diff --git a/404.html b/404.html index 404ab48b..bf8d807d 100644 --- a/404.html +++ b/404.html @@ -1,4 +1,4 @@ - | mSCP - Skip to content
mSCP
Skip to content
mSCP

404 – You're Lost!

Looks like you wandered off the path of greatness into a no man's land.
-Find your way back to the best macOS compliance project ever! -
Go Back Home Head To Getting Started
\ No newline at end of file +

404 – You're Lost!

Looks like you wandered off the secure path into uncharted territory.
+Don't worry, even the best sysadmins take a wrong turn sometimes! +
Return to Safety Getting Started
+

How did you get here?

Section titled “How did you get here?”

$ cd /correct/path
+-bash: /correct/path: No such file or directory

+ +

“In a world of vulnerabilities, a 404 is the least of your worries.”

\ No newline at end of file diff --git a/_astro/Search.astro_astro_type_script_index_0_lang.Deq9_OSH.js b/_astro/Search.astro_astro_type_script_index_0_lang.CfYcGagN.js similarity index 86% rename from _astro/Search.astro_astro_type_script_index_0_lang.Deq9_OSH.js rename to _astro/Search.astro_astro_type_script_index_0_lang.CfYcGagN.js index 9681ca66..7620c0d5 100644 --- a/_astro/Search.astro_astro_type_script_index_0_lang.Deq9_OSH.js +++ b/_astro/Search.astro_astro_type_script_index_0_lang.CfYcGagN.js @@ -1 +1 @@ -const y="modulepreload",w=function(f){return"/macos_security/"+f},g={},S=function(m,c,l){let h=Promise.resolve();if(c&&c.length>0){let o=function(n){return Promise.all(n.map(a=>Promise.resolve(a).then(r=>({status:"fulfilled",value:r}),r=>({status:"rejected",reason:r}))))};document.getElementsByTagName("link");const t=document.querySelector("meta[property=csp-nonce]"),u=t?.nonce||t?.getAttribute("nonce");h=o(c.map(n=>{if(n=w(n),n in g)return;g[n]=!0;const a=n.endsWith(".css"),r=a?'[rel="stylesheet"]':"";if(document.querySelector(`link[href="${n}"]${r}`))return;const e=document.createElement("link");if(e.rel=a?"stylesheet":y,a||(e.as="script"),e.crossOrigin="",e.href=n,u&&e.setAttribute("nonce",u),document.head.appendChild(e),a)return new Promise((i,s)=>{e.addEventListener("load",i),e.addEventListener("error",()=>s(new Error(`Unable to preload CSS for ${n}`)))})}))}function d(o){const t=new Event("vite:preloadError",{cancelable:!0});if(t.payload=o,window.dispatchEvent(t),!t.defaultPrevented)throw o}return h.then(o=>{for(const t of o||[])t.status==="rejected"&&d(t.reason);return m().catch(d)})},E={ranking:{pageLength:.1,termFrequency:.1,termSaturation:2,termSimilarity:9}};class v extends HTMLElement{constructor(){super();const m=this.querySelector("button[data-open-modal]"),c=this.querySelector("button[data-close-modal]"),l=this.querySelector("dialog"),h=this.querySelector(".dialog-frame"),d=e=>{("href"in(e.target||{})||document.body.contains(e.target)&&!h.contains(e.target))&&t()},o=e=>{l.showModal(),document.body.toggleAttribute("data-search-modal-open",!0),this.querySelector("input")?.focus(),e?.stopPropagation(),window.addEventListener("click",d)},t=()=>l.close();m.addEventListener("click",o),m.disabled=!1,c.addEventListener("click",t),l.addEventListener("close",()=>{document.body.toggleAttribute("data-search-modal-open",!1),window.removeEventListener("click",d)}),window.addEventListener("keydown",e=>{(e.metaKey===!0||e.ctrlKey===!0)&&e.key==="k"&&(l.open?t():o(),e.preventDefault())});let u={};try{u=JSON.parse(this.dataset.translations||"{}")}catch{}const r=this.dataset.stripTrailingSlash!==void 0?e=>e.replace(/(.)\/(#.*)?$/,"$1$2"):e=>e;window.addEventListener("DOMContentLoaded",()=>{(window.requestIdleCallback||(i=>setTimeout(i,1)))(async()=>{const{PagefindUI:i}=await S(async()=>{const{PagefindUI:s}=await import("./ui-core.Bc4QPfeb.js");return{PagefindUI:s}},[]);new i({...E,element:"#starlight__search",baseUrl:"/macos_security",bundlePath:"/macos_security".replace(/\/$/,"")+"/pagefind/",showImages:!1,translations:u,showSubResults:!0,processResult:s=>{s.url=r(s.url),s.sub_results=s.sub_results.map(p=>(p.url=r(p.url),p))}})})})}}customElements.define("site-search",v);export{S as _}; +const y="modulepreload",w=function(f){return"/macos_security/"+f},g={},S=function(m,c,l){let h=Promise.resolve();if(c&&c.length>0){let o=function(n){return Promise.all(n.map(a=>Promise.resolve(a).then(r=>({status:"fulfilled",value:r}),r=>({status:"rejected",reason:r}))))};document.getElementsByTagName("link");const t=document.querySelector("meta[property=csp-nonce]"),u=t?.nonce||t?.getAttribute("nonce");h=o(c.map(n=>{if(n=w(n),n in g)return;g[n]=!0;const a=n.endsWith(".css"),r=a?'[rel="stylesheet"]':"";if(document.querySelector(`link[href="${n}"]${r}`))return;const e=document.createElement("link");if(e.rel=a?"stylesheet":y,a||(e.as="script"),e.crossOrigin="",e.href=n,u&&e.setAttribute("nonce",u),document.head.appendChild(e),a)return new Promise((i,s)=>{e.addEventListener("load",i),e.addEventListener("error",()=>s(new Error(`Unable to preload CSS for ${n}`)))})}))}function d(o){const t=new Event("vite:preloadError",{cancelable:!0});if(t.payload=o,window.dispatchEvent(t),!t.defaultPrevented)throw o}return h.then(o=>{for(const t of o||[])t.status==="rejected"&&d(t.reason);return m().catch(d)})},E={ranking:{pageLength:.1,termFrequency:.1,termSaturation:2,termSimilarity:9}};class v extends HTMLElement{constructor(){super();const m=this.querySelector("button[data-open-modal]"),c=this.querySelector("button[data-close-modal]"),l=this.querySelector("dialog"),h=this.querySelector(".dialog-frame"),d=e=>{("href"in(e.target||{})||document.body.contains(e.target)&&!h.contains(e.target))&&t()},o=e=>{l.showModal(),document.body.toggleAttribute("data-search-modal-open",!0),this.querySelector("input")?.focus(),e?.stopPropagation(),window.addEventListener("click",d)},t=()=>l.close();m.addEventListener("click",o),m.disabled=!1,c.addEventListener("click",t),l.addEventListener("close",()=>{document.body.toggleAttribute("data-search-modal-open",!1),window.removeEventListener("click",d)}),window.addEventListener("keydown",e=>{(e.metaKey===!0||e.ctrlKey===!0)&&e.key==="k"&&(l.open?t():o(),e.preventDefault())});let u={};try{u=JSON.parse(this.dataset.translations||"{}")}catch{}const r=this.dataset.stripTrailingSlash!==void 0?e=>e.replace(/(.)\/(#.*)?$/,"$1$2"):e=>e;window.addEventListener("DOMContentLoaded",()=>{(window.requestIdleCallback||(i=>setTimeout(i,1)))(async()=>{const{PagefindUI:i}=await S(async()=>{const{PagefindUI:s}=await import("./ui-core.CK7w4eC0.js");return{PagefindUI:s}},[]);new i({...E,element:"#starlight__search",baseUrl:"/macos_security/",bundlePath:"/macos_security/".replace(/\/$/,"")+"/pagefind/",showImages:!1,translations:u,showSubResults:!0,processResult:s=>{s.url=r(s.url),s.sub_results=s.sub_results.map(p=>(p.url=r(p.url),p))}})})})}}customElements.define("site-search",v);export{S as _}; diff --git a/_astro/index.D3YRm-Dj.css b/_astro/index.D3YRm-Dj.css new file mode 100644 index 00000000..7cc1bceb --- /dev/null +++ b/_astro/index.D3YRm-Dj.css @@ -0,0 +1 @@ +:root{--sl-color-accent: rgb(49, 100, 49)}:root[data-theme=dark]{--sl-color-accent-high: #6ab549 !important}#nistheadergoeshere{position:fixed;top:0;left:0;right:0;z-index:1000;width:100%}#nistfootergoeshere{position:relative;z-index:0;margin-top:50px}.header{#position: fixed;top:40px;left:0;width:100%}.expressive-code .header{position:static!important;top:unset!important;left:unset!important;width:unset!important}.sidebar-content,.right-sidebar-content,.right-sidebar-panel{margin-top:45px}#starlight__on-this-page--mobile{margin-top:40px}body{margin-top:30px}body:has(.sl-banner){margin-top:40px}sl-anchor-link,.sl-heading-wrapper,.sl-heading-wrapper h1,.sl-heading-wrapper h2,.sl-heading-wrapper h3,.sl-heading-wrapper h4,.sl-heading-wrapper h5,.sl-heading-wrapper h6{scroll-margin-top:30px}@media(max-width:50rem){@layer starlight.core{starlight-menu-button>button{position:fixed;top:calc((var(--sl-nav-height) - var(--sl-menu-button-size)) / 2 + 40px);inset-inline-end:var(--sl-nav-pad-x);z-index:var(--sl-z-index-navbar)}}}.site-title{transition:transform .2s ease,color .2s ease}.site-title:hover{color:#6ab549;cursor:pointer;transform:translateY(-4px)}:root[data-theme=dark] .site-title:hover{color:#316431}.feature-box{transition:transform .2s ease,box-shadow .2s ease,border-color .2s ease}.feature-box:hover{transform:translateY(-3px);box-shadow:0 8px 24px #00000026;border-color:var(--sl-color-accent)!important}.hero img,.hero>.hero-html{object-fit:contain;width:min(90%,32rem);height:auto;margin-inline:auto;transform:rotate(12deg) scale(1.05);transition:all .3s}.hero img:hover,.hero>.hero-html:hover{transform:rotate(-5deg) scale(1.12)}:root:not([data-theme=dark]) .hero img{filter:drop-shadow(0 0 16px #7ed957) brightness(1.1)}:root[data-theme=dark] .hero