@weave_protocol/mund 0.1.0

package/dist/tools/monitoring.js

@@ -0,0 +1,476 @@
+/**
+ * Mund - The Guardian Protocol
+ * Monitoring Tools - MCP tools for security monitoring
+ */
+import { z } from 'zod';
+import { v4 as uuidv4 } from 'uuid';
+import { createHash } from 'crypto';
+import { MAX_SNIPPET_LENGTH, DEFAULT_EVENTS_LIMIT, MAX_EVENTS_PER_QUERY } from '../constants.js';
+// ============================================================================
+// Input Schemas
+// ============================================================================
+const ScanContentInputSchema = z.object({
+    content: z.string()
+        .min(1, 'Content is required')
+        .max(1000000, 'Content exceeds maximum length')
+        .describe('The text/code content to scan for security issues'),
+    content_type: z.enum(['text', 'code', 'json', 'yaml'])
+        .default('text')
+        .describe('Type of content being scanned'),
+    tool_name: z.string().optional().describe('Name of the tool that generated this content'),
+    agent_id: z.string().optional().describe('ID of the agent making this request'),
+    session_id: z.string().optional().describe('Current session ID')
+}).strict();
+const CheckUrlInputSchema = z.object({
+    url: z.string()
+        .url('Invalid URL format')
+        .describe('URL to check for safety'),
+    tool_name: z.string().optional().describe('Name of the tool attempting to access this URL'),
+    agent_id: z.string().optional().describe('ID of the agent making this request')
+}).strict();
+const ValidateCommandInputSchema = z.object({
+    command: z.string()
+        .min(1, 'Command is required')
+        .describe('Shell command to validate'),
+    tool_name: z.string().optional().describe('Name of the tool executing this command'),
+    agent_id: z.string().optional().describe('ID of the agent making this request')
+}).strict();
+const GetEventsInputSchema = z.object({
+    limit: z.number().int().min(1).max(MAX_EVENTS_PER_QUERY).default(DEFAULT_EVENTS_LIMIT)
+        .describe('Maximum number of events to return'),
+    offset: z.number().int().min(0).default(0)
+        .describe('Number of events to skip for pagination'),
+    severity: z.enum(['critical', 'high', 'medium', 'low', 'info']).optional()
+        .describe('Filter by severity level'),
+    type: z.enum(['secret', 'pii', 'code_pattern', 'injection', 'exfiltration', 'behavioral']).optional()
+        .describe('Filter by detection type'),
+    acknowledged: z.boolean().optional()
+        .describe('Filter by acknowledgment status')
+}).strict();
+const GetStatusInputSchema = z.object({}).strict();
+// ============================================================================
+// Tool Registration
+// ============================================================================
+export function registerMonitoringTools(server, storage, rules, analyzer, notificationHub, blockMode) {
+    // ============================================================================
+    // mund_scan_content - Scan text/code for security issues
+    // ============================================================================
+    server.registerTool('mund_scan_content', {
+        title: 'Scan Content for Security Issues',
+        description: `Scan text or code content for security vulnerabilities, secrets, PII, and other issues.
