@surfinguard/core-engine 0.1.0

package/dist/analyzers/command.js

@@ -0,0 +1,544 @@
+/**
+ * Command Analyzer — heuristic shell command threat detection.
+ *
+ * Analyzes shell commands against 20 threat patterns (C01-C20)
+ * mapped to 5 risk primitives.
+ */
+export class CommandAnalyzer {
+    actionType = 'command';
+    db;
+    safeCommandsSet;
+    destructiveCommandsSet;
+    exfiltrationCommandsSet;
+    networkCommandsSet;
+    packageManagersSet;
+    encodingCommandsSet;
+    constructor(patterns) {
+        this.db = patterns;
+        this.safeCommandsSet = new Set(patterns.safeCommands);
+        this.destructiveCommandsSet = new Set(patterns.destructiveCommands);
+        this.exfiltrationCommandsSet = new Set(patterns.exfiltrationCommands);
+        this.networkCommandsSet = new Set(patterns.networkCommands);
+        this.packageManagersSet = new Set(patterns.packageManagers);
+        this.encodingCommandsSet = new Set(patterns.encodingCommands);
+    }
+    analyze(value) {
+        const trimmed = value.trim();
+        if (!trimmed) {
+            return { actionType: 'command', findings: [], shortCircuit: { safe: true, reason: 'Empty command' } };
+        }
+        const findings = [];
+        const add = (primitive, score, reason, threatId) => {
+            findings.push({ primitive, score, reason, threatId });
+        };
+        const lower = trimmed.toLowerCase();
+        const segments = this.tokenize(trimmed);
+        const hasPipe = trimmed.includes('|');
+        const hasRedirect = /[^|&]>[^&]|>>|<[^<]|2>/.test(trimmed);
+        const hasSubshell = trimmed.includes('$(') || trimmed.includes('`');
+        // ── Short-circuit for known-safe commands ─────────────────────────
+        if (segments.length === 1 && !hasPipe && !hasRedirect && !hasSubshell) {
+            const cmd = segments[0].command.toLowerCase();
+            if (this.safeCommandsSet.has(cmd) && !this.hasRiskyArgs(segments[0])) {
+                return { actionType: 'command', findings: [], shortCircuit: { safe: true, reason: 'Known safe command' } };
+            }
+        }
+        // ── 1. Pipe-to-shell (C04) ────────────────────────────────────────
+        for (const pattern of this.db.pipeToShell) {
+            if (lower.includes(pattern.toLowerCase())) {
+                add('DESTRUCTION', 9, `Piping output to shell interpreter (${pattern.trim()})`, 'C04');
+                break;
+            }
+        }
+        // ── 2. Reverse shell patterns (C03) ───────────────────────────────
+        for (const pattern of this.db.reverseShellPatterns) {
+            if (lower.includes(pattern.toLowerCase())) {
+                add('EXFILTRATION', 9, `Reverse shell pattern detected (${pattern})`, 'C03');
+                break;
+            }
+        }
+        // ── 3. Fork bomb (C09) ────────────────────────────────────────────
+        if (this.isForkBomb(trimmed)) {
+            add('DESTRUCTION', 9, 'Fork bomb detected — will exhaust system resources', 'C09');
+        }
+        // ── 4. Encoded/obfuscated (C13) ───────────────────────────────────
+        if (this.isEncodedCommand(lower)) {
+            add('MANIPULATION', 8, 'Encoded or obfuscated command hides true intent', 'C13');
+        }
+        // ── 5. Variable expansion risk (C14) ──────────────────────────────
+        if (this.hasVariableExpansionRisk(trimmed)) {
+            add('DESTRUCTION', 7, 'Variable expansion in destructive command — empty variable could target root', 'C14');
+        }
+        // ── 6. Destructive operations (C01) ───────────────────────────────
+        for (const seg of segments) {
+            const cmd = seg.command.toLowerCase();
+            const rawLower = seg.raw.toLowerCase();
+            // Match exact command or dotted prefix (e.g., mkfs.ext4 matches mkfs)
+            const cmdBase = cmd.split('.')[0];
+            if (this.destructiveCommandsSet.has(cmd) || this.destructiveCommandsSet.has(cmdBase)) {
+                // Check for ad-hoc adjustments first
+                if (cmd === 'rm') {
+                    const hasRecursive = seg.args.some(a => ['-r', '-rf', '-fr', '--recursive', '-Rf', '-fR'].includes(a));
+                    const targetsCritical = this.targetsCriticalPath(seg.args);
+                    if (hasRecursive && targetsCritical) {
+                        add('DESTRUCTION', 9, `Recursive delete targeting critical path`, 'C01');
+                    }
+                    else if (hasRecursive) {
+                        add('DESTRUCTION', 7, 'Recursive file deletion', 'C01');
