xypriss 9.12.1 → 9.12.2

package/dist/cjs/src/middleware/built-in/security/SQLInjectionDetector.js

@@ -1,416 +0,0 @@
-'use strict';
-
-class SQLInjectionDetector {
-    constructor(config = {}) {
-        // High-confidence SQL injection patterns (more specific to reduce false positives)
-        this.highRiskPatterns = [
-            // Union attacks with SELECT
-            /(\s|^)(union|UNION)(\s)+(all\s+)?(select|SELECT)/gi,
-            // SQL comments at end of input or before SQL keywords
-            /(--|#|\/\*).*?(select|union|drop|delete|insert|update|create|alter)/gi,
-            /;(\s)*--.*/gi,
-            // Enhanced boolean injections (more comprehensive)
-            /(\s|^)(or|OR)(\s)+('?\d+'?\s*=\s*'?\d+'?|'[^']*'\s*=\s*'[^']*'|true|false)/gi,
-            /(\s|^)(and|AND)(\s)+('?\d+'?\s*=\s*'?\d+'?|'[^']*'\s*=\s*'[^']*'|true|false)/gi,
-            // Quote-based boolean injections
-            /'(\s)+(or|OR|and|AND)(\s)+'/gi,
-            // Comment-obfuscated patterns
-            /\/\*.*?\*\/(or|OR|and|AND)\/\*.*?\*\//gi,
-            // Time-based with specific syntax (enhanced)
-            /(sleep|SLEEP|waitfor|WAITFOR|delay|DELAY)\s*\(.*?\)/gi,
-            /waitfor\s+delay\s+/i,
-            // System stored procedures
-            /(exec|EXEC|execute|EXECUTE)\s+(sp_|xp_)\w+/gi,
-            // Information schema with specific queries
-            /(information_schema|INFORMATION_SCHEMA)\.(tables|columns|schemata)/gi,
-            // Dangerous DDL operations with semicolons
-            /;(\s)*(drop|DROP|delete|DELETE|truncate|TRUNCATE)\s+(table|database)/gi,
-            // Hex encoding of common injection strings
-            /0x(27|22|5C|2D|2D)/gi, // ', ", \, --
-            // Multiple quotes for quote breaking
-            /('{3,}|"{3,})/g,
-            // Stacked queries
-            /;\s*(drop|delete|insert|update|create|alter|select)\b/i,
-        ];
-        // Medium risk patterns (require context analysis)
-        this.mediumRiskPatterns = [
-            // Single SQL keywords (common in legitimate text)
-            /\b(select|union|drop|delete|insert|update|create|alter)\b/gi,
-            // Simple OR/AND conditions
-            /\b(or|and)\s+\w+\s*=\s*\w+/gi,
-            // Single quotes or double quotes
-            /'/g,
-            /"/g,
-            // Basic SQL comments
-            /(--|#)/g,
-            // Wildcards
-            /[%_]/g,
-        ];
-        this.referencePayloads = [
-            "1' OR '1'='1",
-            "admin'--",
-            "' UNION SELECT NULL,NULL,NULL--",
-            "'; WAITFOR DELAY '0:0:5'--",
-            "1 OR 1=1;--",
-            "') OR ('1'='1",
-            "1/0",
-            "CHAR(113)+CHAR(118)+CHAR(112)+CHAR(113)",
-            "SELECT * FROM users",
-            "DROP TABLE customers",
-        ];
-        // Characters that are suspicious in certain contexts
-        this.contextSensitiveChars = /[';\"\\%_]/g;
-        this.config = {
-            strictMode: config.strictMode ?? false,
-            allowedChars: config.allowedChars ?? /^[a-zA-Z0-9\s\-@.!?,()]+$/,
-            maxLength: config.maxLength ?? 1000,
-            logAttempts: config.logAttempts ?? true,
-            contextualAnalysis: config.contextualAnalysis ?? true,
-            falsePositiveThreshold: config.falsePositiveThreshold ?? 0.6,
-            proximityThreshold: config.proximityThreshold ?? 0.85,
-        };
-    }
-    /**
-     * Main detection method with improved false positive handling
-     */
-    detect(input, context) {
-        if (!input || typeof input !== "string") {
-            return {
-                isMalicious: false,
-                confidence: 0,
-                detectedPatterns: [],
-                riskLevel: "LOW",
-            };
-        }
-        const result = {
-            isMalicious: false,
-            confidence: 0,
-            detectedPatterns: [],
-            sanitizedInput: input,
-            riskLevel: "LOW",
-        };
-        // Check input length (very long inputs are suspicious)
-        if (input.length > this.config.maxLength) {
-            result.confidence += 0.2; // Reduced penalty for length
-            result.detectedPatterns.push("Excessive length");
-        }
-        // High-risk pattern analysis (strong indicators)
-        let highRiskScore = 0;
-        this.highRiskPatterns.forEach((pattern, index) => {
-            const matches = input.match(pattern);
-            if (matches) {
-                result.detectedPatterns.push(`Pattern Match: ${matches.join(", ")}`);
-                highRiskScore += 0.3;
-            }
-        });
-        // 1. Medium risk patterns (accumulative)
-        let mediumMatches = 0;
-        this.mediumRiskPatterns.forEach((pattern) => {
-            const matches = input.match(pattern);
-            if (matches) {
-                mediumMatches += matches.length;
