shield360 1.1.0 → 1.2.0

package/dist/rasp/__tests__/corpus.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SECTIONS = exports.loadJson = exports.RASP_DIR = void 0;
+exports.normalise = normalise;
+exports.nodeVersions = nodeVersions;
+exports.runCase = runCase;
+exports.requestFor = requestFor;
+/**
+ * Shared-corpus runner (sdk/rasp/testdata, README "Fixtures"): runs one case
+ * of a section through the detectors and returns what fired, if anything.
+ * `request` inputs go through the normaliser (percent-decoded forms added);
+ * `model_output` inputs through the model-output fragmenter.
+ */
+const fs_1 = require("fs");
+const path_1 = require("path");
+const detect_1 = require("../detect");
+const normalize_1 = require("../normalize");
+const vpatch_1 = require("../vpatch");
+// sdk/rasp in the monorepo; rasp/ at the root of the public mirror (shield360-js).
+exports.RASP_DIR = [(0, path_1.join)(__dirname, '..', '..', '..', '..', 'rasp'), (0, path_1.join)(__dirname, '..', '..', '..', 'rasp')]
+    .find((dir) => (0, fs_1.existsSync)((0, path_1.join)(dir, 'testdata'))) ?? (0, path_1.join)(__dirname, '..', '..', '..', '..', 'rasp');
+const loadJson = (rel) => JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(exports.RASP_DIR, rel), 'utf8'));
+exports.loadJson = loadJson;
+exports.SECTIONS = ['sql', 'nosql', 'command', 'path', 'ssrf', 'code', 'template', 'xml', 'deser', 'xss', 'requests'];
+function normalise(raw) {
+    const out = [];
+    for (const i of raw || []) {
+        if (i.source === 'model_output')
+            (0, normalize_1.addModelOutput)(out, i.value, i.key);
+        else
+            (0, normalize_1.addInput)(out, i.value, i.key);
+    }
+    return out;
+}
+/** Node versions the request cases run under: this one, and one inside each runtimeVersions range. */
+function nodeVersions() {
+    const out = new Set([process.versions.node]);
+    for (const r of vpatch_1.BUILT_IN_RULES)
+        for (const [from] of r.runtimeVersions?.node ?? [])
+            out.add(from);
+    return [...out];
+}
+/** Runs one case; returns the first finding (null = nothing fired). */
+function runCase(section, c) {
+    const inputs = normalise(c.inputs);
+    switch (section) {
+        case 'sql':
+            return (0, detect_1.detectSql)(c.query, inputs, c.dialect);
+        case 'nosql': {
+            const ins = [];
+            (0, normalize_1.flatten)(ins, c.body, 'body');
+            (0, normalize_1.flatten)(ins, c.query, 'query');
+            const trees = [c.body, c.query];
+            return (0, detect_1.detectNoSql)(c.filter, trees, ins) ?? (c.update ? (0, detect_1.detectNoSql)(c.update, trees, ins) : null);
+        }
+        case 'command': {
+            if (typeof c.command === 'string') {
+                return (0, detect_1.detectCommand)(c.command, inputs) ?? (0, detect_1.detectShellSpawn)({ command: c.command, inRequest: true, allow: [] });
+            }
+            const argv = c.argv;
+            const script = (0, detect_1.shellScriptOf)(argv);
+            return (0, detect_1.detectArgv)(argv, inputs) ?? (script ? (0, detect_1.detectCommand)(script, inputs) : null) ?? (0, detect_1.detectShellSpawn)({ argv0: argv[0], inRequest: true, allow: [] });
+        }
+        case 'path':
+            return (0, detect_1.detectPath)(c.path, c.op, inputs, c.fileRoots || []);
+        case 'ssrf':
+            return (0, detect_1.detectSsrf)(c.url, inputs, c.resolved || []);
+        case 'template': // SHIELD: source only; data is never passed to the detector.
