vaspera 2.5.0

package/dist/scanners/agent/tool-description-drift.js

@@ -0,0 +1,365 @@
+/**
+ * Tool Description Drift Scanner
+ *
+ * Detects changes to MCP tool definitions compared to a signed baseline.
+ * This is a "rug-pull detector" that alerts when:
+ * - Tool descriptions change (could indicate scope creep)
+ * - Input schemas change (could introduce new attack vectors)
+ * - Tools are added or removed
+ * - Permissions/hints change
+ *
+ * @module scanners/agent/tool-description-drift
+ */
+import { createHash } from "crypto";
+import { readFile, writeFile, mkdir } from "fs/promises";
+import { join } from "path";
+import { AGENT_SEVERITY_MAPPINGS } from "./types.js";
+// ============================================================================
+// Hashing Functions
+// ============================================================================
+/**
+ * Generate a hash for a tool definition
+ */
+function hashToolDefinition(tool) {
+    const content = JSON.stringify({
+        name: tool.name,
+        description: tool.description,
+        inputSchema: tool.inputSchema,
+        destructiveHint: tool.destructiveHint,
+        readOnlyHint: tool.readOnlyHint,
+        networkAccess: tool.networkAccess,
+        codeExecution: tool.codeExecution,
+        requiredPermissions: tool.requiredPermissions,
+    });
+    return createHash("sha256").update(content).digest("hex").substring(0, 16);
+}
+/**
+ * Generate a hash for just the input schema
+ */
+function hashInputSchema(schema) {
+    const content = JSON.stringify(schema || {});
+    return createHash("sha256").update(content).digest("hex").substring(0, 16);
+}
+/**
+ * Generate a hash for the full manifest
+ */
+function hashManifest(manifest) {
+    const content = JSON.stringify(manifest);
+    return createHash("sha256").update(content).digest("hex");
+}
+// ============================================================================
+// Baseline Management
+// ============================================================================
+/**
+ * Create a baseline from a manifest
+ */
+export function createBaseline(manifest) {
+    const tools = manifest.tools.map((tool) => ({
+        name: tool.name,
+        hash: hashToolDefinition(tool),
+        description: tool.description,
+        schemaHash: hashInputSchema(tool.inputSchema),
+        hints: {
+            destructive: tool.destructiveHint,
+            readOnly: tool.readOnlyHint,
+        },
+        capturedAt: new Date().toISOString(),
+    }));
+    return {
+        serverName: manifest.name,
+        version: manifest.version,
+        manifestHash: hashManifest(manifest),
+        tools,
+        signedAt: new Date().toISOString(),
+    };
+}
+/**
+ * Load baseline from file
+ */
+export async function loadBaseline(baselinesDir, serverName) {
+    const baselinePath = join(baselinesDir, `${serverName}.json`);
+    try {
+        const content = await readFile(baselinePath, "utf-8");
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Save baseline to file
+ */
+export async function saveBaseline(baselinesDir, baseline) {
+    await mkdir(baselinesDir, { recursive: true });
+    const baselinePath = join(baselinesDir, `${baseline.serverName}.json`);
+    await writeFile(baselinePath, JSON.stringify(baseline, null, 2));
+}
+// ============================================================================
+// Drift Detection
+// ============================================================================
+/**
+ * Compare current manifest against baseline and detect drift
+ */
+export function detectDrift(manifest, baseline) {
+    const findings = [];
+    const now = new Date().toISOString();
+    const currentToolMap = new Map(manifest.tools.map((t) => [t.name, t]));
+    const baselineToolMap = new Map(baseline.tools.map((t) => [t.name, t]));
+    // Check for removed tools
+    for (const baselineTool of baseline.tools) {
+        if (!currentToolMap.has(baselineTool.name)) {
+            findings.push({
+                type: "tool-removed",
+                severity: AGENT_SEVERITY_MAPPINGS["tool-removed"],
+                tool: baselineTool.name,
+                description: `Tool "${baselineTool.name}" was present in baseline but is now missing`,
+                baselineValue: baselineTool.description,
