skein-cli 0.1.0-alpha.1

package/dist/redactor/secret-patterns.js

@@ -0,0 +1,475 @@
+/**
+ * Comprehensive secret patterns curated from Gitleaks, TruffleHog, and
+ * detect-secrets rule sets, then narrowed to the patterns most relevant
+ * to AI coding tool transcripts.
+ *
+ * Each pattern has:
+ *   - id: stable identifier surfaced in redaction reports
+ *   - category: groups patterns for opt-in/opt-out
+ *   - name: human-readable label
+ *   - regex: detection pattern (must use `g` flag)
+ *   - replacement: token written in place of the match
+ *   - severity: high (real credential), medium (likely credential), low (heuristic)
+ *
+ * Replacements use [REDACTED:<id>] so reviewers can grep for what was lost.
+ */
+const PRIVATE_KEY_BLOCK = /-----BEGIN (?:RSA |EC |DSA |OPENSSH |PGP |ENCRYPTED |)PRIVATE KEY(?: BLOCK)?-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH |PGP |ENCRYPTED |)PRIVATE KEY(?: BLOCK)?-----/g;
+export const SECRET_PATTERNS = [
+    // ---------- LLM providers ----------
+    {
+        id: 'anthropic-key',
+        category: 'llm-provider',
+        name: 'Anthropic API key',
+        regex: /sk-ant-[A-Za-z0-9_-]{20,}/g,
+        replacement: '[REDACTED:anthropic-key]',
+        severity: 'high',
+    },
+    {
+        id: 'openai-key',
+        category: 'llm-provider',
+        name: 'OpenAI API key (legacy / project / service / admin)',
+        regex: /sk-(?:proj-|svcacct-|admin-)?[A-Za-z0-9_-]{30,}/g,
+        replacement: '[REDACTED:openai-key]',
+        severity: 'high',
+    },
+    {
+        id: 'cohere-key',
+        category: 'llm-provider',
+        name: 'Cohere API key',
+        regex: /\b[A-Za-z0-9]{40}\b(?=.*cohere)/gi,
+        replacement: '[REDACTED:cohere-key]',
+        severity: 'medium',
+    },
+    {
+        id: 'huggingface-token',
+        category: 'llm-provider',
+        name: 'HuggingFace user access token',
+        regex: /\bhf_[A-Za-z0-9]{30,}\b/g,
+        replacement: '[REDACTED:huggingface-token]',
+        severity: 'high',
+    },
+    {
+        id: 'replicate-token',
+        category: 'llm-provider',
+        name: 'Replicate API token',
+        regex: /\br8_[A-Za-z0-9]{30,}\b/g,
+        replacement: '[REDACTED:replicate-token]',
+        severity: 'high',
+    },
+    {
+        id: 'mistral-key',
+        category: 'llm-provider',
+        name: 'Mistral AI key',
+        regex: /\b(?<![A-Za-z0-9])[A-Za-z0-9]{32}(?![A-Za-z0-9])(?=.*mistral)/gi,
+        replacement: '[REDACTED:mistral-key]',
+        severity: 'medium',
+    },
+    // ---------- Source control ----------
+    {
+        id: 'github-pat-classic',
+        category: 'scm',
+        name: 'GitHub PAT (classic)',
+        regex: /ghp_[A-Za-z0-9]{36}/g,
+        replacement: '[REDACTED:github-pat-classic]',
+        severity: 'high',
+    },
+    {
+        id: 'github-pat-fine-grained',
+        category: 'scm',
+        name: 'GitHub PAT (fine-grained)',
+        regex: /github_pat_[A-Za-z0-9_]{82}/g,
+        replacement: '[REDACTED:github-pat-fine-grained]',
+        severity: 'high',
+    },
+    {
+        id: 'github-app-token',
+        category: 'scm',
+        name: 'GitHub App / OAuth token',
+        regex: /gh[suoir]_[A-Za-z0-9]{36}/g,
+        replacement: '[REDACTED:github-app-token]',
+        severity: 'high',
+    },
+    {
+        id: 'gitlab-pat',
+        category: 'scm',
+        name: 'GitLab personal access token',
