xypriss 1.0.0 → 1.1.0

package/dist/esm/security-middleware.js

@@ -0,0 +1,413 @@
+import { XyPrissSecurity } from './mods/security/src/core/crypto.js';
+import { SecureObject } from './mods/security/src/components/secure-object/core/secure-object-core.js';
+import './mods/security/src/core/hash/hash-core.js';
+import './mods/security/src/core/hash/hash-types.js';
+import 'crypto';
+import './mods/security/src/core/hash/hash-security.js';
+import './mods/security/src/core/hash/hash-advanced.js';
+import './mods/security/src/algorithms/hash-algorithms.js';
+import './mods/security/src/core/random/random-types.js';
+import './mods/security/src/core/random/random-sources.js';
+import 'nehonix-uri-processor';
+import './mods/security/src/utils/memory/index.js';
+import './mods/security/src/types.js';
+import './mods/security/src/types/secure-memory.js';
+import './mods/security/src/components/secure-string/advanced/entropy-analyzer.js';
+import './mods/security/src/components/secure-string/advanced/quantum-safe.js';
+import './mods/security/src/components/secure-string/advanced/performance-monitor.js';
+import 'nehoid';
+
+/**
+ * XyPrissJS Security Middleware
+ * Military-grade security middleware for Express applications
+ */
+class SecurityMiddleware {
+    constructor(config = {}) {
+        this.bruteForceMap = new Map();
+        this.config = {
+            level: "enhanced",
+            csrf: true,
+            helmet: true,
+            xss: true,
+            sqlInjection: true,
+            bruteForce: true,
+            encryption: {
+                algorithm: "AES-256-GCM",
+                keySize: 32,
+            },
+            authentication: {
+                jwt: {
+                    secret: XyPrissSecurity.generateSecureToken({
+                        length: 32,
+                        entropy: "high",
+                    }),
+                    expiresIn: "1h",
+                    algorithm: "HS256",
+                },
+                session: {
+                    secret: XyPrissSecurity.generateSecureToken({
+                        length: 32,
+                        entropy: "high",
+                    }),
+                    name: "XyPriss.sid",
+                    cookie: {
+                        maxAge: 24 * 60 * 60 * 1000, // 24 hours
+                        secure: true,
+                        httpOnly: true,
+                        sameSite: "strict",
+                    },
+                },
+            },
+            ...config,
+        };
+    }
+    /**
+     * Get the main security middleware
+     */
+    getMiddleware() {
+        return (req, res, next) => {
+            // Apply security measures based on level
+            this.applySecurityHeaders(req, res);
+            this.checkBruteForce(req, res, next);
+        };
+    }
+    /**
+     * Apply security headers
+     */
+    applySecurityHeaders(req, res) {
+        if (this.config.helmet) {
+            // Security headers (helmet.js equivalent)
+            res.set({
+                "X-Content-Type-Options": "nosniff",
+                "X-Frame-Options": "DENY",
+                "X-XSS-Protection": "1; mode=block",
+                "Strict-Transport-Security": "max-age=31536000; includeSubDomains",
+                "Referrer-Policy": "strict-origin-when-cross-origin",
+                "Permissions-Policy": "geolocation=(), microphone=(), camera=()",
+                "Content-Security-Policy": this.getCSPHeader(),
+            });
+        }
+        // Remove server information
+        res.removeHeader("X-Powered-By");
+        res.set("Server", "XyPrissJS");
+    }
+    /**
+     * Get Content Security Policy header
+     */
+    getCSPHeader() {
+        switch (this.config.level) {
