xypriss 2.3.7 → 3.0.0

package/dist/esm/src/middleware/built-in/security/BrowserOnlyProtector.js

@@ -0,0 +1,548 @@
+import { Logger } from '../../../../shared/logger/Logger.js';
+
+/**
+ * Browser-Only Protector - Enhanced Edition
+ * Aggressively blocks non-browser requests while avoiding false positives
+ * Uses multi-layered validation with scoring system
+ */
+class BrowserOnlyProtector {
+    constructor(options = {}, logger) {
+        this.BROWSER_SCORE_THRESHOLD = 3; // Minimum score to pass as browser
+        this.config = {
+            requireSecFetch: true,
+            blockAutomationTools: true,
+            requireComplexAccept: false,
+            allowOriginRequests: true,
+            errorMessage: "Browser access required. Direct API access blocked.",
+            statusCode: 403,
+            debug: false,
+            ...options,
+        };
+        // Only set customValidator if explicitly provided
+        if (options.customValidator !== undefined) {
+            this.config.customValidator = options.customValidator;
+        }
+        // Initialize logger
+        this.logger =
+            logger ||
+                new Logger({
+                    enabled: true,
+                    level: "debug",
+                    components: { security: true },
+                    types: { debug: true },
+                });
+    }
+    /**
+     * Get the browser-only middleware function
+     */
+    getMiddleware() {
+        return (req, res, next) => {
+            this.handleRequest(req, res, next);
+        };
+    }
+    /**
+     * Handle incoming request and determine if it's from a browser
+     */
+    handleRequest(req, res, next) {
+        this.logger.debug("security", "BrowOn called for request");
+        if (this.config.debug) {
+            this.logger.debug("security", "BrowOn analyzing request", {
+                secFetchDest: req.headers["sec-fetch-dest"],
+                secFetchMode: req.headers["sec-fetch-mode"],
+                secFetchSite: req.headers["sec-fetch-site"],
+            });
+        }
+        // Custom validator takes precedence (if provided)
+        if (this.config.customValidator &&
+            typeof this.config.customValidator === "function") {
+            if (!this.config.customValidator(req)) {
+                return this.blockRequest(res, "BROWSER_ONLY", "Custom validator failed");
+            }
+            return next();
+        }
+        // CRITICAL: Block if automation tool is detected (highest priority)
+        if (this.config.blockAutomationTools &&
+            this.isDefinitelyAutomationTool(req)) {
+            return this.blockRequest(res, "AUTOMATION_TOOL_DETECTED", "Request from known automation tool");
+        }
+        // Check for Sec-Fetch headers (modern browsers only)
+        if (this.config.requireSecFetch) {
+            const hasSecFetch = this.hasSecFetchHeaders(req);
+            if (hasSecFetch) {
+                // Validate Sec-Fetch headers are legitimate (not spoofed)
+                if (this.validateSecFetchHeaders(req)) {
+                    if (this.config.debug) {
+                        this.logger.debug("security", "BrowserOnly valid Sec-Fetch headers - allowing request");
+                    }
+                    return next();
+                }
+                else {
+                    // Sec-Fetch headers present but invalid - suspicious
+                    if (this.config.debug) {
+                        this.logger.debug("security", "BrowserOnly invalid Sec-Fetch headers detected - potential spoofing");
+                    }
+                    return this.blockRequest(res, "INVALID_SEC_FETCH", "Sec-Fetch headers present but invalid");
+                }
+            }
+            // No Sec-Fetch headers - use scoring system to determine if browser
+            const browserScore = this.calculateBrowserScore(req);
+            if (this.config.debug) {
+                this.logger.debug("security", `BrowserOnly browser score: ${browserScore.total}/${this.BROWSER_SCORE_THRESHOLD} (need ${this.BROWSER_SCORE_THRESHOLD} to pass)`);