+                    }
+                    else {
+                        // rm without -r on a specific file — reduced risk
+                        add('DESTRUCTION', 3, 'File deletion command', 'C01');
+                    }
+                }
+                else if (cmd === 'dd') {
+                    if (rawLower.includes('of=/dev/')) {
+                        add('DESTRUCTION', 9, `dd writing to device — will destroy data`, 'C01');
+                    }
+                    // dd to non-device is handled by disk-filling check below
+                }
+                else {
+                    add('DESTRUCTION', 9, `Destructive command: ${cmd}`, 'C01');
+                }
+            }
+            // Dangerous flags on non-destructive commands
+            if (this.db.destructiveFlags[cmd]) {
+                for (const flag of this.db.destructiveFlags[cmd]) {
+                    if (seg.args.some(a => a.includes(flag))) {
+                        // Skip if already detected above
+                        if (cmd !== 'rm' && cmd !== 'dd') {
+                            add('DESTRUCTION', 7, `Dangerous flag ${flag} used with ${cmd}`, 'C01');
+                        }
+                        break;
+                    }
+                }
+            }
+        }
+        // ── 7. Data exfiltration (C02) ────────────────────────────────────
+        for (const pattern of this.db.exfiltrationPatterns) {
+            if (lower.includes(pattern.toLowerCase())) {
+                add('EXFILTRATION', 8, `Data exfiltration pattern detected (${pattern.trim()})`, 'C02');
+                break;
+            }
+        }
+        // Also check for exfiltration commands sending data
+        for (const seg of segments) {
+            const cmd = seg.command.toLowerCase();
+            if (cmd === 'scp' || cmd === 'rsync') {
+                // scp/rsync with a remote target
+                if (seg.args.some(a => a.includes('@') || a.includes(':'))) {
+                    if (!findings.some(f => f.threatId === 'C02')) {
+                        add('EXFILTRATION', 8, `${cmd} transferring data to remote host`, 'C02');
+                    }
+                }
+            }
+        }
+        // ── 8. Credential harvesting (C18) ────────────────────────────────
+        const credentialPatterns = [
+            '/etc/shadow', '/etc/passwd', '.ssh/id_rsa', '.ssh/id_ed25519',
+            '.ssh/id_dsa', '.ssh/id_ecdsa', '.ssh/authorized_keys',
+            '.env', '.pem', '.key', '.p12', '.pfx',
+            'credentials', '.aws/credentials', '.docker/config.json',
+            '.kube/config', '.gnupg/', '.netrc',
+        ];
+        for (const cred of credentialPatterns) {
+            if (lower.includes(cred)) {
+                // Only flag if reading, not just referencing in a safe context
+                const isReading = segments.some(s => {
+                    const cmd = s.command.toLowerCase();
+                    return ['cat', 'less', 'more', 'head', 'tail', 'cp', 'scp', 'rsync', 'curl', 'wget', 'base64'].includes(cmd);
+                });
+                // Also flag file redirection of sensitive files
+                const hasOutputRedirect = hasRedirect && lower.includes(cred);
+                if (isReading || hasOutputRedirect || lower.includes(`-d @`) || lower.includes('--upload-file')) {
+                    add('EXFILTRATION', 8, `Accessing sensitive credential file (${cred})`, 'C18');
+                    break;
+                }
+            }
+        }
+        // ── 9. Privilege escalation (C05) ─────────────────────────────────
+        for (const seg of segments) {
+            const cmd = seg.command.toLowerCase();
+            const rawLower = seg.raw.toLowerCase();
+            if (cmd === 'sudo') {
+                // sudo apt install / sudo brew install — common, reduced
+                const subCmd = seg.args[0]?.toLowerCase();
+                if (subCmd === 'apt' || subCmd === 'apt-get' || subCmd === 'brew' || subCmd === 'yum' || subCmd === 'dnf' || subCmd === 'pacman') {
+                    if (seg.args.some(a => a.toLowerCase() === 'install')) {
+                        add('ESCALATION', 2, `sudo ${subCmd} install — common system administration`, 'C05');
+                    }
+                    else {
+                        add('ESCALATION', 4, `sudo ${subCmd} — elevated package management`, 'C05');
+                    }
+                }
+                else if (subCmd === 'chmod' || subCmd === 'chown') {
+                    add('ESCALATION', 8, `sudo ${subCmd} — elevated permission change`, 'C05');
