insa-check-core 0.1.0

package/dist/code/checks/javascript.js

@@ -0,0 +1,333 @@
+import { jsFinding, NO_PATTERN, outcomeFromFindings, snippetOf } from "../findings.js";
+import { isJsDynamicString, isJsFalse, isJsLiteral, isJsTrue, jsArgs, jsDotted, jsIdentifiers, jsString, objectProp, unwrap, walkJs, } from "../javascript/index.js";
+import { looksSecret, SECRET_ASSIGN, SECRET_DICT_KEY } from "./secrets.js";
+import { codeCheck, PASSWORD_IDENT, SECRET_IDENT, SECURITY_CONTEXT } from "./shared.js";
+/** Pattern rules for any JavaScript / TypeScript code (Node servers and front-end code alike). */
+const LANG = "JavaScript/TypeScript";
+export function jsPatternCheck(key, find, what) {
+    return codeCheck(key, ["javascript"], async (ctx) => {
+        const index = await ctx.javascript();
+        return outcomeFromFindings(await find(index, ctx), NO_PATTERN(what, index.modules.length, LANG));
+    });
+}
+/**
+ * How risky is passing `arg` to a sink?
+ *  high   - contains request data directly, or is a string built from it
+ *  medium - built dynamically (template literal, +), or derived from request data via local variables
+ *  low    - some other non-literal value (origin unknown)
+ */
+export function jsArgRisk(site, arg, opts = {}) {
+    const a = unwrap(arg);
+    if (!a || isJsLiteral(a))
+        return undefined;
+    const scope = site.module.scope(site.fn);
+    if (site.module.isRequestDerived(a))
+        return "high";
+    const derived = site.module.isRequestDerived(a, scope);
+    if (opts.requestOnly && !derived)
+        return undefined;
+    if (isJsDynamicString(a))
+        return derived ? "high" : "medium";
+    if (derived)
+        return "medium";
+    if (a.type === "Identifier" && scope?.dynamicStrings.has(a["name"]))
+        return "medium";
+    return opts.unknownIsLow === false ? undefined : "low";
+}
+function sinkFindings(sites, match, rule, why, opts = {}) {
+    const out = [];
+    for (const site of sites) {
+        const m = match(site);
+        if (!m)
+            continue;
+        const risks = (Array.isArray(m) ? m : [m]).map((a) => jsArgRisk(site, a, opts)).filter((r) => !!r);
+        if (risks.length === 0)
+            continue;
+        const confidence = risks.includes("high") ? "high" : risks.includes("medium") ? "medium" : "low";
+        out.push(jsFinding(site.module, site.node, rule, confidence, why));
+    }
+    return out;
+}
+const first = (s) => jsArgs(s.node)[0];
+const receiver = (s) => {
+    const callee = unwrap(s.node["callee"]);
+    return callee && /MemberExpression$/.test(callee.type) ? (jsDotted(callee["object"]) ?? "") : "";
+};
+const allNodes = function* (index) {
+    for (const module of index.modules)
+        for (const node of walkJs(module.tree))
+            yield { module, node };
+};
+const propName = (p) => {
+    const k = p["key"];
+    return k.type === "Identifier" ? k["name"] : jsString(k);
+};
+// --- #6 Hard-coded secrets ------------------------------------------------------
+const SECRET_WHY = "Credentials in source code leak through repositories, backups and builds; load them from the environment or a secret store.";
+export const jsHardcodedSecrets = jsPatternCheck("js-hardcoded-secrets", (index) => {
+    const out = [];
+    for (const { module, node } of allNodes(index)) {
+        if (node.type === "VariableDeclarator") {
+            const id = node["id"];
+            if (id.type === "Identifier" && SECRET_ASSIGN.test(id["name"]) && looksSecret(jsString(node["init"]))) {
+                out.push(jsFinding(module, node, "js-hardcoded-secret", "medium", SECRET_WHY));
+            }
+        }
+        else if (node.type === "AssignmentExpression") {
+            const name = jsDotted(node["left"])?.split(".").pop() ?? "";
+            if (SECRET_ASSIGN.test(name) && looksSecret(jsString(node["right"])))
+                out.push(jsFinding(module, node, "js-hardcoded-secret", "medium", SECRET_WHY));
+        }
+        else if (node.type === "ObjectProperty") {
+            if (SECRET_DICT_KEY.test(propName(node) ?? "") && looksSecret(jsString(node["value"]))) {
+                out.push(jsFinding(module, node, "js-hardcoded-secret", "medium", SECRET_WHY));
+            }
+        }
+    }
+    for (const s of index.calls()) {
+        // jwt.sign(payload, "literal") / jwt.verify(token, "literal")
+        if (/^jsonwebtoken\.(sign|verify)$/.test(s.name ?? "") && looksSecret(jsString(jsArgs(s.node)[1]))) {
+            out.push(jsFinding(s.module, s.node, "js-hardcoded-jwt-secret", "high", "A hard-coded JWT secret lets anyone with the source forge valid tokens."));
+        }
+    }
+    return out;
+}, "hard-coded credentials or signing secrets");
+// --- #19 / #20 Cryptography -------------------------------------------------------
+export const jsWeakCrypto = jsPatternCheck("js-weak-crypto", (index) => {
+    const out = [];
+    for (const s of index.calls()) {
+        const alg = jsString(first(s))?.toLowerCase() ?? "";
+        if (s.name === "crypto.createHash" && (alg === "md5" || alg === "sha1")) {
