code-auditor-mcp 4.0.4 → 4.1.1

package/dist/analyzers/universal/UniversalSecurityAnalyzer.js

@@ -0,0 +1,606 @@
+/**
+ * Universal Security Analyzer
+ *
+ * Spec 61 R6 — the three single-file syntactic rules the tool should have had
+ * but did not, so twelve hand-found security defects passed a self-audit
+ * silently:
+ *
+ *   - `command-injection-risk`        — a shell/process invocation whose command
+ *     is built by interpolation or string concatenation.
+ *   - `dynamic-require-of-project-path` — `require()` / `createRequire(...)()` /
+ *     `import()` of a path discovered from the project tree (a config candidate,
+ *     a directory walk, a project-root join), which *executes* the file.
+ *   - `unescaped-html-interpolation`  — a data value interpolated into an HTML
+ *     template without an escaping call (stored XSS).
+ *
+ * The three share the same shape as the other universal security analyzers: a
+ * single `analyzeAST` that walks the tree and emits violations, test/fixture
+ * files excluded up front (a fixture's `execSync(\`cp …\`)` is scaffolding, not
+ * a finding).
+ */
+import { UniversalAnalyzer } from '../../languages/UniversalAnalyzer.js';
+import { withRuleTiming } from '../ruleTiming.js';
+import { walkAST, getNodeText, getFieldNode } from '../../languages/adapterBridge.js';
+export const DEFAULT_SECURITY_CONFIG = {
+    checkCommandInjection: true,
+    checkDynamicRequire: true,
+    checkUnescapedHtml: true,
+};
+/**
+ * Child-process entry points whose *first argument* is the command string. When
+ * that string is interpolated or concatenated, a value the operator did not
+ * intend can become a shell command. `execAsync` is `util.promisify(exec)` — the
+ * same sink under a different name (RuntimeManager's pre-fix `execAsync(\`cd
+ * "${goDir}" && …\`)` is the proof site).
+ */
+const SHELL_PROCESS_FUNCTIONS = new Set([
+    'execSync', 'exec', 'execFile', 'execFileSync',
+    'spawn', 'spawnSync', 'fork', 'execAsync',
+]);
+/** Escaping-call names that neutralize an HTML interpolation. */
+const ESCAPE_FNS = new Set([
+    'escapeHtml', 'htmlEscape', 'escape', 'escapeHTML',
+    'sanitize', 'sanitizeHtml', 'h', 'e',
+]);
+/**
+ * Method names on a string/array whose result still carries the receiver's
+ * value (taint flows receiver → result). Covers string derivations (`join`,
+ * `slice`, `trim`, …) and array passthroughs (`filter`, `sort`, …) alike.
+ */
+const RECEIVER_PASSTHROUGH_METHODS = new Set([
+    'join', 'concat', 'toString', 'valueOf', 'slice', 'substring', 'substr',
+    'trim', 'trimStart', 'trimEnd', 'replace', 'replaceAll',
+    'toLowerCase', 'toUpperCase', 'padStart', 'padEnd', 'at', 'charAt',
+    'filter', 'sort', 'flat', 'reverse',
+]);
+/** Array methods whose result is built from the callback's returned value. */
+const MAP_VALUE_METHODS = new Set(['map', 'flatMap']);
+/** Object names treated as an HTTP response whose `.send`/`.write` emits HTML. */
+const HTTP_RESPONSE_OBJECTS = new Set(['res', 'response', 'resp', 'reply']);
+/** A string-valued constant: a `string` node or a substitution-free template. */
+function isStringConstant(node) {
+    if (!node)
+        return false;
+    if (node.type === 'string')
+        return true;
+    if (node.type === 'template_string') {
+        const hasSub = (node.children ?? []).some((c) => c.type === 'template_substitution');
+        return !hasSub;
+    }
+    return false;
+}
+/** A substitution's expression is a compile-time literal, not a computed value. */
+function isLiteralNode(node) {
+    if (!node)
+        return false;
+    if (['string', 'number', 'true', 'false', 'null', 'undefined'].includes(node.type))
+        return true;
+    if (node.type === 'template_string') {
+        const hasSub = (node.children ?? []).some((c) => c.type === 'template_substitution');
+        if (!hasSub)
+            return true; // substitution-free template is a constant
+    }
+    return false;
+}
+/** Is this path a test/fixture file? Excluded up front (see header). */
+function isTestOrFixtureFile(filePath) {
+    const lower = filePath.toLowerCase();
+    return (lower.includes('.test.') || lower.includes('.spec.') ||
+        lower.includes('__tests__') ||
+        lower.includes('/test/') || lower.includes('/tests/') ||
+        lower.includes('/fixtures/') || lower.includes('.fixture.') ||
+        lower.endsWith('_test.go'));
+}
+/**
+ * The first argument (child of the `arguments` node) of a call, if any.