+                this.logger.debug("security", "BrowserOnly score breakdown", browserScore.breakdown);
+            }
+            if (browserScore.total >= this.BROWSER_SCORE_THRESHOLD) {
+                if (this.config.debug) {
+                    this.logger.debug("security", "BrowserOnly browser score passed - allowing request");
+                }
+                return next();
+            }
+            // Failed browser score check
+            return this.blockRequest(res, "INSUFFICIENT_BROWSER_INDICATORS", `Browser score ${browserScore.total}/${this.BROWSER_SCORE_THRESHOLD} - not enough browser characteristics`);
+        }
+        // Sec-Fetch check disabled, allow all requests
+        next();
+    }
+    /**
+     * Check if request has Sec-Fetch headers
+     */
+    hasSecFetchHeaders(req) {
+        return !!(req.headers["sec-fetch-dest"] ||
+            req.headers["sec-fetch-mode"] ||
+            req.headers["sec-fetch-site"] ||
+            req.headers["sec-fetch-user"]);
+    }
+    /**
+     * Validate Sec-Fetch headers are consistent and legitimate
+     */
+    validateSecFetchHeaders(req) {
+        const dest = req.headers["sec-fetch-dest"];
+        const mode = req.headers["sec-fetch-mode"];
+        const site = req.headers["sec-fetch-site"];
+        const user = req.headers["sec-fetch-user"];
+        // Must have at least dest and mode
+        if (!dest || !mode) {
+            return false;
+        }
+        // Validate dest values (common legitimate values)
+        const validDest = [
+            "document",
+            "empty",
+            "iframe",
+            "image",
+            "script",
+            "style",
+            "font",
+            "audio",
+            "video",
+            "manifest",
+            "object",
+            "embed",
+            "worker",
+            "sharedworker",
+            "serviceworker",
+        ];
+        if (!validDest.includes(dest)) {
+            return false;
+        }
+        // Validate mode values
+        const validMode = [
+            "navigate",
+            "cors",
+            "no-cors",
+            "same-origin",
+            "websocket",
+        ];
+        if (!validMode.includes(mode)) {
+            return false;
+        }
+        // Validate site values
+        if (site &&
+            !["same-origin", "same-site", "cross-site", "none"].includes(site)) {
+            return false;
+        }
+        // Validate user values (should be ?1 if present)
+        if (user !== undefined && user !== "?1") {
+            return false;
+        }
+        // Cross-validate consistency
+        if (mode === "navigate" && dest !== "document" && dest !== "iframe") {
+            return false; // Navigate mode should only be for documents/iframes
+        }
+        if (user === "?1" && mode !== "navigate") {
+            return false; // User activation only makes sense for navigation
+        }
+        return true;
+    }
+    /**
+     * Definitively identify automation tools (aggressive blocking)
+     */
+    isDefinitelyAutomationTool(req) {
+        const userAgent = (req.headers["user-agent"] || "").toLowerCase();
+        const accept = req.headers["accept"] || "";
+        if (this.config.debug) {
+            this.logger.debug("security", "BrowserOnly checking automation tool detection", {
+                userAgent,
+                accept,
+            });
+        }
+        // Known automation tool patterns (comprehensive list)
+        const automationPatterns = [
+            /\bcurl\/\d+/i,
+            /\bwget\/\d+/i,
+            /\bpostman/i,
+            /\binsomnia/i,
+            /\bhttpie/i,
+            /\bpython-requests/i,
+            /\baxios/i,
+            /\bnode-fetch/i,
+            /\bundici/i,
+            /\bsuperagent/i,
+            /\bneedle/i,
+            /\bhyperquest/i,
+            /\bwreck/i,
+            /\brestify/i,
+            /\bgot\//i,
+            /^python[\/-]/i,
+            /^java[\/-]/i,