+            const security = SECURITY_CONTEXT.test(s.module.line(s.module.lineOf(s.node)));
+            out.push(jsFinding(s.module, s.node, "js-weak-hash", security ? "high" : "low", security ? "MD5/SHA-1 are broken for security purposes (collisions, fast brute force)." : "MD5/SHA-1 in use; acceptable only for non-security checksums. Confirm how it is used."));
+        }
+        else if (s.name === "crypto.createCipher" || s.name === "crypto.createDecipher") {
+            out.push(jsFinding(s.module, s.node, "js-createcipher", "high", "crypto.createCipher derives the key without a salt and uses no IV; it is deprecated. Use createCipheriv with a random IV."));
+        }
+        else if (/^crypto\.create(De)?cipheriv$/.test(s.name ?? "") && /(^|-)(des|des3|des-ede3?|rc4|rc2|bf|blowfish)(-|$)/.test(alg)) {
+            out.push(jsFinding(s.module, s.node, "js-weak-cipher", "high", "DES/3DES/RC4/Blowfish-class ciphers are deprecated and breakable."));
+        }
+        else if (/^(md5|sha1|blueimp-md5|js-md5|js-sha1)$/.test(s.name ?? "")) {
+            const security = SECURITY_CONTEXT.test(s.module.line(s.module.lineOf(s.node)));
+            out.push(jsFinding(s.module, s.node, "js-weak-hash", security ? "high" : "low", "MD5/SHA-1 are broken for security purposes; fine only for non-security checksums."));
+        }
+    }
+    return out;
+}, "use of weak hashes or ciphers");
+export const jsCryptoMisuse = jsPatternCheck("js-crypto-misuse", (index) => {
+    const out = [];
+    for (const s of index.calls()) {
+        const line = s.module.line(s.module.lineOf(s.node));
+        if (s.name === "Math.random" && SECURITY_CONTEXT.test(line)) {
+            out.push(jsFinding(s.module, s.node, "js-insecure-random", "medium", "Math.random() is predictable; use crypto.randomBytes / crypto.randomUUID for tokens, passwords and keys."));
+        }
+        else if (/^crypto\.create(De)?cipheriv$/.test(s.name ?? "") && /-ecb$/i.test(jsString(first(s)) ?? "")) {
+            out.push(jsFinding(s.module, s.node, "js-ecb-mode", "high", "ECB mode leaks plaintext patterns; use an authenticated mode such as GCM."));
+        }
+        else if (s.method === "update" && /createHash\(\)$/.test(receiver(s)) && jsArgs(s.node).some((a) => jsIdentifiers(a).some((i) => PASSWORD_IDENT.test(i)))) {
+            out.push(jsFinding(s.module, s.node, "js-fast-password-hash", "high", "Passwords hashed with a fast, unsalted hash can be brute-forced; use bcrypt, scrypt or Argon2."));
+        }
+    }
+    for (const { module, node } of allNodes(index)) {
+        if (node.type === "ObjectProperty" && propName(node) === "rejectUnauthorized" && isJsFalse(node["value"])) {
+            out.push(jsFinding(module, node, "js-tls-reject-unauthorized", "high", "rejectUnauthorized: false disables TLS certificate verification, allowing man-in-the-middle attacks."));
+        }
+        else if (node.type === "AssignmentExpression" && jsDotted(node["left"]) === "process.env.NODE_TLS_REJECT_UNAUTHORIZED") {
+            out.push(jsFinding(module, node, "js-tls-env-disable", "high", "NODE_TLS_REJECT_UNAUTHORIZED=0 disables TLS certificate verification for the whole process."));
+        }
+        else if (node.type === "ObjectProperty" && propName(node) === "algorithms" && module.text(node["value"]).toLowerCase().includes("none")) {
+            out.push(jsFinding(module, node, "js-jwt-none", "high", "Accepting the JWT \"none\" algorithm lets anyone forge tokens."));
+        }
+    }
+    return out;
+}, "cryptographic misuse (insecure randomness, ECB, fast password hashes, disabled TLS verification)");
+// --- #34 Plaintext passwords -------------------------------------------------------
+const HASHING = /hash|bcrypt|argon|scrypt|pbkdf2|encrypt|digest/i;
+export const jsPlaintextPasswords = jsPatternCheck("js-plaintext-passwords", (index) => {
+    const out = [];
+    for (const { module, node } of allNodes(index)) {
+        if (node.type === "AssignmentExpression") {
+            const left = unwrap(node["left"]);
+            const right = unwrap(node["right"]);
+            if (!left || !right || !/MemberExpression$/.test(left.type) || isJsLiteral(right))
+                continue;
+            const name = jsDotted(left)?.split(".").pop() ?? "";
+            if (!PASSWORD_IDENT.test(name) || /hash|digest|salt/i.test(name) || HASHING.test(module.text(right)))
+                continue;
+            out.push(jsFinding(module, node, "js-plaintext-password-assign", module.isRequestDerived(right) ? "high" : "medium", "Assigning a raw value to a password field stores it unhashed; hash it first (bcrypt, scrypt, Argon2)."));
+        }
+        else if (node.type === "ObjectProperty") {
+            const name = propName(node) ?? "";
+            const value = node["value"];
+            if (PASSWORD_IDENT.test(name) && !/hash|digest|salt/i.test(name) && module.isRequestDerived(value) && !HASHING.test(module.text(value))) {
+                // Only inside calls that persist data.