+ */
+function firstArgument(node) {
+    const args = node.children?.find((c) => c.type === 'arguments');
+    return args?.children?.[0];
+}
+/** `node` is a bare `require(x)` call — callee is the identifier `require`. */
+function isBareRequire(node, sourceCode) {
+    const fn = node.children?.[0];
+    return fn?.type === 'identifier' && getNodeText(fn, sourceCode) === 'require';
+}
+/** `node` is a `createRequire(...)(x)` call — callee is itself a createRequire call. */
+function isCreateRequireInvocation(node, sourceCode) {
+    const fn = node.children?.[0];
+    if (fn?.type !== 'call_expression')
+        return false;
+    const innerFn = fn.children?.[0];
+    return innerFn?.type === 'identifier' && getNodeText(innerFn, sourceCode) === 'createRequire';
+}
+/** The operator text of a `binary_expression`, if it is the given token. */
+function binaryOperatorIs(node, token, sourceCode) {
+    const op = getFieldNode(node, 'operator');
+    if (op)
+        return getNodeText(op, sourceCode).trim() === token;
+    return (node.children ?? []).some((c) => getNodeText(c, sourceCode) === token);
+}
+/**
+ * The property name of a `member_expression` (`sessionData.path` → `path`),
+ * or null when there is no property identifier.
+ */
+function memberPropertyName(node, sourceCode) {
+    const prop = node.children?.find((c) => c.type === 'property_identifier');
+    return prop ? getNodeText(prop, sourceCode) : null;
+}
+/** Collect the expressions a function body can return (for taint-through-return). */
+function collectReturnExpressions(bodyNode) {
+    const out = [];
+    walkAST(bodyNode, (n) => {
+        if (n.type === 'return_statement') {
+            const expr = (n.children ?? []).find((c) => c.type !== ';');
+            if (expr)
+                out.push(expr);
+        }
+    });
+    return out;
+}
+/**
+ * The sink arguments of an HTML-emitting call: `res.send(x)` / `res.write(x)` /
+ * `document.write(x)` (first argument), `el.insertAdjacentHTML(pos, x)` (second
+ * argument), `el.setHTMLUnsafe(x)` (first argument), and the jQuery/Hono
+ * `.html(x)` setter (first argument — the getter `.html()` has no argument and
+ * is a read, not a sink). Returns [] for any other call.
+ */
+function htmlSinkArguments(callNode, sourceCode) {
+    const fn = callNode.children?.[0];
+    if (fn?.type !== 'member_expression')
+        return [];
+    const prop = memberPropertyName(fn, sourceCode);
+    const obj = fn.children?.find((c) => c.type === 'identifier');
+    const objName = obj ? getNodeText(obj, sourceCode) : null;
+    if (prop === 'insertAdjacentHTML') {
+        // `el.insertAdjacentHTML(pos, html)` — the HTML is the *second* argument.
+        // The `arguments` children include the inter-argument `,` as a significant
+        // anonymous node, so filter it out rather than assuming `children[1]`.
+        const args = callNode.children?.find((c) => c.type === 'arguments');
+        const values = (args?.children ?? []).filter((c) => c.type !== ',');
+        const html = values[1];
+        return html ? [html] : [];
+    }
+    if (prop === 'send' || prop === 'write') {
+        if (!objName || (!HTTP_RESPONSE_OBJECTS.has(objName) && objName !== 'document'))
+            return [];
+        const first = firstArgument(callNode);
+        return first ? [first] : [];
+    }
+    if (prop === 'setHTMLUnsafe') {
+        // `Element.setHTMLUnsafe(x)` parses `x` as HTML on any receiver, so there is
+        // no object-name gate (unlike `res.send`/`document.write`).
+        const first = firstArgument(callNode);
+        return first ? [first] : [];
+    }
+    if (prop === 'html') {
+        // jQuery `.html(content)` setter and Hono `c.html(content)` response both
+        // treat the argument as HTML. The getter `.html()` (no argument) is a read.
+        const args = callNode.children?.find((c) => c.type === 'arguments');
+        const first = args?.children?.[0];
+        return first ? [first] : [];
+    }
+    return [];
+}
+/**
+ * Security analyzer: three Spec-61 rules that should have caught the twelve
+ * hand-found defects.
+ */
+export class UniversalSecurityAnalyzer extends UniversalAnalyzer {
+    name = 'security';
+    description = 'Detects command injection, dynamic require of project paths, and unescaped HTML interpolation';
+    category = 'security';
+    async analyzeAST(ast, adapter, config, sourceCode) {
+        const violations = [];
+        const finalConfig = { ...DEFAULT_SECURITY_CONFIG, ...config };
+        if (isTestOrFixtureFile(ast.filePath))
+            return violations;
+        if (finalConfig.checkCommandInjection !== false) {
+            withRuleTiming('command-injection-risk', () => {
+                walkAST(ast.root, (node) => {
+                    if (node.type === 'call_expression') {
+                        violations.push(...this.checkCommandInjection(node, adapter, sourceCode, ast.filePath));
+                    }
+                });
+            });
+        }
+        if (finalConfig.checkDynamicRequire !== false) {
+            withRuleTiming('dynamic-require-of-project-path', () => {
+                walkAST(ast.root, (node) => {
+                    if (node.type === 'call_expression') {
+                        violations.push(...this.checkDynamicRequire(node, adapter, sourceCode, ast.filePath));
+                    }
+                });
+            });
+        }
+        if (finalConfig.checkUnescapedHtml !== false) {
+            withRuleTiming('unescaped-html-interpolation', () => {
+                const sinkTemplates = this.computeHtmlSinkTemplates(ast, sourceCode);
+                walkAST(ast.root, (node) => {
+                    if (node.type === 'template_string' && sinkTemplates.has(node)) {
+                        violations.push(...this.checkUnescapedHtml(node, adapter, sourceCode, ast.filePath));
+                    }
+                });
+            });
+        }
+        return violations;
+    }
+    // ── command-injection-risk ────────────────────────────────────────────────
+    checkCommandInjection(node, adapter, sourceCode, filePath) {
+        const fn = node.children?.[0];
+        // Only a bare identifier (`execSync(...)`), never a member access
+        // (`this.db.exec(...)` is SQLite, not a shell).
