raffel 0.1.2

package/dist/http/failban.d.ts

@@ -0,0 +1,230 @@
+/**
+ * Failban (IP Banning) Middleware
+ *
+ * Tracks violations per IP address and automatically bans IPs
+ * that exceed the maximum violation threshold.
+ *
+ * @example
+ * import { createFailban, failbanMiddleware } from 'raffel/http'
+ *
+ * // Create failban manager
+ * const failban = createFailban({
+ *   maxViolations: 5,
+ *   banDuration: 3600000, // 1 hour
+ *   violationDecay: 60000  // Reset after 1 minute of no violations
+ * })
+ *
+ * // Use as middleware
+ * app.use('*', failbanMiddleware(failban))
+ *
+ * // Record violations manually
+ * failban.recordViolation(clientIp, 'invalid_credentials')
+ * failban.recordViolation(clientIp, 'rate_limit_exceeded')
+ *
+ * // Check if IP is banned
+ * if (failban.isBanned(clientIp)) {
+ *   // Handle banned IP
+ * }
+ */
+import type { HttpContextInterface } from './context.js';
+import type { HttpMiddleware } from './app.js';
+/**
+ * Violation record for an IP
+ */
+export interface ViolationRecord {
+    ip: string;
+    violations: number;
+    lastViolation: number;
+    firstViolation: number;
+    reasons: string[];
+    banned: boolean;
+    bannedAt?: number;
+    bannedUntil?: number;
+}
+/**
+ * Failban configuration options
+ */
+export interface FailbanOptions {
+    /**
+     * Maximum violations before ban
+     * @default 5
+     */
+    maxViolations?: number;
+    /**
+     * Ban duration in milliseconds
+     * @default 3600000 (1 hour)
+     */
+    banDuration?: number;
+    /**
+     * Time in ms after which violations decay (reset)
+     * @default 300000 (5 minutes)
+     */
+    violationDecay?: number;
+    /**
+     * IPs that are never banned
+     */
+    whitelist?: string[];
+    /**
+     * IPs that are always banned
+     */
+    blacklist?: string[];
+    /**
+     * Function to extract IP from context
+     * @default Uses x-forwarded-for or socket address
+     */
+    getIp?: (c: HttpContextInterface) => string;
+    /**
+     * Callback when IP is banned
+     */
+    onBan?: (ip: string, record: ViolationRecord) => void | Promise<void>;
+    /**
+     * Callback when IP is unbanned
+     */
+    onUnban?: (ip: string) => void | Promise<void>;
+    /**
+     * Callback when violation is recorded
+     */
+    onViolation?: (ip: string, reason: string, record: ViolationRecord) => void | Promise<void>;
+    /**
+     * Custom store for persistence (default: in-memory)
+     */
+    store?: FailbanStore;
+}
+/**
+ * Custom store interface for persistence
+ */
+export interface FailbanStore {
+    get(ip: string): Promise<ViolationRecord | undefined>;
+    set(ip: string, record: ViolationRecord): Promise<void>;
+    delete(ip: string): Promise<void>;
+    clear(): Promise<void>;
+    getAll(): Promise<ViolationRecord[]>;
+}
+/**
+ * Failban manager interface
+ */
+export interface FailbanManager {
+    /**
+     * Record a violation for an IP
+     */
+    recordViolation(ip: string, reason?: string): Promise<ViolationRecord>;
+    /**
+     * Check if an IP is banned
+     */
+    isBanned(ip: string): Promise<boolean>;
+    /**
+     * Get violation record for an IP
+     */
+    getRecord(ip: string): Promise<ViolationRecord | undefined>;
+    /**
+     * Manually ban an IP
+     */
+    ban(ip: string, duration?: number, reason?: string): Promise<void>;
+    /**
+     * Manually unban an IP
+     */
+    unban(ip: string): Promise<void>;
+    /**
+     * Clear all records
+     */
+    clear(): Promise<void>;
+    /**
+     * Get all violation records
+     */
+    getAllRecords(): Promise<ViolationRecord[]>;
+    /**
+     * Get banned IPs
+     */
+    getBannedIps(): Promise<string[]>;
+    /**
+     * Reset violations for an IP (without unbanning)
+     */
+    resetViolations(ip: string): Promise<void>;
+    /**
+     * Check if IP is whitelisted
+     */
+    isWhitelisted(ip: string): boolean;
+    /**
+     * Check if IP is blacklisted
+     */
+    isBlacklisted(ip: string): boolean;
+    /**
+     * Add IP to whitelist
+     */
+    addToWhitelist(ip: string): void;
+    /**
+     * Remove IP from whitelist
+     */
+    removeFromWhitelist(ip: string): void;
+    /**
+     * Add IP to blacklist
+     */
+    addToBlacklist(ip: string): void;
+    /**
