driftdetect-detectors 0.1.0

package/dist/security/input-sanitization.js

@@ -0,0 +1,373 @@
+/**
+ * Input Sanitization Detector - Input sanitization pattern detection
+ *
+ * Detects input sanitization patterns including:
+ * - HTML sanitization (DOMPurify, sanitize-html)
+ * - Input validation libraries (validator.js, joi, zod)
+ * - Escape functions for different contexts
+ * - Custom sanitization functions
+ * - Missing sanitization violations
+ *
+ * @requirements 16.1 - Input sanitization patterns
+ */
+import { RegexDetector } from '../base/regex-detector.js';
+// ============================================================================
+// Constants
+// ============================================================================
+export const DOMPURIFY_PATTERNS = [
+    /DOMPurify\.sanitize\s*\(/gi,
+    /purify\.sanitize\s*\(/gi,
+    /createDOMPurify\s*\(/gi,
+    /import.*DOMPurify/gi,
+    /require\s*\(\s*['"`]dompurify['"`]\s*\)/gi,
+];
+export const SANITIZE_HTML_PATTERNS = [
+    /sanitizeHtml\s*\(/gi,
+    /sanitize-html/gi,
+    /xss\s*\(/gi,
+    /import.*sanitize-html/gi,
+    /filterXSS\s*\(/gi,
+];
+export const VALIDATOR_JS_PATTERNS = [
+    // TypeScript/JavaScript patterns
+    /validator\.escape\s*\(/gi,
+    /validator\.trim\s*\(/gi,
+    /validator\.stripLow\s*\(/gi,
+    /validator\.whitelist\s*\(/gi,
+    /validator\.blacklist\s*\(/gi,
+    /validator\.normalizeEmail\s*\(/gi,
+    /validator\.isEmail\s*\(/gi,
+    /validator\.isURL\s*\(/gi,
+    /validator\.isAlphanumeric\s*\(/gi,
+    // Python patterns - pydantic, cerberus, marshmallow
+    /EmailStr\b/gi,
+    /HttpUrl\b/gi,
+    /validator\s*\(/gi,
+    /@validator\s*\(/gi,
+    /field_validator\s*\(/gi,
+    /Schema\s*\(\s*\{/gi,
+    /fields\.\w+\s*\(/gi,
+];
+export const ESCAPE_HTML_PATTERNS = [
+    /escapeHtml\s*\(/gi,
+    /htmlEscape\s*\(/gi,
+    /escape\s*\(\s*['"`]html['"`]/gi,
+    /encodeHTML\s*\(/gi,
+    /htmlEncode\s*\(/gi,
+    /\.replace\s*\(\s*\/[<>&'"]/gi,
+];
+export const ESCAPE_SQL_PATTERNS = [
+    /escapeSql\s*\(/gi,
+    /sqlEscape\s*\(/gi,
+    /mysql\.escape\s*\(/gi,
+    /pg\.escapeLiteral\s*\(/gi,
+    /escapeIdentifier\s*\(/gi,
+];
+export const ESCAPE_REGEX_PATTERNS = [
+    /escapeRegExp\s*\(/gi,
+    /escapeRegex\s*\(/gi,
+    /RegExp\.escape\s*\(/gi,
+    /\.replace\s*\(\s*\/\[\.\*\+\?\^\$\{\}\(\)\|\[\]\\\\]/gi,
+];
+export const CUSTOM_SANITIZE_PATTERNS = [
+    // TypeScript/JavaScript patterns
+    /sanitize\w*\s*\(/gi,
+    /clean\w*Input\s*\(/gi,
+    /filterInput\s*\(/gi,
+    /validateAndSanitize\s*\(/gi,
+    /scrub\s*\(/gi,
+    /purge\s*\(/gi,
+    // Python patterns - snake_case
+    /sanitize_\w*\s*\(/gi,
+    /clean_\w*input\s*\(/gi,
+    /filter_input\s*\(/gi,
+    /validate_and_sanitize\s*\(/gi,
+    /bleach\.clean\s*\(/gi,
+    /markupsafe\.escape\s*\(/gi,
+    /html\.escape\s*\(/gi,
+];
+export const TRIM_NORMALIZE_PATTERNS = [
+    /\.trim\s*\(\s*\)/gi,
+    /\.normalize\s*\(/gi,
+    /\.toLowerCase\s*\(\s*\)/gi,
+    /\.toUpperCase\s*\(\s*\)/gi,
+    /normalizeWhitespace\s*\(/gi,
+];
+export const UNSANITIZED_INPUT_PATTERNS = [
+    /req\.body\.\w+\s*(?!\s*\?\s*\.|\s*&&|\s*\|\|)/gi,
+    /req\.query\.\w+\s*(?!\s*\?\s*\.|\s*&&|\s*\|\|)/gi,
+    /req\.params\.\w+\s*(?!\s*\?\s*\.|\s*&&|\s*\|\|)/gi,
+    /event\.body/gi,
+];
+export const RAW_USER_INPUT_PATTERNS = [
+    /innerHTML\s*=\s*(?:req|request|body|query|params)/gi,
+    /document\.write\s*\(\s*(?:req|request|body|query|params)/gi,
+    /eval\s*\(\s*(?:req|request|body|query|params)/gi,
+];
+// ============================================================================
+// Analysis Functions
+// ============================================================================
+export function shouldExcludeFile(filePath) {
+    const excludePatterns = [
+        /\.test\.[jt]sx?$/,
+        /\.spec\.[jt]sx?$/,
+        /__tests__\//,
+        /\.d\.ts$/,
+        /node_modules\//,
+        /\.min\.[jt]s$/,
+    ];
+    return excludePatterns.some((p) => p.test(filePath));
