xypriss 9.10.19 → 9.10.21

package/dist/src/middleware/built-in/security/RequestSignatureProtector.js

@@ -1,463 +0,0 @@
-/**
- * XyRS - XyPriss Request Signature Protector
- * Validates request signatures for API authentication
- * Uses a predefined header name with developer-configured secret value
- * Enhanced with robust validation and security measures
- */
-import { Logger } from "../../../shared/logger/Logger";
-import * as crypto from "crypto";
-import { Cipher } from "xypriss-security";
-export class RequestSignatureProtector {
-    constructor(options, logger) {
-        this.failedAttempts = new Map();
-        this.CLEANUP_INTERVAL = 60000; // 1 minute
-        this.HEADER_NAME = options.headerName || "XP-Request-Sig";
-        // Strict validation of required secret
-        this.validateSecret(options.secret, options.minSecretLength);
-        this.config = {
-            errorMessage: "Invalid or missing request signature",
-            statusCode: 401,
-            debug: false,
-            caseSensitive: true,
-            trimValue: true,
-            maxHeaderLength: 512,
-            maxFailedAttempts: 5,
-            blockDuration: 15 * 60 * 1000, // 15 minutes
-            disableRateLimiting: false,
-            rateLimitScaleFactor: 1.0,
-            minSecretLength: 32,
-            timingSafeComparison: true,
-            rejectSuspiciousPatterns: true,
-            ...options,
-        };
-        // Store hashed version of secret for additional security
-        this.SECRET_HASH = this.hashSecret(this.config.secret);
-        // Initialize logger
-        this.logger =
-            logger ||
-                new Logger({
-                    enabled: true,
-                    level: "debug",
-                    components: { security: true },
-                    types: { debug: true },
-                });
-        // Start cleanup timer for failed attempts tracking
-        this.startCleanupTimer();
-        this.logSecurityEvent("info", "XyRS initialized with strict validation");
-    }
-    /**
-     * Get the request signature middleware function
-     */
-    getMiddleware() {
-        return (req, res, next) => {
-            this.handleRequest(req, res, next);
-        };
-    }
-    /**
-     * Handle incoming request and validate signature
-     */
-    handleRequest(req, res, next) {
-        const clientId = this.extractClientIdentifier(req);
-        // Check if client is currently blocked (if rate limiting is enabled)
-        if (!this.config.disableRateLimiting &&
-            this.isClientBlocked(clientId)) {
-            return this.blockRequest(res, "RATE_LIMITED", "Too many failed authentication attempts. Temporarily blocked.", clientId);
-        }
-        if (this.config.debug) {
-            this.logger.debug("security", "XyRS validating request signature");
-        }
-        // Strict header extraction
-        const signature = this.extractSignatureHeader(req);
-        if (signature === null) {
-            this.recordFailedAttempt(clientId);
-            return this.blockRequest(res, "MISSING_SIGNATURE", `Required header '${this.HEADER_NAME}' is missing or malformed`, clientId);
-        }
-        // Length validation to prevent DoS
-        if (!this.validateHeaderLength(signature)) {
-            this.recordFailedAttempt(clientId);
-            return this.blockRequest(res, "INVALID_HEADER_LENGTH", `Header value exceeds maximum allowed length`, clientId);
-        }
-        // Suspicious pattern detection
-        if (this.config.rejectSuspiciousPatterns &&
-            this.containsSuspiciousPatterns(signature)) {
-            this.recordFailedAttempt(clientId);
-            return this.blockRequest(res, "SUSPICIOUS_PATTERN", `Header contains suspicious or malicious patterns`, clientId);
-        }
-        // Process signature value
-        const processedSignature = this.processSignatureValue(signature);
-        const expectedSignature = this.processSignatureValue(this.config.secret);
-        // Validate signature with timing-safe comparison
-        const isValid = this.compareSignatures(processedSignature, expectedSignature);
-        // console.log({ processedSignature, expectedSignature });
-        if (!isValid) {
-            this.recordFailedAttempt(clientId);
-            this.logSecurityEvent("warning", "Invalid signature attempt", {
-                clientId,
-                signatureLength: signature.length,
-            });
