xypriss 3.1.0 → 3.2.0

package/dist/esm/src/middleware/built-in/security/MobileOnlyProtector.js

@@ -0,0 +1,502 @@
+import { Logger } from '../../../../shared/logger/Logger.js';
+
+/**
+ * Mobile-Only Access Protector
+ * Blocks browser requests and allows only mobile app access.
+ * Multi-layered detection with strict validation to avoid false positives.
+ *
+ * @example Enable with defaults:
+ * ```typescript
+ * mobileOnly: true
+ * ```
+ *
+ * @example Custom configuration:
+ * ```typescript
+ * mobileOnly: {
+ *   blockBrowserIndicators: true,
+ *   allowedPlatforms: ['ios', 'android'],
+ *   requireMobileHeaders: true,
+ *   customUserAgentPatterns: [/MyApp/i],
+ *   errorMessage: "Mobile app access required"
+ * }
+ * ```
+ */
+class MobileOnlyProtector {
+    constructor(config = {}, logger) {
+        // Mobile platform indicators
+        this.mobilePatterns = [
+            /\bAndroid\b/i,
+            /\biPhone\b/i,
+            /\biPad\b/i,
+            /\biPod\b/i,
+            /\bBlackBerry\b/i,
+            /\bWindows Phone\b/i,
+            /\bReactNative\b/i,
+            /\bExpo\b/i,
+            /\bDalvik\b/i, // Android runtime
+        ];
+        // Android HTTP clients
+        this.androidHttpClients = [
+            /\bokhttp\b/i, // OkHttp
+            /\bretrofit\b/i, // Retrofit
+            /\bktor-client\b/i, // Ktor Client
+            /\bktor\b/i, // Ktor (short form)
+            /\bvolley\b/i, // Volley
+            /\bHttpUrlConnection\b/i, // HttpUrlConnection
+            /\bAndroidHttpClient\b/i, // Generic Android HTTP
+        ];
+        // iOS HTTP clients
+        this.iosHttpClients = [
+            /\bAlamofire\b/i, // Alamofire
+            /\bAFNetworking\b/i, // AFNetworking
+            /\bCFNetwork\b/i, // CFNetwork (iOS networking framework)
+            /\bURLSession\b/i, // URLSession
+            /\bNSURLSession\b/i, // NSURLSession (Objective-C)
+            /\bMoya\b/i, // Moya
+            /\bSiesta\b/i, // Siesta
+        ];
+        // Cross-platform mobile frameworks
+        this.mobileFameworks = [
+            /\bFlutter\b/i,
+            /\bDart\b/i, // Dart (Flutter's language)
+            /\bReact Native\b/i,
+            /\bReactNative\b/i,
+            /\bExpo\b/i,
+            /\bCapacitor\b/i, // Ionic Capacitor
+            /\bCordova\b/i, // Apache Cordova
+            /\bIonic\b/i, // Ionic Framework
+            /\bXamarin\b/i, // Xamarin
+        ];
+        // Comprehensive browser indicators (aggressive detection)
+        this.browserIndicators = [
+            /\bMozilla\b/i,
+            /\bChrome\b/i,
+            /\bChromium\b/i,
+            /\bSafari\b/i,
+            /\bFirefox\b/i,
+            /\bEdge\b/i,
+            /\bEdg\b/i,
+            /\bOpera\b/i,
+            /\bOPR\b/i,
+            /\bBrave\b/i,
+            /\bVivaldi\b/i,
+            /\bSeaMonkey\b/i,
+            /\bIceweasel\b/i,
+            /\bEpiphany\b/i,
+            /\bMidori\b/i,
+            /\bKonqueror\b/i,
+            /\bWebKit\b/i,
+            /\bGecko\b/i,
+            /\bTrident\b/i,
+            /\bPresto\b/i,
+            /\bEdgeHTML\b/i,
+            /\bNetscape\b/i,
+            /\bIE\b/i,
+            /\bMSIE\b/i,
+            /\brv:11/i, // IE11
+            /\bElectron\b/i, // Desktop apps
+            /\bPhantomJS\b/i, // Headless browser
+            /\bHeadlessChrome\b/i,
+        ];
+        // Known desktop OS indicators
+        this.desktopIndicators = [
+            /\bWindows NT\b/i,
+            /\bMac OS X\b/i,
+            /\bMacintosh\b/i,
+            /\bLinux x86_64\b/i,
+            /\bLinux i686\b/i,
+            /\bX11\b/i,
+            /\bWin64\b/i,
