xypriss 1.1.0 → 1.1.3

package/dist/cjs/security-middleware.js

@@ -1,415 +0,0 @@
-'use strict';
-
-var crypto = require('./mods/security/src/core/crypto.js');
-var secureObjectCore = require('./mods/security/src/components/secure-object/core/secure-object-core.js');
-require('./mods/security/src/core/hash/hash-core.js');
-require('./mods/security/src/core/hash/hash-types.js');
-require('crypto');
-require('./mods/security/src/core/hash/hash-security.js');
-require('./mods/security/src/core/hash/hash-advanced.js');
-require('./mods/security/src/algorithms/hash-algorithms.js');
-require('./mods/security/src/core/random/random-types.js');
-require('./mods/security/src/core/random/random-sources.js');
-require('nehonix-uri-processor');
-require('./mods/security/src/utils/memory/index.js');
-require('./mods/security/src/types.js');
-require('./mods/security/src/types/secure-memory.js');
-require('./mods/security/src/components/secure-string/advanced/entropy-analyzer.js');
-require('./mods/security/src/components/secure-string/advanced/quantum-safe.js');
-require('./mods/security/src/components/secure-string/advanced/performance-monitor.js');
-require('nehoid');
-
-/**
- * XyPrissJS Security Middleware
- * Military-grade security middleware for Express applications
- */
-class SecurityMiddleware {
-    constructor(config = {}) {
-        this.bruteForceMap = new Map();
-        this.config = {
-            level: "enhanced",
-            csrf: true,
-            helmet: true,
-            xss: true,
-            sqlInjection: true,
-            bruteForce: true,
-            encryption: {
-                algorithm: "AES-256-GCM",
-                keySize: 32,
-            },
-            authentication: {
-                jwt: {
-                    secret: crypto.XyPrissSecurity.generateSecureToken({
-                        length: 32,
-                        entropy: "high",
-                    }),
-                    expiresIn: "1h",
-                    algorithm: "HS256",
-                },
-                session: {
-                    secret: crypto.XyPrissSecurity.generateSecureToken({
-                        length: 32,
-                        entropy: "high",
-                    }),
-                    name: "XyPriss.sid",
-                    cookie: {
-                        maxAge: 24 * 60 * 60 * 1000, // 24 hours
-                        secure: true,
-                        httpOnly: true,
-                        sameSite: "strict",
-                    },
-                },
-            },
-            ...config,
-        };
-    }
-    /**
-     * Get the main security middleware
-     */
-    getMiddleware() {
-        return (req, res, next) => {
-            // Apply security measures based on level
-            this.applySecurityHeaders(req, res);
-            this.checkBruteForce(req, res, next);
-        };
-    }
-    /**
-     * Apply security headers
-     */
-    applySecurityHeaders(req, res) {
-        if (this.config.helmet) {
-            // Security headers (helmet.js equivalent)
-            res.set({
-                "X-Content-Type-Options": "nosniff",
-                "X-Frame-Options": "DENY",
-                "X-XSS-Protection": "1; mode=block",
-                "Strict-Transport-Security": "max-age=31536000; includeSubDomains",
-                "Referrer-Policy": "strict-origin-when-cross-origin",
-                "Permissions-Policy": "geolocation=(), microphone=(), camera=()",
-                "Content-Security-Policy": this.getCSPHeader(),
-            });
-        }
-        // Remove server information
-        res.removeHeader("X-Powered-By");
-        res.set("Server", "XyPrissJS");
-    }
-    /**
-     * Get Content Security Policy header
-     */
-    getCSPHeader() {
-        switch (this.config.level) {