+                }
+                else {
+                    add('ESCALATION', 6, `sudo — elevated privileges`, 'C05');
+                }
+            }
+            else if (cmd === 'doas' || cmd === 'pkexec') {
+                add('ESCALATION', 8, `Privilege escalation via ${cmd}`, 'C05');
+            }
+            else if (rawLower.includes('chmod u+s') || rawLower.includes('setuid')) {
+                add('ESCALATION', 8, 'Setting SUID bit — privilege escalation', 'C05');
+            }
+            // chmod with dangerous values on critical paths
+            if (cmd === 'chmod') {
+                const hasRiskyPerm = seg.args.some(a => ['777', '000', 'a+rwx'].includes(a));
+                const targetsCritical = this.targetsCriticalPath(seg.args);
+                if (hasRiskyPerm && targetsCritical) {
+                    if (!findings.some(f => f.threatId === 'C05' && f.score >= 8)) {
+                        add('ESCALATION', 8, `chmod with dangerous permissions on critical path`, 'C05');
+                    }
+                }
+                else if (hasRiskyPerm) {
+                    if (!findings.some(f => f.threatId === 'C05' && f.score >= 6)) {
+                        add('ESCALATION', 4, `chmod with broad permissions`, 'C05');
+                    }
+                }
+                else {
+                    // chmod on user-owned paths without recursive — low risk
+                    // Don't add anything for normal chmod usage
+                }
+            }
+        }
+        // ── 10. Container escape (C19) ────────────────────────────────────
+        for (const pattern of this.db.containerEscapePatterns) {
+            if (lower.includes(pattern.toLowerCase())) {
+                add('ESCALATION', 9, `Container escape pattern detected (${pattern})`, 'C19');
+                break;
+            }
+        }
+        // ── 11. Process injection (C15) ───────────────────────────────────
+        for (const seg of segments) {
+            const cmd = seg.command.toLowerCase();
+            if (cmd === 'gdb' && seg.args.some(a => a === '-p' || a === '--pid')) {
+                add('ESCALATION', 8, 'Process injection via gdb attach', 'C15');
+            }
+            if (cmd === 'strace' && seg.args.some(a => a === '-p')) {
+                add('ESCALATION', 8, 'Process tracing via strace', 'C15');
+            }
+        }
+        // LD_PRELOAD as inline env var (not export)
+        if (/\bLD_PRELOAD=\S+\s+\S/.test(trimmed) && !findings.some(f => f.threatId === 'C15')) {
+            add('ESCALATION', 8, 'Process injection via LD_PRELOAD', 'C15');
+        }
+        // ── 12. Persistence — cron (C06) ──────────────────────────────────
+        for (const seg of segments) {
+            const cmd = seg.command.toLowerCase();
+            if (cmd === 'crontab') {
+                add('PERSISTENCE', 7, 'Crontab modification — may install persistent task', 'C06');
+            }
+        }
+        if (lower.includes('/etc/cron') || lower.includes('/var/spool/cron')) {
+            if (!findings.some(f => f.threatId === 'C06')) {
+                add('PERSISTENCE', 7, 'Writing to cron directory — persistent execution', 'C06');
+            }
+        }
+        // ── 13. Persistence — shell config (C07) ──────────────────────────
+        const shellConfigs = ['.bashrc', '.zshrc', '.profile', '.bash_profile', '.bash_login'];
+        for (const config of shellConfigs) {
+            if (lower.includes(config) && (hasRedirect || lower.includes('echo') || lower.includes('tee'))) {
+                add('PERSISTENCE', 6, `Modifying shell config file (${config}) — persistence`, 'C07');
+                break;
+            }
+        }
+        // ── 14. Git hook injection (C11) ──────────────────────────────────
+        if (lower.includes('.git/hooks/') && (hasRedirect || lower.includes('echo') || lower.includes('tee') || lower.includes('cp') || lower.includes('chmod'))) {
+            add('PERSISTENCE', 6, 'Git hook modification — code runs on git operations', 'C11');
+        }
+        // ── 15. Environment poisoning (C10) ───────────────────────────────
+        if (/\bexport\s+PATH=/.test(trimmed)) {
+            add('PERSISTENCE', 6, 'PATH environment variable modification', 'C10');
+        }
+        if (/\bexport\s+LD_PRELOAD=/.test(trimmed)) {
+            if (!findings.some(f => f.threatId === 'C15')) {
+                add('PERSISTENCE', 6, 'LD_PRELOAD environment variable set', 'C10');
+            }
+        }
+        // ── 16. Lateral movement (C08) ────────────────────────────────────
