shield360 1.1.0 → 1.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +330 -3
- package/dist/__tests__/build-info.test.js +8 -1
- package/dist/__tests__/build-info.test.js.map +1 -1
- package/dist/__tests__/code-location.test.js +1 -1
- package/dist/__tests__/destination.test.js +15 -0
- package/dist/__tests__/destination.test.js.map +1 -1
- package/dist/__tests__/masking.test.d.ts +1 -0
- package/dist/__tests__/masking.test.js +66 -0
- package/dist/__tests__/masking.test.js.map +1 -0
- package/dist/__tests__/register.e2e.test.d.ts +1 -0
- package/dist/__tests__/register.e2e.test.js +279 -0
- package/dist/__tests__/register.e2e.test.js.map +1 -0
- package/dist/__tests__/register.test.js +60 -0
- package/dist/__tests__/register.test.js.map +1 -1
- package/dist/agents/__tests__/agents.test.d.ts +1 -0
- package/dist/agents/__tests__/agents.test.js +529 -0
- package/dist/agents/__tests__/agents.test.js.map +1 -0
- package/dist/agents/index.d.ts +15 -0
- package/dist/agents/index.js +25 -0
- package/dist/agents/index.js.map +1 -0
- package/dist/agents/passport.d.ts +92 -0
- package/dist/agents/passport.js +301 -0
- package/dist/agents/passport.js.map +1 -0
- package/dist/agents/policy.d.ts +24 -0
- package/dist/agents/policy.js +93 -0
- package/dist/agents/policy.js.map +1 -0
- package/dist/agents/replay.d.ts +20 -0
- package/dist/agents/replay.js +47 -0
- package/dist/agents/replay.js.map +1 -0
- package/dist/agents/report.d.ts +30 -0
- package/dist/agents/report.js +93 -0
- package/dist/agents/report.js.map +1 -0
- package/dist/agents/types.d.ts +148 -0
- package/dist/agents/types.js +37 -0
- package/dist/agents/types.js.map +1 -0
- package/dist/agents/verifier.d.ts +33 -0
- package/dist/agents/verifier.js +276 -0
- package/dist/agents/verifier.js.map +1 -0
- package/dist/ai-security/__tests__/bench.test.d.ts +1 -0
- package/dist/ai-security/__tests__/bench.test.js +50 -0
- package/dist/ai-security/__tests__/bench.test.js.map +1 -0
- package/dist/ai-security/__tests__/checks.test.d.ts +1 -0
- package/dist/ai-security/__tests__/checks.test.js +248 -0
- package/dist/ai-security/__tests__/checks.test.js.map +1 -0
- package/dist/ai-security/__tests__/config.test.d.ts +1 -0
- package/dist/ai-security/__tests__/config.test.js +164 -0
- package/dist/ai-security/__tests__/config.test.js.map +1 -0
- package/dist/ai-security/__tests__/detection.test.d.ts +1 -0
- package/dist/ai-security/__tests__/detection.test.js +114 -0
- package/dist/ai-security/__tests__/detection.test.js.map +1 -0
- package/dist/ai-security/__tests__/fixtures.d.ts +8 -0
- package/dist/ai-security/__tests__/fixtures.js +30 -0
- package/dist/ai-security/__tests__/fixtures.js.map +1 -0
- package/dist/ai-security/__tests__/hooks.test.d.ts +1 -0
- package/dist/ai-security/__tests__/hooks.test.js +174 -0
- package/dist/ai-security/__tests__/hooks.test.js.map +1 -0
- package/dist/ai-security/__tests__/stream.test.d.ts +1 -0
- package/dist/ai-security/__tests__/stream.test.js +85 -0
- package/dist/ai-security/__tests__/stream.test.js.map +1 -0
- package/dist/ai-security/config.d.ts +94 -0
- package/dist/ai-security/config.js +241 -0
- package/dist/ai-security/config.js.map +1 -0
- package/dist/ai-security/context.d.ts +45 -0
- package/dist/ai-security/context.js +108 -0
- package/dist/ai-security/context.js.map +1 -0
- package/dist/ai-security/custom-kinds.d.ts +23 -0
- package/dist/ai-security/custom-kinds.js +97 -0
- package/dist/ai-security/custom-kinds.js.map +1 -0
- package/dist/ai-security/events.d.ts +77 -0
- package/dist/ai-security/events.js +153 -0
- package/dist/ai-security/events.js.map +1 -0
- package/dist/ai-security/hooks.d.ts +48 -0
- package/dist/ai-security/hooks.js +461 -0
- package/dist/ai-security/hooks.js.map +1 -0
- package/dist/ai-security/index.d.ts +209 -0
- package/dist/ai-security/index.js +587 -0
- package/dist/ai-security/index.js.map +1 -0
- package/dist/ai-security/injection-rules.json +1024 -0
- package/dist/ai-security/injection.d.ts +46 -0
- package/dist/ai-security/injection.js +635 -0
- package/dist/ai-security/injection.js.map +1 -0
- package/dist/ai-security/jailbreak.d.ts +38 -0
- package/dist/ai-security/jailbreak.js +73 -0
- package/dist/ai-security/jailbreak.js.map +1 -0
- package/dist/ai-security/limits.d.ts +84 -0
- package/dist/ai-security/limits.js +195 -0
- package/dist/ai-security/limits.js.map +1 -0
- package/dist/ai-security/mcp.d.ts +82 -0
- package/dist/ai-security/mcp.js +150 -0
- package/dist/ai-security/mcp.js.map +1 -0
- package/dist/ai-security/output.d.ts +107 -0
- package/dist/ai-security/output.js +390 -0
- package/dist/ai-security/output.js.map +1 -0
- package/dist/ai-security/policy.d.ts +125 -0
- package/dist/ai-security/policy.js +196 -0
- package/dist/ai-security/policy.js.map +1 -0
- package/dist/ai-security/rag.d.ts +70 -0
- package/dist/ai-security/rag.js +174 -0
- package/dist/ai-security/rag.js.map +1 -0
- package/dist/ai-security/tool-rules.json +203 -0
- package/dist/ai-security/tools.d.ts +46 -0
- package/dist/ai-security/tools.js +62 -0
- package/dist/ai-security/tools.js.map +1 -0
- package/dist/budgets/__tests__/budgets.test.d.ts +1 -0
- package/dist/budgets/__tests__/budgets.test.js +134 -0
- package/dist/budgets/__tests__/budgets.test.js.map +1 -0
- package/dist/budgets/auto.d.ts +25 -0
- package/dist/budgets/auto.js +63 -0
- package/dist/budgets/auto.js.map +1 -0
- package/dist/budgets/index.d.ts +110 -0
- package/dist/budgets/index.js +239 -0
- package/dist/budgets/index.js.map +1 -0
- package/dist/customer/__tests__/customer.test.d.ts +1 -0
- package/dist/customer/__tests__/customer.test.js +155 -0
- package/dist/customer/__tests__/customer.test.js.map +1 -0
- package/dist/customer/index.d.ts +48 -0
- package/dist/customer/index.js +132 -0
- package/dist/customer/index.js.map +1 -0
- package/dist/destination.d.ts +14 -0
- package/dist/destination.js +16 -0