+            return (0, detect_1.detectTemplate)(c.template, inputs, c.engine);
+        case 'code':
+            return (0, detect_1.detectCode)(c.code, inputs);
+        case 'xml':
+            return (0, detect_1.detectXml)(c.xml, inputs, Boolean(c.resolvesExternal));
+        case 'deser': {
+            const data = c.dataEncoding === 'base64' ? Buffer.from(c.data, 'base64').toString('latin1') : c.data;
+            return (0, detect_1.detectDeserialization)(c.format, data, inputs);
+        }
+        case 'xss':
+            return (0, detect_1.detectXss)(c.contentType, c.body, inputs);
+        case 'requests': {
+            const req = { method: c.method, path: c.path, query: c.query, headers: c.headers, cookie: c.cookie, body: c.body };
+            for (const v of nodeVersions()) {
+                const f = (0, vpatch_1.matchVirtualPatches)(req, vpatch_1.BUILT_IN_RULES, 'all', 'node', v);
+                if (f)
+                    return f;
+            }
+            return null;
+        }
+    }
+}
+/** A request that satisfies a rule's clauses, built from the rule itself. */
+function requestFor(rule) {
+    const req = { method: 'GET', path: '/', query: '', headers: {}, cookie: '', body: '' };
+    for (const c of rule.match) {
+        const value = c.values?.[0] ?? c.value ?? 'x';
+        if (c.target === 'method')
+            req.method = value;
+        else if (c.target.startsWith('header:'))
+            req.headers[c.target.slice(7)] = c.op === 'present' ? 'x' : value;
+        else if (c.target === 'body' || c.target === 'request')
+            req.body += value;
+        else if (c.target === 'query')
+            req.query += value;
+        else if (c.target === 'cookie')
+            req.cookie += value;
+        else if (c.target === 'path')
+            req.path = value;
+    }
+    return req;
+}
+//# sourceMappingURL=corpus.js.map

package/dist/rasp/__tests__/corpus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corpus.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/corpus.ts"],"names":[],"mappings":";;;AAuCA,8BAOC;AAGD,oCAIC;AAGD,0BA6CC;AAGD,gCAYC;AApHD;;;;;GAKG;AACH,2BAA8C;AAC9C,+BAA4B;AAC5B,sCAiBmB;AAEnB,4CAAiE;AAEjE,sCAAmG;AAEnG,mFAAmF;AACtE,QAAA,QAAQ,GAAG,CAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;KACjH,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAChG,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,gBAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAAvF,QAAA,QAAQ,YAA+E;AAEvF,QAAA,QAAQ,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAU,CAAC;AAGpI,SAAgB,SAAS,CAAC,GAA4B;IACpD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,cAAc;YAAE,IAAA,0BAAc,EAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;;YAChE,IAAA,oBAAQ,EAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sGAAsG;AACtG,SAAgB,YAAY;IAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,uBAAc;QAAE,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,IAAI,IAAI,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClG,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,uEAAuE;AACvE,SAAgB,OAAO,CAAC,OAAgB,EAAE,CAAM;IAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,KAAK;YACR,OAAO,IAAA,kBAAS,EAAC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,OAAqB,CAAC,CAAC;QAC7D,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAgB,EAAE,CAAC;YAC5B,IAAA,mBAAO,EAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7B,IAAA,mBAAO,EAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAChC,OAAO,IAAA,oBAAW,EAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,oBAAW,EAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpG,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAClC,OAAO,IAAA,sBAAa,EAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAA,yBAAgB,EAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,IAAI,GAAa,CAAC,CAAC,IAAI,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,IAAI,CAAC,CAAC;YACnC,OAAO,IAAA,mBAAU,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,sBAAa,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAA,yBAAgB,EAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACzJ,CAAC;QACD,KAAK,MAAM;YACT,OAAO,IAAA,mBAAU,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAY,EAAE,MAAM,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACvE,KAAK,MAAM;YACT,OAAO,IAAA,mBAAU,EAAC,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACrD,KAAK,UAAU,EAAE,6DAA6D;YAC5E,OAAO,IAAA,uBAAc,EAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAwB,CAAC,CAAC;QACxE,KAAK,MAAM;YACT,OAAO,IAAA,mBAAU,EAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,KAAK,KAAK;YACR,OAAO,IAAA,kBAAS,EAAC,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC/D,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACrG,OAAO,IAAA,8BAAqB,EAAC,CAAC,CAAC,MAAqB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;QACD,KAAK,KAAK;YACR,OAAO,IAAA,kBAAS,EAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAc,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9H,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,IAAA,4BAAmB,EAAC,GAAG,EAAE,uBAAc,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;gBACrE,IAAI,CAAC;oBAAE,OAAO,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAgB,UAAU,CAAC,IAAkB;IAC3C,MAAM,GAAG,GAAc,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAClG,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;QAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC;aACzC,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;aACtG,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC;aACrE,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;YAAE,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC;aAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;aAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/rasp/__tests__/custom-rules.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/rasp/__tests__/custom-rules.test.js

@@ -0,0 +1,276 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Custom rules in the SDK (README "Custom rules"): rules arrive inside the
+ * signed config, invalid ones are skipped with one warning and never break
+ * the config, request rules run with the request's capture, finding rules
+ * when a built-in check fires, the custom_rule mode caps every action, and
+ * evaluation fails open.