+        for (const seg of segments) {
+            const cmd = seg.command.toLowerCase();
+            if (this.networkCommandsSet.has(cmd)) {
+                if (cmd === 'ssh') {
+                    add('ESCALATION', 6, 'SSH connection — potential lateral movement', 'C08');
+                }
+                else if (cmd === 'nmap') {
+                    add('ESCALATION', 6, 'Network scanning detected', 'C08');
+                }
+                else if (cmd === 'ping' || cmd === 'traceroute') {
+                    // ping/traceroute are generally safe — no finding
+                }
+                else {
+                    add('ESCALATION', 5, `Network tool: ${cmd}`, 'C08');
+                }
+            }
+        }
+        // ── 17. Network listeners (C17) ───────────────────────────────────
+        for (const seg of segments) {
+            const cmd = seg.command.toLowerCase();
+            if (cmd === 'nc' || cmd === 'ncat' || cmd === 'netcat') {
+                if (seg.args.some(a => a === '-l' || a === '-lp' || a.startsWith('-l'))) {
+                    add('ESCALATION', 5, 'Network listener opened', 'C17');
+                }
+            }
+            if (cmd === 'socat') {
+                add('ESCALATION', 5, 'socat — potential network relay', 'C17');
+            }
+        }
+        // python/python3 -m http.server
+        if (lower.includes('http.server') || lower.includes('simplehttpserver')) {
+            if (!findings.some(f => f.threatId === 'C17')) {
+                add('ESCALATION', 5, 'HTTP server started — exposes files on network', 'C17');
+            }
+        }
+        // ── 18. History tampering (C12) ───────────────────────────────────
+        if (lower.includes('history -c') || lower.includes('rm ~/.bash_history') ||
+            lower.includes('rm -f ~/.bash_history') || lower.includes('unset histfile') ||
+            lower.includes('export histfile=/dev/null') || lower.includes('set +o history')) {
+            add('MANIPULATION', 4, 'Command history tampering detected', 'C12');
+        }
+        // ── 19. Disk filling (C16) ────────────────────────────────────────
+        for (const seg of segments) {
+            const cmd = seg.command.toLowerCase();
+            if (cmd === 'dd') {
+                // dd writing to a file (not device) — disk filling
+                const hasDev = seg.raw.toLowerCase().includes('of=/dev/');
+                const hasOf = seg.raw.toLowerCase().includes('of=');
+                if (hasOf && !hasDev && !findings.some(f => f.threatId === 'C01' && f.score >= 9)) {
+                    add('DESTRUCTION', 5, 'dd writing to file — potential disk filling', 'C16');
+                }
+            }
+        }
+        // ── 20. Package manager abuse (C20) ───────────────────────────────
+        for (const seg of segments) {
+            const cmd = seg.command.toLowerCase();
+            // Handle multi-word package managers like "go install"
+            const fullCmd = `${cmd} ${seg.args[0] || ''}`.trim().toLowerCase();
+            if (this.packageManagersSet.has(cmd) || this.packageManagersSet.has(fullCmd)) {
+                const isInstall = seg.args.some(a => ['install', 'add', 'i'].includes(a.toLowerCase()));
+                if (isInstall || fullCmd.startsWith('go install')) {
+                    // Skip if already covered by safe commands (npm test, etc.)
+                    if (!findings.some(f => f.threatId === 'C20')) {
+                        add('DESTRUCTION', 3, `Package manager install (${cmd}) — may run arbitrary scripts`, 'C20');
+                    }
+                }
+            }
+        }
+        return { actionType: 'command', findings };
+    }
+    // ── Shell Tokenizer ─────────────────────────────────────────────────
+    /**
+     * Split a command string into pipeline segments.
+     * Splits on |, &&, ||, ; respecting quotes.
+     */
+    tokenize(input) {
+        const segments = [];
+        const rawSegments = this.splitPipeline(input);
+        for (const raw of rawSegments) {
+            const trimmed = raw.trim();
+            if (!trimmed)
+                continue;
+            const tokens = this.tokenizeSegment(trimmed);
+            if (tokens.length === 0)
+                continue;
+            segments.push({
+                command: tokens[0],
+                args: tokens.slice(1),
+                raw: trimmed,
+            });
+        }
+        return segments;
+    }
+    /**
+     * Split on |, &&, ||, ; while respecting quotes and subshells.