+                out.push(jsFinding(module, node, "js-plaintext-password-stored", "medium", "A request password is passed on unhashed; if this object is saved, the password is stored in plaintext."));
+            }
+        }
+        else if (node.type === "BinaryExpression" && ["===", "==", "!==", "!="].includes(node["operator"])) {
+            const side = (x) => (jsDotted(x)?.split(".").pop() ?? "");
+            const l = unwrap(node["left"]);
+            const r = unwrap(node["right"]);
+            if (!l || !r || isJsLiteral(l) || isJsLiteral(r))
+                continue;
+            if (PASSWORD_IDENT.test(side(l)) && PASSWORD_IDENT.test(side(r)) && !/hash|digest|confirm|repeat|again/i.test(module.text(node))) {
+                out.push(jsFinding(module, node, "js-plaintext-password-compare", "medium", "Comparing passwords directly implies they are stored in plaintext; compare hashes with bcrypt.compare or similar."));
+            }
+        }
+    }
+    return out;
+}, "plaintext password storage or comparison");
+// --- #41 SQL injection ---------------------------------------------------------------
+const SQL_ALWAYS = /^(query|execute|raw|\$queryRawUnsafe|\$executeRawUnsafe)$/;
+const SQL_ON_DB = /^(all|get|run|prepare|exec|each)$/;
+const DB_RECEIVER = /(^|\.)(db|database|sqlite|conn|connection|pool|client|knex|sequelize|pg|mysql)(\(\))?$/i;
+const SQL_TEXT = /\b(select|insert|update|delete|where|from|values|drop|alter)\b/i;
+export const jsSqlInjection = jsPatternCheck("js-sql-injection", (index) => sinkFindings(index.calls(), (s) => {
+    const m = s.method ?? "";
+    const onDb = DB_RECEIVER.test(receiver(s));
+    if (!(SQL_ALWAYS.test(m) || (SQL_ON_DB.test(m) && onDb)))
+        return undefined;
+    const arg = unwrap(first(s));
+    if (!arg)
+        return undefined;
+    // Dynamic strings must look like SQL; other values only count on a database-like receiver.