+            case "maximum":
+                return "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none';";
+            case "enhanced":
+                return "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self';";
+            case "basic":
+            default:
+                return "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';";
+        }
+    }
+    /**
+     * Check for brute force attacks
+     */
+    checkBruteForce(req, res, next) {
+        if (!this.config.bruteForce) {
+            return next();
+        }
+        const ip = this.getClientIP(req);
+        const now = Date.now();
+        const maxAttempts = 10;
+        const windowMs = 15 * 60 * 1000; // 15 minutes
+        const blockDuration = 60 * 60 * 1000; // 1 hour
+        let record = this.bruteForceMap.get(ip);
+        if (!record) {
+            record = { attempts: 0, lastAttempt: now };
+            this.bruteForceMap.set(ip, record);
+        }
+        // Check if IP is currently blocked
+        if (record.blockedUntil && record.blockedUntil > now) {
+            return res.status(429).json({
+                error: "IP temporarily blocked due to suspicious activity",
+                retryAfter: Math.ceil((record.blockedUntil - now) / 1000),
+            });
+        }
+        // Reset attempts if window has passed
+        if (now - record.lastAttempt > windowMs) {
+            record.attempts = 0;
+        }
+        // Check for failed authentication on this request
+        res.on("finish", () => {
+            if (res.statusCode === 401 || res.statusCode === 403) {
+                record.attempts++;
+                record.lastAttempt = now;
+                if (record.attempts >= maxAttempts) {
+                    record.blockedUntil = now + blockDuration;
+                    console.warn(`IP ${ip} blocked for ${blockDuration / 1000}s after ${maxAttempts} failed attempts`);
+                }
+            }
+        });
+        next();
+    }
+    /**
+     * Detect obfuscated SQL injection attempts using entropy analysis
+     */
+    detectObfuscatedSQLInjection(input) {
+        // Check for excessive URL encoding
+        const urlEncodedCount = (input.match(/%[0-9a-f]{2}/gi) || []).length;
+        if (urlEncodedCount > input.length * 0.3) {
+            return true;
+        }
+        // Check for excessive hex encoding
+        const hexCount = (input.match(/\\x[0-9a-f]{2}/gi) || []).length;
+        if (hexCount > 3) {
+            return true;
+        }
+        // Check for suspicious character sequences
+        const suspiciousPatterns = [
+            /(\+|\s)(and|or)(\+|\s)/gi,
+            /[0-9]+\s*[=<>]\s*[0-9]+/gi,
+            /(char|ascii)\s*\(\s*[0-9]+/gi,
+            /concat\s*\(/gi,
+        ];
+        return suspiciousPatterns.some((pattern) => pattern.test(input));
+    }
+    /**
+     * Get client IP address
+     */
+    getClientIP(req) {
+        return (req.headers["x-forwarded-for"]?.split(",")[0] ||
+            req.headers["x-real-ip"] ||
+            req.connection?.remoteAddress ||
+            req.socket?.remoteAddress ||
+            req.ip ||
+            "unknown");
+    }
+    /**
+     * XSS Protection middleware
+     */
+    xssProtection() {
+        return (req, res, next) => {
+            if (!this.config.xss) {
+                return next();
+            }
+            // Sanitize input
+            this.sanitizeObject(req.body);
+            this.sanitizeObject(req.query);
+            this.sanitizeObject(req.params);
+            next();
+        };
+    }
+    /**
+     * SQL Injection protection middleware
+     */
+    sqlInjectionProtection() {
+        return (req, res, next) => {
+            if (!this.config.sqlInjection) {
+                return next();
