAAI,KAAK,CAAA;gBAC5B,MAAK;YACP,KAAK,oBAAoB;gBACvB,SAAS,CAAC,iBAAiB,IAAI,KAAK,CAAA;gBACpC,MAAK;YACP,KAAK,gBAAgB;gBACnB,SAAS,CAAC,aAAa,IAAI,KAAK,CAAA;gBAChC,MAAK;YACP,KAAK,mBAAmB;gBACtB,SAAS,CAAC,gBAAgB,IAAI,KAAK,CAAA;gBACnC,MAAK;YACP,KAAK,sBAAsB;gBACzB,SAAS,CAAC,mBAAmB,IAAI,KAAK,CAAA;gBACtC,MAAK;YACP,KAAK,oBAAoB;gBACvB,SAAS,CAAC,cAAc,IAAI,KAAK,CAAA;gBACjC,MAAK;YACP,KAAK,gBAAgB;gBACnB,SAAS,CAAC,cAAc,IAAI,KAAK,CAAA;gBACjC,MAAK;YACP,KAAK,KAAK;gBACR,SAAS,CAAC,YAAY,IAAI,KAAK,CAAA;gBAC/B,MAAK;YACP,KAAK,YAAY;gBACf,SAAS,CAAC,SAAS,IAAI,KAAK,CAAA;gBAC5B,MAAK;YACP,KAAK,MAAM;gBACT,SAAS,CAAC,IAAI,IAAI,KAAK,CAAA;gBACvB,MAAK;YACP,KAAK,KAAK;gBACR,SAAS,CAAC,GAAG,IAAI,KAAK,CAAA;gBACtB,MAAK;QACT,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;IACxD,SAAS,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAA;IACxE,SAAS,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,aAAa,CAAC,CAAA;IAChE,SAAS,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAA;IACtE,SAAS,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,mBAAmB,CAAC,CAAA;IAC5E,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,cAAc,CAAC,CAAA;IAClE,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,cAAc,CAAC,CAAA;IAClE,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,YAAY,CAAC,CAAA;IAC9D,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;IACxD,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9C,SAAS,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAA;IAE5C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,GAAG,EACH,IAAI,CAAC,KAAK,CACR,SAAS,CAAC,SAAS,GAAG,GAAG;QACvB,SAAS,CAAC,iBAAiB,GAAG,IAAI;QAClC,SAAS,CAAC,aAAa,GAAG,IAAI;QAC9B,SAAS,CAAC,gBAAgB,GAAG,IAAI;QACjC,SAAS,CAAC,mBAAmB,GAAG,IAAI;QACpC,SAAS,CAAC,cAAc,GAAG,IAAI;QAC/B,SAAS,CAAC,cAAc,GAAG,IAAI;QAC/B,SAAS,CAAC,YAAY,GAAG,IAAI;QAC7B,SAAS,CAAC,SAAS,GAAG,IAAI;QAC1B,SAAS,CAAC,IAAI,GAAG,IAAI;QACrB,SAAS,CAAC,GAAG,GAAG,IAAI,CACvB,CACF,CAAA;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;AAC7B,CAAC"}