+            /\bWOW64\b/i,
+            /\bUbuntu\b/i,
+            /\bFedora\b/i,
+            /\bDebian\b/i,
+        ];
+        // Suspicious patterns often used in spoofing (excluding legitimate mobile clients)
+        this.suspiciousPatterns = [
+            /\bcurl\b/i,
+            /\bwget\b/i,
+            /\bPython\b/i,
+            /\bJava(?!Script)\b/i, // Java but not JavaScript
+            /\bperl\b/i,
+            /\bruby\b/i,
+            /\bPostman\b/i,
+            /\bInsomnia\b/i,
+            /\bHTTPie\b/i,
+            /\baxios\b/i,
+            /\bnode-fetch\b/i,
+            /\bgot\b/i,
+            /\bsuperagent\b/i,
+            /\brequest\b/i,
+            /\bbot\b/i,
+            /\bcrawler\b/i,
+            /\bspider\b/i,
+            /\bscraper\b/i,
+        ];
+        // Mobile-specific headers that indicate app requests
+        this.mobileHeaders = [
+            "x-requested-with",
+            "x-mobile-app",
+            "x-app-platform",
+            "x-app-version",
+            "expo-version",
+            "react-native-version",
+            "x-flutter-version",
+            "x-ios-bundle-identifier",
+            "x-android-package",
+        ];
+        this.config = {
+            enable: config.enable ?? true,
+            blockBrowserIndicators: config.blockBrowserIndicators ?? true,
+            allowedPlatforms: config.allowedPlatforms ?? [
+                "ios",
+                "android",
+                "react-native",
+                "expo",
+            ],
+            requireMobileHeaders: config.requireMobileHeaders ?? false,
+            customUserAgentPatterns: config.customUserAgentPatterns ?? [],
+            debug: config.debug ?? false,
+            errorMessage: config.errorMessage ??
+                "Mobile app access required. Browser requests are not allowed.",
+            statusCode: config.statusCode ?? 403,
+            caseSensitive: config.caseSensitive ?? false,
+            trimUserAgent: config.trimUserAgent ?? true,
+        };
+        this.logger =
+            logger ||
+                new Logger({
+                    components: { security: true },
+                    types: { debug: true },
+                });
+    }
+    /**
+     * Normalize User-Agent string
+     */
+    normalizeUserAgent(userAgent) {
+        if (!userAgent)
+            return "";
+        let normalized = userAgent;
+        if (this.config.trimUserAgent) {
+            normalized = normalized.trim();
+        }
+        // Remove excessive whitespace
+        normalized = normalized.replace(/\s+/g, " ");
+        return normalized;
+    }
+    /**
+     * Check for Android HTTP client indicators
+     */
+    hasAndroidHttpClient(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.androidHttpClients.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for iOS HTTP client indicators
+     */
+    hasIosHttpClient(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.iosHttpClients.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for mobile framework indicators
+     */
+    hasMobileFramework(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.mobileFameworks.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for browser indicators in User-Agent
+     */
+    hasBrowserIndicators(userAgent) {
+        if (!this.config.blockBrowserIndicators) {
+            return false;
+        }
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.browserIndicators.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for desktop OS indicators
+     */
+    hasDesktopIndicators(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.desktopIndicators.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for suspicious patterns (bots, tools, spoofing attempts)