+            }
+            //  SQL injection patterns with comprehensive coverage
+            const sqlPatterns = [
+                // SQL keywords
+                /(\b(SELECT|INSERT|UPDATE|DELETE|DROP|CREATE|ALTER|EXEC|UNION|SCRIPT|TRUNCATE|GRANT|REVOKE)\b)/gi,
+                // SQL injection characters and sequences
+                /(--|\/\*|\*\/|;|'|"|`|\||&|\+|%|<|>|=|\(|\))/g,
+                // Boolean-based injection patterns
+                /(\b(OR|AND)\b\s*['"]*\s*[0-9]+\s*['"]*\s*[=<>])/gi,
+                // Union-based injection
+                /(\bUNION\b.*\bSELECT\b)/gi,
+                // Time-based injection
+                /(\b(SLEEP|WAITFOR|DELAY)\b\s*\()/gi,
+                // Error-based injection
+                /(\b(CAST|CONVERT|EXTRACTVALUE|UPDATEXML)\b.*\()/gi,
+                // Hex encoding attempts
+                /(0x[0-9a-f]+)/gi,
+                // SQL functions commonly used in attacks
+                /(\b(CHAR|ASCII|SUBSTRING|CONCAT|VERSION|DATABASE|USER|SCHEMA)\b\s*\()/gi,
+            ];
+            const validateSQLInput = (obj, path = "") => {
+                if (typeof obj === "string") {
+                    // Use XyPrissJS pattern matching for enhanced detection
+                    const normalizedInput = obj
+                        .toLowerCase()
+                        .replace(/\s+/g, " ")
+                        .trim();
+                    // Check against SQL injection patterns
+                    for (const pattern of sqlPatterns) {
+                        if (pattern.test(normalizedInput)) {
+                            console.warn(` SQL injection pattern detected in ${path}: ${pattern.source}`);
+                            return true;
+                        }
+                    }
+                    // Additional entropy-based detection for obfuscated attacks
+                    if (this.detectObfuscatedSQLInjection(normalizedInput)) {
+                        console.warn(` Obfuscated SQL injection detected in ${path}`);
+                        return true;
+                    }
+                    return false;
+                }
+                if (typeof obj === "object" && obj !== null) {
+                    for (const [key, value] of Object.entries(obj)) {
+                        if (validateSQLInput(value, `${path}.${key}`)) {
+                            return true;
+                        }
+                    }
+                }
+                return false;
+            };
+            if (validateSQLInput(req.body, "body") ||
+                validateSQLInput(req.query, "query") ||
+                validateSQLInput(req.params, "params")) {
+                console.warn(` SQL injection attempt detected from ${this.getClientIP(req)}`);
+                return res.status(400).json({
+                    error: "Invalid input detected",
+                });
+            }
+            next();
+        };
+    }
+    /**
+     * CSRF Protection middleware
+     */
+    csrfProtection() {
+        return (req, res, next) => {
+            if (!this.config.csrf) {
+                return next();
+            }
+            // Skip CSRF for safe methods
+            if (["GET", "HEAD", "OPTIONS"].includes(req.method)) {
+                return next();
+            }
+            const token = req.headers["x-csrf-token"] ||
+                req.body?._csrf ||
+                req.query?._csrf;
+            const sessionToken = req.session?.csrfToken;
+            if (!token ||
+                !sessionToken ||
+                !XyPrissSecurity.constantTimeEqual(token, sessionToken)) {
+                return res.status(403).json({
+                    error: "CSRF token validation failed",
+                });