+                currentValue: undefined,
+                detectedAt: now,
+            });
+        }
+    }
+    // Check for added tools and changes
+    for (const tool of manifest.tools) {
+        const baselineTool = baselineToolMap.get(tool.name);
+        if (!baselineTool) {
+            // New tool added
+            findings.push({
+                type: "tool-added",
+                severity: AGENT_SEVERITY_MAPPINGS["tool-added"],
+                tool: tool.name,
+                description: `New tool "${tool.name}" was added since baseline`,
+                baselineValue: undefined,
+                currentValue: tool.description,
+                detectedAt: now,
+            });
+            continue;
+        }
+        // Check for description change
+        if (tool.description !== baselineTool.description) {
+            findings.push({
+                type: "description-changed",
+                severity: AGENT_SEVERITY_MAPPINGS["description-changed"],
+                tool: tool.name,
+                description: `Tool "${tool.name}" description changed - may indicate scope change`,
+                baselineValue: baselineTool.description,
+                currentValue: tool.description,
+                detectedAt: now,
+            });
+        }
+        // Check for schema change
+        const currentSchemaHash = hashInputSchema(tool.inputSchema);
+        if (currentSchemaHash !== baselineTool.schemaHash) {
+            findings.push({
+                type: "schema-changed",
+                severity: AGENT_SEVERITY_MAPPINGS["schema-changed"],
+                tool: tool.name,
+                description: `Tool "${tool.name}" input schema changed - may introduce new attack vectors`,
+                baselineValue: `schema hash: ${baselineTool.schemaHash}`,
+                currentValue: `schema hash: ${currentSchemaHash}`,
+                detectedAt: now,
+            });
+        }
+        // Check for permission/hint changes
+        if (tool.destructiveHint !== baselineTool.hints.destructive ||
+            tool.readOnlyHint !== baselineTool.hints.readOnly) {
+            findings.push({
+                type: "permission-changed",
+                severity: AGENT_SEVERITY_MAPPINGS["permission-changed"],
+                tool: tool.name,
+                description: `Tool "${tool.name}" hints changed - may indicate capability change`,
+                baselineValue: JSON.stringify(baselineTool.hints),
+                currentValue: JSON.stringify({
+                    destructive: tool.destructiveHint,
+                    readOnly: tool.readOnlyHint,
+                }),
+                detectedAt: now,
+            });
+        }
+        // Check for overall hash change (catches any other changes)
+        const currentHash = hashToolDefinition(tool);
+        if (currentHash !== baselineTool.hash) {
+            // Only add if not already covered by specific checks above
+            const hasSpecificFinding = findings.some((f) => f.tool === tool.name &&
+                ["description-changed", "schema-changed", "permission-changed"].includes(f.type));
+            if (!hasSpecificFinding) {
+                findings.push({
+                    type: "capability-changed",
+                    severity: AGENT_SEVERITY_MAPPINGS["capability-changed"],
+                    tool: tool.name,
+                    description: `Tool "${tool.name}" definition changed in ways not covered by specific checks`,
+                    baselineValue: `hash: ${baselineTool.hash}`,
+                    currentValue: `hash: ${currentHash}`,
+                    detectedAt: now,
+                });
+            }
+        }
+    }
+    return findings;
+}
+// ============================================================================
+// Main Scanner Function
+// ============================================================================
+/**
+ * Run tool description drift scanner
+ */
+export async function runToolDriftScanner(manifest, options) {
+    const startTime = Date.now();
+    const baselinesDir = options?.baselinesDir || ".vaspera/agent/baselines";
+    // Try to load existing baseline
+    let baseline = await loadBaseline(baselinesDir, manifest.name);
+    // Handle missing baseline
+    if (!baseline) {