+        if (fn?.type !== 'identifier')
+            return [];
+        const fnName = getNodeText(fn, sourceCode);
+        if (!SHELL_PROCESS_FUNCTIONS.has(fnName))
+            return [];
+        const cmd = firstArgument(node);
+        if (!cmd)
+            return [];
+        let unsafe = false;
+        if (cmd.type === 'template_string') {
+            unsafe = (cmd.children ?? []).some((c) => c.type === 'template_substitution');
+        }
+        else if (cmd.type === 'binary_expression') {
+            if (binaryOperatorIs(cmd, '+', sourceCode)) {
+                const left = getFieldNode(cmd, 'left');
+                const right = getFieldNode(cmd, 'right');
+                unsafe = !isLiteralNode(left) || !isLiteralNode(right);
+            }
+        }
+        if (!unsafe)
+            return [];
+        return [this.createViolation(filePath, node.location.start, `Unsafe process invocation: ${fnName}() is passed a command built by interpolation/concatenation, so a value can become a shell command. Pass the command as a string literal and arguments as an argv array (execFileSync/spawn), never a shell string.`, {
+                severity: 'critical',
+                rule: 'command-injection-risk',
+                symbol: fnName,
+                resolution: {
+                    action: 'use-argv-array',
+                    summary: `Replace ${fnName} with an argv-array form (execFileSync/spawn) whose command is a string literal and whose arguments are separate array elements, so no shell interprets them.`,
+                    symbols: [fnName],
+                    files: [filePath],
+                    lines: [node.location.start.line],
+                },
+            })];
+    }
+    // ── dynamic-require-of-project-path ────────────────────────────────────────
+    checkDynamicRequire(node, adapter, sourceCode, filePath) {
+        const fn = node.children?.[0];
+        let isForm = false;
+        if (isBareRequire(node, sourceCode) || fn?.type === 'import') {
+            isForm = true; // require(x) or import(x)
+        }
+        else if (isCreateRequireInvocation(node, sourceCode)) {
+            isForm = true; // createRequire(...)(x)
+        }
+        if (!isForm)
+            return [];
+        const arg = firstArgument(node);
+        if (!arg)
+            return [];
+        // Computed: not a string literal, and not a substitution-free template.
+        if (isLiteralNode(arg))
+            return [];
+        const text = getNodeText(arg, sourceCode).toLowerCase();
+        // Project-config-path-derived: a config-named path (the config candidate /
+        // project-root join / directory-walk result this rule exists to catch).
+        const isConfigPath = /config/.test(text) && /path|file|dir|join\(|resolve\(|pathtofileurl|href/.test(text);
+        if (!isConfigPath)
+            return [];
+        return [this.createViolation(filePath, node.location.start, `Dynamic require/import of a project config path: ${getNodeText(arg, sourceCode)}. A path discovered from the project tree is executed when it is require()'d or import()'d. Read config files without executing them (static extraction).`, {
+                severity: 'critical',
+                rule: 'dynamic-require-of-project-path',
+                resolution: {
+                    action: 'static-config-extraction',
+                    summary: 'Replace the dynamic require/import with static extraction (read the source and extract the literal export) so a project-supplied config is never executed.',
+                    symbols: [getNodeText(fn, sourceCode)],
+                    files: [filePath],
+                    lines: [node.location.start.line],
+                },
+            })];
+    }
+    // ── unescaped-html-interpolation ───────────────────────────────────────────
+    /**
+     * Backward-reachability: which template literals in this file have a value
+     * that reaches an HTML sink? A template whose value flows into such a sink is
+     * the only place an unescaped interpolation becomes stored XSS — the trigger
+     * is *where the string goes*, not what its text looks like.
+     *
+     * Split into three single-purpose phases — collect local value flow, collect
+     * sink roots, then propagate backward — rather than one fused visitor. The
+     * fused form is what pushed this method over the `method-complexity`
+     * threshold: a single walk that simultaneously dispatched per node type to
+     * build bindings/returns *and* sink roots, plus the backward-propagation
+     * switch. Each phase is now a small walk with one job; none individually
+     * crosses the threshold, and no exemption is needed.