+            }
+            next();
+        };
+    }
+    /**
+     * Request encryption middleware
+     */
+    requestEncryption() {
+        const self = this; // Capture 'this' context
+        return (req, res, next) => {
+            if (!self.config.encryption) {
+                return next();
+            }
+            // Check if request is encrypted
+            const encryptedHeader = req.headers["x-encrypted-request"];
+            if (encryptedHeader && req.body) {
+                try {
+                    // Decryption using SecureObject
+                    const encryptedData = req.body.data;
+                    const secureObj = new SecureObject({ data: encryptedData });
+                    secureObj.setEncryptionKey(self.config.authentication?.jwt?.secret || "default-key");
+                    const decryptedData = secureObj.toObject();
+                    req.body = JSON.parse(decryptedData.data);
+                }
+                catch (error) {
+                    return res.status(400).json({
+                        error: "Failed to decrypt request",
+                    });
+                }
+            }
+            // Encrypt response if requested
+            const originalJson = res.json;
+            res.json = function (data) {
+                if (req.headers["x-encrypt-response"]) {
+                    // Encryption using SecureObject
+                    const secureObj = new SecureObject({
+                        data: JSON.stringify(data),
+                    });
+                    secureObj.setEncryptionKey(self.config.authentication?.jwt?.secret || "default-key");
+                    secureObj.encryptAll();
+                    const encrypted = secureObj.exportData();
+                    res.set("X-Encrypted-Response", "true");
+                    return originalJson.call(this, { data: encrypted });
+                }
+                return originalJson.call(this, data);
+            };
+            next();
+        };
+    }
+    /**
+     * Sanitize object recursively
+     */
+    sanitizeObject(obj) {
+        if (typeof obj === "string") {
+            return this.sanitizeString(obj);
+        }
+        if (typeof obj === "object" && obj !== null) {
+            for (const key in obj) {
+                if (obj.hasOwnProperty(key)) {
+                    obj[key] = this.sanitizeObject(obj[key]);
+                }
+            }
+        }
+        return obj;
+    }
+    /**
+     * Sanitize string for XSS
+     */
+    sanitizeString(str) {
+        return str
+            .replace(/</g, "&lt;")
+            .replace(/>/g, "&gt;")
+            .replace(/"/g, "&quot;")
+            .replace(/'/g, "&#x27;")
+            .replace(/\//g, "&#x2F;")
+            .replace(/javascript:/gi, "")
+            .replace(/on\w+=/gi, "");
+    }
+    /**
+     * Get security configuration
+     */
+    getConfig() {
+        return this.config;
+    }
+    /**
+     * Get brute force statistics
+     */
+    getBruteForceStats() {
+        const stats = {
+            totalIPs: this.bruteForceMap.size,
+            blockedIPs: 0,
+            suspiciousIPs: 0,
+        };
+        const now = Date.now();
+        for (const [_ip, record] of this.bruteForceMap.entries()) {
+            if (record.blockedUntil && record.blockedUntil > now) {
+                stats.blockedIPs++;
+            }
+            else if (record.attempts > 3) {
+                stats.suspiciousIPs++;
+            }
+        }
+        return stats;
+    }
+    /**
+     * Unblock IP address
+     */
+    unblockIP(ip) {
+        const record = this.bruteForceMap.get(ip);
+        if (record) {
+            delete record.blockedUntil;
+            record.attempts = 0;