+ */
+const crypto_1 = require("crypto");
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const capture_1 = require("../capture");
+const config_client_1 = require("../config-client");
+const context_1 = require("../context");
+const custom_rules_1 = require("../custom-rules");
+const engine_1 = require("../engine");
+const index_1 = require("../index");
+const middleware_1 = require("../middleware");
+const types_1 = require("../types");
+const rule = (over = {}) => ({ id: 'r1', name: 'Rule one', expression: 'request.path.startsWith("/admin")', action: 'monitor', enabled: true, ...over });
+function remote(customRules, attacks = {}) {
+    return { version: 'v1', exp: Math.floor(Date.now() / 1000) + 3600, killSwitch: false, snippets: false, mode: 'monitor', attacks, rules: [], customRules };
+}
+let events = [];
+let warn;
+beforeEach(() => {
+    (0, custom_rules_1.resetCustomRuleWarnings)();
+    events = [];
+    warn = jest.spyOn(console, 'warn').mockImplementation(() => undefined);
+    (0, engine_1.configureEngine)({ enabled: true, applicationName: 'orders-api', env: {} });
+    (0, engine_1.setEventSink)({ add: (e) => events.push(e) });
+});
+afterEach(() => {
+    warn.mockRestore();
+    (0, engine_1.setEventSink)(undefined);
+    (0, engine_1.configureEngine)({ enabled: false, applicationName: 'default', env: {} });
+});
+const request = (url, extra = {}) => (0, capture_1.captureRequest)({ framework: 'test', method: 'GET', url, headers: { 'user-agent': 'curl/8.4', host: 'a' }, ip: '::ffff:10.1.2.3', ...extra });
+describe('parseCustomRules', () => {
+    it('keeps valid, enabled rules for this app, in order', () => {
+        const rules = (0, custom_rules_1.parseCustomRules)([rule(), rule({ id: 'r2', apps: ['orders-api', 'billing'] }), rule({ id: 'r3', apps: ['billing'] }), rule({ id: 'r4', enabled: false })], 'orders-api');
+        expect(rules.map((r) => r.id)).toEqual(['r1', 'r2']);
+        expect(warn).not.toHaveBeenCalled();
+    });
+    it('skips each invalid rule with one warning, and never warns twice for it', () => {
+        const raw = [
+            rule({ id: 'Bad Id' }),
+            rule({ id: 'ok-1' }),
+            rule({ id: 'ok-1' }),
+            rule({ id: 'x2', action: 'allow' }),
+            rule({ id: 'x3', enabled: 'yes' }),
+            rule({ id: 'x4', expression: 'request.method = "GET"' }),
+            rule({ id: 'x5', apps: 'orders-api' }),
+            rule({ id: 'x6', name: 7 }),
+            null,
+            'rule',
+        ];
+        expect((0, custom_rules_1.parseCustomRules)(raw, 'orders-api').map((r) => r.id)).toEqual(['ok-1']);
+        expect(warn).toHaveBeenCalledTimes(9);
+        expect(warn.mock.calls.map((c) => String(c[0])).join('\n')).toContain('expression: syntax');
+        (0, custom_rules_1.parseCustomRules)(raw, 'orders-api');
+        expect(warn).toHaveBeenCalledTimes(9);
+    });
+    it('keeps at most 64', () => {
+        const many = Array.from({ length: 70 }, (_, i) => rule({ id: `r${i}` }));
+        expect((0, custom_rules_1.parseCustomRules)(many, 'a')).toHaveLength(64);
+    });
+    it('is empty for anything but a list', () => {
+        for (const v of [null, undefined, {}, 'x'])
+            expect((0, custom_rules_1.parseCustomRules)(v, 'a')).toEqual([]);
+    });
+});
+describe('request subject', () => {
+    it('reads the request as the language sees it', () => {
+        const ctx = request('/api/orders/42?id=42&id=43&q=%252e%252e', { method: 'post', headers: { 'User-Agent': 'curl/8.4', 'x-multi': ['a', 'b'] } });
+        (0, capture_1.captureBody)(ctx, { body: { user: { role: 'admin' } }, contentType: 'application/json' });
+        const s = (0, custom_rules_1.requestSubject)(ctx, 'orders-api');
+        expect(s.request).toMatchObject({ method: 'POST', path: '/api/orders/42', route: '/api/orders/:id', ip: '::ffff:10.1.2.3', query: { id: '42', q: '%2e%2e' }, body: { 'user.role': 'admin' } });
+        expect(s.request?.headers).toMatchObject({ 'user-agent': 'curl/8.4', 'x-multi': 'a, b' });
+        expect(s.inputs?.some((i) => i.key === 'query.q' && i.value === '..')).toBe(true);
+    });
+});
+describe('request rules', () => {
+    it('report a match as a custom_rule event and let the request through in monitor', () => {
+        (0, engine_1.setRemoteConfig)(remote([rule({ action: 'alert' })]));
+        const ctx = request('/admin/users');
