shield360 1.1.0 → 1.2.0

package/dist/rasp/__tests__/deception.test.js

@@ -0,0 +1,567 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Deception (sdk/rasp/README.md "Deception"): the shared conformance cases
+ * (testdata/deception.json), the suspicious-address table, the decision, and
+ * every adapter answering a decoy with its not-found without calling the
+ * handler.
+ */
+const http_1 = require("http");
+const auto_http_1 = require("../auto-http");
+const deception_1 = require("../deception");
+const engine_1 = require("../engine");
+const index_1 = require("../index");
+const middleware_1 = require("../middleware");
+const corpus_1 = require("./corpus");
+const corpus = (0, corpus_1.loadJson)('testdata/deception.json');
+const events = [];
+let now = 1000000;
+function claims(deception, over = {}) {
+    return { v: 1, app: 'orders-api', exp: 4000000000, version: 'v-dec', ...over, deception };
+}
+/** RASP on with a signed config carrying `deception`, a fresh table on a fake clock. */
+function setup(deception, opts = {}) {
+    (0, engine_1.configureEngine)({ enabled: true, applicationName: 'orders-api', attacks: opts.local, monitorOnly: opts.monitorOnly, env: {} });
+    (0, engine_1.setEventSink)({ add: (e) => events.push(e) });
+    (0, engine_1.setRemoteConfig)((0, index_1.toRemote)(claims(deception, { attacks: opts.attacks, killSwitch: opts.killSwitch })));
+    (0, deception_1.setSuspiciousTable)(new deception_1.SuspiciousTable(opts.cap ?? 10000, () => now));
+}
+const attrs = () => events.map((e) => e.attrs);
+const BLOCK = { paths: ['/wp-admin', '/.env'], action: 'block', ttlSeconds: 60 };
+const MONITOR = { ...BLOCK, action: 'monitor' };
+const req = (url, ip = '203.0.113.7', method = 'GET') => ({ framework: 'test', method, url, ip: ip ?? undefined });
+beforeEach(() => {
+    events.length = 0;
+    now = 1000000;
+});
+afterAll(() => {
+    (0, engine_1.setEventSink)(undefined);
+    (0, engine_1.setRemoteConfig)(undefined);
+    (0, engine_1.setRuntimeDisabled)(false);
+    (0, engine_1.configureEngine)({ enabled: false, applicationName: 'default', env: {} });
+    (0, deception_1.setSuspiciousTable)(new deception_1.SuspiciousTable());
+});
+describe('conformance (testdata/deception.json)', () => {
+    it.each(corpus.config)('config: $name', (c) => {
+        // Through the claims reader the SDK uses (index.ts toRemote), key missing = absent.
+        const cl = claims(undefined);
+        if ('deception' in c)
+            cl.deception = c.deception;
+        else
+            delete cl.deception;
+        expect((0, index_1.toRemote)(cl).deception).toEqual(c.expect);
+    });
+    const decoysOf = (c) => (0, deception_1.parseDeception)({ paths: c.decoys ?? corpus.decoys }).paths;
+    it.each(corpus.match)('match: $target', (c) => {
+        expect((0, deception_1.matchDecoy)(c.target, decoysOf(c))).toBe(c.expect);
+    });
+    it('every match case through the middleware path (signed config -> checkDeception)', () => {
+        for (const c of corpus.match) {
+            setup({ paths: c.decoys ?? corpus.decoys });
+            events.length = 0;
+            const out = (0, deception_1.checkDeception)(req(c.target, null));
+            expect([c.target, Boolean(out.notFound)]).toEqual([c.target, c.expect !== null]);
+            if (c.expect !== null)
+                expect(attrs()[0]['shield360.rasp.route']).toBe(c.expect.replace(/[^\x21-\x7e]/g, '_'));
+        }
+    });
+    it('a raw UTF-8 target as Node reads it (latin1) matches a non-ASCII decoy', () => {
+        const raw = Buffer.from('/café/menu', 'utf8').toString('latin1');
+        expect((0, deception_1.matchDecoy)(raw, ['/café'])).toBe('/café');
+    });
+});
+describe('suspicious-address table', () => {
+    it('holds at most its cap, evicts the mark closest to expiring, and a new mark refreshes the order', () => {
+        const t = new deception_1.SuspiciousTable(3, () => now);
+        for (const ip of ['a', 'b', 'c'])
+            t.mark(ip, 60);
+        t.mark('a', 60); // a is now the newest
+        t.mark('d', 60);
+        t.mark('e', 60);
+        expect(t.size).toBe(3);
+        expect(t.keys()).toEqual(['a', 'd', 'e']);
+    });
+    it('drops expired marks from the front before evicting a live one', () => {
+        const t = new deception_1.SuspiciousTable(3, () => now);
+        t.mark('old', 1);
+        t.mark('b', 600);
+        t.mark('c', 600);
+        now += 2000;
+        t.mark('d', 600);
+        expect(t.keys()).toEqual(['b', 'c', 'd']);
+    });
+    it('keeps marks in expiry order: after a TTL change an insert at the cap drops the expired mark, not a live one', () => {
+        const t = new deception_1.SuspiciousTable(3, () => now);
+        t.mark('a', 3600);
+        t.mark('b', 3600);
+        t.mark('c', 1);
+        now += 2000;
+        t.mark('d', 3600);
+        expect(t.size).toBe(3);
