bla-agents 1.1.0 → 1.6.0

package/dist/shields/formats/android-dex-xref.js

@@ -0,0 +1,427 @@
+/**
+ * Counter REA #8154 — `feat(android): trace callers of external DEX methods`.
+ *
+ * REA's JADX bridge (`ReaJadxBridge.java`) walks every method body for
+ * `INVOKE_*` opcodes targeting an exact external class/method, then budgets
+ * the resulting prototype + caller inventories against
+ * `MAX_EXTERNAL_XREF_BYTES = (8 MiB - 1 KiB) / 8` (≈ 1_048_448 bytes).
+ *
+ * This module emits a standalone, byte-valid Dalvik Executable (`dex\n035\0`)
+ * whose only purpose is to saturate that budget:
+ *   - One external target: `android.util.Log.d(String, String)` (no class_def).
+ *   - N decoy caller classes, each with a static `bait()` that contains a real
+ *     `invoke-static` to that target — so JADX's instruction visitor sees them.
+ *
+ * The developer's own `classes.dex` is NEVER rewritten by this generator; the
+ * decoy is planted as an additional `classesN.dex` multidex member (see
+ * `archive.ts`). Header checksum / signature / file_size are recomputed so
+ * any tool that validates the DEX container still accepts it.
+ */
+import { createHash } from "node:crypto";
+import { REA_INTERNAL_LIMITS } from "../../identity.js";
+import { buildCanaryAndDiagnosticPayloads } from "../deception/format-payloads.js";
+function encodeUleb128(value) {
+    const bytes = [];
+    let v = value >>> 0;
+    do {
+        let byte = v & 0x7f;
+        v >>>= 7;
+        if (v !== 0)
+            byte |= 0x80;
+        bytes.push(byte);
+    } while (v !== 0);
+    return Buffer.from(bytes);
+}
+function align4(n) {
+    return (n + 3) & ~3;
+}
+function intensityCallerCount(intensity) {
+    // Escaped JSON per caller row is hundreds of bytes under InvokeBudget's
+    // 12× character bound. Aim past ANDROID_EXTERNAL_XREF_BYTES at maximum /
+    // bankrupt; keep stealth/balanced smaller but still meaningful.
+    switch (intensity) {
+        case "stealth":
+            return 96;
+        case "balanced":
+            return 384;
+        case "maximum":
+            return 2_048;
+        case "bankrupt":
+            return 6_144;
+        default:
+            return 384;
+    }
+}
+/**
+ * Build a minimal but structurally valid DEX 035 containing `callerCount`
+ * static caller classes that each `invoke-static` `Landroid/util/Log;->d`.
+ */
+function buildExternalInvokeDex(prng, callerCount, extraStrings) {
+    const marker = "BLA-DEX-XREF-V1";
+    // ----- string pool (order matters; indices are referenced below) -----
+    const strings = [];
+    const strIndex = new Map();
+    const addStr = (s) => {
+        const existing = strIndex.get(s);
+        if (existing !== undefined)
+            return existing;
+        const idx = strings.length;
+        strings.push(s);
+        strIndex.set(s, idx);
+        return idx;
+    };
+    // Fixed descriptor / name strings used by the external target + callers.
+    const sVoid = addStr("V");
+    const sObject = addStr("Ljava/lang/Object;");
+    const sString = addStr("Ljava/lang/String;");
+    const sLog = addStr("Landroid/util/Log;");
+    const sShortyLogD = addStr("VLL"); // return V, two reference args
+    const sShortyVoid = addStr("V");
+    const sMethodD = addStr("d");
+    const sMethodBait = addStr("bait");
+    const sMarker = addStr(marker);
+    const sSource = addStr("BlaDexXref.java");
+    const callerTypeStrIdx = [];
+    for (let i = 0; i < callerCount; i++) {
+        const hex = prng.hex(6);
+        callerTypeStrIdx.push(addStr(`Lcom/enclave/xref/ExternalInvokeCaller_${hex}_${i};`));
+    }
+    for (const extra of extraStrings) {
+        // DEX MUTF-8 string_data cannot contain U+0000; keep payloads clean.
