xypriss 9.10.19 → 9.10.21

package/dist/src/middleware/built-in/security/TerminalOnlyProtector.js

@@ -1,473 +0,0 @@
-/**
- * Terminal-Only Protector - Enhanced Version
- * Aggressively blocks browser requests while allowing terminal/API tools
- * Perfect for API-only endpoints or development tools
- */
-import { Logger } from "../../../shared/logger/Logger";
-export class TerminalOnlyProtector {
-    constructor(options = {}, logger) {
-        // Known legitimate API tools and their patterns
-        this.KNOWN_API_TOOLS = [
-            "curl",
-            "wget",
-            "httpie",
-            "postman",
-            "insomnia",
-            "axios",
-            "fetch",
-            "node-fetch",
-            "got",
-            "superagent",
-            "python-requests",
-            "python-urllib",
-            "java/",
-            "okhttp",
-            "rest-client",
-            "paw",
-            "thunder client",
-            "advanced rest client",
-            "go-http-client",
-            "ruby",
-            "perl",
-            "php",
-            "dart",
-            "kotlin",
-            "swift",
-            "apache-httpclient",
-            "jetty",
-            "k6/",
-            "jmeter",
-            "gatling",
-            "artillery",
-        ];
-        // Browser engine signatures (highly specific to avoid false positives)
-        this.BROWSER_ENGINES = [
-            "gecko/",
-            "applewebkit/",
-            "webkit/",
-            "blink/",
-            "trident/",
-            "edgehtml/",
-        ];
-        // Known browser names (specific versions to avoid false positives)
-        this.BROWSER_NAMES = [
-            "firefox/",
-            "chrome/",
-            "safari/",
-            "edge/",
-            "opera/",
-            "chromium/",
-            "brave/",
-            "vivaldi/",
-            "seamonkey/",
-            "palemoon/",
-        ];
-        console.log("options: ", options);
-        this.config = {
-            blockSecFetch: true,
-            allowedTools: [],
-            blockBrowserIndicators: true,
-            requireSimpleAccept: false,
-            errorMessage: "Terminal/API access required. Browser access blocked.",
-            statusCode: 403,
-            debug: false,
-            strictness: "normal",
-            enableFingerprinting: true,
-            minConfidenceScore: 70,
-            ...options,
-        };
-        if (options.customValidator !== undefined) {
-            this.config.customValidator = options.customValidator;
-        }
-        this.logger =
-            logger ||
-                new Logger({
-                    enabled: true,
-                    level: "debug",
-                    components: { security: true },
-                    types: { debug: true },
-                });
-    }
-    /**
-     * Get the terminal-only middleware function
-     */
-    getMiddleware() {
-        return (req, res, next) => {
-            this.handleRequest(req, res, next);
-        };
-    }
-    /**
-     * Handle incoming request and determine if it's from a terminal/API tool
-     */
-    handleRequest(req, res, next) {
-        this.logger.debug("security", "TermOn middleware called for request");
-        if (this.config.debug) {
-            this.logRequestDetails(req);
-        }
-        // Custom validator takes precedence
-        if (this.config.customValidator &&
-            typeof this.config.customValidator === "function") {
-            if (!this.config.customValidator(req)) {
-                return this.blockRequest(res, "TERMINAL_ONLY", "Custom validator failed");
-            }
-            return next();
-        }
-        // Check whitelist first if configured
-        if (this.config.allowedTools && this.config.allowedTools.length > 0) {
-            if (!this.isAllowedTool(req)) {
-                return this.blockRequest(res, "TOOL_NOT_ALLOWED", `Tool not in allowed list. Allowed tools: ${this.config.allowedTools.join(", ")}`);
-            }
-        }
-        // Run comprehensive detection
-        const detection = this.detectRequestType(req);
-        if (this.config.debug) {
-            this.logger.debug("security", "Detection result", {
-                isBrowser: detection.isBrowser,
-                confidence: detection.confidence,
-                reasons: detection.reasons,
-                indicators: detection.indicators,
-            });
-        }
-        // Block if detected as browser with sufficient confidence
-        if (detection.isBrowser &&