-            return this.blockRequest(res, "INVALID_SIGNATURE", `Header '${this.HEADER_NAME}' value does not match expected signature`, clientId, { processedSignature, expectedSignature });
-        }
-        // Signature is valid - clear any failed attempts
-        this.clearFailedAttempts(clientId);
-        if (this.config.debug) {
-            this.logger.debug("security", "XyRS signature validation passed");
-        }
-        next();
-    }
-    /**
-     * Extract client identifier for rate limiting (IP-based)
-     */
-    extractClientIdentifier(req) {
-        // Try multiple methods to get real IP
-        const ip = req.ip ||
-            req.headers["x-forwarded-for"]?.split(",")[0]?.trim() ||
-            req.headers["x-real-ip"] ||
-            req.connection?.remoteAddress ||
-            req.socket?.remoteAddress ||
-            "unknown";
-        return this.sanitizeClientId(ip);
-    }
-    /**
-     * Sanitize client identifier
-     */
-    sanitizeClientId(clientId) {
-        // Remove IPv6 prefix if present
-        let sanitized = clientId.replace(/^::ffff:/, "");
-        // Keep only alphanumeric, dots, colons, and hyphens
-        sanitized = sanitized.replace(/[^a-zA-Z0-9.:_-]/g, "");
-        return sanitized || "unknown";
-    }
-    /**
-     * Strictly extract signature header with no fallbacks
-     */
-    extractSignatureHeader(req) {
-        if (!req.headers || typeof req.headers !== "object") {
-            return null;
-        }
-        // Only check lowercase version (standard HTTP header convention)
-        const headerKey = this.HEADER_NAME.toLowerCase();
-        const signature = req.headers[headerKey];
-        // Strict type checking
-        if (typeof signature !== "string") {
-            return null;
-        }
-        // Reject empty or whitespace-only headers
-        if (signature.length === 0 || /^\s*$/.test(signature)) {
-            return null;
-        }
-        return signature;
-    }
-    /**
-     * Validate header length to prevent DoS attacks
-     */
-    validateHeaderLength(signature) {
-        return (signature.length > 0 &&
-            signature.length <= (this.config.maxHeaderLength || 512));
-    }
-    /**
-     * Detect suspicious patterns in header value
-     */
-    containsSuspiciousPatterns(signature) {
-        // Check for common attack patterns
-        const suspiciousPatterns = [
-            /[<>\"'`]/g, // HTML/Script injection characters
-            /\.\./g, // Path traversal
-            /[\x00-\x08\x0B\x0C\x0E-\x1F]/g, // Control characters
-            /\${.*}/g, // Template injection
-            /\|\||&&/g, // Command injection
-            /(\r\n|\n|\r)/g, // CRLF injection
-        ];
-        return suspiciousPatterns.some((pattern) => pattern.test(signature));
-    }
-    /**
-     * Process signature value based on configuration
-     */
-    processSignatureValue(value) {
-        return this.config.trimValue ? value.trim() : value;
-    }
-    /**
-     * Compare signatures with optional timing-safe comparison
-     */
-    compareSignatures(received, expected) {
-        // Always check lengths first (fast rejection)
-        if (received.length !== expected.length) {
-            return false;
-        }
-        if (this.config.timingSafeComparison) {
-            return this.timingSafeEqual(received, expected);
-        }
-        // Standard comparison
-        return this.config.caseSensitive
-            ? received === expected
-            : received.toLowerCase() === expected.toLowerCase();
-    }
-    /**
-     * Timing-safe string comparison to prevent timing attacks
-     */
-    timingSafeEqual(a, b) {
-        // Convert to buffers for timing-safe comparison
-        const bufA = Buffer.from(this.config.caseSensitive ? a : a.toLowerCase());
-        const bufB = Buffer.from(this.config.caseSensitive ? b : b.toLowerCase());
-        if (bufA.length !== bufB.length) {
-            return false;
-        }
-        try {
-            return crypto.timingSafeEqual(bufA, bufB);
-        }
-        catch {
-            return false;
-        }
-    }
-    /**
-     * Check if client is currently blocked due to failed attempts
-     */
-    isClientBlocked(clientId) {
-        const attempt = this.failedAttempts.get(clientId);
-        if (!attempt || !attempt.blockedUntil) {
-            return false;
-        }
-        const now = Date.now();
-        if (now >= attempt.blockedUntil) {
-            // Block period expired