+     * Remove IP from blacklist
+     */
+    removeFromBlacklist(ip: string): void;
+    /**
+     * Get stats
+     */
+    getStats(): Promise<FailbanStats>;
+}
+/**
+ * Failban statistics
+ */
+export interface FailbanStats {
+    totalRecords: number;
+    bannedCount: number;
+    whitelistCount: number;
+    blacklistCount: number;
+}
+/**
+ * Create a failban manager
+ *
+ * @param options - Failban configuration
+ * @returns Failban manager instance
+ *
+ * @example
+ * const failban = createFailban({
+ *   maxViolations: 5,
+ *   banDuration: 3600000, // 1 hour
+ * })
+ *
+ * // Record violation on auth failure
+ * app.post('/login', async (c) => {
+ *   const ip = getClientIp(c)
+ *   const success = await authenticate(...)
+ *   if (!success) {
+ *     await failban.recordViolation(ip, 'invalid_credentials')
+ *   }
+ * })
+ */
+export declare function createFailban(options?: FailbanOptions): FailbanManager;
+/**
+ * Create failban middleware
+ *
+ * Blocks banned IPs with 403 Forbidden response.
+ *
+ * @param failban - Failban manager instance
+ * @param options - Additional middleware options
+ * @returns Middleware function
+ *
+ * @example
+ * const failban = createFailban({ maxViolations: 5 })
+ * app.use('*', failbanMiddleware(failban))
+ */
+export declare function failbanMiddleware<E extends Record<string, unknown> = Record<string, unknown>>(failban: FailbanManager, options?: {
+    getIp?: (c: HttpContextInterface<E>) => string;
+    message?: string;
+}): HttpMiddleware<E>;
+/**
+ * Get client IP helper
+ */
+export declare function getClientIp(c: HttpContextInterface): string;
+declare const _default: {
+    createFailban: typeof createFailban;
+    failbanMiddleware: typeof failbanMiddleware;
+    getClientIp: typeof getClientIp;
+};
+export default _default;
+//# sourceMappingURL=failban.d.ts.map

package/dist/http/failban.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failban.d.ts","sourceRoot":"","sources":["../../src/http/failban.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAM9C;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IAEpB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IAEpB;;;OAGG;IACH,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,oBAAoB,KAAK,MAAM,CAAA;IAE3C;;OAEG;IACH,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAErE;;OAEG;IACH,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE9C;;OAEG;IACH,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3F;;OAEG;IACH,KAAK,CAAC,EAAE,YAAY,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAA;IACrD,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,MAAM,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAEtE;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEtC;;OAEG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAA;IAE3D;;OAEG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAElE;;OAEG;IACH,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhC;;OAEG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAEtB;;OAEG;IACH,aAAa,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;IAE3C;;OAEG;IACH,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAEjC;;OAEG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE1C;;OAEG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;IAElC;;OAEG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;IAElC;;OAEG;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC;;OAEG;IACH,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IAErC;;OAEG;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC;;OAEG;IACH,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IAErC;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,CAAA;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;CACvB;AAqCD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,cAAmB,GAAG,cAAc,CA+O1E;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3F,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,KAAK,MAAM,CAAA;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAA;CACZ,GACL,cAAc,CAAC,CAAC,CAAC,CA2BnB;AA8BD;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAE3D;;;;;;AAMD,wBAIC"}

package/dist/http/failban.js

@@ -0,0 +1,351 @@
+/**
+ * Failban (IP Banning) Middleware
+ *
+ * Tracks violations per IP address and automatically bans IPs
+ * that exceed the maximum violation threshold.