-            }
-        });
-        // Cap medium match contribution to prevent false positives in large structured data
-        const maxMediumMatches = 20;
-        const cappedMediumMatches = Math.min(mediumMatches, maxMediumMatches);
-        let mediumRiskScore = cappedMediumMatches * 0.1;
-        // 2. Proximity analysis (Levenshtein) - Complementary to regex
-        const proximityScore = this.calculateMaxProximity(input);
-        if (proximityScore > 0.4) {
-            highRiskScore += proximityScore * 0.5;
-            result.detectedPatterns.push(`Proximity Match (${Math.round(proximityScore * 100)}%)`);
-        }
-        // Contextual analysis for legitimate use cases
-        const legitimacyScore = this.calculateLegitimacyScore(input);
-        // 3. Final confidence calculation
-        const rawScore = highRiskScore + mediumRiskScore * 0.3;
-        result.confidence = Math.max(0, rawScore - legitimacyScore);
-        result.confidence = Math.min(result.confidence, 1.0);
-        // Determine risk level and malicious status
-        if (result.confidence >= 0.8) {
-            result.riskLevel = "CRITICAL";
-            result.isMalicious = true;
-        }
-        else if (result.confidence >= this.config.falsePositiveThreshold) {
-            result.riskLevel = "HIGH";
-            result.isMalicious = true;
-        }
-        else if (result.confidence >= 0.3) {
-            result.riskLevel = "MEDIUM";
-            result.isMalicious = false; // Don't block medium risk by default
-        }
-        else {
-            result.riskLevel = "LOW";
-            result.isMalicious = false;
-        }
-        // Log only high confidence attempts
-        if (this.config.logAttempts && result.confidence >= 0.7) {
-            this.logAttempt(input, result);
-        }
-        // Provide sanitized version only for high-risk inputs
-        if (result.confidence >= 0.4) {
-            result.sanitizedInput = this.smartSanitize(input);
-        }
-        return result;
-    }
-    /**
-     * Analyze context to reduce false positives
-     */
-    analyzeContext(input, context) {
-        let score = 0;
-        // Check for legitimate business contexts
-        const businessContexts = [
-            "search",
-            "filter",
-            "name",
-            "description",
-            "comment",
-            "review",
-            "address",
-            "title",
-            "content",
-            "message",
-            "email",
-        ];
-        const isBusinessContext = businessContexts.some((ctx) => context.toLowerCase().includes(ctx));
-        this.mediumRiskPatterns.forEach((pattern, index) => {
-            const matches = input.match(pattern);
-            if (matches) {
-                let patternScore = 0.1 * matches.length;
-                // Reduce score for legitimate contexts
-                if (isBusinessContext) {
-                    patternScore *= 0.3; // Reduce by 70%
-                }
-                // Special handling for common false positives
-                if (index === 0 && isBusinessContext) {
-                    // SQL keywords in business text
-                    patternScore *= 0.1; // Very low weight for SQL keywords in business context
-                }
-                if (index === 2 || index === 3) {
-                    // Single quotes in names, descriptions
-                    if (context.includes("name") ||
-                        context.includes("description")) {
-                        patternScore *= 0.2;
-                    }
-                }
-                score += patternScore;
-            }
-        });
-        return score;
-    }
-    /**
-     * Calculate legitimacy score to offset false positives
-     */
-    calculateLegitimacyScore(input) {
-        let legitimacyScore = 0;
-        // JSON check - Structured data often triggers false positives due to quotes/braces
-        if ((input.startsWith("{") && input.endsWith("}")) ||
-            (input.startsWith("[") && input.endsWith("]"))) {
-            try {
-                // Quick check for JSON validity
-                JSON.parse(input);
-                legitimacyScore += 0.8; // Significant boost for valid JSON
-            }
-            catch (e) {
-                // Not valid JSON, but maybe partial JSON
-                if (input.includes('":') || input.includes('",')) {
-                    legitimacyScore += 0.3;
-                }
-            }
-        }
-        // Natural language indicators
-        const naturalWords = input.match(/\b[a-zA-Z]{3,}\b/g);
-        if (naturalWords && naturalWords.length > 5) {
-            legitimacyScore += 0.4; // More weight for clearly natural text
-        }
-        // Check for common legitimate patterns
-        const legitimatePatterns = [
-            /^[A-Z][a-z]+\s[A-Z][a-z]+$/, // First Last name