-            this.failedAttempts.delete(clientId);
-            return false;
-        }
-        return true;
-    }
-    /**
-     * Record failed authentication attempt
-     */
-    recordFailedAttempt(clientId) {
-        // Skip recording if rate limiting is disabled
-        if (this.config.disableRateLimiting) {
-            return;
-        }
-        const now = Date.now();
-        const attempt = this.failedAttempts.get(clientId) || {
-            count: 0,
-            blockedUntil: null,
-            lastAttempt: now,
-        };
-        attempt.count += 1;
-        attempt.lastAttempt = now;
-        // Calculate scaled thresholds
-        const scaledMaxFailedAttempts = Math.ceil((this.config.maxFailedAttempts || 5) *
-            (this.config.rateLimitScaleFactor || 1.0));
-        const scaledBlockDuration = Math.ceil((this.config.blockDuration || 900000) *
-            (this.config.rateLimitScaleFactor || 1.0));
-        // Block if threshold exceeded
-        if (attempt.count >= scaledMaxFailedAttempts) {
-            attempt.blockedUntil = now + scaledBlockDuration;
-            this.logSecurityEvent("warning", "Client blocked due to failed attempts", {
-                clientId,
-                attempts: attempt.count,
-                blockedUntil: new Date(attempt.blockedUntil).toISOString(),
-                scaledMaxFailedAttempts,
-                scaledBlockDuration,
-            });
-        }
-        this.failedAttempts.set(clientId, attempt);
-    }
-    /**
-     * Clear failed attempts for a client
-     */
-    clearFailedAttempts(clientId) {
-        this.failedAttempts.delete(clientId);
-    }
-    /**
-     * Validate secret meets security requirements
-     */
-    validateSecret(secret, minLength) {
-        const minLen = minLength || 32;
-        if (!secret || typeof secret !== "string") {
-            throw new Error("RequestSignatureProtector: secret is required and must be a string");
-        }
-        const trimmedSecret = secret.trim();
-        if (trimmedSecret.length === 0) {
-            throw new Error("RequestSignatureProtector: secret cannot be empty or whitespace-only");
-        }
-        if (trimmedSecret.length < minLen) {
-            throw new Error(`RequestSignatureProtector: secret must be at least ${minLen} characters long (current: ${trimmedSecret.length})`);
-        }
-        // Check for weak secrets
-        if (this.isWeakSecret(trimmedSecret)) {
-            throw new Error("RequestSignatureProtector: secret appears to be weak. Use a cryptographically strong random value.");
-        }
-    }
-    /**
-     * Detect weak/predictable secrets
-     */
-    isWeakSecret(secret) {
-        const weakPatterns = [
-            /^[0-9]+$/, // Only numbers
-            /^[a-zA-Z]+$/, // Only letters
-            /^(.)\1+$/, // Repeated character
-            /^(123|abc|password|secret|key|test|demo|admin)/i, // Common words
-            /^[a-f0-9]{32}$/i, // Looks like MD5 (weak)
-        ];
-        return weakPatterns.some((pattern) => pattern.test(secret));
-    }
-    /**
-     * Hash secret for internal verification
-     */
-    hashSecret(secret) {
-        return Cipher.hash
-            .create(secret, { algorithm: "sha256" })
-            .toString("hex");
-    }
-    /**
-     * Start cleanup timer for failed attempts
-     */
-    startCleanupTimer() {
-        this.cleanupTimer = setInterval(() => {
-            this.cleanupExpiredAttempts();
-        }, this.CLEANUP_INTERVAL);
-        // Don't keep process alive for cleanup
-        if (this.cleanupTimer.unref) {
-            this.cleanupTimer.unref();
-        }
-    }
-    /**
-     * Clean up expired failed attempt records
-     */
-    cleanupExpiredAttempts() {
-        const now = Date.now();
-        const expiredClients = [];
-        for (const [clientId, attempt] of this.failedAttempts.entries()) {
-            // Remove if block expired and no recent attempts
-            if (attempt.blockedUntil &&
-                now >= attempt.blockedUntil &&
-                now - attempt.lastAttempt > this.CLEANUP_INTERVAL) {
-                expiredClients.push(clientId);
-            }
-        }
-        expiredClients.forEach((clientId) => this.failedAttempts.delete(clientId));
-    }
-    /**
-     * Block the request with appropriate error response
-     */
-    blockRequest(res, code, details, clientId, metadata) {
-        const isDevelopment = this.config.debug;
-        const response = {
-            error: isDevelopment