+        (0, capture_1.runVirtualPatches)(ctx);
+        expect(events).toHaveLength(1);
+        expect(events[0].attrs).toMatchObject({
+            'shield360.rasp.attack': 'custom_rule',
+            'shield360.rasp.rule': 'custom.r1',
+            'shield360.rasp.decision': 'monitored',
+            'shield360.rasp.sink': 'server.request',
+            'shield360.rasp.route': '/admin/users',
+            'shield360.rasp.config_version': 'v1',
+        });
+    });
+    it('block only when the rule says block and the custom_rule mode is block', () => {
+        (0, engine_1.setRemoteConfig)(remote([rule({ action: 'block' })]));
+        expect(() => (0, capture_1.runVirtualPatches)(request('/admin'))).not.toThrow();
+        expect(events[0].attrs['shield360.rasp.decision']).toBe('monitored');
+        (0, engine_1.setRemoteConfig)(remote([rule({ action: 'monitor' })], { custom_rule: 'block' }));
+        expect(() => (0, capture_1.runVirtualPatches)(request('/admin'))).not.toThrow();
+        (0, engine_1.setRemoteConfig)(remote([rule({ action: 'block' })], { custom_rule: 'block' }));
+        expect(() => (0, capture_1.runVirtualPatches)(request('/admin'))).toThrow(types_1.RaspBlockedError);
+        try {
+            (0, capture_1.runVirtualPatches)(request('/admin'));
+        }
+        catch (e) {
+            expect(e).toMatchObject({ attack: 'custom_rule', rule: 'custom.r1' });
+        }
+        (0, engine_1.setRemoteConfig)(remote([rule({ action: 'block' })], { custom_rule: 'off' }));
+        events = [];
+        (0, capture_1.runVirtualPatches)(request('/admin'));
+        expect(events).toEqual([]);
+    });
+    it('match each rule once per request; input rules run again when the body arrives', () => {
+        (0, engine_1.setRemoteConfig)(remote([
+            rule({ id: 'path', expression: 'request.path == "/upload"' }),
+            rule({ id: 'traversal', expression: 'input.value.contains("../")' }),
+            rule({ id: 'role', expression: 'request.body["role"] == "admin"' }),
+            rule({ id: 'ip', expression: 'request.ip.inCidr("10.0.0.0/8") && request.headers["user-agent"].startsWith("curl/")' }),
+        ]));
+        const ctx = request('/upload', { method: 'POST' });
+        (0, capture_1.runVirtualPatches)(ctx);
+        expect(events.map((e) => e.attrs['shield360.rasp.rule'])).toEqual(['custom.path', 'custom.ip']);
+        (0, capture_1.captureBody)(ctx, { body: { role: 'admin', file: '../../etc/passwd' }, contentType: 'application/json' });
+        (0, capture_1.runVirtualPatches)(ctx);
+        expect(events.map((e) => e.attrs['shield360.rasp.rule'])).toEqual(['custom.path', 'custom.ip', 'custom.traversal', 'custom.role']);
+        expect(events[2].attrs['shield360.rasp.input_key']).toBe('body.file');
+    });
+    it('stop at the first rule that blocks', () => {
+        (0, engine_1.setRemoteConfig)(remote([rule({ id: 'a', action: 'block' }), rule({ id: 'b' })], { custom_rule: 'block' }));
+        expect(() => (0, capture_1.runVirtualPatches)(request('/admin'))).toThrow(types_1.RaspBlockedError);
+        expect(events.map((e) => e.attrs['shield360.rasp.rule'])).toEqual(['custom.a']);
+    });
+    it('fail open when the work budget runs out', () => {
+        (0, engine_1.setRemoteConfig)(remote([rule({ expression: 'input.value.matches("a{100}x")', action: 'block' })], { custom_rule: 'block' }));
+        const ctx = request(`/x?${Array.from({ length: 200 }, (_, i) => `k${i}=${'a'.repeat(4096)}`).join('&')}`);
+        expect(() => (0, capture_1.runVirtualPatches)(ctx)).not.toThrow();
+        expect(events).toEqual([]);
+    });
+    it('do nothing while RASP is off', () => {
+        (0, engine_1.setRemoteConfig)(remote([rule({ action: 'block' })], { custom_rule: 'block' }));
+        (0, engine_1.configureEngine)({ enabled: false, applicationName: 'orders-api', env: {} });
+        expect(() => (0, capture_1.runVirtualPatches)(request('/admin'))).not.toThrow();
+        expect(events).toEqual([]);
+    });
+    it('block through the middleware with the contract 403', async () => {
+        (0, engine_1.setRemoteConfig)(remote([rule({ expression: 'request.headers["x-debug"] == "1"', action: 'block' })], { custom_rule: 'block' }));
+        let body = '';
+        let status = 0;
+        const res = { statusCode: 0, headersSent: false, writableEnded: false, setHeader: () => undefined, end: (b) => ((body = b), (status = res.statusCode)) };