+ *
+ * @example
+ * import { createFailban, failbanMiddleware } from 'raffel/http'
+ *
+ * // Create failban manager
+ * const failban = createFailban({
+ *   maxViolations: 5,
+ *   banDuration: 3600000, // 1 hour
+ *   violationDecay: 60000  // Reset after 1 minute of no violations
+ * })
+ *
+ * // Use as middleware
+ * app.use('*', failbanMiddleware(failban))
+ *
+ * // Record violations manually
+ * failban.recordViolation(clientIp, 'invalid_credentials')
+ * failban.recordViolation(clientIp, 'rate_limit_exceeded')
+ *
+ * // Check if IP is banned
+ * if (failban.isBanned(clientIp)) {
+ *   // Handle banned IP
+ * }
+ */
+// ─────────────────────────────────────────────────────────────────────────────
+// In-Memory Store
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Default in-memory store
+ */
+class InMemoryStore {
+    records = new Map();
+    async get(ip) {
+        return this.records.get(ip);
+    }
+    async set(ip, record) {
+        this.records.set(ip, record);
+    }
+    async delete(ip) {
+        this.records.delete(ip);
+    }
+    async clear() {
+        this.records.clear();
+    }
+    async getAll() {
+        return Array.from(this.records.values());
+    }
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Failban Manager
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Create a failban manager
+ *
+ * @param options - Failban configuration
+ * @returns Failban manager instance
+ *
+ * @example
+ * const failban = createFailban({
+ *   maxViolations: 5,
+ *   banDuration: 3600000, // 1 hour
+ * })
+ *
+ * // Record violation on auth failure
+ * app.post('/login', async (c) => {
+ *   const ip = getClientIp(c)
+ *   const success = await authenticate(...)
+ *   if (!success) {
+ *     await failban.recordViolation(ip, 'invalid_credentials')
+ *   }
+ * })
+ */
+export function createFailban(options = {}) {
+    const { maxViolations = 5, banDuration = 3600000, // 1 hour
+    violationDecay = 300000, // 5 minutes
+    whitelist: initialWhitelist = [], blacklist: initialBlacklist = [], onBan, onUnban, onViolation, store = new InMemoryStore(), } = options;
+    const whitelist = new Set(initialWhitelist);
+    const blacklist = new Set(initialBlacklist);
+    return {
+        async recordViolation(ip, reason = 'unknown') {
+            // Check whitelist
+            if (whitelist.has(ip)) {
+                return {
+                    ip,
+                    violations: 0,
+                    lastViolation: 0,
+                    firstViolation: 0,
+                    reasons: [],
+                    banned: false,
+                };
+            }
+            const now = Date.now();
+            let record = await store.get(ip);
+            // Create new record or check decay
+            if (!record) {
+                record = {
+                    ip,
+                    violations: 0,
+                    lastViolation: now,
+                    firstViolation: now,
+                    reasons: [],
+                    banned: false,
+                };
+            }
+            else if (now - record.lastViolation > violationDecay && !record.banned) {
+                // Violations have decayed
+                record.violations = 0;
+                record.reasons = [];
+                record.firstViolation = now;
+            }
+            // Check if ban has expired
+            if (record.banned && record.bannedUntil && now >= record.bannedUntil) {
+                record.banned = false;
+                record.bannedAt = undefined;
+                record.bannedUntil = undefined;
+                if (onUnban) {
+                    await onUnban(ip);
+                }
+            }
+            // Record violation
+            record.violations++;
+            record.lastViolation = now;
+            if (!record.reasons.includes(reason)) {
+                record.reasons.push(reason);
+            }
+            // Callback
+            if (onViolation) {
+                await onViolation(ip, reason, record);
+            }
+            // Check if should be banned
+            if (record.violations >= maxViolations && !record.banned) {
+                record.banned = true;
+                record.bannedAt = now;
+                record.bannedUntil = now + banDuration;
+                if (onBan) {
+                    await onBan(ip, record);
+                }
+            }
+            await store.set(ip, record);
+            return record;
+        },
+        async isBanned(ip) {
