secure-scan 1.2.2

package/dist/rules/standards.js

@@ -0,0 +1,352 @@
+"use strict";
+/**
+ * Security Standards Database
+ * OWASP Top 10, CWE, MITRE ATT&CK, SANS Top 25
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SANS_TOP_25 = exports.MITRE_ATTACK = exports.CWE_DATABASE = exports.OWASP_TOP_10 = void 0;
+exports.getStandardsForThreat = getStandardsForThreat;
+const types_1 = require("../types");
+/**
+ * OWASP Top 10 2021
+ */
+exports.OWASP_TOP_10 = {
+    'A01:2021': {
+        name: 'OWASP',
+        id: 'A01:2021',
+        title: 'Broken Access Control',
+        description: 'Access control enforces policy such that users cannot act outside of their intended permissions.',
+        url: 'https://owasp.org/Top10/A01_2021-Broken_Access_Control/'
+    },
+    'A02:2021': {
+        name: 'OWASP',
+        id: 'A02:2021',
+        title: 'Cryptographic Failures',
+        description: 'Failures related to cryptography which often lead to sensitive data exposure.',
+        url: 'https://owasp.org/Top10/A02_2021-Cryptographic_Failures/'
+    },
+    'A03:2021': {
+        name: 'OWASP',
+        id: 'A03:2021',
+        title: 'Injection',
+        description: 'User-supplied data is not validated, filtered, or sanitized by the application.',
+        url: 'https://owasp.org/Top10/A03_2021-Injection/'
+    },
+    'A04:2021': {
+        name: 'OWASP',
+        id: 'A04:2021',
+        title: 'Insecure Design',
+        description: 'Missing or ineffective control design.',
+        url: 'https://owasp.org/Top10/A04_2021-Insecure_Design/'
+    },
+    'A05:2021': {
+        name: 'OWASP',
+        id: 'A05:2021',
+        title: 'Security Misconfiguration',
+        description: 'Missing appropriate security hardening or improperly configured permissions.',
+        url: 'https://owasp.org/Top10/A05_2021-Security_Misconfiguration/'
+    },
+    'A06:2021': {
+        name: 'OWASP',
+        id: 'A06:2021',
+        title: 'Vulnerable and Outdated Components',
+        description: 'Using components with known vulnerabilities.',
+        url: 'https://owasp.org/Top10/A06_2021-Vulnerable_and_Outdated_Components/'
+    },
+    'A07:2021': {
+        name: 'OWASP',
+        id: 'A07:2021',
+        title: 'Identification and Authentication Failures',
+        description: 'Confirmation of user identity, authentication, and session management.',
+        url: 'https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/'
+    },
+    'A08:2021': {
+        name: 'OWASP',
+        id: 'A08:2021',
+        title: 'Software and Data Integrity Failures',
+        description: 'Code and infrastructure that does not protect against integrity violations.',
+        url: 'https://owasp.org/Top10/A08_2021-Software_and_Data_Integrity_Failures/'
+    },
+    'A09:2021': {
+        name: 'OWASP',
+        id: 'A09:2021',
+        title: 'Security Logging and Monitoring Failures',
+        description: 'Insufficient logging, detection, monitoring, and active response.',
+        url: 'https://owasp.org/Top10/A09_2021-Security_Logging_and_Monitoring_Failures/'
+    },
+    'A10:2021': {
+        name: 'OWASP',
+        id: 'A10:2021',
+        title: 'Server-Side Request Forgery (SSRF)',
+        description: 'SSRF flaws occur when a web application fetches a remote resource without validating the user-supplied URL.',
+        url: 'https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_%28SSRF%29/'
+    }
+};
+/**
+ * Common Weakness Enumeration (CWE)
+ */
+exports.CWE_DATABASE = {
+    'CWE-79': {
+        name: 'CWE',
+        id: 'CWE-79',
+        title: 'Improper Neutralization of Input During Web Page Generation (XSS)',
+        description: 'The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page.',
+        url: 'https://cwe.mitre.org/data/definitions/79.html'
+    },
+    'CWE-89': {
+        name: 'CWE',
+        id: 'CWE-89',
+        title: 'SQL Injection',
+        description: 'The software constructs SQL commands using externally-influenced input from an upstream component.',
+        url: 'https://cwe.mitre.org/data/definitions/89.html'