+        const handler = jest.fn();
+        (0, middleware_1.raspHttp)(handler)({ method: 'GET', url: '/a', headers: { 'x-debug': '1' }, socket: { remoteAddress: '127.0.0.1' } }, res);
+        expect(handler).not.toHaveBeenCalled();
+        expect(status).toBe(403);
+        expect(JSON.parse(body)).toMatchObject({ attack: 'custom_rule', rule: 'custom.r1' });
+    });
+});
+describe('mode off', () => {
+    it('skips custom rules: nothing is evaluated, no budget is spent', () => {
+        for (const local of [false, true]) {
+            (0, engine_1.configureEngine)({ enabled: true, applicationName: 'orders-api', env: {}, ...(local ? { attacks: { custom_rule: 'off' } } : {}) });
+            (0, engine_1.setEventSink)({ add: (e) => events.push(e) });
+            events = [];
+            (0, engine_1.setRemoteConfig)(remote([
+                rule({ id: 'req', expression: 'input.value.matches("a+b")', action: 'block' }),
+                rule({ id: 'fnd', expression: 'attack.type != null && input.value.matches("a+b")', action: 'block' }),
+            ], { custom_rule: local ? 'block' : 'off' }));
+            const ctx = request(`/x?q=${'a'.repeat(4000)}`);
+            (0, capture_1.runVirtualPatches)(ctx);
+            context_1.storage.run(ctx, () => (0, engine_1.handleFinding)({ attack: 'sql_injection', rule: 'sqli.userinput' }, 'pg.query'));
+            expect([local, ctx.rules]).toEqual([local, undefined]);
+            expect(events.filter((e) => e.attrs['shield360.rasp.attack'] === 'custom_rule')).toEqual([]);
+        }
+    });
+});
+describe('finding rules', () => {
+    const sqli = { attack: 'sql_injection', rule: 'sqli.userinput', input: { value: '1 OR 1=1', key: 'query.q', source: 'request' } };
+    it('see the built-in finding, its sink and the request', () => {
+        (0, engine_1.setRemoteConfig)(remote([rule({ id: 'admin-sqli', expression: 'attack.type == "sql_injection" && sink.name == "pg.query" && request.path.startsWith("/admin")', action: 'alert' })]));
+        const ctx = request('/admin/search?q=1%20OR%201%3D1');
+        context_1.storage.run(ctx, () => (0, engine_1.handleFinding)(sqli, 'pg.query'));
+        expect(events.map((e) => [e.attrs['shield360.rasp.attack'], e.attrs['shield360.rasp.rule'], e.attrs['shield360.rasp.sink']])).toEqual([
+            ['sql_injection', 'sqli.userinput', 'pg.query'],
+            ['custom_rule', 'custom.admin-sqli', 'pg.query'],
+        ]);
+        expect(events[1].attrs['shield360.rasp.input_key']).toBe('query.q');
+    });
+    it('never run in the request phase, and request rules never run on findings', () => {
+        (0, engine_1.setRemoteConfig)(remote([rule({ id: 'f', expression: 'attack.type != null' }), rule({ id: 'q', expression: 'request.path == "/a"' })]));
+        const ctx = request('/a');
+        (0, capture_1.runVirtualPatches)(ctx);
+        expect(events.map((e) => e.attrs['shield360.rasp.rule'])).toEqual(['custom.q']);
+        events = [];
+        context_1.storage.run(ctx, () => (0, engine_1.handleFinding)(sqli, 'pg.query'));
+        expect(events.map((e) => e.attrs['shield360.rasp.rule'])).toEqual(['sqli.userinput', 'custom.f']);
+    });
+    it('can block a finding the attack type only monitors; the built-in block wins when both block', () => {
+        (0, engine_1.setRemoteConfig)(remote([rule({ id: 'stop', expression: 'attack.type == "sql_injection"', action: 'block' })], { custom_rule: 'block' }));
+        expect(() => context_1.storage.run(request('/a'), () => (0, engine_1.handleFinding)(sqli, 'pg.query'))).toThrow(expect.objectContaining({ attack: 'custom_rule' }));
+        (0, engine_1.setRemoteConfig)(remote([rule({ id: 'stop', expression: 'attack.type == "sql_injection"', action: 'block' })], { custom_rule: 'block', sql_injection: 'block' }));
+        expect(() => context_1.storage.run(request('/a'), () => (0, engine_1.handleFinding)(sqli, 'pg.query'))).toThrow(expect.objectContaining({ attack: 'sql_injection' }));
+    });
+    it('skip attack types that are off', () => {
+        (0, engine_1.setRemoteConfig)(remote([rule({ expression: 'attack.type == "sql_injection"' })], { sql_injection: 'off' }));
+        expect((0, engine_1.modeFor)('sql_injection')).toBe('off');
+        context_1.storage.run(request('/a'), () => (0, engine_1.handleFinding)(sqli, 'pg.query'));
+        expect(events).toEqual([]);