-            detection.confidence >= this.config.minConfidenceScore) {
-            return this.blockRequest(res, "BROWSER_DETECTED", `Browser detected with ${detection.confidence}% confidence: ${detection.reasons.join(", ")}`);
-        }
-        // If we get here, it's likely a terminal/API request - allow it
-        next();
-    }
-    /**
-     * Comprehensive browser detection with confidence scoring
-     */
-    detectRequestType(req) {
-        const result = {
-            isBrowser: false,
-            confidence: 0,
-            reasons: [],
-            indicators: [],
-        };
-        let score = 0;
-        const maxScore = this.calculateMaxScore();
-        // 1. Sec-Fetch headers (browsers only, very reliable - 30 points)
-        if (this.config.blockSecFetch && this.hasSecFetchHeaders(req)) {
-            score += 30;
-            result.reasons.push("Sec-Fetch headers present");
-            result.indicators.push("sec-fetch");
-        }
-        // 2. Browser engine detection (very reliable - 25 points)
-        const engineDetection = this.detectBrowserEngine(req);
-        if (engineDetection.detected) {
-            score += 25;
-            result.reasons.push(`Browser engine: ${engineDetection.engine}`);
-            result.indicators.push("browser-engine");
-        }
-        // 3. Browser name detection (reliable - 20 points)
-        const browserDetection = this.detectBrowserName(req);
-        if (browserDetection.detected) {
-            score += 20;
-            result.reasons.push(`Browser: ${browserDetection.name}`);
-            result.indicators.push("browser-name");
-        }
-        // 4. Complex Accept header (moderately reliable - 15 points)
-        if (this.hasComplexAcceptHeader(req)) {
-            score += 15;
-            result.reasons.push("Complex Accept header");
-            result.indicators.push("complex-accept");
-        }
-        // 5. Origin/Referer headers (reliable - 20 points)
-        if (this.hasNavigationHeaders(req)) {
-            score += 20;
-            result.reasons.push("Navigation headers present");
-            result.indicators.push("navigation-headers");
-        }
-        // 6. Accept-Language patterns (moderately reliable - 15 points)
-        if (this.hasBrowserLanguagePattern(req)) {
-            score += 15;
-            result.reasons.push("Browser-style language preferences");
-            result.indicators.push("accept-language");
-        }
-        // 7. Cache control patterns (moderately reliable - 10 points)
-        if (this.hasBrowserCachePattern(req)) {
-            score += 10;
-            result.reasons.push("Browser cache patterns");
-            result.indicators.push("cache-control");
-        }
-        // 8. Connection header patterns (less reliable - 10 points)
-        if (this.hasBrowserConnectionPattern(req)) {
-            score += 10;
-            result.reasons.push("Browser connection patterns");
-            result.indicators.push("connection");
-        }
-        // 9. DNT (Do Not Track) header (browsers only - 10 points)
-        if (this.hasDNTHeader(req)) {
-            score += 10;
-            result.reasons.push("DNT header present");
-            result.indicators.push("dnt");
-        }
-        // 10. Upgrade-Insecure-Requests (browsers only - 10 points)
-        if (this.hasUpgradeInsecureRequests(req)) {
-            score += 10;
-            result.reasons.push("Upgrade-Insecure-Requests header");
-            result.indicators.push("upgrade-insecure");
-        }
-        // 11. Accept-Encoding patterns (less reliable - 5 points)
-        if (this.hasBrowserEncodingPattern(req)) {
-            score += 5;
-            result.reasons.push("Browser encoding patterns");
-            result.indicators.push("accept-encoding");
-        }
-        // 12. Check for known API tools (negative scoring - reduces confidence)
-        if (this.isKnownAPITool(req)) {
-            score = Math.max(0, score - 40); // Reduce score significantly
-            result.reasons.push("Known API tool detected");
-            result.indicators.push("api-tool");
-        }
-        // 13. Allowed tools whitelist check
-        if (this.config.allowedTools && this.config.allowedTools.length > 0) {
-            if (!this.isAllowedTool(req)) {
-                score += 10;
-                result.reasons.push("Tool not in whitelist");
-                result.indicators.push("not-whitelisted");
-            }
-            else {
-                score = Math.max(0, score - 30);