+}
+export function detectDOMPurifySanitization(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of DOMPURIFY_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'dompurify-sanitize',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    library: 'dompurify',
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectSanitizeHtmlLib(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of SANITIZE_HTML_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'sanitize-html-lib',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    library: 'sanitize-html',
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectValidatorJS(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of VALIDATOR_JS_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'validator-js',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    library: 'validator',
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectEscapeHTML(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of ESCAPE_HTML_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'escape-html',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectEscapeSQL(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of ESCAPE_SQL_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'escape-sql',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectCustomSanitization(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of CUSTOM_SANITIZE_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'custom-sanitize',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectTrimNormalize(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of TRIM_NORMALIZE_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'trim-normalize',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    context: line.trim(),
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectUnsanitizedInputViolations(content, filePath) {
+    const results = [];
+    const lines = content.split('\n');
+    // Check for raw user input patterns
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of RAW_USER_INPUT_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'raw-user-input',
+                    file: filePath,
+                    line: i + 1,
+                    column: match.index + 1,
+                    matchedText: match[0],
+                    issue: 'Raw user input used in dangerous context without sanitization',
+                    suggestedFix: 'Sanitize input using DOMPurify or similar library before use',
+                });
+            }
+        }
+    }
+    return results;
+}
+export function analyzeInputSanitization(content, filePath) {
+    if (shouldExcludeFile(filePath)) {
+        return {
+            patterns: [],
+            violations: [],
+            hasSanitization: false,
+            sanitizationLibraries: [],
+            confidence: 1.0,
+        };
+    }
+    const patterns = [
+        ...detectDOMPurifySanitization(content, filePath),
+        ...detectSanitizeHtmlLib(content, filePath),
+        ...detectValidatorJS(content, filePath),
+        ...detectEscapeHTML(content, filePath),
+        ...detectEscapeSQL(content, filePath),
+        ...detectCustomSanitization(content, filePath),
+        ...detectTrimNormalize(content, filePath),
+    ];
+    const violations = detectUnsanitizedInputViolations(content, filePath);
+    // Extract unique libraries
+    const libraries = new Set();
+    for (const pattern of patterns) {
+        if (pattern.library) {
+            libraries.add(pattern.library);
+        }
+    }
+    const hasSanitization = patterns.length > 0;
+    const confidence = violations.length > 0 ? 0.85 : hasSanitization ? 0.95 : 0.7;
+    return {
+        patterns,
+        violations,
+        hasSanitization,
+        sanitizationLibraries: [...libraries],
+        confidence,
+    };
+}
+// ============================================================================
+// Detector Class
+// ============================================================================