-            /^[\w\.-]+@[\w\.-]+\.\w+$/, // Email
-            /^\d{1,5}\s\w+(\s\w+)*$/, // Address format
-            /^[A-Za-z0-9\s\-.,!?()]+$/, // Normal text with punctuation
-        ];
-        legitimatePatterns.forEach((pattern) => {
-            if (pattern.test(input)) {
-                legitimacyScore += 0.2;
-            }
-        });
-        // Check for balanced quotes (legitimate text often has balanced quotes)
-        const singleQuotes = (input.match(/'/g) || []).length;
-        const doubleQuotes = (input.match(/"/g) || []).length;
-        if (singleQuotes > 0 &&
-            singleQuotes % 2 === 0 &&
-            doubleQuotes % 2 === 0) {
-            legitimacyScore += 0.15;
-        }
-        return Math.min(legitimacyScore, 1.2); // Cap increased to allow full offset of medium risk
-    }
-    calculateMaxProximity(input) {
-        const normalizedInput = input.toLowerCase().replace(/\s+/g, " ");
-        let maxProximity = 0;
-        // Optimized proximity check: only check near suspicious characters to save CPU
-        const suspiciousIndices = [];
-        for (let i = 0; i < input.length; i++) {
-            if (["'", '"', ";", "-", "#", "u", "s", "d"].includes(input[i].toLowerCase())) {
-                suspiciousIndices.push(i);
-            }
-        }
-        // Limit the number of checks for very large strings
-        const maxChecks = 50;
-        const stride = Math.ceil(suspiciousIndices.length / maxChecks);
-        this.referencePayloads.forEach((payload) => {
-            const normalizedPayload = payload.toLowerCase();
-            const pLen = normalizedPayload.length;
-            for (let i = 0; i < suspiciousIndices.length; i += stride) {
-                const start = Math.max(0, suspiciousIndices[i] - 5);
-                const end = Math.min(normalizedInput.length, start + pLen + 10);
-                const chunk = normalizedInput.substring(start, end);
-                if (chunk.length < pLen / 2)
-                    continue;
-                const distance = this.levenshteinDistance(normalizedPayload, chunk);
-                const similarity = 1 - distance / Math.max(pLen, chunk.length);
-                if (similarity > maxProximity) {
-                    maxProximity = similarity;
-                }
-            }
-        });
-        return maxProximity;
-    }
-    levenshteinDistance(a, b) {
-        const matrix = [];
-        for (let i = 0; i <= b.length; i++) {
-            matrix[i] = [i];
-        }
-        for (let j = 0; j <= a.length; j++) {
-            matrix[0][j] = j;
-        }
-        for (let i = 1; i <= b.length; i++) {
-            for (let j = 1; j <= a.length; j++) {
-                if (b.charAt(i - 1) === a.charAt(j - 1)) {
-                    matrix[i][j] = matrix[i - 1][j - 1];
-                }
-                else {
-                    matrix[i][j] = Math.min(matrix[i - 1][j - 1] + 1, // substitution
-                    matrix[i][j - 1] + 1, // insertion
-                    matrix[i - 1][j] + 1);
-                }
-            }
-        }
-        return matrix[b.length][a.length];
-    }
-    /**
-     * Smart sanitization that preserves legitimate content
-     */
-    smartSanitize(input) {
-        if (!input)
-            return input;
-        let sanitized = input;
-        // Only remove obvious SQL injection patterns, not all SQL keywords
-        sanitized = sanitized.replace(/(--|#).*$/gm, ""); // Remove comment tails
-        sanitized = sanitized.replace(/\/\*.*?\*\//g, ""); // Remove /* */ comments
-        // Only escape quotes if they appear to be part of injection attempts
-        const suspiciousQuotes = /'(\s*(or|and|union|select)\s|;|\s*--)/gi;
-        sanitized = sanitized.replace(suspiciousQuotes, "''$1");
-        // Remove only dangerous control characters
-        sanitized = sanitized.replace(/[\x00\x1a]/g, "");
-        // Only remove semicolons if followed by SQL keywords
-        sanitized = sanitized.replace(/;(\s)*(drop|delete|insert|update|create|alter|union|select)/gi, " $2");
-        return sanitized.trim();
-    }
-    /**
-     * Validate and sanitize input, throwing error if malicious
-     */
-    validateAndSanitize(input, throwOnDetection = false) {
-        const result = this.detect(input);
-        if (result.isMalicious && throwOnDetection) {
-            throw new Error(`SQL injection attempt detected. Confidence: ${(result.confidence * 100).toFixed(1)}%. `);
-        }
-        return result.sanitizedInput || "";
-    }
-    /**
-     * Create parameterized query helper
-     */
-    createParameterizedQuery(query, params) {
-        // Simple parameterization helper
-        let parameterizedQuery = query;
-        const safeParams = [];
-        params.forEach((param, index) => {
-            if (typeof param === "string") {
-                const result = this.detect(param);