+        regex: /\bglpat-[A-Za-z0-9_-]{20,}\b/g,
+        replacement: '[REDACTED:gitlab-pat]',
+        severity: 'high',
+    },
+    {
+        id: 'gitlab-runner',
+        category: 'scm',
+        name: 'GitLab runner registration token',
+        regex: /\bglrt-[A-Za-z0-9_-]{20,}\b/g,
+        replacement: '[REDACTED:gitlab-runner]',
+        severity: 'high',
+    },
+    {
+        id: 'bitbucket-app-password',
+        category: 'scm',
+        name: 'Bitbucket app password',
+        regex: /\bATBB[A-Za-z0-9]{32}\b/g,
+        replacement: '[REDACTED:bitbucket-app-password]',
+        severity: 'high',
+    },
+    // ---------- Cloud providers ----------
+    {
+        id: 'aws-access-key',
+        category: 'cloud',
+        name: 'AWS access key ID',
+        regex: /\b(?:AKIA|ABIA|ACCA|ASIA)[0-9A-Z]{16}\b/g,
+        replacement: '[REDACTED:aws-access-key]',
+        severity: 'high',
+    },
+    {
+        id: 'aws-secret-key',
+        category: 'cloud',
+        name: 'AWS secret access key',
+        regex: /(?<![A-Za-z0-9/+=])[A-Za-z0-9/+=]{40}(?![A-Za-z0-9/+=])(?=.*aws|.*amazon|.*s3|.*ec2|.*iam)/gi,
+        replacement: '[REDACTED:aws-secret-key]',
+        severity: 'medium',
+    },
+    {
+        id: 'aws-session-token',
+        category: 'cloud',
+        name: 'AWS STS session token',
+        regex: /\bFwoGZXIvYXdzE[A-Za-z0-9/+=]{100,}/g,
+        replacement: '[REDACTED:aws-session-token]',
+        severity: 'high',
+    },
+    {
+        id: 'azure-sas',
+        category: 'cloud',
+        name: 'Azure Storage SAS token',
+        regex: /sig=[A-Za-z0-9%+=/]{40,}/g,
+        replacement: 'sig=[REDACTED:azure-sas]',
+        severity: 'high',
+    },
+    {
+        id: 'gcp-service-account-key',
+        category: 'cloud',
+        name: 'Google Cloud service account JSON',
+        regex: /"private_key":\s*"-----BEGIN[\s\S]*?-----END [A-Z ]*KEY-----[\\nA-Za-z0-9+=/]*"/g,
+        replacement: '"private_key": "[REDACTED:gcp-service-account-key]"',
+        severity: 'high',
+    },
+    {
+        id: 'google-api-key',
+        category: 'cloud',
+        name: 'Google API key',
+        regex: /AIza[0-9A-Za-z_-]{35}/g,
+        replacement: '[REDACTED:google-api-key]',
+        severity: 'high',
+    },
+    {
+        id: 'google-oauth-token',
+        category: 'cloud',
+        name: 'Google OAuth access token',
+        regex: /ya29\.[A-Za-z0-9_-]{40,}/g,
+        replacement: '[REDACTED:google-oauth-token]',
+        severity: 'high',
+    },
+    {
+        id: 'digitalocean-token',
+        category: 'cloud',
+        name: 'DigitalOcean PAT',
+        regex: /\bdop_v1_[a-f0-9]{64}\b/g,
+        replacement: '[REDACTED:digitalocean-token]',
+        severity: 'high',
+    },
+    {
+        id: 'heroku-api-key',
+        category: 'cloud',
+        name: 'Heroku API key (UUID with heroku context)',
+        regex: /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b(?=.*heroku)/gi,
+        replacement: '[REDACTED:heroku-api-key]',
+        severity: 'medium',
+    },
+    {
+        id: 'cloudflare-api-token',
+        category: 'cloud',
+        name: 'Cloudflare API token',
+        regex: /\bv1\.0-[A-Za-z0-9_-]{20,}-[A-Za-z0-9_-]{20,}\b/g,
+        replacement: '[REDACTED:cloudflare-api-token]',
+        severity: 'high',
+    },
+    // ---------- Payment providers ----------
+    {
