jumpy-lion 0.1.6-beta.9 → 1.0.0-beta.4

package/dist/fingerprinting/injection-planner.d.ts

@@ -0,0 +1,133 @@
+/**
+ * InjectionPlanner - the pure half of fingerprint injection.
+ *
+ * `buildInjectionPlan` turns (fingerprint, options, binary version) into an
+ * InjectionPlan: a plain value describing everything the injector intends to
+ * do to the page. No CDP types, no I/O - the plan is the test surface.
+ * `CdpFingerprintInjector.attachToPage` is the thin executor that probes the
+ * binary version over CDP, builds the plan, and applies it.
+ */
+import type { BrowserFingerprintWithHeaders } from 'fingerprint-generator';
+import { type OverrideContext, type WebGLConfig, type PlatformConfig, type UAClientHintsData } from './fingerprint-overrides/index.js';
+import type { ResolvedLocale } from './locale-resolver.js';
+import type { FingerprintOptions } from '../browser-process/launch-options.js';
+export interface Viewport {
+    width: number;
+    height: number;
+    deviceScaleFactor: number;
+    mobile: boolean;
+}
+export type { HumanizationOptions } from '../browser-process/launch-options.js';
+/**
+ * The injector's resolved input DTO. The spoof-toggle fields are inherited from
+ * the canonical `FingerprintOptions` (issue #80) - `locale`/`languages`/`seedKey`/
+ * `forceEmulateWebgl` are resolved upstream (into `resolvedLocale` / launch args /
+ * the C++ config) and never reach the injector, so they are omitted. The extra
+ * fields below are injector-boundary concerns not present on the public bag.
+ *
+ * Note on `useNativeStealth`: when true the ENTIRE JS override pipeline is skipped
+ * (see `buildInjectionPlan`'s native fast-path) - the C++ source-tree edits own
+ * every fingerprint surface. Humanization is unaffected: it runs through the CDP
+ * Input layer (InputEmulator) per-interaction, not through an injected script.
+ */
+export interface AttachOptions extends Omit<FingerprintOptions, 'locale' | 'languages' | 'seedKey' | 'forceEmulateWebgl'> {
+    proxyUrl?: string;
+    viewport?: Viewport;
+    /** @deprecated Use humanization.mouse instead */
+    humanizeInteractions?: boolean;
+    /**
+     * Alias for enableDataDomeBypass - enables all DataDome-specific protections
+     * When true, injects enhanced bypass early in the script chain
+     */
+    bypassDatadome?: boolean;
+    /**
+     * Pre-resolved locale triple. When provided, drives CDP Emulation.setLocaleOverride,
+     * Emulation.setTimezoneOverride, Accept-Language header, and the locale-spoofing
+     * script's baked-in values. Supersedes any legacy `timezone`/`detectTimezone` logic:
+     * if resolvedLocale.timezone is set, we skip the ipinfo.io round-trip.
+     */
+    resolvedLocale?: ResolvedLocale;
+}
+/**
+ * Everything `attachToPage` intends to do, as a plain value.
+ *
+ * `native` plans carry no script bundle: the C++ anti-detect binary owns every
+ * fingerprint surface, and the only page-level action allowed is the
+ * Accept-Language header (Chrome's profile default leaks `en-US,en;q=0.9`
+ * even under `--lang`; a single HTTP header is not a fingerprintable CDP
+ * artifact, unlike Runtime.enable or inspector traces).
+ */
+export type InjectionPlan = {
+    kind: 'native';
+    /** Accept-Language header value, when a resolved locale demands one. */
+    acceptLanguage?: string;
+} | {
+    kind: 'full';
+    /** Emulation.setTimezoneOverride target, when any timezone source resolved. */
+    timezone?: string;
+    /** Emulation.setLocaleOverride target. */
+    locale?: string;
+    /** Injectable subset of fingerprint headers, locale + UA aligned. */
+    headers: Record<string, string>;
+    /** UA string aligned to the running binary's major version ('' = none). */
+    userAgent: string;
+    /** UA-CH metadata aligned to the running binary, when fingerprint data is in use. */
+    uaClientHints?: UAClientHintsData;
+    /**
+     * The running binary's real build version from `Browser.getVersion`
+     * (e.g. "147.0.7727.56"), or null when the probe failed. UA-CH surfaces
+     * must take the full version from HERE, never from the UA string, which
+     * UA Reduction has frozen to MAJOR.0.0.0 (issue #131).
+     */
+    binaryFullVersion: string | null;
+    platform: 'Win32' | 'MacIntel' | 'Linux x86_64';
+    viewport?: Viewport;
+    /** The single bundled script for Page.addScriptToEvaluateOnNewDocument. */
+    bundledScript: string;
+    debug: boolean;
+};
+export interface InjectionPlanInput {
+    browserFingerprintWithHeaders: BrowserFingerprintWithHeaders;
+    options?: AttachOptions;
+    /** From the executor's CDP Browser.getVersion probe; null when unavailable. */
+    actualChromeVersion: string | null;
+    /** From the executor's ipinfo.io lookup, only when `needsIpTimezoneLookup`. */
+    ipTimezone?: string;
+}
+/** The native-stealth fast-path gate. The executor must not probe CDP when this holds. */
+export declare function isNativeStealth(options?: AttachOptions): boolean;
+/**
+ * Legacy timezone path: no resolved triple, but `timezone`/`detectTimezone` was
+ * set → the executor owes the planner an ipinfo.io lookup result.
+ * (Historical quirk preserved: an explicit legacy `timezone` value also
+ * triggers the IP lookup; the literal value is never used directly.)
+ */
+export declare function needsIpTimezoneLookup(options?: AttachOptions): boolean;
+/**
+ * Strip CDP-injection tells from one override script.
+ * Anti-bot services hook console.log and detect debug prefixes like
+ * [CDP-FP-DEBUG], [DD-BYPASS], [RUNTIME-ENABLE-BYPASS] - so console output is
+ * stripped in production. sourceURL comments would name our repo layout.