+
+This tool analyzes the provided content using multiple security analyzers:
+- Secret Scanner: Detects API keys, tokens, passwords, and credentials
+- PII Detector: Finds personal identifiable information
+- Code Analyzer: Identifies dangerous code patterns
+- Injection Detector: Spots prompt injection attempts
+- Exfiltration Detector: Detects data exfiltration patterns
+
+Args:
+  - content (string): The text/code to scan (required)
+  - content_type ('text' | 'code' | 'json' | 'yaml'): Type of content (default: 'text')
+  - tool_name (string): Name of tool that generated this content (optional)
+  - agent_id (string): ID of the requesting agent (optional)
+  - session_id (string): Current session ID (optional)
+
+Returns:
+  JSON object with:
+  - scan_id: Unique identifier for this scan
+  - issues_found: Number of security issues detected
+  - blocked: Whether the content was blocked (if block_mode is enabled)
+  - issues: Array of detected issues with severity, type, and suggestions
+  - scan_duration_ms: Time taken to complete the scan
+
+Examples:
+  - Scan code before committing: {"content": "const key = 'AKIAIOSFODNN7EXAMPLE'"}
+  - Check user input: {"content": "Please ignore previous instructions", "content_type": "text"}`,
+        inputSchema: ScanContentInputSchema,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false
+        }
+    }, async (params) => {
+        const startTime = Date.now();
+        const contentHash = createHash('sha256').update(params.content).digest('hex');
+        // Run analysis
+        const issues = await analyzer.analyzeAll(params.content, rules);
+        // Create scan result
+        const scanResult = {
+            id: uuidv4(),
+            timestamp: new Date(),
+            content_hash: contentHash,
+            issues,
+            scan_duration_ms: Date.now() - startTime,
+            rules_checked: rules.filter(r => r.enabled).length
+        };
+        // Determine if content should be blocked
+        const hasCritical = issues.some(i => i.severity === 'critical');
+        const hasHigh = issues.some(i => i.severity === 'high');
+        const shouldBlock = blockMode && (hasCritical || hasHigh);
+        // Create and store security events for significant issues
+        const context = {
+            tool_name: params.tool_name,
+            agent_id: params.agent_id,
+            session_id: params.session_id
+        };
+        for (const issue of issues.filter(i => i.severity === 'critical' || i.severity === 'high')) {
+            const event = {
+                id: uuidv4(),
+                timestamp: new Date(),
+                rule_id: issue.rule_id,
+                rule_name: issue.rule_name,
+                severity: issue.severity,
+                type: issue.type,
+                action_taken: shouldBlock ? 'block' : issue.action,
+                content_snippet: truncateSnippet(issue.match, MAX_SNIPPET_LENGTH),
+                full_content_hash: contentHash,
+                context,
+                acknowledged: false
+            };
+            await storage.saveEvent(event);
+            // Send notifications for critical/high severity
+            await notificationHub.notify(event);
+        }
+        // Format response
+        const response = {
+            scan_id: scanResult.id,
+            issues_found: issues.length,
+            blocked: shouldBlock,
+            issues: issues.map(i => ({
+                rule_id: i.rule_id,
+                rule_name: i.rule_name,
+                severity: i.severity,
+                type: i.type,
+                match: i.match,
+                location: i.location,
+                suggestion: i.suggestion
+            })),
+            scan_duration_ms: scanResult.scan_duration_ms,
+            rules_checked: scanResult.rules_checked
+        };
+        return {
+            content: [{ type: 'text', text: JSON.stringify(response, null, 2) }],
+            structuredContent: response
+        };
+    });
+    // ============================================================================
+    // mund_check_url - Validate URL safety
+    // ============================================================================
+    server.registerTool('mund_check_url', {
+        title: 'Check URL Safety',
+        description: `Check if a URL is safe to access.
+
+Validates URLs against known dangerous patterns including:
+- Data exfiltration services (webhook.site, requestbin, etc.)
+- IP-based URLs (often used to bypass domain filtering)
+- Suspicious TLDs (.tk, .ml, etc.)
+- Data URLs (can contain arbitrary content)
+
+Args:
+  - url (string): The URL to check (required)
+  - tool_name (string): Name of tool attempting access (optional)
+  - agent_id (string): ID of requesting agent (optional)
+
+Returns:
+  JSON object with:
+  - url: The checked URL
+  - safe: Boolean indicating if URL is safe
+  - risk_level: 'safe' | 'suspicious' | 'dangerous'
+  - warnings: Array of warning messages if any