-            case "maximum":
-                return "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none';";
-            case "enhanced":
-                return "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self';";
-            case "basic":
-            default:
-                return "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';";
-        }
-    }
-    /**
-     * Check for brute force attacks
-     */
-    checkBruteForce(req, res, next) {
-        if (!this.config.bruteForce) {
-            return next();
-        }
-        const ip = this.getClientIP(req);
-        const now = Date.now();
-        const maxAttempts = 10;
-        const windowMs = 15 * 60 * 1000; // 15 minutes
-        const blockDuration = 60 * 60 * 1000; // 1 hour
-        let record = this.bruteForceMap.get(ip);
-        if (!record) {
-            record = { attempts: 0, lastAttempt: now };
-            this.bruteForceMap.set(ip, record);
-        }
-        // Check if IP is currently blocked
-        if (record.blockedUntil && record.blockedUntil > now) {
-            return res.status(429).json({
-                error: "IP temporarily blocked due to suspicious activity",
-                retryAfter: Math.ceil((record.blockedUntil - now) / 1000),
-            });
-        }
-        // Reset attempts if window has passed
-        if (now - record.lastAttempt > windowMs) {
-            record.attempts = 0;
-        }
-        // Check for failed authentication on this request
-        res.on("finish", () => {
-            if (res.statusCode === 401 || res.statusCode === 403) {
-                record.attempts++;
-                record.lastAttempt = now;
-                if (record.attempts >= maxAttempts) {
-                    record.blockedUntil = now + blockDuration;
-                    console.warn(`IP ${ip} blocked for ${blockDuration / 1000}s after ${maxAttempts} failed attempts`);
-                }
-            }
-        });
-        next();
-    }
-    /**
-     * Detect obfuscated SQL injection attempts using entropy analysis
-     */
-    detectObfuscatedSQLInjection(input) {
-        // Check for excessive URL encoding
-        const urlEncodedCount = (input.match(/%[0-9a-f]{2}/gi) || []).length;
-        if (urlEncodedCount > input.length * 0.3) {
-            return true;
-        }
-        // Check for excessive hex encoding
-        const hexCount = (input.match(/\\x[0-9a-f]{2}/gi) || []).length;
-        if (hexCount > 3) {
-            return true;
-        }
-        // Check for suspicious character sequences
-        const suspiciousPatterns = [
-            /(\+|\s)(and|or)(\+|\s)/gi,
-            /[0-9]+\s*[=<>]\s*[0-9]+/gi,
-            /(char|ascii)\s*\(\s*[0-9]+/gi,
-            /concat\s*\(/gi,
-        ];
-        return suspiciousPatterns.some((pattern) => pattern.test(input));
-    }
-    /**
-     * Get client IP address
-     */
-    getClientIP(req) {
-        return (req.headers["x-forwarded-for"]?.split(",")[0] ||
-            req.headers["x-real-ip"] ||
-            req.connection?.remoteAddress ||
-            req.socket?.remoteAddress ||
-            req.ip ||
-            "unknown");
-    }
-    /**
-     * XSS Protection middleware
-     */
-    xssProtection() {
-        return (req, res, next) => {
-            if (!this.config.xss) {
-                return next();
-            }
-            // Sanitize input
-            this.sanitizeObject(req.body);
-            this.sanitizeObject(req.query);
-            this.sanitizeObject(req.params);
-            next();
-        };
-    }
-    /**
-     * SQL Injection protection middleware
-     */
-    sqlInjectionProtection() {
-        return (req, res, next) => {
-            if (!this.config.sqlInjection) {
-                return next();