+ */
+export declare function cleanInjectedScript(script: string, debug: boolean): string;
+/** Test-only: drop the process-level clean/validation memo so runs start fresh. */
+export declare function resetInjectionPlanCachesForTesting(): void;
+/**
+ * Normalize options into the narrow OverrideContext - the only shape the
+ * override registry sees. All option defaults are resolved here, once.
+ */
+export declare function buildOverrideContext(options: AttachOptions | undefined, data: {
+    fingerprint: OverrideContext['fingerprint'];
+    webglConfig?: WebGLConfig;
+    platformConfig?: PlatformConfig;
+    uaClientHints?: UAClientHintsData;
+    binaryFullVersion?: string | null;
+}): OverrideContext;
+/**
+ * Build the InjectionPlan. Pure: same inputs → same plan.
+ *
+ * Throws when the assembled script bundle fails syntax validation - a plan
+ * that would crash the page is a planning error, not an execution error.
+ */
+export declare function buildInjectionPlan(input: InjectionPlanInput): InjectionPlan;
+//# sourceMappingURL=injection-planner.d.ts.map

package/dist/fingerprinting/injection-planner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection-planner.d.ts","sourceRoot":"","sources":["../../src/fingerprinting/injection-planner.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,6BAA6B,EAA8B,MAAM,uBAAuB,CAAC;AAEvG,OAAO,EACH,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACzB,MAAM,kCAAkC,CAAC;AAO1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAO3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAG/E,MAAM,WAAW,QAAQ;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;CACnB;AAID,YAAY,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAEhF;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAc,SAAQ,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,mBAAmB,CAAC;IACrH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,iDAAiD;IACjD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GACnB;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B,GACC;IACE,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC;;;;;OAKG;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,EAAE,OAAO,GAAG,UAAU,GAAG,cAAc,CAAC;IAChD,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;CAClB,CAAC;AAEN,MAAM,WAAW,kBAAkB;IAC/B,6BAA6B,EAAE,6BAA6B,CAAC;IAC7D,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,+EAA+E;IAC/E,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAGtE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAoB1E;AAqDD,mFAAmF;AACnF,wBAAgB,kCAAkC,IAAI,IAAI,CAIzD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAChC,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,IAAI,EAAE;IACF,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC;IAC5C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC,GACF,eAAe,CAmCjB;AAiLD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAmN3E"}

package/dist/fingerprinting/injection-planner.js

@@ -0,0 +1,497 @@
+/**
+ * InjectionPlanner - the pure half of fingerprint injection.
+ *
+ * `buildInjectionPlan` turns (fingerprint, options, binary version) into an
+ * InjectionPlan: a plain value describing everything the injector intends to
+ * do to the page. No CDP types, no I/O - the plan is the test surface.
+ * `CdpFingerprintInjector.attachToPage` is the thin executor that probes the
+ * binary version over CDP, builds the plan, and applies it.
+ */
+import { log } from 'crawlee';
+import { assembleOverrideScripts } from './fingerprint-overrides/registry.js';
+import { deriveRealisticDeviceMemory, normalizePlatformVersion, stableSeedFromString, } from './hardware-realism.js';
+import { alignPlatformConfigWithBinary, alignUAClientHintsVersion, alignUserAgentWithBrowserVersion, buildInjectableHeaders, } from './ua-alignment.js';
+import { resolveInjectionSeedKey } from '../session-profile.js';
+/** The native-stealth fast-path gate. The executor must not probe CDP when this holds. */
+export function isNativeStealth(options) {
+    return options?.useNativeStealth === true;
+}
+/**
+ * Legacy timezone path: no resolved triple, but `timezone`/`detectTimezone` was
+ * set → the executor owes the planner an ipinfo.io lookup result.
+ * (Historical quirk preserved: an explicit legacy `timezone` value also
+ * triggers the IP lookup; the literal value is never used directly.)
+ */
+export function needsIpTimezoneLookup(options) {
+    return !options?.resolvedLocale?.timezone
+        && Boolean(options?.timezone || options?.detectTimezone);
+}
+/**
+ * Strip CDP-injection tells from one override script.
+ * Anti-bot services hook console.log and detect debug prefixes like
+ * [CDP-FP-DEBUG], [DD-BYPASS], [RUNTIME-ENABLE-BYPASS] - so console output is
+ * stripped in production. sourceURL comments would name our repo layout.
+ */
+export function cleanInjectedScript(script, debug) {
+    let cleaned = script
+        // Remove sourceURL patterns that reveal CDP injection
+        .replace(/\/\/# sourceURL=[^\n]*/g, '')
+        .replace(/\/\/@ sourceURL=[^\n]*/g, '')
+        // Remove sourceMappingURL patterns
+        .replace(/\/\/# sourceMappingURL=[^\n]*/g, '')
+        // Remove puppeteer/playwright markers
+        .replace(/__puppeteer_evaluation_script__/g, 'anonymous')
+        .replace(/__playwright_evaluation_script__/g, 'anonymous')
+        // Remove CDP-specific comments
+        .replace(/\/\*\s*__CDP_[A-Z_]+__\s*\*\//g, '');
+    if (!debug) {
+        cleaned = cleaned
+            .replace(/^\s*console\.(log|warn|info|debug)\s*\([^;]*\);?\s*$/gm, '')
+            .replace(/^\s*const\s+(DEBUG_PREFIX|ERROR_PREFIX)\s*=\s*[^;]*;\s*$/gm, '');
+    }
+    return cleaned;
+}
+/**
+ * Cleaned form of each static override script, keyed by debug state + raw script
+ * bytes. Static scripts are a small fixed set, so this map stays bounded and its
+ * 6-8 regex passes run once per process per debug state. Per-session (dynamic)
+ * scripts are never keyed in here - they clean fresh on every build so proxy
+ * sessions never bleed cleaned bytes into one another.
+ */
+const cleanedStaticScriptCache = new Map();
+/**
+ * `new Function` bundle syntax validation runs once per process. The static bulk
+ * of the bundle is constant, so once the first assembled bundle parses cleanly
+ * we skip the (expensive) re-parse on every subsequent page. The per-script
+ * fallback diagnosis below still runs whenever validation actually fails.