- package/dist/destination.js.map +1 -1
- package/dist/feedback/__tests__/feedback.test.d.ts +1 -0
- package/dist/feedback/__tests__/feedback.test.js +80 -0
- package/dist/feedback/__tests__/feedback.test.js.map +1 -0
- package/dist/feedback/index.d.ts +48 -0
- package/dist/feedback/index.js +97 -0
- package/dist/feedback/index.js.map +1 -0
- package/dist/flags/__tests__/flags.test.d.ts +1 -0
- package/dist/flags/__tests__/flags.test.js +301 -0
- package/dist/flags/__tests__/flags.test.js.map +1 -0
- package/dist/flags/client.d.ts +131 -0
- package/dist/flags/client.js +301 -0
- package/dist/flags/client.js.map +1 -0
- package/dist/flags/engine.d.ts +200 -0
- package/dist/flags/engine.js +677 -0
- package/dist/flags/engine.js.map +1 -0
- package/dist/flags/index.d.ts +4 -0
- package/dist/flags/index.js +16 -0
- package/dist/flags/index.js.map +1 -0
- package/dist/guard/__tests__/findings.test.js +1 -1
- package/dist/guard/__tests__/report.test.js +67 -0
- package/dist/guard/__tests__/report.test.js.map +1 -1
- package/dist/guard/heartbeat.d.ts +34 -0
- package/dist/guard/heartbeat.js +83 -0
- package/dist/guard/heartbeat.js.map +1 -0
- package/dist/guard/integration.d.ts +9 -0
- package/dist/guard/integration.js +4 -2
- package/dist/guard/integration.js.map +1 -1
- package/dist/guard/report.d.ts +24 -1
- package/dist/guard/report.js +67 -18
- package/dist/guard/report.js.map +1 -1
- package/dist/index.d.ts +88 -0
- package/dist/index.js +203 -2
- package/dist/index.js.map +1 -1
- package/dist/instrumentation/__tests__/langchain-wrapper.test.js +1 -1
- package/dist/instrumentation/__tests__/langchain-wrapper.test.js.map +1 -1
- package/dist/instrumentation/anthropic/wrapper.js +4 -0
- package/dist/instrumentation/anthropic/wrapper.js.map +1 -1
- package/dist/instrumentation/openai/wrapper.js +6 -0
- package/dist/instrumentation/openai/wrapper.js.map +1 -1
- package/dist/masking.d.ts +42 -0
- package/dist/masking.js +197 -0
- package/dist/masking.js.map +1 -0
- package/dist/otel/__tests__/app-logs-safety.test.d.ts +1 -0
- package/dist/otel/__tests__/app-logs-safety.test.js +129 -0
- package/dist/otel/__tests__/app-logs-safety.test.js.map +1 -0
- package/dist/otel/__tests__/app-logs.test.d.ts +1 -0
- package/dist/otel/__tests__/app-logs.test.js +269 -0
- package/dist/otel/__tests__/app-logs.test.js.map +1 -0
- package/dist/otel/__tests__/log-auto.test.d.ts +1 -0
- package/dist/otel/__tests__/log-auto.test.js +125 -0
- package/dist/otel/__tests__/log-auto.test.js.map +1 -0
- package/dist/otel/__tests__/log-bridges.test.d.ts +1 -0
- package/dist/otel/__tests__/log-bridges.test.js +170 -0
- package/dist/otel/__tests__/log-bridges.test.js.map +1 -0
- package/dist/otel/__tests__/system-metrics.test.d.ts +1 -0
- package/dist/otel/__tests__/system-metrics.test.js +79 -0
- package/dist/otel/__tests__/system-metrics.test.js.map +1 -0
- package/dist/otel/app-logs.d.ts +80 -0
- package/dist/otel/app-logs.js +195 -0
- package/dist/otel/app-logs.js.map +1 -0
- package/dist/otel/build-info.d.ts +2 -1
- package/dist/otel/build-info.js +3 -2
- package/dist/otel/build-info.js.map +1 -1
- package/dist/otel/events.d.ts +1 -0
- package/dist/otel/events.js +22 -13
- package/dist/otel/events.js.map +1 -1
- package/dist/otel/log-auto.d.ts +44 -0
- package/dist/otel/log-auto.js +200 -0
- package/dist/otel/log-auto.js.map +1 -0
- package/dist/otel/log-bridges.d.ts +54 -0
- package/dist/otel/log-bridges.js +307 -0
- package/dist/otel/log-bridges.js.map +1 -0
- package/dist/otel/metrics.js +1 -1
- package/dist/otel/metrics.js.map +1 -1
- package/dist/otel/system-metrics.d.ts +39 -0
- package/dist/otel/system-metrics.js +166 -0
- package/dist/otel/system-metrics.js.map +1 -0
- package/dist/otel/tracing.js +6 -2
- package/dist/otel/tracing.js.map +1 -1
- package/dist/protect/__tests__/protect.test.js +4 -0
- package/dist/protect/__tests__/protect.test.js.map +1 -1
- package/dist/protect/index.js +9 -4
- package/dist/protect/index.js.map +1 -1
- package/dist/rasp/__tests__/auto-http.test.d.ts +1 -0
- package/dist/rasp/__tests__/auto-http.test.js +136 -0
- package/dist/rasp/__tests__/auto-http.test.js.map +1 -0
- package/dist/rasp/__tests__/baseline.test.d.ts +1 -0
- package/dist/rasp/__tests__/baseline.test.js +86 -0
- package/dist/rasp/__tests__/baseline.test.js.map +1 -0
- package/dist/rasp/__tests__/benign-corpus.test.d.ts +1 -0
- package/dist/rasp/__tests__/benign-corpus.test.js +68 -0
- package/dist/rasp/__tests__/benign-corpus.test.js.map +1 -0
- package/dist/rasp/__tests__/capture-context.test.d.ts +1 -0
- package/dist/rasp/__tests__/capture-context.test.js +135 -0
- package/dist/rasp/__tests__/capture-context.test.js.map +1 -0
- package/dist/rasp/__tests__/code-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/code-hook.test.js +218 -0
- package/dist/rasp/__tests__/code-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/config-client.test.d.ts +1 -0
- package/dist/rasp/__tests__/config-client.test.js +283 -0
- package/dist/rasp/__tests__/config-client.test.js.map +1 -0
- package/dist/rasp/__tests__/corpus.d.ts +13 -0
- package/dist/rasp/__tests__/corpus.js +111 -0
- package/dist/rasp/__tests__/corpus.js.map +1 -0
- package/dist/rasp/__tests__/custom-rules.test.d.ts +1 -0
- package/dist/rasp/__tests__/custom-rules.test.js +276 -0
- package/dist/rasp/__tests__/custom-rules.test.js.map +1 -0
- package/dist/rasp/__tests__/db-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/db-hook.test.js +438 -0
- package/dist/rasp/__tests__/db-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/deception.test.d.ts +1 -0
- package/dist/rasp/__tests__/deception.test.js +567 -0
- package/dist/rasp/__tests__/deception.test.js.map +1 -0
- package/dist/rasp/__tests__/detect.test.d.ts +1 -0
- package/dist/rasp/__tests__/detect.test.js +276 -0
- package/dist/rasp/__tests__/detect.test.js.map +1 -0
- package/dist/rasp/__tests__/esm-exports.test.d.ts +1 -0