-                result.reasons.push("Tool in whitelist");
-                result.indicators.push("whitelisted");
-            }
-        }
-        // Calculate confidence percentage
-        result.confidence = Math.round((score / maxScore) * 100);
-        result.isBrowser = result.confidence >= this.config.minConfidenceScore;
-        // Apply strictness modifiers
-        if (this.config.strictness === "high" && result.confidence >= 50) {
-            result.isBrowser = true;
-        }
-        else if (this.config.strictness === "paranoid" &&
-            result.confidence >= 30) {
-            result.isBrowser = true;
-        }
-        return result;
-    }
-    /**
-     * Calculate maximum possible score based on configuration
-     */
-    calculateMaxScore() {
-        return 180; // Sum of all positive scoring checks
-    }
-    /**
-     * Check for Sec-Fetch headers (browsers only)
-     */
-    hasSecFetchHeaders(req) {
-        return !!(req.headers["sec-fetch-dest"] ||
-            req.headers["sec-fetch-mode"] ||
-            req.headers["sec-fetch-site"] ||
-            req.headers["sec-fetch-user"]);
-    }
-    /**
-     * Detect browser engine with high specificity
-     */
-    detectBrowserEngine(req) {
-        const userAgent = (req.headers["user-agent"] || "").toLowerCase();
-        for (const engine of this.BROWSER_ENGINES) {
-            if (userAgent.includes(engine)) {
-                return { detected: true, engine };
-            }
-        }
-        return { detected: false, engine: "" };
-    }
-    /**
-     * Detect browser name with version specificity
-     */
-    detectBrowserName(req) {
-        const userAgent = (req.headers["user-agent"] || "").toLowerCase();
-        for (const browser of this.BROWSER_NAMES) {
-            if (userAgent.includes(browser)) {
-                return { detected: true, name: browser };
-            }
-        }
-        return { detected: false, name: "" };
-    }
-    /**
-     * Check for complex Accept header (browsers send detailed MIME types)
-     */
-    hasComplexAcceptHeader(req) {
-        const accept = req.headers["accept"] || "";
-        // Browsers typically send text/html with high priority
-        if (accept.includes("text/html") && accept.includes("q=")) {
-            return true;
-        }
-        // Multiple MIME types with quality values
-        const parts = accept.split(",");
-        if (parts.length >= 4) {
-            return true;
-        }
-        // Check for browser-specific MIME type combinations
-        if (accept.includes("application/xhtml+xml") ||
-            accept.includes("application/xml;q=") ||
-            accept.includes("image/webp") ||
-            accept.includes("image/apng")) {
-            return true;
-        }
-        return false;
-    }
-    /**
-     * Check for navigation headers (Origin/Referer)
-     */
-    hasNavigationHeaders(req) {
-        return !!(req.headers["origin"] || req.headers["referer"]);
-    }
-    /**
-     * Check for browser-style language patterns
-     */
-    hasBrowserLanguagePattern(req) {
-        const acceptLanguage = req.headers["accept-language"];
-        if (!acceptLanguage) {
-            return false;
-        }
-        // Browsers send multiple languages with quality values
-        if (acceptLanguage.includes("q=") &&
-            acceptLanguage.split(",").length >= 2) {
-            return true;
-        }
-        // Check for region-specific language codes (e.g., en-US, fr-FR)
-        if (/[a-z]{2}-[A-Z]{2}/.test(acceptLanguage)) {
-            return true;
-        }
-        return false;
-    }
-    /**
-     * Check for browser cache control patterns
-     */
-    hasBrowserCachePattern(req) {
-        const cacheControl = req.headers["cache-control"];
-        const pragma = req.headers["pragma"];
-        // Browsers often send max-age=0 or no-cache
-        if (cacheControl &&
-            (cacheControl.includes("max-age=0") || cacheControl === "no-cache")) {
-            return true;
-        }
-        // Pragma: no-cache is browser behavior
-        if (pragma === "no-cache") {
-            return true;
-        }
-        return false;
-    }
-    /**
-     * Check for browser connection patterns
-     */
-    hasBrowserConnectionPattern(req) {
-        const connection = (req.headers["connection"] || "").toLowerCase();
-        // Browsers typically use keep-alive
-        return connection === "keep-alive";
-    }
-    /**
-     * Check for DNT (Do Not Track) header
-     */
-    hasDNTHeader(req) {