+            /^go-http-client/i,
+            /^ruby/i,
+            /^php/i,
+            /\bpycurl/i,
+            /\blibwww-perl/i,
+            /\blibcurl/i,
+            /\bhttp\.rb/i,
+            /\bhttpclient/i,
+            /\bapache-httpclient/i,
+            /\bokhttp/i,
+            /\bretrofit/i,
+            /\bunirest/i,
+            /\brest-client/i,
+            /\bhttparty/i,
+            /\bfetch\//i,
+            /\bscraper/i,
+            /\bbot\b/i,
+            /\bcrawler/i,
+            /\bspider/i,
+            /\bpuppeteer/i,
+            /\bplaywright/i,
+            /\bselenium/i,
+            /\bphantomjs/i,
+            /\bheadless/i,
+        ];
+        // Check user agent
+        for (const pattern of automationPatterns) {
+            if (pattern.test(userAgent)) {
+                if (this.config.debug) {
+                    this.logger.debug("security", "BrowserOnly automation tool detected", {
+                        pattern: pattern.toString(),
+                        userAgent,
+                    });
+                }
+                return true;
+            }
+        }
+        // Suspicious: Empty user agent
+        if (!userAgent || userAgent.trim() === "") {
+            return true;
+        }
+        // Suspicious: Too short user agent (< 20 chars usually means custom/scripted)
+        if (userAgent.length < 20 && !this.isKnownShortBrowserUA(userAgent)) {
+            return true;
+        }
+        // Suspicious: Accept */* with empty or simple user agent
+        if (accept === "*/*" && userAgent.length < 50) {
+            return true;
+        }
+        // Suspicious: User agent contains only version numbers and basic text
+        if (/^[a-z0-9\.\-\/\s]+$/i.test(userAgent) && userAgent.length < 30) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Check if user agent is a known short legitimate browser UA
+     */
+    isKnownShortBrowserUA(userAgent) {
+        // Some mobile browsers or minimal browsers have shorter UAs
+        const knownShort = [/^opera/i, /^lynx/i];
+        return knownShort.some((pattern) => pattern.test(userAgent));
+    }
+    /**
+     * Calculate browser legitimacy score using multiple indicators
+     */
+    calculateBrowserScore(req) {
+        const breakdown = {};
+        let total = 0;
+        // 1. User Agent Analysis (0-2 points)
+        const uaScore = this.scoreUserAgent(req);
+        breakdown["userAgent"] = uaScore;
+        total += uaScore;
+        // 2. Accept Header Analysis (0-1 points)
+        const acceptScore = this.scoreAcceptHeader(req);
+        breakdown["accept"] = acceptScore;
+        total += acceptScore;
+        // 3. Accept-Language (0-1 points)
+        const langScore = this.scoreAcceptLanguage(req);
+        breakdown["acceptLanguage"] = langScore;
+        total += langScore;
+        // 4. Accept-Encoding (0-1 points)
+        const encodingScore = this.scoreAcceptEncoding(req);
+        breakdown["acceptEncoding"] = encodingScore;
+        total += encodingScore;
+        // 5. Origin/Referer (0-1 points)
+        const originScore = this.scoreOriginReferer(req);
+        breakdown["originReferer"] = originScore;
+        total += originScore;
+        // 6. Connection headers (0-1 points)
+        const connectionScore = this.scoreConnectionHeaders(req);
+        breakdown["connection"] = connectionScore;
+        total += connectionScore;
+        // 7. Cache-Control (0-1 points)
+        const cacheScore = this.scoreCacheControl(req);
+        breakdown["cache"] = cacheScore;
+        total += cacheScore;
+        // 8. DNT/Upgrade-Insecure-Requests (0-1 points)
+        const privacyScore = this.scorePrivacyHeaders(req);
+        breakdown["privacy"] = privacyScore;
+        total += privacyScore;
+        return { total, breakdown };
+    }
+    /**
+     * Score User-Agent header (0-2 points)
+     */
+    scoreUserAgent(req) {
+        const ua = req.headers["user-agent"] || "";
+        let score = 0;
+        // Must contain browser indicators