+     */
+    splitPipeline(input) {
+        const segments = [];
+        let current = '';
+        let inSingle = false;
+        let inDouble = false;
+        let inBacktick = false;
+        let parenDepth = 0;
+        for (let i = 0; i < input.length; i++) {
+            const ch = input[i];
+            const next = input[i + 1];
+            // Track quoting
+            if (ch === "'" && !inDouble && !inBacktick) {
+                inSingle = !inSingle;
+                current += ch;
+                continue;
+            }
+            if (ch === '"' && !inSingle && !inBacktick) {
+                inDouble = !inDouble;
+                current += ch;
+                continue;
+            }
+            if (ch === '`' && !inSingle && !inDouble) {
+                inBacktick = !inBacktick;
+                current += ch;
+                continue;
+            }
+            // Track subshells
+            if (!inSingle && !inDouble && !inBacktick) {
+                if (ch === '(' || (ch === '$' && next === '(')) {
+                    parenDepth++;
+                }
+                else if (ch === ')' && parenDepth > 0) {
+                    parenDepth--;
+                }
+            }
+            // Only split when not inside quotes or subshells
+            if (!inSingle && !inDouble && !inBacktick && parenDepth === 0) {
+                if (ch === '|' && next === '|') {
+                    segments.push(current);
+                    current = '';
+                    i++; // skip second |
+                    continue;
+                }
+                if (ch === '&' && next === '&') {
+                    segments.push(current);
+                    current = '';
+                    i++; // skip second &
+                    continue;
+                }
+                if (ch === '|') {
+                    segments.push(current);
+                    current = '';
+                    continue;
+                }
+                if (ch === ';') {
+                    segments.push(current);
+                    current = '';
+                    continue;
+                }
+            }
+            current += ch;
+        }
+        if (current.trim()) {
+            segments.push(current);
+        }
+        return segments;
+    }
+    /**
+     * Tokenize a single command segment into command + args.
+     * Handles single/double quotes.
+     */
+    tokenizeSegment(input) {
+        const tokens = [];
+        let current = '';
+        let inSingle = false;
+        let inDouble = false;
+        for (let i = 0; i < input.length; i++) {
+            const ch = input[i];
+            if (ch === "'" && !inDouble) {
+                inSingle = !inSingle;
+                continue;
+            }
+            if (ch === '"' && !inSingle) {
+                inDouble = !inDouble;
+                continue;
+            }
+            if (ch === '\\' && inDouble && i + 1 < input.length) {
+                current += input[++i];
+                continue;
+            }
+            if ((ch === ' ' || ch === '\t') && !inSingle && !inDouble) {
+                if (current) {
+                    tokens.push(current);
+                    current = '';
+                }
+                continue;
+            }
+            current += ch;
+        }
+        if (current) {
+            tokens.push(current);
+        }
+        return tokens;
+    }
+    // ── Detection Helpers ───────────────────────────────────────────────
+    isForkBomb(cmd) {
+        // Classic: :(){ :|:& };:
+        if (cmd.includes(':(){ :|:&') || cmd.includes(':(){ :|: &'))
+            return true;
+        // Variants using function keyword
+        if (/\bfork\s*\(\)\s*\{.*fork.*fork/.test(cmd))
+            return true;
+        // Perl/Python variants
+        if (/while\s*\(1\)\s*\{\s*fork/.test(cmd))
+            return true;
+        return false;
+    }
+    isEncodedCommand(lower) {
+        // base64 -d | bash/sh
+        if (/base64\s+(-d|--decode)/.test(lower) && this.db.pipeToShell.some(p => lower.includes(p.toLowerCase()))) {
+            return true;
+        }
+        // eval $(...) with encoding
+        if (/eval\s+\$\(/.test(lower) && (lower.includes('base64') || lower.includes('xxd') || lower.includes('echo'))) {
+            return true;
+        }
+        // eval "$(base64 ...)"
+        if (/eval\s+/.test(lower) && lower.includes('base64')) {
+            return true;
+        }
+        return false;
+    }
+    hasVariableExpansionRisk(cmd) {
+        // rm -rf $VAR/ or rm -rf ${VAR}/
+        if (/rm\s+(-rf|-fr)\s+\$[\w{]/.test(cmd))
+            return true;
+        if (/rm\s+(-rf|-fr)\s+\$\{[^}]*\}\//.test(cmd))
+            return true;
+        return false;
+    }
+    targetsCriticalPath(args) {
+        for (const arg of args) {
+            if (arg.startsWith('-'))
+                continue; // skip flags
+            const normalized = arg.replace(/\/+$/, '') || '/'; // trailing slash removal, empty = root
+            for (const critical of this.db.criticalPaths) {
+                if (normalized === critical || normalized.startsWith(critical + '/')) {
+                    return true;
+                }
+            }
+            // Also check for "/" alone
+            if (normalized === '/')
+                return true;
+        }
+        return false;
+    }
+    /**
+     * Check if a command segment has arguments that elevate risk
+     * beyond what the safe command alone would imply.