+  - blocked: Whether access was blocked`,
+        inputSchema: CheckUrlInputSchema,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false
+        }
+    }, async (params) => {
+        const warnings = [];
+        let riskLevel = 'safe';
+        // Check against dangerous URL patterns
+        const { DANGEROUS_URL_PATTERNS } = await import('../constants.js');
+        for (const pattern of DANGEROUS_URL_PATTERNS) {
+            if (pattern.test(params.url)) {
+                riskLevel = 'dangerous';
+                warnings.push('URL matches known dangerous pattern');
+                break;
+            }
+        }
+        // Check for IP-based URLs
+        if (/^https?:\/\/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/.test(params.url)) {
+            if (riskLevel === 'safe')
+                riskLevel = 'suspicious';
+            warnings.push('IP-based URL detected');
+        }
+        // Check for data URLs
+        if (params.url.startsWith('data:')) {
+            riskLevel = 'dangerous';
+            warnings.push('Data URL can contain arbitrary content');
+        }
+        // Check for suspicious ports
+        try {
+            const urlObj = new URL(params.url);
+            const port = urlObj.port;
+            if (port && !['80', '443', '8080', '8443'].includes(port)) {
+                if (riskLevel === 'safe')
+                    riskLevel = 'suspicious';
+                warnings.push(`Unusual port: ${port}`);
+            }
+        }
+        catch {
+            riskLevel = 'dangerous';
+            warnings.push('Invalid URL format');
+        }
+        const isSafe = riskLevel === 'safe';
+        const shouldBlock = blockMode && riskLevel === 'dangerous';
+        // Log event if dangerous
+        if (riskLevel === 'dangerous') {
+            const event = {
+                id: uuidv4(),
+                timestamp: new Date(),
+                rule_id: 'url_check',
+                rule_name: 'Dangerous URL Detected',
+                severity: 'high',
+                type: 'exfiltration',
+                action_taken: shouldBlock ? 'block' : 'alert',
+                content_snippet: truncateSnippet(params.url, MAX_SNIPPET_LENGTH),
+                full_content_hash: createHash('sha256').update(params.url).digest('hex'),
+                context: { tool_name: params.tool_name, agent_id: params.agent_id },
+                acknowledged: false
+            };
+            await storage.saveEvent(event);
+            await notificationHub.notify(event);
+        }
+        const response = {
+            url: params.url,
+            safe: isSafe,
+            risk_level: riskLevel,
+            warnings,
+            blocked: shouldBlock
+        };
+        return {
+            content: [{ type: 'text', text: JSON.stringify(response, null, 2) }],
+            structuredContent: response
+        };
+    });
+    // ============================================================================
+    // mund_validate_command - Check shell command safety
+    // ============================================================================
+    server.registerTool('mund_validate_command', {
+        title: 'Validate Shell Command',
+        description: `Validate a shell command for safety before execution.
+
+Checks for dangerous patterns including:
+- Destructive commands (rm -rf, format, etc.)
+- Privilege escalation (sudo, chmod 777, etc.)
+- Network exfiltration (curl to suspicious URLs, etc.)
+- Code injection (eval, exec with variables, etc.)
+
+Args:
+  - command (string): Shell command to validate (required)
+  - tool_name (string): Name of tool executing command (optional)
+  - agent_id (string): ID of requesting agent (optional)
+
+Returns:
+  JSON object with:
+  - command: The validated command
+  - safe: Boolean indicating if command is safe
+  - risk_level: 'safe' | 'suspicious' | 'dangerous'
+  - warnings: Array of warning messages
+  - blocked: Whether execution was blocked`,
+        inputSchema: ValidateCommandInputSchema,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false
+        }
+    }, async (params) => {
+        const warnings = [];
+        let riskLevel = 'safe';
+        // Dangerous command patterns
+        const dangerousPatterns = [
+            { pattern: /rm\s+-[rf]{1,2}\s+[\/~]/, message: 'Recursive deletion of root/home directory' },
+            { pattern: /mkfs\./, message: 'Filesystem format command' },
+            { pattern: /dd\s+if=.*of=\/dev\//, message: 'Direct disk write' },
+            { pattern: />\s*\/dev\/sd[a-z]/, message: 'Direct device write' },
+            { pattern: /chmod\s+777/, message: 'Overly permissive chmod' },
+            { pattern: /curl.*\|\s*(ba)?sh/, message: 'Piping curl to shell' },
+            { pattern: /wget.*\|\s*(ba)?sh/, message: 'Piping wget to shell' },
+            { pattern: /eval\s+"?\$/, message: 'Eval with variable' },
+            { pattern: /:(){ :|:& };:/, message: 'Fork bomb detected' },
+        ];