+export class InputSanitizationDetector extends RegexDetector {
+    id = 'security/input-sanitization';
+    name = 'Input Sanitization Detector';
+    description = 'Detects input sanitization patterns and identifies potential unsanitized input vulnerabilities';
+    category = 'security';
+    subcategory = 'input-sanitization';
+    supportedLanguages = ['typescript', 'javascript', 'python'];
+    async detect(context) {
+        if (!this.supportsLanguage(context.language)) {
+            return this.createEmptyResult();
+        }
+        const analysis = analyzeInputSanitization(context.content, context.file);
+        if (analysis.patterns.length === 0 && analysis.violations.length === 0) {
+            return this.createEmptyResult();
+        }
+        return this.createResult([], [], analysis.confidence, {
+            custom: {
+                patterns: analysis.patterns,
+                violations: analysis.violations,
+                hasSanitization: analysis.hasSanitization,
+                sanitizationLibraries: analysis.sanitizationLibraries,
+            },
+        });
+    }
+    generateQuickFix(_violation) {
+        return null;
+    }
+}
+export function createInputSanitizationDetector() {
+    return new InputSanitizationDetector();
+}
+//# sourceMappingURL=input-sanitization.js.map

package/dist/security/input-sanitization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-sanitization.js","sourceRoot":"","sources":["../../src/security/input-sanitization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAkD1D,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,4BAA4B;IAC5B,yBAAyB;IACzB,wBAAwB;IACxB,qBAAqB;IACrB,2CAA2C;CACnC,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,qBAAqB;IACrB,iBAAiB;IACjB,YAAY;IACZ,yBAAyB;IACzB,kBAAkB;CACV,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,iCAAiC;IACjC,0BAA0B;IAC1B,wBAAwB;IACxB,4BAA4B;IAC5B,6BAA6B;IAC7B,6BAA6B;IAC7B,kCAAkC;IAClC,2BAA2B;IAC3B,yBAAyB;IACzB,kCAAkC;IAClC,oDAAoD;IACpD,cAAc;IACd,aAAa;IACb,kBAAkB;IAClB,mBAAmB;IACnB,wBAAwB;IACxB,oBAAoB;IACpB,oBAAoB;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,mBAAmB;IACnB,mBAAmB;IACnB,gCAAgC;IAChC,mBAAmB;IACnB,mBAAmB;IACnB,8BAA8B;CACtB,CAAC;AAEX,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,kBAAkB;IAClB,kBAAkB;IAClB,sBAAsB;IACtB,0BAA0B;IAC1B,yBAAyB;CACjB,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,qBAAqB;IACrB,oBAAoB;IACpB,uBAAuB;IACvB,wDAAwD;CAChD,CAAC;AAEX,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,iCAAiC;IACjC,oBAAoB;IACpB,sBAAsB;IACtB,oBAAoB;IACpB,4BAA4B;IAC5B,cAAc;IACd,cAAc;IACd,+BAA+B;IAC/B,qBAAqB;IACrB,uBAAuB;IACvB,qBAAqB;IACrB,8BAA8B;IAC9B,sBAAsB;IACtB,2BAA2B;IAC3B,qBAAqB;CACb,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,oBAAoB;IACpB,oBAAoB;IACpB,2BAA2B;IAC3B,2BAA2B;IAC3B,4BAA4B;CACpB,CAAC;AAEX,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,iDAAiD;IACjD,kDAAkD;IAClD,mDAAmD;IACnD,eAAe;CACP,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,qDAAqD;IACrD,4DAA4D;IAC5D,iDAAiD;CACzC,CAAC;AAEX,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,eAAe,GAAG;QACtB,kBAAkB;QAClB,kBAAkB;QAClB,aAAa;QACb,UAAU;QACV,gBAAgB;QAChB,eAAe;KAChB,CAAC;IACF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,eAAe;oBACxB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,iBAAiB;oBACvB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,OAAe,EACf,QAAgB;IAEhB,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,oCAAoC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;oBACrB,KAAK,EAAE,+DAA+D;oBACtE,YAAY,EAAE,8DAA8D;iBAC7E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,QAAgB;IAEhB,IAAI,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;YACd,eAAe,EAAE,KAAK;YACtB,qBAAqB,EAAE,EAAE;YACzB,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAmC;QAC/C,GAAG,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjD,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC3C,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC;QACvC,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC;QACtC,