-                if (result.isMalicious) {
-                    throw new Error(`Parameter ${index} contains potential SQL injection`);
-                }
-                safeParams.push(result.sanitizedInput);
-            }
-            else {
-                safeParams.push(param);
-            }
-        });
-        return { query: parameterizedQuery, params: safeParams };
-    }
-    getHighRiskPatternName(index) {
-        const names = [
-            "Union-Select attack",
-            "Commented injection",
-            "Comment with semicolon",
-            "Enhanced boolean OR",
-            "Enhanced boolean AND",
-            "Quote-based boolean",
-            "Comment-obfuscated injection",
-            "Time-based delay",
-            "WAITFOR delay attack",
-            "System procedure call",
-            "Information schema query",
-            "DDL with semicolon",
-            "Hex-encoded injection",
-            "Quote sequence attack",
-            "Stacked query attack",
-        ];
-        return names[index] || `High-risk pattern ${index}`;
-    }
-    getHighRiskPatternWeight(index) {
-        // Higher weights for more definitive attack patterns
-        const weights = [
-            0.9, // Union-Select attack
-            0.8, // Commented injection
-            0.7, // Comment with semicolon
-            0.8, // Enhanced boolean OR
-            0.8, // Enhanced boolean AND
-            0.7, // Quote-based boolean
-            0.8, // Comment-obfuscated injection
-            0.9, // Time-based delay
-            0.8, // WAITFOR delay attack
-            0.8, // System procedure call
-            0.7, // Information schema query
-            0.9, // DDL with semicolon
-            0.6, // Hex-encoded injection
-            0.5, // Quote sequence attack
-            0.8, // Stacked query attack
-        ];
-        return weights[index] || 0.7;
-    }
-    logAttempt(input, result) {
-        console.warn(`SQL Injection Attempt Detected:`, {
-            timestamp: new Date().toISOString(),
-            input: input.substring(0, 100) + (input.length > 100 ? "..." : ""),
-            confidence: result.confidence,
-            patterns: result.detectedPatterns,
-        });
-    }
-    /**
-     * Update configuration
-     */
-    updateConfig(newConfig) {
-        this.config = { ...this.config, ...newConfig };
-    }
-    /**
-     * Get current configuration
-     */
-    getConfig() {
-        return { ...this.config };
-    }
-}
-
-module.exports = SQLInjectionDetector;
-//# sourceMappingURL=SQLInjectionDetector.js.map

package/dist/cjs/src/middleware/built-in/security/SQLInjectionDetector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"SQLInjectionDetector.js","sources":["../../../../../../src/middleware/built-in/security/SQLInjectionDetector.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAkBA,MAAM,oBAAoB,CAAA;AAgFtB,IAAA,WAAA,CAAY,SAAsC,EAAE,EAAA;;AA5EnC,QAAA,IAAA,CAAA,gBAAgB,GAAG;;YAEhC,oDAAoD;;YAGpD,uEAAuE;YACvE,cAAc;;YAGd,8EAA8E;YAC9E,gFAAgF;;YAGhF,+BAA+B;;YAG/B,yCAAyC;;YAGzC,uDAAuD;YACvD,qBAAqB;;YAGrB,8CAA8C;;YAG9C,sEAAsE;;YAGtE,wEAAwE;;AAGxE,YAAA,sBAAsB;;YAGtB,gBAAgB;;YAGhB,wDAAwD;SAC3D;;AAGgB,QAAA,IAAA,CAAA,kBAAkB,GAAG;;YAElC,6DAA6D;;YAG7D,8BAA8B;;YAG9B,IAAI;YACJ,IAAI;;YAGJ,SAAS;;YAGT,OAAO;SACV;AAEgB,QAAA,IAAA,CAAA,iBAAiB,GAAG;YACjC,cAAc;YACd,UAAU;YACV,iCAAiC;YACjC,4BAA4B;YAC5B,aAAa;YACb,eAAe;YACf,KAAK;YACL,yCAAyC;YACzC,qBAAqB;YACrB,sBAAsB;SACzB;;QAGgB,IAAA,CAAA,qBAAqB,GAAG,aAAa;QAGlD,IAAI,CAAC,MAAM,GAAG;AACV,YAAA,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;AACtC,YAAA,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,2BAA2B;AAChE,YAAA,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;AACnC,YAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;AACvC,YAAA,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI;AACrD,YAAA,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,GAAG;AAC5D,YAAA,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI;SACxD;IACL;AAEA;;AAEG;IACH,MAAM,CACF,KAAgC,EAChC,OAAgB,EAAA;QAEhB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;YACrC,OAAO;AACH,gBAAA,WAAW,EAAE,KAAK;AAClB,gBAAA,UAAU,EAAE,CAAC;AACb,gBAAA,gBAAgB,EAAE,EAAE;AACpB,gBAAA,SAAS,EAAE,KAAK;aACnB;QACL;AAEA,QAAA,MAAM,MAAM,GAAoB;AAC5B,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,UAAU,EAAE,CAAC;AACb,YAAA,gBAAgB,EAAE,EAAE;AACpB,YAAA,cAAc,EAAE,KAAK;AACrB,YAAA,SAAS,EAAE,KAAK;SACnB;;QAGD,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;AACtC,YAAA,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC;AACzB,YAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACpD;;QAGA,IAAI,aAAa,GAAG,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,KAAI;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,EAAE;AACT,gBAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CACxB,CAAA,eAAA,EAAkB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAE,CACzC;gBACD,aAAa,IAAI,GAAG;YACxB;AACJ,QAAA,CAAC,CAAC;;QAGF,IAAI,aAAa,GAAG,CAAC;QACrB,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,KAAI;YACxC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,EAAE;AACT,gBAAA,aAAa,IAAI,OAAO,CAAC,MAAM;YACnC;AACJ,QAAA,CAAC,CAAC;;QAGF,MAAM,gBAAgB,GAAG,EAAE;QAC3B,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC;AACrE,QAAA,IAAI,eAAe,GAAG,mBAAmB,GAAG,GAAG;;QAG/C,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;AACxD,QAAA,IAAI,cAAc,GAAG,GAAG,EAAE;AACtB,YAAA,aAAa,IAAI,cAAc,GAAG,GAAG;AACrC,YAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CACxB,oBAAoB,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC,CAAA,EAAA,CAAI,CAC3D;QACL;;QAGA,MAAM,eAAe,GAAG,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC;;AAG5D,QAAA,MAAM,QAAQ,GAAG,aAAa,GAAG,eAAe,GAAG,GAAG;AACtD,QAAA,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,eAAe,CAAC;AAC3D,QAAA,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC;;AAGpD,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AAC1B,YAAA,MAAM,CAAC,SAAS,GAAG,UAAU;AAC7B,YAAA,MAAM,CAAC,WAAW,GAAG,IAAI;QAC7B;aAAO,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;AAChE,YAAA,MAAM,CAAC,SAAS,GAAG,MAAM;AACzB,YAAA,MAAM,CAAC,WAAW,GAAG,IAAI;QAC7B;AAAO,aAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AACjC,YAAA,MAAM,CAAC,SAAS,GAAG,QAAQ;AAC3B,YAAA,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;QAC/B;aAAO;AACH,YAAA,MAAM,CAAC,SAAS,GAAG,KAAK;AACxB,YAAA,MAAM,CAAC,WAAW,GAAG,KAAK;QAC9B;;AAGA,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AACrD,YAAA,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAClC;;AAGA,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;YAC1B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QACrD;AAEA,QAAA,OAAO,MAAM;IACjB;AAEA;;AAEG;IACK,cAAc,CAAC,KAAa,EAAE,OAAe,EAAA;QACjD,IAAI,KAAK,GAAG,CAAC;;AAGb,QAAA,MAAM,gBAAgB,GAAG;YACrB,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,aAAa;YACb,SAAS;YACT,QAAQ;YACR,SAAS;YACT,OAAO;YACP,SAAS;YACT,SAAS;YACT,OAAO;SACV;QAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,KAChD,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CACtC;QAED,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,KAAI;YAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,IAAI,OAAO,EAAE;AACT,gBAAA,IAAI,YAAY,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM;;gBAGvC,IAAI,iBAAiB,EAAE;AACnB,oBAAA,YAAY,IAAI,GAAG,CAAC;gBACxB;;AAGA,gBAAA,IAAI,KAAK,KAAK,CAAC,IAAI,iBAAiB,EAAE;;AAElC,oBAAA,YAAY,IAAI,GAAG,CAAC;gBACxB;gBAEA,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE;;AAE5B,oBAAA,IACI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;AACxB,wBAAA,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EACjC;wBACE,YAAY,IAAI,GAAG;oBACvB;gBACJ;gBAEA,KAAK,IAAI,YAAY;YACzB;AACJ,QAAA,CAAC,CAAC;AAEF,QAAA,OAAO,KAAK;IAChB;AAEA;;AAEG;AACK,IAAA,wBAAwB,CAAC,KAAa,EAAA;QAC1C,IAAI,eAAe,GAAG,CAAC;;AAGvB,QAAA,IACI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;AAC7C,aAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAChD;AACE,YAAA,IAAI;;AAEA,gBAAA,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;AACjB,gBAAA,eAAe,IAAI,GAAG,CAAC;YAC3B;YAAE,OAAO,CAAC,EAAE;;AAER,gBAAA,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;oBAC9C,eAAe,IAAI,GAAG;gBAC1B;YACJ;QACJ;;QAGA,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACrD,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE;AACzC,YAAA,eAAe,IAAI,GAAG,CAAC;QAC3B;;AAGA,QAAA,MAAM,kBAAkB,GAAG;AACvB,YAAA,4BAA4B;AAC5B,YAAA,0BAA0B;AAC1B,YAAA,wBAAwB;AACxB,YAAA,0BAA0B;SAC7B;AAED,QAAA,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,KAAI;AACnC,YAAA,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBACrB,eAAe,IAAI,GAAG;YAC1B;AACJ,QAAA,CAAC,CAAC;;AAGF,QAAA,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM;AACrD,QAAA,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM;QACrD,IACI,YAAY,GAAG,CAAC;YAChB,YAAY,GAAG,CAAC,KAAK,CAAC;AACtB,YAAA,YAAY,GAAG,CAAC,KAAK,CAAC,EACxB;YACE,eAAe,IAAI,IAAI;QAC3B;QAEA,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC1C;AAEQ,IAAA,qBAAqB,CAAC,KAAa,EAAA;AACvC,QAAA,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;QAChE,IAAI,YAAY,GAAG,CAAC;;QAGpB,MAAM,iBAAiB,GAAa,EAAE;AACtC,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACnC,YAAA,IACI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAC7C,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CACzB,EACH;AACE,gBAAA,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7B;QACJ;;QAGA,MAAM,SAAS,GAAG,EAAE;AACpB,QAAA,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,GAAG,SAAS,CAAC;QAE9D,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,OAAO,KAAI;AACvC,YAAA,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE;AAC/C,YAAA,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM;AAErC,YAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM,EAAE;AACvD,gBAAA,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACnD,gBAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;gBAC