+        for (const { pattern, message } of dangerousPatterns) {
+            if (pattern.test(params.command)) {
+                riskLevel = 'dangerous';
+                warnings.push(message);
+            }
+        }
+        // Suspicious patterns
+        const suspiciousPatterns = [
+            { pattern: /sudo\s/, message: 'Sudo usage' },
+            { pattern: />\s*\/etc\//, message: 'Writing to /etc' },
+            { pattern: /curl|wget/, message: 'Network download command' },
+            { pattern: /nc\s+-/, message: 'Netcat usage' },
+            { pattern: /base64\s+-d/, message: 'Base64 decoding' },
+        ];
+        for (const { pattern, message } of suspiciousPatterns) {
+            if (pattern.test(params.command) && riskLevel === 'safe') {
+                riskLevel = 'suspicious';
+                warnings.push(message);
+            }
+        }
+        const isSafe = riskLevel === 'safe';
+        const shouldBlock = blockMode && riskLevel === 'dangerous';
+        // Log event if dangerous
+        if (riskLevel === 'dangerous') {
+            const event = {
+                id: uuidv4(),
+                timestamp: new Date(),
+                rule_id: 'command_check',
+                rule_name: 'Dangerous Command Detected',
+                severity: 'high',
+                type: 'code_pattern',
+                action_taken: shouldBlock ? 'block' : 'alert',
+                content_snippet: truncateSnippet(params.command, MAX_SNIPPET_LENGTH),
+                full_content_hash: createHash('sha256').update(params.command).digest('hex'),
+                context: { tool_name: params.tool_name, agent_id: params.agent_id },
+                acknowledged: false
+            };
+            await storage.saveEvent(event);
+            await notificationHub.notify(event);
+        }
+        const response = {
+            command: params.command,
+            safe: isSafe,
+            risk_level: riskLevel,
+            warnings,
+            blocked: shouldBlock
+        };
+        return {
+            content: [{ type: 'text', text: JSON.stringify(response, null, 2) }],
+            structuredContent: response
+        };
+    });
+    // ============================================================================
+    // mund_get_events - Retrieve recent security events
+    // ============================================================================
+    server.registerTool('mund_get_events', {
+        title: 'Get Security Events',
+        description: `Retrieve recent security events from the Mund monitoring system.
+
+Supports filtering and pagination for efficient event retrieval.
+
+Args:
+  - limit (number): Maximum events to return, 1-1000 (default: 50)
+  - offset (number): Skip this many events for pagination (default: 0)
+  - severity ('critical' | 'high' | 'medium' | 'low' | 'info'): Filter by severity
+  - type: Filter by detection type
+  - acknowledged (boolean): Filter by acknowledgment status
+
+Returns:
+  JSON object with:
+  - total: Total matching events
+  - count: Events in this response
+  - offset: Current offset
+  - has_more: Whether more events exist
+  - events: Array of security events`,
+        inputSchema: GetEventsInputSchema,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false
+        }
+    }, async (params) => {
+        const query = {
+            limit: params.limit,
+            offset: params.offset,
+            severity: params.severity,
+            type: params.type,
+            acknowledged: params.acknowledged
+        };
+        const [events, total] = await Promise.all([
+            storage.getEvents(query),
+            storage.countEvents(query)
+        ]);
+        const response = {
+            total,
+            count: events.length,
+            offset: params.offset,
+            has_more: total > params.offset + events.length,
+            events: events.map(e => ({
+                id: e.id,
+                timestamp: e.timestamp.toISOString(),
+                rule_id: e.rule_id,
+                rule_name: e.rule_name,
+                severity: e.severity,
+                type: e.type,
+                action_taken: e.action_taken,
+                content_snippet: e.content_snippet,
+                context: e.context,
+                acknowledged: e.acknowledged,
+                acknowledged_by: e.acknowledged_by,
+                acknowledged_at: e.acknowledged_at?.toISOString()
+            }))
+        };
+        return {
+            content: [{ type: 'text', text: JSON.stringify(response, null, 2) }],
+            structuredContent: response
+        };
+    });
+    // ============================================================================
+    // mund_get_status - Get current monitoring status
+    // ============================================================================
+    server.registerTool('mund_get_status', {
+        title: 'Get Monitoring Status',
+        description: `Get the current status of the Mund monitoring system.