+    },
+    'CWE-78': {
+        name: 'CWE',
+        id: 'CWE-78',
+        title: 'OS Command Injection',
+        description: 'The software constructs OS commands using externally-influenced input without proper neutralization.',
+        url: 'https://cwe.mitre.org/data/definitions/78.html'
+    },
+    'CWE-94': {
+        name: 'CWE',
+        id: 'CWE-94',
+        title: 'Improper Control of Generation of Code (Code Injection)',
+        description: 'The software constructs code segments using externally-influenced input without proper neutralization.',
+        url: 'https://cwe.mitre.org/data/definitions/94.html'
+    },
+    'CWE-502': {
+        name: 'CWE',
+        id: 'CWE-502',
+        title: 'Deserialization of Untrusted Data',
+        description: 'The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.',
+        url: 'https://cwe.mitre.org/data/definitions/502.html'
+    },
+    'CWE-798': {
+        name: 'CWE',
+        id: 'CWE-798',
+        title: 'Use of Hard-coded Credentials',
+        description: 'The software contains hard-coded credentials, such as passwords or cryptographic keys.',
+        url: 'https://cwe.mitre.org/data/definitions/798.html'
+    },
+    'CWE-22': {
+        name: 'CWE',
+        id: 'CWE-22',
+        title: 'Path Traversal',
+        description: 'The software uses external input to construct a pathname without proper neutralization.',
+        url: 'https://cwe.mitre.org/data/definitions/22.html'
+    },
+    'CWE-327': {
+        name: 'CWE',
+        id: 'CWE-327',
+        title: 'Use of a Broken or Risky Cryptographic Algorithm',
+        description: 'The use of a broken or risky cryptographic algorithm is an unnecessary risk.',
+        url: 'https://cwe.mitre.org/data/definitions/327.html'
+    },
+    'CWE-330': {
+        name: 'CWE',
+        id: 'CWE-330',
+        title: 'Use of Insufficiently Random Values',
+        description: 'The software uses insufficiently random numbers or values in a security context.',
+        url: 'https://cwe.mitre.org/data/definitions/330.html'
+    },
+    'CWE-352': {
+        name: 'CWE',
+        id: 'CWE-352',
+        title: 'Cross-Site Request Forgery (CSRF)',
+        description: 'The web application does not verify that the request was intentionally provided by the user.',
+        url: 'https://cwe.mitre.org/data/definitions/352.html'
+    },
+    'CWE-90': {
+        name: 'CWE',
+        id: 'CWE-90',
+        title: 'LDAP Injection',
+        description: 'The software constructs LDAP statements using externally-influenced input.',
+        url: 'https://cwe.mitre.org/data/definitions/90.html'
+    },
+    'CWE-200': {
+        name: 'CWE',
+        id: 'CWE-200',
+        title: 'Exposure of Sensitive Information',
+        description: 'The software exposes sensitive information to an actor not authorized to have access.',
+        url: 'https://cwe.mitre.org/data/definitions/200.html'
+    },
+    'CWE-506': {
+        name: 'CWE',
+        id: 'CWE-506',
+        title: 'Embedded Malicious Code',
+        description: 'The application contains code that appears to be malicious in nature.',
+        url: 'https://cwe.mitre.org/data/definitions/506.html'
+    },
+    'CWE-912': {
+        name: 'CWE',
+        id: 'CWE-912',
+        title: 'Hidden Functionality',
+        description: 'The software contains functionality that is not documented or accessible through the intended interface.',
+        url: 'https://cwe.mitre.org/data/definitions/912.html'
+    }
+};
+/**
+ * MITRE ATT&CK Techniques
+ */
+exports.MITRE_ATTACK = {
+    'T1059': {
+        name: 'MITRE',
+        id: 'T1059',
+        title: 'Command and Scripting Interpreter',
+        description: 'Adversaries may abuse command and script interpreters to execute commands.',
+        url: 'https://attack.mitre.org/techniques/T1059/'
+    },
+    'T1071': {
+        name: 'MITRE',
+        id: 'T1071',
+        title: 'Application Layer Protocol',
+        description: 'Adversaries may communicate using application layer protocols to avoid detection.',