+ */
+let bundleSyntaxValidated = false;
+/**
+ * Injection seed key per proxyUrl, resolved once per session for process
+ * lifetime. `resolveInjectionSeedKey` runs a regex parse (and the caller then
+ * pays a JSON.stringify for the preamble) - both are stable per proxy session,
+ * so the parse cost is paid once per session, not per page. Keyed per proxyUrl
+ * (no-proxy → the empty-string key) so distinct sessions never share a key.
+ */
+const injectionSeedKeyByProxy = new Map();
+function cachedInjectionSeedKey(proxyUrl) {
+    const key = proxyUrl ?? '';
+    const cached = injectionSeedKeyByProxy.get(key);
+    if (cached !== undefined)
+        return cached;
+    const resolved = resolveInjectionSeedKey(proxyUrl);
+    injectionSeedKeyByProxy.set(key, resolved);
+    return resolved;
+}
+/**
+ * Clean one override script, memoizing the result for static scripts only.
+ */
+function cleanScript(script, debug, isStatic) {
+    if (!isStatic) {
+        return cleanInjectedScript(script, debug);
+    }
+    const key = `${debug ? 'd' : 'p'}:${script}`;
+    let cleaned = cleanedStaticScriptCache.get(key);
+    if (cleaned === undefined) {
+        cleaned = cleanInjectedScript(script, debug);
+        cleanedStaticScriptCache.set(key, cleaned);
+    }
+    return cleaned;
+}
+/** Test-only: drop the process-level clean/validation memo so runs start fresh. */
+export function resetInjectionPlanCachesForTesting() {
+    cleanedStaticScriptCache.clear();
+    bundleSyntaxValidated = false;
+    injectionSeedKeyByProxy.clear();
+}
+/**
+ * Normalize options into the narrow OverrideContext - the only shape the
+ * override registry sees. All option defaults are resolved here, once.
+ */
+export function buildOverrideContext(options, data) {
+    return {
+        advancedStealth: options?.enableAdvancedStealth !== false,
+        maskAutomation: options?.maskAutomationFlags !== false,
+        dataDomeBypass: Boolean(options?.enableDataDomeBypass || options?.bypassDatadome),
+        webRtcPolicy: options?.webRtcPolicy === 'disable' ? 'disable' : 'spoof',
+        humanization: {
+            mouse: Boolean(options?.humanization?.mouse || options?.humanizeInteractions),
+            keyboard: Boolean(options?.humanization?.keyboard),
+            scroll: Boolean(options?.humanization?.scroll),
+        },
+        spoof: {
+            webgl: options?.spoofWebGL !== false,
+            audio: options?.spoofAudioContext !== false,
+            clientRects: options?.spoofClientRects !== false,
+            fonts: options?.spoofFonts !== false,
+            performance: options?.spoofPerformance !== false,
+            locale: options?.spoofLocale !== false,
+            storage: options?.spoofStorage !== false,
+            timing: options?.spoofTiming !== false,
+            cdpDetection: options?.bypassCDPDetection !== false,
+        },
+        platform: options?.platform,
+        debug: options?.debug === true,
+        fingerprint: data.fingerprint,
+        webglConfig: data.webglConfig,
+        platformConfig: data.platformConfig,
+        uaClientHints: data.uaClientHints,
+        binaryFullVersion: data.binaryFullVersion ?? undefined,
+        useExperimentalFingerprints: Boolean(options?.useExperimentalFingerprints),
+        locale: {
+            locale: options?.resolvedLocale?.locale ?? 'en-US',
+            languages: options?.resolvedLocale?.languages ?? 'en-US,en;q=0.9',
+        },
+    };
+}
+/**
+ * Extract relevant data from fingerprint for overrides
+ */
+function extractFingerprintData(fingerprint) {
+    const webglConfig = {};
+    const platformConfig = {};
+    let uaClientHints;
+    // Extract WebGL data from videoCard if available
+    if (fingerprint.videoCard) {
+        webglConfig.vendor = fingerprint.videoCard.vendor;
+        webglConfig.renderer = fingerprint.videoCard.renderer;
+        webglConfig.vendorUnmasked = fingerprint.videoCard.vendor;
+        webglConfig.rendererUnmasked = fingerprint.videoCard.renderer;
+    }
+    // Extract platform data if available
+    if (fingerprint.navigator) {
+        platformConfig.platform = fingerprint.navigator.platform;
+        platformConfig.vendor = fingerprint.navigator.vendor;
+        platformConfig.vendorSub = fingerprint.navigator.vendorSub;
+        platformConfig.productSub = fingerprint.navigator.productSub;
+        platformConfig.hardwareConcurrency = fingerprint.navigator.hardwareConcurrency;
+        platformConfig.maxTouchPoints = fingerprint.navigator.maxTouchPoints;
+        platformConfig.language = fingerprint.navigator.language;
+        platformConfig.languages = fingerprint.navigator.languages;
+        platformConfig.oscpu = fingerprint.navigator.oscpu;
+        platformConfig.userAgent = fingerprint.navigator.userAgent;
+        platformConfig.appVersion = fingerprint.navigator.appVersion;
+        platformConfig.appName = fingerprint.navigator.appName;
+        platformConfig.appCodeName = fingerprint.navigator.appCodeName;
+        platformConfig.product = fingerprint.navigator.product;
+        // Extract UA-CH data from generated fingerprint
+        // This ensures navigator.userAgentData brands/versions match the UA string
+        if (fingerprint.navigator.userAgentData) {
+            const uad = fingerprint.navigator.userAgentData;
+            uaClientHints = {
+                brands: uad.brands,
+                fullVersionList: uad.fullVersionList,
+                mobile: uad.mobile,
+                platform: uad.platform,
+                architecture: uad.architecture,
+                bitness: uad.bitness,
+                model: uad.model,
+                platformVersion: uad.platformVersion,
+                uaFullVersion: uad.uaFullVersion,
+                // wow64 is not part of the generator's UserAgentData shape but the
+                // real navigator.userAgentData carries it; forward when present.