-                ? this.config.errorMessage
-                : "Authentication required",
-            timestamp: new Date().toISOString(),
-            code: "NEHONIX_XYRS_001",
-        };
-        // Add detailed info only in debug mode
-        if (isDevelopment) {
-            response.xyrs = {
-                module: "RequestSignature",
-                code,
-                details,
-                requiredHeader: this.HEADER_NAME,
-                hint: "Include the X-XyRS header with your configured secret value",
-            };
-        }
-        // console.log("metadata: ", metadata);
-        if (this.config.debug && clientId) {
-            this.logger.debug("security", "XyRS blocking request", {
-                code,
-                details,
-                clientId,
-                requiredHeader: this.HEADER_NAME,
-                ...metadata,
-            });
-        }
-        res.status(this.config.statusCode).json(response);
-    }
-    /**
-     * Log security events
-     */
-    logSecurityEvent(level, message, metadata) {
-        if (this.config.debug) {
-            const logMethod = level === "error"
-                ? "error"
-                : level === "warning"
-                    ? "warn"
-                    : "debug";
-            this.logger[logMethod]("security", message, metadata);
-        }
-    }
-    /**
-     * Update configuration with strict validation
-     */
-    updateConfig(newConfig) {
-        if (newConfig.secret !== undefined) {
-            this.validateSecret(newConfig.secret, newConfig.minSecretLength);
-        }
-        this.config = { ...this.config, ...newConfig };
-    }
-    /**
-     * Get current configuration (without exposing the secret)
-     */
-    getConfig() {
-        return {
-            errorMessage: this.config.errorMessage,
-            statusCode: this.config.statusCode,
-            debug: this.config.debug,
-            caseSensitive: this.config.caseSensitive,
-            trimValue: this.config.trimValue,
-            hasSecret: !!this.config.secret,
-            maxHeaderLength: this.config.maxHeaderLength,
-            maxFailedAttempts: this.config.maxFailedAttempts,
-            blockDuration: this.config.blockDuration,
-            disableRateLimiting: this.config.disableRateLimiting,
-            rateLimitScaleFactor: this.config.rateLimitScaleFactor,
-            minSecretLength: this.config.minSecretLength,
-            timingSafeComparison: this.config.timingSafeComparison,
-            rejectSuspiciousPatterns: this.config.rejectSuspiciousPatterns,
-        };
-    }
-    /**
-     * Get the header name used for signatures
-     */
-    getHeaderName() {
-        return this.HEADER_NAME;
-    }
-    /**
-     * Validate if a signature would be accepted (for testing)
-     */
-    validateSignature(signature) {
-        if (!signature || typeof signature !== "string") {
-            return false;
-        }
-        if (!this.validateHeaderLength(signature)) {
-            return false;
-        }
-        if (this.config.rejectSuspiciousPatterns &&
-            this.containsSuspiciousPatterns(signature)) {
-            return false;
-        }
-        const processedSignature = this.processSignatureValue(signature);
-        const expectedSignature = this.processSignatureValue(this.config.secret);
-        return this.compareSignatures(processedSignature, expectedSignature);
-    }
-    /**
-     * Get statistics about failed attempts (for monitoring)
-     */
-    getSecurityStats() {
-        const now = Date.now();
-        let blockedCount = 0;
-        for (const attempt of this.failedAttempts.values()) {
-            if (attempt.blockedUntil && now < attempt.blockedUntil) {
-                blockedCount++;
-            }
-        }
-        return {
-            trackedClients: this.failedAttempts.size,
-            blockedClients: blockedCount,
-        };
-    }
-    /**
-     * Cleanup resources
-     */
-    destroy() {
-        if (this.cleanupTimer) {
-            clearInterval(this.cleanupTimer);
-        }
-        this.failedAttempts.clear();
-    }
-}
-//# sourceMappingURL=RequestSignatureProtector.js.map