+    });
+    it('run outside a request with the request fields null', () => {
+        (0, engine_1.setRemoteConfig)(remote([rule({ expression: 'request.path == null && app.name == "orders-api" && attack.type == "sql_injection"' })]));
+        (0, engine_1.handleFinding)(sqli, 'pg.query');
+        expect(events.map((e) => e.attrs['shield360.rasp.rule'])).toEqual(['sqli.userinput', 'custom.r1']);
+    });
+});
+describe('signed config round trip', () => {
+    const { publicKey, privateKey } = (0, crypto_1.generateKeyPairSync)('ed25519');
+    const jwk = { ...publicKey.export({ format: 'jwk' }), kid: 'k1' };
+    const b64 = (o) => Buffer.from(JSON.stringify(o)).toString('base64url');
+    const jws = (c) => {
+        const head = b64({ alg: 'EdDSA', typ: config_client_1.JWS_TYPE, kid: 'k1' });
+        const body = b64(c);
+        return `${head}.${body}.${(0, crypto_1.sign)(null, Buffer.from(`${head}.${body}`), privateKey).toString('base64url')}`;
+    };
+    afterEach(async () => {
+        await (0, index_1.shutdownRasp)();
+    });
+    it('applies the signed rules; an invalid rule is skipped with one warning and the rest of the config holds', async () => {
+        const claims = {
+            v: 1,
+            app: 'orders-api',
+            iat: Math.floor(Date.now() / 1000),
+            exp: Math.floor(Date.now() / 1000) + 600,
+            version: 'cfg-1',
+            mode: 'monitor',
+            attacks: { ssrf: 'block', custom_rule: 'block' },
+            rules: null,
+            customRules: [rule({ action: 'block' }), rule({ id: 'broken', expression: 'request.path.matches("(a+)+")' })],
+        };
+        const fetchImpl = (async (url) => String(url).includes('/api/rasp/config') ? new Response(JSON.stringify({ config: jws(claims) }), { status: 200 }) : new Response('{}'));
+        const dir = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'rasp-rules-'));
+        try {
+            (0, index_1.initRasp)({ enabled: true, configPublicKey: jwk, components: false, cacheDir: dir }, { applicationName: 'orders-api', url: 'https://s.example.com', apiKey: 'k', env: {}, fetchImpl });
+            for (let i = 0; i < 50 && !(0, engine_1.customRules)().length; i++)
+                await new Promise((r) => setTimeout(r, 10));
+            expect((0, engine_1.customRules)().map((r) => r.id)).toEqual(['r1']);
+            expect((0, engine_1.modeFor)('ssrf')).toBe('block');
+            expect(warn.mock.calls.filter((c) => String(c[0]).includes('custom rule')).map((c) => String(c[0]))).toEqual([expect.stringContaining('"broken"')]);
+            expect(() => (0, capture_1.runVirtualPatches)(request('/admin'))).toThrow(types_1.RaspBlockedError);
+        }
+        finally {
+            (0, fs_1.rmSync)(dir, { recursive: true, force: true });
+        }
+    });
+    it('a tampered rule fails the signature and the rules are not applied', async () => {
+        const claims = { v: 1, app: 'orders-api', exp: Math.floor(Date.now() / 1000) + 600, version: 'cfg-2', customRules: [rule()] };
+        const token = jws(claims).split('.');
+        token[1] = b64({ ...claims, customRules: [rule({ expression: 'true', action: 'block' })] });
+        const fetchImpl = (async (url) => String(url).includes('/api/rasp/config') ? new Response(JSON.stringify({ config: token.join('.') }), { status: 200 }) : new Response('{}'));
+        const dir = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'rasp-rules-'));
+        try {
+            (0, index_1.initRasp)({ enabled: true, configPublicKey: jwk, components: false, cacheDir: dir }, { applicationName: 'orders-api', url: 'https://s.example.com', apiKey: 'k', env: {}, fetchImpl });
+            await new Promise((r) => setTimeout(r, 100));
+            expect((0, engine_1.customRules)()).toEqual([]);
+            expect(warn.mock.calls.map((c) => String(c[0])).join('\n')).toContain('signature');
+        }
+        finally {
+            (0, fs_1.rmSync)(dir, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=custom-rules.test.js.map