- package/dist/rasp/__tests__/esm-exports.test.js +20 -0
- package/dist/rasp/__tests__/esm-exports.test.js.map +1 -0
- package/dist/rasp/__tests__/fs-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/fs-hook.test.js +241 -0
- package/dist/rasp/__tests__/fs-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/hook-contracts.test.d.ts +1 -0
- package/dist/rasp/__tests__/hook-contracts.test.js +201 -0
- package/dist/rasp/__tests__/hook-contracts.test.js.map +1 -0
- package/dist/rasp/__tests__/hook-kit.d.ts +42 -0
- package/dist/rasp/__tests__/hook-kit.js +139 -0
- package/dist/rasp/__tests__/hook-kit.js.map +1 -0
- package/dist/rasp/__tests__/http-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/http-hook.test.js +250 -0
- package/dist/rasp/__tests__/http-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/iast.test.d.ts +1 -0
- package/dist/rasp/__tests__/iast.test.js +361 -0
- package/dist/rasp/__tests__/iast.test.js.map +1 -0
- package/dist/rasp/__tests__/include-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/include-hook.test.js +122 -0
- package/dist/rasp/__tests__/include-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/middleware.test.d.ts +1 -0
- package/dist/rasp/__tests__/middleware.test.js +302 -0
- package/dist/rasp/__tests__/middleware.test.js.map +1 -0
- package/dist/rasp/__tests__/process-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/process-hook.test.js +238 -0
- package/dist/rasp/__tests__/process-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/reporter.test.d.ts +1 -0
- package/dist/rasp/__tests__/reporter.test.js +114 -0
- package/dist/rasp/__tests__/reporter.test.js.map +1 -0
- package/dist/rasp/__tests__/route.test.d.ts +1 -0
- package/dist/rasp/__tests__/route.test.js +46 -0
- package/dist/rasp/__tests__/route.test.js.map +1 -0
- package/dist/rasp/__tests__/rule-expr.test.d.ts +1 -0
- package/dist/rasp/__tests__/rule-expr.test.js +151 -0
- package/dist/rasp/__tests__/rule-expr.test.js.map +1 -0
- package/dist/rasp/__tests__/rule-phases.test.d.ts +1 -0
- package/dist/rasp/__tests__/rule-phases.test.js +271 -0
- package/dist/rasp/__tests__/rule-phases.test.js.map +1 -0
- package/dist/rasp/__tests__/sinks-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/sinks-hook.test.js +177 -0
- package/dist/rasp/__tests__/sinks-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/targets.test.d.ts +1 -0
- package/dist/rasp/__tests__/targets.test.js +82 -0
- package/dist/rasp/__tests__/targets.test.js.map +1 -0
- package/dist/rasp/__tests__/template-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/template-hook.test.js +254 -0
- package/dist/rasp/__tests__/template-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/upload.test.d.ts +1 -0
- package/dist/rasp/__tests__/upload.test.js +81 -0
- package/dist/rasp/__tests__/upload.test.js.map +1 -0
- package/dist/rasp/__tests__/vpatch-engine.test.d.ts +1 -0
- package/dist/rasp/__tests__/vpatch-engine.test.js +177 -0
- package/dist/rasp/__tests__/vpatch-engine.test.js.map +1 -0
- package/dist/rasp/auto-http.d.ts +6 -0
- package/dist/rasp/auto-http.js +194 -0
- package/dist/rasp/auto-http.js.map +1 -0
- package/dist/rasp/baseline.d.ts +35 -0
- package/dist/rasp/baseline.js +91 -0
- package/dist/rasp/baseline.js.map +1 -0
- package/dist/rasp/capture.d.ts +76 -0
- package/dist/rasp/capture.js +304 -0
- package/dist/rasp/capture.js.map +1 -0
- package/dist/rasp/config-client.d.ts +122 -0
- package/dist/rasp/config-client.js +337 -0
- package/dist/rasp/config-client.js.map +1 -0
- package/dist/rasp/context.d.ts +65 -0
- package/dist/rasp/context.js +68 -0
- package/dist/rasp/context.js.map +1 -0
- package/dist/rasp/custom-rules.d.ts +68 -0
- package/dist/rasp/custom-rules.js +222 -0
- package/dist/rasp/custom-rules.js.map +1 -0
- package/dist/rasp/data/default-rules.json +199 -0
- package/dist/rasp/data/default-sinks.json +4 -0
- package/dist/rasp/data/dnslog-domains.json +11 -0
- package/dist/rasp/deception.d.ts +70 -0
- package/dist/rasp/deception.js +220 -0
- package/dist/rasp/deception.js.map +1 -0
- package/dist/rasp/detect.d.ts +68 -0
- package/dist/rasp/detect.js +671 -0
- package/dist/rasp/detect.js.map +1 -0
- package/dist/rasp/engine.d.ts +107 -0
- package/dist/rasp/engine.js +330 -0
- package/dist/rasp/engine.js.map +1 -0
- package/dist/rasp/hooks/code.d.ts +20 -0
- package/dist/rasp/hooks/code.js +334 -0
- package/dist/rasp/hooks/code.js.map +1 -0
- package/dist/rasp/hooks/db.d.ts +48 -0
- package/dist/rasp/hooks/db.js +322 -0
- package/dist/rasp/hooks/db.js.map +1 -0
- package/dist/rasp/hooks/esm.d.ts +7 -0
- package/dist/rasp/hooks/esm.js +18 -0
- package/dist/rasp/hooks/esm.js.map +1 -0
- package/dist/rasp/hooks/fs.d.ts +3 -0
- package/dist/rasp/hooks/fs.js +206 -0
- package/dist/rasp/hooks/fs.js.map +1 -0
- package/dist/rasp/hooks/http.d.ts +4 -0
- package/dist/rasp/hooks/http.js +213 -0
- package/dist/rasp/hooks/http.js.map +1 -0
- package/dist/rasp/hooks/include.d.ts +9 -0
- package/dist/rasp/hooks/include.js +79 -0
- package/dist/rasp/hooks/include.js.map +1 -0
- package/dist/rasp/hooks/marks.d.ts +2 -0
- package/dist/rasp/hooks/marks.js +16 -0
- package/dist/rasp/hooks/marks.js.map +1 -0
- package/dist/rasp/hooks/process.d.ts +22 -0
- package/dist/rasp/hooks/process.js +191 -0
- package/dist/rasp/hooks/process.js.map +1 -0
- package/dist/rasp/hooks/sinks.d.ts +54 -0
- package/dist/rasp/hooks/sinks.js +329 -0
- package/dist/rasp/hooks/sinks.js.map +1 -0
- package/dist/rasp/hooks/template.d.ts +21 -0
- package/dist/rasp/hooks/template.js +152 -0
- package/dist/rasp/hooks/template.js.map +1 -0
- package/dist/rasp/iast-rules.d.ts +82 -0
- package/dist/rasp/iast-rules.js +240 -0
- package/dist/rasp/iast-rules.js.map +1 -0
- package/dist/rasp/iast-scope.d.ts +29 -0
- package/dist/rasp/iast-scope.js +54 -0
- package/dist/rasp/iast-scope.js.map +1 -0