+        url: 'https://attack.mitre.org/techniques/T1071/'
+    },
+    'T1027': {
+        name: 'MITRE',
+        id: 'T1027',
+        title: 'Obfuscated Files or Information',
+        description: 'Adversaries may attempt to make files or information difficult to discover or analyze.',
+        url: 'https://attack.mitre.org/techniques/T1027/'
+    },
+    'T1132': {
+        name: 'MITRE',
+        id: 'T1132',
+        title: 'Data Encoding',
+        description: 'Adversaries may encode data to make the content of command and control traffic more difficult to detect.',
+        url: 'https://attack.mitre.org/techniques/T1132/'
+    },
+    'T1041': {
+        name: 'MITRE',
+        id: 'T1041',
+        title: 'Exfiltration Over C2 Channel',
+        description: 'Adversaries may steal data by exfiltrating it over an existing command and control channel.',
+        url: 'https://attack.mitre.org/techniques/T1041/'
+    },
+    'T1496': {
+        name: 'MITRE',
+        id: 'T1496',
+        title: 'Resource Hijacking',
+        description: 'Adversaries may leverage the resources of systems to mine cryptocurrency.',
+        url: 'https://attack.mitre.org/techniques/T1496/'
+    },
+    'T1056': {
+        name: 'MITRE',
+        id: 'T1056',
+        title: 'Input Capture',
+        description: 'Adversaries may use methods of capturing user input to obtain credentials or collect information.',
+        url: 'https://attack.mitre.org/techniques/T1056/'
+    }
+};
+/**
+ * SANS Top 25
+ */
+exports.SANS_TOP_25 = {
+    'SANS-1': {
+        name: 'SANS',
+        id: 'SANS-1',
+        title: 'Out-of-bounds Write',
+        description: 'Writing data past the end, or before the beginning, of the intended buffer.',
+        url: 'https://www.sans.org/top25-software-errors/'
+    },
+    'SANS-2': {
+        name: 'SANS',
+        id: 'SANS-2',
+        title: 'Improper Neutralization of Input During Web Page Generation',
+        description: 'Cross-site scripting (XSS) vulnerabilities.',
+        url: 'https://www.sans.org/top25-software-errors/'
+    },
+    'SANS-3': {
+        name: 'SANS',
+        id: 'SANS-3',
+        title: 'SQL Injection',
+        description: 'SQL injection vulnerabilities in database queries.',
+        url: 'https://www.sans.org/top25-software-errors/'
+    }
+};
+/**
+ * Map threat types to relevant security standards
+ */
+function getStandardsForThreat(threatType) {
+    const standards = [];
+    switch (threatType) {
+        case types_1.ThreatType.SQL_INJECTION:
+            standards.push(exports.OWASP_TOP_10['A03:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-89']);
+            standards.push(exports.SANS_TOP_25['SANS-3']);
+            break;
+        case types_1.ThreatType.COMMAND_INJECTION:
+            standards.push(exports.OWASP_TOP_10['A03:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-78']);
+            standards.push(exports.MITRE_ATTACK['T1059']);
+            break;
+        case types_1.ThreatType.XSS:
+            standards.push(exports.OWASP_TOP_10['A03:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-79']);
+            standards.push(exports.SANS_TOP_25['SANS-2']);
+            break;
+        case types_1.ThreatType.CSRF:
+            standards.push(exports.OWASP_TOP_10['A01:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-352']);
+            break;
+        case types_1.ThreatType.INSECURE_DESERIALIZATION:
+            standards.push(exports.OWASP_TOP_10['A08:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-502']);
+            break;
+        case types_1.ThreatType.HARDCODED_CREDENTIALS:
+            standards.push(exports.OWASP_TOP_10['A07:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-798']);
+            break;
+        case types_1.ThreatType.PATH_TRAVERSAL:
+            standards.push(exports.OWASP_TOP_10['A01:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-22']);
+            break;
+        case types_1.ThreatType.LDAP_INJECTION:
+            standards.push(exports.OWASP_TOP_10['A03:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-90']);