+     */
+    hasRiskyArgs(seg) {
+        const cmd = seg.command.toLowerCase();
+        const argsLower = seg.args.map(a => a.toLowerCase());
+        // Check if safe command is reading sensitive credentials
+        if (['cat', 'less', 'more', 'head', 'tail'].includes(cmd)) {
+            const credFiles = ['/etc/shadow', '.ssh/id_rsa', '.ssh/id_ed25519', '.env', '.pem', '.key'];
+            if (seg.args.some(a => credFiles.some(c => a.toLowerCase().includes(c)))) {
+                return true;
+            }
+        }
+        // Package managers with install subcommand
+        if (this.packageManagersSet.has(cmd)) {
+            if (argsLower.some(a => ['install', 'add', 'i'].includes(a))) {
+                return true;
+            }
+        }
+        // Python/python3 running network server
+        if (cmd === 'python' || cmd === 'python3') {
+            const rawLower = seg.raw.toLowerCase();
+            if (rawLower.includes('http.server') || rawLower.includes('simplehttpserver')) {
+                return true;
+            }
+        }
+        return false;
+    }
+}
+//# sourceMappingURL=command.js.map

package/dist/analyzers/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/analyzers/command.ts"],"names":[],"mappings":"AAeA;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACjB,UAAU,GAAG,SAAkB,CAAC;IAExB,EAAE,CAAyB;IAC3B,eAAe,CAAc;IAC7B,sBAAsB,CAAc;IACpC,uBAAuB,CAAc;IACrC,kBAAkB,CAAc;IAChC,kBAAkB,CAAc;IAChC,mBAAmB,CAAc;IAElD,YAAY,QAAgC;QAC1C,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC;QACnB,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,sBAAsB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QACpE,IAAI,CAAC,uBAAuB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,kBAAkB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC;QACxG,CAAC;QAED,MAAM,QAAQ,GAAsB,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,CAAC,SAAuC,EAAE,KAAa,EAAE,MAAc,EAAE,QAAiB,EAAE,EAAE;YACxG,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEpE,qEAAqE;QACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACtE,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,CAAC;YAC7G,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,uCAAuC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBACvF,MAAM;YACR,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,mCAAmC,OAAO,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC7E,MAAM;YACR,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,oDAAoD,EAAE,KAAK,CAAC,CAAC;QACrF,CAAC;QAED,qEAAqE;QACrE,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,iDAAiD,EAAE,KAAK,CAAC,CAAC;QACnF,CAAC;QAED,qEAAqE;QACrE,IAAI,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,8EAA8E,EAAE,KAAK,CAAC,CAAC;QAC/G,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAEvC,sEAAsE;YACtE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrF,qCAAqC;gBACrC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACjB,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;oBACvG,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAE3D,IAAI,YAAY,IAAI,eAAe,EAAE,CAAC;wBACpC,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,0CAA0C,EAAE,KAAK,CAAC,CAAC;oBAC3E,CAAC;yBAAM,IAAI,YAAY,EAAE,CAAC;wBACxB,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAC;oBAC1D,CAAC;yBAAM,CAAC;wBACN,kDAAkD;wBAClD,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,uBAAuB,EAAE,KAAK,CAAC,CAAC;oBACxD,CAAC;gBACH,CAAC;qBAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBACxB,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;wBAClC,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,0CAA0C,EAAE,KAAK,CAAC,CAAC;oBAC3E,CAAC;oBACD,0DAA0D;gBAC5D,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,wBAAwB,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YAED,8CAA8C;YAC9C,IAAI,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjD,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;wBACzC,iCAAiC;wBACjC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;4BACjC,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,kBAAkB,IAAI,cAAc,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;wBAC1E,CAAC;wBACD,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,uCAAuC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBACxF,MAAM;YACR,CAAC;QACH,CAAC;QACD,oDAAoD;QACpD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACrC,iCAAiC;gBACjC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC3D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;wBAC9C,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,GAAG,GAAG,mCAAmC,EAAE,KAAK,CAAC,CAAC;oBAC3E,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,MAAM,kBAAkB,GAAG;YACzB,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB;YAC9D,aAAa,EAAE,eAAe,EAAE,sBAAsB;YACtD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;YACtC,aAAa,EAAE,kBAAkB,EAAE,qBAAqB;YACxD,cAAc,EAAE,SAAS,EAAE,QAAQ;SACpC,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,+DAA+D;gBAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;oBAClC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;oBACpC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC/G,CAAC,CAAC,CAAC;gBACH,gDAAgD;gBAChD,MAAM,iBAAiB,GAAG,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC9D,IAAI,SAAS,IAAI,iBAAiB,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