package/dist/src/middleware/built-in/security/RequestSignatureProtector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"RequestSignatureProtector.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/RequestSignatureProtector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,OAAO,yBAAyB;IASlC,YAAY,OAA+B,EAAE,MAAe;QALpD,mBAAc,GAA+B,IAAI,GAAG,EAAE,CAAC;QAE9C,qBAAgB,GAAG,KAAK,CAAC,CAAC,WAAW;QAIlD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC;QAE1D,uCAAuC;QACvC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAE7D,IAAI,CAAC,MAAM,GAAG;YACV,YAAY,EAAE,sCAAsC;YACpD,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,KAAK;YACZ,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,GAAG;YACpB,iBAAiB,EAAE,CAAC;YACpB,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;YAC5C,mBAAmB,EAAE,KAAK;YAC1B,oBAAoB,EAAE,GAAG;YACzB,eAAe,EAAE,EAAE;YACnB,oBAAoB,EAAE,IAAI;YAC1B,wBAAwB,EAAE,IAAI;YAC9B,GAAG,OAAO;SACb,CAAC;QACF,yDAAyD;QACzD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEvD,oBAAoB;QACpB,IAAI,CAAC,MAAM;YACP,MAAM;gBACN,IAAI,MAAM,CAAC;oBACP,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,OAAO;oBACd,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC9B,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC,CAAC;QAEP,mDAAmD;QACnD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,IAAI,CAAC,gBAAgB,CACjB,MAAM,EACN,yCAAyC,CAC5C,CAAC;IACN,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAEnD,qEAAqE;QACrE,IACI,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAChC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAChC,CAAC;YACC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,cAAc,EACd,+DAA+D,EAC/D,QAAQ,CACX,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;QACvE,CAAC;QAED,2BAA2B;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAEnD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,mBAAmB,EACnB,oBAAoB,IAAI,CAAC,WAAW,2BAA2B,EAC/D,QAAQ,CACX,CAAC;QACN,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,uBAAuB,EACvB,6CAA6C,EAC7C,QAAQ,CACX,CAAC;QACN,CAAC;QAED,+BAA+B;QAC/B,IACI,IAAI,CAAC,MAAM,CAAC,wBAAwB;YACpC,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAC5C,CAAC;YACC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,oBAAoB,EACpB,kDAAkD,EAClD,QAAQ,CACX,CAAC;QACN,CAAC;QAED,0BAA0B;QAC1B,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CACrB,CAAC;QAEF,iDAAiD;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAClC,kBAAkB,EAClB,iBAAiB,CACpB,CAAC;QAEF,0DAA0D;QAE1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,2BAA2B,EAAE;gBAC1D,QAAQ;gBACR,eAAe,EAAE,SAAS,CAAC,MAAM;aACpC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,mBAAmB,EACnB,WAAW,IAAI,CAAC,WAAW,2CAA2C,EACtE,QAAQ,EACR,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,CAC5C,CAAC;QACN,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAEnC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,EAAE,CAAC;IACX,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,GAAQ;QACpC,sCAAsC;QACtC,MAAM,EAAE,GACJ,GAAG,CAAC,EAAE;YACN,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;YACrD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;YACxB,GAAG,CAAC,UAAU,EAAE,aAAa;YAC7B,GAAG,CAAC,MAAM,EAAE,aAAa;YACzB,SAAS,CAAC;QAEd,OAAO,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,QAAgB;QACrC,gCAAgC;QAChC,IAAI,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACjD,oDAAoD;QACpD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO,SAAS,IAAI,SAAS,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,GAAQ;QACnC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,iEAAiE;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEzC,uBAAuB;QACvB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,0CAA0C;QAC1C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,SAAiB;QAC1C,OAAO,CACH,SAAS,CAAC,MAAM,GAAG,CAAC;YACpB,SAAS,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,GAAG,CAAC,CAC3D,CAAC;IACN,CAAC;IAED;;OAEG;IACK,0BAA0B,CAAC,SAAiB;QAChD,mCAAmC;QACnC,MAAM,kBAAkB,GAAG;YACvB,WAAW,EAAE,mCAAmC;YAChD,OAAO,EAAE,iBAAiB;YAC1B,+BAA+B,EAAE,qBAAqB;YACtD,SAAS,EAAE,qBAAqB;YAChC,UAAU,EAAE,oBAAoB;YAChC,eAAe,EAAE,iBAAiB;SACrC,CAAC;QAEF,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,KAAa;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACxD,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAgB,EAAE,QAAgB;QACxD,8CAA8C;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,sBAAsB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa;YAC5B,CAAC,CAAC,QAAQ,KAAK,QAAQ;YACvB,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,CAAS,EAAE,CAAS;QACxC,gDAAgD;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CACpB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAClD,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CACpB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAClD,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,CAAC;YACD,