+     */
+    hasSuspiciousPatterns(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.suspiciousPatterns.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check if User-Agent matches custom patterns
+     */
+    matchesCustomPatterns(userAgent) {
+        if (this.config.customUserAgentPatterns.length === 0) {
+            return false;
+        }
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        for (const pattern of this.config.customUserAgentPatterns) {
+            try {
+                const regex = new RegExp(pattern.source, flags);
+                if (regex.test(userAgent)) {
+                    if (this.config.debug) {
+                        this.logger.debug("security", `Custom pattern matched: ${pattern}`);
+                    }
+                    return true;
+                }
+            }
+            catch (error) {
+                this.logger.warn("security", `Invalid custom pattern: ${pattern}`);
+            }
+        }
+        return false;
+    }
+    /**
+     * Check if User-Agent indicates allowed mobile platform
+     */
+    hasAllowedPlatform(userAgent) {
+        return this.config.allowedPlatforms.some((platform) => {
+            switch (platform) {
+                case "ios":
+                    // iOS detection: iOS devices OR iOS HTTP clients (without desktop indicators)
+                    return ((/\b(iPhone|iPad|iPod)\b/i.test(userAgent) ||
+                        this.hasIosHttpClient(userAgent)) &&
+                        !/\b(Macintosh|Mac OS X)\b/i.test(userAgent));
+                case "android":
+                    // Android detection: Android OS OR Android HTTP clients (without desktop emulator)
+                    return ((/\bAndroid\b/i.test(userAgent) ||
+                        /\bDalvik\b/i.test(userAgent) ||
+                        this.hasAndroidHttpClient(userAgent)) &&
+                        !/\b(X11|Linux x86_64)\b/i.test(userAgent));
+                case "react-native":
+                    return /\b(ReactNative|React Native)\b/i.test(userAgent);
+                case "expo":
+                    return /\bExpo\b/i.test(userAgent);
+                case "flutter":
+                    return /\b(Flutter|Dart)\b/i.test(userAgent);
+                default:
+                    return false;
+            }
+        });
+    }
+    /**
+     * Check for mobile-specific patterns
+     */
+    hasMobilePatterns(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.mobilePatterns.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for mobile-specific headers
+     */
+    hasMobileHeaders(req) {
+        if (!req.headers) {
+            return false;
+        }
+        return this.mobileHeaders.some((header) => {
+            const lowerHeader = header.toLowerCase();
+            // Check both original case and lowercase
+            return req.headers[header] || req.headers[lowerHeader];
+        });
+    }
+    /**
+     * Validate User-Agent is not empty or suspicious
+     */
+    isValidUserAgent(userAgent) {
+        if (!userAgent || userAgent.length === 0) {
+            if (this.config.debug) {
+                this.logger.debug("security", "Empty User-Agent detected");
+            }
+            return false;
+        }
+        // Allow shorter User-Agents for mobile HTTP clients (like okhttp/4.12.0)
+        if (userAgent.length < 5) {
+            if (this.config.debug) {
+                this.logger.debug("security", `Suspicious short User-Agent: ${userAgent}`);
+            }
+            return false;
+        }
+        // User-Agent with only generic "Mobile" is suspicious