+        if (options?.createIfMissing || options?.forceNewBaseline) {
+            // Create and save new baseline
+            baseline = createBaseline(manifest);
+            await saveBaseline(baselinesDir, baseline);
+            return {
+                scanner: "tool-description-drift",
+                findings: [],
+                duration: Date.now() - startTime,
+                success: true,
+                mcpServerName: manifest.name,
+                mcpServerVersion: manifest.version,
+                manifestHash: baseline.manifestHash,
+                version: "1.0.0",
+                rulesUsed: ["baseline-created"],
+            };
+        }
+        // No baseline and not creating - return info finding
+        const findings = [
+            {
+                scanner: "semgrep",
+                ruleId: "tool-drift:no-baseline",
+                file: "mcp-manifest",
+                line: 0,
+                message: `No baseline found for "${manifest.name}". Run with createIfMissing: true to create one.`,
+                severity: "info",
+                confidence: 100,
+                evidence: `Server: ${manifest.name}\nBaselines directory: ${baselinesDir}`,
+                metadata: {
+                    agentScanner: "tool-description-drift",
+                    suggestion: "Create a baseline to enable drift detection",
+                },
+            },
+        ];
+        return {
+            scanner: "tool-description-drift",
+            findings,
+            duration: Date.now() - startTime,
+            success: true,
+            mcpServerName: manifest.name,
+            mcpServerVersion: manifest.version,
+            version: "1.0.0",
+            rulesUsed: ["no-baseline"],
+        };
+    }
+    // Force new baseline if requested
+    if (options?.forceNewBaseline) {
+        baseline = createBaseline(manifest);
+        await saveBaseline(baselinesDir, baseline);
+        return {
+            scanner: "tool-description-drift",
+            findings: [],
+            duration: Date.now() - startTime,
+            success: true,
+            mcpServerName: manifest.name,
+            mcpServerVersion: manifest.version,
+            manifestHash: baseline.manifestHash,
+            version: "1.0.0",
+            rulesUsed: ["baseline-updated"],
+        };
+    }
+    // Detect drift
+    let driftFindings = detectDrift(manifest, baseline);
+    // Filter by type if specified
+    if (options?.skipTypes && options.skipTypes.length > 0) {
+        driftFindings = driftFindings.filter((f) => !options.skipTypes.includes(f.type));
+    }
+    // Convert to deterministic findings
+    const findings = driftFindings.map((df) => ({
+        scanner: "semgrep",
+        ruleId: `tool-drift:${df.type}`,
+        file: "mcp-manifest",
+        line: 0,
+        message: df.description,
+        severity: df.severity,
+        confidence: 100,
+        evidence: `Tool: ${df.tool}\nBaseline: ${df.baselineValue || "N/A"}\nCurrent: ${df.currentValue || "N/A"}`,
+        metadata: {
+            agentScanner: "tool-description-drift",
+            driftType: df.type,
+            tool: df.tool,
+            baselineDate: baseline.signedAt,
+        },
+    }));
+    return {
+        scanner: "tool-description-drift",
+        findings,
+        duration: Date.now() - startTime,
+        success: true,
+        mcpServerName: manifest.name,
+        mcpServerVersion: manifest.version,
+        manifestHash: hashManifest(manifest),
+        version: "1.0.0",
+        rulesUsed: ["baseline-comparison"],
+    };
+}
+/**
+ * Check if drift scanner is available (always true - no external deps)
+ */
+export async function checkToolDriftAvailable() {
+    return {
+        scanner: "tool-description-drift",
+        available: true,
+        version: "1.0.0",
+    };
+}
+/**
+ * Get summary of drift findings
+ */
+export function getDriftSummary(result) {
+    const byType = {
+        "tool-added": 0,
+        "tool-removed": 0,
+        "description-changed": 0,
+        "schema-changed": 0,
+        "permission-changed": 0,
+        "capability-changed": 0,
+    };
+    const bySeverity = {
+        critical: 0,
+        high: 0,
+        medium: 0,
+        low: 0,
+        info: 0,
+    };
+    const affectedTools = new Set();
+    for (const finding of result.findings) {