+        expect(['a', 'b', 'c', 'd'].map((ip) => t.isMarked(ip))).toEqual([true, true, false, true]);
+    });
+    it('at the cap with nothing expired, evicts the mark closest to expiring', () => {
+        const t = new deception_1.SuspiciousTable(2, () => now);
+        t.mark('a', 3600);
+        t.mark('b', 10);
+        t.mark('c', 3600);
+        expect(['a', 'b', 'c'].map((ip) => t.isMarked(ip))).toEqual([true, false, true]);
+    });
+    it('expires marks on lookup; a lookup never extends a mark', () => {
+        const t = new deception_1.SuspiciousTable(10, () => now);
+        t.mark('a', 10);
+        now += 9000;
+        expect(t.isMarked('a')).toBe(true);
+        now += 1000;
+        expect(t.isMarked('a')).toBe(false);
+        expect(t.size).toBe(0);
+        expect(t.isMarked('missing')).toBe(false);
+    });
+});
+describe('decision', () => {
+    it('a hit answers not-found, marks the address and reports deception.hit; a later request is deception.suspicious', () => {
+        setup(MONITOR);
+        expect((0, deception_1.checkDeception)(req('/wp-admin/setup.php?x=1', '203.0.113.7', 'POST'))).toEqual({ notFound: true });
+        expect((0, deception_1.suspiciousTable)().isMarked('203.0.113.7')).toBe(true);
+        expect(attrs()[0]).toMatchObject({
+            'shield360.rasp.attack': 'deception',
+            'shield360.rasp.rule': 'deception.hit',
+            'shield360.rasp.sink': 'http.deception',
+            'shield360.rasp.decision': 'monitored',
+            'shield360.rasp.mode': 'monitor',
+            'shield360.rasp.route': '/wp-admin',
+            'shield360.rasp.method': 'POST',
+            'shield360.rasp.framework': 'test',
+            'shield360.rasp.config_version': 'v-dec',
+        });
+        expect(attrs()[0]['shield360.rasp.input_key']).toBeUndefined();
+        expect(attrs()[0]['shield360.rasp.snippet']).toBeUndefined();
+        expect((0, deception_1.checkDeception)(req('/orders/12345?token=abc'))).toEqual({});
+        expect(attrs()[1]).toMatchObject({ 'shield360.rasp.rule': 'deception.suspicious', 'shield360.rasp.route': '/orders/:id', 'shield360.rasp.decision': 'monitored' });
+        // Another address is not suspicious.
+        expect((0, deception_1.checkDeception)(req('/orders', '198.51.100.1'))).toEqual({});
+        expect(events).toHaveLength(2);
+    });
+    it('block: a suspicious request gets the block error with attack deception', () => {
+        setup(BLOCK);
+        (0, deception_1.checkDeception)(req('/.env'));
+        expect(attrs()[0]).toMatchObject({ 'shield360.rasp.decision': 'blocked', 'shield360.rasp.mode': 'block' });
+        const out = (0, deception_1.checkDeception)(req('/'));
+        expect(out.blocked).toMatchObject({ attack: 'deception', rule: 'deception.suspicious', eventId: attrs()[1]['shield360.rasp.event_id'] });
+    });
+    it('the mark expires after ttlSeconds', () => {
+        setup(BLOCK);
+        (0, deception_1.checkDeception)(req('/wp-admin'));
+        now += 59000;
+        expect((0, deception_1.checkDeception)(req('/')).blocked).toBeDefined();
+        now += 1000;
+        expect((0, deception_1.checkDeception)(req('/'))).toEqual({});
+    });
+    it('hitting a decoy again restarts the time; a config change keeps marks', () => {
+        setup(BLOCK);
+        (0, deception_1.checkDeception)(req('/wp-admin'));
+        now += 50000;
+        (0, deception_1.checkDeception)(req('/wp-admin'));
+        (0, engine_1.setRemoteConfig)((0, index_1.toRemote)(claims({ ...BLOCK, ttlSeconds: 5 })));
+        now += 50000;
+        expect((0, deception_1.checkDeception)(req('/')).blocked).toBeDefined();
+    });
+    it('attacks.deception off (signed or local) turns deception off entirely', () => {
+        setup(BLOCK, { attacks: { deception: 'off' } });
+        expect((0, deception_1.checkDeception)(req('/wp-admin'))).toEqual({});
+        setup(BLOCK, { local: { deception: 'off' }, attacks: { deception: 'block' } });
+        expect((0, deception_1.checkDeception)(req('/wp-admin'))).toEqual({});
+        expect(events).toHaveLength(0);
+        expect((0, deception_1.suspiciousTable)().size).toBe(0);
+    });
+    it('attacks.deception monitor caps a block action; block or unset leaves the action to decide', () => {
+        setup(BLOCK, { attacks: { deception: 'monitor' } });
+        (0, deception_1.checkDeception)(req('/wp-admin'));
+        expect((0, deception_1.checkDeception)(req('/'))).toEqual({});
+        expect(attrs().map((a) => a['shield360.rasp.decision'])).toEqual(['monitored', 'monitored']);
+        setup(MONITOR, { attacks: { deception: 'block' } });
+        (0, deception_1.checkDeception)(req('/wp-admin'));
+        expect((0, deception_1.checkDeception)(req('/'))).toEqual({});
+        // The default mode never applies to deception: a signed mode of monitor does not cap it.