+        if (/\b(Mozilla|Chrome|Safari|Firefox|Edge|Opera|Trident)\b/i.test(ua)) {
+            score += 1;
+        }
+        // Must be long and complex (typical browser UAs are 100+ chars)
+        if (ua.length > 80) {
+            score += 1;
+        }
+        // Contains platform info (Windows, Macintosh, Linux, Android, iOS)
+        if (/\b(Windows|Macintosh|Linux|Android|iPhone|iPad)\b/i.test(ua)) {
+            score += 0.5;
+        }
+        // Contains rendering engine (AppleWebKit, Gecko, Blink)
+        if (/\b(AppleWebKit|Gecko|Blink|rv:)\b/i.test(ua)) {
+            score += 0.5;
+        }
+        return Math.min(score, 2);
+    }
+    /**
+     * Score Accept header (0-1 points)
+     */
+    scoreAcceptHeader(req) {
+        const accept = req.headers["accept"] || "";
+        // Browsers send complex Accept headers
+        if (accept.includes("text/html") &&
+            accept.includes("application/xhtml+xml")) {
+            return 1;
+        }
+        // At least multiple MIME types
+        if (accept.split(",").length >= 3) {
+            return 0.5;
+        }
+        return 0;
+    }
+    /**
+     * Score Accept-Language header (0-1 points)
+     */
+    scoreAcceptLanguage(req) {
+        const lang = req.headers["accept-language"];
+        if (!lang) {
+            return 0;
+        }
+        // Browsers send detailed language preferences with quality values
+        if (lang.includes("q=") || lang.split(",").length >= 2) {
+            return 1;
+        }
+        // At least has a language code
+        if (lang.length >= 2) {
+            return 0.5;
+        }
+        return 0;
+    }
+    /**
+     * Score Accept-Encoding header (0-1 points)
+     */
+    scoreAcceptEncoding(req) {
+        const encoding = req.headers["accept-encoding"];
+        if (!encoding) {
+            return 0;
+        }
+        // Browsers support multiple compression formats
+        const hasGzip = encoding.includes("gzip");
+        const hasDeflate = encoding.includes("deflate");
+        const hasBr = encoding.includes("br");
+        if ((hasGzip && hasDeflate) || hasBr) {
+            return 1;
+        }
+        if (hasGzip || hasDeflate) {
+            return 0.5;
+        }
+        return 0;
+    }
+    /**
+     * Score Origin/Referer headers (0-1 points)
+     */
+    scoreOriginReferer(req) {
+        const origin = req.headers["origin"];
+        const referer = req.headers["referer"];
+        // Origin header (CORS request from browser)
+        if (origin && this.config.allowOriginRequests) {
+            // Validate it's a proper URL
+            if (this.isValidUrl(origin)) {
+                return 1;
+            }
+        }
+        // Referer header (navigation from another page)
+        if (referer && this.isValidUrl(referer)) {
+            return 1;
+        }
+        return 0;
+    }
+    /**
+     * Score Connection headers (0-1 points)
+     */
+    scoreConnectionHeaders(req) {
+        const connection = req.headers["connection"];
+        const upgrade = req.headers["upgrade-insecure-requests"];
+        // Browsers typically send keep-alive
+        if (connection && connection.toLowerCase().includes("keep-alive")) {
+            return 0.5;
+        }
+        // Upgrade-Insecure-Requests is browser-specific
+        if (upgrade === "1") {
+            return 1;
+        }
+        return 0;
+    }
+    /**
+     * Score Cache-Control header (0-1 points)
+     */
+    scoreCacheControl(req) {
+        const cache = req.headers["cache-control"];
+        if (!cache) {
+            return 0;
+        }
+        // Browsers send various cache directives
+        if (cache.includes("max-age") ||
+            cache.includes("no-cache") ||
+            cache.includes("no-store")) {
+            return 1;
+        }
+        return 0;
+    }
+    /**
+     * Score privacy-related headers (0-1 points)
+     */
+    scorePrivacyHeaders(req) {
+        const dnt = req.headers["dnt"];
+        const gpc = req.headers["sec-gpc"];
+        const upgradeInsecure = req.headers["upgrade-insecure-requests"];