-            }
-            //  SQL injection patterns with comprehensive coverage
-            const sqlPatterns = [
-                // SQL keywords
-                /(\b(SELECT|INSERT|UPDATE|DELETE|DROP|CREATE|ALTER|EXEC|UNION|SCRIPT|TRUNCATE|GRANT|REVOKE)\b)/gi,
-                // SQL injection characters and sequences
-                /(--|\/\*|\*\/|;|'|"|`|\||&|\+|%|<|>|=|\(|\))/g,
-                // Boolean-based injection patterns
-                /(\b(OR|AND)\b\s*['"]*\s*[0-9]+\s*['"]*\s*[=<>])/gi,
-                // Union-based injection
-                /(\bUNION\b.*\bSELECT\b)/gi,
-                // Time-based injection
-                /(\b(SLEEP|WAITFOR|DELAY)\b\s*\()/gi,
-                // Error-based injection
-                /(\b(CAST|CONVERT|EXTRACTVALUE|UPDATEXML)\b.*\()/gi,
-                // Hex encoding attempts
-                /(0x[0-9a-f]+)/gi,
-                // SQL functions commonly used in attacks
-                /(\b(CHAR|ASCII|SUBSTRING|CONCAT|VERSION|DATABASE|USER|SCHEMA)\b\s*\()/gi,
-            ];
-            const validateSQLInput = (obj, path = "") => {
-                if (typeof obj === "string") {
-                    // Use XyPrissJS pattern matching for enhanced detection
-                    const normalizedInput = obj
-                        .toLowerCase()
-                        .replace(/\s+/g, " ")
-                        .trim();
-                    // Check against SQL injection patterns
-                    for (const pattern of sqlPatterns) {
-                        if (pattern.test(normalizedInput)) {
-                            console.warn(` SQL injection pattern detected in ${path}: ${pattern.source}`);
-                            return true;
-                        }
-                    }
-                    // Additional entropy-based detection for obfuscated attacks
-                    if (this.detectObfuscatedSQLInjection(normalizedInput)) {
-                        console.warn(` Obfuscated SQL injection detected in ${path}`);
-                        return true;
-                    }
-                    return false;
-                }
-                if (typeof obj === "object" && obj !== null) {
-                    for (const [key, value] of Object.entries(obj)) {
-                        if (validateSQLInput(value, `${path}.${key}`)) {
-                            return true;
-                        }
-                    }
-                }
-                return false;
-            };
-            if (validateSQLInput(req.body, "body") ||
-                validateSQLInput(req.query, "query") ||
-                validateSQLInput(req.params, "params")) {
-                console.warn(` SQL injection attempt detected from ${this.getClientIP(req)}`);
-                return res.status(400).json({
-                    error: "Invalid input detected",
-                });
-            }
-            next();
-        };
-    }
-    /**
-     * CSRF Protection middleware
-     */
-    csrfProtection() {
-        return (req, res, next) => {
-            if (!this.config.csrf) {
-                return next();
-            }
-            // Skip CSRF for safe methods
-            if (["GET", "HEAD", "OPTIONS"].includes(req.method)) {
-                return next();
-            }
-            const token = req.headers["x-csrf-token"] ||
-                req.body?._csrf ||
-                req.query?._csrf;
-            const sessionToken = req.session?.csrfToken;
-            if (!token ||
-                !sessionToken ||
-                !crypto.XyPrissSecurity.constantTimeEqual(token, sessionToken)) {
-                return res.status(403).json({
-                    error: "CSRF token validation failed",
-                });
-            }