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC;QACrC,GAAG,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC9C,GAAG,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC;KAC1C,CAAC;IAEF,MAAM,UAAU,GAAG,gCAAgC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEvE,2BAA2B;IAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAE/E,OAAO;QACL,QAAQ;QACR,UAAU;QACV,eAAe;QACf,qBAAqB,EAAE,CAAC,GAAG,SAAS,CAAC;QACrC,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,OAAO,yBAA0B,SAAQ,aAAa;IACjD,EAAE,GAAG,6BAA6B,CAAC;IACnC,IAAI,GAAG,6BAA6B,CAAC;IACrC,WAAW,GAClB,gGAAgG,CAAC;IAC1F,QAAQ,GAAoB,UAAU,CAAC;IACvC,WAAW,GAAG,oBAAoB,CAAC;IACnC,kBAAkB,GAAe,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEjF,KAAK,CAAC,MAAM,CAAC,OAAyB;QACpC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAEzE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE;YACpD,MAAM,EAAE;gBACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,eAAe,EAAE,QAAQ,CAAC,eAAe;gBACzC,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;aACtD;SACF,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,UAAqB;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,UAAU,+BAA+B;IAC7C,OAAO,IAAI,yBAAyB,EAAE,CAAC;AACzC,CAAC"}

package/dist/security/rate-limiting.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Rate Limiting Detector - Rate limiting and throttling pattern detection
+ *
+ * Detects rate limiting patterns including:
+ * - Rate limiter middleware
+ * - Throttling implementations
+ * - Request quotas
+ * - Sliding window patterns
+ * - Token bucket algorithms
+ *
+ * @requirements 16.7 - Rate limiting patterns
+ */
+import type { Violation, QuickFix, PatternCategory, Language } from 'driftdetect-core';
+import { RegexDetector } from '../base/regex-detector.js';
+import type { DetectionContext, DetectionResult } from '../base/base-detector.js';
+export type RateLimitPatternType = 'rate-limiter' | 'throttle' | 'request-quota' | 'sliding-window' | 'token-bucket' | 'leaky-bucket' | 'fixed-window' | 'redis-rate-limit';
+export type RateLimitViolationType = 'missing-rate-limit' | 'weak-rate-limit' | 'no-ip-tracking' | 'no-user-tracking' | 'hardcoded-limits';
+export interface RateLimitPatternInfo {
+    type: RateLimitPatternType;
+    file: string;
+    line: number;
+    column: number;
+    matchedText: string;
+    algorithm?: string | undefined;
+    library?: string | undefined;
+    context?: string | undefined;
+}
+export interface RateLimitViolationInfo {
+    type: RateLimitViolationType;
+    file: string;
+    line: number;
+    column: number;
+    matchedText: string;
+    issue: string;
+    suggestedFix?: string | undefined;
+    severity: 'high' | 'medium' | 'low';
+}
+export interface RateLimitAnalysis {
+    patterns: RateLimitPatternInfo[];
+    violations: RateLimitViolationInfo[];
+    hasRateLimiting: boolean;
+    usesRedis: boolean;
+    algorithm?: string | undefined;
+    confidence: number;
+}
+export declare const RATE_LIMITER_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const THROTTLE_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const REQUEST_QUOTA_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const SLIDING_WINDOW_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const TOKEN_BUCKET_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const LEAKY_BUCKET_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const FIXED_WINDOW_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const REDIS_RATE_LIMIT_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare const WEAK_RATE_LIMIT_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp];
+export declare const HARDCODED_LIMIT_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp];
+export declare const API_ENDPOINT_PATTERNS: readonly [RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp, RegExp];
+export declare function shouldExcludeFile(filePath: string): boolean;
+export declare function detectRateLimiters(content: string, filePath: string): RateLimitPatternInfo[];
