xypriss 9.11.13 → 9.12.0

package/dist/src/middleware/built-in/security/MobileOnlyProtector.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Mobile-Only Access Protector
+ * Blocks browser requests and allows only mobile app access.
+ * Multi-layered detection with strict validation to avoid false positives.
+ *
+ * @example Enable with defaults:
+ * ```typescript
+ * mobileOnly: true
+ * ```
+ *
+ * @example Custom configuration:
+ * ```typescript
+ * mobileOnly: {
+ *   blockBrowserIndicators: true,
+ *   allowedPlatforms: ['ios', 'android'],
+ *   requireMobileHeaders: true,
+ *   customUserAgentPatterns: [/MyApp/i],
+ *   errorMessage: "Mobile app access required"
+ * }
+ * ```
+ */
+import { Logger } from "../../../shared/logger";
+export interface MobileOnlyConfig {
+    /** Enable/disable mobile-only protection */
+    enable?: boolean;
+    /** Block requests with browser indicators */
+    blockBrowserIndicators?: boolean;
+    /** Allowed mobile platforms */
+    allowedPlatforms?: ("ios" | "android" | "react-native" | "expo" | "flutter")[];
+    /** Require mobile-specific headers */
+    requireMobileHeaders?: boolean;
+    /** Custom User-Agent patterns to allow */
+    customUserAgentPatterns?: RegExp[];
+    /** Debug logging */
+    debug?: boolean;
+    /** Custom error message */
+    errorMessage?: string;
+    /** HTTP status code for blocked requests */
+    statusCode?: number;
+    /** Case-sensitive User-Agent matching */
+    caseSensitive?: boolean;
+    /** Trim whitespace from User-Agent */
+    trimUserAgent?: boolean;
+}
+export declare class MobileOnlyProtector {
+    private config;
+    private logger;
+    private readonly mobilePatterns;
+    private readonly androidHttpClients;
+    private readonly iosHttpClients;
+    private readonly mobileFameworks;
+    private readonly browserIndicators;
+    private readonly desktopIndicators;
+    private readonly suspiciousPatterns;
+    private readonly mobileHeaders;
+    constructor(config?: MobileOnlyConfig, logger?: Logger);
+    /**
+     * Normalize User-Agent string
+     */
+    private normalizeUserAgent;
+    /**
+     * Check for Android HTTP client indicators
+     */
+    private hasAndroidHttpClient;
+    /**
+     * Check for iOS HTTP client indicators
+     */
+    private hasIosHttpClient;
+    /**
+     * Check for mobile framework indicators
+     */
+    private hasMobileFramework;
+    /**
+     * Check for browser indicators in User-Agent
+     */
+    private hasBrowserIndicators;
+    /**
+     * Check for desktop OS indicators
+     */
+    private hasDesktopIndicators;
+    /**
+     * Check for suspicious patterns (bots, tools, spoofing attempts)
+     */
+    private hasSuspiciousPatterns;
+    /**
+     * Check if User-Agent matches custom patterns
+     */
+    private matchesCustomPatterns;
+    /**
+     * Check if User-Agent indicates allowed mobile platform
+     */
+    private hasAllowedPlatform;
+    /**
+     * Check for mobile-specific patterns
+     */
+    private hasMobilePatterns;
+    /**
+     * Check for mobile-specific headers
+     */
+    private hasMobileHeaders;
+    /**
+     * Validate User-Agent is not empty or suspicious
+     */
+    private isValidUserAgent;
+    /**
+     * Perform comprehensive mobile request validation
+     */
+    private validateMobileRequest;
+    /**
+     * Check if request is from a mobile app
+     */
+    isMobileRequest(req: any): boolean;
+    /**
+     * Middleware function
+     */
+    middleware(): (req: any, res: any, next: any) => any;
+    /**
+     * Get current configuration
+     */
+    getConfig(): MobileOnlyConfig;
+}
+//# sourceMappingURL=MobileOnlyProtector.d.ts.map

