xypriss 2.3.6 → 3.0.0

package/dist/cjs/src/middleware/built-in/security/TerminalOnlyProtector.js

@@ -0,0 +1,477 @@
+'use strict';
+
+var Logger = require('../../../../shared/logger/Logger.js');
+
+/**
+ * Terminal-Only Protector - Enhanced Version
+ * Aggressively blocks browser requests while allowing terminal/API tools
+ * Perfect for API-only endpoints or development tools
+ */
+class TerminalOnlyProtector {
+    constructor(options = {}, logger) {
+        // Known legitimate API tools and their patterns
+        this.KNOWN_API_TOOLS = [
+            "curl",
+            "wget",
+            "httpie",
+            "postman",
+            "insomnia",
+            "axios",
+            "fetch",
+            "node-fetch",
+            "got",
+            "superagent",
+            "python-requests",
+            "python-urllib",
+            "java/",
+            "okhttp",
+            "rest-client",
+            "paw",
+            "thunder client",
+            "advanced rest client",
+            "go-http-client",
+            "ruby",
+            "perl",
+            "php",
+            "dart",
+            "kotlin",
+            "swift",
+            "apache-httpclient",
+            "jetty",
+            "k6/",
+            "jmeter",
+            "gatling",
+            "artillery",
+        ];
+        // Browser engine signatures (highly specific to avoid false positives)
+        this.BROWSER_ENGINES = [
+            "gecko/",
+            "applewebkit/",
+            "webkit/",
+            "blink/",
+            "trident/",
+            "edgehtml/",
+        ];
+        // Known browser names (specific versions to avoid false positives)
+        this.BROWSER_NAMES = [
+            "firefox/",
+            "chrome/",
+            "safari/",
+            "edge/",
+            "opera/",
+            "chromium/",
+            "brave/",
+            "vivaldi/",
+            "seamonkey/",
+            "palemoon/",
+        ];
+        this.config = {
+            blockSecFetch: true,
+            allowedTools: [],
+            blockBrowserIndicators: true,
+            requireSimpleAccept: false,
+            errorMessage: "Terminal/API access required. Browser access blocked.",
+            statusCode: 403,
+            debug: false,
+            strictness: "normal",
+            enableFingerprinting: true,
+            minConfidenceScore: 70,
+            ...options,
+        };
+        if (options.customValidator !== undefined) {
+            this.config.customValidator = options.customValidator;
+        }
+        this.logger =
+            logger ||
+                new Logger.Logger({
+                    enabled: true,
+                    level: "debug",
+                    components: { security: true },
+                    types: { debug: true },
+                });
+    }
+    /**
+     * Get the terminal-only middleware function
+     */
+    getMiddleware() {
+        return (req, res, next) => {
+            this.handleRequest(req, res, next);
+        };
+    }
+    /**
+     * Handle incoming request and determine if it's from a terminal/API tool
+     */
+    handleRequest(req, res, next) {
+        this.logger.debug("security", "TermOn middleware called for request");
+        if (this.config.debug) {
+            this.logRequestDetails(req);
+        }
+        // Custom validator takes precedence
+        if (this.config.customValidator &&
+            typeof this.config.customValidator === "function") {
+            if (!this.config.customValidator(req)) {
+                return this.blockRequest(res, "TERMINAL_ONLY", "Custom validator failed");
+            }
+            return next();
+        }
+        // Check whitelist first if configured
+        if (this.config.allowedTools && this.config.allowedTools.length > 0) {
+            if (!this.isAllowedTool(req)) {
+                return this.blockRequest(res, "TOOL_NOT_ALLOWED", `Tool not in allowed list. Allowed tools: ${this.config.allowedTools.join(", ")}`);
+            }
+        }
+        // Run comprehensive detection
+        const detection = this.detectRequestType(req);
+        if (this.config.debug) {
+            this.logger.debug("security", "Detection result", {
+                isBrowser: detection.isBrowser,
+                confidence: detection.confidence,