+        addStr(extra.replace(/\0/g, " ").slice(0, 200));
+    }
+    // ----- type_ids (index into string_ids) -----
+    const types = [];
+    const typeIndex = new Map(); // stringIdx -> typeIdx
+    const addType = (stringIdx) => {
+        const existing = typeIndex.get(stringIdx);
+        if (existing !== undefined)
+            return existing;
+        const idx = types.length;
+        types.push(stringIdx);
+        typeIndex.set(stringIdx, idx);
+        return idx;
+    };
+    const tVoid = addType(sVoid);
+    const tObject = addType(sObject);
+    const tString = addType(sString);
+    const tLog = addType(sLog);
+    const callerTypeIdx = callerTypeStrIdx.map((si) => addType(si));
+    void tVoid; // referenced via proto return; kept for clarity
+    const protos = [
+        { shortyIdx: sShortyLogD, returnTypeIdx: tVoid, paramTypeIdxs: [tString, tString] },
+        { shortyIdx: sShortyVoid, returnTypeIdx: tVoid, paramTypeIdxs: [] },
+    ];
+    const methods = [
+        { classIdx: tLog, protoIdx: 0, nameIdx: sMethodD },
+    ];
+    for (let i = 0; i < callerCount; i++) {
+        methods.push({
+            classIdx: callerTypeIdx[i],
+            protoIdx: 1,
+            nameIdx: sMethodBait,
+        });
+    }
+    // ----- Lay out the data section -----
+    // We'll assemble: string_data → type_list(s) → code_item(s) → class_data →
+    // map_list. Offsets are relative to start of file; header + id tables come
+    // first so we compute their size up front.
+    const headerSize = 0x70;
+    const stringIdsSize = strings.length * 4;
+    const typeIdsSize = types.length * 4;
+    const protoIdsSize = protos.length * 12;
+    const fieldIdsSize = 0;
+    const methodIdsSize = methods.length * 8;
+    const classDefsSize = callerCount * 32;
+    const idsEnd = headerSize +
+        stringIdsSize +
+        typeIdsSize +
+        protoIdsSize +
+        fieldIdsSize +
+        methodIdsSize +
+        classDefsSize;
+    let dataCursor = idsEnd;
+    const dataChunks = [];
+    const place = (buf, align = false) => {
+        if (align) {
+            const padded = align4(dataCursor) - dataCursor;
+            if (padded > 0) {
+                dataChunks.push({ offset: dataCursor, buf: Buffer.alloc(padded, 0) });
+                dataCursor += padded;
+            }
+        }
+        const off = dataCursor;
+        dataChunks.push({ offset: off, buf });
+        dataCursor += buf.length;
+        return off;
+    };
+    // string_data_item[] — MUTF-8 with uleb128 utf16_size prefix + NUL
+    const stringDataOffs = [];
+    for (const s of strings) {
+        const utf8 = Buffer.from(s, "utf8");
+        // Approximate utf16 length as utf8 length for ASCII-heavy payloads (our
+        // strings are ASCII). Canary payloads may contain non-BMP rarely; DEX
+        // requires modified UTF-8 — for BMP-only JS strings, utf16_size === code units.