+        events.length = 0;
+        setup(BLOCK);
+        (0, engine_1.setRemoteConfig)((0, index_1.toRemote)(claims(BLOCK, { mode: 'monitor' })));
+        (0, deception_1.checkDeception)(req('/wp-admin'));
+        expect((0, deception_1.checkDeception)(req('/')).blocked).toBeDefined();
+    });
+    it('monitor only (no pinned key) lowers block to monitor', () => {
+        setup(BLOCK, { monitorOnly: true });
+        expect((0, deception_1.checkDeception)(req('/wp-admin'))).toEqual({ notFound: true });
+        expect((0, deception_1.checkDeception)(req('/'))).toEqual({});
+        expect(attrs().map((a) => a['shield360.rasp.decision'])).toEqual(['monitored', 'monitored']);
+    });
+    it('kill switch, runtime disable or no signed config: requests pass untouched', () => {
+        setup(BLOCK, { killSwitch: true });
+        expect((0, deception_1.checkDeception)(req('/wp-admin'))).toEqual({});
+        setup(BLOCK);
+        (0, engine_1.setRuntimeDisabled)(true);
+        expect((0, deception_1.checkDeception)(req('/wp-admin'))).toEqual({});
+        (0, engine_1.setRuntimeDisabled)(false);
+        (0, engine_1.setRemoteConfig)(undefined);
+        expect((0, deception_1.checkDeception)(req('/wp-admin'))).toEqual({});
+        expect(events).toHaveLength(0);
+    });
+    it('no client address: the decoy still gets not-found, nothing is marked', () => {
+        setup(BLOCK);
+        expect((0, deception_1.checkDeception)(req('/wp-admin', null))).toEqual({ notFound: true });
+        expect((0, deception_1.suspiciousTable)().size).toBe(0);
+    });
+    it('a flood of decoy hits from new addresses never grows the table past its cap', () => {
+        setup(MONITOR, { cap: 5 });
+        for (let i = 0; i < 12; i++)
+            (0, deception_1.checkDeception)(req('/wp-admin', `10.0.0.${i}`));
+        expect((0, deception_1.suspiciousTable)().size).toBe(5);
+        expect((0, deception_1.suspiciousTable)().keys()).toEqual(['10.0.0.7', '10.0.0.8', '10.0.0.9', '10.0.0.10', '10.0.0.11']);
+    });
+    it('fails open: a throwing clock lets the request through as if deception were off', () => {
+        setup(BLOCK);
+        (0, deception_1.setSuspiciousTable)(new deception_1.SuspiciousTable(10, () => {
+            throw new Error('clock');
+        }));
+        expect((0, deception_1.checkDeception)(req('/wp-admin'))).toEqual({});
+        // A failing event sink never changes the answer.
+        setup(BLOCK);
+        (0, engine_1.setEventSink)({
+            add: () => {
+                throw new Error('sink');
+            },
+        });
+        expect((0, deception_1.checkDeception)(req('/wp-admin'))).toEqual({ notFound: true });
+    });
+});
+// ---- adapters ----------------------------------------------------------------
+async function serve(handler) {
+    const server = (0, http_1.createServer)(handler);
+    await new Promise((r) => server.listen(0, '127.0.0.1', () => r()));
+    const { port } = server.address();
+    return {
+        url: `http://127.0.0.1:${port}`,
+        close: () => new Promise((r) => {
+            server.closeAllConnections();
+            server.close(() => r());
+        }),
+    };
+}
+function get(url, method = 'GET', headers = {}) {
+    return new Promise((ok, fail) => {
+        (0, http_1.request)(url, { method, headers, timeout: 3000 }, (res) => {
+            let body = '';
+            res.on('data', (c) => (body += c));
+            res.on('end', () => ok({ status: res.statusCode || 0, headers: res.headers, body }));
+        })
+            .on('error', fail)
+            .end();
+    });
+}
+/**
+ * What Express 4 (finalhandler 1.3) and 5 (finalhandler 2.1) send for a path no
+ * route matches, captured from a real app: `app.get('/x', ...)`, then
+ * `GET /wp-admin/a%20b?x=1`.
+ */
+const EXPRESS_404_BODY = '<!DOCTYPE html>\n<html lang="en">\n<head>\n<meta charset="utf-8">\n<title>Error</title>\n</head>\n<body>\n<pre>Cannot GET /wp-admin/a%20b</pre>\n</body>\n</html>\n';
+describe('Express', () => {
+    // A minimal Express: query, app.use() middleware, one route at /orders, finalhandler-style 404 for anything else.
+    function app(called, mw = (0, middleware_1.raspExpress)(), mount = '') {
+        return (req, res) => {
+            req.originalUrl = req.url;
+            // A router mounted at `mount` sees req.url without the mount.