- package/dist/rasp/iast.d.ts +81 -0
- package/dist/rasp/iast.js +272 -0
- package/dist/rasp/iast.js.map +1 -0
- package/dist/rasp/index.d.ts +52 -0
- package/dist/rasp/index.js +280 -0
- package/dist/rasp/index.js.map +1 -0
- package/dist/rasp/lexers.d.ts +32 -0
- package/dist/rasp/lexers.js +444 -0
- package/dist/rasp/lexers.js.map +1 -0
- package/dist/rasp/middleware.d.ts +155 -0
- package/dist/rasp/middleware.js +568 -0
- package/dist/rasp/middleware.js.map +1 -0
- package/dist/rasp/model-output.d.ts +14 -0
- package/dist/rasp/model-output.js +107 -0
- package/dist/rasp/model-output.js.map +1 -0
- package/dist/rasp/normalize.d.ts +23 -0
- package/dist/rasp/normalize.js +140 -0
- package/dist/rasp/normalize.js.map +1 -0
- package/dist/rasp/reporter.d.ts +60 -0
- package/dist/rasp/reporter.js +230 -0
- package/dist/rasp/reporter.js.map +1 -0
- package/dist/rasp/rule-expr.d.ts +236 -0
- package/dist/rasp/rule-expr.js +1253 -0
- package/dist/rasp/rule-expr.js.map +1 -0
- package/dist/rasp/template.d.ts +53 -0
- package/dist/rasp/template.js +336 -0
- package/dist/rasp/template.js.map +1 -0
- package/dist/rasp/types.d.ts +110 -0
- package/dist/rasp/types.js +51 -0
- package/dist/rasp/types.js.map +1 -0
- package/dist/rasp/vpatch.d.ts +55 -0
- package/dist/rasp/vpatch.js +120 -0
- package/dist/rasp/vpatch.js.map +1 -0
- package/dist/register.js +52 -11
- package/dist/register.js.map +1 -1
- package/dist/semantic-convention.d.ts +2 -0
- package/dist/semantic-convention.js +5 -0
- package/dist/semantic-convention.js.map +1 -1
- package/dist/types.d.ts +77 -1
- package/dist/zero-code.d.ts +8 -0
- package/dist/zero-code.js +38 -0
- package/dist/zero-code.js.map +1 -0
- package/package.json +18 -2
|
@@ -0,0 +1,438 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
36
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
37
|
+
};
|
|
38
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
39
|
+
const hooks = __importStar(require("../hooks/db"));
|
|
40
|
+
const detect = __importStar(require("../detect"));
|
|
41
|
+
const context_1 = require("../context");
|
|
42
|
+
const engine_1 = require("../engine");
|
|
43
|
+
const types_1 = require("../types");
|
|
44
|
+
const instrumentation_1 = require("@opentelemetry/instrumentation");
|
|
45
|
+
const pg_1 = __importDefault(require("../../instrumentation/pg"));
|
|
46
|
+
const input = "' OR '1'='1";
|
|
47
|
+
const query = `SELECT * FROM products WHERE name = '${input}'`;
|
|
48
|
+
const safe = 'SELECT * FROM products WHERE name = ?';
|
|
49
|
+
const request = (fn, trees = []) => (0, context_1.runWithInputs)([{ value: input, key: 'query.q', source: 'request' }], fn, { inRequest: true, trees });
|
|
50
|
+
const configure = (mode = 'block') => (0, engine_1.configureEngine)({ enabled: true, applicationName: 'a', mode, env: {} });
|
|
51
|
+
const drivers = [
|
|
52
|
+
['pg', 'Client', ['query'], hooks.patchPg, hooks.unpatchPg, 'postgres'],
|
|
53
|
+
['mysql2', 'Connection', ['query', 'execute'], hooks.patchMysql2, hooks.unpatchMysql2, 'mysql'],
|
|
54
|
+
['mysql', '', ['query'], hooks.patchMysql, hooks.unpatchMysql, 'mysql'],
|
|
55
|
+
['sqlite3', 'Database', ['run', 'get', 'all', 'each', 'exec', 'prepare'], hooks.patchSqlite3, hooks.unpatchSqlite3, 'sqlite'],
|
|
56
|
+
['better-sqlite3', '', ['prepare', 'exec'], hooks.patchBetterSqlite3, hooks.unpatchBetterSqlite3, 'sqlite'],
|
|
57
|
+
['mssql', 'Request', ['query', 'batch', 'execute'], hooks.patchMssql, hooks.unpatchMssql, 'mssql'],
|
|
58
|
+
['oracledb', 'Connection', ['execute', 'executeMany', 'queryStream'], hooks.patchOracledb, hooks.unpatchOracledb, 'oracle'],
|
|
59
|
+
['ibm_db', 'Database', ['query', 'querySync', 'queryResult', 'queryResultSync', 'prepare', 'prepareSync'], hooks.patchIbmDb, hooks.unpatchIbmDb, 'db2'],
|
|
60
|
+
];
|
|
61
|
+
beforeEach(() => { configure(); (0, engine_1.setEventSink)({ add: () => undefined }); });
|
|
62
|
+
afterEach(() => {
|
|
63
|
+
hooks.uninstallDbHooks();
|
|
64
|
+
jest.restoreAllMocks();
|
|
65
|
+
(0, engine_1.setEventSink)(undefined);
|
|
66
|
+
(0, engine_1.configureEngine)({ enabled: false, applicationName: 'a', env: {} });
|
|
67
|
+
});
|
|
68
|
+
describe.each(drivers)('%s', (driver, key, methods, patch, unpatch, dialect) => {
|
|
69
|
+
let original;
|
|
70
|
+
let ctor;
|
|
71
|
+
let moduleExports;
|
|
72
|
+
beforeEach(() => {
|
|
73
|
+
original = jest.fn(function () { return this; });
|
|
74
|
+
class Fake {
|
|
75
|
+
}
|
|
76
|
+
for (const method of methods)
|
|
77
|
+
Object.defineProperty(Fake.prototype, method, { value: original, configurable: true, writable: true });
|
|
78
|
+
ctor = Fake;
|
|
79
|
+
moduleExports = key ? { [key]: ctor } : ctor;
|
|
80
|
+
});
|
|
81
|
+
afterEach(() => unpatch(moduleExports));
|
|
82
|
+
test.each(methods)('%s blocks before the original', method => {
|
|
83
|
+
const detector = jest.spyOn(detect, 'detectSql');
|
|
84
|
+
patch(moduleExports);
|
|
85
|
+
expect(() => request(() => new ctor()[method](query))).toThrow(types_1.RaspBlockedError);
|
|
86
|
+
expect(original).not.toHaveBeenCalled();
|
|
87
|
+
expect(detector).toHaveBeenCalledWith(query, expect.any(Array), dialect);
|
|
88
|
+
});
|
|
89
|
+
test('bound parameters and unrelated text pass unchanged', () => {
|
|
90
|
+
patch(moduleExports);
|
|
91
|
+
const instance = new ctor();
|
|
92
|
+
const values = [input];
|
|
93
|
+
const text = driver === 'pg' ? 'SELECT * FROM products WHERE name = $1' : safe;
|
|
94
|
+
expect(request(() => instance[methods[0]](text, values))).toBe(instance);
|
|
95
|
+
expect(original).toHaveBeenLastCalledWith(text, values);
|
|
96
|
+
expect(request(() => instance[methods[0]]('SELECT 1'))).toBe(instance);
|
|
97
|
+
expect(original).toHaveBeenCalledTimes(2);
|
|
98
|
+
});
|
|
99
|
+
test('object query form blocks without modifying the object', () => {
|
|
100
|
+
if (!['pg', 'mysql', 'mysql2', 'ibm_db'].includes(driver))