;oBAChG,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,wCAAwC,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC/E,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAEvC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACnB,yDAAyD;gBACzD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;gBAC1C,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACjI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC;wBACtD,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,QAAQ,MAAM,yCAAyC,EAAE,KAAK,CAAC,CAAC;oBACvF,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,QAAQ,MAAM,gCAAgC,EAAE,KAAK,CAAC,CAAC;oBAC9E,CAAC;gBACH,CAAC;qBAAM,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;oBACpD,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,QAAQ,MAAM,+BAA+B,EAAE,KAAK,CAAC,CAAC;gBAC7E,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,4BAA4B,EAAE,KAAK,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;iBAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC9C,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,4BAA4B,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;YACjE,CAAC;iBAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,yCAAyC,EAAE,KAAK,CAAC,CAAC;YACzE,CAAC;YAED,gDAAgD;YAChD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACpB,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7E,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC3D,IAAI,YAAY,IAAI,eAAe,EAAE,CAAC;oBACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;wBAC9D,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,mDAAmD,EAAE,KAAK,CAAC,CAAC;oBACnF,CAAC;gBACH,CAAC;qBAAM,IAAI,YAAY,EAAE,CAAC;oBACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;wBAC9D,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,8BAA8B,EAAE,KAAK,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,yDAAyD;oBACzD,4CAA4C;gBAC9C,CAAC;YACH,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,uBAAuB,EAAE,CAAC;YACtD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,sCAAsC,OAAO,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC9E,MAAM;YACR,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,OAAO,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,kCAAkC,EAAE,KAAK,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,4BAA4B,EAAE,KAAK,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,4CAA4C;QAC5C,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;YACvF,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,kCAAkC,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,oDAAoD,EAAE,KAAK,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,kDAAkD,EAAE,KAAK,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;QACvF,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC/F,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,gCAAgC,MAAM,iBAAiB,EAAE,KAAK,CAAC,CAAC;gBACtF,MAAM;YACR,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACzJ,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,qDAAqD,EAAE,KAAK,CAAC,CAAC;QACtF,CAAC;QAED,qEAAqE;QACrE,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,wCAAwC,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,qCAAqC,EAAE,KAAK,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;oBAClB,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,6CAA6C,EAAE,KAAK,CAAC,CAAC;gBAC7E,CAAC;qBAAM,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;oBAC1B,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,2BAA2B,EAAE,KAAK,CAAC,CAAC;gBAC3D,CAAC;qBAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;oBAClD,kDAAkD;gBACpD,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,iBAAiB,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACvD,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACxE,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACpB,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QACD,gCAAgC;QAChC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE,gDAAgD,EAAE,KAAK,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACpE,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC3E,KAAK,CAAC,QAAQ,CAAC,2BAA2B,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,mDAAmD;gBACnD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;oBAClF,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,6CAA6C,EAAE,KAAK,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,uDAAuD;YACvD,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAEnE,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7E,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;gBACxF,IAAI,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAClD,4DAA4D;oBAC5D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;wBAC9C,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,4BAA4B,GAAG,+BAA+B,EAAE,KAAK,CAAC,CAAC;oBAC/F,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,uEAAuE;IAEvE;;;OAGG;IACK,QAAQ,CAAC,KAAa;QAC5B,MAAM,QAAQ,GAAqB,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE9C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAElC,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;gBAClB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrB,GAAG,EAAE,OAAO;aACb,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAa;QACjC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAE1B,gBAAgB;YAChB,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3C,QAAQ,