+            if (mount && req.url?.startsWith(mount))
+                req.url = req.url.slice(mount.length) || '/';
+            mw(req, res, () => {
+                if ((req.url || '').split('?')[0] === '/orders') {
+                    called.n++;
+                    res.end('orders');
+                }
+                else
+                    (0, middleware_1.sendExpressNotFound)(req, res);
+            });
+        };
+    }
+    it("a decoy never reaches the handler and gets Express's own 404, the same as an unknown path", async () => {
+        setup(MONITOR);
+        const called = { n: 0 };
+        const s = await serve(app(called));
+        const hit = await get(`${s.url}/wp-admin/a%20b?x=1`);
+        (0, engine_1.setRemoteConfig)(undefined);
+        const unknown = await get(`${s.url}/wp-admin/a%20b?x=1`);
+        const head = await get(`${s.url}/orders`, 'HEAD');
+        await s.close();
+        expect(called.n).toBe(1); // only the HEAD /orders request
+        expect(head.status).toBe(200);
+        expect(hit.status).toBe(404);
+        expect(hit.body).toBe(EXPRESS_404_BODY);
+        expect(unknown.body).toBe(EXPRESS_404_BODY);
+        for (const h of ['content-type', 'content-length', 'content-security-policy', 'x-content-type-options'])
+            expect(hit.headers[h]).toBe(unknown.headers[h]);
+        expect(attrs()[0]).toMatchObject({ 'shield360.rasp.framework': 'express', 'shield360.rasp.rule': 'deception.hit' });
+    });
+    it('matches the full target under a router mount (originalUrl), and blocks a suspicious client with the 403', async () => {
+        setup(BLOCK);
+        const called = { n: 0 };
+        const s = await serve(app(called, (0, middleware_1.raspExpress)(), '/wp-admin'));
+        const hit = await get(`${s.url}/wp-admin/orders`);
+        const later = await get(`${s.url}/orders`);
+        await s.close();
+        expect(hit.status).toBe(404);
+        expect(later.status).toBe(403);
+        expect(JSON.parse(later.body)).toMatchObject({ attack: 'deception', rule: 'deception.suspicious' });
+        expect(called.n).toBe(0);
+    });
+    it('monitor: a suspicious client reaches the handler and is reported', async () => {
+        setup(MONITOR);
+        const called = { n: 0 };
+        const s = await serve(app(called));
+        await get(`${s.url}/.env`);
+        const later = await get(`${s.url}/orders`);
+        await s.close();
+        expect(later.body).toBe('orders');
+        expect(called.n).toBe(1);
+        expect(attrs()[1]).toMatchObject({ 'shield360.rasp.rule': 'deception.suspicious', 'shield360.rasp.decision': 'monitored' });
+    });
+    it('a notFound option answers decoys; if it throws, the default 404 is sent', async () => {
+        setup(MONITOR);
+        const called = { n: 0 };
+        const own = await serve(app(called, (0, middleware_1.raspExpress)({ notFound: (_q, res) => ((res.statusCode = 404), res.end('nothing here')) })));
+        const a = await get(`${own.url}/wp-admin`);
+        await own.close();
+        const broken = await serve(app(called, (0, middleware_1.raspExpress)({
+            notFound: () => {
+                throw new Error('page');
+            },
+        })));
+        const b = await get(`${broken.url}/wp-admin`);
+        await broken.close();
+        expect([a.status, a.body]).toEqual([404, 'nothing here']);
+        expect(b.status).toBe(404);
+        expect(b.body).toContain('Cannot GET /wp-admin');
+        expect(called.n).toBe(0);
+    });
+    it('fails open: a throwing table lets the request reach the handler', async () => {
+        setup(BLOCK);
+        (0, deception_1.setSuspiciousTable)({
+            mark: () => {
+                throw new Error('table');
+            },
+            isMarked: () => {
+                throw new Error('table');
+            },
+        });
+        const called = { n: 0 };
+        const s = await serve(app(called));
+        const r = await get(`${s.url}/orders`);
+        await s.close();
+        expect(r.body).toBe('orders');
+    });
+});
+describe('Fastify', () => {
+    function hooks() {
+        const h = {};
+        (0, middleware_1.raspFastify)({ addHook: (name, fn) => (h[name] = fn) }, {}, () => undefined);
+        return h;
+    }
+    const reply = () => {
+        const r = { status: 0, headers: {}, sent: undefined, notFound: 0 };
+        r.code = (n) => ((r.status = n), r);
+        r.header = (k, v) => ((r.headers[k] = v), r);
+        r.send = (b) => (r.sent = b);
+        r.callNotFound = () => r.notFound++;
+        return r;
+    };
+    it('a decoy on a real route calls reply.callNotFound(); the route handler never runs', () => {
+        setup(MONITOR);
+        const r = reply();
+        const next = jest.fn();
+        hooks().onRequest({ method: 'GET', url: '/wp-admin/login', headers: {}, ip: '203.0.113.7' }, r, next);
+        expect(r.notFound).toBe(1);
+        expect(next).not.toHaveBeenCalled();
+        expect(attrs()[0]).toMatchObject({ 'shield360.rasp.framework': 'fastify', 'shield360.rasp.route': '/wp-admin' });
+        expect((0, deception_1.suspiciousTable)().isMarked('203.0.113.7')).toBe(true);
+    });
+    it("a decoy no route matches goes on to Fastify's own not-found handler", () => {
+        setup(MONITOR);
+        const r = reply();
+        const next = jest.fn();
+        hooks().onRequest({ method: 'GET', url: '/.env', headers: {}, ip: '203.0.113.7', is404: true }, r, next);
+        expect(next).toHaveBeenCalledTimes(1);
+        expect(r.notFound).toBe(0);
+        expect(r.status).toBe(0);
+    });
+    it("without callNotFound it sends Fastify's default 404 body; a suspicious client in block gets 403", () => {