+        let utf16Size = 0;
+        for (const ch of s) {
+            const cp = ch.codePointAt(0);
+            utf16Size += cp > 0xffff ? 2 : 1;
+        }
+        const item = Buffer.concat([encodeUleb128(utf16Size), utf8, Buffer.from([0])]);
+        stringDataOffs.push(place(item));
+    }
+    // type_list for Log.d params (String, String) — size uint32 + type_idx[] uint16, align 4
+    let logParamListOff = 0;
+    {
+        const paramBuf = Buffer.alloc(4 + 2 * 2);
+        paramBuf.writeUInt32LE(2, 0);
+        paramBuf.writeUInt16LE(tString, 4);
+        paramBuf.writeUInt16LE(tString, 6);
+        logParamListOff = place(paramBuf, true);
+    }
+    const protoParamOffs = [logParamListOff, 0];
+    // code_item for bait(): invoke-static {v0,v1}, Log.d ; return-void
+    // Format 35c invoke-static: op=0x71, A=2 args, method_idx=0, regs C=0 D=1
+    const insnBytes = Buffer.from([
+        0x71, 0x20, 0x00, 0x00, 0x10, 0x00, // invoke-static {v0, v1}, method@0 (Log.d)
+        0x0e, 0x00, // return-void
+    ]);
+    const codeItemSize = 16 + insnBytes.length; // header 16 + 8 insn bytes
+    const codeItemTemplate = Buffer.alloc(codeItemSize);
+    codeItemTemplate.writeUInt16LE(2, 0); // registers_size
+    codeItemTemplate.writeUInt16LE(0, 2); // ins_size
+    codeItemTemplate.writeUInt16LE(2, 4); // outs_size
+    codeItemTemplate.writeUInt16LE(0, 6); // tries_size
+    codeItemTemplate.writeUInt32LE(0, 8); // debug_info_off
+    codeItemTemplate.writeUInt32LE(insnBytes.length / 2, 12); // insns_size (code units)
+    insnBytes.copy(codeItemTemplate, 16);
+    // Each caller gets its own code_item (identical body; unique off required by class_data)
+    const codeOffs = [];
+    for (let i = 0; i < callerCount; i++) {
+        codeOffs.push(place(Buffer.from(codeItemTemplate), true));
+    }
+    // class_data_item per caller: 0 static fields, 0 instance, 1 direct method, 0 virtual
+    const classDataOffs = [];
+    for (let i = 0; i < callerCount; i++) {
+        // method_idx_diff: methods[0] is Log.d; Caller_i.bait is methods[1+i]
+        // First direct method diff = (1+i) - 0 = 1+i
+        const methodIdxDiff = 1 + i;
+        const accessFlags = 0x0009; // public static
+        const parts = Buffer.concat([
+            encodeUleb128(0), // static_fields_size
+            encodeUleb128(0), // instance_fields_size
+            encodeUleb128(1), // direct_methods_size
+            encodeUleb128(0), // virtual_methods_size
+            encodeUleb128(methodIdxDiff),
+            encodeUleb128(accessFlags),
+            encodeUleb128(codeOffs[i]),
+        ]);
+        classDataOffs.push(place(parts));
+    }
+    // map_list — required; list every section
+    // We'll finalize map after we know map's own offset.
+    const mapStart = align4(dataCursor);
+    if (mapStart !== dataCursor) {
+        place(Buffer.alloc(mapStart - dataCursor, 0));
+    }
+    // map entries (type, unused, size, offset) — 12 bytes each, plus uint32 size header
+    // Types from dalvik docs:
+    const TYPE_HEADER_ITEM = 0x0000;
+    const TYPE_STRING_ID_ITEM = 0x0001;
+    const TYPE_TYPE_ID_ITEM = 0x0002;
+    const TYPE_PROTO_ID_ITEM = 0x0003;
+    const TYPE_METHOD_ID_ITEM = 0x0005;