-            next();
-        };
-    }
-    /**
-     * Request encryption middleware
-     */
-    requestEncryption() {
-        const self = this; // Capture 'this' context
-        return (req, res, next) => {
-            if (!self.config.encryption) {
-                return next();
-            }
-            // Check if request is encrypted
-            const encryptedHeader = req.headers["x-encrypted-request"];
-            if (encryptedHeader && req.body) {
-                try {
-                    // Decryption using SecureObject
-                    const encryptedData = req.body.data;
-                    const secureObj = new secureObjectCore.SecureObject({ data: encryptedData });
-                    secureObj.setEncryptionKey(self.config.authentication?.jwt?.secret || "default-key");
-                    const decryptedData = secureObj.toObject();
-                    req.body = JSON.parse(decryptedData.data);
-                }
-                catch (error) {
-                    return res.status(400).json({
-                        error: "Failed to decrypt request",
-                    });
-                }
-            }
-            // Encrypt response if requested
-            const originalJson = res.json;
-            res.json = function (data) {
-                if (req.headers["x-encrypt-response"]) {
-                    // Encryption using SecureObject
-                    const secureObj = new secureObjectCore.SecureObject({
-                        data: JSON.stringify(data),
-                    });
-                    secureObj.setEncryptionKey(self.config.authentication?.jwt?.secret || "default-key");
-                    secureObj.encryptAll();
-                    const encrypted = secureObj.exportData();
-                    res.set("X-Encrypted-Response", "true");
-                    return originalJson.call(this, { data: encrypted });
-                }
-                return originalJson.call(this, data);
-            };
-            next();
-        };
-    }
-    /**
-     * Sanitize object recursively
-     */
-    sanitizeObject(obj) {
-        if (typeof obj === "string") {
-            return this.sanitizeString(obj);
-        }
-        if (typeof obj === "object" && obj !== null) {
-            for (const key in obj) {
-                if (obj.hasOwnProperty(key)) {
-                    obj[key] = this.sanitizeObject(obj[key]);
-                }
-            }
-        }
-        return obj;
-    }
-    /**
-     * Sanitize string for XSS
-     */
-    sanitizeString(str) {
-        return str
-            .replace(/</g, "&lt;")
-            .replace(/>/g, "&gt;")
-            .replace(/"/g, "&quot;")
-            .replace(/'/g, "&#x27;")
-            .replace(/\//g, "&#x2F;")
-            .replace(/javascript:/gi, "")
-            .replace(/on\w+=/gi, "");
-    }
-    /**
-     * Get security configuration
-     */
-    getConfig() {
-        return this.config;
-    }
-    /**
-     * Get brute force statistics
-     */
-    getBruteForceStats() {
-        const stats = {
-            totalIPs: this.bruteForceMap.size,
-            blockedIPs: 0,
-            suspiciousIPs: 0,
-        };
-        const now = Date.now();
-        for (const [_ip, record] of this.bruteForceMap.entries()) {
-            if (record.blockedUntil && record.blockedUntil > now) {
-                stats.blockedIPs++;
-            }
-            else if (record.attempts > 3) {
-                stats.suspiciousIPs++;
-            }
-        }
-        return stats;
-    }
-    /**
-     * Unblock IP address
-     */
-    unblockIP(ip) {
-        const record = this.bruteForceMap.get(ip);
-        if (record) {
-            delete record.blockedUntil;
-            record.attempts = 0;
-            return true;
-        }