-        return !!req.headers["dnt"];
-    }
-    /**
-     * Check for Upgrade-Insecure-Requests header
-     */
-    hasUpgradeInsecureRequests(req) {
-        return req.headers["upgrade-insecure-requests"] === "1";
-    }
-    /**
-     * Check for browser encoding patterns
-     */
-    hasBrowserEncodingPattern(req) {
-        const encoding = req.headers["accept-encoding"] || "";
-        // Browsers typically support multiple encodings including br (Brotli)
-        if (encoding.includes("br") || encoding.split(",").length >= 3) {
-            return true;
-        }
-        return false;
-    }
-    /**
-     * Check if request is from a known API tool
-     */
-    isKnownAPITool(req) {
-        const userAgent = (req.headers["user-agent"] || "").toLowerCase();
-        return this.KNOWN_API_TOOLS.some((tool) => userAgent.includes(tool));
-    }
-    /**
-     * Check if request has browser indicators (legacy method, now uses comprehensive detection)
-     */
-    hasBrowserIndicators(req) {
-        const detection = this.detectRequestType(req);
-        return detection.isBrowser;
-    }
-    /**
-     * Check if the tool is in the allowed list
-     */
-    isAllowedTool(req) {
-        const userAgent = (req.headers["user-agent"] || "").toLowerCase();
-        return this.config.allowedTools.some((allowedTool) => {
-            const pattern = new RegExp(allowedTool.toLowerCase().replace(/\*/g, ".*"), "i");
-            return pattern.test(userAgent);
-        });
-    }
-    /**
-     * Check if Accept header is simple (typical of API tools)
-     */
-    hasSimpleAccept(req) {
-        const accept = req.headers["accept"] || "";
-        return (accept === "*/*" ||
-            accept === "application/json" ||
-            accept === "text/plain" ||
-            accept.split(",").length <= 2);
-    }
-    /**
-     * Log detailed request information for debugging
-     */
-    logRequestDetails(req) {
-        this.logger.debug("security", "TermOn analyzing request", {
-            secFetchDest: req.headers["sec-fetch-dest"],
-            secFetchMode: req.headers["sec-fetch-mode"],
-            accept: req.headers["accept"]?.substring(0, 150),
-            acceptLanguage: req.headers["accept-language"],
-            acceptEncoding: req.headers["accept-encoding"],
-            origin: req.headers["origin"],
-        });
-    }
-    /**
-     * Block the request with appropriate error response
-     */
-    blockRequest(res, code, details) {
-        const isDevelopment = this.config.debug;
-        const response = {
-            error: isDevelopment ? this.config.errorMessage : "Access denied",
-            timestamp: new Date().toISOString(),
-            code: "NEHONIXYPTERM01",
-        };
-        if (isDevelopment) {
-            response.xypriss = {
-                module: "TerminalOnly",
-                code,
-                details,
-                userAgent: res.req?.headers["user-agent"]?.substring(0, 100),
-            };
-        }
-        if (this.config.debug) {
-            this.logger.debug("security", "TermOn blocking request", {
-                code,
-                details,
-                userAgent: res.req?.headers["user-agent"]?.substring(0, 100),
-            });
-        }
-        res.status(this.config.statusCode).json(response);
-    }
-    /**
-     * Update configuration
-     */
-    updateConfig(newConfig) {
-        this.config = { ...this.config, ...newConfig };
-    }
-    /**
-     * Get current configuration
-     */
-    getConfig() {
-        return { ...this.config };
-    }
-}
-//# sourceMappingURL=TerminalOnlyProtector.js.map

package/dist/src/middleware/built-in/security/TerminalOnlyProtector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"TerminalOnlyProtector.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/TerminalOnlyProtector.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAkCvD,MAAM,OAAO,qBAAqB;IA+D9B,YAAY,UAA8B,EAAE,EAAE,MAAe;QA3D7D,gDAAgD;QAC/B,oBAAe,GAAG;YAC/B,MAAM;YACN,MAAM;YACN,QAAQ;YACR,SAAS;YACT,UAAU;YACV,OAAO;YACP,OAAO;YACP,YAAY;YACZ,KAAK;YACL,YAAY;YACZ,iBAAiB;YACjB,eAAe;YACf,OAAO;YACP,QAAQ;YACR,aAAa;YACb,KAAK;YACL,gBAAgB;YAChB,sBAAsB;YACtB,gBAAgB;YAChB,MAAM;YACN,MAAM;YACN,KAAK;YACL,MAAM;YACN,QAAQ;YACR,OAAO;YACP,mBAAmB;YACnB,OAAO;YACP,KAAK;YACL,QAAQ;YACR,SAAS;YACT,WAAW;SACd,CAAC;QAEF,uEAAuE;QACtD,oBAAe,GAAG;YAC/B,QAAQ;YACR,cAAc;YACd,SAAS;YACT,QAAQ;YACR,UAAU;YACV,WAAW;SACd,CAAC;QAEF,mEAAmE;QAClD,kBAAa,GAAG;YAC7B,UAAU;YACV,SAAS;YACT,SAAS;YACT,OAAO;YACP,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,UAAU;YACV,YAAY;YACZ,WAAW;SACd,CAAC;QAGE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG;YACV,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,EAAE;YAChB,sBAAsB,EAAE,IAAI;YAC5B,mBAAmB,EAAE,KAAK;YAC1B,YAAY,EACR,uDAAuD;YAC3D,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,QAAQ;YACpB,oBAAoB,EAAE,IAAI;YAC1B,kBAAkB,EAAE,EAAE;YACtB,GAAG,OAAO;SACb,CAAC;QAEF,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,MAAM;YACP,MAAM;gBACN,IAAI,MAAM,CAAC;oBACP,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,OAAO;oBACd,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC9B,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC,CAAC;IACX,CAAC;IAED;;OAEG;IACI,aAAa;QAChB,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS;QAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,sCAAsC,CAAC,CAAC;QAEtE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAED,oCAAoC;QACpC,IACI,IAAI,CAAC,MAAM,CAAC,eAAe;YAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,UAAU,EACnD,CAAC;YACC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,eAAe,EACf,yBAAyB,CAC5B,CAAC;YACN,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,sCAAsC;QACtC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,kBAAkB,EAClB,4CAA4C,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CACrE,IAAI,CACP,EAAE,CACN,CAAC;YACN,CAAC;QACL,CAAC;QAED,8BAA8B;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAE9C,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,kBAAkB,EAAE;gBAC9C,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,UAAU,EAAE,SAAS,CAAC,UAAU;aACnC,CAAC,CAAC;QACP,CAAC;QAED,0DAA0D;QAC1D,IACI,SAAS,CAAC,SAAS;YACnB,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAmB,EACzD,CAAC;YACC,OAAO,IAAI,CAAC,YAAY,CACpB,GAAG,EACH,kBAAkB,EAClB,yBACI,SAAS,CAAC,UACd,iBAAiB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClD,CAAC;QACN,CAAC;QAED,gEAAgE;QAChE,IAAI,EAAE,CAAC;IACX,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,GAAQ;QAC9B,MAAM,MAAM,GAAoB;YAC5B,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,EAAE;SACjB,CAAC;QAEF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE1C,kEAAkE;QAClE,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5D,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACjD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;QAED,0DAA0D;QAC1D,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,CAAC;QAED,mDAAmD;QACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC5B,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3C,CAAC;QAED,6DAA6D;QAC7D,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC7C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,CAAC;QAED,mDAAmD;QACnD,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAClD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACjD,CAAC;QAED,gEAAgE;QAChE,IAAI,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAC1D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9C,CAAC;QAED,8DAA8D;QAC9D,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC9C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC;QAED,4DAA4D;QAC5D,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YACnD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,CAAC;QAED,2DAA2D;QAC3D,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC1C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAED,4DAA4D;QAC5D,IAAI,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,KAAK,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YACxD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/C,CAAC;QAED,0DAA0D;QAC1D,IAAI,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACjD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9C,CAAC;QAED,wEAAwE;QACxE,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,6BAA6B;YAC9D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC/C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QAED,oCAAoC;QACpC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,KAAK,IAAI,EAAE,CAAC;gBACZ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBAC7C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACJ,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;gBAChC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACzC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1C,CAAC;QACL,CAAC;QAED,kCAAkC;QAClC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAmB,CAAC;QAExE,6BAA6B;QAC7B,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC/D,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QAC5B,CAAC;aAAM,IACH,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU;YACrC,MAAM,CAAC,UAAU,IAAI,EAAE,EACzB,CAAC;YACC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QAC5B,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,iBAAiB;QACrB,OAAO,GAAG,CAAC,CAAC,qCAAqC;IACrD,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,GAAQ;QAC/B,OAAO,CAAC,CAAC,CACL,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC7B,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC7B,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC7B,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAChC,CAAC;IACN,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,GAAQ;QAIhC,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAElE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACtC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,GAAQ;QAC9B,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAElE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC7C,CAAC;QACL,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,GAAQ;QACnC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE3C,uDAAuD;QACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,oDAAoD;QACpD,IACI,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACrC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC7B,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC/B,CAAC;YACC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,GAAQ;QACjC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,GAAQ;QACtC,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAEtD,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,uDAAuD;QACvD,IACI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC7B,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EACvC,CAAC;YACC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,gEAAgE;QAChE,IAAI,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,GAAQ;QACnC,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAErC,4CAA4C;QAC5C,IACI,YAAY;YACZ,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,KAAK,UAAU,CAAC,EACrE,CAAC;YACC,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,uCAAuC;QACvC,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,2BAA2B,CAAC,GAAQ;QACxC,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAEnE,oCAAoC;QACpC,OAAO,UAAU,KAAK,YAAY,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,GAAQ;QACzB,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACK,0BAA0B,CAAC,GAAQ;QACvC,OAAO,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAC,KAAK,GAAG,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,GAAQ;QACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAEtD,sEAAsE;QACtE,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAAQ;QAC3B,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAElE,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,GAAQ;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC,SAAS,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,GAAQ;QAC1B,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAElE,OAAO,IAAI,CAAC,MAAM,CAAC,YAAa,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;YAClD,MAAM,OAAO,GAAG,IAAI,MAAM,CACtB,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,EAC9C,GAAG,CACN,CAAC;YACF,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,GAAQ;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE3C,OAAO,CACH,MAAM,KAAK,KAAK;YAChB,MAAM,KAAK,kBAAkB;YAC7B,MAAM,KAAK,YAAY;YACvB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAChC,CAAC;IACN,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,GAAQ;QAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,0BAA0B,EAAE;YACtD,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC3C,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC3C,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;YAChD,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAC9C,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAC9C,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;SAChC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,GAAQ,EAAE,IAAY,EAAE,OAAgB;QACzD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAExC,MAAM,QAAQ,GAAQ;YAClB,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe;YACjE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE,iBAAiB;SAC1B,CAAC;QAEF,IAAI,aAAa,EAAE,CAAC;YAChB,QAAQ,CAAC,OAAO,GAAG;gBACf,MAAM,EAAE,cAAc;gBACtB,IAAI;gBACJ,OAAO;gBACP,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;aAC/D,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,yBAAyB,EAAE;gBACrD,IAAI;gBACJ,OAAO;gBACP,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;aAC/D,CAAC,CAAC;QACP,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,SAAsC;QACtD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACI,SAAS;QACZ,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC9B,CAAC;CACJ"}