package/dist/src/middleware/built-in/security/MobileOnlyProtector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MobileOnlyProtector.d.ts","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/MobileOnlyProtector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAEhD,MAAM,WAAW,gBAAgB;IAC7B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,6CAA6C;IAC7C,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAEjC,+BAA+B;IAC/B,gBAAgB,CAAC,EAAE,CACb,KAAK,GACL,SAAS,GACT,cAAc,GACd,MAAM,GACN,SAAS,CACd,EAAE,CAAC;IAEJ,sCAAsC;IACtC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,0CAA0C;IAC1C,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnC,oBAAoB;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,2BAA2B;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,yCAAyC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,sCAAsC;IACtC,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,qBAAa,mBAAmB;IAC5B,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,MAAM,CAAS;IAGvB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAU7B;IAGF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAQjC;IAGF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAQ7B;IAGF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAU9B;IAGF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CA6BhC;IAGF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAYhC;IAGF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAmBjC;IAGF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAU5B;gBAEU,MAAM,GAAE,gBAAqB,EAAE,MAAM,CAAC,EAAE,MAAM;IA6B1D;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAe1B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAS5B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IASxB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAS1B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAa5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAS5B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAS7B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA8B7B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAmC1B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IASzB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAYxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAiCxB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAwH7B;;OAEG;IACI,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO;IAoBzC;;OAEG;IACI,UAAU,KACL,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG;IAqDzC;;OAEG;IACI,SAAS,IAAI,gBAAgB;CAGvC"}

package/dist/src/middleware/built-in/security/MobileOnlyProtector.js

@@ -0,0 +1,499 @@
+/**
+ * Mobile-Only Access Protector
+ * Blocks browser requests and allows only mobile app access.
+ * Multi-layered detection with strict validation to avoid false positives.
+ *
+ * @example Enable with defaults:
+ * ```typescript
+ * mobileOnly: true
+ * ```
+ *
+ * @example Custom configuration:
+ * ```typescript
+ * mobileOnly: {
+ *   blockBrowserIndicators: true,
+ *   allowedPlatforms: ['ios', 'android'],
+ *   requireMobileHeaders: true,
+ *   customUserAgentPatterns: [/MyApp/i],
+ *   errorMessage: "Mobile app access required"
+ * }
+ * ```
+ */
+import { Logger } from "../../../shared/logger";
+export class MobileOnlyProtector {
+    constructor(config = {}, logger) {
+        // Mobile platform indicators
+        this.mobilePatterns = [
+            /\bAndroid\b/i,
+            /\biPhone\b/i,
+            /\biPad\b/i,
+            /\biPod\b/i,
+            /\bBlackBerry\b/i,
+            /\bWindows Phone\b/i,
+            /\bReactNative\b/i,
+            /\bExpo\b/i,
+            /\bDalvik\b/i, // Android runtime
+        ];
+        // Android HTTP clients
+        this.androidHttpClients = [
+            /\bokhttp\b/i, // OkHttp
+            /\bretrofit\b/i, // Retrofit
+            /\bktor-client\b/i, // Ktor Client
+            /\bktor\b/i, // Ktor (short form)
+            /\bvolley\b/i, // Volley
+            /\bHttpUrlConnection\b/i, // HttpUrlConnection
+            /\bAndroidHttpClient\b/i, // Generic Android HTTP
+        ];