+export declare function detectThrottling(content: string, filePath: string): RateLimitPatternInfo[];
+export declare function detectRequestQuotas(content: string, filePath: string): RateLimitPatternInfo[];
+export declare function detectSlidingWindow(content: string, filePath: string): RateLimitPatternInfo[];
+export declare function detectTokenBucket(content: string, filePath: string): RateLimitPatternInfo[];
+export declare function detectLeakyBucket(content: string, filePath: string): RateLimitPatternInfo[];
+export declare function detectFixedWindow(content: string, filePath: string): RateLimitPatternInfo[];
+export declare function detectRedisRateLimit(content: string, filePath: string): RateLimitPatternInfo[];
+export declare function detectWeakRateLimits(content: string, filePath: string): RateLimitViolationInfo[];
+export declare function detectHardcodedLimits(content: string, filePath: string): RateLimitViolationInfo[];
+export declare function detectMissingRateLimits(content: string, filePath: string): RateLimitViolationInfo[];
+export declare function analyzeRateLimiting(content: string, filePath: string): RateLimitAnalysis;
+export declare class RateLimitingDetector extends RegexDetector {
+    readonly id = "security/rate-limiting";
+    readonly name = "Rate Limiting Detector";
+    readonly description = "Detects rate limiting patterns and identifies missing or weak rate limits";
+    readonly category: PatternCategory;
+    readonly subcategory = "rate-limiting";
+    readonly supportedLanguages: Language[];
+    detect(context: DetectionContext): Promise<DetectionResult>;
+    generateQuickFix(_violation: Violation): QuickFix | null;
+}
+export declare function createRateLimitingDetector(): RateLimitingDetector;
+//# sourceMappingURL=rate-limiting.d.ts.map

package/dist/security/rate-limiting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiting.d.ts","sourceRoot":"","sources":["../../src/security/rate-limiting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAMlF,MAAM,MAAM,oBAAoB,GAC5B,cAAc,GACd,UAAU,GACV,eAAe,GACf,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,cAAc,GACd,kBAAkB,CAAC;AAEvB,MAAM,MAAM,sBAAsB,GAC9B,oBAAoB,GACpB,iBAAiB,GACjB,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,eAAO,MAAM,qBAAqB,mKAsBxB,CAAC;AAEX,eAAO,MAAM,iBAAiB,mGAYpB,CAAC;AAEX,eAAO,MAAM,sBAAsB,2FAWzB,CAAC;AAEX,eAAO,MAAM,uBAAuB,mEAQ1B,CAAC;AAEX,eAAO,MAAM,qBAAqB,mGAYxB,CAAC;AAEX,eAAO,MAAM,qBAAqB,2DAOxB,CAAC;AAEX,eAAO,MAAM,qBAAqB,2DAOxB,CAAC;AAEX,eAAO,MAAM,yBAAyB,mFAU5B,CAAC;AAGX,eAAO,MAAM,wBAAwB,2CAK3B,CAAC;AAEX,eAAO,MAAM,wBAAwB,2CAK3B,CAAC;AAEX,eAAO,MAAM,qBAAqB,mGAcxB,CAAC;AAMX,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAU3D;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,oBAAoB,EAAE,CA8BxB;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,oBAAoB,EAAE,CA4BxB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,oBAAoB,EAAE,CAuBxB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,oBAAoB,EAAE,CAwBxB;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,oBAAoB,EAAE,CA8BxB;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,oBAAoB,EAAE,CAwBxB;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,oBAAoB,EAAE,CAwBxB;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,oBAAoB,EAAE,CAwBxB;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,sBAAsB,EAAE,CAyB1B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,sBAAsB,EAAE,CAmC1B;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,sBAAsB,EAAE,CAyC1B;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,iBAAiB,CAyDnB;AAMD,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,QAAQ,CAAC,EAAE,4BAA4B;IACvC,QAAQ,CAAC,IAAI,4BAA4B;IACzC,QAAQ,CAAC,WAAW,+EAC0D;IAC9E,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAc;IAChD,QAAQ,CAAC,WAAW,mBAAmB;IACvC,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,EAAE,CAA0C;IAE3E,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAsBjE,gBAAgB,CAAC,UAAU,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI;CAGzD;AAED,wBAAgB,0BAA0B,IAAI,oBAAoB,CAEjE"}