+                wow64: uad.wow64,
+            };
+        }
+    }
+    if (fingerprint.screen) {
+        platformConfig.devicePixelRatio = fingerprint.screen.devicePixelRatio;
+        platformConfig.screenDepth = fingerprint.screen.pixelDepth;
+        platformConfig.colorDepth = fingerprint.screen.colorDepth;
+    }
+    return { webglConfig, platformConfig, uaClientHints };
+}
+/**
+ * Create a debug script that logs fingerprint override status to the console
+ */
+function createDebugScript(options) {
+    return `
+(() => {
+    // CDP Fingerprint Override Debug Logs
+    const DEBUG_PREFIX = '[CDP-FP-DEBUG]';
+
+    console.log(DEBUG_PREFIX, '=== Fingerprint Override Status ===');
+    console.log(DEBUG_PREFIX, 'Timestamp:', new Date().toISOString());
+
+    // Check navigator properties
+    console.log(DEBUG_PREFIX, 'Navigator Checks:');
+    console.log(DEBUG_PREFIX, '  - platform:', navigator.platform);
+    console.log(DEBUG_PREFIX, '  - userAgent:', navigator.userAgent.substring(0, 80) + '...');
+    console.log(DEBUG_PREFIX, '  - webdriver:', navigator.webdriver);
+    console.log(DEBUG_PREFIX, '  - hardwareConcurrency:', navigator.hardwareConcurrency);
+    console.log(DEBUG_PREFIX, '  - deviceMemory:', navigator.deviceMemory);
+    console.log(DEBUG_PREFIX, '  - language:', navigator.language);
+    console.log(DEBUG_PREFIX, '  - languages:', navigator.languages);
+    console.log(DEBUG_PREFIX, '  - maxTouchPoints:', navigator.maxTouchPoints);
+    console.log(DEBUG_PREFIX, '  - pdfViewerEnabled:', navigator.pdfViewerEnabled);
+    console.log(DEBUG_PREFIX, '  - plugins.length:', navigator.plugins?.length);
+
+    // Check screen properties
+    console.log(DEBUG_PREFIX, 'Screen Checks:');
+    console.log(DEBUG_PREFIX, '  - colorDepth:', screen.colorDepth);
+    console.log(DEBUG_PREFIX, '  - pixelDepth:', screen.pixelDepth);
+    console.log(DEBUG_PREFIX, '  - availWidth:', screen.availWidth);
+    console.log(DEBUG_PREFIX, '  - availHeight:', screen.availHeight);
+    console.log(DEBUG_PREFIX, '  - devicePixelRatio:', window.devicePixelRatio);
+
+    // Check window properties
+    console.log(DEBUG_PREFIX, 'Window Checks:');
+    console.log(DEBUG_PREFIX, '  - outerWidth:', window.outerWidth);
+    console.log(DEBUG_PREFIX, '  - outerHeight:', window.outerHeight);
+    console.log(DEBUG_PREFIX, '  - screenX:', window.screenX);
+    console.log(DEBUG_PREFIX, '  - screenY:', window.screenY);
+
+    // Check chrome object
+    console.log(DEBUG_PREFIX, 'Chrome Object:');
+    console.log(DEBUG_PREFIX, '  - chrome exists:', typeof window.chrome !== 'undefined');
+    console.log(DEBUG_PREFIX, '  - chrome.runtime exists:', typeof window.chrome?.runtime !== 'undefined');
+
+    // Check WebGL
+    try {
+        const canvas = document.createElement('canvas');
+        const gl = canvas.getContext('webgl') || canvas.getContext('experimental-webgl');
+        if (gl) {
+            const debugInfo = gl.getExtension('WEBGL_debug_renderer_info');
+            if (debugInfo) {
+                console.log(DEBUG_PREFIX, 'WebGL Checks:');
+                console.log(DEBUG_PREFIX, '  - vendor:', gl.getParameter(debugInfo.UNMASKED_VENDOR_WEBGL));
+                console.log(DEBUG_PREFIX, '  - renderer:', gl.getParameter(debugInfo.UNMASKED_RENDERER_WEBGL));
+            } else {
+                console.log(DEBUG_PREFIX, 'WebGL debug extension not available');
+            }
+        } else {
+            console.log(DEBUG_PREFIX, 'WebGL context not available');
+        }
+    } catch (e) {
+        console.log(DEBUG_PREFIX, 'WebGL check failed:', e.message);
+    }
+
+    // Check automation markers
+    console.log(DEBUG_PREFIX, 'Automation Marker Checks:');
+    console.log(DEBUG_PREFIX, '  - $cdc_ properties:', Object.keys(window).filter(k => k.startsWith('$cdc_') || k.startsWith('cdc_')).length === 0 ? 'CLEAN' : 'DETECTED');
+    console.log(DEBUG_PREFIX, '  - webdriver properties:', Object.keys(window).filter(k => k.toLowerCase().includes('webdriver')).length === 0 ? 'CLEAN' : 'DETECTED');
+
+    // Check permissions API
+    if (navigator.permissions) {
+        navigator.permissions.query({ name: 'notifications' }).then(result => {
+            console.log(DEBUG_PREFIX, 'Permissions:');
+            console.log(DEBUG_PREFIX, '  - notifications:', result.state);
+        }).catch(e => {
+            console.log(DEBUG_PREFIX, 'Permissions check failed:', e.message);
+        });
+    }
+
+    // Check storage estimate
+    if (navigator.storage && navigator.storage.estimate) {
+        navigator.storage.estimate().then(estimate => {
+            console.log(DEBUG_PREFIX, 'Storage:');
+            console.log(DEBUG_PREFIX, '  - quota:', Math.round(estimate.quota / 1024 / 1024 / 1024) + ' GB');
+            console.log(DEBUG_PREFIX, '  - usage:', Math.round(estimate.usage / 1024) + ' KB');
+        }).catch(e => {
+            console.log(DEBUG_PREFIX, 'Storage check failed:', e.message);
+        });
+    }
+
+    // Log applied options
+    console.log(DEBUG_PREFIX, 'Applied Options:');
+    console.log(DEBUG_PREFIX, '  - platform:', '${options.platform || "auto"}');
+    console.log(DEBUG_PREFIX, '  - enableAdvancedStealth:', ${options.enableAdvancedStealth !== false});
+    console.log(DEBUG_PREFIX, '  - bypassCDPDetection:', ${options.bypassCDPDetection !== false});
+    console.log(DEBUG_PREFIX, '  - spoofStorage:', ${options.spoofStorage !== false});
+    console.log(DEBUG_PREFIX, '  - spoofTiming:', ${options.spoofTiming !== false});
+    console.log(DEBUG_PREFIX, '  - enableDataDomeBypass:', ${options.enableDataDomeBypass || false});
+    console.log(DEBUG_PREFIX, '  - humanization.mouse:', ${options.humanization?.mouse || false});
+    console.log(DEBUG_PREFIX, '  - humanization.keyboard:', ${options.humanization?.keyboard || false});
+    console.log(DEBUG_PREFIX, '  - humanization.scroll:', ${options.humanization?.scroll || false});
+
+    console.log(DEBUG_PREFIX, '=== End Fingerprint Override Status ===');
+})();
+`;
+}
+/**
+ * Build the InjectionPlan. Pure: same inputs → same plan.