|
|
101
|
+
return;
|
|
102
|
+
const object = driver === 'pg' ? { text: query } : { sql: query };
|
|
103
|
+
Object.freeze(object);
|
|
104
|
+
patch(moduleExports);
|
|
105
|
+
expect(() => request(() => new ctor()[methods[0]](object))).toThrow(types_1.RaspBlockedError);
|
|
106
|
+
expect(original).not.toHaveBeenCalled();
|
|
107
|
+
});
|
|
108
|
+
test('monitor reports and invokes original', () => {
|
|
109
|
+
configure('monitor');
|
|
110
|
+
const events = jest.fn();
|
|
111
|
+
(0, engine_1.setEventSink)({ add: events });
|
|
112
|
+
patch(moduleExports);
|
|
113
|
+
request(() => new ctor()[methods[0]](query));
|
|
114
|
+
expect(original).toHaveBeenCalledTimes(1);
|
|
115
|
+
expect(events).toHaveBeenCalledWith(expect.objectContaining({ attrs: expect.objectContaining({
|
|
116
|
+
'shield360.rasp.sink': `db.${driver}.${methods[0]}`,
|
|
117
|
+
'shield360.rasp.decision': 'monitored',
|
|
118
|
+
}) }), expect.any(String));
|
|
119
|
+
});
|
|
120
|
+
test('off and absent context skip detection', () => {
|
|
121
|
+
const detector = jest.spyOn(detect, 'detectSql');
|
|
122
|
+
patch(moduleExports);
|
|
123
|
+
new ctor()[methods[0]](query);
|
|
124
|
+
(0, engine_1.configureEngine)({ enabled: false, applicationName: 'a', env: {} });
|
|
125
|
+
request(() => new ctor()[methods[0]](query));
|
|
126
|
+
expect(detector).not.toHaveBeenCalled();
|
|
127
|
+
expect(original).toHaveBeenCalledTimes(2);
|
|
128
|
+
});
|
|
129
|
+
test('detector errors fail open', () => {
|
|
130
|
+
jest.spyOn(detect, 'detectSql').mockImplementation(() => { throw new Error('unavailable'); });
|
|
131
|
+
patch(moduleExports);
|
|
132
|
+
request(() => new ctor()[methods[0]](query));
|
|
133
|
+
expect(original).toHaveBeenCalledTimes(1);
|
|
134
|
+
});
|
|
135
|
+
test('double patch wraps once and unpatch restores identity', () => {
|
|
136
|
+
const detector = jest.spyOn(detect, 'detectSql');
|
|
137
|
+
patch(moduleExports);
|
|
138
|
+
const wrapper = ctor.prototype[methods[0]];
|
|
139
|
+
patch(moduleExports);
|
|
140
|
+
expect(ctor.prototype[methods[0]]).toBe(wrapper);
|
|
141
|
+
request(() => new ctor()[methods[0]]('SELECT 1'));
|
|
142
|
+
expect(detector).toHaveBeenCalledTimes(1);
|
|
143
|
+
unpatch(moduleExports);
|
|
144
|
+
for (const method of methods)
|
|
145
|
+
expect(ctor.prototype[method]).toBe(original);
|
|
146
|
+
});
|
|
147
|
+
});
|
|
148
|
+
describe('tedious', () => {
|
|
149
|
+
// tedious: the SQL lives on the Request object handed to the connection.
|
|
150
|
+
class Request {
|
|
151
|
+
constructor(sqlTextOrProcedure, callback) {
|
|
152
|
+
this.sqlTextOrProcedure = sqlTextOrProcedure;
|
|
153
|
+
this.callback = callback;
|
|
154
|
+
}
|
|
155
|
+
}
|
|
156
|
+
const methods = ['execSql', 'execSqlBatch', 'prepare'];
|
|
157
|
+
let original;
|
|
158
|
+
let Connection;
|
|
159
|
+
beforeEach(() => {
|
|
160
|
+
original = jest.fn();
|
|
161
|
+
class Fake {
|
|
162
|
+
}
|
|
163
|
+
for (const method of methods)
|
|
164
|
+
Object.defineProperty(Fake.prototype, method, { value: original, configurable: true, writable: true });
|
|
165
|
+
Connection = Fake;
|
|
166
|
+
hooks.patchTedious({ Connection, Request });
|
|
167
|
+
});
|
|
168
|
+
afterEach(() => hooks.unpatchTedious({ Connection, Request }));
|
|
169
|
+
test.each(methods)('%s blocks the request text with the mssql dialect', method => {
|
|
170
|
+
const detector = jest.spyOn(detect, 'detectSql');
|
|
171
|
+
expect(() => request(() => new Connection()[method](new Request(query)))).toThrow(types_1.RaspBlockedError);
|
|
172
|
+
expect(original).not.toHaveBeenCalled();
|
|
173
|
+
expect(detector).toHaveBeenCalledWith(query, expect.any(Array), 'mssql');
|
|
174
|
+
});
|
|
175
|
+
test('parameterised text passes; monitor reports; off and failures pass through', () => {
|
|
176
|
+
request(() => new Connection().execSql(new Request('SELECT * FROM t WHERE name = @name')));
|
|
177
|
+
configure('monitor');
|
|
178
|
+
const events = jest.fn();
|
|
179
|
+
(0, engine_1.setEventSink)({ add: events });
|
|
180
|
+
request(() => new Connection().execSql(new Request(query)));
|
|
181
|
+
expect(events).toHaveBeenCalledWith(expect.objectContaining({ attrs: expect.objectContaining({
|
|
182
|
+
'shield360.rasp.sink': 'db.tedious.execSql', 'shield360.rasp.decision': 'monitored',
|
|
183
|
+
}) }), expect.any(String));
|
|
184
|
+
(0, engine_1.configureEngine)({ enabled: true, applicationName: 'a', mode: 'block', attacks: { sql_injection: 'off' }, env: {} });
|
|
185
|
+
request(() => new Connection().execSql(new Request(query)));
|
|
186
|
+
configure('block');
|
|
187
|
+
jest.spyOn(detect, 'detectSql').mockImplementation(() => { throw new Error('unavailable'); });
|
|
188
|
+
request(() => new Connection().execSql(new Request(query)));
|
|
189
|
+
expect(original).toHaveBeenCalledTimes(4);
|
|
190
|
+
});
|
|
191
|
+
test('a query mssql checked is not checked again when mssql hands it to tedious', async () => {
|
|
192
|
+
configure('monitor');
|
|
193
|
+
const events = jest.fn();
|
|
194
|
+
(0, engine_1.setEventSink)({ add: events });
|
|
195
|
+
const connection = new Connection();
|
|
196
|
+
// mssql's tedious driver: Request.query runs later, asynchronously, through Connection.execSqlBatch.
|
|
197
|
+
class MssqlRequest {
|
|
198
|
+
query(text) {
|
|
199
|
+
return Promise.resolve().then(() => { connection.execSqlBatch(new Request(text)); });
|
|
200
|
+
}
|
|
201
|
+
}
|
|
202
|
+
hooks.patchMssql({ Request: MssqlRequest });
|
|
203
|
+
try {
|
|
204
|
+
await request(() => new MssqlRequest().query(query));
|
|
205
|
+
expect(original).toHaveBeenCalledTimes(1);
|
|
206
|
+
expect(events).toHaveBeenCalledTimes(1);
|
|
207
|
+
expect(events.mock.calls[0][0].attrs['shield360.rasp.sink']).toBe('db.mssql.query');
|
|
208
|
+
// A later tedious call with the same text is its own call and is checked.