+        // iOS HTTP clients
+        this.iosHttpClients = [
+            /\bAlamofire\b/i, // Alamofire
+            /\bAFNetworking\b/i, // AFNetworking
+            /\bCFNetwork\b/i, // CFNetwork (iOS networking framework)
+            /\bURLSession\b/i, // URLSession
+            /\bNSURLSession\b/i, // NSURLSession (Objective-C)
+            /\bMoya\b/i, // Moya
+            /\bSiesta\b/i, // Siesta
+        ];
+        // Cross-platform mobile frameworks
+        this.mobileFameworks = [
+            /\bFlutter\b/i,
+            /\bDart\b/i, // Dart (Flutter's language)
+            /\bReact Native\b/i,
+            /\bReactNative\b/i,
+            /\bExpo\b/i,
+            /\bCapacitor\b/i, // Ionic Capacitor
+            /\bCordova\b/i, // Apache Cordova
+            /\bIonic\b/i, // Ionic Framework
+            /\bXamarin\b/i, // Xamarin
+        ];
+        // Comprehensive browser indicators (aggressive detection)
+        this.browserIndicators = [
+            /\bMozilla\b/i,
+            /\bChrome\b/i,
+            /\bChromium\b/i,
+            /\bSafari\b/i,
+            /\bFirefox\b/i,
+            /\bEdge\b/i,
+            /\bEdg\b/i,
+            /\bOpera\b/i,
+            /\bOPR\b/i,
+            /\bBrave\b/i,
+            /\bVivaldi\b/i,
+            /\bSeaMonkey\b/i,
+            /\bIceweasel\b/i,
+            /\bEpiphany\b/i,
+            /\bMidori\b/i,
+            /\bKonqueror\b/i,
+            /\bWebKit\b/i,
+            /\bGecko\b/i,
+            /\bTrident\b/i,
+            /\bPresto\b/i,
+            /\bEdgeHTML\b/i,
+            /\bNetscape\b/i,
+            /\bIE\b/i,
+            /\bMSIE\b/i,
+            /\brv:11/i, // IE11
+            /\bElectron\b/i, // Desktop apps
+            /\bPhantomJS\b/i, // Headless browser
+            /\bHeadlessChrome\b/i,
+        ];
+        // Known desktop OS indicators
+        this.desktopIndicators = [
+            /\bWindows NT\b/i,
+            /\bMac OS X\b/i,
+            /\bMacintosh\b/i,
+            /\bLinux x86_64\b/i,
+            /\bLinux i686\b/i,
+            /\bX11\b/i,
+            /\bWin64\b/i,
+            /\bWOW64\b/i,
+            /\bUbuntu\b/i,
+            /\bFedora\b/i,
+            /\bDebian\b/i,
+        ];
+        // Suspicious patterns often used in spoofing (excluding legitimate mobile clients)
+        this.suspiciousPatterns = [
+            /\bcurl\b/i,
+            /\bwget\b/i,
+            /\bPython\b/i,
+            /\bJava(?!Script)\b/i, // Java but not JavaScript
+            /\bperl\b/i,
+            /\bruby\b/i,
+            /\bPostman\b/i,
+            /\bInsomnia\b/i,
+            /\bHTTPie\b/i,
+            /\baxios\b/i,
+            /\bnode-fetch\b/i,
+            /\bgot\b/i,
+            /\bsuperagent\b/i,
+            /\brequest\b/i,
+            /\bbot\b/i,
+            /\bcrawler\b/i,
+            /\bspider\b/i,
+            /\bscraper\b/i,
+        ];
+        // Mobile-specific headers that indicate app requests
+        this.mobileHeaders = [
+            "x-requested-with",
+            "x-mobile-app",
+            "x-app-platform",
+            "x-app-version",
+            "expo-version",
+            "react-native-version",
+            "x-flutter-version",
+            "x-ios-bundle-identifier",
+            "x-android-package",
+        ];
+        this.config = {
+            enable: config.enable ?? true,
+            blockBrowserIndicators: config.blockBrowserIndicators ?? true,
+            allowedPlatforms: config.allowedPlatforms ?? [
+                "ios",
+                "android",
+                "react-native",
+                "expo",
+            ],
+            requireMobileHeaders: config.requireMobileHeaders ?? false,
+            customUserAgentPatterns: config.customUserAgentPatterns ?? [],
+            debug: config.debug ?? false,
+            errorMessage: config.errorMessage ??