+    if (isJsDynamicString(arg))
+        return SQL_TEXT.test(s.module.text(arg)) ? arg : undefined;
+    return onDb ? arg : undefined;
+}, "js-sql-string-building", "SQL built from strings can be manipulated by user input; use placeholders and pass values separately."), "SQL built by string concatenation or template literals");
+// --- #44 OS command injection ---------------------------------------------------------
+export const jsCommandInjection = jsPatternCheck("js-command-injection", (index) => {
+    const calls = index.calls();
+    return [
+        ...sinkFindings(calls, (s) => (/^(child_process\.(exec|execSync)|shelljs\.exec|execa\.command(Sync)?)$/.test(s.name ?? "") ? first(s) : undefined), "js-shell-command", "Running a shell command built from variables allows command injection; use execFile/spawn with an argument array."),
+        ...sinkFindings(calls, (s) => {
+            if (!/^child_process\.(spawn|spawnSync|execFile|execFileSync)$/.test(s.name ?? ""))
+                return undefined;
+            const args = jsArgs(s.node);
+            return args.some((a) => isJsTrue(objectProp(a, "shell"))) ? [args[0], args[1]] : undefined;
+        }, "js-spawn-shell", "shell: true with variable input allows command injection; drop the shell option and pass arguments as an array."),
+    ];
+}, "OS command execution with variable input");
+// --- #54 Dynamic code execution -------------------------------------------------------
+export const jsCodeInjection = jsPatternCheck("js-code-injection", (index) => {
+    const calls = index.calls();
+    return [
+        ...sinkFindings(calls, (s) => (s.name === "eval" ? first(s) : undefined), "js-eval", "eval() of non-constant input runs arbitrary code."),
+        ...sinkFindings(calls, (s) => (s.isNew && s.name === "Function" ? jsArgs(s.node).at(-1) : undefined), "js-new-function", "new Function() with non-constant input runs arbitrary code."),
+        ...sinkFindings(calls, (s) => (/^vm\.(runInNewContext|runInThisContext|runInContext|Script|compileFunction)$/.test(s.name ?? "") ? first(s) : undefined), "js-vm-run", "The vm module is not a security sandbox; running variable input executes arbitrary code."),
+        ...sinkFindings(calls, (s) => {
+            const a = first(s);
+            return /^(setTimeout|setInterval)$/.test(s.name ?? "") && a && isJsDynamicString(a) ? a : undefined;
+        }, "js-timer-string", "Passing a built string to setTimeout/setInterval evaluates it as code."),
+        ...sinkFindings(calls, (s) => (s.name === "require" || /(^|\.)unserialize$/.test(s.name ?? "") ? first(s) : undefined), "js-dynamic-require-or-unserialize", "Loading modules or deserialising objects chosen by request data can execute attacker-controlled code.", { requestOnly: true }),
+    ];
+}, "eval, new Function, vm execution or unsafe deserialisation of variable input");
+// --- #42 Path traversal ----------------------------------------------------------------
+const FS_SINK = /^(fs|fs\.promises|fs\/promises|fs-extra)\.(readFile|readFileSync|createReadStream|writeFile|writeFileSync|createWriteStream|appendFile|appendFileSync|unlink|unlinkSync|rm|rmSync|readdir|readdirSync|stat|statSync|access|open|openSync|copyFile|rename)$|^path\.(join|resolve)$/;
+export const jsPathTraversal = jsPatternCheck("js-path-traversal", (index) => sinkFindings(index.calls(), (s) => (FS_SINK.test(s.name ?? "") || (/^(sendFile|download)$/.test(s.method ?? "") && /(^|\.)res(ponse)?$/.test(receiver(s))) ? jsArgs(s.node) : undefined), "js-path-from-request", "File paths built from request data allow ../ traversal; normalise and confine paths to an allowed directory.", { requestOnly: true }), "file paths built from request data");
+// --- #43 Cross-site scripting -----------------------------------------------------------
+export const jsXss = jsPatternCheck("js-xss", async (index, ctx) => {
+    const out = sinkFindings(index.calls(), (s) => {
+        const a = first(s);
+        if (!a || !/^(send|write|end)$/.test(s.method ?? "") || !/(^|\.)res(ponse)?$/.test(receiver(s)))
+            return undefined;
+        return isJsDynamicString(a) ? a : undefined;
+    }, "js-response-interpolation", "Writing request data into an HTML response without escaping enables reflected XSS.", { requestOnly: true });
+    for (const { module, node } of allNodes(index)) {
+        if (node.type === "JSXAttribute" && node["name"]["name"] === "dangerouslySetInnerHTML") {
+            out.push(jsFinding(module, node, "react-dangerously-set-inner-html", "low", "dangerouslySetInnerHTML renders raw HTML; safe only if the value can never contain user input or is sanitised."));
+        }
+        else if (node.type === "AssignmentExpression") {
+            const prop = jsDotted(node["left"])?.split(".").pop();
+            if ((prop === "innerHTML" || prop === "outerHTML") && !isJsLiteral(node["right"])) {
+                out.push(jsFinding(module, node, "js-inner-html", "low", "Assigning non-constant content to innerHTML can inject script; use textContent or sanitise."));
+            }
+        }
+    }
+    for (const s of index.calls()) {
+        if (s.name === "document.write" && first(s) && !isJsLiteral(first(s))) {
+            out.push(jsFinding(s.module, s.node, "js-document-write", "low", "document.write with non-constant content can inject script."));
+        }
+    }
+    // EJS templates are not JavaScript modules; regex is the only option (higher false-positive rate, flagged in output).