+ *
+ * Throws when the assembled script bundle fails syntax validation - a plan
+ * that would crash the page is a planning error, not an execution error.
+ */
+export function buildInjectionPlan(input) {
+    const { options, actualChromeVersion, ipTimezone } = input;
+    const { fingerprint, headers } = input.browserFingerprintWithHeaders;
+    // ── Native-stealth fast-path ─────────────────────────────────────────
+    // Every fingerprint surface is handled by the C++ source-tree edits.
+    // CDP-side overrides are strictly incompatible with native stealth: they
+    // either duplicate what the C++ patches already do (double-override →
+    // inconsistency) or introduce CDP artifacts the C++ patches are designed
+    // to hide. The only allowed action is the Accept-Language header.
+    if (isNativeStealth(options)) {
+        return {
+            kind: 'native',
+            acceptLanguage: options?.resolvedLocale?.languages,
+        };
+    }
+    // Locale/timezone resolution priority:
+    //   1. Resolved triple from browser-plugin (user locale → proxy country → fingerprint)
+    //   2. Legacy options.timezone / options.detectTimezone → executor's ipinfo.io lookup
+    // Resolved values always win so fingerprintOptions.locale: 'ko-KR' coherently
+    // propagates to every locale surface.
+    const timezone = options?.resolvedLocale?.timezone ?? ipTimezone;
+    // Version-alignment + header filtering are pure - see ua-alignment.ts.
+    const originalUserAgent = fingerprint?.navigator?.userAgent
+        || headers['user-agent']
+        || headers['User-Agent']
+        || '';
+    const userAgent = alignUserAgentWithBrowserVersion(originalUserAgent, actualChromeVersion);
+    // Session seed for the hardware-realism helpers. The proxy session key is the
+    // same input the injected bundle seeds itself from, so a session's reported
+    // memory/quota/platformVersion stay stable across its pages and match what the
+    // native config generator would derive.
+    const injectionSeed = stableSeedFromString(cachedInjectionSeedKey(options?.proxyUrl) ?? originalUserAgent);
+    const filteredHeaders = buildInjectableHeaders(headers, options?.resolvedLocale?.languages, userAgent, actualChromeVersion);
+    // Extract fingerprint data if we should use it
+    // When useFingerprintDefaults is true (or undefined), use hardcoded defaults
+    // When useFingerprintDefaults is false, use the generated fingerprint data
+    const shouldUseFingerprintData = options?.useFingerprintDefaults === false;
+    const { webglConfig, platformConfig, uaClientHints: rawUaClientHints } = shouldUseFingerprintData
+        ? extractFingerprintData(fingerprint)
+        : { webglConfig: undefined, platformConfig: undefined, uaClientHints: undefined };
+    // Align UA-CH brand/full-version fields with the actual running binary so the
+    // fingerprint profile version (132-135) doesn't contradict the real binary (147+).
+    const alignedUaClientHints = rawUaClientHints && actualChromeVersion
+        ? alignUAClientHintsVersion(rawUaClientHints, actualChromeVersion)
+        : rawUaClientHints;
+    // One platformVersion for the whole path: the UA-CH override script, the
+    // getHighEntropyValues answer and the sec-ch-ua-platform-version header all
+    // read this. Pool Linux rows either omit it (90%) or carry a pre-reduction
+    // kernel version, and the old fallback was a macOS number (issue #137).
+    const uaClientHints = alignedUaClientHints
+        ? {
+            ...alignedUaClientHints,
+            platformVersion: normalizePlatformVersion(options?.platform ?? fingerprint?.navigator?.platform, alignedUaClientHints.platformVersion, injectionSeed),
+        }
+        : alignedUaClientHints;
+    const platformConfigForScript = alignPlatformConfigWithBinary(shouldUseFingerprintData ? platformConfig : undefined, options?.platform, actualChromeVersion);
+    const isDebug = options?.debug === true;
+    // The navigator-override module bakes `fingerprint.navigator.userAgent`
+    // VERBATIM into the injected bundle. Feed the registry an aligned copy so
+    // the bundle can never contradict `plan.userAgent` / the sec-ch-ua headers.
+    //
+    // `CdpFingerprintInjector.attachToPage` also aligns the shared fingerprint
+    // in place before calling us - but that mutation exists for a different
+    // consumer (Crawlee's own postPageCreate hook, issue #104), and relying on
+    // it here made this "pure" function's output silently depend on the caller
+    // having run that step first. Any other call site, or a reordering, would
+    // reintroduce a stale navigator.userAgent. Copy rather than mutate, so
+    // buildInjectionPlan stays free of side effects on its input.
+    //
+    // `deviceMemory` is sanitized in the same copy. The pool ships mac rows
+    // claiming 0/1/2/4 GB - values no Mac has shipped - and the navigator
+    // override treated the profile value as authoritative. A 0 was worse than
+    // wrong: it is falsy, so the override was skipped and the page reported the
+    // HOST's real RAM (issue #137). The native path already resampled; now both
+    // paths call the same helper with the same seed.