+                reasons: detection.reasons,
+                indicators: detection.indicators,
+            });
+        }
+        // Block if detected as browser with sufficient confidence
+        if (detection.isBrowser &&
+            detection.confidence >= this.config.minConfidenceScore) {
+            return this.blockRequest(res, "BROWSER_DETECTED", `Browser detected with ${detection.confidence}% confidence: ${detection.reasons.join(", ")}`);
+        }
+        // If we get here, it's likely a terminal/API request - allow it
+        next();
+    }
+    /**
+     * Comprehensive browser detection with confidence scoring
+     */
+    detectRequestType(req) {
+        const result = {
+            isBrowser: false,
+            confidence: 0,
+            reasons: [],
+            indicators: [],
+        };
+        let score = 0;
+        const maxScore = this.calculateMaxScore();
+        // 1. Sec-Fetch headers (browsers only, very reliable - 30 points)
+        if (this.config.blockSecFetch && this.hasSecFetchHeaders(req)) {
+            score += 30;
+            result.reasons.push("Sec-Fetch headers present");
+            result.indicators.push("sec-fetch");
+        }
+        // 2. Browser engine detection (very reliable - 25 points)
+        const engineDetection = this.detectBrowserEngine(req);
+        if (engineDetection.detected) {
+            score += 25;
+            result.reasons.push(`Browser engine: ${engineDetection.engine}`);
+            result.indicators.push("browser-engine");
+        }
+        // 3. Browser name detection (reliable - 20 points)
+        const browserDetection = this.detectBrowserName(req);
+        if (browserDetection.detected) {
+            score += 20;
+            result.reasons.push(`Browser: ${browserDetection.name}`);
+            result.indicators.push("browser-name");
+        }
+        // 4. Complex Accept header (moderately reliable - 15 points)
+        if (this.hasComplexAcceptHeader(req)) {
+            score += 15;
+            result.reasons.push("Complex Accept header");
+            result.indicators.push("complex-accept");
+        }
+        // 5. Origin/Referer headers (reliable - 20 points)
+        if (this.hasNavigationHeaders(req)) {
+            score += 20;
+            result.reasons.push("Navigation headers present");
+            result.indicators.push("navigation-headers");
+        }
+        // 6. Accept-Language patterns (moderately reliable - 15 points)
+        if (this.hasBrowserLanguagePattern(req)) {
+            score += 15;
+            result.reasons.push("Browser-style language preferences");
+            result.indicators.push("accept-language");
+        }
+        // 7. Cache control patterns (moderately reliable - 10 points)
+        if (this.hasBrowserCachePattern(req)) {
+            score += 10;
+            result.reasons.push("Browser cache patterns");
+            result.indicators.push("cache-control");
+        }
+        // 8. Connection header patterns (less reliable - 10 points)
+        if (this.hasBrowserConnectionPattern(req)) {
+            score += 10;
+            result.reasons.push("Browser connection patterns");
+            result.indicators.push("connection");
+        }
+        // 9. DNT (Do Not Track) header (browsers only - 10 points)
+        if (this.hasDNTHeader(req)) {
+            score += 10;
+            result.reasons.push("DNT header present");
+            result.indicators.push("dnt");
+        }
+        // 10. Upgrade-Insecure-Requests (browsers only - 10 points)
+        if (this.hasUpgradeInsecureRequests(req)) {
+            score += 10;
+            result.reasons.push("Upgrade-Insecure-Requests header");
+            result.indicators.push("upgrade-insecure");
+        }
+        // 11. Accept-Encoding patterns (less reliable - 5 points)
+        if (this.hasBrowserEncodingPattern(req)) {
+            score += 5;
+            result.reasons.push("Browser encoding patterns");
+            result.indicators.push("accept-encoding");
+        }
+        // 12. Check for known API tools (negative scoring - reduces confidence)
+        if (this.isKnownAPITool(req)) {
+            score = Math.max(0, score - 40); // Reduce score significantly
+            result.reasons.push("Known API tool detected");