+        const type = finding.ruleId.replace("tool-drift:", "");
+        if (type in byType) {
+            byType[type]++;
+        }
+        bySeverity[finding.severity]++;
+        const toolName = finding.metadata?.tool;
+        if (toolName) {
+            affectedTools.add(toolName);
+        }
+    }
+    // Calculate baseline age if available
+    let baselineAge;
+    const baselineDate = result.findings[0]?.metadata?.baselineDate;
+    if (baselineDate) {
+        const baselineTime = new Date(baselineDate).getTime();
+        const now = Date.now();
+        baselineAge = Math.floor((now - baselineTime) / (1000 * 60 * 60 * 24));
+    }
+    return {
+        totalDrift: result.findings.length,
+        byType,
+        bySeverity,
+        affectedTools: Array.from(affectedTools),
+        baselineAge,
+    };
+}
+//# sourceMappingURL=tool-description-drift.js.map

package/dist/scanners/agent/tool-description-drift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-description-drift.js","sourceRoot":"","sources":["../../../src/scanners/agent/tool-description-drift.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,IAAI,EAAW,MAAM,MAAM,CAAC;AAYrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAErD,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAuB;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;KAC9C,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,MAAe;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAAqB;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAqB;IAClD,MAAM,KAAK,GAAmB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC;QAC9B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;QAC7C,KAAK,EAAE;YACL,WAAW,EAAE,IAAI,CAAC,eAAe;YACjC,QAAQ,EAAE,IAAI,CAAC,YAAY;SAC5B;QACD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,IAAI;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC;QACpC,KAAK;QACL,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,YAAoB,EACpB,UAAkB;IAElB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,YAAoB,EACpB,QAAwB;IAExB,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,QAAQ,CAAC,UAAU,OAAO,CAAC,CAAC;IACvE,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,QAAqB,EACrB,QAAwB;IAExB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAExE,0BAA0B;IAC1B,KAAK,MAAM,YAAY,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC1C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,uBAAuB,CAAC,cAAc,CAAC;gBACjD,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,WAAW,EAAE,SAAS,YAAY,CAAC,IAAI,8CAA8C;gBACrF,aAAa,EAAE,YAAY,CAAC,WAAW;gBACvC,YAAY,EAAE,SAAS;gBACvB,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,iBAAiB;YACjB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,uBAAuB,CAAC,YAAY,CAAC;gBAC/C,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,aAAa,IAAI,CAAC,IAAI,4BAA4B;gBAC/D,aAAa,EAAE,SAAS;gBACxB,YAAY,EAAE,IAAI,CAAC,WAAW;gBAC9B,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,+BAA+B;QAC/B,IAAI,IAAI,CAAC,WAAW,KAAK,YAAY,CAAC,WAAW,EAAE,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,uBAAuB,CAAC,qBAAqB,CAAC;gBACxD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,mDAAmD;gBAClF,aAAa,EAAE,YAAY,CAAC,WAAW;gBACvC,YAAY,EAAE,IAAI,CAAC,WAAW;gBAC9B,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,0BAA0B;QAC1B,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,iBAAiB,KAAK,YAAY,CAAC,UAAU,EAAE,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,uBAAuB,CAAC,gBAAgB,CAAC;gBACnD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,2DAA2D;gBAC1F,aAAa,EAAE,gBAAgB,YAAY,CAAC,UAAU,EAAE;gBACxD,YAAY,EAAE,gBAAgB,iBAAiB,EAAE;gBACjD,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,oCAAoC;QACpC,IACE,IAAI,CAAC,eAAe,KAAK,YAAY,CAAC,KAAK,CAAC,WAAW;YACvD,IAAI,CAAC,YAAY,KAAK,YAAY,CAAC,KAAK,CAAC,QAAQ,EACjD,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,oBAAoB;gBAC1B,QAAQ,EAAE,uBAAuB,CAAC,oBAAoB,CAAC;gBACvD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,kDAAkD;gBACjF,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC;gBACjD,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC;oBAC3B,WAAW,EAAE,IAAI,CAAC,eAAe;oBACjC,QAAQ,EAAE,IAAI,CAAC,YAAY;iBAC5B,CAAC;gBACF,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,4DAA4D;QAC5D,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,WAAW,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC;YACtC,2DAA2D;