+        // DNT (Do Not Track)
+        if (dnt === "1") {
+            return 1;
+        }
+        // GPC (Global Privacy Control)
+        if (gpc === "1") {
+            return 1;
+        }
+        // Upgrade-Insecure-Requests
+        if (upgradeInsecure === "1") {
+            return 1;
+        }
+        return 0;
+    }
+    /**
+     * Validate if string is a proper URL
+     */
+    isValidUrl(url) {
+        try {
+            const parsed = new URL(url);
+            return parsed.protocol === "http:" || parsed.protocol === "https:";
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Check if request shows browser-like characteristics (legacy method - kept for compatibility)
+     */
+    isLikelyBrowserRequest(req) {
+        const score = this.calculateBrowserScore(req);
+        return score.total >= this.BROWSER_SCORE_THRESHOLD;
+    }
+    /**
+     * Check if User-Agent indicates an automation tool (legacy method - kept for compatibility)
+     */
+    isAutomationTool(userAgent) {
+        return this.isDefinitelyAutomationTool({
+            headers: { "user-agent": userAgent },
+        });
+    }
+    /**
+     * Check if Accept header is complex enough for a browser (legacy method)
+     */
+    hasComplexAcceptHeader(accept) {
+        if (!accept || accept === "*/*") {
+            return false;
+        }
+        const acceptParts = accept.split(",").map((s) => s.trim());
+        return acceptParts.length >= 3 && accept.includes("text/html");
+    }
+    /**
+     * Check for other browser indicators (legacy method)
+     */
+    hasBrowserIndicators(req) {
+        const score = this.calculateBrowserScore(req);
+        return score.total >= this.BROWSER_SCORE_THRESHOLD;
+    }
+    /**
+     * Block the request with appropriate error response
+     */
+    blockRequest(res, code, details) {
+        // Generic error message for security (don't reveal implementation details)
+        const isDevelopment = this.config.debug;
+        const response = {
+            error: isDevelopment ? this.config.errorMessage : "Access denied",
+            timestamp: new Date().toISOString(),
+            code: "NEHONIXYPBROw01",
+        };
+        // Add XyPriss-specific info for developers in development/debug mode
+        if (isDevelopment) {
+            response.xypriss = {
+                module: "BrowserOnly",
+                code,
+                details,
+                userAgent: res.req?.headers["user-agent"]?.substring(0, 100),
+            };
+        }
+        if (this.config.debug) {
+            this.logger.debug("security", "BrowserOnly blocking request", {
+                code,
+                details,
+                userAgent: res.req?.headers["user-agent"]?.substring(0, 100),
+            });
+        }
+        res.status(this.config.statusCode).json(response);
+    }
+    /**
+     * Update configuration
+     */
+    updateConfig(newConfig) {
+        this.config = { ...this.config, ...newConfig };
+    }
+    /**
+     * Get current configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+}
+
+export { BrowserOnlyProtector };
+//# sourceMappingURL=BrowserOnlyProtector.js.map

package/dist/esm/src/middleware/built-in/security/BrowserOnlyProtector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserOnlyProtector.js","sources":["../../../../../../src/middleware/built-in/security/BrowserOnlyProtector.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;;;;AAIG;MAuBU,oBAAoB,CAAA;IAK7B,WAAY,CAAA,OAAA,GAA6B,EAAE,EAAE,MAAe,EAAA;AAH3C,QAAA,IAAA,CAAA,uBAAuB,GAAG,CAAC,CAAC;QAIzC,IAAI,CAAC,MAAM,GAAG;AACV,YAAA,eAAe,EAAE,IAAI;AACrB,YAAA,oBAAoB,EAAE,IAAI;AAC1B,YAAA,oBAAoB,EAAE,KAAK;AAC3B,YAAA,mBAAmB,EAAE,IAAI;AACzB,YAAA,YAAY,EAAE,qDAAqD;AACnE,YAAA,UAAU,EAAE,GAAG;AACf,YAAA,KAAK,EAAE,KAAK;AACZ,YAAA,GAAG,OAAO;SACb,CAAC;;AAGF,QAAA,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE;YACvC,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;SACzD;;AAGD,QAAA,IAAI,CAAC,MAAM;YACP,MAAM;AACN,gBAAA,IAAI,MAAM,CAAC;AACP,oBAAA,OAAO,EAAE,IAAI;AACb,oBAAA,KAAK,EAAE,OAAO;AACd,