+     */
+    computeHtmlSinkTemplates(ast, sourceCode) {
+        const { bindings, returnsByName } = this.collectLocalFlow(ast, sourceCode);
+        const sinkRoots = this.collectSinkRoots(ast, sourceCode);
+        return this.propagateSinkFlow(sinkRoots, bindings, returnsByName, sourceCode);
+    }
+    /** The expressions a function body can return, used for taint-through-return. */
+    returnsOf(fnNode) {
+        if (fnNode.type === 'arrow_function') {
+            const block = fnNode.children?.find((c) => c.type === 'statement_block');
+            if (!block) {
+                // Expression body: the expression itself is the return value.
+                for (let i = (fnNode.children ?? []).length - 1; i >= 0; i--) {
+                    const c = fnNode.children[i];
+                    if (c.type === 'formal_parameters' || c.type === '=>')
+                        continue;
+                    return [c];
+                }
+                return [];
+            }
+            return collectReturnExpressions(block);
+        }
+        const block = fnNode.children?.find((c) => c.type === 'statement_block');
+        return block ? collectReturnExpressions(block) : [];
+    }
+    /**
+     * Phase 1 — local value flow: bind every declared name to its initializer and
+     * record, per function name, the expressions its body can return. The
+     * taint-through-return producer (`call_expression` → a named function's return)
+     * reads this map.
+     */
+    collectLocalFlow(ast, sourceCode) {
+        const bindings = new Map();
+        const returnsByName = new Map();
+        walkAST(ast.root, (node) => {
+            if (node.type === 'variable_declarator') {
+                const name = getFieldNode(node, 'name');
+                const value = getFieldNode(node, 'value');
+                if (name && value) {
+                    const n = getNodeText(name, sourceCode);
+                    const arr = bindings.get(n) ?? [];
+                    arr.push(value);
+                    bindings.set(n, arr);
+                    if (value.type === 'arrow_function' || value.type === 'function_expression') {
+                        const rets = this.returnsOf(value);
+                        if (rets.length)
+                            returnsByName.set(n, rets);
+                    }
+                }
+            }
+            else if (node.type === 'function_declaration') {
+                const name = getFieldNode(node, 'name');
+                if (name) {
+                    const rets = this.returnsOf(node);
+                    if (rets.length)
+                        returnsByName.set(getNodeText(name, sourceCode), rets);
+                }
+            }
+        });
+        return { bindings, returnsByName };
+    }
+    /**
+     * Phase 2 — sink roots: every expression that is injected into an HTML sink.
+     * Sink roots are collected from three places: (1) HTML-emitting calls —
+     * `insertAdjacentHTML`, `res.send`/`res.write`, `document.write`,
+     * `setHTMLUnsafe`, jQuery/Hono `.html(x)` (`htmlSinkArguments`); (2) property
+     * writes/attributes — `innerHTML`/`outerHTML` assignment, React's
+     * `dangerouslySetInnerHTML` in both its forms (the JSX attribute and the
+     * `__html` object key); and (3) Vue's `v-html` directive, where the template
+     * string is itself the sink.
+     */
+    collectSinkRoots(ast, sourceCode) {
+        const sinkRoots = [];
+        walkAST(ast.root, (node) => {
+            if (node.type === 'call_expression') {
+                for (const a of htmlSinkArguments(node, sourceCode))
+                    sinkRoots.push(a);
+            }
+            else if (node.type === 'assignment_expression') {
+                const left = getFieldNode(node, 'left');
+                const right = getFieldNode(node, 'right');
+                if (left?.type === 'member_expression' && right) {
+                    const prop = memberPropertyName(left, sourceCode);
+                    if (prop === 'innerHTML' || prop === 'outerHTML')
+                        sinkRoots.push(right);
+                }
+            }
+            else if (node.type === 'pair') {
+                // React's `dangerouslySetInnerHTML={{ __html: x }}` — and its extracted
+                // `const markup = { __html: x }` form — put the raw-HTML value under the
+                // `__html` key. Any expression bound to `__html` is injected as HTML.
+                const key = getFieldNode(node, 'key');
+                const value = getFieldNode(node, 'value');
+                if (key && value) {
+                    const keyText = getNodeText(key, sourceCode);
+                    const isHtmlKey = key.type === 'property_identifier'
+                        ? keyText === '__html'
+                        : keyText === '"__html"' || keyText === "'__html'";
+                    if (isHtmlKey)
+                        sinkRoots.push(value);
+                }
+            }
+            else if (node.type === 'jsx_attribute') {
+                // React's `dangerouslySetInnerHTML` as the JSX *attribute* (the other
+                // form alongside the `__html` key above). The attribute is itself a sink
+                // marker: whatever expression is bound to it is injected as raw HTML.
+                // Its value is normally `{{ __html: x }}` (whose `__html` pair is already
+                // a sink root via the branch above); this branch also covers a bare
+                // `dangerouslySetInnerHTML={expr}` whose expression is not an `__html`
+                // object, so the attribute name alone is enough to mark the value a sink.