/D,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;AAEnD,gBAAA,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC;oBAAE;gBAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CACrC,iBAAiB,EACjB,KAAK,CACR;AACD,gBAAA,MAAM,UAAU,GAAG,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;AAE9D,gBAAA,IAAI,UAAU,GAAG,YAAY,EAAE;oBAC3B,YAAY,GAAG,UAAU;gBAC7B;YACJ;AACJ,QAAA,CAAC,CAAC;AAEF,QAAA,OAAO,YAAY;IACvB;IAEQ,mBAAmB,CAAC,CAAS,EAAE,CAAS,EAAA;QAC5C,MAAM,MAAM,GAAe,EAAE;AAE7B,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAChC,YAAA,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACnB;AAEA,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YAChC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACpB;AAEA,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAChC,YAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAChC,gBAAA,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;AACrC,oBAAA,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACvC;qBAAO;oBACH,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CACnB,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;oBACxB,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;oBACpB,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CACvB;gBACL;YACJ;QACJ;QAEA,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACrC;AAEA;;AAEG;AACH,IAAA,aAAa,CAAC,KAAa,EAAA;AACvB,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,OAAO,KAAK;QAExB,IAAI,SAAS,GAAG,KAAK;;QAGrB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACjD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;;QAGlD,MAAM,gBAAgB,GAAG,yCAAyC;QAClE,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC;;QAGvD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;;QAGhD,SAAS,GAAG,SAAS,CAAC,OAAO,CACzB,+DAA+D,EAC/D,KAAK,CACR;AAED,QAAA,OAAO,SAAS,CAAC,IAAI,EAAE;IAC3B;AAEA;;AAEG;AACH,IAAA,mBAAmB,CACf,KAAa,EACb,gBAAA,GAA4B,KAAK,EAAA;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;AAEjC,QAAA,IAAI,MAAM,CAAC,WAAW,IAAI,gBAAgB,EAAE;AACxC,YAAA,MAAM,IAAI,KAAK,CACX,+CAA+C,CAC3C,MAAM,CAAC,UAAU,GAAG,GAAG,EACzB,OAAO,CAAC,CAAC,CAAC,CAAA,GAAA,CAAK,CAGpB;QACL;AAEA,QAAA,OAAO,MAAM,CAAC,cAAc,IAAI,EAAE;IACtC;AAEA;;AAEG;IACH,wBAAwB,CACpB,KAAa,EACb,MAAa,EAAA;;QAGb,IAAI,kBAAkB,GAAG,KAAK;QAC9B,MAAM,UAAU,GAAU,EAAE;QAE5B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,KAAI;AAC5B,YAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;gBAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;AACjC,gBAAA,IAAI,MAAM,CAAC,WAAW,EAAE;AACpB,oBAAA,MAAM,IAAI,KAAK,CACX,aAAa,KAAK,CAAA,iCAAA,CAAmC,CACxD;gBACL;AACA,gBAAA,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC1C;iBAAO;AACH,gBAAA,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAC1B;AACJ,QAAA,CAAC,CAAC;QAEF,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE;IAC5D;AAEQ,IAAA,sBAAsB,CAAC,KAAa,EAAA;AACxC,QAAA,MAAM,KAAK,GAAG;YACV,qBAAqB;YACrB,qBAAqB;YACrB,wBAAwB;YACxB,qBAAqB;YACrB,sBAAsB;YACtB,qBAAqB;YACrB,8BAA8B;YAC9B,kBAAkB;YAClB,sBAAsB;YACtB,uBAAuB;YACvB,0BAA0B;YAC1B,oBAAoB;YACpB,uBAAuB;YACvB,uBAAuB;YACvB,sBAAsB;SACzB;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAA,kBAAA,EAAqB,KAAK,EAAE;IACvD;AAEQ,IAAA,wBAAwB,CAAC,KAAa,EAAA;;AAE1C,QAAA,MAAM,OAAO,GAAG;AACZ,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;AACH,YAAA,GAAG;SACN;AACD,QAAA,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG;IAChC;IAEQ,UAAU,CAAC,KAAa,EAAE,MAAuB,EAAA;AACrD,QAAA,OAAO,CAAC,IAAI,CAAC,CAAA,+BAAA,CAAiC,EAAE;AAC5C,YAAA,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,GAAG,KAAK,GAAG,EAAE,CAAC;YAClE,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,gBAAgB;AACpC,SAAA,CAAC;IACN;AAEA;;AAEG;AACH,IAAA,YAAY,CAAC,SAAsC,EAAA;AAC/C,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE;IAClD;AAEA;;AAEG;IACH,SAAS,GAAA;AACL,QAAA,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;IAC7B;AACH;;;;"}

package/dist/cjs/src/middleware/built-in/security/XXEProtector.js

@@ -1,175 +0,0 @@
-'use strict';
-
-/**
- * XXE (XML External Entity) Protection Module
- *
- * Detects and prevents XXE attacks in XML parsing
- * Uses libxmljs2 for secure XML parsing
- */
-class XXEProtector {
-    constructor(config = {}) {
-        // Dangerous XXE patterns
-        this.dangerousPatterns = [
-            // External entity declarations
-            /<!ENTITY\s+\w+\s+SYSTEM\s+/gi,
-            /<!ENTITY\s+\w+\s+PUBLIC\s+/gi,
-            // Parameter entities
-            /<!ENTITY\s+%\s+\w+/gi,
-            // External DTD
-            /<!DOCTYPE\s+\w+\s+SYSTEM\s+/gi,
-            /<!DOCTYPE\s+\w+\s+PUBLIC\s+/gi,
-            // File protocol
-            /SYSTEM\s+["']file:\/\//gi,
-            // HTTP/HTTPS external resources
-            /SYSTEM\s+["'](https?|ftp):\/\//gi,
-            // PHP wrappers (common in XXE)
-            /php:\/\//gi,
-            /expect:\/\//gi,
-            // Data URIs
-            /data:\/\//gi,
-        ];
-        this.config = {
-            enabled: config.enabled ?? true,