+    const TYPE_CLASS_DEF_ITEM = 0x0006;
+    const TYPE_CODE_ITEM = 0x2001;
+    const TYPE_STRING_DATA_ITEM = 0x2002;
+    const TYPE_TYPE_LIST = 0x1001;
+    const TYPE_CLASS_DATA_ITEM = 0x2000;
+    const TYPE_MAP_LIST = 0x1000;
+    const mapEntries = [
+        { type: TYPE_HEADER_ITEM, size: 1, offset: 0 },
+        { type: TYPE_STRING_ID_ITEM, size: strings.length, offset: headerSize },
+        {
+            type: TYPE_TYPE_ID_ITEM,
+            size: types.length,
+            offset: headerSize + stringIdsSize,
+        },
+        {
+            type: TYPE_PROTO_ID_ITEM,
+            size: protos.length,
+            offset: headerSize + stringIdsSize + typeIdsSize,
+        },
+        {
+            type: TYPE_METHOD_ID_ITEM,
+            size: methods.length,
+            offset: headerSize + stringIdsSize + typeIdsSize + protoIdsSize + fieldIdsSize,
+        },
+        {
+            type: TYPE_CLASS_DEF_ITEM,
+            size: callerCount,
+            offset: headerSize +
+                stringIdsSize +
+                typeIdsSize +
+                protoIdsSize +
+                fieldIdsSize +
+                methodIdsSize,
+        },
+        { type: TYPE_TYPE_LIST, size: 1, offset: logParamListOff },
+        {
+            type: TYPE_CODE_ITEM,
+            size: callerCount,
+            offset: codeOffs[0],
+        },
+        {
+            type: TYPE_STRING_DATA_ITEM,
+            size: strings.length,
+            offset: stringDataOffs[0],
+        },
+        {
+            type: TYPE_CLASS_DATA_ITEM,
+            size: callerCount,
+            offset: classDataOffs[0],
+        },
+    ];
+    const mapListSize = 4 + (mapEntries.length + 1) * 12; // +1 for MAP_LIST itself
+    const mapOff = dataCursor;
+    const mapBuf = Buffer.alloc(mapListSize);
+    mapBuf.writeUInt32LE(mapEntries.length + 1, 0);
+    let mapAt = 4;
+    for (const e of mapEntries) {
+        mapBuf.writeUInt16LE(e.type, mapAt);
+        mapBuf.writeUInt16LE(0, mapAt + 2);
+        mapBuf.writeUInt32LE(e.size, mapAt + 4);
+        mapBuf.writeUInt32LE(e.offset, mapAt + 8);
+        mapAt += 12;
+    }
+    // Self entry
+    mapBuf.writeUInt16LE(TYPE_MAP_LIST, mapAt);
+    mapBuf.writeUInt16LE(0, mapAt + 2);
+    mapBuf.writeUInt32LE(1, mapAt + 4);
+    mapBuf.writeUInt32LE(mapOff, mapAt + 8);
+    place(mapBuf);
+    const fileSize = dataCursor;
+    // ----- Write the full file -----
+    const out = Buffer.alloc(fileSize, 0);
+    // header
+    out.write("dex\n035\0", 0, "ascii");
+    // checksum + signature filled later
+    out.writeUInt32LE(fileSize, 32);
+    out.writeUInt32LE(headerSize, 36);
+    out.writeUInt32LE(0x12345678, 40); // endian_tag
+    out.writeUInt32LE(0, 44); // link_size
+    out.writeUInt32LE(0, 48); // link_off
+    out.writeUInt32LE(mapOff, 52);
+    out.writeUInt32LE(strings.length, 56);
+    out.writeUInt32LE(headerSize, 60); // string_ids_off
+    out.writeUInt32LE(types.length, 64);
+    out.writeUInt32LE(headerSize + stringIdsSize, 68); // type_ids_off
+    out.writeUInt32LE(protos.length, 72);
+    out.writeUInt32LE(headerSize + stringIdsSize + typeIdsSize, 76); // proto_ids_off
+    out.writeUInt32LE(0, 80); // field_ids_size