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Clear all brute force records
+     */
+    clearBruteForceRecords() {
+        this.bruteForceMap.clear();
+    }
+}
+
+export { SecurityMiddleware };
+//# sourceMappingURL=security-middleware.js.map

package/dist/esm/security-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-middleware.js","sources":["../../src/security-middleware.ts"],"sourcesContent":[null],"names":["XyPrissJS"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;;;AAGG;MASU,kBAAkB,CAAA;AAO3B,IAAA,WAAA,CAAY,SAAyB,EAAE,EAAA;AAL/B,QAAA,IAAA,CAAA,aAAa,GAAG,IAAI,GAAG,EAG5B,CAAC;QAGA,IAAI,CAAC,MAAM,GAAG;AACV,YAAA,KAAK,EAAE,UAAU;AACjB,YAAA,IAAI,EAAE,IAAI;AACV,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,YAAY,EAAE,IAAI;AAClB,YAAA,UAAU,EAAE,IAAI;AAChB,YAAA,UAAU,EAAE;AACR,gBAAA,SAAS,EAAE,aAAa;AACxB,gBAAA,OAAO,EAAE,EAAE;AACd,aAAA;AACD,YAAA,cAAc,EAAE;AACZ,gBAAA,GAAG,EAAE;AACD,oBAAA,MAAM,EAAEA,eAAS,CAAC,mBAAmB,CAAC;AAClC,wBAAA,MAAM,EAAE,EAAE;AACV,wBAAA,OAAO,EAAE,MAAM;qBAClB,CAAC;AACF,oBAAA,SAAS,EAAE,IAAI;AACf,oBAAA,SAAS,EAAE,OAAO;AACrB,iBAAA;AACD,gBAAA,OAAO,EAAE;AACL,oBAAA,MAAM,EAAEA,eAAS,CAAC,mBAAmB,CAAC;AAClC,wBAAA,MAAM,EAAE,EAAE;AACV,wBAAA,OAAO,EAAE,MAAM;qBAClB,CAAC;AACF,oBAAA,IAAI,EAAE,aAAa;AACnB,oBAAA,MAAM,EAAE;wBACJ,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;AAC3B,wBAAA,MAAM,EAAE,IAAI;AACZ,wBAAA,QAAQ,EAAE,IAAI;AACd,wBAAA,QAAQ,EAAE,QAAQ;AACrB,qBAAA;AACJ,iBAAA;AACJ,aAAA;AACD,YAAA,GAAG,MAAM;SACZ,CAAC;KACL;AAED;;AAEG;IACI,aAAa,GAAA;AAChB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;;AAErC,YAAA,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACzC,SAAC,CAAC;KACL;AAED;;AAEG;IACK,oBAAoB,CAAC,GAAQ,EAAE,GAAQ,EAAA;AAC3C,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;;YAEpB,GAAG,CAAC,GAAG,CAAC;AACJ,gBAAA,wBAAwB,EAAE,SAAS;AACnC,gBAAA,iBAAiB,EAAE,MAAM;AACzB,gBAAA,kBAAkB,EAAE,eAAe;AACnC,gBAAA,2BAA2B,EACvB,qCAAqC;AACzC,gBAAA,iBAAiB,EAAE,iCAAiC;AACpD,gBAAA,oBAAoB,EAChB,0CAA0C;AAC9C,gBAAA,yBAAyB,EAAE,IAAI,CAAC,YAAY,EAAE;AACjD,aAAA,CAAC,CAAC;SACN;;AAGD,QAAA,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;AACjC,QAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;KAClC;AAED;;AAEG;IACK,YAAY,GAAA;AAChB,QAAA,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK;AACrB,YAAA,KAAK,SAAS;AACV,gBAAA,OAAO,6JAA6J,CAAC;AACzK,YAAA,KAAK,UAAU;AACX,gBAAA,OAAO,mKAAmK,CAAC;AAC/K,YAAA,KAAK,OAAO,CAAC;AACb,YAAA;AACI,gBAAA,OAAO,wGAAwG,CAAC;SACvH;KACJ;AAED;;AAEG;AACK,IAAA,eAAe,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAA;AACjD,QAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;YACzB,OAAO,IAAI,EAAE,CAAC;SACjB;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;AACjC,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAChC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAErC,IAAI,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,EAAE;YACT,MAAM,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;YAC3C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;SACtC;;QAGD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,GAAG,GAAG,EAAE;YAClD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACxB,gBAAA,KAAK,EAAE,mDAAmD;AAC1D,gBAAA,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,GAAG,GAAG,IAAI,IAAI,CAAC;AAC5D,aAAA,CAAC,CAAC;SACN;;QAGD,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,GAAG,QAAQ,EAAE;AACrC,YAAA,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;SACvB;;AAGD,QAAA,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAK;AAClB,YAAA,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;gBAClD,MAAO,CAAC,QAAQ,EAAE,CAAC;AACnB,gBAAA,MAAO,CAAC,WAAW,GAAG,GAAG,CAAC;AAE1B,gBAAA,IAAI,MAAO,CAAC,QAAQ,IAAI,WAAW,EAAE;AACjC,oBAAA,MAAO,CAAC,YAAY,GAAG,GAAG,GAAG,aAAa,CAAC;AAC3C,oBAAA,OAAO,CAAC,IAAI,CACR,CAAA,GAAA,EAAM,EAAE,CAAA,aAAA,EACJ,aAAa,GAAG,IACpB,CAAA,QAAA,EAAW,WAAW,CAAA,gBAAA,CAAkB,CAC3C,CAAC;