|
|
209
|
+
request(() => connection.execSqlBatch(new Request(query)));
|
|
210
|
+
expect(events).toHaveBeenCalledTimes(2);
|
|
211
|
+
}
|
|
212
|
+
finally {
|
|
213
|
+
hooks.unpatchMssql({ Request: MssqlRequest });
|
|
214
|
+
}
|
|
215
|
+
});
|
|
216
|
+
});
|
|
217
|
+
describe('review fixes', () => {
|
|
218
|
+
test('mssql methods inherited from the base Request are checked and block with the RASP error', async () => {
|
|
219
|
+
// mssql: the exported (tedious) Request inherits query and batch from the shared base Request.
|
|
220
|
+
const original = jest.fn(() => Promise.resolve('rows'));
|
|
221
|
+
class BaseRequest {
|
|
222
|
+
}
|
|
223
|
+
for (const m of ['query', 'batch', 'execute'])
|
|
224
|
+
Object.defineProperty(BaseRequest.prototype, m, { value: original, configurable: true, writable: true });
|
|
225
|
+
class Request extends BaseRequest {
|
|
226
|
+
}
|
|
227
|
+
hooks.patchMssql({ Request });
|
|
228
|
+
try {
|
|
229
|
+
const run = async () => new Request().query(query);
|
|
230
|
+
await expect(request(run)).rejects.toBeInstanceOf(types_1.RaspBlockedError);
|
|
231
|
+
expect(original).not.toHaveBeenCalled();
|
|
232
|
+
}
|
|
233
|
+
finally {
|
|
234
|
+
hooks.unpatchMssql({ Request });
|
|
235
|
+
}
|
|
236
|
+
expect(Object.getOwnPropertyDescriptor(BaseRequest.prototype, 'query').value).toBe(original);
|
|
237
|
+
expect(Object.getOwnPropertyNames(Request.prototype)).toEqual(['constructor']);
|
|
238
|
+
});
|
|
239
|
+
test('mssql PreparedStatement.prepare is checked (mssql sends it through sp_prepare, not execSql)', () => {
|
|
240
|
+
const prepare = jest.fn();
|
|
241
|
+
class BasePreparedStatement {
|
|
242
|
+
}
|
|
243
|
+
Object.defineProperty(BasePreparedStatement.prototype, 'prepare', { value: prepare, configurable: true, writable: true });
|
|
244
|
+
class PreparedStatement extends BasePreparedStatement {
|
|
245
|
+
}
|
|
246
|
+
class Request {
|
|
247
|
+
}
|
|
248
|
+
const detector = jest.spyOn(detect, 'detectSql');
|
|
249
|
+
hooks.patchMssql({ Request, PreparedStatement });
|
|
250
|
+
try {
|
|
251
|
+
expect(() => request(() => new PreparedStatement().prepare(query))).toThrow(types_1.RaspBlockedError);
|
|
252
|
+
expect(prepare).not.toHaveBeenCalled();
|
|
253
|
+
expect(detector).toHaveBeenCalledWith(query, expect.any(Array), 'mssql');
|
|
254
|
+
}
|
|
255
|
+
finally {
|
|
256
|
+
hooks.unpatchMssql({ Request, PreparedStatement });
|
|
257
|
+
}
|
|
258
|
+
expect(Object.getOwnPropertyDescriptor(BasePreparedStatement.prototype, 'prepare').value).toBe(prepare);
|
|
259
|
+
});
|
|
260
|
+
test('oracledb queryStream is checked once, not again in the execute it runs on the next tick', async () => {
|
|
261
|
+
configure('monitor');
|
|
262
|
+
const events = jest.fn();
|
|
263
|
+
(0, engine_1.setEventSink)({ add: events });
|
|
264
|
+
const execute = jest.fn(() => Promise.resolve({ rows: [] }));
|
|
265
|
+
class Connection {
|
|
266
|
+
}
|
|
267
|
+
Object.defineProperty(Connection.prototype, 'execute', { value: execute, configurable: true, writable: true });
|
|
268
|
+
Object.defineProperty(Connection.prototype, 'queryStream', {
|
|
269
|
+
configurable: true, writable: true,
|
|
270
|
+
value: function (sql) {
|
|
271
|
+
return new Promise(resolve => process.nextTick(() => resolve(this.execute(sql))));
|
|
272
|
+
},
|
|
273
|
+
});
|
|
274
|
+
hooks.patchOracledb({ Connection });
|
|
275
|
+
try {
|
|
276
|
+
await request(() => new Connection().queryStream(query));
|
|
277
|
+
expect(execute).toHaveBeenCalledTimes(1);
|
|
278
|
+
expect(events).toHaveBeenCalledTimes(1);
|
|
279
|
+
expect(events.mock.calls[0][0].attrs['shield360.rasp.sink']).toBe('db.oracledb.queryStream');
|
|
280
|
+
}
|
|
281
|
+
finally {
|
|
282
|
+
hooks.unpatchOracledb({ Connection });
|
|
283
|
+
}
|
|
284
|
+
});
|
|
285
|
+
});
|
|
286
|
+
test('dialect names the lexer does not know yet still detect', () => {
|
|
287
|
+
// The lexer's own oracle and db2 rules land separately; meanwhile it lexes them with the common rules.
|
|
288
|
+
const inputs = [{ value: input, key: 'query.q', source: 'request' }];
|
|
289
|
+
for (const dialect of ['mssql', 'oracle', 'db2']) {
|
|
290
|
+
expect(detect.detectSql(query, inputs, dialect)?.rule).toBe('sqli.userinput');
|
|
291
|
+
}
|
|
292
|
+
});
|
|
293
|
+
const mongoMethods = ['find', 'findOne', 'countDocuments', 'updateOne', 'updateMany', 'replaceOne',
|
|
294
|
+
'deleteOne', 'deleteMany', 'findOneAndUpdate', 'findOneAndDelete', 'findOneAndReplace', 'aggregate'];
|
|
295
|
+
describe('mongodb', () => {
|
|
296
|
+
let original;
|
|
297
|
+
let Collection;
|
|
298
|
+
beforeEach(() => {
|
|
299
|
+
original = jest.fn(() => 'result');
|
|
300
|
+
class Fake {
|
|
301
|
+
}
|
|
302
|
+
for (const method of mongoMethods)
|
|
303
|
+
Object.defineProperty(Fake.prototype, method, { value: original, configurable: true, writable: true });
|
|
304
|
+
Collection = Fake;
|
|
305
|
+
hooks.patchMongodb({ Collection });
|
|
306
|
+
});
|
|
307
|
+
afterEach(() => hooks.unpatchMongodb({ Collection }));
|
|
308
|
+
test.each(mongoMethods)('%s checks the filter or pipeline stage', method => {
|
|
309
|
+
const body = { name: { $ne: null } };
|
|
310
|
+
const filter = { name: body.name };
|
|
311
|
+
const doc = method === 'aggregate' ? [{ $match: filter }] : filter;
|
|
312
|
+
expect(() => request(() => new Collection()[method](doc), [body])).toThrow(types_1.RaspBlockedError);
|
|
313
|
+
expect(original).not.toHaveBeenCalled();
|
|
314
|
+
});
|
|
315
|
+
test.each(['updateOne', 'updateMany', 'replaceOne', 'findOneAndUpdate', 'findOneAndReplace'])('%s checks the second document', method => {
|
|
316
|
+
const body = { name: { $ne: null } };
|
|
317
|
+
expect(() => request(() => new Collection()[method]({ name: 'fixture' }, { name: body.name }), [body])).toThrow(types_1.RaspBlockedError);
|
|
318
|
+
expect(original).not.toHaveBeenCalled();
|
|
319
|
+
});
|
|
320
|
+
test('equality passes; monitor reports and passes operator input', () => {
|
|
321
|
+
expect(request(() => new Collection().find({ name: 'fixture' }))).toBe('result');
|
|
322
|
+
configure('monitor');
|
|
323
|
+
const events = jest.fn();
|
|
324
|
+
(0, engine_1.setEventSink)({ add: events });
|
|
325
|
+
const body = { name: { $ne: null } };
|
|
326
|
+
expect(request(() => new Collection().find({ name: body.name }), [body])).toBe('result');
|
|
327
|
+
expect(events).toHaveBeenCalled();
|
|
328
|
+
});
|
|
329
|
+
test('off and no context skip Mongo detection', () => {
|
|
330
|
+
const detector = jest.spyOn(detect, 'detectNoSql');
|
|
331
|
+
new Collection().find({});
|
|
332
|
+
(0, engine_1.configureEngine)({ enabled: false, applicationName: 'a', env: {} });
|
|
333
|
+
request(() => new Collection().find({}));
|
|
334
|
+
expect(detector).not.toHaveBeenCalled();
|
|
335
|
+
});
|
|
336
|
+
});
|
|
337
|
+
test('installation and uninstallation are idempotent', () => {
|
|
338
|
+
expect(hooks.installDbHooks()).toBe(true);
|
|
339
|
+
expect(hooks.installDbHooks()).toBe(true);
|
|
340
|
+
hooks.uninstallDbHooks();
|
|
341
|
+
hooks.uninstallDbHooks();
|
|
342
|
+
});
|
|
343
|
+
test('aggregate checks stages after a safe first stage and double patch restores Mongo methods', () => {
|
|
344
|
+
const original = jest.fn();
|
|
345
|
+
class Collection {
|
|
346
|
+
constructor() {
|
|
347
|
+
this.aggregate = original;
|
|
348
|
+
}
|
|
349
|
+
}
|
|
350
|
+
// Use a prototype method, as real drivers do.