+        if (userAgent === "Mobile" || userAgent.toLowerCase() === "mobile") {
+            if (this.config.debug) {
+                this.logger.debug("security", "Generic 'Mobile' User-Agent detected");
+            }
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Perform comprehensive mobile request validation
+     */
+    validateMobileRequest(req, userAgent) {
+        let score = 0;
+        let reason = "";
+        const reasons = [];
+        // Phase 1: Validation checks (disqualifiers)
+        if (!this.isValidUserAgent(userAgent)) {
+            return { isValid: false, reason: "Invalid User-Agent", score: 0 };
+        }
+        if (this.hasSuspiciousPatterns(userAgent)) {
+            return {
+                isValid: false,
+                reason: "Suspicious patterns detected",
+                score: 0,
+            };
+        }
+        if (this.hasDesktopIndicators(userAgent)) {
+            return {
+                isValid: false,
+                reason: "Desktop OS indicators detected",
+                score: 0,
+            };
+        }
+        // Check browser indicators AFTER mobile patterns to avoid false positives
+        const hasBrowser = this.hasBrowserIndicators(userAgent);
+        const hasMobilePattern = this.hasMobilePatterns(userAgent);
+        const hasAndroidClient = this.hasAndroidHttpClient(userAgent);
+        const hasIosClient = this.hasIosHttpClient(userAgent);
+        const hasMobileFramework = this.hasMobileFramework(userAgent);
+        // If blockBrowserIndicators is disabled, browsers are allowed
+        if (!this.config.blockBrowserIndicators && hasBrowser) {
+            score += 50; // Give browsers a decent score when allowed
+            reasons.push("Browser allowed (blockBrowserIndicators disabled)");
+        }
+        // If it has browser indicators but NO mobile indicators, block it (only when blocking browsers)
+        else if (hasBrowser &&
+            !hasMobilePattern &&
+            !hasAndroidClient &&
+            !hasIosClient &&
+            !hasMobileFramework) {
+            return {
+                isValid: false,
+                reason: "Browser indicators without mobile patterns",
+                score: 0,
+            };
+        }
+        // Phase 2: Positive indicators (qualifiers)
+        // Custom patterns have highest priority
+        if (this.matchesCustomPatterns(userAgent)) {
+            score = 100;
+            reason = "Custom pattern match";
+            return { isValid: true, reason, score };
+        }
+        // Mobile HTTP clients (high confidence for legitimate mobile apps)
+        if (hasAndroidClient) {
+            score += 80;
+            reasons.push("Android HTTP client");
+        }
+        if (hasIosClient) {
+            score += 80;
+            reasons.push("iOS HTTP client");
+        }
+        // Mobile frameworks (high confidence)
+        if (hasMobileFramework) {
+            score += 70;
+            reasons.push("Mobile framework");
+        }
+        // Platform-specific detection (medium-high confidence)
+        if (this.hasAllowedPlatform(userAgent)) {
+            score += 60;
+            reasons.push("Allowed platform");
+        }
+        // General mobile patterns (medium confidence)
+        if (hasMobilePattern) {
+            score += 40;
+            reasons.push("Mobile patterns");
+        }
+        // Mobile headers boost confidence
+        if (this.hasMobileHeaders(req)) {
+            score += 30;
+            reasons.push("Mobile headers");
+        }
+        // Require minimum score threshold
+        const threshold = this.config.requireMobileHeaders ? 80 : 50;
+        reason =