+        id: 'stripe-secret',
+        category: 'payment',
+        name: 'Stripe secret / restricted key',
+        regex: /\b(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{20,}\b/g,
+        replacement: '[REDACTED:stripe-secret]',
+        severity: 'high',
+    },
+    {
+        id: 'stripe-publishable',
+        category: 'payment',
+        name: 'Stripe publishable key',
+        regex: /\bpk_(?:live|test)_[A-Za-z0-9]{20,}\b/g,
+        replacement: '[REDACTED:stripe-publishable]',
+        severity: 'low',
+    },
+    {
+        id: 'paypal-braintree',
+        category: 'payment',
+        name: 'Braintree access token',
+        regex: /\baccess_token\$production\$[A-Za-z0-9_]{16}\$[A-Za-z0-9_]{32}\b/g,
+        replacement: '[REDACTED:paypal-braintree]',
+        severity: 'high',
+    },
+    {
+        id: 'square-access-token',
+        category: 'payment',
+        name: 'Square access token',
+        regex: /\bsq0[a-z]{3}-[A-Za-z0-9_-]{22,}\b/g,
+        replacement: '[REDACTED:square-access-token]',
+        severity: 'high',
+    },
+    // ---------- Communications ----------
+    {
+        id: 'slack-token',
+        category: 'comms',
+        name: 'Slack token',
+        regex: /xox[abps]-[A-Za-z0-9-]{10,}/g,
+        replacement: '[REDACTED:slack-token]',
+        severity: 'high',
+    },
+    {
+        id: 'slack-webhook',
+        category: 'comms',
+        name: 'Slack webhook URL',
+        regex: /https:\/\/hooks\.slack\.com\/services\/[A-Z0-9]{8,12}\/[A-Z0-9]{8,12}\/[A-Za-z0-9]{16,32}/g,
+        replacement: '[REDACTED:slack-webhook]',
+        severity: 'high',
+    },
+    {
+        id: 'discord-token',
+        category: 'comms',
+        name: 'Discord bot token',
+        regex: /\b[MN][A-Za-z0-9_-]{23}\.[A-Za-z0-9_-]{6}\.[A-Za-z0-9_-]{27,38}\b/g,
+        replacement: '[REDACTED:discord-token]',
+        severity: 'high',
+    },
+    {
+        id: 'twilio-account-sid',
+        category: 'comms',
+        name: 'Twilio account SID',
+        regex: /\bAC[a-f0-9]{32}\b/g,
+        replacement: '[REDACTED:twilio-account-sid]',
+        severity: 'medium',
+    },
+    {
+        id: 'twilio-auth-token',
+        category: 'comms',
+        name: 'Twilio API key SID',
+        regex: /\bSK[a-f0-9]{32}\b/g,
+        replacement: '[REDACTED:twilio-auth-token]',
+        severity: 'high',
+    },
+    {
+        id: 'sendgrid-key',
+        category: 'comms',
+        name: 'SendGrid API key',
+        regex: /\bSG\.[A-Za-z0-9_-]{22}\.[A-Za-z0-9_-]{43}\b/g,
+        replacement: '[REDACTED:sendgrid-key]',
+        severity: 'high',
+    },
+    {
+        id: 'mailgun-key',
+        category: 'comms',
+        name: 'Mailgun API key',
+        regex: /\bkey-[a-f0-9]{32}\b/g,
+        replacement: '[REDACTED:mailgun-key]',
+        severity: 'high',
+    },
+    {
+        id: 'postmark-token',
+        category: 'comms',
+        name: 'Postmark server token (UUID + context)',
+        regex: /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b(?=.*postmark)/gi,
+        replacement: '[REDACTED:postmark-token]',
+        severity: 'medium',
+    },
+    // ---------- Databases ----------
+    {
+        id: 'mongodb-srv',
+        category: 'database',
+        name: 'MongoDB Atlas connection string',
+        regex: /\bmongodb(?:\+srv)?:\/\/[A-Za-z0-9._%-]+:[^@\s]+@[A-Za-z0-9.-]+/g,
+        replacement: 'mongodb+srv://[REDACTED:mongodb-srv]',