+    const rawDeviceMemory = fingerprint?.navigator?.deviceMemory;
+    const coherentDeviceMemory = deriveRealisticDeviceMemory(injectionSeed, rawDeviceMemory);
+    const needsUserAgentFix = Boolean(userAgent && fingerprint?.navigator?.userAgent
+        && fingerprint.navigator.userAgent !== userAgent);
+    const needsDeviceMemoryFix = Boolean(fingerprint?.navigator) && rawDeviceMemory !== coherentDeviceMemory;
+    const fingerprintForOverrides = (needsUserAgentFix || needsDeviceMemoryFix)
+        ? {
+            ...fingerprint,
+            navigator: {
+                ...fingerprint.navigator,
+                ...(needsUserAgentFix
+                    ? {
+                        userAgent,
+                        ...(fingerprint?.navigator?.appVersion
+                            ? { appVersion: alignUserAgentWithBrowserVersion(fingerprint.navigator.appVersion, actualChromeVersion) }
+                            : {}),
+                    }
+                    : {}),
+                ...(needsDeviceMemoryFix ? { deviceMemory: coherentDeviceMemory } : {}),
+            },
+        }
+        : fingerprint;
+    const overrideContext = buildOverrideContext(options, {
+        fingerprint: fingerprintForOverrides,
+        webglConfig,
+        platformConfig: platformConfigForScript,
+        uaClientHints,
+        binaryFullVersion: actualChromeVersion,
+    });
+    // One seam: filter by native coverage, filter by option gates, sort by
+    // declared order, build each override. Native runs never reach this point
+    // (early return above), but the registry filter IS the documented map of
+    // which surfaces the C++ binary owns. Each script carries an `isStatic` tag
+    // so the cleaning pass can be memoized for context-independent scripts only.
+    const assembled = assembleOverrideScripts(overrideContext, { nativeStealth: false });
+    // Add debug scripts into the bundle only when explicitly enabled. The debug
+    // script interpolates option values, so it is never treated as static.
+    if (isDebug) {
+        assembled.push({ script: createDebugScript(options || {}), isStatic: false });
+    }
+    // BUNDLE ALL SCRIPTS INTO ONE to minimize CDP interactions.
+    // debug, not info: this fires once per page, so on a real crawl it would
+    // emit thousands of identical lines.
+    log.debug(`Bundling ${assembled.length} fingerprint scripts into single injection`);
+    // Extract proxy seed key for deterministic fingerprint seeding.
+    // Priority: session ID from Apify proxy URL > full proxy URL > null.
+    const proxySeedKey = cachedInjectionSeedKey(options?.proxyUrl);
+    // Preamble: create shared stealth store accessible by all module IIFEs via closure.
+    // seedKey: proxy session ID or proxy URL - used by _stableHash for deterministic fingerprints.
+    const preamble = `var __stealth = { debug: ${isDebug}, seedKey: ${proxySeedKey ? JSON.stringify(proxySeedKey) : 'null'} };`;
+    // Neutralize the CDP-injection stack-frame tell. V8 renders scripts
+    // registered via Page.addScriptToEvaluateOnNewDocument that carry no
+    // sourceURL as "<anonymous>" in Error.stack - a well-known detection
+    // vector (DataDome, CreepJS, fpscanner all check for it). Appending
+    // `//# sourceURL=about:blank` makes V8 render stack frames as if the
+    // script loaded from about:blank, which is indistinguishable from
+    // a normal bootstrap script on a fresh page.
+    //
+    // Note: the cleanInjectedScript pass strips *existing* sourceURL comments
+    // in the per-module scripts (to avoid the comment naming a file path
+    // that reveals our repo layout). We then stamp exactly one sourceURL
+    // on the outer bundle so the final script V8 sees has a clean name.
+    const bundledScript = `${preamble}\n\n${assembled
+        .map(({ script, isStatic }) => cleanScript(script, isDebug, isStatic))
+        .join('\n\n')}\n//# sourceURL=about:blank\n`;
+    // Validate the bundled script for syntax errors, but only once per process:
+    // the static bulk of the bundle is constant, so re-parsing every page is pure
+    // overhead. The per-script fallback diagnosis still runs on an actual failure.
+    if (!bundleSyntaxValidated) {
+        try {
+            // eslint-disable-next-line no-new-func, no-new
+            new Function(bundledScript);
+            bundleSyntaxValidated = true;
+            log.debug('✓ Bundled script passed syntax validation');
+        }
+        catch (error) {
+            log.error('✗ Bundled script has syntax error:', { error });
+            // Fall back to individual script validation to find the culprit
+            assembled.forEach(({ script }, index) => {
+                try {
+                    // eslint-disable-next-line no-new-func, no-new
+                    new Function(script);
+                }
+                catch (e) {
+                    const scriptPreview = script.substring(0, 300);
+                    log.error(`✗ Error in script ${index + 1}:`, { error: e, scriptPreview });
+                }
+            });
+            throw new Error(`Bundled script has syntax error: ${error}`);
+        }
+    }
+    return {
+        kind: 'full',
+        timezone,
+        locale: options?.resolvedLocale?.locale,
+        headers: filteredHeaders,
+        userAgent,
+        uaClientHints,
+        binaryFullVersion: actualChromeVersion,
+        platform: options?.platform || 'Win32',