iBACL;aACJ;AACL,SAAC,CAAC,CAAC;AAEH,QAAA,IAAI,EAAE,CAAC;KACV;AAED;;AAEG;AACK,IAAA,4BAA4B,CAAC,KAAa,EAAA;;AAE9C,QAAA,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC;QACrE,IAAI,eAAe,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE;AACtC,YAAA,OAAO,IAAI,CAAC;SACf;;AAGD,QAAA,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC;AAChE,QAAA,IAAI,QAAQ,GAAG,CAAC,EAAE;AACd,YAAA,OAAO,IAAI,CAAC;SACf;;AAGD,QAAA,MAAM,kBAAkB,GAAG;YACvB,0BAA0B;YAC1B,2BAA2B;YAC3B,8BAA8B;YAC9B,eAAe;SAClB,CAAC;AAEF,QAAA,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;KACpE;AAED;;AAEG;AACK,IAAA,WAAW,CAAC,GAAQ,EAAA;AACxB,QAAA,QACI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC7C,YAAA,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;YACxB,GAAG,CAAC,UAAU,EAAE,aAAa;YAC7B,GAAG,CAAC,MAAM,EAAE,aAAa;AACzB,YAAA,GAAG,CAAC,EAAE;AACN,YAAA,SAAS,EACX;KACL;AAED;;AAEG;IACI,aAAa,GAAA;AAChB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;AACrC,YAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;gBAClB,OAAO,IAAI,EAAE,CAAC;aACjB;;AAGD,YAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9B,YAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC/B,YAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAEhC,YAAA,IAAI,EAAE,CAAC;AACX,SAAC,CAAC;KACL;AAED;;AAEG;IACI,sBAAsB,GAAA;AACzB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;AACrC,YAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE;gBAC3B,OAAO,IAAI,EAAE,CAAC;aACjB;;AAGD,YAAA,MAAM,WAAW,GAAG;;gBAEhB,iGAAiG;;gBAEjG,+CAA+C;;gBAE/C,mDAAmD;;gBAEnD,2BAA2B;;gBAE3B,oCAAoC;;gBAEpC,mDAAmD;;gBAEnD,iBAAiB;;gBAEjB,yEAAyE;aAC5E,CAAC;YAEF,MAAM,gBAAgB,GAAG,CAAC,GAAQ,EAAE,IAAI,GAAG,EAAE,KAAa;AACtD,gBAAA,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;;oBAEzB,MAAM,eAAe,GAAG,GAAG;AACtB,yBAAA,WAAW,EAAE;AACb,yBAAA,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;AACpB,yBAAA,IAAI,EAAE,CAAC;;AAGZ,oBAAA,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE;AAC/B,wBAAA,IAAI,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE;4BAC/B,OAAO,CAAC,IAAI,CACR,CAAsC,mCAAA,EAAA,IAAI,CAAK,EAAA,EAAA,OAAO,CAAC,MAAM,CAAE,CAAA,CAClE,CAAC;AACF,4BAAA,OAAO,IAAI,CAAC;yBACf;qBACJ;;AAGD,oBAAA,IAAI,IAAI,CAAC,4BAA4B,CAAC,eAAe,CAAC,EAAE;AACpD,wBAAA,OAAO,CAAC,IAAI,CACR,yCAAyC,IAAI,CAAA,CAAE,CAClD,CAAC;AACF,wBAAA,OAAO,IAAI,CAAC;qBACf;AAED,oBAAA,OAAO,KAAK,CAAC;iBAChB;gBAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;AACzC,oBAAA,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;wBAC5C,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,CAAE,CAAC,EAAE;AAC3C,4BAAA,OAAO,IAAI,CAAC;yBACf;qBACJ;iBACJ;AAED,gBAAA,OAAO,KAAK,CAAC;AACjB,aAAC,CAAC;AAEF,YAAA,IACI,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC;AAClC,gBAAA,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC;gBACpC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,EACxC;AACE,gBAAA,OAAO,CAAC,IAAI,CACR,CAAA,qCAAA,EAAwC,IAAI,CAAC,WAAW,CACpD,GAAG,CACN,CAAE,CAAA,CACN,CAAC;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACxB,oBAAA,KAAK,EAAE,wBAAwB;AAClC,iBAAA,CAAC,CAAC;aACN;AAED,YAAA,IAAI,EAAE,CAAC;AACX,SAAC,CAAC;KACL;AAED;;AAEG;IACI,cAAc,GAAA;AACjB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;AACrC,YAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACnB,OAAO,IAAI,EAAE,CAAC;aACjB;;AAGD,YAAA,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;gBACjD,OAAO,IAAI,EAAE,CAAC;aACjB;AAED,YAAA,MAAM,KAAK,GACP,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;gBAC3B,GAAG,CAAC,IAAI,EAAE,KAAK;AACf,gBAAA,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC;AAErB,YAAA,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC;AAE5C,YAAA,IACI,CAAC,KAAK;AACN,gBAAA,CAAC,YAAY;gBACb,CAACA,eAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,EACnD;gBACE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACxB,oBAAA,KAAK,EAAE,8BAA8B;AACxC,iBAAA,CAAC,CAAC;aACN;AAED,YAAA,IAAI,EAAE,CAAC;AACX,SAAC,CAAC;KACL;AAED;;AAEG;IACI,iBAAiB,GAAA;AACpB,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC;AAElB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;AACrC,YAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;gBACzB,OAAO,IAAI,EAAE,CAAC;aACjB;;YAGD,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE3D,YAAA,IAAI,eAAe,IAAI,GAAG,CAAC,IAAI,EAAE;AAC7B,gBAAA,IAAI;;AAEA,oBAAA,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBACpC,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;AAC5D,oBAAA,SAAS,CAAC,gBAAgB,CACtB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,MAAM,IAAI,aAAa,CAC3D,CAAC;AACF,oBAAA,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;oBAC3C,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;iBAC7C;gBAAC,OAAO,KAAK,EAAE;oBACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACxB,wBAAA,KAAK,EAAE,2BAA2B;AACrC,qBAAA,CAAC,CAAC;iBACN;aACJ;;AAGD,YAAA,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;AAC9B,YAAA,GAAG,CAAC,IAAI,GAAG,UAAU,IAAS,EAAA;AAC1B,gBAAA,IAAI,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE;;AAEnC,oBAAA,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC;AAC/B,wBAAA,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;AAC7B,qBAAA,CAAC,CAAC;AACH,oBAAA,SAAS,CAAC,gBAAgB,CACtB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,MAAM,IAAI,aAAa,CAC3D,CAAC;oBACF,SAAS,CAAC,UAAU,EAAE,CAAC;AACvB,oBAAA,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;AACzC,oBAAA,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;AACxC,oBAAA,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;iBACvD;gBACD,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACzC,aAAC,CAAC;AAEF,YAAA,IAAI,EAAE,CAAC;AACX,SAAC,CAAC;KACL;AAED;;AAEG;AACK,IAAA,cAAc,CAAC,GAAQ,EAAA;AAC3B,QAAA,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;AACzB,YAAA,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;SACnC;QAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;AACzC,YAAA,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE;AACnB,gBAAA,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE;AACzB,oBAAA,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;iBAC5C;aACJ;SACJ;AAED,QAAA,OAAO,GAAG,CAAC;KACd;AAED;;AAEG;AACK,IAAA,cAAc,CAAC,GAAW,EAAA;AAC9B,QAAA,OAAO,GAAG;AACL,aAAA,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;AACrB,aAAA,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;AACrB,aAAA,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;AACvB,aAAA,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;AACvB,aAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;AACxB,aAAA,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;AAC5B,aAAA,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;KAChC;AAED;;AAEG;IACI,SAAS,GAAA;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC;KACtB;AAED;;AAEG;IACI,kBAAkB,GAAA;AACrB,QAAA,MAAM,KAAK,GAAG;AACV,YAAA,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI;AACjC,YAAA,UAAU,EAAE,CAAC;AACb,YAAA,aAAa,EAAE,CAAC;SACnB,CAAC;AAEF,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAEvB,QAAA,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE;YACtD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,GAAG,GAAG,EAAE;gBAClD,KAAK,CAAC,UAAU,EAAE,CAAC;aACtB;AAAM,iBAAA,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE;gBAC5B,KAAK,CAAC,aAAa,EAAE,CAAC;aACzB;SACJ;AAED,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;AAEG;AACI,IAAA,SAAS,CAAC,EAAU,EAAA;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE;YACR,OAAO,MAAM,CAAC,YAAY,CAAC;AAC3B,YAAA,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;AACpB,YAAA,OAAO,IAAI,CAAC;SACf;AACD,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;AAEG;IACI,sBAAsB,GAAA;AACzB,QAAA,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;KAC9B;AACJ;;;;"}