+                "Mobile app access required. Browser requests are not allowed.",
+            statusCode: config.statusCode ?? 403,
+            caseSensitive: config.caseSensitive ?? false,
+            trimUserAgent: config.trimUserAgent ?? true,
+        };
+        this.logger =
+            logger ||
+                new Logger({
+                    components: { security: true },
+                    types: { debug: true },
+                });
+    }
+    /**
+     * Normalize User-Agent string
+     */
+    normalizeUserAgent(userAgent) {
+        if (!userAgent)
+            return "";
+        let normalized = userAgent;
+        if (this.config.trimUserAgent) {
+            normalized = normalized.trim();
+        }
+        // Remove excessive whitespace
+        normalized = normalized.replace(/\s+/g, " ");
+        return normalized;
+    }
+    /**
+     * Check for Android HTTP client indicators
+     */
+    hasAndroidHttpClient(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.androidHttpClients.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for iOS HTTP client indicators
+     */
+    hasIosHttpClient(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.iosHttpClients.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for mobile framework indicators
+     */
+    hasMobileFramework(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.mobileFameworks.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for browser indicators in User-Agent
+     */
+    hasBrowserIndicators(userAgent) {
+        if (!this.config.blockBrowserIndicators) {
+            return false;
+        }
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.browserIndicators.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for desktop OS indicators
+     */
+    hasDesktopIndicators(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.desktopIndicators.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for suspicious patterns (bots, tools, spoofing attempts)
+     */
+    hasSuspiciousPatterns(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.suspiciousPatterns.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check if User-Agent matches custom patterns
+     */
+    matchesCustomPatterns(userAgent) {
+        if (this.config.customUserAgentPatterns.length === 0) {
+            return false;
+        }
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        for (const pattern of this.config.customUserAgentPatterns) {
+            try {
+                const regex = new RegExp(pattern.source, flags);
+                if (regex.test(userAgent)) {
+                    if (this.config.debug) {
+                        this.logger.debug("security", `Custom pattern matched: ${pattern}`);
+                    }
+                    return true;
+                }
+            }
+            catch (error) {
+                this.logger.warn("security", `Invalid custom pattern: ${pattern}`);
+            }
+        }
+        return false;
+    }
+    /**
+     * Check if User-Agent indicates allowed mobile platform
+     */
+    hasAllowedPlatform(userAgent) {
+        return this.config.allowedPlatforms.some((platform) => {
+            switch (platform) {
+                case "ios":
+                    // iOS detection: iOS devices OR iOS HTTP clients (without desktop indicators)
+                    return ((/\b(iPhone|iPad|iPod)\b/i.test(userAgent) ||
+                        this.hasIosHttpClient(userAgent)) &&
+                        !/\b(Macintosh|Mac OS X)\b/i.test(userAgent));
+                case "android":
+                    // Android detection: Android OS OR Android HTTP clients (without desktop emulator)
+                    return ((/\bAndroid\b/i.test(userAgent) ||
+                        /\bDalvik\b/i.test(userAgent) ||
+                        this.hasAndroidHttpClient(userAgent)) &&
+                        !/\b(X11|Linux x86_64)\b/i.test(userAgent));
+                case "react-native":
+                    return /\b(ReactNative|React Native)\b/i.test(userAgent);
+                case "expo":
+                    return /\bExpo\b/i.test(userAgent);
+                case "flutter":
+                    return /\b(Flutter|Dart)\b/i.test(userAgent);
+                default:
+                    return false;
+            }
+        });
+    }
+    /**
+     * Check for mobile-specific patterns
+     */
+    hasMobilePatterns(userAgent) {
+        const flags = this.config.caseSensitive ? "g" : "gi";
+        return this.mobilePatterns.some((pattern) => {
+            const regex = new RegExp(pattern.source, flags);
+            return regex.test(userAgent);
+        });
+    }
+    /**
+     * Check for mobile-specific headers
+     */
+    hasMobileHeaders(req) {
+        if (!req.headers) {
+            return false;
+        }
+        return this.mobileHeaders.some((header) => {
+            const lowerHeader = header.toLowerCase();
+            // Check both original case and lowercase
+            return req.headers[header] || req.headers[lowerHeader];
+        });
+    }
+    /**
+     * Validate User-Agent is not empty or suspicious
+     */
+    isValidUserAgent(userAgent) {
+        if (!userAgent || userAgent.length === 0) {
+            if (this.config.debug) {
+                this.logger.debug("security", "Empty User-Agent detected");
+            }
+            return false;
+        }
+        // Allow shorter User-Agents for mobile HTTP clients (like okhttp/4.12.0)
+        if (userAgent.length < 5) {
+            if (this.config.debug) {
+                this.logger.debug("security", `Suspicious short User-Agent: ${userAgent}`);
+            }
+            return false;
+        }
+        // User-Agent with only generic "Mobile" is suspicious
+        if (userAgent === "Mobile" || userAgent.toLowerCase() === "mobile") {
+            if (this.config.debug) {
+                this.logger.debug("security", "Generic 'Mobile' User-Agent detected");
+            }
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Perform comprehensive mobile request validation
+     */
+    validateMobileRequest(req, userAgent) {
+        let score = 0;
+        let reason = "";
+        const reasons = [];
+        // Phase 1: Validation checks (disqualifiers)
+        if (!this.isValidUserAgent(userAgent)) {
+            return { isValid: false, reason: "Invalid User-Agent", score: 0 };
+        }
+        if (this.hasSuspiciousPatterns(userAgent)) {
+            return {
+                isValid: false,
+                reason: "Suspicious patterns detected",
+                score: 0,
+            };
+        }
+        if (this.hasDesktopIndicators(userAgent)) {
+            return {
+                isValid: false,
+                reason: "Desktop OS indicators detected",
+                score: 0,
+            };
+        }
+        // Check browser indicators AFTER mobile patterns to avoid false positives
+        const hasBrowser = this.hasBrowserIndicators(userAgent);
+        const hasMobilePattern = this.hasMobilePatterns(userAgent);
+        const hasAndroidClient = this.hasAndroidHttpClient(userAgent);
+        const hasIosClient = this.hasIosHttpClient(userAgent);
+        const hasMobileFramework = this.hasMobileFramework(userAgent);
+        // If blockBrowserIndicators is disabled, browsers are allowed
+        if (!this.config.blockBrowserIndicators && hasBrowser) {
+            score += 50; // Give browsers a decent score when allowed
+            reasons.push("Browser allowed (blockBrowserIndicators disabled)");
+        }
+        // If it has browser indicators but NO mobile indicators, block it (only when blocking browsers)
+        else if (hasBrowser &&
+            !hasMobilePattern &&
+            !hasAndroidClient &&
+            !hasIosClient &&
+            !hasMobileFramework) {
+            return {
+                isValid: false,
+                reason: "Browser indicators without mobile patterns",
+                score: 0,
+            };
+        }
+        // Phase 2: Positive indicators (qualifiers)
+        // Custom patterns have highest priority
+        if (this.matchesCustomPatterns(userAgent)) {
+            score = 100;
+            reason = "Custom pattern match";
+            return { isValid: true, reason, score };
+        }
+        // Mobile HTTP clients (high confidence for legitimate mobile apps)
+        if (hasAndroidClient) {
+            score += 80;
+            reasons.push("Android HTTP client");