-        return false;
-    }
-    /**
-     * Clear all brute force records
-     */
-    clearBruteForceRecords() {
-        this.bruteForceMap.clear();
-    }
-}
-
-exports.SecurityMiddleware = SecurityMiddleware;
-//# sourceMappingURL=security-middleware.js.map

package/dist/cjs/security-middleware.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-middleware.js","sources":["../../src/security-middleware.ts"],"sourcesContent":[null],"names":["XyPrissJS","SecureObject"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;;;AAGG;MASU,kBAAkB,CAAA;AAO3B,IAAA,WAAA,CAAY,SAAyB,EAAE,EAAA;AAL/B,QAAA,IAAA,CAAA,aAAa,GAAG,IAAI,GAAG,EAG5B,CAAC;QAGA,IAAI,CAAC,MAAM,GAAG;AACV,YAAA,KAAK,EAAE,UAAU;AACjB,YAAA,IAAI,EAAE,IAAI;AACV,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,YAAY,EAAE,IAAI;AAClB,YAAA,UAAU,EAAE,IAAI;AAChB,YAAA,UAAU,EAAE;AACR,gBAAA,SAAS,EAAE,aAAa;AACxB,gBAAA,OAAO,EAAE,EAAE;AACd,aAAA;AACD,YAAA,cAAc,EAAE;AACZ,gBAAA,GAAG,EAAE;AACD,oBAAA,MAAM,EAAEA,sBAAS,CAAC,mBAAmB,CAAC;AAClC,wBAAA,MAAM,EAAE,EAAE;AACV,wBAAA,OAAO,EAAE,MAAM;qBAClB,CAAC;AACF,oBAAA,SAAS,EAAE,IAAI;AACf,oBAAA,SAAS,EAAE,OAAO;AACrB,iBAAA;AACD,gBAAA,OAAO,EAAE;AACL,oBAAA,MAAM,EAAEA,sBAAS,CAAC,mBAAmB,CAAC;AAClC,wBAAA,MAAM,EAAE,EAAE;AACV,wBAAA,OAAO,EAAE,MAAM;qBAClB,CAAC;AACF,oBAAA,IAAI,EAAE,aAAa;AACnB,oBAAA,MAAM,EAAE;wBACJ,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;AAC3B,wBAAA,MAAM,EAAE,IAAI;AACZ,wBAAA,QAAQ,EAAE,IAAI;AACd,wBAAA,QAAQ,EAAE,QAAQ;AACrB,qBAAA;AACJ,iBAAA;AACJ,aAAA;AACD,YAAA,GAAG,MAAM;SACZ,CAAC;KACL;AAED;;AAEG;IACI,aAAa,GAAA;AAChB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;;AAErC,YAAA,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACzC,SAAC,CAAC;KACL;AAED;;AAEG;IACK,oBAAoB,CAAC,GAAQ,EAAE,GAAQ,EAAA;AAC3C,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;;YAEpB,GAAG,CAAC,GAAG,CAAC;AACJ,gBAAA,wBAAwB,EAAE,SAAS;AACnC,gBAAA,iBAAiB,EAAE,MAAM;AACzB,gBAAA,kBAAkB,EAAE,eAAe;AACnC,gBAAA,2BAA2B,EACvB,qCAAqC;AACzC,gBAAA,iBAAiB,EAAE,iCAAiC;AACpD,gBAAA,oBAAoB,EAChB,0CAA0C;AAC9C,gBAAA,yBAAyB,EAAE,IAAI,CAAC,YAAY,EAAE;AACjD,aAAA,CAAC,CAAC;SACN;;AAGD,QAAA,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;AACjC,QAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;KAClC;AAED;;AAEG;IACK,YAAY,GAAA;AAChB,QAAA,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK;AACrB,YAAA,KAAK,SAAS;AACV,gBAAA,OAAO,6JAA6J,CAAC;AACzK,YAAA,KAAK,UAAU;AACX,gBAAA,OAAO,mKAAmK,CAAC;AAC/K,YAAA,KAAK,OAAO,CAAC;AACb,YAAA;AACI,gBAAA,OAAO,wGAAwG,CAAC;SACvH;KACJ;AAED;;AAEG;AACK,IAAA,eAAe,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAA;AACjD,QAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;YACzB,OAAO,IAAI,EAAE,CAAC;SACjB;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;AACjC,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAChC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAErC,IAAI,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,EAAE;YACT,MAAM,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;YAC3C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;SACtC;;QAGD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,GAAG,GAAG,EAAE;YAClD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACxB,gBAAA,KAAK,EAAE,mDAAmD;AAC1D,gBAAA,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,GAAG,GAAG,IAAI,IAAI,CAAC;AAC5D,aAAA,CAAC,CAAC;SACN;;QAGD,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,GAAG,QAAQ,EAAE;AACrC,YAAA,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;SACvB;;AAGD,QAAA,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAK;AAClB,YAAA,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;gBAClD,MAAO,CAAC,QAAQ,EAAE,CAAC;AACnB,gBAAA,MAAO,CAAC,WAAW,GAAG,GAAG,CAAC;AAE1B,gBAAA,IAAI,MAAO,CAAC,QAAQ,IAAI,WAAW,EAAE;AACjC,oBAAA,MAAO,CAAC,YAAY,GAAG,GAAG,GAAG,aAAa,CAAC;AAC3C,oBAAA,OAAO,CAAC,IAAI,CACR,CAAA,GAAA,EAAM,EAAE,CAAA,aAAA,EACJ,aAAa,GAAG,IACpB,CAAA,QAAA,