+    for (const f of ctx.files.filter((x) => x.path.endsWith(".ejs"))) {
+        (await ctx.read(f.path)).split(/\r?\n/).forEach((line, i) => {
+            if (/<%-(?!\s*include\b)/.test(line)) {
+                out.push({ file: f.path, line: i + 1, snippet: snippetOf(line), why: "<%- outputs a value without HTML-escaping; safe only if it can never contain user input.", confidence: "low", method: "regex", rule: "ejs-unescaped-output" });
+            }
+        });
+    }
+    return out;
+}, "unescaped output (interpolated responses, innerHTML, dangerouslySetInnerHTML, unescaped templates)");
+// --- #55 Regex / #58 template injection / #56 mass assignment ---------------------------
+export const jsRegexInjection = jsPatternCheck("js-regex-injection", (index) => sinkFindings(index.calls(), (s) => (s.name === "RegExp" ? first(s) : undefined), "js-regex-from-request", "Regular expressions built from request data allow ReDoS and pattern manipulation; escape the input.", { requestOnly: true }), "regular expressions built from request data");
+export const jsTemplateInjection = jsPatternCheck("js-template-injection", (index) => sinkFindings(index.calls(), (s) => (/^(ejs\.render|pug\.(render|compile)|handlebars\.compile|nunjucks\.renderString|mustache\.render|lodash\.template|_\.template|dot\.template)$/i.test(s.name ?? "") ? first(s) : undefined), "js-template-from-input", "Compiling templates from request data enables server-side template injection.", { requestOnly: true }), "templates compiled from request data");
+const PERSIST = /^(create|update|updateOne|updateMany|findByIdAndUpdate|findOneAndUpdate|insert|insertOne|insertMany|upsert|save|build|assign|merge|set)$/;
+const BODY = /^(?:(?:req|request)\.body|ctx\.request\.body)$/;
+export const jsMassAssignment = jsPatternCheck("js-mass-assignment", (index) => {
+    const out = [];
+    const isBody = (a) => {
+        const n = unwrap(a);
+        if (!n)
+            return false;
+        if (BODY.test(jsDotted(n) ?? ""))
+            return true;
+        return n.type === "ObjectExpression" && n["properties"].some((p) => p.type === "SpreadElement" && BODY.test(jsDotted(p["argument"]) ?? ""));
+    };
+    for (const s of index.calls()) {
+        if ((s.isNew || PERSIST.test(s.method ?? "")) && jsArgs(s.node).some(isBody)) {
+            out.push(jsFinding(s.module, s.node, "js-body-to-model", "medium", "Passing the whole request body to a model lets clients set any field (e.g. role, isAdmin); pick allowed fields explicitly."));
+        }
+    }
+    return out;
+}, "mass-assignment patterns (whole request body passed to a model)");
+// --- #60 / #97 Open redirect -------------------------------------------------------------
+export const jsOpenRedirect = jsPatternCheck("js-open-redirect", (index) => {
+    const out = [];
+    for (const s of index.calls()) {
+        if (s.method !== "redirect" || !/(^|\.)(res(ponse)?|reply|ctx)$/.test(receiver(s)))
+            continue;
+        const target = jsArgs(s.node).at(-1);
+        if (!target || !s.module.isRequestDerived(target, s.module.scope(s.fn)))
+            continue;
+        out.push(jsFinding(s.module, s.node, "js-open-redirect", s.module.isRequestDerived(target) ? "high" : "medium", "Redirecting to a URL taken from the request lets attackers send users to malicious sites; allow only relative paths or known hosts."));
+    }
+    return out;
+}, "redirects to request-controlled URLs");
+// --- #77 Secrets in logs -------------------------------------------------------------------
+const LOG_CALL = /^(console\.(log|info|warn|error|debug|trace)|(.*\.)?(logger|log|winston|pino|bunyan)\.(log|info|warn|warning|error|debug|trace|fatal|verbose))$/i;
+const REQUEST_DUMP = /^(?:req|request)\.(body|headers|cookies|session)$/;
+export const jsSecretsInLogs = jsPatternCheck("js-secrets-in-logs", (index) => {
+    const out = [];
+    for (const s of index.calls()) {
+        if (!LOG_CALL.test(s.name ?? ""))
+            continue;
+        for (const arg of jsArgs(s.node)) {
+            const a = unwrap(arg);
+            if (!a || isJsLiteral(a))
+                continue;
+            const secret = jsIdentifiers(a).find((i) => SECRET_IDENT.test(i));
+            const inner = a.type === "CallExpression" ? unwrap(jsArgs(a)[0]) : a;
+            const dump = REQUEST_DUMP.test(jsDotted(inner) ?? "");
+            if (secret || dump) {
+                out.push(jsFinding(s.module, s.node, "js-secret-logged", "medium", dump ? "Logging raw request data can write passwords, tokens and session IDs to logs." : `Logs a value named "${secret}", which may be a credential or token.`));
+                break;
+            }
+        }
+    }
+    return out;
+}, "logging of passwords, tokens or raw request data");
+// --- #86 / #87 XML ---------------------------------------------------------------------------
+const xmlOption = (index, option, rule, why) => {
+    const out = [];
+    for (const { module, node } of allNodes(index)) {
+        if (node.type === "ObjectProperty" && propName(node) === option && isJsTrue(node["value"]))
+            out.push(jsFinding(module, node, rule, "high", why));
+    }
+    return out;
+};
+export const jsXxe = jsPatternCheck("js-xml-xxe", (index) => (index.imports("libxmljs") || index.imports("libxmljs2") ? xmlOption(index, "noent", "libxml-noent", "noent: true makes libxml expand external entities (XXE): file disclosure and SSRF.") : []), "XML parser options that expand external entities");
+export const jsExternalDtd = jsPatternCheck("js-xml-dtd", (index) => index.imports("libxmljs") || index.imports("libxmljs2")
+    ? [...xmlOption(index, "dtdload", "libxml-dtdload", "dtdload: true lets documents pull external DTDs."), ...xmlOption(index, "dtdvalid", "libxml-dtdvalid", "dtdvalid: true loads and validates against external DTDs.")]