+            // Blacklisted IPs are always banned
+            if (blacklist.has(ip)) {
+                return true;
+            }
+            // Whitelisted IPs are never banned
+            if (whitelist.has(ip)) {
+                return false;
+            }
+            const record = await store.get(ip);
+            if (!record) {
+                return false;
+            }
+            // Check if ban has expired
+            if (record.banned && record.bannedUntil) {
+                const now = Date.now();
+                if (now >= record.bannedUntil) {
+                    record.banned = false;
+                    record.bannedAt = undefined;
+                    record.bannedUntil = undefined;
+                    await store.set(ip, record);
+                    if (onUnban) {
+                        await onUnban(ip);
+                    }
+                    return false;
+                }
+            }
+            return record.banned;
+        },
+        async getRecord(ip) {
+            return store.get(ip);
+        },
+        async ban(ip, duration = banDuration, reason = 'manual') {
+            if (whitelist.has(ip)) {
+                return;
+            }
+            const now = Date.now();
+            let record = await store.get(ip);
+            if (!record) {
+                record = {
+                    ip,
+                    violations: maxViolations,
+                    lastViolation: now,
+                    firstViolation: now,
+                    reasons: [reason],
+                    banned: true,
+                    bannedAt: now,
+                    bannedUntil: now + duration,
+                };
+            }
+            else {
+                record.banned = true;
+                record.bannedAt = now;
+                record.bannedUntil = now + duration;
+                if (!record.reasons.includes(reason)) {
+                    record.reasons.push(reason);
+                }
+            }
+            await store.set(ip, record);
+            if (onBan) {
+                await onBan(ip, record);
+            }
+        },
+        async unban(ip) {
+            const record = await store.get(ip);
+            if (record) {
+                record.banned = false;
+                record.bannedAt = undefined;
+                record.bannedUntil = undefined;
+                await store.set(ip, record);
+                if (onUnban) {
+                    await onUnban(ip);
+                }
+            }
+        },
+        async clear() {
+            await store.clear();
+        },
+        async getAllRecords() {
+            return store.getAll();
+        },
+        async getBannedIps() {
+            const records = await store.getAll();
+            const now = Date.now();
+            return records
+                .filter((r) => r.banned && (!r.bannedUntil || r.bannedUntil > now))
+                .map((r) => r.ip)
+                .concat(Array.from(blacklist));
+        },
+        async resetViolations(ip) {
+            const record = await store.get(ip);
+            if (record) {
+                record.violations = 0;
+                record.reasons = [];
+                await store.set(ip, record);
+            }
+        },
+        isWhitelisted(ip) {
+            return whitelist.has(ip);
+        },
+        isBlacklisted(ip) {
+            return blacklist.has(ip);
+        },
+        addToWhitelist(ip) {
+            whitelist.add(ip);
+            blacklist.delete(ip); // Remove from blacklist if present
+        },
+        removeFromWhitelist(ip) {
+            whitelist.delete(ip);
+        },
+        addToBlacklist(ip) {
+            blacklist.add(ip);
+            whitelist.delete(ip); // Remove from whitelist if present
+        },
+        removeFromBlacklist(ip) {
+            blacklist.delete(ip);
+        },
+        async getStats() {
+            const records = await store.getAll();
+            const now = Date.now();
+            return {
+                totalRecords: records.length,
+                bannedCount: records.filter((r) => r.banned && (!r.bannedUntil || r.bannedUntil > now)).length + blacklist.size,
+                whitelistCount: whitelist.size,
+                blacklistCount: blacklist.size,
+            };
+        },
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Middleware
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Create failban middleware
+ *
+ * Blocks banned IPs with 403 Forbidden response.