+            result.indicators.push("api-tool");
+        }
+        // 13. Allowed tools whitelist check
+        if (this.config.allowedTools && this.config.allowedTools.length > 0) {
+            if (!this.isAllowedTool(req)) {
+                score += 10;
+                result.reasons.push("Tool not in whitelist");
+                result.indicators.push("not-whitelisted");
+            }
+            else {
+                score = Math.max(0, score - 30);
+                result.reasons.push("Tool in whitelist");
+                result.indicators.push("whitelisted");
+            }
+        }
+        // Calculate confidence percentage
+        result.confidence = Math.round((score / maxScore) * 100);
+        result.isBrowser = result.confidence >= this.config.minConfidenceScore;
+        // Apply strictness modifiers
+        if (this.config.strictness === "high" && result.confidence >= 50) {
+            result.isBrowser = true;
+        }
+        else if (this.config.strictness === "paranoid" &&
+            result.confidence >= 30) {
+            result.isBrowser = true;
+        }
+        return result;
+    }
+    /**
+     * Calculate maximum possible score based on configuration
+     */
+    calculateMaxScore() {
+        return 180; // Sum of all positive scoring checks
+    }
+    /**
+     * Check for Sec-Fetch headers (browsers only)
+     */
+    hasSecFetchHeaders(req) {
+        return !!(req.headers["sec-fetch-dest"] ||
+            req.headers["sec-fetch-mode"] ||
+            req.headers["sec-fetch-site"] ||
+            req.headers["sec-fetch-user"]);
+    }
+    /**
+     * Detect browser engine with high specificity
+     */
+    detectBrowserEngine(req) {
+        const userAgent = (req.headers["user-agent"] || "").toLowerCase();
+        for (const engine of this.BROWSER_ENGINES) {
+            if (userAgent.includes(engine)) {
+                return { detected: true, engine };
+            }
+        }
+        return { detected: false, engine: "" };
+    }
+    /**
+     * Detect browser name with version specificity
+     */
+    detectBrowserName(req) {
+        const userAgent = (req.headers["user-agent"] || "").toLowerCase();
+        for (const browser of this.BROWSER_NAMES) {
+            if (userAgent.includes(browser)) {
+                return { detected: true, name: browser };
+            }
+        }
+        return { detected: false, name: "" };
+    }
+    /**
+     * Check for complex Accept header (browsers send detailed MIME types)
+     */
+    hasComplexAcceptHeader(req) {
+        const accept = req.headers["accept"] || "";
+        // Browsers typically send text/html with high priority
+        if (accept.includes("text/html") && accept.includes("q=")) {
+            return true;
+        }
+        // Multiple MIME types with quality values
+        const parts = accept.split(",");
+        if (parts.length >= 4) {
+            return true;
+        }
+        // Check for browser-specific MIME type combinations
+        if (accept.includes("application/xhtml+xml") ||
+            accept.includes("application/xml;q=") ||
+            accept.includes("image/webp") ||
+            accept.includes("image/apng")) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Check for navigation headers (Origin/Referer)
+     */
+    hasNavigationHeaders(req) {
+        return !!(req.headers["origin"] || req.headers["referer"]);
+    }
+    /**
+     * Check for browser-style language patterns
+     */
+    hasBrowserLanguagePattern(req) {
+        const acceptLanguage = req.headers["accept-language"];
+        if (!acceptLanguage) {
+            return false;
+        }
+        // Browsers send multiple languages with quality values
+        if (acceptLanguage.includes("q=") &&
+            acceptLanguage.split(",").length >= 2) {
+            return true;
+        }
+        // Check for region-specific language codes (e.g., en-US, fr-FR)
+        if (/[a-z]{2}-[A-Z]{2}/.test(acceptLanguage)) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Check for browser cache control patterns
+     */
+    hasBrowserCachePattern(req) {
+        const cacheControl = req.headers["cache-control"];
+        const pragma = req.headers["pragma"];
+        // Browsers often send max-age=0 or no-cache
+        if (cacheControl &&