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,QAAgB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC9B,uBAAuB;YACvB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,QAAgB;QACxC,8CAA8C;QAC9C,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAClC,OAAO;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI;YACjD,KAAK,EAAE,CAAC;YACR,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,GAAG;SACnB,CAAC;QAEF,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QACnB,OAAO,CAAC,WAAW,GAAG,GAAG,CAAC;QAE1B,8BAA8B;QAC9B,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,CACrC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,CAAC;YAChC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,GAAG,CAAC,CAChD,CAAC;QACF,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CACjC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC;YACjC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,GAAG,CAAC,CAChD,CAAC;QAEF,8BAA8B;QAC9B,IAAI,OAAO,CAAC,KAAK,IAAI,uBAAuB,EAAE,CAAC;YAC3C,OAAO,CAAC,YAAY,GAAG,GAAG,GAAG,mBAAmB,CAAC;YACjD,IAAI,CAAC,gBAAgB,CACjB,SAAS,EACT,uCAAuC,EACvC;gBACI,QAAQ;gBACR,QAAQ,EAAE,OAAO,CAAC,KAAK;gBACvB,YAAY,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;gBAC1D,uBAAuB;gBACvB,mBAAmB;aACtB,CACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,QAAgB;QACxC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,MAAW,EAAE,SAAkB;QAClD,MAAM,MAAM,GAAG,SAAS,IAAI,EAAE,CAAC;QAE/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACX,oEAAoE,CACvE,CAAC;QACN,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAEpC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACX,sEAAsE,CACzE,CAAC;QACN,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACX,sDAAsD,MAAM,8BAA8B,aAAa,CAAC,MAAM,GAAG,CACpH,CAAC;QACN,CAAC;QAED,yBAAyB;QACzB,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACX,oGAAoG,CACvG,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,MAAc;QAC/B,MAAM,YAAY,GAAG;YACjB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,eAAe;YAC9B,UAAU,EAAE,qBAAqB;YACjC,iDAAiD,EAAE,eAAe;YAClE,iBAAiB,EAAE,wBAAwB;SAC9C,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,MAAc;QAC7B,OAAO,MAAM,CAAC,IAAI;aACb,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;aACvC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,iBAAiB;QACrB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAClC,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAE1B,uCAAuC;QACvC,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC9B,CAAC;IACL,CAAC;IAED;;OAEG;IACK,sBAAsB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,iDAAiD;YACjD,IACI,OAAO,CAAC,YAAY;gBACpB,GAAG,IAAI,OAAO,CAAC,YAAY;gBAC3B,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,gBAAgB,EACnD,CAAC;gBACC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC;QACL,CAAC;QAED,cAAc,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAChC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CACvC,CAAC;IACN,CAAC;IAED;;OAEG;IACK,YAAY,CAChB,GAAQ,EACR,IAAY,EACZ,OAAgB,EAChB,QAAiB,EACjB,QAAc;QAEd,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAExC,MAAM,QAAQ,GAAQ;YAClB,KAAK,EAAE,aAAa;gBAChB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY;gBAC1B,CAAC,CAAC,yBAAyB;YAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE,kBAAkB;SAC3B,CAAC;QAEF,uCAAuC;QACvC,IAAI,aAAa,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,GAAG;gBACZ,MAAM,EAAE,kBAAkB;gBAC1B,IAAI;gBACJ,OAAO;gBACP,cAAc,EAAE,IAAI,CAAC,WAAW;gBAChC,IAAI,EAAE,6DAA6D;aACtE,CAAC;QACN,CAAC;QAED,uCAAuC;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,EAAE;gBACnD,IAAI;gBACJ,OAAO;gBACP,QAAQ;gBACR,cAAc,EAAE,IAAI,CAAC,WAAW;gBAChC,GAAG,QAAQ;aACd,CAAC,CAAC;QACP,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACK,gBAAgB,CACpB,KAAmC,EACnC,OAAe,EACf,QAAc;QAEd,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,SAAS,GACX,KAAK,KAAK,OAAO;gBACb,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,KAAK,KAAK,SAAS;oBACnB,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,OAAO,CAAC;YACnB,IAAI,CAAC,MAAc,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnE,CAAC;IACL,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,SAA0C;QAC1D,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACI,SAAS;QAGZ,OAAO;YACH,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;YAC/B,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC5C,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAChD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACpD,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;YACtD,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;YAC5C,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;YACtD,wBAAwB,EAAE,IAAI,CAAC,MAAM,CAAC,wBAAwB;SACjE,CAAC;IACN,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED;;OAEG;IACI,iBAAiB,CAAC,SAAiB;QACtC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IACI,IAAI,CAAC,MAAM,CAAC,wBAAwB;YACpC,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAC5C,CAAC;YACC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CACrB,CAAC;QAEF,OAAO,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACI,gBAAgB;QAInB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,YAAY,IAAI,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;gBACrD,YAAY,EAAE,CAAC;YACnB,CAAC;QACL,CAAC;QAED,OAAO;YACH,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;YACxC,cAAc,EAAE,YAAY;SAC/B,CAAC;IACN,CAAC;IAED;;OAEG;IACI,OAAO;QACV,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;CACJ"}

package/dist/src/middleware/built-in/security/SQLInjectionDetector.d.ts

@@ -1,66 +0,0 @@
-interface SQLInjectionConfig {
-    strictMode?: boolean;
-    allowedChars?: RegExp;
-    maxLength?: number;
-    logAttempts?: boolean;
-    contextualAnalysis?: boolean;
-    falsePositiveThreshold?: number;
-    proximityThreshold?: number;
-}
-interface DetectionResult {
-    isMalicious: boolean;
-    confidence: number;
-    detectedPatterns: string[];
-    sanitizedInput?: string;
-    riskLevel: "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
-}
-declare class SQLInjectionDetector {
-    private config;
-    private readonly highRiskPatterns;
-    private readonly mediumRiskPatterns;
-    private readonly referencePayloads;
-    private readonly contextSensitiveChars;
-    constructor(config?: Partial<SQLInjectionConfig>);
-    /**
-     * Main detection method with improved false positive handling
-     */
-    detect(input: string | null | undefined, context?: string): DetectionResult;
-    /**
-     * Analyze context to reduce false positives
-     */
-    private analyzeContext;
-    /**
-     * Calculate legitimacy score to offset false positives
-     */
-    private calculateLegitimacyScore;
-    private calculateMaxProximity;
-    private levenshteinDistance;
-    /**
-     * Smart sanitization that preserves legitimate content
-     */
-    smartSanitize(input: string): string;
-    /**
-     * Validate and sanitize input, throwing error if malicious
-     */
-    validateAndSanitize(input: string, throwOnDetection?: boolean): string;
-    /**
-     * Create parameterized query helper
-     */
-    createParameterizedQuery(query: string, params: any[]): {
-        query: string;
-        params: any[];
-    };
-    private getHighRiskPatternName;
-    private getHighRiskPatternWeight;
-    private logAttempt;
-    /**
-     * Update configuration
-     */
-    updateConfig(newConfig: Partial<SQLInjectionConfig>): void;
-    /**
-     * Get current configuration
-     */
-    getConfig(): Required<SQLInjectionConfig>;
-}
-export default SQLInjectionDetector;
-//# sourceMappingURL=SQLInjectionDetector.d.ts.map

package/dist/src/middleware/built-in/security/SQLInjectionDetector.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SQLInjectionDetector.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/SQLInjectionDetector.ts"],"names":[],"mappings":"AAAA,UAAU,kBAAkB;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,UAAU,eAAe;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CACrD;AAED,cAAM,oBAAoB;IACtB,OAAO,CAAC,MAAM,CAA+B;IAG7C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAuC/B;IAGF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAgBjC;IAEF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAWhC;IAGF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAiB;gBAE3C,MAAM,GAAE,OAAO,CAAC,kBAAkB,CAAM;IAYpD;;OAEG;IACH,MAAM,CACF,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,OAAO,CAAC,EAAE,MAAM,GACjB,eAAe;IA+FlB;;OAEG;IACH,OAAO,CAAC,cAAc;IAuDtB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAsDhC,OAAO,CAAC,qBAAqB;IA8C7B,OAAO,CAAC,mBAAmB;IA4B3B;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAyBpC;;OAEG;IACH,mBAAmB,CACf,KAAK,EAAE,MAAM,EACb,gBAAgB,GAAE,OAAe,GAClC,MAAM;IAgBT;;OAEG;IACH,wBAAwB,CACpB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,GAAG,EAAE,GACd;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,GAAG,EAAE,CAAA;KAAE;IAsBnC,OAAO,CAAC,sBAAsB;IAqB9B,OAAO,CAAC,wBAAwB;IAsBhC,OAAO,CAAC,UAAU;IASlB;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI;IAI1D;;OAEG;IACH,SAAS,IAAI,QAAQ,CAAC,kBAAkB,CAAC;CAG5C;AAGD,eAAe,oBAAoB,CAAC"}