+ *
+ * @param failban - Failban manager instance
+ * @param options - Additional middleware options
+ * @returns Middleware function
+ *
+ * @example
+ * const failban = createFailban({ maxViolations: 5 })
+ * app.use('*', failbanMiddleware(failban))
+ */
+export function failbanMiddleware(failban, options = {}) {
+    const { getIp = defaultGetIp, message = 'Access denied' } = options;
+    return async (c, next) => {
+        const ip = getIp(c);
+        if (await failban.isBanned(ip)) {
+            c.res = new Response(JSON.stringify({
+                success: false,
+                error: {
+                    message,
+                    code: 'IP_BANNED',
+                },
+            }), {
+                status: 403,
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+            });
+            return;
+        }
+        await next();
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Helper Functions
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Default IP extraction function
+ */
+function defaultGetIp(c) {
+    // Check X-Forwarded-For header
+    const forwardedFor = c.req.header('x-forwarded-for');
+    if (forwardedFor) {
+        // X-Forwarded-For can contain multiple IPs, take the first one
+        const firstIp = forwardedFor.split(',')[0].trim();
+        if (firstIp) {
+            return firstIp;
+        }
+    }
+    // Check X-Real-IP header
+    const realIp = c.req.header('x-real-ip');
+    if (realIp) {
+        return realIp;
+    }
+    // Fallback to unknown (in real implementation, would get from socket)
+    return 'unknown';
+}
+/**
+ * Get client IP helper
+ */
+export function getClientIp(c) {
+    return defaultGetIp(c);
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Exports
+// ─────────────────────────────────────────────────────────────────────────────
+export default {
+    createFailban,
+    failbanMiddleware,
+    getClientIp,
+};
+//# sourceMappingURL=failban.js.map

package/dist/http/failban.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failban.js","sourceRoot":"","sources":["../../src/http/failban.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AA4LH,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,aAAa;IACT,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAA;IAEpD,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,MAAuB;QAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1C,CAAC;CACF;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,aAAa,CAAC,UAA0B,EAAE;IACxD,MAAM,EACJ,aAAa,GAAG,CAAC,EACjB,WAAW,GAAG,OAAO,EAAE,SAAS;IAChC,cAAc,GAAG,MAAM,EAAE,YAAY;IACrC,SAAS,EAAE,gBAAgB,GAAG,EAAE,EAChC,SAAS,EAAE,gBAAgB,GAAG,EAAE,EAChC,KAAK,EACL,OAAO,EACP,WAAW,EACX,KAAK,GAAG,IAAI,aAAa,EAAE,GAC5B,GAAG,OAAO,CAAA;IAEX,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAE3C,OAAO;QACL,KAAK,CAAC,eAAe,CAAC,EAAU,EAAE,MAAM,GAAG,SAAS;YAClD,kBAAkB;YAClB,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtB,OAAO;oBACL,EAAE;oBACF,UAAU,EAAE,CAAC;oBACb,aAAa,EAAE,CAAC;oBAChB,cAAc,EAAE,CAAC;oBACjB,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,KAAK;iBACd,CAAA;YACH,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,IAAI,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAEhC,mCAAmC;YACnC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG;oBACP,EAAE;oBACF,UAAU,EAAE,CAAC;oBACb,aAAa,EAAE,GAAG;oBAClB,cAAc,EAAE,GAAG;oBACnB,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,KAAK;iBACd,CAAA;YACH,CAAC;iBAAM,IAAI,GAAG,GAAG,MAAM,CAAC,aAAa,GAAG,cAAc,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACzE,0BAA0B;gBAC1B,MAAM,CAAC,UAAU,GAAG,CAAC,CAAA;gBACrB,MAAM,CAAC,OAAO,GAAG,EAAE,CAAA;gBACnB,MAAM,CAAC,cAAc,GAAG,GAAG,CAAA;YAC7B,CAAC;YAED,2BAA2B;YAC3B,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,IAAI,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACrE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAA;gBACrB,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAA;gBAC3B,MAAM,CAAC,WAAW,GAAG,SAAS,CAAA;gBAC9B,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,OAAO,CAAC,EAAE,CAAC,CAAA;gBACnB,CAAC;YACH,CAAC;YAED,mBAAmB;YACnB,MAAM,CAAC,UAAU,EAAE,CAAA;YACnB,MAAM,CAAC,aAAa,GAAG,GAAG,CAAA;YAC1B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC7B,CAAC;YAED,WAAW;YACX,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;YACvC,CAAC;YAED,4BAA4B;YAC5B,IAAI,MAAM,CAAC,UAAU,IAAI,aAAa,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACzD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;gBACpB,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAA;gBACrB,MAAM,CAAC,WAAW,GAAG,GAAG,GAAG,WAAW,CAAA;gBAEtC,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;gBACzB,CAAC;YACH,CAAC;YAED,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YAC3B,OAAO,MAAM,CAAA;QACf,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,EAAU;YACvB,oCAAoC;YACpC,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAA;YACb,CAAC;YAED,mCAAmC;YACnC,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAA;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAClC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,KAAK,CAAA;YACd,CAAC;YAED,2BAA2B;YAC3B,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACtB,IAAI,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBAC9B,MAAM,CAAC,MAAM,GAAG,KAAK,CAAA;oBACrB,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAA;oBAC3B,MAAM,CAAC,WAAW,GAAG,SAAS,CAAA;oBAC9B,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;oBAC3B,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,OAAO,CAAC,EAAE,CAAC,CAAA;oBACnB,CAAC;oBACD,OAAO,KAAK,CAAA;gBACd,CAAC;YACH,CAAC;YAED,OAAO,MAAM,CAAC,MAAM,CAAA;QACtB,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,EAAU;YACxB,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACtB,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,QAAQ,GAAG,WAAW,EAAE,MAAM,GAAG,QAAQ;YAC7D,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtB,OAAM;YACR,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,IAAI,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAEhC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG;oBACP,EAAE;oBACF,UAAU,EAAE,aAAa;oBACzB,aAAa,EAAE,GAAG;oBAClB,cAAc,EAAE,GAAG;oBACnB,OAAO,EAAE,CAAC,MAAM,CAAC;oBACjB,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,GAAG;oBACb,WAAW,EAAE,GAAG,GAAG,QAAQ;iBAC5B,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;gBACpB,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAA;gBACrB,MAAM,CAAC,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAA;gBACnC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBAC7B,CAAC;YACH,CAAC;YAED,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YAE3B,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YACzB,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,EAAU;YACpB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAClC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,MAAM,GAAG,KAAK,CAAA;gBACrB,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAA;gBAC3B,MAAM,CAAC,WAAW,GAAG,SAAS,CAAA;gBAC9B,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;gBAE3B,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,OAAO,CAAC,EAAE,CAAC,CAAA;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;QACrB,CAAC;QAED,KAAK,CAAC,aAAa;YACjB,OAAO,KAAK,CAAC,MAAM,EAAE,CAAA;QACvB,CAAC;QAED,KAAK,CAAC,YAAY;YAChB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,OAAO,OAAO;iBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;iBAClE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;QAClC,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,EAAU;YAC9B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAClC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,UAAU,GAAG,CAAC,CAAA;gBACrB,MAAM,CAAC,OAAO,GAAG,EAAE,CAAA;gBACnB,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC;QAED,aAAa,CAAC,EAAU;YACtB,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC1B,CAAC;QAED,aAAa,CAAC,EAAU;YACtB,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC1B,CAAC;QAED,cAAc,CAAC,EAAU;YACvB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACjB,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA,CAAC,mCAAmC;QAC1D,CAAC;QAED,mBAAmB,CAAC,EAAU;YAC5B,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACtB,CAAC;QAED,cAAc,CAAC,EAAU;YACvB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACjB,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA,CAAC,mCAAmC;QAC1D,CAAC;QAED,mBAAmB,CAAC,EAAU;YAC5B,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACtB,CAAC;QAED,KAAK,CAAC,QAAQ;YACZ,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAA;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,OAAO;gBACL,YAAY,EAAE,OAAO,CAAC,MAAM;gBAC5B,WAAW,EAAE,OAAO,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAC3D,CAAC,MAAM,GAAG,SAAS,CAAC,IAAI;gBACzB,cAAc,EAAE,SAAS,CAAC,IAAI;gBAC9B,cAAc,EAAE,SAAS,CAAC,IAAI;aAC/B,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAuB,EACvB,UAGI,EAAE;IAEN,MAAM,EAAE,KAAK,GAAG,YAAsD,EAAE,OAAO,GAAG,eAAe,EAAE,GAAG,OAAO,CAAA;IAE7G,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAEnB,IAAI,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,CAAC,CAAC,GAAG,GAAG,IAAI,QAAQ,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,OAAO;oBACP,IAAI,EAAE,WAAW;iBAClB;aACF,CAAC,EACF;gBACE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;aACF,CACF,CAAA;YACD,OAAM;QACR,CAAC;QAED,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;GAEG;AACH,SAAS,YAAY,CAAC,CAAuB;IAC3C,+BAA+B;IAC/B,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAuB,CAAA;IAC1E,IAAI,YAAY,EAAE,CAAC;QACjB,+DAA+D;QAC/D,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAA;QAChB,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAuB,CAAA;IAC9D,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAA;IACf,CAAC;IAED,sEAAsE;IACtE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,CAAuB;IACjD,OAAO,YAAY,CAAC,CAAC,CAAC,CAAA;AACxB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,eAAe;IACb,aAAa;IACb,iBAAiB;IACjB,WAAW;CACZ,CAAA"}