img{filter:drop-shadow(0 0 16px #236c2b) brightness(1.1)}:root:not([data-theme=dark]){--hero-btn-bg: #236c2b;--hero-btn-color: #fff}:root[data-theme=dark]{--hero-btn-bg: #236c2b;--hero-btn-color: #fff}.hero .Button{background:var(--hero-btn-bg, #7ed957);color:var(--hero-btn-color, #222);border:none;padding:.75em 1.5em;border-radius:.5em;font-weight:700;cursor:pointer;transition:background .3s,color .3s}.hero .Button:hover{background:var(--hero-btn-color, #222);color:var(--hero-btn-bg, #7ed957)}.hero .sl-link-button.primary:hover{color:var(--hero-primary-hover)}.hero .sl-link-button.secondary:hover,.hero .sl-link-button.minimal:hover{color:var(--hero-link-color)}:root:not([data-theme=dark]) .hero .sl-link-button.minimal:hover{text-shadow:0 0 8px #fff,0 0 16px #7ed957}.hero .sl-link-button.primary,.hero .sl-link-button.secondary{background:var(--hero-btn-bg);color:var(--hero-btn-color);border:none}.card{background:transparent!important;border:1px solid var(--sl-color-gray-6, #eee)!important;border-radius:8px!important;box-shadow:none!important}[data-theme=dark] .card{background:transparent!important;border-color:var(--sl-color-gray-5, #2a2d35)!important}.card:hover{border-color:var(--sl-color-accent)!important}.howto-link-list{list-style:none;padding:0;margin:0}.howto-link-list li{border-bottom:1px solid var(--sl-color-gray-6);padding:.25rem 0;margin:0}.howto-link-list li:last-child{border-bottom:none}.howto-link-list a{display:flex;justify-content:space-between;align-items:center;text-decoration:none}.howto-link-list .arrow{display:inline-block;width:1rem;height:1rem;background-color:currentColor;mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='M17.92 11.62a1.001 1.001 0 0 0-.21-.33l-5-5a1.003 1.003 0 1 0-1.42 1.42l3.3 3.29H7a1 1 0 0 0 0 2h7.59l-3.3 3.29a1.002 1.002 0 0 0 .325 1.639 1 1 0 0 0 1.095-.219l5-5a1 1 0 0 0 .21-.33 1 1 0 0 0 0-.76Z'%3E%3C/path%3E%3C/svg%3E");-webkit-mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='M17.92 11.62a1.001 1.001 0 0 0-.21-.33l-5-5a1.003 1.003 0 1 0-1.42 1.42l3.3 3.29H7a1 1 0 0 0 0 2h7.59l-3.3 3.29a1.002 1.002 0 0 0 .325 1.639 1 1 0 0 0 1.095-.219l5-5a1 1 0 0 0 .21-.33 1 1 0 0 0 0-.76Z'%3E%3C/path%3E%3C/svg%3E");mask-size:100%;-webkit-mask-size:100%}@media(max-width:600px){.hero img,.hero>.hero-html{width:85vw;max-width:20rem;padding:3rem 1rem 1rem}}@layer starlight.base,starlight.reset,starlight.core,starlight.content,starlight.components,starlight.utils;@layer starlight.base{:root,::backdrop{--sl-color-white: hsl(0, 0%, 100%);--sl-color-gray-1: hsl(224, 20%, 94%);--sl-color-gray-2: hsl(224, 6%, 77%);--sl-color-gray-3: hsl(224, 6%, 56%);--sl-color-gray-4: hsl(224, 7%, 36%);--sl-color-gray-5: hsl(224, 10%, 23%);--sl-color-gray-6: hsl(224, 14%, 16%);--sl-color-black: hsl(224, 10%, 10%);--sl-hue-orange: 41;--sl-color-orange-low: hsl(var(--sl-hue-orange), 39%, 22%);--sl-color-orange: hsl(var(--sl-hue-orange), 82%, 63%);--sl-color-orange-high: hsl(var(--sl-hue-orange), 82%, 87%);--sl-hue-green: 101;--sl-color-green-low: hsl(var(--sl-hue-green), 39%, 22%);--sl-color-green: hsl(var(--sl-hue-green), 82%, 63%);--sl-color-green-high: hsl(var(--sl-hue-green), 82%, 80%);--sl-hue-blue: 234;--sl-color-blue-low: hsl(var(--sl-hue-blue), 54%, 20%);--sl-color-blue: hsl(var(--sl-hue-blue), 100%, 60%);--sl-color-blue-high: hsl(var(--sl-hue-blue), 100%, 87%);--sl-hue-purple: 281;--sl-color-purple-low: hsl(var(--sl-hue-purple), 39%, 22%);--sl-color-purple: hsl(var(--sl-hue-purple), 82%, 63%);--sl-color-purple-high: hsl(var(--sl-hue-purple), 82%, 89%);--sl-hue-red: 339;--sl-color-red-low: hsl(var(--sl-hue-red), 39%, 22%);--sl-color-red: hsl(var(--sl-hue-red), 82%, 63%);--sl-color-red-high: hsl(var(--sl-hue-red), 82%, 87%);--sl-color-accent-low: hsl(224, 54%, 20%);--sl-color-accent: hsl(224, 100%, 60%);--sl-color-accent-high: hsl(224, 100%, 85%);--sl-color-text: var(--sl-color-gray-2);--sl-color-text-accent: var(--sl-color-accent-high);--sl-color-text-invert: var(--sl-color-accent-low);--sl-color-bg: var(--sl-color-black);--sl-color-bg-nav: var(--sl-color-gray-6);--sl-color-bg-sidebar: var(--sl-color-gray-6);--sl-color-bg-inline-code: var(--sl-color-gray-5);--sl-color-bg-accent: var(--sl-color-accent-high);--sl-color-hairline-light: var(--sl-color-gray-5);--sl-color-hairline: var(--sl-color-gray-6);--sl-color-hairline-shade: var(--sl-color-black);--sl-color-backdrop-overlay: hsla(223, 13%, 10%, .66);--sl-shadow-sm: 0px 1px 1px hsla(0, 0%, 0%, .12), 0px 2px 1px hsla(0, 0%, 0%, .24);--sl-shadow-md: 0px 8px 4px hsla(0, 0%, 0%, .08), 0px 5px 2px hsla(0, 0%, 0%, .08), 0px 3px 2px hsla(0, 0%, 0%, .12), 0px 1px 1px hsla(0, 0%, 0%, .15);--sl-shadow-lg: 0px 25px 7px hsla(0, 0%, 0%, .03), 0px 16px 6px hsla(0, 0%, 0%, .1), 0px 9px 5px hsla(223, 13%, 10%, .33), 0px 4px 4px hsla(0, 0%, 0%, .75), 0px 4px 2px hsla(0, 0%, 0%, .25);--sl-text-2xs: .75rem;--sl-text-xs: .8125rem;--sl-text-sm: .875rem;--sl-text-base: 1rem;--sl-text-lg: 1.125rem;--sl-text-xl: 1.25rem;--sl-text-2xl: 1.5rem;--sl-text-3xl: 1.8125rem;--sl-text-4xl: 2.1875rem;--sl-text-5xl: 2.625rem;--sl-text-6xl: 4rem;--sl-text-body: var(--sl-text-base);--sl-text-body-sm: var(--sl-text-xs);--sl-text-code: var(--sl-text-sm);--sl-text-code-sm: var(--sl-text-xs);--sl-text-h1: var(--sl-text-4xl);--sl-text-h2: var(--sl-text-3xl);--sl-text-h3: var(--sl-text-2xl);--sl-text-h4: var(--sl-text-xl);--sl-text-h5: var(--sl-text-lg);--sl-line-height: 1.75;--sl-line-height-headings: 1.2;--sl-font-system: ui-sans-serif, system-ui, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--sl-font-system-mono: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--__sl-font: var(--sl-font, var(--sl-font-system)), var(--sl-font-system);--__sl-font-mono: var(--sl-font-mono, var(--sl-font-system-mono)), var(--sl-font-system-mono);--sl-nav-height: 3.5rem;--sl-nav-pad-x: 1rem;--sl-nav-pad-y: .75rem;--sl-mobile-toc-height: 3rem;--sl-sidebar-width: 18.75rem;--sl-sidebar-pad-x: 1rem;--sl-content-width: 45rem;--sl-content-pad-x: 1rem;--sl-content-gap-y: 1rem;--sl-main-pad: 0 0 3vh 0;--sl-menu-button-size: 2rem;--sl-nav-gap: var(--sl-content-pad-x);--sl-outline-offset-inside: -.1875rem;--sl-z-index-toc: 4;--sl-z-index-menu: 5;--sl-z-index-navbar: 10;--sl-z-index-skiplink: 20}:root[data-theme=light],[data-theme=light] ::backdrop{--sl-color-white: hsl(224, 10%, 10%);--sl-color-gray-1: hsl(224, 14%, 16%);--sl-color-gray-2: hsl(224, 10%, 23%);--sl-color-gray-3: hsl(224, 7%, 36%);--sl-color-gray-4: hsl(224, 6%, 56%);--sl-color-gray-5: hsl(224, 6%, 77%);--sl-color-gray-6: hsl(224, 20%, 94%);--sl-color-gray-7: hsl(224, 19%, 97%);--sl-color-black: hsl(0, 0%, 100%);--sl-color-orange-high: hsl(var(--sl-hue-orange), 80%, 25%);--sl-color-orange: hsl(var(--sl-hue-orange), 90%, 60%);--sl-color-orange-low: hsl(var(--sl-hue-orange), 90%, 88%);--sl-color-green-high: hsl(var(--sl-hue-green), 80%, 22%);--sl-color-green: hsl(var(--sl-hue-green), 90%, 46%);--sl-color-green-low: hsl(var(--sl-hue-green), 85%, 90%);--sl-color-blue-high: hsl(var(--sl-hue-blue), 80%, 30%);--sl-color-blue: hsl(var(--sl-hue-blue), 90%, 60%);--sl-color-blue-low: hsl(var(--sl-hue-blue), 88%, 90%);--sl-color-purple-high: hsl(var(--sl-hue-purple), 90%, 30%);--sl-color-purple: hsl(var(--sl-hue-purple), 90%, 60%);--sl-color-purple-low: hsl(var(--sl-hue-purple), 80%, 90%);--sl-color-red-high: hsl(var(--sl-hue-red), 80%, 30%);--sl-color-red: hsl(var(--sl-hue-red), 90%, 60%);--sl-color-red-low: hsl(var(--sl-hue-red), 80%, 90%);--sl-color-accent-high: hsl(234, 80%, 30%);--sl-color-accent: hsl(234, 90%, 60%);--sl-color-accent-low: hsl(234, 88%, 90%);--sl-color-text-accent: var(--sl-color-accent);--sl-color-text-invert: var(--sl-color-black);--sl-color-bg-nav: var(--sl-color-gray-7);--sl-color-bg-sidebar: var(--sl-color-bg);--sl-color-bg-inline-code: var(--sl-color-gray-6);--sl-color-bg-accent: var(--sl-color-accent);--sl-color-hairline-light: var(--sl-color-gray-6);--sl-color-hairline-shade: var(--sl-color-gray-6);--sl-color-backdrop-overlay: hsla(225, 9%, 36%, .66);--sl-shadow-sm: 0px 1px 1px hsla(0, 0%, 0%, .06), 0px 2px 1px hsla(0, 0%, 0%, .06);--sl-shadow-md: 0px 8px 4px hsla(0, 0%, 0%, .03), 0px 5px 2px hsla(0, 0%, 0%, .03), 0px 3px 2px hsla(0, 0%, 0%, .06), 0px 1px 1px hsla(0, 0%, 0%, .06);--sl-shadow-lg: 0px 25px 7px rgba(0, 0, 0, .01), 0px 16px 6px hsla(0, 0%, 0%, .03), 0px 9px 5px hsla(223, 13%, 10%, .08), 0px 4px 4px hsla(0, 0%, 0%, .16), 0px 4px 2px hsla(0, 0%, 0%, .04)}@media(min-width:50em){:root{--sl-nav-height: 4rem;--sl-nav-pad-x: 1.5rem;--sl-text-h1: var(--sl-text-5xl);--sl-text-h2: var(--sl-text-4xl);--sl-text-h3: var(--sl-text-3xl);--sl-text-h4: var(--sl-text-2xl)}}@media(min-width:72rem){:root{--sl-content-pad-x: 