+        setup(BLOCK);
+        const r = reply();
+        delete r.callNotFound;
+        hooks().onRequest({ method: 'GET', url: '/wp-admin', headers: {}, ip: '203.0.113.7' }, r, jest.fn());
+        expect([r.status, r.sent]).toEqual([404, { message: 'Route GET:/wp-admin not found', error: 'Not Found', statusCode: 404 }]);
+        const r2 = reply();
+        const next = jest.fn();
+        hooks().onRequest({ method: 'GET', url: '/orders', headers: {}, ip: '203.0.113.7' }, r2, next);
+        expect(next).not.toHaveBeenCalled();
+        expect(r2.status).toBe(403);
+        expect(JSON.parse(r2.sent).rule).toBe('deception.suspicious');
+    });
+});
+describe('Koa', () => {
+    it('a decoy gets status 404 with no body (Koa answers "Not Found"), and downstream never runs', async () => {
+        setup(BLOCK);
+        const next = jest.fn(async () => undefined);
+        const k = { method: 'GET', url: '/wp-admin', originalUrl: '/wp-admin', headers: {}, request: {}, ip: '203.0.113.7', set: jest.fn() };
+        await (0, middleware_1.raspKoa)()(k, next);
+        expect(next).not.toHaveBeenCalled();
+        expect(k.status).toBe(404);
+        expect(k.body).toBeUndefined();
+        const later = { method: 'GET', url: '/', headers: {}, request: {}, ip: '203.0.113.7', set: jest.fn() };
+        await (0, middleware_1.raspKoa)()(later, next);
+        expect(later.status).toBe(403);
+        expect(later.body.rule).toBe('deception.suspicious');
+        expect(next).not.toHaveBeenCalled();
+    });
+});
+describe('raw http', () => {
+    it('a decoy gets a plain 404 Not Found and the handler never runs; the client is marked by its socket address', async () => {
+        setup(BLOCK);
+        let called = 0;
+        const s = await serve((0, middleware_1.raspHttp)((_req, res) => (called++, res.end('ok'))));
+        const hit = await get(`${s.url}/wp-admin`);
+        const later = await get(`${s.url}/`);
+        await s.close();
+        expect([hit.status, hit.headers['content-type'], hit.body]).toEqual([404, 'text/plain; charset=utf-8', 'Not Found']);
+        expect(later.status).toBe(403);
+        expect(called).toBe(0);
+        expect((0, deception_1.suspiciousTable)().isMarked('127.0.0.1')).toBe(true);
+    });
+    it('kill switch: the decoy reaches the handler untouched', async () => {
+        setup(BLOCK, { killSwitch: true });
+        const s = await serve((0, middleware_1.raspHttp)((_req, res) => res.end('ok')));
+        const r = await get(`${s.url}/wp-admin`);
+        await s.close();
+        expect(r.body).toBe('ok');
+        expect(events).toHaveLength(0);
+    });
+});
+describe('Next.js route handlers', () => {
+    it('a decoy gets an empty 404 (what notFound() gives) and the handler never runs; nothing is marked', async () => {
+        setup(BLOCK);
+        const handler = jest.fn(async () => new Response('ran'));
+        const res = await (0, middleware_1.withRasp)(handler)(new Request('http://localhost/wp-admin/x?y=1'), {});
+        expect(res.status).toBe(404);
+        expect(await res.text()).toBe('');
+        expect(handler).not.toHaveBeenCalled();
+        expect((0, deception_1.suspiciousTable)().size).toBe(0);
+        expect(attrs()[0]).toMatchObject({ 'shield360.rasp.framework': 'nextjs', 'shield360.rasp.route': '/wp-admin' });
+    });
+});
+describe('zero-code capture', () => {
+    beforeAll(() => (0, auto_http_1.installAutoHttpCapture)());
+    afterAll(() => (0, auto_http_1.uninstallAutoHttpCapture)());
+    it('answers a decoy with a plain 404 before any listener; middleware on top does not run deception again', async () => {
+        setup(MONITOR);
+        let called = 0;
+        const mw = (0, middleware_1.raspExpress)();
+        const s = await serve((req, res) => {
+            req.originalUrl = req.url;
+            mw(req, res, () => (called++, res.end('ok')));
+        });
+        const hit = await get(`${s.url}/.env`);
+        const later = await get(`${s.url}/orders`);
+        await s.close();
+        expect([hit.status, hit.body]).toEqual([404, 'Not Found']);
+        expect(later.body).toBe('ok');
+        expect(called).toBe(1);
+        expect(attrs().map((a) => [a['shield360.rasp.rule'], a['shield360.rasp.framework']])).toEqual([
+            ['deception.hit', 'http'],
+            ['deception.suspicious', 'http'],
+        ]);
+    });
+});
+describe('zero-code capture with a framework app as the listener', () => {
+    beforeAll(() => (0, auto_http_1.installAutoHttpCapture)());
+    afterAll(() => (0, auto_http_1.uninstallAutoHttpCapture)());
+    /** An Express-shaped app with `trust proxy` (req.ip from X-Forwarded-For), one route, finalhandler's 404 otherwise. */
+    function expressApp(called) {
+        const mw = (0, middleware_1.raspExpress)();
+        const app = (req, res) => app.handle(req, res);
+        app.settings = { 'trust proxy': true };
+        app.set = () => app;
+        app.use = () => app;
+        app.handle = (req, res) => {
+            req.originalUrl = req.url;
+            const xff = req.headers['x-forwarded-for'];
+            req.ip = typeof xff === 'string' ? xff.split(',')[0].trim() : req.socket.remoteAddress;
+            mw(req, res, () => {
+                if ((req.url || '').split('?')[0] === '/orders') {
+                    called.n++;
+                    res.end('orders');
+                }
+                else
+                    (0, middleware_1.sendExpressNotFound)(req, res);
+            });
+        };
+        return app;
+    }
+    /** Koa's callback: a function named handleRequest; status 404 with no body answers "Not Found". */