EAAW,WAAW,CAAA,gBAAA,CAAkB,CAC3C,CAAC;iBACL;aACJ;AACL,SAAC,CAAC,CAAC;AAEH,QAAA,IAAI,EAAE,CAAC;KACV;AAED;;AAEG;AACK,IAAA,4BAA4B,CAAC,KAAa,EAAA;;AAE9C,QAAA,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC;QACrE,IAAI,eAAe,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE;AACtC,YAAA,OAAO,IAAI,CAAC;SACf;;AAGD,QAAA,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC;AAChE,QAAA,IAAI,QAAQ,GAAG,CAAC,EAAE;AACd,YAAA,OAAO,IAAI,CAAC;SACf;;AAGD,QAAA,MAAM,kBAAkB,GAAG;YACvB,0BAA0B;YAC1B,2BAA2B;YAC3B,8BAA8B;YAC9B,eAAe;SAClB,CAAC;AAEF,QAAA,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;KACpE;AAED;;AAEG;AACK,IAAA,WAAW,CAAC,GAAQ,EAAA;AACxB,QAAA,QACI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC7C,YAAA,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;YACxB,GAAG,CAAC,UAAU,EAAE,aAAa;YAC7B,GAAG,CAAC,MAAM,EAAE,aAAa;AACzB,YAAA,GAAG,CAAC,EAAE;AACN,YAAA,SAAS,EACX;KACL;AAED;;AAEG;IACI,aAAa,GAAA;AAChB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;AACrC,YAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;gBAClB,OAAO,IAAI,EAAE,CAAC;aACjB;;AAGD,YAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9B,YAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC/B,YAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAEhC,YAAA,IAAI,EAAE,CAAC;AACX,SAAC,CAAC;KACL;AAED;;AAEG;IACI,sBAAsB,GAAA;AACzB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;AACrC,YAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE;gBAC3B,OAAO,IAAI,EAAE,CAAC;aACjB;;AAGD,YAAA,MAAM,WAAW,GAAG;;gBAEhB,iGAAiG;;gBAEjG,+CAA+C;;gBAE/C,mDAAmD;;gBAEnD,2BAA2B;;gBAE3B,oCAAoC;;gBAEpC,mDAAmD;;gBAEnD,iBAAiB;;gBAEjB,yEAAyE;aAC5E,CAAC;YAEF,MAAM,gBAAgB,GAAG,CAAC,GAAQ,EAAE,IAAI,GAAG,EAAE,KAAa;AACtD,gBAAA,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;;oBAEzB,MAAM,eAAe,GAAG,GAAG;AACtB,yBAAA,WAAW,EAAE;AACb,yBAAA,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;AACpB,yBAAA,IAAI,EAAE,CAAC;;AAGZ,oBAAA,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE;AAC/B,wBAAA,IAAI,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE;4BAC/B,OAAO,CAAC,IAAI,CACR,CAAsC,mCAAA,EAAA,IAAI,CAAK,EAAA,EAAA,OAAO,CAAC,MAAM,CAAE,CAAA,CAClE,CAAC;AACF,4BAAA,OAAO,IAAI,CAAC;yBACf;qBACJ;;AAGD,oBAAA,IAAI,IAAI,CAAC,4BAA4B,CAAC,eAAe,CAAC,EAAE;AACpD,wBAAA,OAAO,CAAC,IAAI,CACR,yCAAyC,IAAI,CAAA,CAAE,CAClD,CAAC;AACF,wBAAA,OAAO,IAAI,CAAC;qBACf;AAED,oBAAA,OAAO,KAAK,CAAC;iBAChB;gBAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;AACzC,oBAAA,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;wBAC5C,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,GAAG,CAAA,CAAE,CAAC,EAAE;AAC3C,4BAAA,OAAO,IAAI,CAAC;yBACf;qBACJ;iBACJ;AAED,gBAAA,OAAO,KAAK,CAAC;AACjB,aAAC,CAAC;AAEF,YAAA,IACI,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC;AAClC,gBAAA,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC;gBACpC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,EACxC;AACE,gBAAA,OAAO,CAAC,IAAI,CACR,CAAA,qCAAA,EAAwC,IAAI,CAAC,WAAW,CACpD,GAAG,CACN,CAAE,CAAA,CACN,CAAC;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACxB,oBAAA,KAAK,EAAE,wBAAwB;AAClC,iBAAA,CAAC,CAAC;aACN;AAED,YAAA,IAAI,EAAE,CAAC;AACX,SAAC,CAAC;KACL;AAED;;AAEG;IACI,cAAc,GAAA;AACjB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;AACrC,YAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACnB,OAAO,IAAI,EAAE,CAAC;aACjB;;AAGD,YAAA,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;gBACjD,OAAO,IAAI,EAAE,CAAC;aACjB;AAED,YAAA,MAAM,KAAK,GACP,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;gBAC3B,GAAG,CAAC,IAAI,EAAE,KAAK;AACf,gBAAA,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC;AAErB,YAAA,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC;AAE5C,YAAA,IACI,CAAC,KAAK;AACN,gBAAA,CAAC,YAAY;gBACb,CAACA,sBAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,EACnD;gBACE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACxB,oBAAA,KAAK,EAAE,8BAA8B;AACxC,iBAAA,CAAC,CAAC;aACN;AAED,YAAA,IAAI,EAAE,CAAC;AACX,SAAC,CAAC;KACL;AAED;;AAEG;IACI,iBAAiB,GAAA;AACpB,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC;AAElB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;AACrC,YAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;gBACzB,OAAO,IAAI,EAAE,CAAC;aACjB;;YAGD,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAE3D,YAAA,IAAI,eAAe,IAAI,GAAG,CAAC,IAAI,EAAE;AAC7B,gBAAA,IAAI;;AAEA,oBAAA,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBACpC,MAAM,SAAS,GAAG,IAAIC,6BAAY,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;AAC5D,oBAAA,SAAS,CAAC,gBAAgB,CACtB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,MAAM,IAAI,aAAa,CAC3D,CAAC;AACF,oBAAA,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;oBAC3C,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;iBAC7C;gBAAC,OAAO,KAAK,EAAE;oBACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACxB,wBAAA,KAAK,EAAE,2BAA2B;AACrC,qBAAA,CAAC,CAAC;iBACN;aACJ;;AAGD,YAAA,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;AAC9B,YAAA,GAAG,CAAC,IAAI,GAAG,UAAU,IAAS,EAAA;AAC1B,gBAAA,IAAI,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE;;AAEnC,oBAAA,MAAM,SAAS,GAAG,IAAIA,6BAAY,CAAC;AAC/B,wBAAA,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;AAC7B,qBAAA,CAAC,CAAC;AACH,oBAAA,SAAS,CAAC,gBAAgB,CACtB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,MAAM,IAAI,aAAa,CAC3D,CAAC;oBACF,SAAS,CAAC,UAAU,EAAE,CAAC;AACvB,oBAAA,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;AACzC,oBAAA,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;AACxC,oBAAA,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;iBACvD;gBACD,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACzC,aAAC,CAAC;AAEF,YAAA,IAAI,EAAE,CAAC;AACX,SAAC,CAAC;KACL;AAED;;AAEG;AACK,IAAA,cAAc,CAAC,GAAQ,EAAA;AAC3B,QAAA,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;AACzB,YAAA,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;SACnC;QAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;AACzC,YAAA,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE;AACnB,gBAAA,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE;AACzB,oBAAA,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;iBAC5C;aACJ;SACJ;AAED,QAAA,OAAO,GAAG,CAAC;KACd;AAED;;AAEG;AACK,IAAA,cAAc,CAAC,GAAW,EAAA;AAC9B,QAAA,OAAO,GAAG;AACL,aAAA,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;AACrB,aAAA,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;AACrB,aAAA,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;AACvB,aAAA,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;AACvB,aAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;AACxB,aAAA,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;AAC5B,aAAA,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;KAChC;AAED;;AAEG;IACI,SAAS,GAAA;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC;KACtB;AAED;;AAEG;IACI,kBAAkB,GAAA;AACrB,QAAA,MAAM,KAAK,GAAG;AACV,YAAA,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI;AACjC,YAAA,UAAU,EAAE,CAAC;AACb,YAAA,aAAa,EAAE,CAAC;SACnB,CAAC;AAEF,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAEvB,QAAA,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE;YACtD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,GAAG,GAAG,EAAE;gBAClD,KAAK,CAAC,UAAU,EAAE,CAAC;aACtB;AAAM,iBAAA,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE;gBAC5B,KAAK,CAAC,aAAa,EAAE,CAAC;aACzB;SACJ;AAED,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;AAEG;AACI,IAAA,SAAS,CAAC,EAAU,EAAA;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE;YACR,OAAO,MAAM,CAAC,YAAY,CAAC;AAC3B,YAAA,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;AACpB,YAAA,OAAO,IAAI,CAAC;SACf;AACD,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;AAEG;IACI,sBAAsB,GAAA;AACzB,QAAA,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;KAC9B;AACJ;;;;"}