+        severity: 'high',
+    },
+    {
+        id: 'postgres-url',
+        category: 'database',
+        name: 'Postgres connection string with password',
+        regex: /\bpostgres(?:ql)?:\/\/[A-Za-z0-9._%-]+:[^@\s]+@[A-Za-z0-9.-]+/g,
+        replacement: 'postgres://[REDACTED:postgres-url]',
+        severity: 'high',
+    },
+    {
+        id: 'mysql-url',
+        category: 'database',
+        name: 'MySQL connection string with password',
+        regex: /\bmysql:\/\/[A-Za-z0-9._%-]+:[^@\s]+@[A-Za-z0-9.-]+/g,
+        replacement: 'mysql://[REDACTED:mysql-url]',
+        severity: 'high',
+    },
+    {
+        id: 'redis-url',
+        category: 'database',
+        name: 'Redis connection string with password',
+        regex: /\brediss?:\/\/[A-Za-z0-9._%-]*:[^@\s]+@[A-Za-z0-9.-]+/g,
+        replacement: 'redis://[REDACTED:redis-url]',
+        severity: 'high',
+    },
+    // ---------- Package registries ----------
+    {
+        id: 'npm-token',
+        category: 'package',
+        name: 'npm publish token',
+        regex: /\bnpm_[A-Za-z0-9]{36}\b/g,
+        replacement: '[REDACTED:npm-token]',
+        severity: 'high',
+    },
+    {
+        id: 'pypi-token',
+        category: 'package',
+        name: 'PyPI API token',
+        regex: /\bpypi-AgEIcHlwaS5vcmc[A-Za-z0-9_-]{50,}\b/g,
+        replacement: '[REDACTED:pypi-token]',
+        severity: 'high',
+    },
+    {
+        id: 'docker-hub-token',
+        category: 'package',
+        name: 'Docker Hub PAT (UUID + context)',
+        regex: /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b(?=.*docker)/gi,
+        replacement: '[REDACTED:docker-hub-token]',
+        severity: 'medium',
+    },
+    // ---------- Monitoring / observability ----------
+    {
+        id: 'datadog-api-key',
+        category: 'monitoring',
+        name: 'Datadog API key',
+        regex: /\bdd[A-Za-z0-9]{30,}\b(?=.*datadog)/gi,
+        replacement: '[REDACTED:datadog-api-key]',
+        severity: 'medium',
+    },
+    {
+        id: 'sentry-dsn',
+        category: 'monitoring',
+        name: 'Sentry DSN with secret',
+        regex: /https:\/\/[a-f0-9]{32}:[a-f0-9]{32}@[A-Za-z0-9.-]+\.ingest\.sentry\.io\/\d+/g,
+        replacement: '[REDACTED:sentry-dsn]',
+        severity: 'high',
+    },
+    {
+        id: 'newrelic-license',
+        category: 'monitoring',
+        name: 'New Relic license key',
+        regex: /\bNRAK-[A-Z0-9]{27}\b/g,
+        replacement: '[REDACTED:newrelic-license]',
+        severity: 'high',
+    },
+    // ---------- Productivity ----------
+    {
+        id: 'linear-token',
+        category: 'productivity',
+        name: 'Linear API key',
+        regex: /\blin_api_[A-Za-z0-9]{40}\b/g,
+        replacement: '[REDACTED:linear-token]',
+        severity: 'high',
+    },
+    {
+        id: 'notion-secret',
+        category: 'productivity',
+        name: 'Notion integration secret',
+        regex: /\bsecret_[A-Za-z0-9]{43}\b/g,
+        replacement: '[REDACTED:notion-secret]',
+        severity: 'high',
+    },
+    {
+        id: 'figma-token',
+        category: 'productivity',
+        name: 'Figma personal access token',
+        regex: /\bfigd_[A-Za-z0-9_-]{40,}\b/g,
+        replacement: '[REDACTED:figma-token]',
+        severity: 'high',
+    },
+    {
+        id: 'asana-token',
+        category: 'productivity',