+    : [], "XML parser options that load external DTDs");
+//# sourceMappingURL=javascript.js.map

package/dist/code/checks/javascript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"javascript.js","sourceRoot":"","sources":["../../../src/code/checks/javascript.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACvF,OAAO,EACL,iBAAiB,EACjB,SAAS,EACT,WAAW,EACX,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,UAAU,EACV,MAAM,EACN,MAAM,GAKP,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAExF,kGAAkG;AAElG,MAAM,IAAI,GAAG,uBAAuB,CAAC;AAErC,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,IAAkF,EAClF,IAAY;IAEZ,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;QACrC,OAAO,mBAAmB,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,IAAgB,EAAE,GAAuB,EAAE,IAAI,GAAgB,EAAE;IACzF,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,iBAAiB,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7D,IAAI,OAAO;QAAE,OAAO,QAAQ,CAAC;IAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAW,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/F,OAAO,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CACnB,KAAmB,EACnB,KAAwE,EACxE,IAAY,EACZ,GAAW,EACX,IAAI,GAAgB,EAAE;IAEtB,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACjG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,MAAM,QAAQ,GAAG,CAAC,CAAa,EAAE,EAAE;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,OAAO,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnG,CAAC,CAAC;AACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,KAAc;IACxC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO;QAAE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACrG,CAAC,CAAC;AACF,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE;IAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAW,CAAC;IAC7B,OAAO,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAE,CAAC,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC,CAAC;AAEF,mFAAmF;AACnF,MAAM,UAAU,GAAG,6HAA6H,CAAC;AAEjJ,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAC9C,sBAAsB,EACtB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACvC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAW,CAAC;YAChC,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAW,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChH,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAC5D,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;QACvJ,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC1C,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9B,8DAA8D;QAC9D,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,yEAAyE,CAAC,CAAC,CAAC;QACtJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,2CAA2C,CAC5C,CAAC;AAEF,qFAAqF;AACrF,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CACxC,gBAAgB,EAChB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC;YACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/E,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAC5E,QAAQ,CAAC,CAAC,CAAC,4EAA4E,CAAC,CAAC,CAAC,uFAAuF,CAAC,CAAC,CAAC;QACxL,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,IAAI,CAAC,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YAClF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,2HAA2H,CAAC,CAAC,CAAC;QAChM,CAAC;aAAM,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,oDAAoD,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,mEAAmE,CAAC,CAAC,CAAC;QACvI,CAAC;aAAM,IAAI,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/E,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,mFAAmF,CAAC,CAAC,CAAC;QACxK,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,+BAA+B,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAC1C,kBAAkB,EAClB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,0GAA0G,CAAC,CAAC,CAAC;QACpL,CAAC;aAAM,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACzG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,2EAA2E,CAAC,CAAC,CAAC;QAC5I,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5J,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,gGAAgG,CAAC,CAAC,CAAC;QAC3K,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,oBAAoB,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC1G,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,sGAAsG,CAAC,CAAC,CAAC;QAClL,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,sBAAsB,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,0CAA0C,EAAE,CAAC;YACzH,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,6FAA6F,CAAC,CAAC,CAAC;QACjK,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAW,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpJ,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,gEAAgE,CAAC,CAAC,CAAC;QAC7H,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,kGAAkG,CACnG,CAAC;AAEF,sFAAsF;AACtF,MAAM,OAAO,GAAG,iDAAiD,CAAC;AAElE,