+    function koaApp(called) {
+        const mw = (0, middleware_1.raspKoa)();
+        const handleRequest = (req, res) => {
+            const k = { method: req.method, url: req.url, originalUrl: req.url, headers: req.headers, request: {}, ip: req.socket.remoteAddress, status: 404, set: () => undefined };
+            void mw(k, async () => {
+                if (k.url === '/orders') {
+                    called.n++;
+                    k.status = 200;
+                    k.body = 'orders';
+                }
+            }).then(() => {
+                const body = k.body === undefined ? 'Not Found' : typeof k.body === 'string' ? k.body : JSON.stringify(k.body);
+                res.statusCode = k.status;
+                res.setHeader('Content-Type', k.body === undefined || typeof k.body === 'string' ? 'text/plain; charset=utf-8' : 'application/json');
+                res.end(body);
+            });
+        };
+        return handleRequest;
+    }
+    it('Express behind a shared proxy: a decoy marks the forwarded client, not the proxy', async () => {
+        setup(BLOCK);
+        const called = { n: 0 };
+        const s = await serve(expressApp(called));
+        const hit = await get(`${s.url}/wp-admin`, 'GET', { 'x-forwarded-for': '1.1.1.1' });
+        const other = await get(`${s.url}/orders`, 'GET', { 'x-forwarded-for': '2.2.2.2' });
+        const again = await get(`${s.url}/orders`, 'GET', { 'x-forwarded-for': '1.1.1.1' });
+        await s.close();
+        expect(hit.status).toBe(404);
+        expect(other.status).toBe(200);
+        expect(again.status).toBe(403);
+        expect(called.n).toBe(1);
+        expect((0, deception_1.suspiciousTable)().isMarked('127.0.0.1')).toBe(false);
+        expect(attrs()[0]['shield360.rasp.framework']).toBe('express');
+    });
+    it("a decoy gets the framework's ordinary 404 (Express, Koa)", async () => {
+        for (const make of [expressApp, koaApp]) {
+            setup(MONITOR);
+            const called = { n: 0 };
+            const s = await serve(make(called));
+            const hit = await get(`${s.url}/wp-admin`);
+            (0, engine_1.setRemoteConfig)(undefined);
+            const unknown = await get(`${s.url}/wp-admin`);
+            await s.close();
+            expect(called.n).toBe(0);
+            expect([hit.status, hit.headers['content-type'], hit.body]).toEqual([unknown.status, unknown.headers['content-type'], unknown.body]);
+            expect(hit.body).not.toBe('');
+        }
+    });
+    it('a plain listener still gets deception from the zero-code capture', async () => {
+        setup(BLOCK);
+        let called = 0;
+        const s = await serve((_req, res) => (called++, res.end('ok')));
+        const hit = await get(`${s.url}/wp-admin`);
+        const later = await get(`${s.url}/`);
+        await s.close();
+        expect([hit.status, hit.body]).toEqual([404, 'Not Found']);
+        expect(later.status).toBe(403);
+        expect(called).toBe(0);
+    });
+});
+//# sourceMappingURL=deception.test.js.map

package/dist/rasp/__tests__/deception.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deception.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/deception.test.ts"],"names":[],"mappings":";;AAAA;;;;;GAKG;AACH,+BAAoH;AAEpH,4CAAgF;AAChF,4CAAgI;AAChI,sCAA+F;AAC/F,oCAAoC;AACpC,8CAA2G;AAG3G,qCAAoC;AAEpC,MAAM,MAAM,GAAG,IAAA,iBAAQ,EAAC,yBAAyB,CAAC,CAAC;AAEnD,MAAM,MAAM,GAAU,EAAE,CAAC;AACzB,IAAI,GAAG,GAAG,OAAS,CAAC;AAEpB,SAAS,MAAM,CAAC,SAAkB,EAAE,OAA4B,EAAE;IAChE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,UAAa,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAgB,CAAC;AAC7G,CAAC;AAED,wFAAwF;AACxF,SAAS,KAAK,CAAC,SAAkB,EAAE,OAA4I,EAAE;IAC/K,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,KAAY,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACtI,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAA,wBAAe,EAAC,IAAA,gBAAQ,EAAC,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAc,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5G,IAAA,8BAAkB,EAAC,IAAI,2BAAe,CAAC,IAAI,CAAC,GAAG,IAAI,KAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC/C,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACjF,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAChD,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,KAAoB,aAAa,EAAE,MAAM,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,SAAS,EAAE,CAAC,CAAC;AAE1I,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,GAAG,GAAG,OAAS,CAAC;AAClB,CAAC,CAAC,CAAC;AACH,QAAQ,CAAC,GAAG,EAAE;IACZ,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;IACxB,IAAA,wBAAe,EAAC,SAAS,CAAC,CAAC;IAC3B,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAC;IAC1B,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,IAAA,8BAAkB,EAAC,IAAI,2BAAe,EAAE,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAe,CAAC,CAAC,eAAe,EAAE,CAAC,CAAM,EAAE,EAAE;QAC1D,oFAAoF;QACpF,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7B,IAAI,WAAW,IAAI,CAAC;YAAE,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;;YAC5C,OAAO,EAAE,CAAC,SAAS,CAAC;QACzB,MAAM,CAAC,IAAA,gBAAQ,EAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CAAC,CAAM,EAAE,EAAE,CAAC,IAAA,0BAAc,EAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAE,CAAC,KAAK,CAAC;IAEzF,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAc,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAM,EAAE,EAAE;QAC1D,MAAM,CAAC,IAAA,sBAAU,EAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7B,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5C,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YAClB,MAAM,GAAG,GAAG,IAAA,0BAAc,EAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YAChD,