+        }
+        if (hasIosClient) {
+            score += 80;
+            reasons.push("iOS HTTP client");
+        }
+        // Mobile frameworks (high confidence)
+        if (hasMobileFramework) {
+            score += 70;
+            reasons.push("Mobile framework");
+        }
+        // Platform-specific detection (medium-high confidence)
+        if (this.hasAllowedPlatform(userAgent)) {
+            score += 60;
+            reasons.push("Allowed platform");
+        }
+        // General mobile patterns (medium confidence)
+        if (hasMobilePattern) {
+            score += 40;
+            reasons.push("Mobile patterns");
+        }
+        // Mobile headers boost confidence
+        if (this.hasMobileHeaders(req)) {
+            score += 30;
+            reasons.push("Mobile headers");
+        }
+        // Require minimum score threshold
+        const threshold = this.config.requireMobileHeaders ? 80 : 50;
+        reason =
+            reasons.length > 0 ? reasons.join(" + ") : "No mobile indicators";
+        return {
+            isValid: score >= threshold,
+            reason: score >= threshold
+                ? reason
+                : `Insufficient mobile indicators (score: ${score}/${threshold})`,
+            score,
+        };
+    }
+    /**
+     * Check if request is from a mobile app
+     */
+    isMobileRequest(req) {
+        const rawUserAgent = req.headers["user-agent"] || req.headers["User-Agent"] || "";
+        const userAgent = this.normalizeUserAgent(rawUserAgent);
+        const validation = this.validateMobileRequest(req, userAgent);
+        if (this.config.debug) {
+            this.logger.debug("security", `Validation result: ${validation.isValid ? "PASS" : "FAIL"} ` +
+                `(Score: ${validation.score}) - ${validation.reason} - UA: ${userAgent.substring(0, 100)}`);
+        }
+        return validation.isValid;
+    }
+    /**
+     * Middleware function
+     */
+    middleware() {
+        return (req, res, next) => {
+            const userAgent = req.headers["user-agent"] ||
+                req.headers["User-Agent"] ||
+                "none";
+            if (this.config.debug) {
+                this.logger.debug("security", `MobileOnly check for ${req.ip} - UA: ${userAgent.substring(0, 100)}`);
+            }
+            if (this.isMobileRequest(req)) {
+                if (this.config.debug) {
+                    this.logger.debug("security", `✅ ALLOWED mobile request from: ${req.ip}`);
+                }
+                return next();
+            }
+            this.logger.warn("security", `❌ BLOCKED non-mobile request from ${req.ip}. User-Agent: ${userAgent.substring(0, 150)}`);
+            // Check if headers already sent to prevent error
+            if (res.headersSent) {
+                this.logger.error("security", `Cannot send response for blocked request from ${req.ip} - headers already sent`);
+                return;
+            }
+            return res.status(this.config.statusCode).json({
+                error: "Access Denied",
+                message: this.config.errorMessage,
+                code: "MOBILE_ONLY",
+                timestamp: new Date().toISOString(),
+                userAgent: userAgent,
+                ip: req.ip,
+            });
+        };
+    }
+    /**
+     * Get current configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+}
+//# sourceMappingURL=MobileOnlyProtector.js.map

package/dist/src/middleware/built-in/security/MobileOnlyProtector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MobileOnlyProtector.js","sourceRoot":"","sources":["../../../../../src/middleware/built-in/security/MobileOnlyProtector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAwChD,MAAM,OAAO,mBAAmB;IAsI5B,YAAY,SAA2B,EAAE,EAAE,MAAe;QAlI1D,6BAA6B;QACZ,mBAAc,GAAG;YAC9B,cAAc;YACd,aAAa;YACb,WAAW;YACX,WAAW;YACX,iBAAiB;YACjB,oBAAoB;YACpB,kBAAkB;YAClB,WAAW;YACX,aAAa,EAAE,kBAAkB;SACpC,CAAC;QAEF,uBAAuB;QACN,uBAAkB,GAAG;YAClC,aAAa,EAAE,SAAS;YACxB,eAAe,EAAE,WAAW;YAC5B,kBAAkB,EAAE,cAAc;YAClC,WAAW,EAAE,oBAAoB;YACjC,aAAa,EAAE,SAAS;YACxB,wBAAwB,EAAE,oBAAoB;YAC9C,wBAAwB,EAAE,uBAAuB;SACpD,CAAC;QAEF,mBAAmB;QACF,mBAAc,GAAG;YAC9B,gBAAgB,EAAE,YAAY;YAC9B,mBAAmB,EAAE,eAAe;YACpC,gBAAgB,EAAE,uCAAuC;YACzD,iBAAiB,EAAE,