+            (cacheControl.includes("max-age=0") || cacheControl === "no-cache")) {
+            return true;
+        }
+        // Pragma: no-cache is browser behavior
+        if (pragma === "no-cache") {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Check for browser connection patterns
+     */
+    hasBrowserConnectionPattern(req) {
+        const connection = (req.headers["connection"] || "").toLowerCase();
+        // Browsers typically use keep-alive
+        return connection === "keep-alive";
+    }
+    /**
+     * Check for DNT (Do Not Track) header
+     */
+    hasDNTHeader(req) {
+        return !!req.headers["dnt"];
+    }
+    /**
+     * Check for Upgrade-Insecure-Requests header
+     */
+    hasUpgradeInsecureRequests(req) {
+        return req.headers["upgrade-insecure-requests"] === "1";
+    }
+    /**
+     * Check for browser encoding patterns
+     */
+    hasBrowserEncodingPattern(req) {
+        const encoding = req.headers["accept-encoding"] || "";
+        // Browsers typically support multiple encodings including br (Brotli)
+        if (encoding.includes("br") || encoding.split(",").length >= 3) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Check if request is from a known API tool
+     */
+    isKnownAPITool(req) {
+        const userAgent = (req.headers["user-agent"] || "").toLowerCase();
+        return this.KNOWN_API_TOOLS.some((tool) => userAgent.includes(tool));
+    }
+    /**
+     * Check if request has browser indicators (legacy method, now uses comprehensive detection)
+     */
+    hasBrowserIndicators(req) {
+        const detection = this.detectRequestType(req);
+        return detection.isBrowser;
+    }
+    /**
+     * Check if the tool is in the allowed list
+     */
+    isAllowedTool(req) {
+        const userAgent = (req.headers["user-agent"] || "").toLowerCase();
+        return this.config.allowedTools.some((allowedTool) => {
+            const pattern = new RegExp(allowedTool.toLowerCase().replace(/\*/g, ".*"), "i");
+            return pattern.test(userAgent);
+        });
+    }
+    /**
+     * Check if Accept header is simple (typical of API tools)
+     */
+    hasSimpleAccept(req) {
+        const accept = req.headers["accept"] || "";
+        return (accept === "*/*" ||
+            accept === "application/json" ||
+            accept === "text/plain" ||
+            accept.split(",").length <= 2);
+    }
+    /**
+     * Log detailed request information for debugging
+     */
+    logRequestDetails(req) {
+        this.logger.debug("security", "TermOn analyzing request", {
+            secFetchDest: req.headers["sec-fetch-dest"],
+            secFetchMode: req.headers["sec-fetch-mode"],
+            accept: req.headers["accept"]?.substring(0, 150),
+            acceptLanguage: req.headers["accept-language"],
+            acceptEncoding: req.headers["accept-encoding"],
+            origin: req.headers["origin"],
+        });
+    }
+    /**
+     * Block the request with appropriate error response
+     */
+    blockRequest(res, code, details) {
+        const isDevelopment = this.config.debug;
+        const response = {
+            error: isDevelopment ? this.config.errorMessage : "Access denied",
+            timestamp: new Date().toISOString(),
+            code: "NEHONIXYPTERM01",
+        };
+        if (isDevelopment) {
+            response.xypriss = {
+                module: "TerminalOnly",
+                code,
+                details,
+                userAgent: res.req?.headers["user-agent"]?.substring(0, 100),
+            };
+        }
+        if (this.config.debug) {
+            this.logger.debug("security", "TerminalOnly blocking request", {
+                code,
+                details,
+                userAgent: res.req?.headers["user-agent"]?.substring(0, 100),
+            });
+        }
+        res.status(this.config.statusCode).json(response);
+    }
+    /**
+     * Update configuration
+     */
+    updateConfig(newConfig) {
+        this.config = { ...this.config, ...newConfig };
+    }
+    /**
+     * Get current configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+}
+
+exports.TerminalOnlyProtector = TerminalOnlyProtector;
+//# sourceMappingURL=TerminalOnlyProtector.js.map