package/dist/rasp/__tests__/custom-rules.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-rules.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/custom-rules.test.ts"],"names":[],"mappings":";;AAAA;;;;;;GAMG;AACH,mCAAmD;AACnD,2BAAyC;AACzC,2BAA4B;AAC5B,+BAA4B;AAC5B,wCAA4E;AAC5E,oDAA6D;AAC7D,wCAAqC;AACrC,kDAA4F;AAC5F,sCAAmI;AACnI,oCAAkD;AAClD,8CAAyC;AACzC,oCAA4C;AAI5C,MAAM,IAAI,GAAG,CAAC,OAAgC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,mCAAmC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AAElL,SAAS,MAAM,CAAC,WAA6B,EAAE,UAAmC,EAAE;IAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;AAC5J,CAAC;AAED,IAAI,MAAM,GAAY,EAAE,CAAC;AACzB,IAAI,IAAsB,CAAC;AAE3B,UAAU,CAAC,GAAG,EAAE;IACd,IAAA,sCAAuB,GAAE,CAAC;IAC1B,MAAM,GAAG,EAAE,CAAC;IACZ,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACvE,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,CAAC,WAAW,EAAE,CAAC;IACnB,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;IACxB,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,QAAuD,EAAE,EAAE,EAAE,CACzF,IAAA,wBAAc,EAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AAE/I,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,KAAK,GAAG,IAAA,+BAAgB,EAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACvL,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,GAAG,GAAG;YACV,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,wBAAwB,EAAE,CAAC;YACxD,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YACtC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3B,IAAI;YACJ,MAAM;SACP,CAAC;QACF,MAAM,CAAC,IAAA,+BAAgB,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5F,IAAA,+BAAgB,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,IAAA,+BAAgB,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC;YAAE,MAAM,CAAC,IAAA,+BAAgB,EAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,GAAG,GAAG,OAAO,CAAC,yCAAyC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACjJ,IAAA,qBAAW,EAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,IAAA,6BAAc,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/L,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;QACpC,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC;YACpC,uBAAuB,EAAE,aAAa;YACtC,qBAAqB,EAAE,WAAW;YAClC,yBAAyB,EAAE,WAAW;YACtC,qBAAqB,EAAE,gBAAgB;YACvC,sBAAsB,EAAE,cAAc;YACtC,+BAA+B,EAAE,IAAI;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,2BAAiB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAErE,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,2BAAiB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAEjE,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,2BAAiB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,IAAA,2BAAiB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,EAAE,CAAC;QACZ,IAAA,2BAAiB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,IAAA,wBAAe,EACb,MAAM,CAAC;YACL,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,2BAA2B,EAAE,CAAC;YAC7D,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,6BAA6B,EAAE,CAAC;YACpE,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,iCAAiC,EAAE,CAAC;YACnE,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,sFAAsF,EAAE,CAAC;SACvH,CAAC,CACH,CAAC;QACF,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QAChG,IAAA,qBAAW,EAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzG,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC,CAAC;QACnI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3G,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,2BAAiB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,gCAAgC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7H,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1G,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,2BAAiB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,mCAAmC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAChI,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,GAAG,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,EAAS,CAAC;QACxK,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1B,IAAA,qBAAQ,EAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAS,EAAE,GAAG,CAAC,CAAC;QACjI,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAClC,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAClI,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7C,MAAM,GAAG,EAAE,CAAC;YACZ,IAAA,wBAAe,EACb,MAAM,CACJ;gBACE,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,4BAA4B,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC9E,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,mDAAmD,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;aACtG,EACD,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CACzC,CACF,CAAC;YACF,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChD,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;YACvB,iBAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