1.5rem;--sl-mobile-toc-height: 0rem}}}@layer starlight.reset{*,*:before,*:after{box-sizing:border-box}*{margin:0}html{color-scheme:dark;accent-color:var(--sl-color-accent)}html[data-theme=light]{color-scheme:light}body{font-family:var(--__sl-font);line-height:var(--sl-line-height);-webkit-font-smoothing:antialiased;color:var(--sl-color-text);background-color:var(--sl-color-bg)}input,button,textarea,select{font:inherit}p,h1,h2,h3,h4,h5,h6,code{overflow-wrap:break-word}code{font-family:var(--__sl-font-mono)}}@layer starlight.components{.starlight-aside{padding:1rem;border-inline-start:.25rem solid var(--sl-color-asides-border);color:var(--sl-color-white)}.starlight-aside--note{--sl-color-asides-text-accent: var(--sl-color-blue-high);--sl-color-asides-border: var(--sl-color-blue);background-color:var(--sl-color-blue-low)}.starlight-aside--tip{--sl-color-asides-text-accent: var(--sl-color-purple-high);--sl-color-asides-border: var(--sl-color-purple);background-color:var(--sl-color-purple-low)}.starlight-aside--caution{--sl-color-asides-text-accent: var(--sl-color-orange-high);--sl-color-asides-border: var(--sl-color-orange);background-color:var(--sl-color-orange-low)}.starlight-aside--danger{--sl-color-asides-text-accent: var(--sl-color-red-high);--sl-color-asides-border: var(--sl-color-red);background-color:var(--sl-color-red-low)}.starlight-aside__title{display:flex;gap:.5rem;align-items:center;font-size:var(--sl-text-h5);font-weight:600;line-height:var(--sl-line-height-headings);color:var(--sl-color-asides-text-accent)}.starlight-aside__icon{font-size:1.333em;width:1em;height:1em}.starlight-aside__title+.starlight-aside__content{margin-top:.5rem}.starlight-aside__content a{color:var(--sl-color-asides-text-accent)}}@layer starlight.utils{.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border-width:0}.sl-hidden{display:none}.sl-flex{display:flex}.sl-block{display:block}@media(min-width:50rem){.md\:sl-hidden{display:none}.md\:sl-flex{display:flex}.md\:sl-block{display:block}}@media(min-width:72rem){.lg\:sl-hidden{display:none}.lg\:sl-flex{display:flex}.lg\:sl-block{display:block}}[data-theme=light] .light\:sl-hidden,[data-theme=dark] .dark\:sl-hidden{display:none}[dir=rtl] .rtl\:flip:not(:where([dir=rtl] [dir=ltr] *)){transform:scaleX(-1)}}@layer starlight.content{.sl-markdown-content .sl-heading-wrapper{--sl-anchor-icon-size: .8275em;--sl-anchor-icon-gap: .25em;--sl-anchor-icon-space: calc(var(--sl-anchor-icon-size) + var(--sl-anchor-icon-gap));line-height:var(--sl-line-height-headings)}.sl-markdown-content :not(h1,h2,h3,h4,h5,h6,.sl-heading-wrapper)+:is(.sl-heading-wrapper){margin-top:1.5em}.sl-markdown-content .sl-heading-wrapper.level-h1{font-size:var(--sl-text-h1)}.sl-markdown-content .sl-heading-wrapper.level-h2{font-size:var(--sl-text-h2)}.sl-markdown-content .sl-heading-wrapper.level-h3{font-size:var(--sl-text-h3)}.sl-markdown-content .sl-heading-wrapper.level-h4{font-size:var(--sl-text-h4)}.sl-markdown-content .sl-heading-wrapper.level-h5{font-size:var(--sl-text-h5)}.sl-markdown-content .sl-heading-wrapper.level-h6{font-size:var(--sl-text-h6)}.sl-markdown-content .sl-heading-wrapper>:first-child{display:inline;padding-inline-end:var(--sl-anchor-icon-space)}.sl-markdown-content .sl-anchor-link{position:relative;margin-inline-start:calc(-1 * var(--sl-anchor-icon-size));-webkit-user-select:none;user-select:none;display:inline-flex}.sl-markdown-content .sl-anchor-link:after{content:"";position:absolute;inset:-.25rem -.5rem}.sl-markdown-content .sl-anchor-icon>svg{display:inline;width:var(--sl-anchor-icon-size);vertical-align:top;transform:translateY(calc((var(--sl-line-height-headings) * 1em - var(--sl-anchor-icon-size)) / 2))}@media(hover:hover){.sl-markdown-content .sl-anchor-link{opacity:0}.sl-markdown-content .sl-anchor-link:focus,.sl-markdown-content .sl-heading-wrapper:hover .sl-anchor-link{opacity:1}}}@layer starlight.core{.sl-banner:where(.astro-u6unj3ew){--__sl-banner-text: var(--sl-color-banner-text, var(--sl-color-text-invert));padding:var(--sl-nav-pad-y) var(--sl-nav-pad-x);background-color:var(--sl-color-banner-bg, var(--sl-color-bg-accent));color:var(--__sl-banner-text);line-height:var(--sl-line-height-headings);text-align:center;text-wrap:balance;box-shadow:var(--sl-shadow-sm)}.sl-banner:where(.astro-u6unj3ew) a{color:var(--__sl-banner-text)}}@layer starlight.core{.content-panel:where(.astro-6sjbqs6w){padding:1.5rem var(--sl-content-pad-x)}.content-panel:where(.astro-6sjbqs6w)+.content-panel:where(.astro-6sjbqs6w){border-top:1px solid var(--sl-color-hairline)}.sl-container:where(.astro-6sjbqs6w){max-width:var(--sl-content-width)}.sl-container:where(.astro-6sjbqs6w)>*+*{margin-top:1.5rem}@media(min-width:72rem){.sl-container:where(.astro-6sjbqs6w){margin-inline:var(--sl-content-margin-inline, auto)}}}@layer starlight.core{p:where(.astro-esar2rij){border:1px solid var(--sl-color-orange);padding:.75em 1em;background-color:var(--sl-color-orange-low);color:var(--sl-color-orange-high);width:max-content;max-width:100%;align-items:center;gap:.75em;font-size:var(--sl-text-body-sm);line-height:var(--sl-line-height-headings)}}@layer starlight.core{a:where(.astro-fpqcvnof){gap:.5rem;align-items:center;text-decoration:none;color:var(--sl-color-gray-3)}a:where(.astro-fpqcvnof):hover{color:var(--sl-color-white)}}@layer starlight.core{.pagination-links:where(.astro-ydbi245g){display:grid;grid-template-columns:repeat(auto-fit,minmax(min(18rem,100%),1fr));gap:1rem}a:where(.astro-ydbi245g){display:flex;align-items:center;justify-content:flex-start;gap:.5rem;width:100%;flex-basis:calc(50% - .5rem);flex-grow:1;border:1px solid var(--sl-color-gray-5);border-radius:.5rem;padding:1rem;text-decoration:none;color:var(--sl-color-gray-2);box-shadow:var(--sl-shadow-md);overflow-wrap:anywhere}:where(.astro-ydbi245g)[rel=next]{justify-content:end;text-align:end;flex-direction:row-reverse}a:where(.astro-ydbi245g):hover{border-color:var(--sl-color-gray-2)}.link-title:where(.astro-ydbi245g){color:var(--sl-color-white);font-size:var(--sl-text-2xl);line-height:var(--sl-line-height-headings)}svg:where(.astro-ydbi245g){flex-shrink:0}}@layer starlight.core{footer:where(.astro-zhirzfhv){flex-direction:column;gap:1.5rem}.meta:where(.astro-zhirzfhv){gap:.75rem 3rem;justify-content:space-between;flex-wrap:wrap;margin-top:3rem;font-size:var(--sl-text-sm);color:var(--sl-color-gray-3)}.meta:where(.astro-zhirzfhv)>p:only-child{margin-inline-start:auto}.kudos:where(.astro-zhirzfhv){align-items:center;gap:.5em;margin:1.5rem auto;font-size:var(--sl-text-xs);text-decoration:none;color:var(--sl-color-gray-3)}.kudos:where(.astro-zhirzfhv):hover{color:var(--sl-color-white)}}@layer starlight.components{.kudos:where(.astro-zhirzfhv) svg{color:var(--sl-color-orange)}}@layer starlight.core{label:where(.astro-454sspmo){--sl-label-icon-size: .875rem;--sl-caret-size: 1.25rem;--sl-inline-padding: .5rem;position:relative;display:flex;align-items:center;gap:.25rem;color:var(--sl-color-gray-1)}label:where(.astro-454sspmo):hover{color:var(--sl-color-gray-2)}.icon:where(.astro-454sspmo){position:absolute;top:50%;transform:translateY(-50%);pointer-events:none}select:where(.astro-454sspmo){border:0;padding-block:.625rem;padding-inline:calc(var(--sl-label-icon-size) + var(--sl-inline-padding) + .25rem) calc(var(--sl-caret-size) + var(--sl-inline-padding) + .25rem);margin-inline:calc(var(--sl-inline-padding) * -1);width:calc(var(--sl-select-width) + var(--sl-inline-padding) * 2);background-color:transparent;text-overflow:ellipsis;color:inherit;cursor:pointer;appearance:none}option:where(.astro-454sspmo){background-color:var(--sl-color-bg-nav);color:var(--sl-color-gray-1)}@media(min-width:50rem){select:where(.astro-454sspmo){font-size:var(--sl-text-sm)}}}@layer starlight.components{.label-icon:where(.astro-454sspmo){font-size:var(--sl-label-icon-size);inset-inline-start:0}.caret:where(.astro-454sspmo){font-size:var(--sl-caret-size);inset-inline-end:0}}@layer starlight.core{.pagefind-ui__result.svelte-j9e30.svelte-j9e30{list-style-type:none;display:flex;align-items:flex-start;gap:min(calc(40px * var(--pagefind-ui-scale)),3%);padding:calc(30px * var(--pagefind-ui-scale)) 0 calc(40px * var(--pagefind-ui-scale));border-top:solid var(--pagefind-ui-border-width) var(--pagefind-ui-border)}.pagefind-ui__result.svelte-j9e30.svelte-j9e30:last-of-type{border-bottom:solid var(--pagefind-ui-border-width) var(--pagefind-ui-border)}.pagefind-ui__result-thumb.svelte-j9e30.svelte-j9e30{width:min(30%,calc((30% - (100px * var(--pagefind-ui-scale))) * 100000));max-width:calc(120px * var(--pagefind-ui-scale));margin-top:calc(10px * var(--pagefind-ui-scale));aspect-ratio:var(--pagefind-ui-image-box-ratio);position:relative}.pagefind-ui__result-image.svelte-j9e30.svelte-j9e30{display:block;position:absolute;left:50%;transform:translate(-50%);font-size:0;width:auto;height:auto;max-width:100%;max-height:100%;border-radius:var(--pagefind-ui-image-border-radius)}.pagefind-ui__result-inner.svelte-j9e30.svelte-j9e30{flex:1;display:flex;flex-direction:column;align-items:flex-start;margin-top:calc(10px * var(--pagefind-ui-scale))}.pagefind-ui__result-title.svelte-j9e30.svelte-j9e30{display:inline-block;font-weight:700;font-size:calc(21px * var(--pagefind-ui-scale));margin-top:0;margin-bottom:0}.pagefind-ui__result-title.svelte-j9e30 .pagefind-ui__result-link.svelte-j9e30{color:var(--pagefind-ui-text);text-decoration:none}.pagefind-ui__result-title.svelte-j9e30 .pagefind-ui__result-link.svelte-j9e30:hover{text-decoration:underline}.pagefind-ui__result-excerpt.svelte-j9e30.svelte-j9e30{display:inline-block;font-weight:400;font-size:calc(16px * var(--pagefind-ui-scale));margin-top:calc(4px * var(--pagefind-ui-scale));margin-bottom:0;min-width:calc(250px * var(--pagefind-ui-scale))}.pagefind-ui__loading.svelte-j9e30.svelte-j9e30{color:var(--pagefind-ui-text);background-color:var(--pagefind-ui-text);border-radius:var(--pagefind-ui-border-radius);opacity:.1;pointer-events:none}.pagefind-ui__result-tags.svelte-j9e30.svelte-j9e30{list-style-type:none;padding:0;display:flex;gap:calc(20px * var(--pagefind-ui-scale));flex-wrap:wrap;margin-top:calc(20px * var(--pagefind-ui-scale))}.pagefind-ui__result-tag.svelte-j9e30.svelte-j9e30{padding:calc(4px * var(--pagefind-ui-scale)) calc(8px * var(--pagefind-ui-scale));font-size:calc(14px * var(--pagefind-ui-scale));border-radius:var(--pagefind-ui-border-radius);background-color:var(--pagefind-ui-tag)}.pagefind-ui__result.svelte-4xnkmf.svelte-4xnkmf{list-style-type:none;display:flex;align-items:flex-start;gap:min(calc(40px * var(--pagefind-ui-scale)),3%);padding:calc(30px * var(--pagefind-ui-scale)) 0 calc(40px * var(--pagefind-ui-scale));border-top:solid var(--pagefind-ui-border-width) var(--pagefind-ui-border)}.pagefind-ui__result.svelte-4xnkmf.svelte-4xnkmf:last-of-type{border-bottom:solid var(--pagefind-ui-border-width) var(--pagefind-ui-border)}.pagefind-ui__result-nested.svelte-4xnkmf.svelte-4xnkmf{display:flex;flex-direction:column;padding-left:calc(20px * var(--pagefind-ui-scale))}.pagefind-ui__result-nested.svelte-4xnkmf.svelte-4xnkmf:first-of-type{padding-top:calc(10px * var(--pagefind-ui-scale))}.pagefind-ui__result-nested.svelte-4xnkmf .pagefind-ui__result-link.svelte-4xnkmf{font-size:.9em;position:relative}.pagefind-ui__result-nested.svelte-4xnkmf .pagefind-ui__result-link.svelte-4xnkmf:before{content:"⤷ ";position:absolute;top:0;right:calc(100% + .1em)}.pagefind-ui__result-thumb.svelte-4xnkmf.svelte-4xnkmf{width:min(30%,calc((30% - (100px * var(--pagefind-ui-scale))) * 100000));max-width:calc(120px * var(--pagefind-ui-scale));margin-top:calc(10px * var(--pagefind-ui-scale));aspect-ratio:var(--pagefind-ui-image-box-ratio);position:relative}.pagefind-ui__result-image.svelte-4xnkmf.svelte-4xnkmf{display:block;position:absolute;left:50%;transform:translate(-50%);font-size:0;width:auto;height:auto;max-width:100%;max-height:100%;border-radius:var(--pagefind-ui-image-border-radius)}.pagefind-ui__result-inner.svelte-4xnkmf.svelte-4xnkmf{flex:1;display:flex;flex-direction:column;align-items:flex-start;margin-top:calc(10px * var(--pagefind-ui-scale))}.pagefind-ui__result-title.svelte-4xnkmf.svelte-4xnkmf{display:inline-block;font-weight:700;font-size:calc(21px * var(--pagefind-ui-scale));margin-top:0;margin-bottom:0}.pagefind-ui__result-title.svelte-4xnkmf .pagefind-ui__result-link.svelte-4xnkmf{color:var(--pagefind-ui-text);text-decoration:none}.pagefind-ui__result-title.svelte-4xnkmf .pagefind-ui__result-link.svelte-4xnkmf:hover{text-decoration:underline}.pagefind-ui__result-excerpt.svelte-4xnkmf.svelte-4xnkmf{display:inline-block;font-weight:400;font-size:calc(16px * var(--pagefind-ui-scale));margin-top:calc(4px * var(--pagefind-ui-scale));margin-bottom:0;min-width:calc(250px * var(--pagefind-ui-scale))}.pagefind-ui__loading.svelte-4xnkmf.svelte-4xnkmf{color:var(--pagefind-ui-text);background-color:var(--pagefind-ui-text);border-radius:var(--pagefind-ui-border-radius);opacity:.1;pointer-events:none}.pagefind-ui__result-tags.svelte-4xnkmf.svelte-4xnkmf{list-style-type:none;padding:0;display:flex;gap:calc(20px * var(--pagefind-ui-scale));flex-wrap:wrap;margin-top:calc(20px * var(--pagefind-ui-scale))}.pagefind-ui__result-tag.svelte-4xnkmf.svelte-4xnkmf{padding:calc(4px * var(--pagefind-ui-scale)) calc(8px * var(--pagefind-ui-scale));font-size:calc(14px * var(--pagefind-ui-scale));border-radius:var(--pagefind-ui-border-radius);background-color:var(--pagefind-ui-tag)}legend.svelte-1v2r7ls.svelte-1v2r7ls{position:absolute;clip:rect(0 0 0 0)}.pagefind-ui__filter-panel.svelte-1v2r7ls.svelte-1v2r7ls{min-width:min(calc(260px * var(--pagefind-ui-scale)),100%);flex:1;display:flex;flex-direction:column;margin-top:calc(20px * var(--pagefind-ui-scale))}.pagefind-ui__filter-group.svelte-1v2r7ls.svelte-1v2r7ls{border:0;padding:0}.pagefind-ui__filter-block.svelte-1v2r7ls.svelte-1v2r7ls{padding:0;display:block;border-bottom:solid calc(2px * var(--pagefind-ui-scale)) var(--pagefind-ui-border);padding:calc(20px * var(--pagefind-ui-scale)) 0}.pagefind-ui__filter-name.svelte-1v2r7ls.svelte-1v2r7ls{font-size:calc(16px * var(--pagefind-ui-scale));position:relative;display:flex;align-items:center;list-style:none;font-weight:700;cursor:pointer;height:calc(24px * var(--pagefind-ui-scale))}.pagefind-ui__filter-name.svelte-1v2r7ls.svelte-1v2r7ls::-webkit-details-marker{display:none}.pagefind-ui__filter-name.svelte-1v2r7ls.svelte-1v2r7ls:after{position:absolute;content:"";right:calc(6px * var(--pagefind-ui-scale));top:50%;width:calc(8px * var(--pagefind-ui-scale));height:calc(8px * var(--pagefind-ui-scale));border:solid calc(2px * var(--pagefind-ui-scale)) currentColor;border-right:0;border-top:0;transform:translateY(-70%) rotate(-45deg)}.pagefind-ui__filter-block[open].svelte-1v2r7ls .pagefind-ui__filter-name.svelte-1v2r7ls:after{transform:translateY(-70%) rotate(-225deg)}.pagefind-ui__filter-group.svelte-1v2r7ls.svelte-1v2r7ls{display:flex;flex-direction:column;gap:calc(20px * var(--pagefind-ui-scale));padding-top:calc(30px * var(--pagefind-ui-scale))}.pagefind-ui__filter-value.svelte-1v2r7ls.svelte-1v2r7ls{position:relative;display:flex;align-items:center;gap:calc(8px * var(--pagefind-ui-scale))}.pagefind-ui__filter-value.svelte-1v2r7ls.svelte-1v2r7ls:before{position:absolute;content:"";top:50%;left:calc(8px * var(--pagefind-ui-scale));width:0px;height:0px;border:solid 1px #fff;opacity:0;transform:translate(calc(4.5px * var(--pagefind-ui-scale) * -1),calc(.8px * var(--pagefind-ui-scale))) skew(-5deg) rotate(-45deg);transform-origin:top left;border-top:0;border-right:0;pointer-events:none}.pagefind-ui__filter-value.pagefind-ui__filter-value--checked.svelte-1v2r7ls.svelte-1v2r7ls:before{opacity:1;width:calc(9px * var(--pagefind-ui-scale));height:calc(4px * var(--pagefind-ui-scale));transition:width .1s ease-out .1s,height .1s ease-in}.pagefind-ui__filter-checkbox.svelte-1v2r7ls.svelte-1v2r7ls{margin:0;width:calc(16px * var(--pagefind-ui-scale));height:calc(16px * var(--pagefind-ui-scale));border:solid 1px var(--pagefind-ui-border);appearance:none;-webkit-appearance:none;border-radius:calc(var(--pagefind-ui-border-radius) / 2);background-color:var(--pagefind-ui-background);cursor:pointer}.pagefind-ui__filter-checkbox.svelte-1v2r7ls.svelte-1v2r7ls:checked{background-color:var(--pagefind-ui-primary);border:solid 1px var(--pagefind-ui-primary)}.pagefind-ui__filter-label.svelte-1v2r7ls.svelte-1v2r7ls{cursor:pointer;font-size:calc(16px * var(--pagefind-ui-scale));font-weight:400}.pagefind-ui--reset *:where(:not(html,iframe,canvas,img,svg,video):not(svg *,symbol *)){all:unset;display:revert;outline:revert}.pagefind-ui--reset *,.pagefind-ui--reset *:before,.pagefind-ui--reset *:after{box-sizing:border-box}.pagefind-ui--reset a,.pagefind-ui--reset button{cursor:revert}.pagefind-ui--reset ol,.pagefind-ui--reset ul,.pagefind-ui--reset menu{list-style:none}.pagefind-ui--reset img{max-width:100%}.pagefind-ui--reset table{border-collapse:collapse}.pagefind-ui--reset input,.pagefind-ui--reset textarea{-webkit-user-select:auto}.pagefind-ui--reset textarea{white-space:revert}.pagefind-ui--reset meter{-webkit-appearance:revert;appearance:revert}.pagefind-ui--reset ::placeholder{color:unset}.pagefind-ui--reset :where([hidden]){display:none}.pagefind-ui--reset :where([contenteditable]:not([contenteditable=false])){-moz-user-modify:read-write;-webkit-user-modify:read-write;overflow-wrap:break-word;-webkit-line-break:after-white-space;-webkit-user-select:auto}.pagefind-ui--reset :where([draggable=true]){-webkit-user-drag:element}.pagefind-ui--reset mark{all:revert}:root{--pagefind-ui-scale:.8;--pagefind-ui-primary:#393939;--pagefind-ui-text:#393939;--pagefind-ui-background:#ffffff;--pagefind-ui-border:#eeeeee;--pagefind-ui-tag:#eeeeee;--pagefind-ui-border-width:2px;--pagefind-ui-border-radius:8px;--pagefind-ui-image-border-radius:8px;--pagefind-ui-image-box-ratio:3 / 2;--pagefind-ui-font:system, -apple-system, "BlinkMacSystemFont", ".SFNSText-Regular", "San Francisco", "Roboto", "Segoe UI", "Helvetica Neue", "Lucida Grande", "Ubuntu", "arial", sans-serif}.pagefind-ui.svelte-e9gkc3{width:100%;color:var(--pagefind-ui-text);font-family:var(--pagefind-ui-font)}.pagefind-ui__hidden.svelte-e9gkc3{display:none!important}.pagefind-ui__suppressed.svelte-e9gkc3{opacity:0;pointer-events:none}.pagefind-ui__form.svelte-e9gkc3{position:relative}.pagefind-ui__form.svelte-e9gkc3:before{background-color:var(--pagefind-ui-text);width:calc(18px * var(--pagefind-ui-scale));height:calc(18px * var(--pagefind-ui-scale));top:calc(23px * var(--pagefind-ui-scale));left:calc(20px * var(--pagefind-ui-scale));content:"";position:absolute;display:block;opacity:.7;-webkit-mask-image:url("data:image/svg+xml,%3Csvg width='18' height='18' viewBox='0 0 18 18' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M12.7549 11.255H11.9649L11.6849 10.985C12.6649 9.845 13.2549 8.365 13.2549 6.755C13.2549 3.165 10.3449 0.255005 6.75488 0.255005C3.16488 0.255005 0.254883 3.165 0.254883 6.755C0.254883 10.345 3.16488 13.255 6.75488 13.255C8.36488 13.255 9.84488 12.665 10.9849 11.685L11.2549 11.965V12.755L16.2549 17.745L17.7449 16.255L12.7549 11.255ZM6.75488 11.255C4.26488 11.255 2.25488 9.245 2.25488 6.755C2.25488 4.26501 4.26488 2.255 6.75488 2.255C9.24488 2.255 11.2549 4.26501 11.2549 6.755C11.2549 9.245 9.24488 11.255 6.75488 11.255Z' fill='%23000000'/%3E%3C/svg%3E%0A");mask-image:url("data:image/svg+xml,%3Csvg width='18' height='18' viewBox='0 0 18 18' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M12.7549 11.255H11.9649L11.6849 10.985C12.6649 9.845 13.2549 8.365 13.2549 6.755C13.2549 3.165 10.3449 0.255005 6.75488 0.255005C3.16488 0.255005 0.254883 3.165 0.254883 6.755C0.254883 10.345 3.16488 13.255 6.75488 13.255C8.36488 13.255 9.84488 12.665 10.9849 11.685L11.2549 11.965V12.755L16.2549 17.745L17.7449 16.255L12.7549 11.255ZM6.75488 11.255C4.26488 11.255 2.25488 9.245 2.25488 6.755C2.25488 4.26501 4.26488 2.255 6.75488 2.255C9.24488 2.255 11.2549 4.26501 11.2549 6.755C11.2549 9.245 9.24488 11.255 6.75488 11.255Z' fill='%23000000'/%3E%3C/svg%3E%0A");-webkit-mask-size:100%;mask-size:100%;z-index:9;pointer-events:none}.pagefind-ui__search-input.svelte-e9gkc3{height:calc(64px * var(--pagefind-ui-scale));padding:0 calc(70px * var(--pagefind-ui-scale)) 0 calc(54px * var(--pagefind-ui-scale));background-color:var(--pagefind-ui-background);border:var(--pagefind-ui-border-width) solid var(--pagefind-ui-border);border-radius:var(--pagefind-ui-border-radius);font-size:calc(21px * var(--pagefind-ui-scale));position:relative;appearance:none;-webkit-appearance:none;display:flex;width:100%;box-sizing:border-box;font-weight:700}.pagefind-ui__search-input.svelte-e9gkc3::placeholder{opacity:.2}.pagefind-ui__search-clear.svelte-e9gkc3{position:absolute;top:calc(3px * var(--pagefind-ui-scale));right:calc(3px * var(--pagefind-ui-scale));height:calc(58px * var(--pagefind-ui-scale));padding:0 calc(15px * var(--pagefind-ui-scale)) 0 calc(2px * var(--pagefind-ui-scale));color:var(--pagefind-ui-text);font-size:calc(14px * var(--pagefind-ui-scale));cursor:pointer;background-color:var(--pagefind-ui-background);border-radius:var(--pagefind-ui-border-radius)}.pagefind-ui__drawer.svelte-e9gkc3{gap:calc(60px * var(--pagefind-ui-scale));display:flex;flex-direction:row;flex-wrap:wrap}.pagefind-ui__results-area.svelte-e9gkc3{min-width:min(calc(400px * var(--pagefind-ui-scale)),100%);flex:1000;margin-top:calc(20px * var(--pagefind-ui-scale))}.pagefind-ui__results.svelte-e9gkc3{padding:0}.pagefind-ui__message.svelte-e9gkc3{box-sizing:content-box;font-size:calc(16px * var(--pagefind-ui-scale));height:calc(24px * var(--pagefind-ui-scale));padding:calc(20px * var(--pagefind-ui-scale)) 0;display:flex;align-items:center;font-weight:700;margin-top:0}.pagefind-ui__button.svelte-e9gkc3{margin-top:calc(40px * var(--pagefind-ui-scale));border:var(--pagefind-ui-border-width) solid var(--pagefind-ui-border);border-radius:var(--pagefind-ui-border-radius);height:calc(48px * var(--pagefind-ui-scale));padding:0 calc(12px * var(--pagefind-ui-scale));font-size:calc(16px * var(--pagefind-ui-scale));color:var(--pagefind-ui-primary);background:var(--pagefind-ui-background);width:100%;text-align:center;font-weight:700;cursor:pointer}.pagefind-ui__button.svelte-e9gkc3:hover{border-color:var(--pagefind-ui-primary);color:var(--pagefind-ui-primary);background:var(--pagefind-ui-background)}}@layer starlight.core{[data-search-modal-open]{overflow:hidden}#starlight__search{--sl-search-result-spacing: calc(1.25rem * var(--pagefind-ui-scale));--sl-search-result-pad-inline-start: calc(3.75rem * var(--pagefind-ui-scale));--sl-search-result-pad-inline-end: calc(1.25rem * var(--pagefind-ui-scale));--sl-search-result-pad-block: calc(.9375rem * var(--pagefind-ui-scale));--sl-search-result-nested-pad-block: calc(.625rem * var(--pagefind-ui-scale));--sl-search-corners: calc(.3125rem * var(--pagefind-ui-scale));--sl-search-page-icon-size: calc(1.875rem * var(--pagefind-ui-scale));--sl-search-page-icon-inline-start: calc( (var(--sl-search-result-pad-inline-start) - var(--sl-search-page-icon-size)) / 2 );--sl-search-tree-diagram-size: calc(2.5rem * var(--pagefind-ui-scale));--sl-search-tree-diagram-inline-start: calc( (var(--sl-search-result-pad-inline-start) - var(--sl-search-tree-diagram-size)) / 2 )}#starlight__search .pagefind-ui__form:before{--pagefind-ui-text: var(--sl-color-gray-1);opacity:1}#starlight__search .pagefind-ui__search-input{color:var(--sl-color-white);font-weight:400;width:calc(100% - var(--sl-search-cancel-space))}#starlight__search input:focus{--pagefind-ui-border: var(--sl-color-accent)}#starlight__search .pagefind-ui__search-clear{inset-inline-end:var(--sl-search-cancel-space);width:calc(60px * var(--pagefind-ui-scale));padding:0;background-color:transparent;overflow:hidden}#starlight__search .pagefind-ui__search-clear:focus{outline:1px solid var(--sl-color-accent)}#starlight__search .pagefind-ui__search-clear:before{content:"";-webkit-mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='m13.41 12 6.3-6.29a1 1 0 1 0-1.42-1.42L12 10.59l-6.29-6.3a1 1 0 0 0-1.42 1.42l6.3 6.29-6.3 6.29a1 1 0 0 0 .33 1.64 1 1 0 0 0 1.09-.22l6.29-6.3 6.29 6.3a1 1 0 0 0 1.64-.33 1 1 0 0 0-.22-1.09L13.41 12Z'/%3E%3C/svg%3E") center / 50% no-repeat;mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='m13.41 12 6.3-6.29a1 1 0 1 0-1.42-1.42L12 10.59l-6.29-6.3a1 1 0 0 0-1.42 1.42l6.3 6.29-6.3 6.29a1 1 0 0 0 .33 1.64 1 1 0 0 0 1.09-.22l6.29-6.3 6.29 6.3a1 1 0 0 0 1.64-.33 1 1 0 0 0-.22-1.09L13.41 12Z'/%3E%3C/svg%3E") center / 50% no-repeat;background-color:var(--sl-color-text-accent);display:block;width:100%;height:100%}#starlight__search .pagefind-ui__results>*+*{margin-top:var(--sl-search-result-spacing)}#starlight__search .pagefind-ui__result{border:0;padding:0}#starlight__search .pagefind-ui__result-nested{position:relative;padding:var(--sl-search-result-nested-pad-block) var(--sl-search-result-pad-inline-end);padding-inline-start:var(--sl-search-result-pad-inline-start)}#starlight__search .pagefind-ui__result-title:not(:where(.pagefind-ui__result-nested *)),#starlight__search .pagefind-ui__result-nested{position:relative;background-color:var(--sl-color-black)}#starlight__search .pagefind-ui__result-title:not(:where(.pagefind-ui__result-nested *)):hover,#starlight__search .pagefind-ui__result-title:not(:where(.pagefind-ui__result-nested *)):focus-within,#starlight__search .pagefind-ui__result-nested:hover,#starlight__search .pagefind-ui__result-nested:focus-within{outline:1px solid var(--sl-color-accent-high)}#starlight__search .pagefind-ui__result-title:not(:where(.pagefind-ui__result-nested *)):focus-within,#starlight__search .pagefind-ui__result-nested:focus-within{background-color:var(--sl-color-accent-low)}#starlight__search .pagefind-ui__result-thumb,#starlight__search .pagefind-ui__result-inner{margin-top:0}#starlight__search .pagefind-ui__result-inner>:first-child{border-radius:var(--sl-search-corners) var(--sl-search-corners) 0 0}#starlight__search .pagefind-ui__result-inner>:last-child{border-radius:0 0 