package/dist/cjs/src/middleware/built-in/security/TerminalOnlyProtector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TerminalOnlyProtector.js","sources":["../../../../../../src/middleware/built-in/security/TerminalOnlyProtector.ts"],"sourcesContent":[null],"names":["Logger"],"mappings":";;;;AAAA;;;;AAIG;MAoCU,qBAAqB,CAAA;IA+D9B,WAAY,CAAA,OAAA,GAA8B,EAAE,EAAE,MAAe,EAAA;;AA1D5C,QAAA,IAAA,CAAA,eAAe,GAAG;YAC/B,MAAM;YACN,MAAM;YACN,QAAQ;YACR,SAAS;YACT,UAAU;YACV,OAAO;YACP,OAAO;YACP,YAAY;YACZ,KAAK;YACL,YAAY;YACZ,iBAAiB;YACjB,eAAe;YACf,OAAO;YACP,QAAQ;YACR,aAAa;YACb,KAAK;YACL,gBAAgB;YAChB,sBAAsB;YACtB,gBAAgB;YAChB,MAAM;YACN,MAAM;YACN,KAAK;YACL,MAAM;YACN,QAAQ;YACR,OAAO;YACP,mBAAmB;YACnB,OAAO;YACP,KAAK;YACL,QAAQ;YACR,SAAS;YACT,WAAW;SACd,CAAC;;AAGe,QAAA,IAAA,CAAA,eAAe,GAAG;YAC/B,QAAQ;YACR,cAAc;YACd,SAAS;YACT,QAAQ;YACR,UAAU;YACV,WAAW;SACd,CAAC;;AAGe,QAAA,IAAA,CAAA,aAAa,GAAG;YAC7B,UAAU;YACV,SAAS;YACT,SAAS;YACT,OAAO;YACP,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,UAAU;YACV,YAAY;YACZ,WAAW;SACd,CAAC;QAGE,IAAI,CAAC,MAAM,GAAG;AACV,YAAA,aAAa,EAAE,IAAI;AACnB,YAAA,YAAY,EAAE,EAAE;AAChB,YAAA,sBAAsB,EAAE,IAAI;AAC5B,YAAA,mBAAmB,EAAE,KAAK;AAC1B,YAAA,YAAY,EACR,uDAAuD;AAC3D,YAAA,UAAU,EAAE,GAAG;AACf,YAAA,KAAK,EAAE,KAAK;AACZ,YAAA,UAAU,EAAE,QAAQ;AACpB,YAAA,oBAAoB,EAAE,IAAI;AAC1B,YAAA,kBAAkB,EAAE,EAAE;AACtB,YAAA,GAAG,OAAO;SACb,CAAC;AAEF,QAAA,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE;YACvC,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;SACzD;AAED,QAAA,IAAI,CAAC,MAAM;YACP,MAAM;AACN,gBAAA,IAAIA,aAAM,CAAC;AACP,oBAAA,OAAO,EAAE,IAAI;AACb,oBAAA,KAAK,EAAE,OAAO;AACd,oBAAA,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;AAC9B,oBAAA,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;AACzB,iBAAA,CAAC,CAAC;KACV;AAED;;AAEG;IACI,aAAa,GAAA;AAChB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;YACrC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACvC,SAAC,CAAC;KACL;AAED;;AAEG;AACK,IAAA,aAAa,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAA;QAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,sCAAsC,CAAC,CAAC;AAEtE,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;AACnB,YAAA,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;SAC/B;;AAGD,QAAA,IACI,IAAI,CAAC,MAAM,CAAC,eAAe;YAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,UAAU,EACnD;YACE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE;gBACnC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,eAAe,EACf,yBAAyB,CAC5B,CAAC;aACL;YACD,OAAO,IAAI,EAAE,CAAC;SACjB;;AAGD,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE;YACjE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE;gBAC1B,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,kBAAkB,EAClB,CAA4C,yCAAA,EAAA,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CACrE,IAAI,CACP,CAAE,CAAA,CACN,CAAC;aACL;SACJ;;QAGD,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAE9C,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,kBAAkB,EAAE;gBAC9C,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,UAAU,EAAE,SAAS,CAAC,UAAU;AACnC,aAAA,CAAC,CAAC;SACN;;QAGD,IACI,SAAS,CAAC,SAAS;YACnB,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAmB,EACzD;YACE,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,kBAAkB,EAClB,CAAA,sBAAA,EACI,SAAS,CAAC,UACd,CAAiB,cAAA,EAAA,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAE,CAAA,CAClD,CAAC;SACL;;AAGD,QAAA,IAAI,EAAE,CAAC;KACV;AAED;;AAEG;AACK,IAAA,iBAAiB,CAAC,GAAQ,EAAA;AAC9B,QAAA,MAAM,MAAM,GAAoB;AAC5B,YAAA,SAAS,EAAE,KAAK;AAChB,YAAA,UAAU,EAAE,CAAC;AACb,YAAA,OAAO,EAAE,EAAE;AACX,YAAA,UAAU,EAAE,EAAE;SACjB,CAAC;QAEF,IAAI,KAAK,GAAG,CAAC,CAAC;AACd,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;;AAG1C,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE;YAC3D,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;AACjD,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;SACvC;;QAGD,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;AACtD,QAAA,IAAI,eAAe,CAAC,QAAQ,EAAE;YAC1B,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAmB,gBAAA,EAAA,eAAe,CAAC,MAAM,CAAE,CAAA,CAAC,CAAC;AACjE,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;SAC5C;;QAGD,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;AACrD,QAAA,IAAI,gBAAgB,CAAC,QAAQ,EAAE;YAC3B,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAY,SAAA,EAAA,gBAAgB,CAAC,IAAI,CAAE,CAAA,CAAC,CAAC;AACzD,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;SAC1C;;AAGD,QAAA,