+                const nameNode = node.children?.find((c) => c.type === 'property_identifier' || c.type === 'identifier');
+                if (nameNode && getNodeText(nameNode, sourceCode) === 'dangerouslySetInnerHTML') {
+                    const valueNode = node.children?.find((c) => c.type === 'jsx_expression' || c.type === 'string');
+                    if (valueNode) {
+                        if (valueNode.type === 'jsx_expression') {
+                            const inner = valueNode.children?.find((c) => c.type !== '{' && c.type !== '}');
+                            if (inner)
+                                sinkRoots.push(inner);
+                        }
+                        else {
+                            sinkRoots.push(valueNode);
+                        }
+                    }
+                }
+            }
+            else if (node.type === 'template_string') {
+                // Vue's `v-html` directive: the template *is* the sink (the bound value
+                // is injected as raw HTML), so a template carrying `v-html=` is its own
+                // sink root even without an enclosing call/assignment.
+                const isVHtml = (node.children ?? []).some((c) => c.type === 'string_fragment' && /v-html\s*=/i.test(getNodeText(c, sourceCode)));
+                if (isVHtml)
+                    sinkRoots.push(node);
+            }
+        });
+        return sinkRoots;
+    }
+    /**
+     * Phase 3 — backward propagation: a worklist from each sink root through
+     * value flow (`producers`) to find which template literals actually reach a
+     * sink. Only those templates are candidates for `checkUnescapedHtml`.
+     */
+    propagateSinkFlow(sinkRoots, bindings, returnsByName, sourceCode) {
+        const producers = (e) => {
+            switch (e.type) {
+                case 'identifier':
+                    return bindings.get(getNodeText(e, sourceCode)) ?? [];
+                case 'template_string':
+                    return (e.children ?? [])
+                        .filter((c) => c.type === 'template_substitution')
+                        .map((s) => s.children?.[0])
+                        .filter((x) => !!x);
+                case 'parenthesized_expression': {
+                    const inner = e.children?.[0];
+                    return inner ? [inner] : [];
+                }
+                case 'binary_expression': {
+                    const left = getFieldNode(e, 'left');
+                    const right = getFieldNode(e, 'right');
+                    return [left, right].filter((x) => !!x);
+                }
+                case 'ternary_expression': {
+                    const cons = getFieldNode(e, 'consequence');
+                    const alt = getFieldNode(e, 'alternative');
+                    return [cons, alt].filter((x) => !!x);
+                }
+                case 'call_expression': {
+                    const fn = e.children?.[0];
+                    if (fn?.type === 'identifier') {
+                        return returnsByName.get(getNodeText(fn, sourceCode)) ?? [];
+                    }
+                    if (fn?.type === 'member_expression') {
+                        const prop = memberPropertyName(fn, sourceCode);
+                        if (prop && MAP_VALUE_METHODS.has(prop)) {
+                            const cb = firstArgument(e);
+                            if (cb && (cb.type === 'arrow_function' || cb.type === 'function_expression')) {
+                                return this.returnsOf(cb);
+                            }
+                            return [];
+                        }
+                        if (prop && RECEIVER_PASSTHROUGH_METHODS.has(prop)) {
+                            const obj = fn.children?.find((c) => c.type !== 'property_identifier' && c.type !== '.' && c.type !== '?.');
+                            return obj ? [obj] : [];
+                        }
+                    }
+                    return [];
+                }
+                default:
+                    return [];
+            }
+        };
+        const sinkTemplates = new Set();
+        const seen = new Set();
+        const queue = [...sinkRoots];
+        while (queue.length) {
+            const e = queue.shift();
+            if (seen.has(e))
+                continue;
+            seen.add(e);
+            if (e.type === 'template_string')
+                sinkTemplates.add(e);
+            for (const p of producers(e)) {
+                if (!seen.has(p))
+                    queue.push(p);
+            }
+        }
+        return sinkTemplates;
+    }
+    checkUnescapedHtml(node, adapter, sourceCode, filePath) {
+        // Reached only for templates whose value flows to an HTML sink (see
+        // computeHtmlSinkTemplates), so no markup check is needed here. Walk the
+        // template's children in order, tracking script/style context so a
+        // substitution inside `<script>`/`<style>` (JSON serialization, CSS vars) is
+        // not misread as an HTML interpolation.
+        const violations = [];
+        let scriptDepth = 0;
+        let styleDepth = 0;
+        for (const child of node.children ?? []) {
+            if (child.type === 'string_fragment') {
+                const text = getNodeText(child, sourceCode);
+                const openScript = (text.match(/<script\b/gi) ?? []).length;
+                const closeScript = (text.match(/<\/script\s*>/gi) ?? []).length;
+                const openStyle = (text.match(/<style\b/gi) ?? []).length;
+                const closeStyle = (text.match(/<\/style\s*>/gi) ?? []).length;
+                scriptDepth = Math.max(0, scriptDepth + openScript - closeScript);
+                styleDepth = Math.max(0, styleDepth + openStyle - closeStyle);
+            }
+            else if (child.type === 'template_substitution') {
+                if (scriptDepth > 0 || styleDepth > 0)
+                    continue;
+                const v = this.checkInterpolation(child, adapter, sourceCode, filePath);
+                if (v)
+                    violations.push(v);
+            }
+        }
+        return violations;
+    }
+    checkInterpolation(sub, adapter, sourceCode, filePath) {
+        const expr = sub.children?.[0];
+        if (!expr)
+            return null;
+        // Escape-wrapped (`${escapeHtml(x)}`) is the fix, not the finding.