+
+Returns information about:
+- Active analyzers and their status
+- Number of rules loaded
+- Configured notification channels
+- Block mode status
+- Recent event statistics`,
+        inputSchema: GetStatusInputSchema,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false
+        }
+    }, async () => {
+        const eventCounts = {
+            total: await storage.countEvents({}),
+            unacknowledged: await storage.countEvents({ acknowledged: false }),
+            critical: await storage.countEvents({ severity: 'critical' }),
+            high: await storage.countEvents({ severity: 'high' })
+        };
+        const response = {
+            status: 'active',
+            version: '0.1.0',
+            block_mode: blockMode,
+            analyzers: analyzer.getAnalyzerNames(),
+            rules_loaded: rules.filter(r => r.enabled).length,
+            notifiers: notificationHub.getNotifierNames(),
+            event_counts: eventCounts,
+            timestamp: new Date().toISOString()
+        };
+        return {
+            content: [{ type: 'text', text: JSON.stringify(response, null, 2) }],
+            structuredContent: response
+        };
+    });
+}
+// ============================================================================
+// Helper Functions
+// ============================================================================
+function truncateSnippet(text, maxLength) {
+    if (text.length <= maxLength)
+        return text;
+    return text.substring(0, maxLength - 3) + '...';
+}
+//# sourceMappingURL=monitoring.js.map

package/dist/tools/monitoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"monitoring.js","sourceRoot":"","sources":["../../src/tools/monitoring.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAapC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEjG,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;SAChB,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;SAC7B,GAAG,CAAC,OAAO,EAAE,gCAAgC,CAAC;SAC9C,QAAQ,CAAC,mDAAmD,CAAC;IAChE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;SACnD,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,+BAA+B,CAAC;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACzF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC/E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;CACjE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;SACZ,GAAG,CAAC,oBAAoB,CAAC;SACzB,QAAQ,CAAC,yBAAyB,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IAC3F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CAChF,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;SAChB,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;SAC7B,QAAQ,CAAC,2BAA2B,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACpF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CAChF,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;SACnF,QAAQ,CAAC,oCAAoC,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;SACvC,QAAQ,CAAC,yCAAyC,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;SACvE,QAAQ,CAAC,0BAA0B,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;SAClG,QAAQ,CAAC,0BAA0B,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SACjC,QAAQ,CAAC,iCAAiC,CAAC;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEnD,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,UAAU,uBAAuB,CACrC,MAAiB,EACjB,OAAiB,EACjB,KAAsB,EACtB,QAAwB,EACxB,eAAgC,EAChC,SAAkB;IAGlB,+EAA+E;IAC/E,yDAAyD;IACzD,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;iGA0B8E;QAC3F,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE9E,eAAe;QACf,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEhE,qBAAqB;QACrB,MAAM,UAAU,GAAe;YAC7B,EAAE,EAAE,MAAM,EAAE;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,YAAY,EAAE,WAAW;YACzB,MAAM;YACN,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACxC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;SACnD,CAAC;QAEF,yCAAyC;QACzC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,SAAS,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC;QAE1D,0DAA0D;QAC1D,MAAM,OAAO,GAAiB;YAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;YAC3F,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,MAAM,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAoB;gBACpC,IAAI,EAAE,KAAK,CAAC,IAAoB;gBAChC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;gBAClD,eAAe,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,kBAAkB,CAAC;gBACjE,iBAAiB,EAAE,WAAW;gBAC9B,OAAO;gBACP,YAAY,EAAE,KAAK;aACpB,CAAC;YAEF,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAE/B,gDAAgD;YAChD,MAAM,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QAED,kBAAkB;QAClB,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,UAAU,CAAC,EAAE;YACtB,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACvB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC;YACH,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;YAC7C,aAAa,EAAE,UAAU,CAAC,aAAa;SACxC,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACpE,iBAAiB,EAAE,QAAQ;SAC5B,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,+EAA+E;IAC/E,uCAAuC;IACvC,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE;;;;;;;;;;;;;;;;;;;wCAmBqB;QAClC,WAAW,EAAE,mBAAmB;QAChC,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,SAAS,GAAwC,MAAM,CAAC;QAE5D,uCAAuC;QACvC,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAEnE,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,SAAS,GAAG,WAAW,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;gBACrD,MAAM;YACR,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,gDAAgD,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtE,IAAI,SAAS,KAAK,MAAM;gBAAE,SAAS,GAAG,YAAY,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACzC,CAAC;QAED,sBAAsB;QACtB,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,SAAS,GAAG,WAAW,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC1D,CAAC;QAED,6BAA6B;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACzB,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1D,IAAI,SAAS,KAAK,MAAM;oBAAE,SAAS,GAAG,YAAY,CAAC;gBACnD,QAAQ,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,WAAW,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,KAAK,MAAM,CAAC;QACpC,MAAM,WAAW,GAAG,SAAS,IAAI,SAAS,KAAK,WAAW,CAAC;QAE3D,yBAAyB;QACzB,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,MAAM,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,wBAAwB;gBACnC,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,cAAc;gBACpB,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;gBAC7C,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,kBAAkB,CAAC;gBAChE,iBAAiB,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACxE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACnE,YAAY,EAAE,KAAK;aACpB,CAAC;YAEF,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,QAAQ,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,SAAS;YACrB,QAAQ;YACR,OAAO,EAAE,WAAW;SACrB,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACpE,iBAAiB,EAAE,QAAQ;SAC5B,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,+EAA+E;IAC/E,qDAAqD;IACrD,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE;;;;;;;;;;;;;;;;;;;2CAmBwB;QACrC,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,SAAS,GAAwC,MAAM,CAAC;QAE5D,6BAA6B;QAC7B,MAAM,iBAAiB,GAAG;YACxB,EAAE,OAAO,EAAE,yBAAyB,EAAE,OAAO,EAAE,2CAA2C,EAAE;YAC5F,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,2BAA2B,EAAE;YAC3D,EAAE,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,mBAAmB,EAAE;YACjE,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,qBAAqB,EAAE;YACjE,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB,EAAE;YAC9D,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,sBAAsB,EAAE;YAClE,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,sBAAsB,EAAE;YAClE,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,EAAE;YACzD,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,oBAAoB,EAAE;SAC5D,CAAC;QAEF,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,iBAAiB,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,SAAS,GAAG,WAAW,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,MAAM,kBAAkB,GAAG;YACzB,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;YAC5C,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE;YACtD,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,0BAA0B,EAAE;YAC7D,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;YAC9C,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE;SACvD,CAAC;QAEF,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,kBAAkB,EAAE,CAAC;YACtD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;gBACzD,SAAS,GAAG,YAAY,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,KAAK,MAAM,CAAC;QACpC,MAAM,WAAW,GAAG,SAAS,IAAI,SAAS,KAAK,WAAW,CAAC;QAE3D,yBAAyB;QACzB,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAkB;gBAC3B,EAAE,EAAE,MAAM,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,OAAO,EAAE,eAAe;gBACxB,SAAS,EAAE,4BAA4B;gBACvC,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,cAAc;gBACpB,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;gBAC7C,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,CAAC;gBACpE,iBAAiB,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC5E,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACnE,YAAY,EAAE,KAAK;aACpB,CAAC;YAEF,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,SAAS;YACrB,QAAQ;YACR,OAAO,EAAE,WAAW;SACrB,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACpE,iBAAiB,EAAE,QAAQ;SAC5B,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,+EAA+E;IAC/E,oDAAoD;IACpD,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE;;;;;;;;;;;;;;;;;qCAiBkB;QAC/B,WAAW,EAAE,oBAAoB;QACjC,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,KAAK,GAAG;YACZ,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAgC;YACjD,IAAI,EAAE,MAAM,CAAC,IAAgC;YAC7C,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QAEF,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;YACxB,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;SAC3B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG;YACf,KAAK;YACL,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;YAC/C,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACvB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;gBACpC,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,WAAW,EAAE;aAClD,CAAC,CAAC;SACJ,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACpE,iBAAiB,EAAE,QAAQ;SAC5B,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,+EAA+E;IAC/E,kDAAkD;IAClD,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE;;;;;;;0BAOO;QACpB,WAAW,EAAE,oBAAoB;QACjC,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;KACF,EACD,KAAK,IAAI,EAAE;QACT,MAAM,WAAW,GAAG;YAClB,KAAK,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,cAAc,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YAClE,QAAQ,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,UAAsB,EAAE,CAAC;YACzE,IAAI,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,MAAkB,EAAE,CAAC;SAClE,CAAC;QAEF,MAAM,QAAQ,GAAG;YACf,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,QAAQ,CAAC,gBAAgB,EAAE;YACtC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;YACjD,SAAS,EAAE,eAAe,CAAC,gBAAgB,EAAE;YAC7C,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACpE,iBAAiB,EAAE,QAAQ;SAC5B,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,SAAS,eAAe,CAAC,IAAY,EAAE,SAAiB;IACtD,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;AAClD,CAAC"}