+        name: 'Asana personal access token',
+        regex: /\b[0-9]\/[0-9]{16}:[a-f0-9]{32}\b/g,
+        replacement: '[REDACTED:asana-token]',
+        severity: 'high',
+    },
+    // ---------- Generic / cross-cutting ----------
+    {
+        id: 'jwt',
+        category: 'generic',
+        name: 'JSON Web Token',
+        regex: /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,
+        replacement: '[REDACTED:jwt]',
+        severity: 'high',
+    },
+    {
+        id: 'private-key-block',
+        category: 'generic',
+        name: 'PEM-encoded private key',
+        regex: PRIVATE_KEY_BLOCK,
+        replacement: '[REDACTED:private-key]',
+        severity: 'high',
+    },
+    {
+        id: 'ssh-private-key-openssh',
+        category: 'generic',
+        name: 'OpenSSH private key',
+        regex: /-----BEGIN OPENSSH PRIVATE KEY-----[\s\S]*?-----END OPENSSH PRIVATE KEY-----/g,
+        replacement: '[REDACTED:ssh-private-key]',
+        severity: 'high',
+    },
+    {
+        id: 'basic-auth-in-url',
+        category: 'generic',
+        name: 'HTTP basic auth credentials in URL',
+        regex: /https?:\/\/[A-Za-z0-9._%-]+:[^@\s/]+@[A-Za-z0-9.-]+/g,
+        replacement: 'https://[REDACTED:basic-auth-in-url]',
+        severity: 'high',
+    },
+    {
+        id: 'bearer-token',
+        category: 'generic',
+        name: 'Bearer authorization header',
+        regex: /\b(?:Bearer\s+|bearer\s+)[A-Za-z0-9._-]{20,}/g,
+        replacement: 'Bearer [REDACTED:bearer-token]',
+        severity: 'medium',
+    },
+    {
+        id: 'env-assignment',
+        category: 'generic',
+        name: 'Environment variable assignment with high-entropy value',
+        regex: /\b((?:[A-Z][A-Z0-9_]{2,})_(?:KEY|TOKEN|SECRET|PASSWORD|PWD|API|AUTH))\s*=\s*([A-Za-z0-9_/+=-]{16,})/g,
+        replacement: '$1=[REDACTED:env-value]',
+        severity: 'medium',
+    },
+    {
+        id: 'generic-api-key-context',
+        category: 'generic',
+        name: 'Generic API key in JSON / YAML context',
+        regex: /(["'`]?(?:api[-_]?key|apikey|api[-_]?secret|access[-_]?token|auth[-_]?token|client[-_]?secret|secret[-_]?key)["'`]?\s*[:=]\s*["'`])([A-Za-z0-9_/+=.-]{20,})(["'`])/gi,
+        replacement: '$1[REDACTED:generic-api-key]$3',
+        severity: 'medium',
+    },
+];
+export function patternsByCategory(...categories) {
+    if (categories.length === 0)
+        return SECRET_PATTERNS;
+    const set = new Set(categories);
+    return SECRET_PATTERNS.filter(p => set.has(p.category));
+}
+//# sourceMappingURL=secret-patterns.js.map

package/dist/redactor/secret-patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-patterns.js","sourceRoot":"","sources":["../../src/redactor/secret-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAwBH,MAAM,iBAAiB,GACrB,2KAA2K,CAAA;AAE7K,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,sCAAsC;IACtC;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,qDAAqD;QAC3D,KAAK,EAAE,kDAAkD;QACzD,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,+BAA+B;QACrC,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,iEAAiE;QACxE,WAAW,EAAE,wBAAwB;QACrC,QAAQ,EAAE,QAAQ;KACnB;IAED,uCAAuC;IACvC;QACE,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,oCAAoC;QACjD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,8BAA8B;QACpC,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,kCAAkC;QACxC,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