+            break;
+        case types_1.ThreatType.INSECURE_CRYPTO:
+            standards.push(exports.OWASP_TOP_10['A02:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-327']);
+            break;
+        case types_1.ThreatType.WEAK_RANDOM:
+            standards.push(exports.OWASP_TOP_10['A02:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-330']);
+            break;
+        case types_1.ThreatType.DANGEROUS_FUNCTION:
+            standards.push(exports.OWASP_TOP_10['A03:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-94']);
+            break;
+        case types_1.ThreatType.BACKDOOR:
+        case types_1.ThreatType.REVERSE_SHELL:
+            standards.push(exports.CWE_DATABASE['CWE-506']);
+            standards.push(exports.CWE_DATABASE['CWE-912']);
+            standards.push(exports.MITRE_ATTACK['T1059']);
+            break;
+        case types_1.ThreatType.OBFUSCATED_CODE:
+            standards.push(exports.CWE_DATABASE['CWE-506']);
+            standards.push(exports.MITRE_ATTACK['T1027']);
+            break;
+        case types_1.ThreatType.CRYPTOMINER:
+            standards.push(exports.CWE_DATABASE['CWE-506']);
+            standards.push(exports.MITRE_ATTACK['T1496']);
+            break;
+        case types_1.ThreatType.KEYLOGGER:
+            standards.push(exports.CWE_DATABASE['CWE-506']);
+            standards.push(exports.MITRE_ATTACK['T1056']);
+            break;
+        case types_1.ThreatType.DATA_EXFILTRATION:
+            standards.push(exports.CWE_DATABASE['CWE-200']);
+            standards.push(exports.MITRE_ATTACK['T1041']);
+            break;
+        case types_1.ThreatType.INFORMATION_DISCLOSURE:
+            standards.push(exports.OWASP_TOP_10['A01:2021']);
+            standards.push(exports.CWE_DATABASE['CWE-200']);
+            break;
+        default:
+            standards.push(exports.OWASP_TOP_10['A05:2021']);
+    }
+    return standards.filter(s => s !== undefined);
+}
+//# sourceMappingURL=standards.js.map

package/dist/rules/standards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standards.js","sourceRoot":"","sources":["../../src/rules/standards.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AA6QH,sDAmGC;AA9WD,oCAAwD;AAExD;;GAEG;AACU,QAAA,YAAY,GAAqC;IAC5D,UAAU,EAAE;QACV,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,kGAAkG;QAC/G,GAAG,EAAE,yDAAyD;KAC/D;IACD,UAAU,EAAE;QACV,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,+EAA+E;QAC5F,GAAG,EAAE,0DAA0D;KAChE;IACD,UAAU,EAAE;QACV,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,iFAAiF;QAC9F,GAAG,EAAE,6CAA6C;KACnD;IACD,UAAU,EAAE;QACV,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,wCAAwC;QACrD,GAAG,EAAE,mDAAmD;KACzD;IACD,UAAU,EAAE;QACV,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,8EAA8E;QAC3F,GAAG,EAAE,6DAA6D;KACnE;IACD,UAAU,EAAE;QACV,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EAAE,8CAA8C;QAC3D,GAAG,EAAE,sEAAsE;KAC5E;IACD,UAAU,EAAE;QACV,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,4CAA4C;QACnD,WAAW,EAAE,wEAAwE;QACrF,GAAG,EAAE,8EAA8E;KACpF;IACD,UAAU,EAAE;QACV,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,6EAA6E;QAC1F,GAAG,EAAE,wEAAwE;KAC9E;IACD,UAAU,EAAE;QACV,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,0CAA0C;QACjD,WAAW,EAAE,mEAAmE;QAChF,GAAG,EAAE,4EAA4E;KAClF;IACD,UAAU,EAAE;QACV,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EAAE,6GAA6G;QAC1H,GAAG,EAAE,0EAA0E;KAChF;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,YAAY,GAAqC;IAC5D,QAAQ,EAAE;QACR,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,mEAAmE;QAC1E,WAAW,EAAE,+IAA+I;QAC5J,GAAG,EAAE,gDAAgD;KACtD;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,oGAAoG;QACjH,GAAG,EAAE,gDAAgD;KACtD;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,sGAAsG;QACnH,GAAG,EAAE,gDAAgD;KACtD;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,yDAAyD;QAChE,WAAW,EAAE,wGAAwG;QACrH,GAAG,EAAE,gDAAgD;KACtD;IACD,SAAS,EAAE;QACT,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,mHAAmH;QAChI,GAAG,EAAE,iDAAiD;KACvD;IACD,SAAS,EAAE;QACT,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