oBAAA,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;AAC9B,oBAAA,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;AACzB,iBAAA,CAAC,CAAC;KACV;AAED;;AAEG;IACI,aAAa,GAAA;AAChB,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;YACrC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACvC,SAAC,CAAC;KACL;AAED;;AAEG;AACK,IAAA,aAAa,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAA;QAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;AAE3D,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,0BAA0B,EAAE;AACtD,gBAAA,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC3C,gBAAA,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC3C,gBAAA,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC9C,aAAA,CAAC,CAAC;SACN;;AAGD,QAAA,IACI,IAAI,CAAC,MAAM,CAAC,eAAe;YAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,UAAU,EACnD;YACE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE;gBACnC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,cAAc,EACd,yBAAyB,CAC5B,CAAC;aACL;YACD,OAAO,IAAI,EAAE,CAAC;SACjB;;AAGD,QAAA,IACI,IAAI,CAAC,MAAM,CAAC,oBAAoB;AAChC,YAAA,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,EACtC;YACE,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,0BAA0B,EAC1B,oCAAoC,CACvC,CAAC;SACL;;AAGD,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE;YAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAEjD,IAAI,WAAW,EAAE;;AAEb,gBAAA,IAAI,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,EAAE;AACnC,oBAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;wBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,wDAAwD,CAC3D,CAAC;qBACL;oBACD,OAAO,IAAI,EAAE,CAAC;iBACjB;qBAAM;;AAEH,oBAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;wBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,qEAAqE,CACxE,CAAC;qBACL;oBACD,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,mBAAmB,EACnB,uCAAuC,CAC1C,CAAC;iBACL;aACJ;;YAGD,MAAM,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;AAErD,YAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,8BAA8B,YAAY,CAAC,KAAK,CAAI,CAAA,EAAA,IAAI,CAAC,uBAAuB,CAAA,OAAA,EAAU,IAAI,CAAC,uBAAuB,CAAW,SAAA,CAAA,CACpI,CAAC;AACF,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,6BAA6B,EAC7B,YAAY,CAAC,SAAS,CACzB,CAAC;aACL;YAED,IAAI,YAAY,CAAC,KAAK,IAAI,IAAI,CAAC,uBAAuB,EAAE;AACpD,gBAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;oBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,qDAAqD,CACxD,CAAC;iBACL;gBACD,OAAO,IAAI,EAAE,CAAC;aACjB;;AAGD,YAAA,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,iCAAiC,EACjC,CAAA,cAAA,EAAiB,YAAY,CAAC,KAAK,CAAI,CAAA,EAAA,IAAI,CAAC,uBAAuB,CAAA,qCAAA,CAAuC,CAC7G,CAAC;SACL;;AAGD,QAAA,IAAI,EAAE,CAAC;KACV;AAED;;AAEG;AACK,IAAA,kBAAkB,CAAC,GAAQ,EAAA;QAC/B,OAAO,CAAC,EACJ,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC7B,YAAA,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC7B,YAAA,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC7B,YAAA,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAChC,CAAC;KACL;AAED;;AAEG;AACK,IAAA,uBAAuB,CAAC,GAAQ,EAAA;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;;AAG3C,QAAA,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE;AAChB,YAAA,OAAO,KAAK,CAAC;SAChB;;AAGD,QAAA,MAAM,SAAS,GAAG;YACd,UAAU;YACV,OAAO;YACP,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,OAAO;YACP,MAAM;YACN,OAAO;YACP,OAAO;YACP,UAAU;YACV,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,cAAc;YACd,eAAe;SAClB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;AAC3B,YAAA,OAAO,KAAK,CAAC;SAChB;;AAGD,QAAA,MAAM,SAAS,GAAG;YACd,UAAU;YACV,MAAM;YACN,SAAS;YACT,aAAa;YACb,WAAW;SACd,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;AAC3B,YAAA,OAAO,KAAK,CAAC;SAChB;;AAGD,QAAA,IACI,IAAI;AACJ,YAAA,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpE;AACE,YAAA,OAAO,KAAK,CAAC;SAChB;;QAGD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE;AACrC,YAAA,OAAO,KAAK,CAAC;SAChB;;AAGD,QAAA,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,EAAE;YACjE,OAAO,KAAK,CAAC;SAChB;QAED,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,UAAU,EAAE;YACtC,OAAO,KAAK,CAAC;SAChB;AAED,QAAA,OAAO,IAAI,CAAC;KACf;AAED;