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE;YAClC,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;AAC7C,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;SAC5C;;AAGD,QAAA,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE;YAChC,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;AAClD,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;SAChD;;AAGD,QAAA,IAAI,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE;YACrC,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;AAC1D,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;SAC7C;;AAGD,QAAA,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE;YAClC,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAC9C,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;SAC3C;;AAGD,QAAA,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE;YACvC,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;AACnD,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;SACxC;;AAGD,QAAA,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;YACxB,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAC1C,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACjC;;AAGD,QAAA,IAAI,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,EAAE;YACtC,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;AACxD,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;SAC9C;;AAGD,QAAA,IAAI,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE;YACrC,KAAK,IAAI,CAAC,CAAC;AACX,YAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;AACjD,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;SAC7C;;AAGD,QAAA,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE;AAC1B,YAAA,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;AAChC,YAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;AAC/C,YAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACtC;;AAGD,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE;YACjE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE;gBAC1B,KAAK,IAAI,EAAE,CAAC;AACZ,gBAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;AAC7C,gBAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;aAC7C;iBAAM;gBACH,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;AAChC,gBAAA,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AACzC,gBAAA,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;aACzC;SACJ;;AAGD,QAAA,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,QAAQ,IAAI,GAAG,CAAC,CAAC;AACzD,QAAA,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAmB,CAAC;;AAGxE,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE;AAC9D,YAAA,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;SAC3B;AAAM,aAAA,IACH,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU;AACrC,YAAA,MAAM,CAAC,UAAU,IAAI,EAAE,EACzB;AACE,YAAA,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;SAC3B;AAED,QAAA,OAAO,MAAM,CAAC;KACjB;AAED;;AAEG;IACK,iBAAiB,GAAA;QACrB,OAAO,GAAG,CAAC;KACd;AAED;;AAEG;AACK,IAAA,kBAAkB,CAAC,GAAQ,EAAA;QAC/B,OAAO,CAAC,EACJ,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC7B,YAAA,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC7B,YAAA,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC7B,YAAA,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAChC,CAAC;KACL;AAED;;AAEG;AACK,IAAA,mBAAmB,CAAC,GAAQ,EAAA;AAIhC,QAAA,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;AAElE,QAAA,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE;AACvC,YAAA,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;AAC5B,gBAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;aACrC;SACJ;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;KAC1C;AAED;;AAEG;AACK,IAAA,iBAAiB,CAAC,GAAQ,EAAA;AAC9B,QAAA,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;AAElE,QAAA,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE;AACtC,YAAA,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;gBAC7B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;aAC5C;SACJ;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;KACxC;AAED;;AAEG;AACK,IAAA,sBAAsB,CAAC,GAAQ,EAAA;QACnC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;;AAG3C,QAAA,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;AACvD,YAAA,OAAO,IAAI,CAAC;SACf;;QAGD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAChC,QAAA,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE;AACnB,YAAA,OAAO,IAAI,CAAC;SACf;;AAGD,QAAA,IACI,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC;AACxC,YAAA,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC;AACrC,YAAA,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;AAC7B,YAAA,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC/B;AACE,YAAA,OAAO,IAAI,CAAC;SACf;AAED,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;AAEG;AACK,IAAA,oBAAoB,CAAC,GAAQ,EAAA;AACjC,QAAA,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;KAC9D;AAED;;AAEG;AACK,IAAA,yBAAyB,CAAC,GAAQ,EAAA;QACtC,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAEtD,IAAI,CAAC,cAAc,EAAE;AACjB,YAAA,OAAO,KAAK,CAAC;SAChB;;AAGD,QAAA,IACI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC7B,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EACvC;AACE,YAAA,OAAO,IAAI,CAAC;SACf;;AAGD,QAAA,IAAI,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;AAC1C,YAAA,OAAO,IAAI,CAAC;SACf;AAED,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;AAEG;AACK,IAAA,sBAAsB,CAAC,GAAQ,EAAA;QACnC,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;;AAGrC,QAAA,IACI,YAAY;AACZ,aAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,KAAK,UAAU,CAAC,EACrE;AACE,YAAA,OAAO,IAAI,CAAC;SACf;;AAGD,QAAA,IAAI,MAAM,KAAK,UAAU,EAAE;AACvB,YAAA,OAAO,IAAI,CAAC;SACf;AAED,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;AAEG;AACK,IAAA,2BAA2B,CAAC,GAAQ,EAAA;AACxC,QAAA,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;;QAGnE,OAAO,UAAU,KAAK,YAAY,CAAC;KACtC;AAED;;AAEG;AACK,IAAA,YAAY,CAAC,GAAQ,EAAA;QACzB,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;KAC/B;AAED;;AAEG;AACK,IAAA,0BAA0B,CAAC,GAAQ,EAAA;QACvC,OAAO,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAC,KAAK,GAAG,CAAC;KAC3D;AAED;;AAEG;AACK,IAAA,yBAAyB,CAAC,GAAQ,EAAA;QACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;;AAGtD,QAAA,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE;AAC5D,YAAA,OAAO,IAAI,CAAC;SACf;AAED,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;AAEG;AACK,IAAA,cAAc,CAAC,GAAQ,EAAA;AAC3B,QAAA,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;AAElE,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;KACxE;AAED;;AAEG;AACK,IAAA,oBAAoB,CAAC,GAAQ,EAAA;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC,SAAS,CAAC;KAC9B;AAED;;AAEG;AACK,IAAA,aAAa,CAAC,GAAQ,EAAA;AAC1B,QAAA,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;QAElE,OAAO,IAAI,CAAC,MAAM,CAAC,YAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAI;AAClD,YAAA,MAAM,OAAO,GAAG,IAAI,MAAM,CACtB,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,EAC9C,GAAG,CACN,CAAC;AACF,YAAA,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACnC,SAAC,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,eAAe,CAAC,GAAQ,EAAA;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE3C,QACI,MAAM,KAAK,KAAK;AAChB,YAAA,MAAM,KAAK,kBAAkB;AAC7B,YAAA,MAAM,KAAK,YAAY;YACvB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAC/B;KACL;AAED;;AAEG;AACK,IAAA,iBAAiB,CAAC,GAAQ,EAAA;QAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,0BAA0B,EAAE;AACtD,YAAA,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC3C,YAAA,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC3C,YAAA,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;AAChD,YAAA,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC;AAC9C,YAAA,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC;AAC9C,YAAA,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;AAChC,SAAA,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,YAAY,CAAC,GAAQ,EAAE,IAAY,EAAE,OAAgB,EAAA;AACzD,QAAA,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;AAExC,QAAA,MAAM,QAAQ,GAAQ;AAClB,YAAA,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,eAAe;AACjE,YAAA,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;AACnC,YAAA,IAAI,EAAE,iBAAiB;SAC1B,CAAC;QAEF,IAAI,aAAa,EAAE;YACf,QAAQ,CAAC,OAAO,GAAG;AACf,gBAAA,MAAM,EAAE,cAAc;gBACtB,IAAI;gBACJ,OAAO;AACP,gBAAA,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;aAC/D,CAAC;SACL;AAED,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,+BAA+B,EAAE;gBAC3D,IAAI;gBACJ,OAAO;AACP,gBAAA,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;AAC/D,aAAA,CAAC,CAAC;SACN;AAED,QAAA,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;KACrD;AAED;;AAEG;AACI,IAAA,YAAY,CAAC,SAAsC,EAAA;AACtD,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;KAClD;AAED;;AAEG;IACI,SAAS,GAAA;AACZ,QAAA,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;KAC7B;AACJ;;;;"}