+        if (expr.type === 'call_expression') {
+            const fn = expr.children?.[0];
+            if (fn?.type === 'identifier' && ESCAPE_FNS.has(getNodeText(fn, sourceCode)))
+                return null;
+        }
+        // Resolve the interpolated value. `x || 'default'` / `x ?? d` interpolate the
+        // *value* operand `x` — the default is a fallback, not a second sink, so the
+        // rule looks at `x` (the left operand) and ignores the default.
+        let value = expr;
+        while (value.type === 'binary_expression') {
+            const opNode = getFieldNode(value, 'operator');
+            const op = opNode ? getNodeText(opNode, sourceCode).trim() : null;
+            if (op !== '||' && op !== '??')
+                return null; // arithmetic/`+` is not a plain value sink
+            const left = getFieldNode(value, 'left');
+            const right = getFieldNode(value, 'right');
+            if (!left || !right)
+                return null;
+            // A string fallback (`x || '…'`) marks a string-valued interpolation — the
+            // dangerous case. A numeric fallback (`x || 0`) marks a count and is safe,
+            // so `${totalSections || 0}` stays silent.
+            if (!isStringConstant(right))
+                return null;
+            value = left;
+        }
+        // Only a data member access (`violation.file`, `codeMap.quickPreview`) is a
+        // string sink; bare identifiers (loop vars, pre-built HTML fragments), calls
+        // (`.map()`, `JSON.stringify`, `new Date().toX()`), ternaries, and literals
+        // are not. See the authenticity ledger for the gap this leaves.
+        if (value.type !== 'member_expression')
+            return null;
+        const prop = memberPropertyName(value, sourceCode);
+        if (!prop)
+            return null;
+        return this.createViolation(filePath, sub.location.start, `Unescaped HTML interpolation: ${prop} is inserted into an HTML template without an escaping call. Analysis-controlled strings (file paths, messages, previews) can carry markup — wrap the interpolation in escapeHtml() to prevent stored XSS.`, {
+            severity: 'severe',
+            rule: 'unescaped-html-interpolation',
+            symbol: prop,
+            resolution: {
+                action: 'escape-html-interpolation',
+                summary: `Wrap the ${prop} interpolation in an escaping call (e.g. \${escapeHtml(${prop})}) before it reaches the HTML template.`,
+                symbols: [prop],
+                files: [filePath],
+                lines: [sub.location.start.line],
+            },
+        });
+    }
+}
+//# sourceMappingURL=UniversalSecurityAnalyzer.js.map

package/dist/analyzers/universal/UniversalSecurityAnalyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UniversalSecurityAnalyzer.js","sourceRoot":"","sources":["../../../src/analyzers/universal/UniversalSecurityAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAWtF,MAAM,CAAC,MAAM,uBAAuB,GAA2B;IAC7D,qBAAqB,EAAE,IAAI;IAC3B,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;CACzB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc;IAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW;CAC1C,CAAC,CAAC;AAEH,iEAAiE;AACjE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY;IAClD,UAAU,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG;CACrC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ;IACvE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY;IACvD,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ;IAClE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;CACpC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAEtD,kFAAkF;AAClF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5E,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,IAAyB;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;QACrF,OAAO,CAAC,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa,CAAC,IAAyB;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChG,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,2CAA2C;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpD,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrD,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3D,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,IAAa;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAChE,OAAO,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,+EAA+E;AAC/E,SAAS,aAAa,CAAC,IAAa,EAAE,UAAkB;IACtD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,EAAE,IAAI,KAAK,YAAY,IAAI,WAAW,CAAC,EAAE,EAAE,UAAU,CAAC,KAAK,SAAS,CAAC;AAChF,CAAC;AAED,wFAAwF;AACxF,SAAS,yBAAyB,CAAC,IAAa,EAAE,UAAkB;IAClE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,EAAE,EAAE,IAAI,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,OAAO,EAAE,IAAI,KAAK,YAAY,IAAI,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,eAAe,CAAC;AAChG,CAAC;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,IAAa,EAAE,KAAa,EAAE,UAAkB;IACxE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,EAAE;QAAE,OAAO,WAAW,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC;IAC5D,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,KAAK,CAAC,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,IAAa,EAAE,UAAkB;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,qFAAqF;AACrF,SAAS,wBAAwB,CAAC,QAAiB;IACjD,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACtB,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YAC5D,IAAI,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,QAAiB,EAAE,UAAkB;IAC9D,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,EAAE,EAAE,IAAI,KAAK,mBAAmB;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1D,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,UAAU,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3F,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