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAChD,wBAAwB,EACxB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC5F,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC/G,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EACjH,uGAAuG,CAAC,CAAC,CAAC;QAC9G,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAW,CAAC;YACtC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACxI,uCAAuC;gBACvC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE,QAAQ,EAAE,yGAAyG,CAAC,CAAC,CAAC;YACzL,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAW,CAAC,EAAE,CAAC;YAC/G,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC3D,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACjI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,QAAQ,EAAE,mHAAmH,CAAC,CAAC,CAAC;YACpM,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,0CAA0C,CAC3C,CAAC;AAEF,wFAAwF;AACxF,MAAM,UAAU,GAAG,2DAA2D,CAAC;AAC/E,MAAM,SAAS,GAAG,mCAAmC,CAAC;AACtD,MAAM,WAAW,GAAG,yFAAyF,CAAC;AAC9G,MAAM,QAAQ,GAAG,iEAAiE,CAAC;AAEnF,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAC1C,kBAAkB,EAClB,CAAC,KAAK,EAAE,EAAE,CACR,YAAY,CACV,KAAK,CAAC,KAAK,EAAE,EACb,CAAC,CAAC,EAAE,EAAE;IACJ,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,2FAA2F;IAC3F,IAAI,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAChC,CAAC,EACD,wBAAwB,EACxB,uGAAuG,CACxG,EACH,wDAAwD,CACzD,CAAC;AAEF,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAC9C,sBAAsB,EACtB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5B,OAAO;QACL,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,wEAAwE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAChJ,kBAAkB,EAAE,mHAAmH,CAAC;QAC1I,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE;YAC3B,IAAI,CAAC,0DAA0D,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,OAAO,SAAS,CAAC;YACrG,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7F,CAAC,EAAE,gBAAgB,EAAE,iHAAiH,CAAC;KACxI,CAAC;AACJ,CAAC,EACD,0CAA0C,CAC3C,CAAC;AAEF,yFAAyF;AACzF,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAC3C,mBAAmB,EACnB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5B,OAAO;QACL,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,mDAAmD,CAAC;QACzI,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,iBAAiB,EAAE,6DAA6D,CAAC;QACvL,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,8EAA8E,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EACtJ,WAAW,EAAE,0FAA0F,CAAC;QAC1G,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE;YAC3B,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtG,CAAC,EAAE,iBAAiB,EAAE,wEAAwE,CAAC;QAC/F,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EACpH,mCAAmC,EAAE,uGAAuG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;KACvK,CAAC;AACJ,CAAC,EACD,8EAA8E,CAC/E,CAAC;AAEF,0FAA0F;AAC1F,MAAM,OAAO,GAAG,mRAAmR,CAAC;AAEpS,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAC3C,mBAAmB,EACnB,CAAC,KAAK,EAAE,EAAE,CACR,YAAY,CACV,KAAK,CAAC,KAAK,EAAE,EACb,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAC5J,sBAAsB,EACtB,8GAA8G,EAC9G,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,EACH,oCAAoC,CACrC,CAAC;AAEF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,KAAK,GAAG,cAAc,CACjC,QAAQ,EACR,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;IACnB,MAAM,GAAG,GAAkB,YAAY,CACrC,KAAK,CAAC,KAAK,EAAE,EACb,CAAC,CAAC,EAAE,EAAE;QACJ,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAClH,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC,EACD,2BAA2B,EAC3B,oFAAoF,EACpF,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;IACF,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,IAAK,IAAI,CAAC,MAAM,CAAY,CAAC,MAAM,CAAC,KAAK,yBAAyB,EAAE,CAAC;YACnG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,kCAAkC,EAAE,KAAK,EAAE,gHAAgH,CAAC,CAAC,CAAC;QACjM,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtD,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAClF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,6FAA6F,CAAC,CAAC,CAAC;YAC3J,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,6DAA6D,CAAC,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;IACD,sHAAsH;IACtH,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACjE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YAC1D,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,0FAA0F,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACvO,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,oGAAoG,CACrG,CAAC;AAEF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAC5C,oBAAoB,EACpB,CAAC,KAAK,EAAE,EAAE,CACR,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,uBAAuB,EACtG,qGAAqG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EACjI,6CAA6C,CAC9C,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAC/C,uBAAuB,EACvB,CAAC,KAAK,EAAE,EAAE,CACR,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,+IAA+I,