;AAEG;AACK,IAAA,0BAA0B,CAAC,GAAQ,EAAA;AACvC,QAAA,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AAE3C,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,gDAAgD,EAChD;gBACI,SAAS;gBACT,MAAM;AACT,aAAA,CACJ,CAAC;SACL;;AAGD,QAAA,MAAM,kBAAkB,GAAG;YACvB,cAAc;YACd,cAAc;YACd,YAAY;YACZ,aAAa;YACb,WAAW;YACX,oBAAoB;YACpB,UAAU;YACV,eAAe;YACf,WAAW;YACX,eAAe;YACf,WAAW;YACX,eAAe;YACf,UAAU;YACV,YAAY;YACZ,UAAU;YACV,eAAe;YACf,aAAa;YACb,kBAAkB;YAClB,QAAQ;YACR,OAAO;YACP,WAAW;YACX,gBAAgB;YAChB,YAAY;YACZ,aAAa;YACb,eAAe;YACf,sBAAsB;YACtB,WAAW;YACX,aAAa;YACb,YAAY;YACZ,gBAAgB;YAChB,aAAa;YACb,YAAY;YACZ,YAAY;YACZ,UAAU;YACV,YAAY;YACZ,WAAW;YACX,cAAc;YACd,eAAe;YACf,aAAa;YACb,cAAc;YACd,aAAa;SAChB,CAAC;;AAGF,QAAA,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE;AACtC,YAAA,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;AACzB,gBAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;oBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,sCAAsC,EACtC;AACI,wBAAA,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;wBAC3B,SAAS;AACZ,qBAAA,CACJ,CAAC;iBACL;AACD,gBAAA,OAAO,IAAI,CAAC;aACf;SACJ;;QAGD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;AACvC,YAAA,OAAO,IAAI,CAAC;SACf;;AAGD,QAAA,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE;AACjE,YAAA,OAAO,IAAI,CAAC;SACf;;QAGD,IAAI,MAAM,KAAK,KAAK,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE;AAC3C,YAAA,OAAO,IAAI,CAAC;SACf;;AAGD,QAAA,IAAI,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE;AACjE,YAAA,OAAO,IAAI,CAAC;SACf;AAED,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;AAEG;AACK,IAAA,qBAAqB,CAAC,SAAiB,EAAA;;AAE3C,QAAA,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACzC,QAAA,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;KAChE;AAED;;AAEG;AACK,IAAA,qBAAqB,CAAC,GAAQ,EAAA;QAIlC,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;;QAGd,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AACzC,QAAA,SAAS,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC;QACjC,KAAK,IAAI,OAAO,CAAC;;QAGjB,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAChD,QAAA,SAAS,CAAC,QAAQ,CAAC,GAAG,WAAW,CAAC;QAClC,KAAK,IAAI,WAAW,CAAC;;QAGrB,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;AAChD,QAAA,SAAS,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC;QACxC,KAAK,IAAI,SAAS,CAAC;;QAGnB,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;AACpD,QAAA,SAAS,CAAC,gBAAgB,CAAC,GAAG,aAAa,CAAC;QAC5C,KAAK,IAAI,aAAa,CAAC;;QAGvB,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACjD,QAAA,SAAS,CAAC,eAAe,CAAC,GAAG,WAAW,CAAC;QACzC,KAAK,IAAI,WAAW,CAAC;;QAGrB,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;AACzD,QAAA,SAAS,CAAC,YAAY,CAAC,GAAG,eAAe,CAAC;QAC1C,KAAK,IAAI,eAAe,CAAC;;QAGzB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAC/C,QAAA,SAAS,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC;QAChC,KAAK,IAAI,UAAU,CAAC;;QAGpB,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;AACnD,QAAA,SAAS,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC;QACpC,KAAK,IAAI,YAAY,CAAC;AAEtB,QAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;KAC/B;AAED;;AAEG;AACK,IAAA,cAAc,CAAC,GAAQ,EAAA;QAC3B,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;;AAGd,QAAA,IACI,yDAAyD,CAAC,IAAI,CAAC,EAAE,CAAC,EACpE;YACE,KAAK,IAAI,CAAC,CAAC;SACd;;AAGD,QAAA,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE;YAChB,KAAK,IAAI,CAAC,CAAC;SACd;;AAGD,QAAA,IAAI,oDAAoD,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAC/D,KAAK,IAAI,GAAG,CAAC;SAChB;;AAGD,QAAA,IAAI,oCAAoC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAC/C,KAAK,IAAI,GAAG,CAAC;SAChB;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;KAC7B;AAED;;AAEG;AACK,IAAA,iBAAiB,CAAC,GAAQ,EAAA;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;;AAG3C,QAAA,IACI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;AAC5B,YAAA,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAC1C;AACE,YAAA,OAAO,CAAC,CAAC;SACZ;;QAGD,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE;AAC/B,YAAA,OAAO,GAAG,CAAC;SACd;AAED,QAAA,OAAO,CAAC,CAAC;KACZ;AAED;;AAEG;AACK,IAAA,mBAAmB,CAAC,GAAQ,EAAA;QAChC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE5C,IAAI,CAAC,IAAI,EAAE;AACP,YAAA,OAAO,CAAC,CAAC;SACZ;;AAGD,QAAA,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE;AACpD,YAAA,OAAO,CAAC,CAAC;SACZ;;AAGD,QAAA,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE;AAClB,YAAA,OAAO,GAAG,CAAC;SACd;AAED,QAAA,OAAO,CAAC,CAAC;KACZ;AAED;;AAEG;AACK,IAAA,mBAAmB,CAAC,GAAQ,EAAA;QAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAEhD,IAAI,CAAC,QAAQ,EAAE;AACX,YAAA,OAAO,CAAC,CAAC;SACZ;;QAGD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,CAAC,OAAO,IAAI,UAAU,KAAK,KAAK,EAAE;AAClC,YAAA,OAAO,CAAC,CAAC;SACZ;AAED,QAAA,IAAI,OAAO,IAAI,UAAU,EAAE;AACvB,YAAA,OAAO,GAAG,CAAC;SACd;AAED,QAAA,OAAO,CAAC,CAAC;KACZ;AAED;;AAEG;AACK,IAAA,kBAAkB,CAAC,GAAQ,EAAA;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;;QAGvC,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE;;AAE3C,YAAA,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;AACzB,gBAAA,OAAO,CAAC,CAAC;aACZ;SACJ;;QAGD,IAAI,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACrC,YAAA,OAAO,CAAC,CAAC;SACZ;AAED,QAAA,OAAO,CAAC,CAAC;KACZ;AAED;;AAEG;AACK,IAAA,sBAAsB,CAAC,GAAQ,EAAA;QACnC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;;AAGzD,QAAA,IAAI,UAAU,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE;AAC/D,YAAA,OAAO,GAAG,CAAC;SACd;;AAGD,QAAA,IAAI,OAAO,KAAK,GAAG,EAAE;AACjB,YAAA,OAAO,CAAC,CAAC;SACZ;AAED,QAAA,OAAO,CAAC,CAAC;KACZ;AAED;;AAEG;AACK,IAAA,iBAAiB,CAAC,GAAQ,EAAA;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAE3C,IAAI,CAAC,KAAK,EAAE;AACR,YAAA,OAAO,CAAC,CAAC;SACZ;;AAGD,QAAA,IACI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;AACzB,YAAA,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;AAC1B,YAAA,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC5B;AACE,YAAA,OAAO,CAAC,CAAC;SACZ;AAED,QAAA,OAAO,CAAC,CAAC;KACZ;AAED;;AAEG;AACK,IAAA,mBAAmB,CAAC,GAAQ,EAAA;QAChC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;;AAGjE,QAAA,IAAI,GAAG,KAAK,GAAG,EAAE;AACb,YAAA,OAAO,CAAC,CAAC;SACZ;;AAGD,QAAA,IAAI,GAAG,KAAK,GAAG,EAAE;AACb,YAAA,OAAO,CAAC,CAAC;SACZ;;AAGD,QAAA,IAAI,eAAe,KAAK,GAAG,EAAE;AACzB,YAAA,OAAO,CAAC,CAAC;SACZ;AAED,QAAA,OAAO,CAAC,CAAC;KACZ;AAED;;AAEG;AACK,IAAA,UAAU,CAAC,GAAW,EAAA;AAC1B,QAAA,IAAI;AACA,YAAA,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;SACtE;AAAC,QAAA,MAAM;AACJ,YAAA,OAAO,KAAK,CAAC;SAChB;KACJ;AAED;;AAEG;AACK,IAAA,sBAAsB,CAAC,GAAQ,EAAA;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;AAC9C,QAAA,OAAO,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,uBAAuB,CAAC;KACtD;AAED;;AAEG;AACK,IAAA,gBAAgB,CAAC,SAAiB,EAAA;QACtC,OAAO,IAAI,CAAC,0BAA0B,CAAC;AACnC,YAAA,OAAO,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE;AACvC,SAAA,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,sBAAsB,CAAC,MAAc,EAAA;AACzC,QAAA,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,KAAK,EAAE;AAC7B,YAAA,OAAO,KAAK,CAAC;SAChB;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3D,QAAA,OAAO,WAAW,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;KAClE;AAED;;AAEG;AACK,IAAA,oBAAoB,CAAC,GAAQ,EAAA;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;AAC9C,QAAA,OAAO,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,uBAAuB,CAAC;KACtD;AAED;;AAEG;AACK,IAAA,YAAY,CAAC,GAAQ,EAAE,IAAY,EAAE,OAAgB,EAAA;;AAEzD,QAAA,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;AAExC,QAAA,MAAM,QAAQ,GAAQ;AAClB,YAAA,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,eAAe;AACjE,YAAA,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;AACnC,YAAA,IAAI,EAAE,iBAAiB;SAC1B,CAAC;;QAGF,IAAI,aAAa,EAAE;YACf,QAAQ,CAAC,OAAO,GAAG;AACf,gBAAA,MAAM,EAAE,aAAa;gBACrB,IAAI;gBACJ,OAAO;AACP,gBAAA,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;aAC/D,CAAC;SACL;AAED,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,8BAA8B,EAAE;gBAC1D,IAAI;gBACJ,OAAO;AACP,gBAAA,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;AAC/D,aAAA,CAAC,CAAC;SACN;AAED,QAAA,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;KACrD;AAED;;AAEG;AACI,IAAA,YAAY,CAAC,SAAqC,EAAA;AACrD,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;KAClD;AAED;;AAEG;IACI,SAAS,GAAA;AACZ,QAAA,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;KAC7B;AACJ;;;;"}