+            reasons.length > 0 ? reasons.join(" + ") : "No mobile indicators";
+        return {
+            isValid: score >= threshold,
+            reason: score >= threshold
+                ? reason
+                : `Insufficient mobile indicators (score: ${score}/${threshold})`,
+            score,
+        };
+    }
+    /**
+     * Check if request is from a mobile app
+     */
+    isMobileRequest(req) {
+        const rawUserAgent = req.headers["user-agent"] || req.headers["User-Agent"] || "";
+        const userAgent = this.normalizeUserAgent(rawUserAgent);
+        const validation = this.validateMobileRequest(req, userAgent);
+        if (this.config.debug) {
+            this.logger.debug("security", `Validation result: ${validation.isValid ? "PASS" : "FAIL"} ` +
+                `(Score: ${validation.score}) - ${validation.reason} - UA: ${userAgent.substring(0, 100)}`);
+        }
+        return validation.isValid;
+    }
+    /**
+     * Middleware function
+     */
+    middleware() {
+        return (req, res, next) => {
+            const userAgent = req.headers["user-agent"] ||
+                req.headers["User-Agent"] ||
+                "none";
+            if (this.config.debug) {
+                this.logger.debug("security", `MobileOnly check for ${req.ip} - UA: ${userAgent.substring(0, 100)}`);
+            }
+            if (this.isMobileRequest(req)) {
+                if (this.config.debug) {
+                    this.logger.debug("security", `✅ ALLOWED mobile request from: ${req.ip}`);
+                }
+                return next();
+            }
+            this.logger.warn("security", `❌ BLOCKED non-mobile request from ${req.ip}. User-Agent: ${userAgent.substring(0, 150)}`);
+            // Check if headers already sent to prevent error
+            if (res.headersSent) {
+                this.logger.error("security", `Cannot send response for blocked request from ${req.ip} - headers already sent`);
+                return;
+            }
+            return res.status(this.config.statusCode).json({
+                error: "Access Denied",
+                message: this.config.errorMessage,
+                code: "MOBILE_ONLY",
+                timestamp: new Date().toISOString(),
+                userAgent: userAgent,
+                ip: req.ip,
+            });
+        };
+    }
+    /**
+     * Get current configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+}
+
+export { MobileOnlyProtector };
+//# sourceMappingURL=MobileOnlyProtector.js.map

package/dist/esm/src/middleware/built-in/security/MobileOnlyProtector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MobileOnlyProtector.js","sources":["../../../../../../src/middleware/built-in/security/MobileOnlyProtector.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;;;;;;;;;;;;;;;;;;;;AAoBG;MA0CU,mBAAmB,CAAA;IAsI5B,WAAY,CAAA,MAAA,GAA2B,EAAE,EAAE,MAAe,EAAA;;AAjIzC,QAAA,IAAA,CAAA,cAAc,GAAG;YAC9B,cAAc;YACd,aAAa;YACb,WAAW;YACX,WAAW;YACX,iBAAiB;YACjB,oBAAoB;YACpB,kBAAkB;YAClB,WAAW;AACX,YAAA,aAAa;SAChB,CAAC;;AAGe,QAAA,IAAA,CAAA,kBAAkB,GAAG;AAClC,YAAA,aAAa;AACb,YAAA,eAAe;AACf,YAAA,kBAAkB;AAClB,YAAA,WAAW;AACX,YAAA,aAAa;AACb,YAAA,wBAAwB;AACxB,YAAA,wBAAwB;SAC3B,CAAC;;AAGe,QAAA,IAAA,CAAA,cAAc,GAAG;AAC9B,YAAA,gBAAgB;AAChB,YAAA,mBAAmB;AACnB,YAAA,gBAAgB;AAChB,YAAA,iBAAiB;AACjB,YAAA,mBAAmB;AACnB,YAAA,WAAW;AACX,YAAA,aAAa;SAChB,CAAC;;AAGe,QAAA,IAAA,CAAA,eAAe,GAAG;YAC/B,cAAc;AACd,YAAA,WAAW;YACX,mBAAmB;YACnB,kBAAkB;YAClB,WAAW;AACX,YAAA,gBAAgB;AAChB,YAAA,cAAc;AACd,YAAA,YAAY;AACZ,YAAA,cAAc;SACjB,CAAC;;AAGe,QAAA,IAAA,CAAA,iBAAiB,GAAG;YACjC,cAAc;YACd,aAAa;YACb,eAAe;YACf,aAAa;YACb,cAAc;YACd,WAAW;YACX,UAAU;YACV,YAAY;YACZ,UAAU;YACV,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,gBAAgB;YAChB,eAAe;YACf,aAAa;YACb,gBAAgB;YAChB,aAAa;YACb,YAAY;YACZ,cAAc;YACd,aAAa;YACb,eAAe;YACf,eAAe;YACf,SAAS;YACT,WAAW;AACX,YAAA,UAAU;AACV,YAAA,eAAe;AACf,YAAA,gBAAgB;YAChB,qBAAqB;SACxB,CAAC;;AAGe,QAAA,IAAA,CAAA,iBAAiB,GAAG;YACjC,iBAAiB;YACjB,eAAe;YACf,gBAAgB;YAChB,mBAAmB;YACnB,iBAAiB;YACjB,UAAU;YACV,YAAY;YACZ,YAAY;YACZ,aAAa;YACb,aAAa;YACb,aAAa;SAChB,CAAC;;AAGe,QAAA,IAAA,CAAA,kBAAkB,GAAG;YAClC,WAAW;YACX,WAAW;YACX,aAAa;AACb,YAAA,qBAAqB;YACrB,WAAW;YACX,WAAW;YACX,cAAc;YACd,eAAe;YACf,aAAa;YACb,YAAY;YACZ,iBAAiB;YACjB,UAAU;YACV,iBAAiB;YACjB,cAAc;YACd,UAAU;YACV,cAAc;YACd,aAAa;YACb,cAAc;SACjB,CAAC;;AAGe,QAAA,IAAA,CAAA,aAAa,GAAG;YAC7B,kBAAkB;YAClB,cAAc;YACd,gBAAgB;YAChB,eAAe;YACf,cAAc;YACd,sBAAsB;YACtB,mBAAmB;YACnB,yBAAyB;YACzB,mBAAmB;SACtB,CAAC;QAGE,IAAI,CAAC,MAAM,GAAG;AACV,YAAA,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;AAC7B,YAAA,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI;AAC7D,YAAA,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI;gBACzC,KAAK;gBACL,SAAS;gBACT,cAAc;gBACd,MAAM;AACT,aAAA;AACD,YAAA,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,KAAK;AAC1D,YAAA,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,EAAE;AAC7D,YAAA,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAC5B,YAAY,EACR,MAAM,CAAC,YAAY;gBACnB,+DAA+D;AACnE,YAAA,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG;AACpC,YAAA,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,KAAK;AAC5C,YAAA,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;SAC9C,CAAC;AAEF,QAAA,IAAI,CAAC,MAAM;YACP,MAAM;AACN,gBAAA,IAAI,MAAM,CAAC;AACP,oBAAA,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;AAC9B,oBAAA,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;AACzB,iBAAA,CAAC,CAAC;KACV;AAED;;AAEG;AACK,IAAA,kBAAkB,CAAC,SAAiB,EAAA;AACxC,QAAA,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,EAAE,CAAC;QAE1B,IAAI,UAAU,GAAG,SAAS,CAAC;AAE3B,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;AAC3B,YAAA,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;SAClC;;QAGD,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE7C,QAAA,OAAO,UAAU,CAAC;KACrB;AAED;;AAEG;AACK,IAAA,oBAAoB,CAAC,SAAiB,EAAA;AAC1C,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,KAAI;YAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAChD,YAAA,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACjC,SAAC,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,gBAAgB,CAAC,SAAiB,EAAA;AACtC,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,KAAI;YACxC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAChD,YAAA,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACjC,SAAC,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,kBAAkB,CAAC,SAAiB,EAAA;AACxC,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,KAAI;YACzC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAChD,YAAA,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACjC,SAAC,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,oBAAoB,CAAC,SAAiB,EAAA;AAC1C,QAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;AACrC,YAAA,OAAO,KAAK,CAAC;SAChB;AAED,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,KAAI;YAC3C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAChD,YAAA,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACjC,SAAC,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,oBAAoB,CAAC,SAAiB,EAAA;AAC1C,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,KAAI;YAC3C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAChD,YAAA,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACjC,SAAC,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,qBAAqB,CAAC,SAAiB,EAAA;AAC3C,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,KAAI;YAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAChD,YAAA,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACjC,SAAC,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,qBAAqB,CAAC,SAAiB,EAAA;QAC3C,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,MAAM,KAAK,CAAC,EAAE;AAClD,YAAA,OAAO,KAAK,CAAC;SAChB;AAED,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;QAErD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE;AACvD,YAAA,IAAI;gBACA,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAChD,gBAAA,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;AACvB,oBAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;wBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,CAA2B,wBAAA,EAAA,OAAO,CAAE,CAAA,CACvC,CAAC;qBACL;AACD,oBAAA,OAAO,IAAI,CAAC;iBACf;aACJ;YAAC,OAAO,KAAK,EAAE;gBACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,UAAU,EACV,CAA2B,wBAAA,EAAA,OAAO,CAAE,CAAA,CACvC,CAAC;aACL;SACJ;AAED,QAAA,OAAO,KAAK,CAAC;KAChB;AAED;;AAEG;AACK,IAAA,kBAAkB,CAAC,SAAiB,EAAA;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAI;YAClD,QAAQ,QAAQ;AACZ,gBAAA,KAAK,KAAK;;AAEN,oBAAA,QACI,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC;AACtC,wBAAA,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;AACpC,wBAAA,CAAC,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,EAC9C;AAEN,gBAAA,KAAK,SAAS;;AAEV,oBAAA,QACI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;AAC3B,wBAAA,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;AAC7B,wBAAA,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC;AACxC,wBAAA,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,EAC5C;AAEN,gBAAA,KAAK,cAAc;AACf,oBAAA,OAAO,iCAAiC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAE7D,gBAAA,KAAK,MAAM;AACP,oBAAA,OAAO,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAEvC,gBAAA,KAAK,SAAS;AACV,oBAAA,OAAO,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAEjD,gBAAA;AACI,oBAAA,OAAO,KAAK,CAAC;aACpB;AACL,SAAC,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,iBAAiB,CAAC,SAAiB,EAAA;AACvC,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,KAAI;YACxC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAChD,YAAA,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACjC,SAAC,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,gBAAgB,CAAC,GAAQ,EAAA;AAC7B,QAAA,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE;AACd,YAAA,OAAO,KAAK,CAAC;SAChB;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,KAAI;AACtC,YAAA,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;;AAEzC,YAAA,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAC3D,SAAC,CAAC,CAAC;KACN;AAED;;AAEG;AACK,IAAA,gBAAgB,CAAC,SAAiB,EAAA;QACtC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE;AACtC,YAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;aAC9D;AACD,YAAA,OAAO,KAAK,CAAC;SAChB;;AAGD,QAAA,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE;AACtB,YAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,CAAgC,6BAAA,EAAA,SAAS,CAAE,CAAA,CAC9C,CAAC;aACL;AACD,YAAA,OAAO,KAAK,CAAC;SAChB;;QAGD,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE;AAChE,YAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,sCAAsC,CACzC,CAAC;aACL;AACD,YAAA,OAAO,KAAK,CAAC;SAChB;AAED,QAAA,OAAO,IAAI,CAAC;KACf;AAED;;AAEG;IACK,qBAAqB,CACzB,GAAQ,EACR,SAAiB,EAAA;QAMjB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,OAAO,GAAa,EAAE,CAAC;;QAG7B,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE;AACnC,YAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;SACrE;AAED,QAAA,IAAI,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE;YACvC,OAAO;AACH,gBAAA,OAAO,EAAE,KAAK;AACd,gBAAA,MAAM,EAAE,8BAA8B;AACtC,gBAAA,KAAK,EAAE,CAAC;aACX,CAAC;SACL;AAED,QAAA,IAAI,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE;YACtC,OAAO;AACH,gBAAA,OAAO,EAAE,KAAK;AACd,gBAAA,MAAM,EAAE,gCAAgC;AACxC,gBAAA,KAAK,EAAE,CAAC;aACX,CAAC;SACL;;QAGD,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;;QAG9D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,UAAU,EAAE;AACnD,YAAA,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;SACrE;;AAEI,aAAA,IACD,UAAU;AACV,YAAA,CAAC,gBAAgB;AACjB,YAAA,CAAC,gBAAgB;AACjB,YAAA,CAAC,YAAY;YACb,CAAC,kBAAkB,EACrB;YACE,OAAO;AACH,gBAAA,OAAO,EAAE,KAAK;AACd,gBAAA,MAAM,EAAE,4CAA4C;AACpD,gBAAA,KAAK,EAAE,CAAC;aACX,CAAC;SACL;;;AAKD,QAAA,IAAI,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE;YACvC,KAAK,GAAG,GAAG,CAAC;YACZ,MAAM,GAAG,sBAAsB,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;SAC3C;;QAGD,IAAI,gBAAgB,EAAE;YAClB,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;SACvC;QAED,IAAI,YAAY,EAAE;YACd,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;SACnC;;QAGD,IAAI,kBAAkB,EAAE;YACpB,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;SACpC;;AAGD,QAAA,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE;YACpC,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;SACpC;;QAGD,IAAI,gBAAgB,EAAE;YAClB,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;SACnC;;AAGD,QAAA,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE;YAC5B,KAAK,IAAI,EAAE,CAAC;AACZ,YAAA,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;SAClC;;AAGD,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG,EAAE,GAAG,EAAE,CAAC;QAE7D,MAAM;AACF,YAAA,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,sBAAsB,CAAC;QAEtE,OAAO;YACH,OAAO,EAAE,KAAK,IAAI,SAAS;YAC3B,MAAM,EACF,KAAK,IAAI,SAAS;AACd,kBAAE,MAAM;AACR,kBAAE,CAAA,uCAAA,EAA0C,KAAK,CAAA,CAAA,EAAI,SAAS,CAAG,CAAA,CAAA;YACzE,KAAK;SACR,CAAC;KACL;AAED;;AAEG;AACI,IAAA,eAAe,CAAC,GAAQ,EAAA;AAC3B,QAAA,MAAM,YAAY,GACd,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAExD,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AAE9D,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;AACnB,YAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,CAAsB,mBAAA,EAAA,UAAU,CAAC,OAAO,GAAG,MAAM,GAAG,MAAM,CAAG,CAAA,CAAA;AACzD,gBAAA,CAAA,QAAA,EAAW,UAAU,CAAC,KAAK,OACvB,UAAU,CAAC,MACf,CAAU,OAAA,EAAA,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA,CAAE,CAC9C,CAAC;SACL;QAED,OAAO,UAAU,CAAC,OAAO,CAAC;KAC7B;AAED;;AAEG;IACI,UAAU,GAAA;AACb,QAAA,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,KAAI;AACrC,YAAA,MAAM,SAAS,GACX,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;AACzB,gBAAA,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;AACzB,gBAAA,MAAM,CAAC;AAEX,YAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;gBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,CAAwB,qBAAA,EAAA,GAAG,CAAC,EAAE,UAAU,SAAS,CAAC,SAAS,CACvD,CAAC,EACD,GAAG,CACN,CAAE,CAAA,CACN,CAAC;aACL;AAED,YAAA,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE;AAC3B,gBAAA,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;AACnB,oBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,CAAA,+BAAA,EAAkC,GAAG,CAAC,EAAE,CAAA,CAAE,CAC7C,CAAC;iBACL;gBACD,OAAO,IAAI,EAAE,CAAC;aACjB;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,UAAU,EACV,CACI,kCAAA,EAAA,GAAG,CAAC,EACR,iBAAiB,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAE,CAAA,CACjD,CAAC;;AAGF,YAAA,IAAI,GAAG,CAAC,WAAW,EAAE;AACjB,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,CAAA,8CAAA,EAAiD,GAAG,CAAC,EAAE,CAAA,uBAAA,CAAyB,CACnF,CAAC;gBACF,OAAO;aACV;AAED,YAAA,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;AAC3C,gBAAA,KAAK,EAAE,eAAe;AACtB,gBAAA,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;AACjC,gBAAA,IAAI,EAAE,aAAa;AACnB,gBAAA,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;AACnC,gBAAA,SAAS,EAAE,SAAS;gBACpB,EAAE,EAAE,GAAG,CAAC,EAAE;AACb,aAAA,CAAC,CAAC;AACP,SAAC,CAAC;KACL;AAED;;AAEG;IACI,SAAS,GAAA;AACZ,QAAA,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;KAC7B;AACJ;;;;"}