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAC5N,wBAAwB,EAAE,+EAA+E,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EACrI,sCAAsC,CACvC,CAAC;AAEF,MAAM,OAAO,GAAG,0IAA0I,CAAC;AAC3J,MAAM,IAAI,GAAG,gDAAgD,CAAC;AAE9D,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAC5C,oBAAoB,EACpB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE;QACrC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,OAAO,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAK,CAAC,CAAC,YAAY,CAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5J,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,4HAA4H,CAAC,CAAC,CAAC;QACpM,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,iEAAiE,CAClE,CAAC;AAEF,4FAA4F;AAC5F,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAC1C,kBAAkB,EAClB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7F,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,SAAS;QAClF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAC5G,qIAAqI,CAAC,CAAC,CAAC;IAC5I,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,sCAAsC,CACvC,CAAC;AAEF,8FAA8F;AAC9F,MAAM,QAAQ,GAAG,kJAAkJ,CAAC;AACpK,MAAM,YAAY,GAAG,mDAAmD,CAAC;AAEzE,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAC3C,oBAAoB,EACpB,CAAC,KAAK,EAAE,EAAE;IACR,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;YAAE,SAAS;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;gBAAE,SAAS;YACnC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACtD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAC/D,IAAI,CAAC,CAAC,CAAC,+EAA+E,CAAC,CAAC,CAAC,uBAAuB,MAAM,wCAAwC,CAAC,CAAC,CAAC;gBACnK,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,kDAAkD,CACnD,CAAC;AAEF,gGAAgG;AAChG,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,MAAc,EAAE,IAAY,EAAE,GAAW,EAAiB,EAAE;IAC7F,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACnJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,KAAK,GAAG,cAAc,CACjC,YAAY,EACZ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,oFAAoF,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAC3M,kDAAkD,CACnD,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CACzC,YAAY,EACZ,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;IACrD,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,kDAAkD,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,2DAA2D,CAAC,CAAC;IACzN,CAAC,CAAC,EAAE,EACR,4CAA4C,CAC7C,CAAC"}

package/dist/code/checks/php.d.ts

@@ -0,0 +1,27 @@
+import type { CodeCheck } from "../types.js";
+export declare const phpHardcodedSecrets: CodeCheck;
+export declare const phpWeakCrypto: CodeCheck;
+export declare const phpCryptoMisuse: CodeCheck;
+export declare const phpPlaintextPasswords: CodeCheck;
+export declare const phpSqlInjection: CodeCheck;
+export declare const phpCommandInjection: CodeCheck;
+export declare const phpCodeInjection: CodeCheck;
+export declare const phpPathTraversal: CodeCheck;
+export declare const phpXss: CodeCheck;
+export declare const phpRegexInjection: CodeCheck;
+export declare const phpMassAssignment: CodeCheck;
+export declare const phpOpenRedirect: CodeCheck;
+export declare const phpSecretsInLogs: CodeCheck;
+export declare const phpXxe: CodeCheck;
+export declare const phpExternalDtd: CodeCheck;
+export declare const laravelDebug: CodeCheck;
+export declare const laravelSessionSecure: CodeCheck;
+export declare const laravelSessionHttpOnly: CodeCheck;
+export declare const laravelSessionExpiry: CodeCheck;
+export declare const laravelCsrf: CodeCheck;
+export declare const laravelAuthRateLimit: CodeCheck;
+export declare const laravelLoginRotation: CodeCheck;
+export declare const phpUploadPath: CodeCheck;
+export declare const phpUploadSize: CodeCheck;
+export declare const phpUploadType: CodeCheck;
+//# sourceMappingURL=php.d.ts.map

package/dist/code/checks/php.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"php.d.ts","sourceRoot":"","sources":["../../../src/code/checks/php.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,aAAa,CAAC;AAmE1D,eAAO,MAAM,mBAAmB,WA0B/B,CAAC;AAGF,eAAO,MAAM,aAAa,WAoBzB,CAAC;AAEF,eAAO,MAAM,eAAe,WA6B3B,CAAC;AAKF,eAAO,MAAM,qBAAqB,WA+BjC,CAAC;AAQF,eAAO,MAAM,eAAe,WAqB3B,CAAC;AAGF,eAAO,MAAM,mBAAmB,WAM/B,CAAC;AAEF,eAAO,MAAM,gBAAgB,WAiB5B,CAAC;AAKF,eAAO,MAAM,gBAAgB,WAM5B,CAAC;AAKF,eAAO,MAAM,MAAM,WAwBlB,CAAC;AAGF,eAAO,MAAM,iBAAiB,WAM7B,CAAC;AAEF,eAAO,MAAM,iBAAiB,WAmB7B,CAAC;AAEF,eAAO,MAAM,eAAe,WAgB3B,CAAC;AAIF,eAAO,MAAM,gBAAgB,WAoB5B,CAAC;AAWF,eAAO,MAAM,MAAM,WASlB,CAAC;AAEF,eAAO,MAAM,cAAc,WAI1B,CAAC;AA6BF,eAAO,MAAM,YAAY,WAavB,CAAC;AAgBH,eAAO,MAAM,oBAAoB,WAAsJ,CAAC;AACxL,eAAO,MAAM,sBAAsB,WAAyJ,CAAC;AAI7L,eAAO,MAAM,oBAAoB,WAW/B,CAAC;AAEH,eAAO,MAAM,WAAW,WAUtB,CAAC;AAEH,eAAO,MAAM,oBAAoB,WAK/B,CAAC;AAEH,eAAO,MAAM,oBAAoB,WAQ/B,CAAC;AAKH,eAAO,MAAM,aAAa,WAaxB,CAAC;AAEH,eAAO,MAAM,aAAa,WAKxB,CAAC;AAEH,eAAO,MAAM,aAAa,WAOxB,CAAC"}