|
|
351
|
+
Object.defineProperty(Collection.prototype, 'aggregate', { value: original, configurable: true, writable: true });
|
|
352
|
+
const moduleExports = { Collection };
|
|
353
|
+
hooks.patchMongodb(moduleExports);
|
|
354
|
+
const wrapper = Collection.prototype.aggregate;
|
|
355
|
+
hooks.patchMongodb(moduleExports);
|
|
356
|
+
expect(Collection.prototype.aggregate).toBe(wrapper);
|
|
357
|
+
const body = { name: { $ne: null } };
|
|
358
|
+
try {
|
|
359
|
+
expect(() => request(() => Reflect.apply(wrapper, {}, [
|
|
360
|
+
[{ $match: { name: 'fixture' } }, { $match: { name: body.name } }],
|
|
361
|
+
]), [body])).toThrow(types_1.RaspBlockedError);
|
|
362
|
+
expect(original).not.toHaveBeenCalled();
|
|
363
|
+
}
|
|
364
|
+
finally {
|
|
365
|
+
hooks.unpatchMongodb(moduleExports);
|
|
366
|
+
}
|
|
367
|
+
expect(Collection.prototype.aggregate).toBe(original);
|
|
368
|
+
});
|
|
369
|
+
describe('alongside the SDK pg tracing (shimmer)', () => {
|
|
370
|
+
const tracedClient = () => {
|
|
371
|
+
const original = jest.fn(() => 'rows');
|
|
372
|
+
class Client {
|
|
373
|
+
}
|
|
374
|
+
Object.defineProperty(Client.prototype, 'query', { value: original, configurable: true, writable: true });
|
|
375
|
+
return { original, Client: Client };
|
|
376
|
+
};
|
|
377
|
+
test.each(['tracing first', 'rasp first'])('%s: RASP still checks and tracing keeps its wrapper', (order) => {
|
|
378
|
+
const { original, Client } = tracedClient();
|
|
379
|
+
const tracing = new pg_1.default();
|
|
380
|
+
if (order === 'tracing first') {
|
|
381
|
+
tracing.manualPatch({ Client });
|
|
382
|
+
hooks.patchPg({ Client });
|
|
383
|
+
}
|
|
384
|
+
else {
|
|
385
|
+
hooks.patchPg({ Client });
|
|
386
|
+
tracing.manualPatch({ Client });
|
|
387
|
+
}
|
|
388
|
+
try {
|
|
389
|
+
expect(() => request(() => new Client().query(query))).toThrow(types_1.RaspBlockedError);
|
|
390
|
+
expect(original).not.toHaveBeenCalled();
|
|
391
|
+
expect(request(() => new Client().query('SELECT 1'))).toBe('rows');
|
|
392
|
+
// tracing's wrapper is still in the chain
|
|
393
|
+
let fn = Client.prototype.query;
|
|
394
|
+
let traced = false;
|
|
395
|
+
for (let i = 0; i < 4 && fn; i++) {
|
|
396
|
+
if ((0, instrumentation_1.isWrapped)(fn))
|
|
397
|
+
traced = true;
|
|
398
|
+
fn = fn.__original ?? undefined;
|
|
399
|
+
}
|
|
400
|
+
expect(traced || (0, instrumentation_1.isWrapped)(Client.prototype.query)).toBe(true);
|
|
401
|
+
}
|
|
402
|
+
finally {
|
|
403
|
+
hooks.unpatchPg({ Client });
|
|
404
|
+
}
|
|
405
|
+
// RASP off: the injected query reaches the driver through tracing.