-            strictMode: config.strictMode ?? true,
-            logAttempts: config.logAttempts ?? true,
-            blockOnDetection: config.blockOnDetection ?? true,
-            falsePositiveThreshold: config.falsePositiveThreshold ?? 0.5,
-            customPatterns: config.customPatterns ?? [],
-            allowDTD: config.allowDTD ?? false,
-            allowExternalEntities: config.allowExternalEntities ?? false,
-            maxEntityExpansions: config.maxEntityExpansions ?? 0,
-        };
-    }
-    /**
-     * Detect XXE attempts in XML content
-     */
-    detect(xmlContent) {
-        if (!xmlContent || typeof xmlContent !== 'string') {
-            return {
-                isMalicious: false,
-                confidence: 0,
-                detectedPatterns: [],
-                riskLevel: 'LOW',
-            };
-        }
-        const result = {
-            isMalicious: false,
-            confidence: 0,
-            detectedPatterns: [],
-            sanitizedInput: xmlContent,
-            riskLevel: 'LOW',
-        };
-        // Check for dangerous patterns
-        let riskScore = 0;
-        this.dangerousPatterns.forEach((pattern, index) => {
-            const matches = xmlContent.match(pattern);
-            if (matches) {
-                const patternName = this.getPatternName(index);
-                result.detectedPatterns.push(`${patternName}: ${matches.length} occurrence(s)`);
-                riskScore += 0.7;
-            }
-        });
-        // Check for DTD if not allowed
-        if (!this.config.allowDTD && /<!DOCTYPE/gi.test(xmlContent)) {
-            result.detectedPatterns.push('DTD declaration (not allowed)');
-            riskScore += 0.5;
-        }
-        // Check for entity declarations
-        if (!this.config.allowExternalEntities && /<!ENTITY/gi.test(xmlContent)) {
-            result.detectedPatterns.push('Entity declaration (not allowed)');
-            riskScore += 0.6;
-        }
-        // Calculate confidence
-        result.confidence = Math.min(riskScore, 1.0);
-        // Determine risk level
-        if (result.confidence >= 0.8) {
-            result.riskLevel = 'CRITICAL';
-            result.isMalicious = true;
-        }
-        else if (result.confidence >= this.config.falsePositiveThreshold) {
-            result.riskLevel = 'HIGH';
-            result.isMalicious = true;
-        }
-        else if (result.confidence >= 0.3) {
-            result.riskLevel = 'MEDIUM';
-            result.isMalicious = this.config.strictMode;
-        }
-        // Sanitize XML
-        if (result.confidence >= 0.3) {
-            result.sanitizedInput = this.sanitizeXML(xmlContent);
-        }
-        // Log attempts
-        if (this.config.logAttempts && result.confidence >= 0.5) {
-            this.logAttempt(result);
-        }
-        return result;
-    }
-    /**
-     * Sanitize XML by removing dangerous constructs
-     */
-    sanitizeXML(xml) {
-        let sanitized = xml;
-        // Remove DOCTYPE declarations
-        sanitized = sanitized.replace(/<!DOCTYPE[^>]*>/gi, '');
-        // Remove ENTITY declarations
-        sanitized = sanitized.replace(/<!ENTITY[^>]*>/gi, '');
-        // Remove SYSTEM references
-        sanitized = sanitized.replace(/SYSTEM\s+["'][^"']*["']/gi, '');
-        // Remove PUBLIC references
-        sanitized = sanitized.replace(/PUBLIC\s+["'][^"']*["']/gi, '');
-        return sanitized;
-    }
-    /**
-     * Safe XML parsing helper (returns parsed object or null)
-     * Note: In production, use a library like 'libxmljs2' with secure defaults
-     */
-    safeParseXML(xmlContent) {
-        const detection = this.detect(xmlContent);
-        if (detection.isMalicious) {
-            if (this.config.blockOnDetection) {
-                throw new Error(`XXE attack detected: ${detection.detectedPatterns.join(', ')}`);
-            }
-            return null;
-        }
-        // In production, use a secure XML parser here
-        // Example with libxmljs2:
-        // const libxmljs = require('libxmljs2');
-        // return libxmljs.parseXml(detection.sanitizedInput, {
-        //     noent: false,  // Disable entity substitution
-        //     dtdload: false, // Disable DTD loading
-        //     dtdvalid: false, // Disable DTD validation
-        //     nonet: true,    // Disable network access
-        // });
-        return { warning: 'Use a secure XML parser library in production' };
-    }
-    getPatternName(index) {
-        const names = [
-            'External SYSTEM entity',
-            'External PUBLIC entity',
-            'Parameter entity',
-            'DOCTYPE SYSTEM',
-            'DOCTYPE PUBLIC',
-            'File protocol',
-            'HTTP/HTTPS external resource',
-            'PHP wrapper',
-            'Data URI',
-        ];
-        return names[index] || `Pattern ${index}`;