aAAa;YAChC,mBAAmB,EAAE,6BAA6B;YAClD,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,SAAS;SAC3B,CAAC;QAEF,mCAAmC;QAClB,oBAAe,GAAG;YAC/B,cAAc;YACd,WAAW,EAAE,4BAA4B;YACzC,mBAAmB;YACnB,kBAAkB;YAClB,WAAW;YACX,gBAAgB,EAAE,kBAAkB;YACpC,cAAc,EAAE,iBAAiB;YACjC,YAAY,EAAE,kBAAkB;YAChC,cAAc,EAAE,UAAU;SAC7B,CAAC;QAEF,0DAA0D;QACzC,sBAAiB,GAAG;YACjC,cAAc;YACd,aAAa;YACb,eAAe;YACf,aAAa;YACb,cAAc;YACd,WAAW;YACX,UAAU;YACV,YAAY;YACZ,UAAU;YACV,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,gBAAgB;YAChB,eAAe;YACf,aAAa;YACb,gBAAgB;YAChB,aAAa;YACb,YAAY;YACZ,cAAc;YACd,aAAa;YACb,eAAe;YACf,eAAe;YACf,SAAS;YACT,WAAW;YACX,UAAU,EAAE,OAAO;YACnB,eAAe,EAAE,eAAe;YAChC,gBAAgB,EAAE,mBAAmB;YACrC,qBAAqB;SACxB,CAAC;QAEF,8BAA8B;QACb,sBAAiB,GAAG;YACjC,iBAAiB;YACjB,eAAe;YACf,gBAAgB;YAChB,mBAAmB;YACnB,iBAAiB;YACjB,UAAU;YACV,YAAY;YACZ,YAAY;YACZ,aAAa;YACb,aAAa;YACb,aAAa;SAChB,CAAC;QAEF,mFAAmF;QAClE,uBAAkB,GAAG;YAClC,WAAW;YACX,WAAW;YACX,aAAa;YACb,qBAAqB,EAAE,0BAA0B;YACjD,WAAW;YACX,WAAW;YACX,cAAc;YACd,eAAe;YACf,aAAa;YACb,YAAY;YACZ,iBAAiB;YACjB,UAAU;YACV,iBAAiB;YACjB,cAAc;YACd,UAAU;YACV,cAAc;YACd,aAAa;YACb,cAAc;SACjB,CAAC;QAEF,qDAAqD;QACpC,kBAAa,GAAG;YAC7B,kBAAkB;YAClB,cAAc;YACd,gBAAgB;YAChB,eAAe;YACf,cAAc;YACd,sBAAsB;YACtB,mBAAmB;YACnB,yBAAyB;YACzB,mBAAmB;SACtB,CAAC;QAGE,IAAI,CAAC,MAAM,GAAG;YACV,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI;YAC7D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI;gBACzC,KAAK;gBACL,SAAS;gBACT,cAAc;gBACd,MAAM;aACT;YACD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,KAAK;YAC1D,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,EAAE;YAC7D,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAC5B,YAAY,EACR,MAAM,CAAC,YAAY;gBACnB,+DAA+D;YACnE,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG;YACpC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,KAAK;YAC5C,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;SAC9C,CAAC;QAEF,IAAI,CAAC,MAAM;YACP,MAAM;gBACN,IAAI,MAAM,CAAC;oBACP,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC9B,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC,CAAC;IACX,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,SAAiB;QACxC,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QAE1B,IAAI,UAAU,GAAG,SAAS,CAAC;QAE3B,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC5B,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;QAED,8BAA8B;QAC9B,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE7C,OAAO,UAAU,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,SAAiB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,SAAiB;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,SAAiB;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACzC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,SAAiB;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,SAAiB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,SAAiB;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,SAAiB;QAC3C,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAErD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;YACxD,IAAI,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAChD,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,2BAA2B,OAAO,EAAE,CACvC,CAAC;oBACN,CAAC;oBACD,OAAO,IAAI,CAAC;gBAChB,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,UAAU,EACV,2BAA2B,OAAO,EAAE,CACvC,CAAC;YACN,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,SAAiB;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YAClD,QAAQ,QAAQ,EAAE,CAAC;gBACf,KAAK,KAAK;oBACN,8EAA8E;oBAC9E,OAAO,CACH,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC;wBACtC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;wBACrC,CAAC,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,CAC/C,CAAC;gBAEN,KAAK,SAAS;oBACV,mFAAmF;oBACnF,OAAO,CACH,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;wBAC3B,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;wBAC7B,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;wBACzC,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,CAC7C,CAAC;gBAEN,KAAK,cAAc;oBACf,OAAO,iCAAiC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAE7D,KAAK,MAAM;oBACP,OAAO,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAEvC,KAAK,SAAS;oBACV,OAAO,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAEjD;oBACI,OAAO,KAAK,CAAC;YACrB,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