,wFAAwF;QACrG,GAAG,EAAE,iDAAiD;KACvD;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,yFAAyF;QACtG,GAAG,EAAE,gDAAgD;KACtD;IACD,SAAS,EAAE;QACT,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,kDAAkD;QACzD,WAAW,EAAE,8EAA8E;QAC3F,GAAG,EAAE,iDAAiD;KACvD;IACD,SAAS,EAAE;QACT,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EAAE,kFAAkF;QAC/F,GAAG,EAAE,iDAAiD;KACvD;IACD,SAAS,EAAE;QACT,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,8FAA8F;QAC3G,GAAG,EAAE,iDAAiD;KACvD;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,4EAA4E;QACzF,GAAG,EAAE,gDAAgD;KACtD;IACD,SAAS,EAAE;QACT,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,uFAAuF;QACpG,GAAG,EAAE,iDAAiD;KACvD;IACD,SAAS,EAAE;QACT,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,uEAAuE;QACpF,GAAG,EAAE,iDAAiD;KACvD;IACD,SAAS,EAAE;QACT,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,0GAA0G;QACvH,GAAG,EAAE,iDAAiD;KACvD;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,YAAY,GAAqC;IAC5D,OAAO,EAAE;QACP,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,4EAA4E;QACzF,GAAG,EAAE,4CAA4C;KAClD;IACD,OAAO,EAAE;QACP,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,mFAAmF;QAChG,GAAG,EAAE,4CAA4C;KAClD;IACD,OAAO,EAAE;QACP,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,wFAAwF;QACrG,GAAG,EAAE,4CAA4C;KAClD;IACD,OAAO,EAAE;QACP,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,0GAA0G;QACvH,GAAG,EAAE,4CAA4C;KAClD;IACD,OAAO,EAAE;QACP,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,6FAA6F;QAC1G,GAAG,EAAE,4CAA4C;KAClD;IACD,OAAO,EAAE;QACP,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,2EAA2E;QACxF,GAAG,EAAE,4CAA4C;KAClD;IACD,OAAO,EAAE;QACP,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,mGAAmG;QAChH,GAAG,EAAE,4CAA4C;KAClD;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,WAAW,GAAqC;IAC3D,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,6EAA6E;QAC1F,GAAG,EAAE,6CAA6C;KACnD;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,6DAA6D;QACpE,WAAW,EAAE,6CAA6C;QAC1D,GAAG,EAAE,6CAA6C;KACnD;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,oDAAoD;QACjE,GAAG,EAAE,6CAA6C;KACnD;CACF,CAAC;AAEF;;GAEG;AACH,SAAgB,qBAAqB,CAAC,UAAsB;IAC1D,MAAM,SAAS,GAAuB,EAAE,CAAC;IAEzC,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,kBAAU,CAAC,aAAa;YAC3B,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvC,SAAS,CAAC,IAAI,CAAC,mBAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtC,MAAM;QAER,KAAK,kBAAU,CAAC,iBAAiB;YAC/B,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,MAAM;QAER,KAAK,kBAAU,CAAC,GAAG;YACjB,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvC,SAAS,CAAC,IAAI,CAAC,mBAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtC,MAAM;QAER,KAAK,kBAAU,CAAC,IAAI;YAClB,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,MAAM;QAER,KAAK,kBAAU,CAAC,wBAAwB;YACtC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,MAAM;QAER,KAAK,kBAAU,CAAC,qBAAqB;YACnC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,MAAM;QAER,KAAK,kBAAU,CAAC,cAAc;YAC5B,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvC,MAAM;QAER,KAAK,kBAAU,CAAC,cAAc;YAC5B,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvC,MAAM;QAER,KAAK,kBAAU,CAAC,eAAe;YAC7B,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,MAAM;QAER,KAAK,kBAAU,CAAC,WAAW;YACzB,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,MAAM;QAER,KAAK,kBAAU,CAAC,kBAAkB;YAChC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvC,MAAM;QAER,KAAK,kBAAU,CAAC,QAAQ,CAAC;QACzB,KAAK,kBAAU,CAAC,aAAa;YAC3B,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,MAAM;QAER,KAAK,kBAAU,CAAC,eAAe;YAC7B,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,MAAM;QAER,KAAK,kBAAU,CAAC,WAAW;YACzB,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,MAAM;QAER,KAAK,kBAAU,CAAC,SAAS;YACvB,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,MAAM;QAER,KAAK,kBAAU,CAAC,iBAAiB;YAC/B,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,MAAM;QAER,KAAK,kBAAU,CAAC,sBAAsB;YACpC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,MAAM;QAER;YACE,SAAS,CAAC,IAAI,CAAC,oBAAY,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;AAChD,CAAC"}