var(--sl-search-corners) var(--sl-search-corners)}#starlight__search .pagefind-ui__result-inner>.pagefind-ui__result-title{padding:var(--sl-search-result-pad-block) var(--sl-search-result-pad-inline-end);padding-inline-start:var(--sl-search-result-pad-inline-start)}#starlight__search .pagefind-ui__result-inner>.pagefind-ui__result-title:before{content:"";position:absolute;inset-block:0;inset-inline-start:var(--sl-search-page-icon-inline-start);width:var(--sl-search-page-icon-size);background:var(--sl-color-gray-3);-webkit-mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='currentColor' viewBox='0 0 24 24'%3E%3Cpath d='M9 10h1a1 1 0 1 0 0-2H9a1 1 0 0 0 0 2Zm0 2a1 1 0 0 0 0 2h6a1 1 0 0 0 0-2H9Zm11-3V8l-6-6a1 1 0 0 0-1 0H7a3 3 0 0 0-3 3v14a3 3 0 0 0 3 3h10a3 3 0 0 0 3-3V9Zm-6-4 3 3h-2a1 1 0 0 1-1-1V5Zm4 14a1 1 0 0 1-1 1H7a1 1 0 0 1-1-1V5a1 1 0 0 1 1-1h5v3a3 3 0 0 0 3 3h3v9Zm-3-3H9a1 1 0 0 0 0 2h6a1 1 0 0 0 0-2Z'/%3E%3C/svg%3E") center no-repeat;mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='currentColor' viewBox='0 0 24 24'%3E%3Cpath d='M9 10h1a1 1 0 1 0 0-2H9a1 1 0 0 0 0 2Zm0 2a1 1 0 0 0 0 2h6a1 1 0 0 0 0-2H9Zm11-3V8l-6-6a1 1 0 0 0-1 0H7a3 3 0 0 0-3 3v14a3 3 0 0 0 3 3h10a3 3 0 0 0 3-3V9Zm-6-4 3 3h-2a1 1 0 0 1-1-1V5Zm4 14a1 1 0 0 1-1 1H7a1 1 0 0 1-1-1V5a1 1 0 0 1 1-1h5v3a3 3 0 0 0 3 3h3v9Zm-3-3H9a1 1 0 0 0 0 2h6a1 1 0 0 0 0-2Z'/%3E%3C/svg%3E") center no-repeat}#starlight__search .pagefind-ui__result-inner{align-items:stretch;gap:1px}#starlight__search .pagefind-ui__result-link{position:unset;--pagefind-ui-text: var(--sl-color-white);font-weight:600}#starlight__search .pagefind-ui__result-link:hover{text-decoration:none}#starlight__search .pagefind-ui__result-nested .pagefind-ui__result-link:before{content:unset}#starlight__search .pagefind-ui__result-nested:before{content:"";position:absolute;inset-block:0;inset-inline-start:var(--sl-search-tree-diagram-inline-start);width:var(--sl-search-tree-diagram-size);background:var(--sl-color-gray-4);-webkit-mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' stroke='currentColor' stroke-linecap='round' viewBox='0 0 16 1000' preserveAspectRatio='xMinYMin slice'%3E%3Cpath d='M8 0v1000m6-988H8'/%3E%3C/svg%3E") 0% 0% / 100% no-repeat;mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' stroke='currentColor' stroke-linecap='round' viewBox='0 0 16 1000' preserveAspectRatio='xMinYMin slice'%3E%3Cpath d='M8 0v1000m6-988H8'/%3E%3C/svg%3E") 0% 0% / 100% no-repeat}#starlight__search .pagefind-ui__result-nested:last-of-type:before{-webkit-mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' stroke='currentColor' stroke-linecap='round' stroke-linejoin='round' viewBox='0 0 16 16'%3E%3Cpath d='M8 0v12m6 0H8'/%3E%3C/svg%3E");mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' stroke='currentColor' stroke-linecap='round' stroke-linejoin='round' viewBox='0 0 16 16'%3E%3Cpath d='M8 0v12m6 0H8'/%3E%3C/svg%3E")}[dir=rtl] .pagefind-ui__result-title:before,[dir=rtl] .pagefind-ui__result-nested:before{transform:scaleX(-1)}#starlight__search .pagefind-ui__result-link:after{content:"";position:absolute;inset:0}#starlight__search .pagefind-ui__result-excerpt{font-size:calc(1rem * var(--pagefind-ui-scale));overflow-wrap:anywhere}#starlight__search mark{color:var(--sl-color-gray-2);background-color:transparent;font-weight:600}#starlight__search .pagefind-ui__filter-value:before{border-color:var(--sl-color-text-invert)}#starlight__search .pagefind-ui__result-tags{background-color:var(--sl-color-black);margin-top:0;padding:var(--sl-search-result-nested-pad-block) var(--sl-search-result-pad-inline-end)}}@layer starlight.core{site-search:where(.astro-rajy6ck4){display:contents}button:where(.astro-rajy6ck4)[data-open-modal]{display:flex;align-items:center;gap:.5rem;border:0;background-color:transparent;color:var(--sl-color-gray-1);cursor:pointer;height:2.5rem;font-size:var(--sl-text-xl)}@media(min-width:50rem){button:where(.astro-rajy6ck4)[data-open-modal]{border:1px solid var(--sl-color-gray-5);border-radius:.5rem;padding-inline-start:.75rem;padding-inline-end:.5rem;background-color:var(--sl-color-black);color:var(--sl-color-gray-2);font-size:var(--sl-text-sm);width:100%;max-width:22rem}button:where(.astro-rajy6ck4)[data-open-modal]:hover{border-color:var(--sl-color-gray-2);color:var(--sl-color-white)}button:where(.astro-rajy6ck4)[data-open-modal]>:where(.astro-rajy6ck4):last-child{margin-inline-start:auto}}button:where(.astro-rajy6ck4)>kbd:where(.astro-rajy6ck4){border-radius:.25rem;font-size:var(--sl-text-2xs);gap:.25em;padding-inline:.375rem;background-color:var(--sl-color-gray-6)}kbd:where(.astro-rajy6ck4){font-family:var(--__sl-font)}dialog:where(.astro-rajy6ck4){margin:0;background-color:var(--sl-color-gray-6);border:1px solid var(--sl-color-gray-5);width:100%;max-width:100%;height:100%;max-height:100%;box-shadow:var(--sl-shadow-lg)}dialog:where(.astro-rajy6ck4)[open]{display:flex}dialog:where(.astro-rajy6ck4)::backdrop{background-color:var(--sl-color-backdrop-overlay);-webkit-backdrop-filter:blur(.25rem);backdrop-filter:blur(.25rem)}.dialog-frame:where(.astro-rajy6ck4){position:relative;overflow:auto;flex-direction:column;flex-grow:1;gap:1rem;padding:1rem}button:where(.astro-rajy6ck4)[data-close-modal]{position:absolute;z-index:1;align-items:center;align-self:flex-end;height:calc(64px * var(--pagefind-ui-scale));padding:.25rem;border:0;background:transparent;cursor:pointer;color:var(--sl-color-text-accent)}#starlight__search:where(.astro-rajy6ck4){--pagefind-ui-primary: var(--sl-color-text);--pagefind-ui-text: var(--sl-color-gray-2);--pagefind-ui-font: var(--__sl-font);--pagefind-ui-background: var(--sl-color-black);--pagefind-ui-border: var(--sl-color-gray-5);--pagefind-ui-border-width: 1px;--pagefind-ui-tag: var(--sl-color-gray-5);--sl-search-cancel-space: 5rem}:root[data-theme=light] #starlight__search:where(.astro-rajy6ck4){--pagefind-ui-tag: var(--sl-color-gray-6)}@media(min-width:50rem){#starlight__search:where(.astro-rajy6ck4){--sl-search-cancel-space: 0px}dialog:where(.astro-rajy6ck4){margin:4rem auto auto;border-radius:.5rem;width:90%;max-width:40rem;height:max-content;min-height:15rem;max-height:calc(100% - 8rem)}.dialog-frame:where(.astro-rajy6ck4){padding:1.5rem}}}@layer starlight.core{.site-title:where(.astro-h6wl7yqc){align-items:center;gap:var(--sl-nav-gap);font-size:var(--sl-text-h4);font-weight:600;color:var(--sl-color-text-accent);text-decoration:none;white-space:nowrap;min-width:0}span:where(.astro-h6wl7yqc){overflow:hidden}img:where(.astro-h6wl7yqc){height:calc(var(--sl-nav-height) - 2 * var(--sl-nav-pad-y));width:auto;max-width:100%;object-fit:contain;object-position:0 50%}}@layer starlight.core{a:where(.astro-nhuv3l6n){color:var(--sl-color-text-accent);padding:.5em;margin:-.5em}a:where(.astro-nhuv3l6n):hover{opacity:.66}}@layer starlight.core{.header:where(.astro-tbpgveg7){display:flex;gap:var(--sl-nav-gap);justify-content:space-between;align-items:center;height:100%}.title-wrapper:where(.astro-tbpgveg7){overflow:clip;padding:.25rem;margin:-.25rem;min-width:0}.right-group:where(.astro-tbpgveg7),.social-icons:where(.astro-tbpgveg7){gap:1rem;align-items:center}.social-icons:where(.astro-tbpgveg7):after{content:"";height:2rem;border-inline-end:1px solid var(--sl-color-gray-5)}@media(min-width:50rem){:root[data-has-sidebar]{--__sidebar-pad: calc(2 * var(--sl-nav-pad-x))}:root:not([data-has-toc]){--__toc-width: 0rem}.header:where(.astro-tbpgveg7){--__sidebar-width: max(0rem, var(--sl-content-inline-start, 0rem) - var(--sl-nav-pad-x));--__main-column-fr: calc( ( 100% + var(--__sidebar-pad, 0rem) - var(--__toc-width, var(--sl-sidebar-width)) - (2 * var(--__toc-width, var(--sl-nav-pad-x))) - var(--sl-content-inline-start, 0rem) - var(--sl-content-width) ) / 2 );display:grid;grid-template-columns:minmax(calc(var(--__sidebar-width) + max(0rem,var(--__main-column-fr) - var(--sl-nav-gap))),auto) 1fr auto;align-content:center}}}@layer starlight.core{.hero:where(.astro-cz3yetvz){display:grid;align-items:center;gap:1rem;padding-bottom:1rem}.hero:where(.astro-cz3yetvz)>img:where(.astro-cz3yetvz),.hero:where(.astro-cz3yetvz)>.hero-html:where(.astro-cz3yetvz){object-fit:contain;width:min(70%,20rem);height:auto;margin-inline:auto}.stack:where(.astro-cz3yetvz){flex-direction:column;gap:clamp(1.5rem,calc(1.5rem + 1vw),2rem);text-align:center}.copy:where(.astro-cz3yetvz){flex-direction:column;gap:1rem;align-items:center}.copy:where(.astro-cz3yetvz)>:where(.astro-cz3yetvz){max-width:50ch}h1:where(.astro-cz3yetvz){font-size:clamp(var(--sl-text-3xl),calc(.25rem + 5vw),var(--sl-text-6xl));line-height:var(--sl-line-height-headings);font-weight:600;color:var(--sl-color-white)}.tagline:where(.astro-cz3yetvz){font-size:clamp(var(--sl-text-base),calc(.0625rem + 2vw),var(--sl-text-xl));color:var(--sl-color-gray-2)}.actions:where(.astro-cz3yetvz){gap:1rem 2rem;flex-wrap:wrap;justify-content:center}@media(min-width:50rem){.hero:where(.astro-cz3yetvz){grid-template-columns:7fr 4fr;gap:3%;padding-block:clamp(2.5rem,calc(1rem + 10vmin),10rem)}.hero:where(.astro-cz3yetvz)>img:where(.astro-cz3yetvz),.hero:where(.astro-cz3yetvz)>.hero-html:where(.astro-cz3yetvz){order:2;width:min(100%,25rem)}.stack:where(.astro-cz3yetvz){text-align:start}.copy:where(.astro-cz3yetvz){align-items:flex-start}.actions:where(.astro-cz3yetvz){justify-content:flex-start}}}@layer starlight.content{.sl-markdown-content :not(a,strong,em,del,span,input,code,br)+:not(a,strong,em,del,span,input,code,br,:where(.not-content *)){margin-top:var(--sl-content-gap-y)}.sl-markdown-content :not(a,strong,em,del,span,input,code,br)+:is(astro-island,astro-slot)>:not(a,strong,em,del,span,input,code,br,:where(.not-content *)):first-child{margin-top:var(--sl-content-gap-y)}.sl-markdown-content :not(h1,h2,h3,h4,h5,h6)+:is(h1,h2,h3,h4,h5,h6):not(:where(.not-content *)){margin-top:1.5em}.sl-markdown-content li+li:not(:where(.not-content *)),.sl-markdown-content dt+dt:not(:where(.not-content *)),.sl-markdown-content dt+dd:not(:where(.not-content *)),.sl-markdown-content dd+dd:not(:where(.not-content *)){margin-top:.25rem}.sl-markdown-content li:not(:where(.not-content *)){overflow-wrap:anywhere}.sl-markdown-content li>:is(:last-child:not(li,ul,ol,a,strong,em,del,span,input,code,br,script,:where(.not-content *)),:not(script):has(~script:last-child):not(:has(~:not(script)))){margin-bottom:1.25rem}.sl-markdown-content dt:not(:where(.not-content *)){font-weight:700}.sl-markdown-content dd:not(:where(.not-content *)){padding-inline-start:1rem}.sl-markdown-content :is(h1,h2,h3,h4,h5,h6):not(:where(.not-content *)){color:var(--sl-color-white);line-height:var(--sl-line-height-headings);font-weight:600}.sl-markdown-content :is(img,picture,video,canvas,svg,iframe):not(:where(.not-content *)){display:block;max-width:100%;height:auto}.sl-markdown-content h1:not(:where(.not-content *)){font-size:var(--sl-text-h1)}.sl-markdown-content h2:not(:where(.not-content *)){font-size:var(--sl-text-h2)}.sl-markdown-content h3:not(:where(.not-content *)){font-size:var(--sl-text-h3)}.sl-markdown-content h4:not(:where(.not-content *)){font-size:var(--sl-text-h4)}.sl-markdown-content h5:not(:where(.not-content *)){font-size:var(--sl-text-h5)}.sl-markdown-content h6:not(:where(.not-content *)){font-size:var(--sl-text-h6)}.sl-markdown-content a:not(:where(.not-content *)){color:var(--sl-color-text-accent)}.sl-markdown-content a:hover:not(:where(.not-content *)){color:var(--sl-color-white)}.sl-markdown-content code:not(:where(.not-content *)){background-color:var(--sl-color-bg-inline-code);margin-block:-.125rem;padding:.125rem .375rem;font-size:var(--sl-text-code-sm)}.sl-markdown-content :is(h1,h2,h3,h4,h5,h6) code{font-size:inherit}.sl-markdown-content pre:not(:where(.not-content *)){border:1px solid var(--sl-color-gray-5);padding:.75rem 1rem;font-size:var(--sl-text-code);tab-size:2}.sl-markdown-content pre code:not(:where(.not-content *)){all:unset;font-family:var(--__sl-font-mono)}.sl-markdown-content blockquote:not(:where(.not-content *)){border-inline-start:1px solid var(--sl-color-gray-5);padding-inline-start:1rem}.sl-markdown-content table:not(:where(.not-content *)){display:block;overflow:auto;border-spacing:0}.sl-markdown-content :is(th,td):not(:where(.not-content *)){border-bottom:1px solid var(--sl-color-gray-5);padding:.5rem 1rem;vertical-align:baseline}.sl-markdown-content :is(th:first-child,td:first-child):not(:where(.not-content *)){padding-inline-start:0}.sl-markdown-content :is(th:last-child,td:last-child):not(:where(.not-content *)){padding-inline-end:0}.sl-markdown-content th:not(:where(.not-content *)){color:var(--sl-color-white);font-weight:600}.sl-markdown-content th:not([align]):not(:where(.not-content *)){text-align:start}.sl-markdown-content .starlight-aside :is(th,td,hr,blockquote):not(:where(.not-content *)){border-color:var(--sl-color-gray-4)}@supports (border-color: color-mix(in srgb,var(--sl-color-asides-text-accent) 30%,transparent)){.sl-markdown-content .starlight-aside :is(th,td,hr,blockquote):not(:where(.not-content *)){border-color:color-mix(in srgb,var(--sl-color-asides-text-accent) 30%,transparent)}}@supports (border-color: color-mix(in srgb,var(--sl-color-asides-text-accent) 12%,transparent)){.sl-markdown-content .starlight-aside code:not(:where(.not-content *)){background-color:color-mix(in srgb,var(--sl-color-asides-text-accent) 12%,transparent)}}.sl-markdown-content hr:not(:where(.not-content *)){border:0;border-bottom:1px solid var(--sl-color-hairline)}.sl-markdown-content details:not(:where(.not-content *)){--sl-details-border-color: var(--sl-color-gray-5);--sl-details-border-color--hover: var(--sl-color-text-accent);border-inline-start:2px solid var(--sl-details-border-color);padding-inline-start:1rem}.sl-markdown-content details:not([open]):hover:not(:where(.not-content *)),.sl-markdown-content details:has(>summary:hover):not(:where(.not-content *)){border-color:var(--sl-details-border-color--hover)}.sl-markdown-content summary:not(:where(.not-content *)){color:var(--sl-color-white);cursor:pointer;display:block;font-weight:600;margin-inline-start:-.5rem;padding-inline-start:.5rem}.sl-markdown-content details[open]>summary:not(:where(.not-content *)){margin-bottom:1rem}.sl-markdown-content summary:not(:where(.not-content *))::marker,.sl-markdown-content summary:not(:where(.not-content *))::-webkit-details-marker{display:none}.sl-markdown-content summary:not(:where(.not-content *)):before{--sl-details-marker-size: 1.25rem;background-color:currentColor;content:"";display:inline-block;height:var(--sl-details-marker-size);width:var(--sl-details-marker-size);margin-inline:calc((var(--sl-details-marker-size) / 4) * -1) .25rem;vertical-align:middle;-webkit-mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='M14.8 11.3 10.6 7a1 1 0 1 0-1.4 1.5l3.5 3.5-3.5 3.5a1 1 0 0 0 0 1.4 1 1 0 0 0 .7.3 1 1 0 0 0 .7-.3l4.2-4.2a1 1 0 0 0 0-1.4Z'/%3E%3C/svg%3E%0A");mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='M14.8 11.3 10.6 7a1 1 0 1 0-1.4 1.5l3.5 3.5-3.5 3.5a1 1 0 0 0 0 1.4 1 1 0 0 0 .7.3 1 1 0 0 0 .7-.3l4.2-4.2a1 1 0 0 0 0-1.4Z'/%3E%3C/svg%3E%0A");-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat}@media(prefers-reduced-motion:no-preference){.sl-markdown-content summary:not(:where(.not-content *)):before{transition:transform .2s ease-in-out}}.sl-markdown-content details[open]>summary:not(:where(.not-content *)):before{transform:rotate(90deg)}[dir=rtl] .sl-markdown-content summary:not(:where(.not-content *)):before,.sl-markdown-content [dir=rtl] summary:not(:where(.not-content *)):before{transform:rotate(180deg)}.sl-markdown-content summary:not(:where(.not-content *)) p:only-child{display:inline}.sl-markdown-content .starlight-aside details:not(:where(.not-content *)){--sl-details-border-color: var(--sl-color-asides-border);--sl-details-border-color--hover: var(--sl-color-asides-text-accent)}}@layer starlight.core{[data-mobile-menu-expanded]{overflow:hidden}@media(min-width:50rem){[data-mobile-menu-expanded]{overflow:auto}}}@layer starlight.core{button:where(.astro-mcucnll3){position:fixed;top:calc((var(--sl-nav-height) - var(--sl-menu-button-size)) / 2);inset-inline-end:var(--sl-nav-pad-x);z-index:var(--sl-z-index-navbar);border:0;border-radius:50%;width:var(--sl-menu-button-size);height:var(--sl-menu-button-size);padding:.5rem;background-color:var(--sl-color-white);color:var(--sl-color-black);box-shadow:var(--sl-shadow-md);cursor:pointer}:where(.astro-mcucnll3)[aria-expanded=true] button:where(.astro-mcucnll3){background-color:var(--sl-color-gray-2);box-shadow:none}:where(.astro-mcucnll3)[aria-expanded=true] button:where(.astro-mcucnll3) .open-menu:where(.astro-mcucnll3){display:none}:where(.astro-mcucnll3):not([aria-expanded=true]) button:where(.astro-mcucnll3) .close-menu:where(.astro-mcucnll3){display:none}[data-theme=light] button:where(.astro-mcucnll3){background-color:var(--sl-color-black);color:var(--sl-color-white)}[data-theme=light] :where(.astro-mcucnll3)[aria-expanded=true] button:where(.astro-mcucnll3){background-color:var(--sl-color-gray-5)}}@layer starlight.core{.page:where(.astro-lali7uwj){flex-direction:column;min-height:100vh}.header:where(.astro-lali7uwj){z-index:var(--sl-z-index-navbar);position:fixed;inset-inline-start:0;inset-block-start:0;width:100%;height:var(--sl-nav-height);border-bottom:1px solid