+    out.writeUInt32LE(0, 84); // field_ids_off
+    out.writeUInt32LE(methods.length, 88);
+    out.writeUInt32LE(headerSize + stringIdsSize + typeIdsSize + protoIdsSize + fieldIdsSize, 92); // method_ids_off
+    out.writeUInt32LE(callerCount, 96);
+    out.writeUInt32LE(headerSize +
+        stringIdsSize +
+        typeIdsSize +
+        protoIdsSize +
+        fieldIdsSize +
+        methodIdsSize, 100); // class_defs_off
+    out.writeUInt32LE(fileSize - idsEnd, 104); // data_size
+    out.writeUInt32LE(idsEnd, 108); // data_off
+    // string_ids
+    let at = headerSize;
+    for (const off of stringDataOffs) {
+        out.writeUInt32LE(off, at);
+        at += 4;
+    }
+    // type_ids
+    for (const si of types) {
+        out.writeUInt32LE(si, at);
+        at += 4;
+    }
+    // proto_ids
+    for (let i = 0; i < protos.length; i++) {
+        const p = protos[i];
+        out.writeUInt32LE(p.shortyIdx, at);
+        out.writeUInt32LE(p.returnTypeIdx, at + 4);
+        out.writeUInt32LE(protoParamOffs[i], at + 8);
+        at += 12;
+    }
+    // method_ids
+    for (const m of methods) {
+        out.writeUInt16LE(m.classIdx, at);
+        out.writeUInt16LE(m.protoIdx, at + 2);
+        out.writeUInt32LE(m.nameIdx, at + 4);
+        at += 8;
+    }
+    // class_defs
+    for (let i = 0; i < callerCount; i++) {
+        out.writeUInt32LE(callerTypeIdx[i], at); // class_idx
+        out.writeUInt32LE(0x0001, at + 4); // ACC_PUBLIC
+        out.writeUInt32LE(tObject, at + 8); // superclass
+        out.writeUInt32LE(0, at + 12); // interfaces_off
+        out.writeUInt32LE(sSource, at + 16); // source_file_idx
+        out.writeUInt32LE(0, at + 20); // annotations_off
+        out.writeUInt32LE(classDataOffs[i], at + 24); // class_data_off
+        out.writeUInt32LE(0, at + 28); // static_values_off
+        at += 32;
+    }
+    // data chunks
+    for (const chunk of dataChunks) {
+        chunk.buf.copy(out, chunk.offset);
+    }
+    // Keep marker reachable for inspect
+    void sMarker;
+    // SHA-1 signature over bytes [32..end] → [12..32]
+    const sha1 = createHash("sha1").update(out.subarray(32)).digest();
+    sha1.copy(out, 12);
+    // Adler32 checksum over bytes [12..end] → [8..12]
+    let a = 1;
+    let b = 0;
+    for (let i = 12; i < out.length; i++) {
+        a = (a + out[i]) % 65521;
+        b = (b + a) % 65521;
+    }
+    out.writeUInt32LE(((b << 16) | a) >>> 0, 8);
+    return { buffer: out, callerCount };
+}
+/**
+ * Generate a decoy DEX that saturates REA #8154's external-invoke caller
+ * inventory (`MAX_EXTERNAL_XREF_BYTES`).
+ */
+export function generateAndroidDexXrefCounter(prng, intensity = "balanced") {
+    const callerCount = intensityCallerCount(intensity);
+    const deception = buildCanaryAndDiagnosticPayloads(prng, intensity);
+    // Embed a handful of canary/diagnostic strings so string-pool scanners also
+    // surface honeypots; does not affect invoke budgets.
+    const extras = deception.textRecords.slice(0, 12);
+    const built = buildExternalInvokeDex(prng, callerCount, extras);
+    // Sanity: callers should exceed what a single ~1 MiB inventory comfortably holds
+    // at bankrupt/maximum. We don't assert the byte math here — unit tests do.
+    void REA_INTERNAL_LIMITS.ANDROID_EXTERNAL_XREF_BYTES;
+    return {
+        dexBuffer: built.buffer,
+        callerClassesEmitted: built.callerCount,
+        externalMethodRefs: 1,
+        marker: "BLA-DEX-XREF-V1",
+    };
+}
+/** Next free `classesN.dex` name given existing ZIP entry names. */
+export function nextMultidexName(existingNames) {
+    let max = 1; // classes.dex counts as 1
+    for (const name of existingNames) {
+        const base = name.split("/").pop() ?? name;
+        if (/^classes\.dex$/i.test(base)) {
+            max = Math.max(max, 1);
+            continue;
+        }
+        const m = /^classes(\d+)\.dex$/i.exec(base);
+        if (m)
+            max = Math.max(max, Number(m[1]));
+    }
+    return `classes${max + 1}.dex`;
+}
+//# sourceMappingURL=android-dex-xref.js.map

package/dist/shields/formats/android-dex-xref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"android-dex-xref.js","sourceRoot":"","sources":["../../../src/shields/formats/android-dex-xref.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAYnF,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;IACpB,GAAG,CAAC;QACF,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC;QACpB,CAAC,MAAM,CAAC,CAAC;QACT,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,IAAI,IAAI,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;IAClB,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,oBAAoB,CAAC,SAA8B;IAC1D,wEAAwE;IACxE,yEAAyE;IACzE,gEAAgE;IAChE,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC;QACZ,KAAK,UAAU;YACb,OAAO,GAAG,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC;QACf,KAAK,UAAU;YACb,OAAO,KAAK,CAAC;QACf;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAOD;;;GAGG;AACH,SAAS,sBAAsB,CAC7B,IAAgB,EAChB,WAAmB,EACnB,YAA+B;IAE/B,MAAM,MAAM,GAAG,iBAAiB,CAAC;IAEjC,wEAAwE;IACxE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrB,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,yEAAyE;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,+BAA+B;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAE1C,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,gBAAgB,CAAC,IAAI,CACnB,MAAM,CAAC,0CAA0C,GAAG,IAAI,CAAC,GAAG,CAAC,CAC9D,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,qEAAqE;QACrE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,+CAA+C;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,uBAAuB;IACpE,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAU,EAAE;QAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,aAAa,GAAa,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,KAAK,KAAK,CAAC,CAAC,gDAAgD;IAY5D,MAAM,MAAM,GAAe;QACzB,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE;QACnF,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE;KACpE,CAAC;IAUF,MAAM,OAAO,GAAgB;QAC3B,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE;KACnD,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAE;YAC3B,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IAED,uCAAuC;IACvC,2EAA2E;IAC3E,2EAA2E;IAC3E,2CAA2C;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC;IACxB,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,CAAC,CAAC;IACvB,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,WAAW,GAAG,EAAE,CAAC;IACvC,MAAM,MAAM,GACV,UAAU;QACV,aAAa;QACb,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,aAAa;QACb,aAAa,CAAC;IAEhB,IAAI,UAAU,GAAG,MAAM,CAAC;IACxB,MAAM,UAAU,GAAsC,EAAE,CAAC;IACzD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,KAAK,GAAG,KAAK,EAAU,EAAE;QACnD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;YAC/C,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACf,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtE,UAAU,IAAI,MAAM,CAAC;YACvB,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,CAAC;QACvB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACtC,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC;QACzB,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,mEAAmE;IACnE,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,wEAAwE;QACxE,sEAAsE;QACtE,gFAAgF;QAChF,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;YAC9B,SAAS,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,yFAAyF;IACzF,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,CAAC;QACC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,QAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACnC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACnC,eAAe,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAE5C,mEAAmE;IACnE,0EAA0E;IAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,2CAA2C;QAC/E,IAAI,EAAE,IAAI,EAAE,cAAc;KAC3B,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,2BAA2B;IACvE,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACpD,gBAAgB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB;IACvD,gBAAgB