,SAAiB;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAErD,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,GAAQ;QAC7B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACtC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACzC,yCAAyC;YACzC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,SAAiB;QACtC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,yEAAyE;QACzE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,gCAAgC,SAAS,EAAE,CAC9C,CAAC;YACN,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,sDAAsD;QACtD,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;YACjE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,sCAAsC,CACzC,CAAC;YACN,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,qBAAqB,CACzB,GAAQ,EACR,SAAiB;QAMjB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,6CAA6C;QAC7C,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACtE,CAAC;QAED,IAAI,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,8BAA8B;gBACtC,KAAK,EAAE,CAAC;aACX,CAAC;QACN,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gCAAgC;gBACxC,KAAK,EAAE,CAAC;aACX,CAAC;QACN,CAAC;QAED,0EAA0E;QAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAE9D,8DAA8D;QAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,UAAU,EAAE,CAAC;YACpD,KAAK,IAAI,EAAE,CAAC,CAAC,4CAA4C;YACzD,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACtE,CAAC;QACD,gGAAgG;aAC3F,IACD,UAAU;YACV,CAAC,gBAAgB;YACjB,CAAC,gBAAgB;YACjB,CAAC,YAAY;YACb,CAAC,kBAAkB,EACrB,CAAC;YACC,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,4CAA4C;gBACpD,KAAK,EAAE,CAAC;aACX,CAAC;QACN,CAAC;QAED,4CAA4C;QAE5C,wCAAwC;QACxC,IAAI,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,KAAK,GAAG,GAAG,CAAC;YACZ,MAAM,GAAG,sBAAsB,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC5C,CAAC;QAED,mEAAmE;QACnE,IAAI,gBAAgB,EAAE,CAAC;YACnB,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACf,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACpC,CAAC;QAED,sCAAsC;QACtC,IAAI,kBAAkB,EAAE,CAAC;YACrB,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrC,CAAC;QAED,uDAAuD;QACvD,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrC,CAAC;QAED,8CAA8C;QAC9C,IAAI,gBAAgB,EAAE,CAAC;YACnB,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACpC,CAAC;QAED,kCAAkC;QAClC,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnC,CAAC;QAED,kCAAkC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAE7D,MAAM;YACF,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC;QAEtE,OAAO;YACH,OAAO,EAAE,KAAK,IAAI,SAAS;YAC3B,MAAM,EACF,KAAK,IAAI,SAAS;gBACd,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,0CAA0C,KAAK,IAAI,SAAS,GAAG;YACzE,KAAK;SACR,CAAC;IACN,CAAC;IAED;;OAEG;IACI,eAAe,CAAC,GAAQ;QAC3B,MAAM,YAAY,GACd,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAExD,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAE9D,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,sBAAsB,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG;gBACzD,WAAW,UAAU,CAAC,KAAK,OACvB,UAAU,CAAC,MACf,UAAU,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC9C,CAAC;QACN,CAAC;QAED,OAAO,UAAU,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED;;OAEG;IACI,UAAU;QACb,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,MAAM,SAAS,GACX,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;gBACzB,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;gBACzB,MAAM,CAAC;YAEX,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,wBAAwB,GAAG,CAAC,EAAE,UAAU,SAAS,CAAC,SAAS,CACvD,CAAC,EACD,GAAG,CACN,EAAE,CACN,CAAC;YACN,CAAC;YAED,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,kCAAkC,GAAG,CAAC,EAAE,EAAE,CAC7C,CAAC;gBACN,CAAC;gBACD,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,UAAU,EACV,qCACI,GAAG,CAAC,EACR,iBAAiB,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACjD,CAAC;YAEF,iDAAiD;YACjD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,UAAU,EACV,iDAAiD,GAAG,CAAC,EAAE,yBAAyB,CACnF,CAAC;gBACF,OAAO;YACX,CAAC;YAED,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBAC3C,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACjC,IAAI,EAAE,aAAa;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,SAAS;gBACpB,EAAE,EAAE,GAAG,CAAC,EAAE;aACb,CAAC,CAAC;QACP,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACI,SAAS;QACZ,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC9B,CAAC;CACJ"}