-    }
-    logAttempt(result) {
-        console.warn('[XXE] Attack detected:', {
-            timestamp: new Date().toISOString(),
-            confidence: result.confidence,
-            patterns: result.detectedPatterns,
-        });
-    }
-    updateConfig(newConfig) {
-        this.config = { ...this.config, ...newConfig };
-    }
-    getConfig() {
-        return { ...this.config };
-    }
-}
-
-module.exports = XXEProtector;
-//# sourceMappingURL=XXEProtector.js.map

package/dist/cjs/src/middleware/built-in/security/XXEProtector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"XXEProtector.js","sources":["../../../../../../src/middleware/built-in/security/XXEProtector.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;;;;;AAKG;AAUH,MAAM,YAAY,CAAA;AA8Bd,IAAA,WAAA,CAAY,SAAoB,EAAE,EAAA;;AA1BjB,QAAA,IAAA,CAAA,iBAAiB,GAAG;;YAEjC,8BAA8B;YAC9B,8BAA8B;;YAG9B,sBAAsB;;YAGtB,+BAA+B;YAC/B,+BAA+B;;YAG/B,0BAA0B;;YAG1B,kCAAkC;;YAGlC,YAAY;YACZ,eAAe;;YAGf,aAAa;SAChB;QAGG,IAAI,CAAC,MAAM,GAAG;AACV,YAAA,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;AAC/B,YAAA,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;AACrC,YAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;AACvC,YAAA,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;AACjD,YAAA,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,GAAG;AAC5D,YAAA,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;AAC3C,YAAA,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;AAClC,YAAA,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,KAAK;AAC5D,YAAA,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,CAAC;SACvD;IACL;AAEA;;AAEG;AACH,IAAA,MAAM,CAAC,UAAqC,EAAA;QACxC,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;YAC/C,OAAO;AACH,gBAAA,WAAW,EAAE,KAAK;AAClB,gBAAA,UAAU,EAAE,CAAC;AACb,gBAAA,gBAAgB,EAAE,EAAE;AACpB,gBAAA,SAAS,EAAE,KAAK;aACnB;QACL;AAEA,QAAA,MAAM,MAAM,GAA4B;AACpC,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,UAAU,EAAE,CAAC;AACb,YAAA,gBAAgB,EAAE,EAAE;AACpB,YAAA,cAAc,EAAE,UAAU;AAC1B,YAAA,SAAS,EAAE,KAAK;SACnB;;QAGD,IAAI,SAAS,GAAG,CAAC;QACjB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,KAAI;YAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;YACzC,IAAI,OAAO,EAAE;gBACT,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;AAC9C,gBAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA,EAAG,WAAW,CAAA,EAAA,EAAK,OAAO,CAAC,MAAM,CAAA,cAAA,CAAgB,CAAC;gBAC/E,SAAS,IAAI,GAAG;YACpB;AACJ,QAAA,CAAC,CAAC;;AAGF,QAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;AACzD,YAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,+BAA+B,CAAC;YAC7D,SAAS,IAAI,GAAG;QACpB;;AAGA,QAAA,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;AACrE,YAAA,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,kCAAkC,CAAC;YAChE,SAAS,IAAI,GAAG;QACpB;;QAGA,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC;;AAG5C,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AAC1B,YAAA,MAAM,CAAC,SAAS,GAAG,UAAU;AAC7B,YAAA,MAAM,CAAC,WAAW,GAAG,IAAI;QAC7B;aAAO,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;AAChE,YAAA,MAAM,CAAC,SAAS,GAAG,MAAM;AACzB,YAAA,MAAM,CAAC,WAAW,GAAG,IAAI;QAC7B;AAAO,aAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AACjC,YAAA,MAAM,CAAC,SAAS,GAAG,QAAQ;YAC3B,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU;QAC/C;;AAGA,QAAA,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;YAC1B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;QACxD;;AAGA,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE;AACrD,YAAA,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAC3B;AAEA,QAAA,OAAO,MAAM;IACjB;AAEA;;AAEG;AACK,IAAA,WAAW,CAAC,GAAW,EAAA;QAC3B,IAAI,SAAS,GAAG,GAAG;;QAGnB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;;QAGtD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;;QAGrD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC;;QAG9D,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC;AAE9D,QAAA,OAAO,SAAS;IACpB;AAEA;;;AAGG;AACH,IAAA,YAAY,CAAC,UAAkB,EAAA;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;AAEzC,QAAA,IAAI,SAAS,CAAC,WAAW,EAAE;AACvB,YAAA,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AAC9B,gBAAA,MAAM,IAAI,KAAK,CAAC,CAAA,qBAAA,EAAwB,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAE,CAAC;YACpF;AACA,YAAA,OAAO,IAAI;QACf;;;;;;;;;;AAYA,QAAA,OAAO,EAAE,OAAO,EAAE,+CAA+C,EAAE;IACvE;AAEQ,IAAA,cAAc,CAAC,KAAa,EAAA;AAChC,QAAA,MAAM,KAAK,GAAG;YACV,wBAAwB;YACxB,wBAAwB;YACxB,kBAAkB;YAClB,gBAAgB;YAChB,gBAAgB;YAChB,eAAe;YACf,8BAA8B;YAC9B,aAAa;YACb,UAAU;SACb;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAA,QAAA,EAAW,KAAK,EAAE;IAC7C;AAEQ,IAAA,UAAU,CAAC,MAA+B,EAAA;AAC9C,QAAA,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE;AACnC,YAAA,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,gBAAgB;AACpC,SAAA,CAAC;IACN;AAEA,IAAA,YAAY,CAAC,SAA6B,EAAA;AACtC,QAAA,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE;IAClD;IAEA,SAAS,GAAA;AACL,QAAA,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE;IAC7B;AACH;;;;"}