|
|
406
|
+
expect(request(() => new Client().query(query))).toBe('rows');
|
|
407
|
+
});
|
|
408
|
+
test('unpatch under another wrapper switches RASP off and patch turns it back on', () => {
|
|
409
|
+
const { Client } = tracedClient();
|
|
410
|
+
hooks.patchPg({ Client });
|
|
411
|
+
new pg_1.default().manualPatch({ Client });
|
|
412
|
+
hooks.unpatchPg({ Client });
|
|
413
|
+
expect(request(() => new Client().query(query))).toBe('rows');
|
|
414
|
+
hooks.patchPg({ Client });
|
|
415
|
+
expect(() => request(() => new Client().query(query))).toThrow(types_1.RaspBlockedError);
|
|
416
|
+
hooks.unpatchPg({ Client });
|
|
417
|
+
});
|
|
418
|
+
});
|
|
419
|
+
test('reporter queries do not recurse and the guard resets', () => {
|
|
420
|
+
const original = jest.fn();
|
|
421
|
+
class Client {
|
|
422
|
+
query(...values) { return original(...values); }
|
|
423
|
+
}
|
|
424
|
+
const events = jest.fn(() => { new Client().query('SELECT 1'); });
|
|
425
|
+
(0, engine_1.setEventSink)({ add: events });
|
|
426
|
+
configure('monitor');
|
|
427
|
+
hooks.patchPg({ Client });
|
|
428
|
+
try {
|
|
429
|
+
request(() => new Client().query(query));
|
|
430
|
+
request(() => new Client().query(query));
|
|
431
|
+
expect(events).toHaveBeenCalledTimes(2);
|
|
432
|
+
expect(original).toHaveBeenCalledTimes(4);
|
|
433
|
+
}
|
|
434
|
+
finally {
|
|
435
|
+
hooks.unpatchPg({ Client });
|
|
436
|
+
}
|
|
437
|
+
});
|
|
438
|
+
//# sourceMappingURL=db-hook.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"db-hook.test.js","sourceRoot":"","sources":["../../../src/rasp/__tests__/db-hook.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAAqC;AACrC,kDAAoC;AACpC,wCAA2C;AAC3C,sCAA0D;AAC1D,oCAA4C;AAC5C,oEAA2D;AAC3D,kEAAkE;AAElE,MAAM,KAAK,GAAG,aAAa,CAAC;AAC5B,MAAM,KAAK,GAAG,wCAAwC,KAAK,GAAG,CAAC;AAC/D,MAAM,IAAI,GAAG,uCAAuC,CAAC;AACrD,MAAM,OAAO,GAAG,CAAI,EAAW,EAAE,QAAmB,EAAE,EAAK,EAAE,CAAC,IAAA,uBAAa,EACzE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CACtF,CAAC;AACF,MAAM,SAAS,GAAG,CAAC,OAA4B,OAAO,EAAE,EAAE,CAAC,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AAEnI,MAAM,OAAO,GAAuD;IAClE,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC;IACvE,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC;IAC/F,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC;IACvE,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,cAAc,EAAE,QAAQ,CAAC;IAC7H,CAAC,gBAAgB,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,oBAAoB,EAAE,QAAQ,CAAC;IAC3G,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC;IAClG,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC;IAC3H,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC;CACxJ,CAAC;AACF,UAAU,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACzB,IAAI,CAAC,eAAe,EAAE,CAAC;IACvB,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC;IACxB,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;IAC7E,IAAI,QAAmB,CAAC;IACxB,IAAI,IAA4H,CAAC;IACjI,IAAI,aAAsB,CAAC;IAC3B,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,cAA2B,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI;SAAG;QACb,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrI,IAAI,GAAG,IAA8B,CAAC;QACtC,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAExC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,+BAA+B,EAAE,MAAM,CAAC,EAAE;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjD,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QACjF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC9D,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzE,MAAM,CAAC,QAAQ,CAAC,CAAC,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvE,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QACjE,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO;QAClE,MAAM,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtB,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QACtF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAChD,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBAC3F,qBAAqB,EAAE,MAAM,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE;gBACnD,yBAAyB,EAAE,WAAW;aACvC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjD,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACrC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjD,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,aAAa,CAAC,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,yEAAyE;IACzE,MAAM,OAAO;QAAG,YAAmB,kBAA0B,EAAS,QAAkB;YAArD,uBAAkB,GAAlB,kBAAkB,CAAQ;YAAS,aAAQ,GAAR,QAAQ,CAAU;QAAG,CAAC;KAAE;IAC9F,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,QAAmB,CAAC;IACxB,IAAI,UAA0G,CAAC;IAC/G,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI;SAAG;QACb,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrI,UAAU,GAAG,IAAoC,CAAC;QAClD,KAAK,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAE/D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,mDAAmD,EAAE,MAAM,CAAC,EAAE;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QACpG,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACrF,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC;QAC3F,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBAC3F,qBAAqB,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,WAAW;aACpF,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3B,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACpH,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5D,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QAC3F,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;QACpC,qGAAqG;QACrG,MAAM,YAAY;YAChB,KAAK,CAAC,IAAY;gBAChB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,CAAC;SACF;QACD,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACrD,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpF,0EAA0E;YAC1E,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YAAC,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACzG,+FAA+F;QAC/F,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,MAAM,WAAW;SAAG;QACpB,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC;YAAE,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxJ,MAAM,OAAQ,SAAQ,WAAW;SAAG;QACpC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE,CAAE,IAAI,OAAO,EAAwD,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1G,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,wBAAgB,CAAC,CAAC;YACpE,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC1C,CAAC;gBAAS,CAAC;YAAC,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9F,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6FAA6F,EAAE,GAAG,EAAE;QACvG,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1B,MAAM,qBAAqB;SAAG;QAC9B,MAAM,CAAC,cAAc,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1H,MAAM,iBAAkB,SAAQ,qBAAqB;SAAG;QACxD,MAAM,OAAO;SAAG;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACjD,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAE,IAAI,iBAAiB,EAA8C,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;YAC3I,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3E,CAAC;gBAAS,CAAC;YAAC,KAAK,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACzG,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,UAAU;SAAG;QACnB,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/G,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,aAAa,EAAE;YACzD,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI;YAClC,KAAK,EAAE,UAA0D,GAAW;gBAC1E,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACpF,CAAC;SACF,CAAC,CAAC;QACH,KAAK,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,EAAE,CAAE,IAAI,UAAU,EAA8D,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YACtH,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC/F,CAAC;gBAAS,CAAC;YAAC,KAAK,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAClE,uGAAuG;IACvG,MAAM,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC;IAC9E,KAAK,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAA4B,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACrG,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY;IAChG,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,WAAW,CAAC,CAAC;AACvG,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,IAAI,QAAmB,CAAC;IACxB,IAAI,UAAsE,CAAC;IAC3E,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI;SAAG;QACb,KAAK,MAAM,MAAM,IAAI,YAAY;YAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1I,UAAU,GAAG,IAAoC,CAAC;QAClD,KAAK,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAEtD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,wCAAwC,EAAE,MAAM,CAAC,EAAE;QACzE,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACnE,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QAC7F,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC,CAAC,+BAA+B,EAAE,MAAM,CAAC,EAAE;QACtI,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QAClI,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjF,SAAS,CAAC,SAAS,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzF,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAA,wBAAe,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACzB,KAAK,CAAC,gBAAgB,EAAE,CAAC;AAC3B,CAAC,CAAC,CAAC;AAGH,IAAI,CAAC,0FAA0F,EAAE,GAAG,EAAE;IACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;IAC3B,MAAM,UAAU;QAAhB;YAAmB,cAAS,GAAG,QAAQ,CAAC;QAAC,CAAC;KAAA;IAC1C,8CAA8C;IAC9C,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAClH,MAAM,aAAa,GAAG,EAAE,UAAU,EAAE,CAAC;IACrC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;IAC/C,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;IAClC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE;YACpD,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;SACnE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM;SAAG;QACf,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1G,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAwF,EAAE,CAAC;IACxH,CAAC,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,qDAAqD,EAAE,CAAC,KAAK,EAAE,EAAE;QAC1G,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,YAA0B,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC9B,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAChC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1B,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;YACjF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACxC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnE,0CAA0C;YAC1C,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YAChC,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjC,IAAI,IAAA,2BAAS,EAAC,EAAE,CAAC;oBAAE,MAAM,GAAG,IAAI,CAAC;gBACjC,EAAE,GAAI,EAAU,CAAC,UAAU,IAAI,SAAS,CAAC;YAC3C,CAAC;YACD,MAAM,CAAC,MAAM,IAAI,IAAA,2BAAS,EAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,mEAAmE;QACnE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACtF,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;QAClC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1B,IAAI,YAA0B,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9D,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC,CAAC;QACjF,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;IAC3B,MAAM,MAAM;QAAG,KAAK,CAAC,GAAG,MAAiB,IAAa,OAAO,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;KAAE;IACrF,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,IAAA,qBAAY,EAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9B,SAAS,CAAC,SAAS,CAAC,CAAC;IACrB,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAAC,CAAC;AAC5C,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|