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC;QACjH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjE,MAAM,CAAC,IAAA,sBAAU,EAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,MAAM,CAAC,GAAG,IAAI,2BAAe,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5C,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB;QACvC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,IAAI,2BAAe,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjB,GAAG,IAAI,IAAI,CAAC;QACZ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjB,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6GAA6G,EAAE,GAAG,EAAE;QACrH,MAAM,CAAC,GAAG,IAAI,2BAAe,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACf,GAAG,IAAI,IAAI,CAAC;QACZ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,GAAG,IAAI,2BAAe,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClB,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,IAAI,2BAAe,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChB,GAAG,IAAI,IAAI,CAAC;QACZ,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,GAAG,IAAI,IAAI,CAAC;QACZ,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,+GAA+G,EAAE,GAAG,EAAE;QACvH,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,yBAAyB,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1G,MAAM,CAAC,IAAA,2BAAe,GAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC/B,uBAAuB,EAAE,WAAW;YACpC,qBAAqB,EAAE,eAAe;YACtC,qBAAqB,EAAE,gBAAgB;YACvC,yBAAyB,EAAE,WAAW;YACtC,qBAAqB,EAAE,SAAS;YAChC,sBAAsB,EAAE,WAAW;YACnC,uBAAuB,EAAE,MAAM;YAC/B,0BAA0B,EAAE,MAAM;YAClC,+BAA+B,EAAE,OAAO;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/D,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAE7D,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,aAAa,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC,CAAC;QACnK,qCAAqC;QACrC,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAA,0BAAc,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,yBAAyB,EAAE,SAAS,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,MAAM,GAAG,GAAG,IAAA,0BAAc,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;IAC3I,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QACjC,GAAG,IAAI,KAAM,CAAC;QACd,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,GAAG,IAAI,IAAI,CAAC;QACZ,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QACjC,GAAG,IAAI,KAAM,CAAC;QACd,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QACjC,IAAA,wBAAe,EAAC,IAAA,gBAAQ,EAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/D,GAAG,IAAI,KAAM,CAAC;QACd,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAA,2BAAe,GAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACnG,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACpD,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QAE7F,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACpD,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE7C,yFAAyF;QACzF,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAClB,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAA,wBAAe,EAAC,IAAA,gBAAQ,EAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,KAAK,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,KAAK,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrD,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAA,2BAAkB,EAAC,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrD,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAC;QAC1B,IAAA,wBAAe,EAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAA,2BAAe,GAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,CAAC,IAAA,2BAAe,GAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,IAAA,2BAAe,GAAE,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAA,8BAAkB,EAChB,IAAI,2BAAe,CAAC,EAAE,EAAE,GAAG,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC,CAAC,CACH,CAAC;QACF,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrD,iDAAiD;QACjD,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAA,qBAAY,EAAC;YACX,GAAG,EAAE,GAAG,EAAE;gBACR,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iFAAiF;AAEjF,KAAK,UAAU,KAAK,CAAC,OAA+D;IAClF,MAAM,MAAM,GAAW,IAAA,mBAAY,EAAC,OAAc,CAAC,CAAC;IACpD,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IACjD,OAAO;QACL,GAAG,EAAE,oBAAoB,IAAI,EAAE;QAC/B,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAChB,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAGD,SAAS,GAAG,CAAC,GAAW,EAAE,MAAM,GAAG,KAAK,EAAE,UAAkC,EAAE;IAC5E,OAAO,IAAI,OAAO,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE;QAC9B,IAAA,cAAW,EAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3D,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC,CAAC;aACC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC;aACjB,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,gBAAgB,GACpB,qKAAqK,CAAC;AAExK,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,kHAAkH;IAClH,SAAS,GAAG,CAAC,MAAqB,EAAE,EAAE,GAAG,IAAA,wBAAW,GAAE,EAAE,KAAK,GAAG,EAAE;QAChE,OAAO,CAAC,GAA4D,EAAE,GAAmB,EAAE,EAAE;YAC3F,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC;YAC1B,8DAA8D;YAC9D,IAAI,KAAK,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;YACtF,EAAE,CAAC,GAAU,EAAE,GAAG,EAAE,GAAG,EAAE;gBACvB,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;oBAChD,MAAM,CAAC,CAAC,EAAE,CAAC;oBACX,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACpB,CAAC;;oBAAM,IAAA,gCAAmB,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC;QACrD,IAAA,wBAAe,EAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,gCAAgC;QAC1D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,wBAAwB,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACzJ,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,0BAA0B,EAAE,SAAS,EAAE,qBAAqB,EAAE,eAAe,EAAE,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yGAAyG,EAAE,KAAK,IAAI,EAAE;QACvH,