GAAG,CAAC,QAAQ,CAAC;gBACrB,OAAO,IAAI,EAAE,CAAC;gBACd,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3C,QAAQ,GAAG,CAAC,QAAQ,CAAC;gBACrB,OAAO,IAAI,EAAE,CAAC;gBACd,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACzC,UAAU,GAAG,CAAC,UAAU,CAAC;gBACzB,OAAO,IAAI,EAAE,CAAC;gBACd,SAAS;YACX,CAAC;YAED,kBAAkB;YAClB,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC1C,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBAC/C,UAAU,EAAE,CAAC;gBACf,CAAC;qBAAM,IAAI,EAAE,KAAK,GAAG,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;oBACxC,UAAU,EAAE,CAAC;gBACf,CAAC;YACH,CAAC;YAED,iDAAiD;YACjD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;gBAC9D,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACvB,OAAO,GAAG,EAAE,CAAC;oBACb,CAAC,EAAE,CAAC,CAAC,gBAAgB;oBACrB,SAAS;gBACX,CAAC;gBACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACvB,OAAO,GAAG,EAAE,CAAC;oBACb,CAAC,EAAE,CAAC,CAAC,gBAAgB;oBACrB,SAAS;gBACX,CAAC;gBACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBACf,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACvB,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS;gBACX,CAAC;gBACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBACf,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACvB,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS;gBACX,CAAC;YACH,CAAC;YAED,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,KAAa;QACnC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAEpB,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,QAAQ,GAAG,CAAC,QAAQ,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC5B,QAAQ,GAAG,CAAC,QAAQ,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,IAAI,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACpD,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1D,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACrB,OAAO,GAAG,EAAE,CAAC;gBACf,CAAC;gBACD,SAAS;YACX,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,uEAAuE;IAE/D,UAAU,CAAC,GAAW;QAC5B,yBAAyB;QACzB,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QACzE,kCAAkC;QAClC,IAAI,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5D,uBAAuB;QACvB,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,KAAa;QACpC,sBAAsB;QACtB,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3G,OAAO,IAAI,CAAC;QACd,CAAC;QACD,4BAA4B;QAC5B,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC/G,OAAO,IAAI,CAAC;QACd,CAAC;QACD,uBAAuB;QACvB,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,wBAAwB,CAAC,GAAW;QAC1C,iCAAiC;QACjC,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,IAAI,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,mBAAmB,CAAC,IAAc;QACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,aAAa;YAChD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,uCAAuC;YAC1F,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;gBAC7C,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;oBACrE,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,2BAA2B;YAC3B,IAAI,UAAU,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;QACtC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,GAAmB;QACtC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAErD,yDAAyD;QACzD,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5F,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACvC,IAAI,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC9E,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/analyzers/file-read.d.ts

@@ -0,0 +1,31 @@
+import type { FileReadPatternDatabase } from '@surfinguard/types';
+import type { Analyzer, AnalyzerResult } from './base.js';
+/**
+ * File Read Analyzer — sensitive file read detection.
+ *
+ * Detects 10 threat patterns (FR01-FR10) mapped to the EXFILTRATION primitive.
+ */
+export declare class FileReadAnalyzer implements Analyzer {
+    readonly actionType: "file_read";
+    private readonly db;
+    private readonly safePathPrefixes;
+    private readonly safeExtensions;
+    constructor(patterns: FileReadPatternDatabase);
+    analyze(value: string): AnalyzerResult;
+    /**
+     * Normalize path: expand ~ to /HOME/, resolve ..
+     */
+    private normalizePath;
+    /**
+     * Check if a path matches a safe path prefix or has a safe extension.
+     */
+    private isSafePath;
+    /**
+     * Match a path against a pattern entry based on matchType.
+     */
+    private matchPath;
+    private matchExtension;
+    private getExtension;
+    private getBasename;
+}
+//# sourceMappingURL=file-read.d.ts.map

package/dist/analyzers/file-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-read.d.ts","sourceRoot":"","sources":["../../src/analyzers/file-read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAA+C,MAAM,oBAAoB,CAAC;AAC/G,OAAO,KAAK,EAAE,QAAQ,EAAmB,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3E;;;;GAIG;AACH,qBAAa,gBAAiB,YAAW,QAAQ;IAC/C,QAAQ,CAAC,UAAU,EAAG,WAAW,CAAU;IAE3C,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA0B;IAC7C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAW;IAC5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAc;gBAEjC,QAAQ,EAAE,uBAAuB;IAM7C,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc;IA8DtC;;OAEG;IACH,OAAO,CAAC,aAAa;IAqBrB;;OAEG;IACH,OAAO,CAAC,UAAU;IA8BlB;;OAEG;IACH,OAAO,CAAC,SAAS;IAkBjB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,WAAW;CAIpB"}