,sBAAa,EAAC,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;YACvG,MAAM,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,eAAwB,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAkB,EAAE,EAAE,CAAC;IAEpJ,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,gGAAgG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrL,MAAM,GAAG,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACtD,iBAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,sBAAa,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACpI,CAAC,eAAe,EAAE,gBAAgB,EAAE,UAAU,CAAC;YAC/C,CAAC,aAAa,EAAE,mBAAmB,EAAE,UAAU,CAAC;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvI,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAA,2BAAiB,EAAC,GAAG,CAAC,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAChF,MAAM,GAAG,EAAE,CAAC;QACZ,iBAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,sBAAa,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,gCAAgC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACzI,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAA,sBAAa,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QAC5I,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,gCAAgC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACjK,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAA,sBAAa,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;IAChJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,gCAAgC,EAAE,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5G,MAAM,CAAC,IAAA,gBAAO,EAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,iBAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAA,sBAAa,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,IAAA,wBAAe,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,oFAAoF,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtI,IAAA,sBAAa,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAA,4BAAmB,EAAC,SAAS,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,EAAE,GAAI,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA4B,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC9F,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjF,MAAM,GAAG,GAAG,CAAC,CAAa,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,wBAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,GAAG,IAAI,IAAI,IAAI,IAAI,IAAA,aAAI,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IAC3G,CAAC,CAAC;IAEF,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,IAAA,oBAAY,GAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,KAAK,IAAI,EAAE;QACtH,MAAM,MAAM,GAAe;YACzB,CAAC,EAAE,CAAC;YACJ,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAClC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG;YACxC,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE;YAChD,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,+BAA+B,EAAE,CAAC,CAAC;SAC9G,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE,CACvC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAA4B,CAAC;QACrK,MAAM,GAAG,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,IAAA,gBAAQ,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAU,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,EAAE,uBAAuB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7L,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,IAAA,oBAAW,GAAE,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAClG,MAAM,CAAC,IAAA,oBAAW,GAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,IAAA,gBAAO,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACpJ,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,2BAAiB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QAC/E,CAAC;gBAAS,CAAC;YACT,IAAA,WAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,MAAM,GAAe,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1I,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5F,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE,CACvC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAA4B,CAAC;QACzK,MAAM,GAAG,GAAG,IAAA,gBAAW,EAAC,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,IAAA,gBAAQ,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAU,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,EAAE,uBAAuB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7L,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,IAAA,oBAAW,GAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YACT,IAAA,WAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/db-hook.test.d.ts

@@ -0,0 +1 @@
+export {};