,6EAA6E;QAC7E,4DAA4D;QAC5D,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,0EAA0E;QAC1E,4EAA4E;QAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,yBAA0B,SAAQ,iBAAiB;IACrD,IAAI,GAAG,UAAU,CAAC;IAClB,WAAW,GAAG,+FAA+F,CAAC;IAC9G,QAAQ,GAAG,UAAU,CAAC;IAErB,KAAK,CAAC,UAAU,CACxB,GAAQ,EACR,OAAwB,EACxB,MAA8B,EAC9B,UAAkB;QAElB,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,MAAM,EAAE,CAAC;QAC9D,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,UAAU,CAAC;QAEzD,IAAI,WAAW,CAAC,qBAAqB,KAAK,KAAK,EAAE,CAAC;YAChD,cAAc,CAAC,wBAAwB,EAAE,GAAG,EAAE;gBAC5C,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;oBACzB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;wBACpC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAC1F,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,CAAC,mBAAmB,KAAK,KAAK,EAAE,CAAC;YAC9C,cAAc,CAAC,iCAAiC,EAAE,GAAG,EAAE;gBACrD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;oBACzB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;wBACpC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACxF,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;YAC7C,cAAc,CAAC,8BAA8B,EAAE,GAAG,EAAE;gBAClD,MAAM,aAAa,GAAG,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;gBACrE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;oBACzB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC/D,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACvF,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,6EAA6E;IAErE,qBAAqB,CAC3B,IAAa,EACb,OAAwB,EACxB,UAAkB,EAClB,QAAgB;QAEhB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9B,kEAAkE;QAClE,gDAAgD;QAChD,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY;YAAE,OAAO,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpD,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QAEpB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACnC,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC;QAChF,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC5C,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACvC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBACzC,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAEvB,OAAO,CAAC,IAAI,CAAC,eAAe,CAC1B,QAAQ,EACR,IAAI,CAAC,QAAQ,CAAC,KAAK,EACnB,8BAA8B,MAAM,qNAAqN,EACzP;gBACE,QAAQ,EAAE,UAAU;gBACpB,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,gBAAgB;oBACxB,OAAO,EAAE,WAAW,MAAM,+JAA+J;oBACzL,OAAO,EAAE,CAAC,MAAM,CAAC;oBACjB,KAAK,EAAE,CAAC,QAAQ,CAAC;oBACjB,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;iBAClC;aACF,CACF,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAEtE,mBAAmB,CACzB,IAAa,EACb,OAAwB,EACxB,UAAkB,EAClB,QAAgB;QAEhB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7D,MAAM,GAAG,IAAI,CAAC,CAAC,0BAA0B;QAC3C,CAAC;aAAM,IAAI,yBAAyB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;YACvD,MAAM,GAAG,IAAI,CAAC,CAAC,wBAAwB;QACzC,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAEvB,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QAEpB,wEAAwE;QACxE,IAAI,aAAa,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAElC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACxD,2EAA2E;QAC3E,wEAAwE;QACxE,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mDAAmD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3G,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAC;QAE7B,OAAO,CAAC,IAAI,CAAC,eAAe,CAC1B,QAAQ,EACR,IAAI,CAAC,QAAQ,CAAC,KAAK,EACnB,oDAAoD,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,2JAA2J,EAC3O;gBACE,QAAQ,EAAE,UAAU;gBACpB,IAAI,EAAE,iCAAiC;gBACvC,UAAU,EAAE;oBACV,MAAM,EAAE,0BAA0B;oBAClC,OAAO,EAAE,4JAA4J;oBACrK,OAAO,EAAE,CAAC,WAAW,CAAC,EAAG,EAAE,UAAU,CAAC,CAAC;oBACvC,KAAK,EAAE,CAAC,QAAQ,CAAC;oBACjB,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;iBAClC;aACF,CACF,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAE9E;;;;;;;;;;;;;OAaG;IACK,wBAAwB,CAAC,GAAQ,EAAE,UAAkB;QAC3D,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IAChF,CAAC;IAED,iFAAiF;IACzE,SAAS,CAAC,MAAe;QAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC;YACzE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,8DAA8D;gBAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC7D,MAAM,CAAC,GAAG,MAAM,CAAC,QAAS,CAAC,CAAC,CAAC,CAAC;oBAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;wBAAE,SAAS;oBAChE,OAAO,CAAC,CAAC,CAAC,CAAC;gBACb,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACK,gBAAgB,CACtB,GAAQ,EACR,UAAkB;QAElB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;QAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAqB,CAAC;QAEnD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC1C,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;oBAClB,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAClC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAChB,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBACrB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;wBAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;wBACnC,IAAI,IAAI,CAAC,MAAM;4BAAE,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBAC9C,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACxC,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBAClC,IAAI,IAAI,CAAC,MAAM;wBAAE,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IACrC,CAAC;IAED;;;;;;;;;OASG;IACK,gBAAgB,CAAC,GAAQ,EAAE,UAAkB;QACnD,MAAM,SAAS,GAAc,EAAE,CAAC;QAEhC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACpC,KAAK,MAAM,CAAC,IAAI,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC;oBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzE,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBACjD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC1C,IAAI,IAAI,EAAE,IAAI,KAAK,mBAAmB,IAAI,KAAK,EAAE,CAAC;oBAChD,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBAClD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW;wBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAChC,wEAAwE;gBACxE,yEAAyE;gBACzE,sEAAsE;gBACtE,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACtC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC1C,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;oBACjB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;oBAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,KAAK,qBAAqB;wBAClD,CAAC,CAAC,OAAO,KAAK,QAAQ;wBACtB,CAAC,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,UAAU,CAAC;oBACrD,IAAI,SAAS;wBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACzC,sEAAsE;gBACtE,yEAAyE;gBACzE,sEAAsE;gBACtE,0EAA0E;gBAC1E,oEAAoE;gBACpE,uEAAuE;gBACvE,0EAA0E;gBAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CACnE,CAAC;gBACF,IAAI,QAAQ,IAAI,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,yBAAyB,EAAE,CAAC;oBAChF,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAC1D,CAAC;oBACF,IAAI,SAAS,EAAE,CAAC;wBACd,IAAI,SAAS,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;4BACxC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;4BAChF,IAAI,KAAK;gCAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACnC,CAAC;6BAAM,CAAC;4BACN,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAC5B,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC3C,wEAAwE;gBACxE,wEAAwE;gBACxE,uDAAuD;gBACvD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CACtF,CAAC;gBACF,IAAI,OAAO;oBAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CACvB,SAAoB,EACpB,QAAgC,EAChC,aAAqC,EACrC,UAAkB;QAElB,MAAM,SAAS,GAAG,CAAC,CAAU,EAAa,EAAE;YAC1C,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,YAAY;oBACf,OAAO,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxD,KAAK,iBAAiB;oBACpB,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;yBACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC;yBACjD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;yBAC3B,MAAM,CAAC,CAAC,CAAC,EAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtC,KAAK,0BAA0B,CAAC,CAAC,CAAC;oBAChC,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC9B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9B,CAAC;gBACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;oBACzB,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBACrC,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBACvC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxD,CAAC;gBACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;oBAC1B,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;oBAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;oBAC3C,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtD,CAAC;gBACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC3B,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC9B,OAAO,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC9D,CAAC;oBACD,IAAI,EAAE,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;wBACrC,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;wBAChD,IAAI,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;4BACxC,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;4BAC5B,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,gBAAgB,IAAI,EAAE,CAAC,IAAI,KAAK,qBAAqB,CAAC,EAAE,CAAC;gCAC9E,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;4BAC5B,CAAC;4BACD,OAAO,EAAE,CAAC;wBACZ,CAAC;wBACD,IAAI,IAAI,IAAI,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;4BACnD,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAC7E,CAAC;4BACF,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1B,CAAC;oBACH,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD;oBACE,OAAO,EAAE,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAW,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;QAChC,MAAM,KAAK,GAAc,CAAC,GAAG,SAAS,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB;gBAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACvD,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAEO,kBAAkB,CACxB,IAAa,EACb,OAAwB,EACxB,UAAkB,EAClB,QAAgB;QAEhB,oEAAoE;QACpE,yEAAyE;QACzE,mEAAmE;QACnE,6EAA6E;QAC7E,wCAAwC;QACxC,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBAC5C,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC5D,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBACjE,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC1D,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC/D,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,WAAW,CAAC,CAAC;gBAClE,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC,CAAC;YAChE,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBAClD,IAAI,WAAW,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC;oBAAE,SAAS;gBAChD,MAAM,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;gBACxE,IAAI,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,kBAAkB,CACxB,GAAY,EACZ,OAAwB,EACxB,UAAkB,EAClB,QAAgB;QAEhB,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,mEAAmE;QACnE,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACpC,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC5F,CAAC;QACD,8EAA8E;QAC9E,6EAA6E;QAC7E,gEAAgE;QAChE,IAAI,KAAK,GAAY,IAAI,CAAC;QAC1B,OAAO,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,CAAC,2CAA2C;YACxF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACjC,2EAA2E;YAC3E,2EAA2E;YAC3E,2CAA2C;YAC3C,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,4EAA4E;QAC5E,6EAA6E;QAC7E,4EAA4E;QAC5E,gEAAgE;QAChE,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,IAAI,CAAC;QACpD,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,OAAO,IAAI,CAAC,eAAe,CACzB,QAAQ,EACR,GAAG,CAAC,QAAQ,CAAC,KAAK,EAClB,iCAAiC,IAAI,4MAA4M,EACjP;YACE,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,8BAA8B;YACpC,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE;gBACV,MAAM,EAAE,2BAA2B;gBACnC,OAAO,EAAE,YAAY,IAAI,0DAA0D,IAAI,0CAA0C;gBACjI,OAAO,EAAE,CAAC,IAAI,CAAC;gBACf,KAAK,EAAE,CAAC,QAAQ,CAAC;gBACjB,KAAK,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;aACjC;SACF,CACF,CAAC;IACJ,CAAC;CACF"}