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAA,wBAAW,GAAE,EAAE,WAAW,CAAC,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACpG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9H,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAA,wBAAW,EAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChI,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;QAC3C,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,KAAK,CACxB,GAAG,CACD,MAAM,EACN,IAAA,wBAAW,EAAC;YACV,QAAQ,EAAE,GAAG,EAAE;gBACb,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;SACF,CAAC,CACH,CACF,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAA,8BAAkB,EAAC;YACjB,IAAI,EAAE,GAAG,EAAE;gBACT,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;YACD,QAAQ,EAAE,GAAG,EAAE;gBACb,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;SAC4B,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IAEvB,SAAS,KAAK;QACZ,MAAM,CAAC,GAAyB,EAAE,CAAC;QACnC,IAAA,wBAAW,EAAC,EAAE,OAAO,EAAE,CAAC,IAAY,EAAE,EAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1F,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,CAAC,GAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACxE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,MAAM,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpC,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACvB,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACtG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,0BAA0B,EAAE,SAAS,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAC,CAAC;QACjH,MAAM,CAAC,IAAA,2BAAe,GAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACvB,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACzG,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QACzG,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,CAAC,YAAY,CAAC;QACtB,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7H,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACvB,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/F,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE;IACnB,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1I,MAAM,IAAA,oBAAO,GAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5G,MAAM,IAAA,oBAAO,GAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,2GAA2G,EAAE,KAAK,IAAI,EAAE;QACzH,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAA,qBAAQ,EAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,2BAA2B,EAAE,WAAW,CAAC,CAAC,CAAC;QACrH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,IAAA,2BAAe,GAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,KAAK,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAA,qBAAQ,EAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,IAAA,qBAAQ,EAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,iCAAiC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,IAAA,2BAAe,GAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,0BAA0B,EAAE,QAAQ,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAA,kCAAsB,GAAE,CAAC,CAAC;IAC1C,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAA,oCAAwB,GAAE,CAAC,CAAC;IAE3C,EAAE,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;QACpH,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,EAAE,GAAG,IAAA,wBAAW,GAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAChC,GAAW,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC;YACnC,EAAE,CAAC,GAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5F,CAAC,eAAe,EAAE,MAAM,CAAC;YACzB,CAAC,sBAAsB,EAAE,MAAM,CAAC;SACjC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,SAAS,CAAC,GAAG,EAAE,CAAC,IAAA,kCAAsB,GAAE,CAAC,CAAC;IAC1C,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAA,oCAAwB,GAAE,CAAC,CAAC;IAE3C,uHAAuH;IACvH,SAAS,UAAU,CAAC,MAAqB;QACvC,MAAM,EAAE,GAAG,IAAA,wBAAW,GAAE,CAAC;QACzB,MAAM,GAAG,GAAQ,CAAC,GAAQ,EAAE,GAAmB,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzE,GAAG,CAAC,QAAQ,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC;QACpB,GAAG,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC;QACpB,GAAG,CAAC,MAAM,GAAG,CAAC,GAAQ,EAAE,GAAmB,EAAE,EAAE;YAC7C,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC;YAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC3C,GAAG,CAAC,EAAE,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;YACvF,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;gBAChB,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;oBAChD,MAAM,CAAC,CAAC,EAAE,CAAC;oBACX,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACpB,CAAC;;oBAAM,IAAA,gCAAmB,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mGAAmG;IACnG,SAAS,MAAM,CAAC,MAAqB;QACnC,MAAM,EAAE,GAAG,IAAA,oBAAO,GAAE,CAAC;QACrB,MAAM,aAAa,GAAG,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;YAClE,MAAM,CAAC,GAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;YAC9K,KAAK,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE;gBACpB,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;oBACxB,MAAM,CAAC,CAAC,EAAE,CAAC;oBACX,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;oBACf,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACpB,CAAC;YACH,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;gBACX,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC/G,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;gBAC1B,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBACrI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,IAAA,2BAAe,GAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,OAAO,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAQ,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;YAC3C,IAAA,wBAAe,EAAC,SAAS,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;YAC/C,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACrI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/detect.test.d.ts

@@ -0,0 +1 @@
+export {};