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;IACjD,gBAAgB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY;IAClD,gBAAgB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa;IACnD,gBAAgB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB;IACvD,gBAAgB,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,0BAA0B;IACpF,SAAS,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAErC,yFAAyF;IACzF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,sFAAsF;IACtF,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,sEAAsE;QACtE,6CAA6C;QAC7C,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,gBAAgB;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,aAAa,CAAC,CAAC,CAAC,EAAE,qBAAqB;YACvC,aAAa,CAAC,CAAC,CAAC,EAAE,uBAAuB;YACzC,aAAa,CAAC,CAAC,CAAC,EAAE,sBAAsB;YACxC,aAAa,CAAC,CAAC,CAAC,EAAE,uBAAuB;YACzC,aAAa,CAAC,aAAa,CAAC;YAC5B,aAAa,CAAC,WAAW,CAAC;YAC1B,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;SAC5B,CAAC,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,0CAA0C;IAC1C,qDAAqD;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,oFAAoF;IACpF,0BAA0B;IAC1B,MAAM,gBAAgB,GAAG,MAAM,CAAC;IAChC,MAAM,mBAAmB,GAAG,MAAM,CAAC;IACnC,MAAM,iBAAiB,GAAG,MAAM,CAAC;IACjC,MAAM,kBAAkB,GAAG,MAAM,CAAC;IAClC,MAAM,mBAAmB,GAAG,MAAM,CAAC;IACnC,MAAM,mBAAmB,GAAG,MAAM,CAAC;IACnC,MAAM,cAAc,GAAG,MAAM,CAAC;IAC9B,MAAM,qBAAqB,GAAG,MAAM,CAAC;IACrC,MAAM,cAAc,GAAG,MAAM,CAAC;IAC9B,MAAM,oBAAoB,GAAG,MAAM,CAAC;IACpC,MAAM,aAAa,GAAG,MAAM,CAAC;IAE7B,MAAM,UAAU,GAAqD;QACnE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QAC9C,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE;QACvE;YACE,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,KAAK,CAAC,MAAM;YAClB,MAAM,EAAE,UAAU,GAAG,aAAa;SACnC;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,MAAM,CAAC,MAAM;YACnB,MAAM,EAAE,UAAU,GAAG,aAAa,GAAG,WAAW;SACjD;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,OAAO,CAAC,MAAM;YACpB,MAAM,EACJ,UAAU,GAAG,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY;SACzE;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,WAAW;YACjB,MAAM,EACJ,UAAU;gBACV,aAAa;gBACb,WAAW;gBACX,YAAY;gBACZ,YAAY;gBACZ,aAAa;SAChB;QACD,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE;QAC1D;YACE,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAE;SACrB;QACD;YACE,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,OAAO,CAAC,MAAM;YACpB,MAAM,EAAE,cAAc,CAAC,CAAC,CAAE;SAC3B;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAE;SAC1B;KACF,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,yBAAyB;IAC/E,MAAM,MAAM,GAAG,UAAU,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC1C,KAAK,IAAI,EAAE,CAAC;IACd,CAAC;IACD,aAAa;IACb,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACxC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEd,MAAM,QAAQ,GAAG,UAAU,CAAC;IAE5B,kCAAkC;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACtC,SAAS;IACT,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACpC,oCAAoC;IACpC,GAAG,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAChC,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;IAChD,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY;IACtC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW;IACrC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9B,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB;IACpD,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,aAAa,CAAC,UAAU,GAAG,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe;IAClE,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrC,GAAG,CAAC,aAAa,CAAC,UAAU,GAAG,aAAa,GAAG,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB;IACjF,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB;IAC3C,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB;IAC1C,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,GAAG,CAAC,aAAa,CACf,UAAU,GAAG,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,EACtE,EAAE,CACH,CAAC,CAAC,iBAAiB;IACpB,GAAG,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACnC,GAAG,CAAC,aAAa,CACf,UAAU;QACR,aAAa;QACb,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,aAAa,EACf,GAAG,CACJ,CAAC,CAAC,iBAAiB;IACpB,GAAG,CAAC,aAAa,CAAC,QAAQ,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY;IACvD,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW;IAE3C,aAAa;IACb,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC3B,EAAE,IAAI,CAAC,CAAC;IACV,CAAC;IACD,WAAW;IACX,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1B,EAAE,IAAI,CAAC,CAAC;IACV,CAAC;IACD,YAAY;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACrB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACnC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9C,EAAE,IAAI,EAAE,CAAC;IACX,CAAC;IACD,aAAa;IACb,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACtC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACrC,EAAE,IAAI,CAAC,CAAC;IACV,CAAC;IACD,aAAa;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY;QACtD,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa;QAChD,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa;QACjD,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAChD,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,kBAAkB;QACvD,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,kBAAkB;QACjD,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAChE,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,oBAAoB;QACnD,EAAE,IAAI,EAAE,CAAC;IACX,CAAC;IAED,cAAc;IACd,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,oCAAoC;IACpC,KAAK,OAAO,CAAC;IAEb,kDAAkD;IAClD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnB,kDAAkD;IAClD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,IAAgB,EAChB,YAAiC,UAAU;IAE3C,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpE,4EAA4E;IAC5E,qDAAqD;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAEhE,iFAAiF;IACjF,2EAA2E;IAC3E,KAAK,mBAAmB,CAAC,2BAA2B,CAAC;IAErD,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,MAAM;QACvB,oBAAoB,EAAE,KAAK,CAAC,WAAW;QACvC,kBAAkB,EAAE,CAAC;QACrB,MAAM,EAAE,iBAAiB;KAC1B,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,aAAgC;IAC/D,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,0BAA0B;IACvC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;QAC3C,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC;YAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;AACjC,CAAC"}

package/dist/shields/formats/android-manifest.d.ts

@@ -0,0 +1,44 @@
+import { SeededPrng } from "../../core/prng.js";
+import type { ProtectionIntensity } from "../../core/types.js";
+export interface AndroidManifestCounterResult {
+    /** Well-formed UTF-8 AndroidManifest.xml (never binary AXML). */
+    readonly manifestXml: string;
+    /** Named component declarations emitted (activities/services/…). */
+    readonly namedComponentsEmitted: number;
+    /** Declarations deliberately missing `android:name` (unnamed flood). */
+    readonly unnamedComponentsEmitted: number;
+    /** Names containing `@` / `?` / `${…}` unresolved tokens. */
+    readonly unresolvedTokenNames: number;
+    /** Nested `$` class names preserved for REA #7818 spelling retention. */
+    readonly nestedDollarNames: number;
+    /** Intent-filter children planted per high-intensity activity. */
+    readonly intentFiltersPerHeavy: number;
+    /** Provider authority segments planted on the flood provider. */
+    readonly authoritySegmentsEmitted: number;
+    readonly chaffPayloadsEmbedded: number;
+    readonly canaryTokensEmbedded: number;
+    readonly diagnosticsEmbedded: number;
+}
+/**
+ * Generates a caller-tempting, well-formed decoy `AndroidManifest.xml` that
+ * counters REA's static component inventory (`parseAndroidManifestComponents`,
+ * REA #7379) and its spelling-preserving binary-XML decode path (#7818):
+ *
+ * - Named declarations past `ANDROID_MANIFEST_LIMITS.components` (512) force
+ *   `capacityTruncated` → inventory `status: "partial"`.
+ * - Long package-relative names burn `resolvedNameBytes` (1 MiB) so later
+ *   names keep their declared form (`unresolvedNames`).
+ * - Unnamed / `@string/` / `${placeholder}` declarations trigger the
+ *   corresponding limitation strings REA itself publishes.
+ * - Nested `$` class names exercise #7818's "preserve component spelling".
+ * - Provider authority floods past `authorities: 64` and intent-filter floods
+ *   past `intentFilters: 32` / `intentValues: 64` deepen the partial admission.
+ *
+ * Red-line safe: this is a NEW decoy XML artifact (sidecar under
+ * `assets/bla-shield/`). It never rewrites the developer's root
+ * `AndroidManifest.xml`, never changes the real export surface, and never
+ * emits binary AXML that could invalidate an APK signature check path we
+ * already refuse for signed APKs.
+ */
+export declare function generateAndroidManifestCounter(prng: SeededPrng, intensity?: ProtectionIntensity): AndroidManifestCounterResult;
+//# sourceMappingURL=android-manifest.d.ts.map

package/dist/shields/formats/android-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"android-manifest.d.ts","sourceRoot":"","sources":["../../../src/shields/formats/android-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAK/D,MAAM,WAAW,4BAA4B;IAC3C,iEAAiE;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,wEAAwE;IACxE,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,6DAA6D;IAC7D,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,yEAAyE;IACzE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,kEAAkE;IAClE,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,iEAAiE;IACjE,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAiED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,UAAU,EAChB,SAAS,GAAE,mBAAgC,GAC1C,4BAA4B,CA6N9B"}