YAC3D,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;gBACpB,CAAC,qBAAqB,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CACnF,CAAC;YAEF,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,oBAAoB;oBAC1B,QAAQ,EAAE,uBAAuB,CAAC,oBAAoB,CAAC;oBACvD,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,6DAA6D;oBAC5F,aAAa,EAAE,SAAS,YAAY,CAAC,IAAI,EAAE;oBAC3C,YAAY,EAAE,SAAS,WAAW,EAAE;oBACpC,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAqB,EACrB,OASC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,0BAA0B,CAAC;IAEzE,gCAAgC;IAChC,IAAI,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE/D,0BAA0B;IAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,gBAAgB,EAAE,CAAC;YAC1D,+BAA+B;YAC/B,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAE3C,OAAO;gBACL,OAAO,EAAE,wBAAwB;gBACjC,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAChC,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,QAAQ,CAAC,IAAI;gBAC5B,gBAAgB,EAAE,QAAQ,CAAC,OAAO;gBAClC,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,OAAO,EAAE,OAAO;gBAChB,SAAS,EAAE,CAAC,kBAAkB,CAAC;aAChC,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,MAAM,QAAQ,GAA2B;YACvC;gBACE,OAAO,EAAE,SAAkB;gBAC3B,MAAM,EAAE,wBAAwB;gBAChC,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,0BAA0B,QAAQ,CAAC,IAAI,kDAAkD;gBAClG,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE,WAAW,QAAQ,CAAC,IAAI,0BAA0B,YAAY,EAAE;gBAC1E,QAAQ,EAAE;oBACR,YAAY,EAAE,wBAAwB;oBACtC,UAAU,EAAE,6CAA6C;iBAC1D;aACF;SACF,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,wBAAwB;YACjC,QAAQ;YACR,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAChC,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,QAAQ,CAAC,IAAI;YAC5B,gBAAgB,EAAE,QAAQ,CAAC,OAAO;YAClC,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,CAAC,aAAa,CAAC;SAC3B,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,IAAI,OAAO,EAAE,gBAAgB,EAAE,CAAC;QAC9B,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAE3C,OAAO;YACL,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAChC,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,QAAQ,CAAC,IAAI;YAC5B,gBAAgB,EAAE,QAAQ,CAAC,OAAO;YAClC,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,CAAC,kBAAkB,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,eAAe;IACf,IAAI,aAAa,GAAG,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEpD,8BAA8B;IAC9B,IAAI,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,oCAAoC;IACpC,MAAM,QAAQ,GAA2B,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,SAAkB;QAC3B,MAAM,EAAE,cAAc,EAAE,CAAC,IAAI,EAAE;QAC/B,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,EAAE,CAAC,WAAW;QACvB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,UAAU,EAAE,GAAG;QACf,QAAQ,EAAE,SAAS,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC,aAAa,IAAI,KAAK,cAAc,EAAE,CAAC,YAAY,IAAI,KAAK,EAAE;QAC1G,QAAQ,EAAE;YACR,YAAY,EAAE,wBAAwB;YACtC,SAAS,EAAE,EAAE,CAAC,IAAI;YAClB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,YAAY,EAAE,QAAQ,CAAC,QAAQ;SAChC;KACF,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,OAAO,EAAE,wBAAwB;QACjC,QAAQ;QACR,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QAChC,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,QAAQ,CAAC,IAAI;QAC5B,gBAAgB,EAAE,QAAQ,CAAC,OAAO;QAClC,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC;QACpC,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,CAAC,qBAAqB,CAAC;KACnC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAK3C,OAAO;QACL,OAAO,EAAE,wBAAwB;QACjC,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAA0B;IAOxD,MAAM,MAAM,GAA8B;QACxC,YAAY,EAAE,CAAC;QACf,cAAc,EAAE,CAAC;QACjB,qBAAqB,EAAE,CAAC;QACxB,gBAAgB,EAAE,CAAC;QACnB,oBAAoB,EAAE,CAAC;QACvB,oBAAoB,EAAE,CAAC;KACxB,CAAC;IAEF,MAAM,UAAU,GAA6B;QAC3C,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAExC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAc,CAAC;QACpE,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACjB,CAAC;QACD,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAE/B,MAAM,QAAQ,GAAI,OAAO,CAAC,QAA8B,EAAE,IAAI,CAAC;QAC/D,IAAI,QAAQ,EAAE,CAAC;YACb,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,WAA+B,CAAC;IACpC,MAAM,YAAY,GAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAsC,EAAE,YAAY,CAAC;IAC/F,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QAClC,MAAM;QACN,UAAU;QACV,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;QACxC,WAAW;KACZ,CAAC;AACJ,CAAC"}