+        viewport: options?.viewport,
+        bundledScript,
+        debug: isDebug,
+    };
+}
+//# sourceMappingURL=injection-planner.js.map

package/dist/fingerprinting/injection-planner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection-planner.js","sourceRoot":"","sources":["../../src/fingerprinting/injection-planner.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAS9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EACH,2BAA2B,EAC3B,wBAAwB,EACxB,oBAAoB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACH,6BAA6B,EAC7B,yBAAyB,EACzB,gCAAgC,EAChC,sBAAsB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AA8FhE,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAAC,OAAuB;IACnD,OAAO,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAuB;IACzD,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ;WAClC,OAAO,CAAC,OAAO,EAAE,QAAQ,IAAI,OAAO,EAAE,cAAc,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,KAAc;IAC9D,IAAI,OAAO,GAAG,MAAM;QAChB,sDAAsD;SACrD,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC;SACtC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC;QACvC,mCAAmC;SAClC,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC;QAC9C,sCAAsC;SACrC,OAAO,CAAC,kCAAkC,EAAE,WAAW,CAAC;SACxD,OAAO,CAAC,mCAAmC,EAAE,WAAW,CAAC;QAC1D,+BAA+B;SAC9B,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;IAEnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,GAAG,OAAO;aACZ,OAAO,CAAC,wDAAwD,EAAE,EAAE,CAAC;aACrE,OAAO,CAAC,4DAA4D,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE3D;;;;;GAKG;AACH,IAAI,qBAAqB,GAAG,KAAK,CAAC;AAElC;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEjE,SAAS,sBAAsB,CAAC,QAA4B;IACxD,MAAM,GAAG,GAAG,QAAQ,IAAI,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACnD,uBAAuB,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,MAAc,EAAE,KAAc,EAAE,QAAiB;IAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;IAC7C,IAAI,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,wBAAwB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,kCAAkC;IAC9C,wBAAwB,CAAC,KAAK,EAAE,CAAC;IACjC,qBAAqB,GAAG,KAAK,CAAC;IAC9B,uBAAuB,CAAC,KAAK,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAChC,OAAkC,EAClC,IAMC;IAED,OAAO;QACH,eAAe,EAAE,OAAO,EAAE,qBAAqB,KAAK,KAAK;QACzD,cAAc,EAAE,OAAO,EAAE,mBAAmB,KAAK,KAAK;QACtD,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,oBAAoB,IAAI,OAAO,EAAE,cAAc,CAAC;QACjF,YAAY,EAAE,OAAO,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QACvE,YAAY,EAAE;YACV,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,IAAI,OAAO,EAAE,oBAAoB,CAAC;YAC7E,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC;YAClD,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC;SACjD;QACD,KAAK,EAAE;YACH,KAAK,EAAE,OAAO,EAAE,UAAU,KAAK,KAAK;YACpC,KAAK,EAAE,OAAO,EAAE,iBAAiB,KAAK,KAAK;YAC3C,WAAW,EAAE,OAAO,EAAE,gBAAgB,KAAK,KAAK;YAChD,KAAK,EAAE,OAAO,EAAE,UAAU,KAAK,KAAK;YACpC,WAAW,EAAE,OAAO,EAAE,gBAAgB,KAAK,KAAK;YAChD,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,KAAK;YACtC,OAAO,EAAE,OAAO,EAAE,YAAY,KAAK,KAAK;YACxC,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,KAAK;YACtC,YAAY,EAAE,OAAO,EAAE,kBAAkB,KAAK,KAAK;SACtD;QACD,QAAQ,EAAE,OAAO,EAAE,QAAQ;QAC3B,KAAK,EAAE,OAAO,EAAE,KAAK,KAAK,IAAI;QAC9B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,SAAS;QACtD,2BAA2B,EAAE,OAAO,CAAC,OAAO,EAAE,2BAA2B,CAAC;QAC1E,MAAM,EAAE;YACJ,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,IAAI,OAAO;YAClD,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,IAAI,gBAAgB;SACpE;KACJ,CAAC;AACN,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,WAAwB;IAKpD,MAAM,WAAW,GAAgB,EAAE,CAAC;IACpC,MAAM,cAAc,GAAmB,EAAE,CAAC;IAC1C,IAAI,aAA4C,CAAC;IAEjD,iDAAiD;IACjD,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QACxB,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC;QAClD,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC;QACtD,WAAW,CAAC,cAAc,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC;QAC1D,WAAW,CAAC,gBAAgB,GAAG,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC;IAClE,CAAC;IAED,qCAAqC;IACrC,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QACxB,cAAc,CAAC,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC;QACzD,cAAc,CAAC,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC;QACrD,cAAc,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3D,cAAc,CAAC,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC;QAC7D,cAAc,CAAC,mBAAmB,GAAG,WAAW,CAAC,SAAS,CAAC,mBAAmB,CAAC;QAC/E,cAAc,CAAC,cAAc,GAAG,WAAW,CAAC,SAAS,CAAC,cAAc,CAAC;QACrE,cAAc,CAAC,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC;QACzD,cAAc,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3D,cAAc,CAAC,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC;QACnD,cAAc,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC;QAC3D,cAAc,CAAC,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC;QAC7D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC;QACvD,cAAc,CAAC,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC;QAC/D,cAAc,CAAC,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC;QAEvD,gDAAgD;QAChD,2EAA2E;QAC3E,IAAI,WAAW,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC;YAChD,aAAa,GAAG;gBACZ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,mEAAmE;gBACnE,iEAAiE;gBACjE,KAAK,EAAG,GAA2C,CAAC,KAAK;aAC5D,CAAC;QACN,CAAC;IACL,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACrB,cAAc,CAAC,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACtE,cAAc,CAAC,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC;QAC3D,cAAc,CAAC,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC;IAC9D,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAAsB;IAC7C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kDAyFuC,OAAO,CAAC,QAAQ,IAAI,MAAM;8DACd,OAAO,CAAC,qBAAqB,KAAK,KAAK;2DAC1C,OAAO,CAAC,kBAAkB,KAAK,KAAK;qDAC1C,OAAO,CAAC,YAAY,KAAK,KAAK;oDAC/B,OAAO,CAAC,WAAW,KAAK,KAAK;6DACpB,OAAO,CAAC,oBAAoB,IAAI,KAAK;2DACvC,OAAO,CAAC,YAAY,EAAE,KAAK,IAAI,KAAK;8DACjC,OAAO,CAAC,YAAY,EAAE,QAAQ,IAAI,KAAK;4DACzC,OAAO,CAAC,YAAY,EAAE,MAAM,IAAI,KAAK;;;;CAIhG,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IACxD,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC3D,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,6BAA6B,CAAC;IAErE,wEAAwE;IACxE,qEAAqE;IACrE,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,kEAAkE;IAClE,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO;YACH,IAAI,EAAE,QAAQ;YACd,cAAc,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS;SACrD,CAAC;IACN,CAAC;IAED,uCAAuC;IACvC,uFAAuF;IACvF,sFAAsF;IACtF,8EAA8E;IAC9E,sCAAsC;IACtC,MAAM,QAAQ,GAAG,OAAO,EAAE,cAAc,EAAE,QAAQ,IAAI,UAAU,CAAC;IAEjE,uEAAuE;IACvE,MAAM,iBAAiB,GAAG,WAAW,EAAE,SAAS,EAAE,SAAS;WACpD,OAAO,CAAC,YAAY,CAAC;WACrB,OAAO,CAAC,YAAY,CAAC;WACrB,EAAE,CAAC;IACV,MAAM,SAAS,GAAG,gCAAgC,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAE3F,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,aAAa,GAAG,oBAAoB,CACtC,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,iBAAiB,CACjE,CAAC;IAEF,MAAM,eAAe,GAAG,sBAAsB,CAC1C,OAAO,EACP,OAAO,EAAE,cAAc,EAAE,SAAS,EAClC,SAAS,EACT,mBAAmB,CACtB,CAAC;IAEF,+CAA+C;IAC/C,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,wBAAwB,GAAG,OAAO,EAAE,sBAAsB,KAAK,KAAK,CAAC;IAC3E,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,wBAAwB;QAC7F,CAAC,CAAC,sBAAsB,CAAC,WAAW,CAAC;QACrC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IACtF,8EAA8E;IAC9E,mFAAmF;IACnF,MAAM,oBAAoB,GAAG,gBAAgB,IAAI,mBAAmB;QAChE,CAAC,CAAC,yBAAyB,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;QAClE,CAAC,CAAC,gBAAgB,CAAC;IACvB,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,aAAa,GAAG,oBAAoB;QACtC,CAAC,CAAC;YACE,GAAG,oBAAoB;YACvB,eAAe,EAAE,wBAAwB,CACrC,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,SAAS,EAAE,QAAQ,EACrD,oBAAoB,CAAC,eAAe,EACpC,aAAa,CAChB;SACJ;QACD,CAAC,CAAC,oBAAoB,CAAC;IAE3B,MAAM,uBAAuB,GAAG,6BAA6B,CACzD,wBAAwB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,EACrD,OAAO,EAAE,QAAQ,EACjB,mBAAmB,CACtB,CAAC;IAEF,MAAM,OAAO,GAAG,OAAO,EAAE,KAAK,KAAK,IAAI,CAAC;IAExC,wEAAwE;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,8DAA8D;IAC9D,EAAE;IACF,wEAAwE;IACxE,sEAAsE;IACtE,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,eAAe,GAAI,WAAW,EAAE,SAAmD,EAAE,YAAY,CAAC;IACxG,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACzF,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,IAAI,WAAW,EAAE,SAAS,EAAE,SAAS;WACzE,WAAW,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IACtD,MAAM,oBAAoB,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,eAAe,KAAK,oBAAoB,CAAC;IAEzG,MAAM,uBAAuB,GAAG,CAAC,iBAAiB,IAAI,oBAAoB,CAAC;QACvE,CAAC,CAAC;YACE,GAAG,WAAW;YACd,SAAS,EAAE;gBACP,GAAG,WAAW,CAAC,SAAS;gBACxB,GAAG,CAAC,iBAAiB;oBACjB,CAAC,CAAC;wBACE,SAAS;wBACT,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU;4BAClC,CAAC,CAAC,EAAE,UAAU,EAAE,gCAAgC,CAAC,WAAW,CAAC,SAAS,CAAC,UAAU,EAAE,mBAAmB,CAAC,EAAE;4BACzG,CAAC,CAAC,EAAE,CAAC;qBACZ;oBACD,CAAC,CAAC,EAAE,CAAC;gBACT,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1E;SACJ;QACD,CAAC,CAAC,WAAW,CAAC;IAElB,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAO,EAAE;QAClD,WAAW,EAAE,uBAAuB;QACpC,WAAW;QACX,cAAc,EAAE,uBAAuB;QACvC,aAAa;QACb,iBAAiB,EAAE,mBAAmB;KACzC,CAAC,CAAC;IAEH,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,uBAAuB,CAAC,eAAe,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAErF,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,OAAO,EAAE,CAAC;QACV,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,iBAAiB,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,4DAA4D;IAC5D,yEAAyE;IACzE,qCAAqC;IACrC,GAAG,CAAC,KAAK,CAAC,YAAY,SAAS,CAAC,MAAM,4CAA4C,CAAC,CAAC;IAEpF,gEAAgE;IAChE,qEAAqE;IACrE,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE/D,oFAAoF;IACpF,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,4BAA4B,OAAO,cAAc,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;IAE5H,oEAAoE;IACpE,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,qEAAqE;IACrE,kEAAkE;IAClE,6CAA6C;IAC7C,EAAE;IACF,0EAA0E;IAC1E,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,aAAa,GAAG,GAAG,QAAQ,OAAO,SAAS;SAC5C,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;SACrE,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC;IAEjD,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACzB,IAAI,CAAC;YACD,+CAA+C;YAC/C,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC;YAC5B,qBAAqB,GAAG,IAAI,CAAC;YAC7B,GAAG,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,gEAAgE;YAChE,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE;gBACpC,IAAI,CAAC;oBACD,+CAA+C;oBAC/C,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACzB,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACT,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC/C,GAAG,CAAC,KAAK,CAAC,qBAAqB,KAAK,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC9E,CAAC;YACL,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAED,OAAO;QACH,IAAI,EAAE,MAAM;QACZ,QAAQ;QACR,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM;QACvC,OAAO,EAAE,eAAe;QACxB,SAAS;QACT,aAAa;QACb,iBAAiB,EAAE,mBAAmB;QACtC,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,OAAO;QACtC,QAAQ,EAAE,OAAO,EAAE,QAAQ;QAC3B,aAAa;QACb,KAAK,EAAE,OAAO;KACjB,CAAC;AACN,CAAC"}