,MAAM;KACjB;IAED,wCAAwC;IACxC;QACE,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,0CAA0C;QACjD,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EACH,8FAA8F;QAChG,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,mCAAmC;QACzC,KAAK,EAAE,kFAAkF;QACzF,WAAW,EAAE,qDAAqD;QAClE,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,2CAA2C;QACjD,KAAK,EAAE,gFAAgF;QACvF,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,kDAAkD;QACzD,WAAW,EAAE,iCAAiC;QAC9C,QAAQ,EAAE,MAAM;KACjB;IAED,0CAA0C;IAC1C;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,gCAAgC;QACtC,KAAK,EAAE,+CAA+C;QACtD,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,mEAAmE;QAC1E,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EAAE,gCAAgC;QAC7C,QAAQ,EAAE,MAAM;KACjB;IAED,uCAAuC;IACvC;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,wBAAwB;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,mBAAmB;QACzB,KAAK,EACH,4FAA4F;QAC9F,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,oEAAoE;QAC3E,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,+CAA+C;QACtD,WAAW,EAAE,yBAAyB;QACtC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,wBAAwB;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,wCAAwC;QAC9C,KAAK,EAAE,kFAAkF;QACzF,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,QAAQ;KACnB;IAED,kCAAkC;IAClC;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE,kEAAkE;QACzE,WAAW,EAAE,sCAAsC;QACnD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,0CAA0C;QAChD,KAAK,EAAE,gEAAgE;QACvE,WAAW,EAAE,oCAAoC;QACjD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,uCAAuC;QAC7C,KAAK,EAAE,sDAAsD;QAC7D,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,uCAAuC;QAC7C,KAAK,EAAE,wDAAwD;QAC/D,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,MAAM;KACjB;IAED,2CAA2C;IAC3C;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,sBAAsB;QACnC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,6CAA6C;QACpD,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,iCAAiC;QACvC,KAAK,EAAE,gFAAgF;QACvF,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,QAAQ;KACnB;IAED,mDAAmD;IACnD;QACE,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,8EAA8E;QACrF,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,MAAM;KACjB;IAED,qCAAqC;IACrC;QACE,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,yBAAyB;QACtC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,wBAAwB;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EAAE,wBAAwB;QACrC,QAAQ,EAAE,MAAM;KACjB;IAED,gDAAgD;IAChD;QACE,EAAE,EAAE,KAAK;QACT,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,uEAAuE;QAC9E,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,wBAAwB;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,+EAA+E;QACtF,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,oCAAoC;QAC1C,KAAK,EAAE,sDAAsD;QAC7D,WAAW,EAAE,sCAAsC;QACnD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,+CAA+C;QACtD,WAAW,EAAE,gCAAgC;QAC7C,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,yDAAyD;QAC/D,KAAK,EACH,sGAAsG;QACxG,WAAW,EAAE,yBAAyB;QACtC,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,wCAAwC;QAC9C,KAAK,EACH,sKAAsK;QACxK,WAAW,EAAE,gCAAgC;QAC7C,QAAQ,EAAE,QAAQ;KACnB;CACF,CAAA;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAG,UAAsB;IAC1D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAA;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;IAC/B,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;AACzD,CAAC"}