var(--sl-color-hairline-shade);padding:var(--sl-nav-pad-y) var(--sl-nav-pad-x);padding-inline-end:var(--sl-nav-pad-x);background-color:var(--sl-color-bg-nav)}[data-has-sidebar] .header:where(.astro-lali7uwj){padding-inline-end:calc(var(--sl-nav-gap) + var(--sl-nav-pad-x) + var(--sl-menu-button-size))}.sidebar-pane:where(.astro-lali7uwj){visibility:var(--sl-sidebar-visibility, hidden);position:fixed;z-index:var(--sl-z-index-menu);inset-block:var(--sl-nav-height) 0;inset-inline-start:0;width:100%;background-color:var(--sl-color-black);overflow-y:auto}[aria-expanded=true]~.sidebar-pane:where(.astro-lali7uwj){--sl-sidebar-visibility: visible}.sidebar-content:where(.astro-lali7uwj){height:100%;min-height:max-content;padding:1rem var(--sl-sidebar-pad-x) 0;flex-direction:column;gap:1rem}@media(min-width:50rem){.sidebar-content:where(.astro-lali7uwj):after{content:"";padding-bottom:1px}}.main-frame:where(.astro-lali7uwj){padding-top:calc(var(--sl-nav-height) + var(--sl-mobile-toc-height));padding-inline-start:var(--sl-content-inline-start)}@media(min-width:50rem){[data-has-sidebar] .header:where(.astro-lali7uwj){padding-inline-end:var(--sl-nav-pad-x)}.sidebar-pane:where(.astro-lali7uwj){--sl-sidebar-visibility: visible;width:var(--sl-sidebar-width);background-color:var(--sl-color-bg-sidebar);border-inline-end:1px solid var(--sl-color-hairline-shade)}}}@layer starlight.core{ul:where(.astro-7go6ctqh){padding:0;list-style:none}a:where(.astro-7go6ctqh){--pad-inline: .5rem;display:block;border-radius:.25rem;padding-block:.25rem;padding-inline:calc(1rem * var(--depth) + var(--pad-inline)) var(--pad-inline);line-height:1.25}a:where(.astro-7go6ctqh)[aria-current=true]{color:var(--sl-color-text-accent)}.isMobile:where(.astro-7go6ctqh) a:where(.astro-7go6ctqh){--pad-inline: 1rem;display:flex;justify-content:space-between;gap:var(--pad-inline);border-top:1px solid var(--sl-color-gray-6);border-radius:0;padding-block:.5rem;color:var(--sl-color-text);font-size:var(--sl-text-sm);text-decoration:none;outline-offset:var(--sl-outline-offset-inside)}.isMobile:where(.astro-7go6ctqh):first-child>li:where(.astro-7go6ctqh):first-child>a:where(.astro-7go6ctqh){border-top:0}.isMobile:where(.astro-7go6ctqh) a:where(.astro-7go6ctqh)[aria-current=true],.isMobile:where(.astro-7go6ctqh) a:where(.astro-7go6ctqh)[aria-current=true]:hover,.isMobile:where(.astro-7go6ctqh) a:where(.astro-7go6ctqh)[aria-current=true]:focus{color:var(--sl-color-white);background-color:unset}.isMobile:where(.astro-7go6ctqh) a:where(.astro-7go6ctqh)[aria-current=true]:after{content:"";width:1rem;background-color:var(--sl-color-text-accent);-webkit-mask-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0naHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmcnIHZpZXdCb3g9JzAgMCAxNCAxNCc+PHBhdGggZD0nTTEwLjkxNCA0LjIwNmEuNTgzLjU4MyAwIDAgMC0uODI4IDBMNS43NCA4LjU1NyAzLjkxNCA2LjcyNmEuNTk2LjU5NiAwIDAgMC0uODI4Ljg1N2wyLjI0IDIuMjRhLjU4My41ODMgMCAwIDAgLjgyOCAwbDQuNzYtNC43NmEuNTgzLjU4MyAwIDAgMCAwLS44NTdaJy8+PC9zdmc+Cg==);mask-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0naHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmcnIHZpZXdCb3g9JzAgMCAxNCAxNCc+PHBhdGggZD0nTTEwLjkxNCA0LjIwNmEuNTgzLjU4MyAwIDAgMC0uODI4IDBMNS43NCA4LjU1NyAzLjkxNCA2LjcyNmEuNTk2LjU5NiAwIDAgMC0uODI4Ljg1N2wyLjI0IDIuMjRhLjU4My41ODMgMCAwIDAgLjgyOCAwbDQuNzYtNC43NmEuNTgzLjU4MyAwIDAgMCAwLS44NTdaJy8+PC9zdmc+Cg==);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;flex-shrink:0}}@layer starlight.core{nav:where(.astro-jbmuff33){position:fixed;z-index:var(--sl-z-index-toc);top:calc(var(--sl-nav-height) - 1px);inset-inline:0;border-top:1px solid var(--sl-color-gray-5);background-color:var(--sl-color-bg-nav)}@media(min-width:50rem){nav:where(.astro-jbmuff33){inset-inline-start:var(--sl-content-inline-start, 0)}}summary:where(.astro-jbmuff33){gap:.5rem;align-items:center;height:var(--sl-mobile-toc-height);border-bottom:1px solid var(--sl-color-hairline-shade);padding:.5rem 1rem;font-size:var(--sl-text-xs);outline-offset:var(--sl-outline-offset-inside)}summary:where(.astro-jbmuff33)::marker,summary:where(.astro-jbmuff33)::-webkit-details-marker{display:none}.toggle:where(.astro-jbmuff33){flex-shrink:0;gap:1rem;align-items:center;justify-content:space-between;border:1px solid var(--sl-color-gray-5);border-radius:.5rem;padding-block:.5rem;padding-inline-start:.75rem;padding-inline-end:.5rem;line-height:1;background-color:var(--sl-color-black);user-select:none;cursor:pointer}details:where(.astro-jbmuff33)[open] .toggle:where(.astro-jbmuff33){color:var(--sl-color-white);border-color:var(--sl-color-accent)}details:where(.astro-jbmuff33) .toggle:where(.astro-jbmuff33):hover{color:var(--sl-color-white);border-color:var(--sl-color-gray-2)}[dir=rtl] .caret:where(.astro-jbmuff33){transform:rotate(180deg)}details:where(.astro-jbmuff33)[open] .caret:where(.astro-jbmuff33){transform:rotate(90deg)}.display-current:where(.astro-jbmuff33){white-space:nowrap;text-overflow:ellipsis;overflow:hidden;color:var(--sl-color-white)}.dropdown:where(.astro-jbmuff33){--border-top: 1px;margin-top:calc(-1 * var(--border-top));border:var(--border-top) solid var(--sl-color-gray-6);border-top-color:var(--sl-color-hairline-shade);max-height:calc(85vh - var(--sl-nav-height) - var(--sl-mobile-toc-height));overflow-y:auto;background-color:var(--sl-color-black);box-shadow:var(--sl-shadow-md);overscroll-behavior:contain}}@layer starlight.core{.right-sidebar-panel:where(.astro-th3hpmvy){padding:1rem var(--sl-sidebar-pad-x)}.sl-container:where(.astro-th3hpmvy){width:calc(var(--sl-sidebar-width) - 2 * var(--sl-sidebar-pad-x))}.right-sidebar-panel:where(.astro-th3hpmvy) h2{color:var(--sl-color-white);font-size:var(--sl-text-h5);font-weight:600;line-height:var(--sl-line-height-headings);margin-bottom:.5rem}.right-sidebar-panel:where(.astro-th3hpmvy) :where(a){display:block;font-size:var(--sl-text-xs);text-decoration:none;color:var(--sl-color-gray-3);overflow-wrap:anywhere}.right-sidebar-panel:where(.astro-th3hpmvy) :where(a):hover{color:var(--sl-color-white)}@media(min-width:72rem){.sl-container:where(.astro-th3hpmvy){max-width:calc(((100vw - var(--sl-sidebar-width) - 2 * var(--sl-content-pad-x) - 2 * var(--sl-sidebar-pad-x)) * .25))}}}@layer starlight.core{h1:where(.astro-hdf2p2uo){margin-top:1rem;font-size:var(--sl-text-h1);line-height:var(--sl-line-height-headings);font-weight:600;color:var(--sl-color-white)}}@layer starlight.core{.social-icons:where(.astro-64fw4t22){display:flex;margin-inline-end:auto;gap:1rem;align-items:center;padding-block:1rem}.social-icons:where(.astro-64fw4t22):empty{display:none}.mobile-preferences:where(.astro-64fw4t22){justify-content:space-between;flex-wrap:wrap;border-top:1px solid var(--sl-color-gray-6);column-gap:1rem;padding:.5rem 0}}@layer starlight.core{sl-sidebar-state-persist:where(.astro-ajgtkles){display:contents}}@layer starlight.core{ul:where(.astro-btgen76i){--sl-sidebar-item-padding-inline: .5rem;list-style:none;padding:0}li:where(.astro-btgen76i){overflow-wrap:anywhere}ul:where(.astro-btgen76i) ul:where(.astro-btgen76i) li:where(.astro-btgen76i){margin-inline-start:var(--sl-sidebar-item-padding-inline);border-inline-start:1px solid var(--sl-color-hairline-light);padding-inline-start:var(--sl-sidebar-item-padding-inline)}.large:where(.astro-btgen76i){font-size:var(--sl-text-lg);font-weight:600;color:var(--sl-color-white)}.top-level:where(.astro-btgen76i)>li:where(.astro-btgen76i)+li:where(.astro-btgen76i){margin-top:.75rem}summary:where(.astro-btgen76i){display:flex;align-items:center;justify-content:space-between;padding:.2em var(--sl-sidebar-item-padding-inline);line-height:1.4;cursor:pointer;user-select:none}summary:where(.astro-btgen76i)::marker,summary:where(.astro-btgen76i)::-webkit-details-marker{display:none}.caret:where(.astro-btgen76i){transition:transform .2s ease-in-out;flex-shrink:0}[dir=rtl] .caret:where(.astro-btgen76i){transform:rotate(180deg)}:where(.astro-btgen76i)[open]>summary:where(.astro-btgen76i) .caret:where(.astro-btgen76i){transform:rotate(90deg)}a:where(.astro-btgen76i){display:block;border-radius:.25rem;text-decoration:none;color:var(--sl-color-gray-2);padding:.3em var(--sl-sidebar-item-padding-inline);line-height:1.4}a:where(.astro-btgen76i):hover,a:where(.astro-btgen76i):focus{color:var(--sl-color-white)}:where(.astro-btgen76i)[aria-current=page],:where(.astro-btgen76i)[aria-current=page]:hover,:where(.astro-btgen76i)[aria-current=page]:focus{font-weight:600;color:var(--sl-color-text-invert);background-color:var(--sl-color-text-accent)}a:where(.astro-btgen76i)>:where(.astro-btgen76i):not(:last-child),.group-label:where(.astro-btgen76i)>:where(.astro-btgen76i):not(:last-child){margin-inline-end:.25em}@media(min-width:50rem){.top-level:where(.astro-btgen76i)>li:where(.astro-btgen76i)+li:where(.astro-btgen76i){margin-top:.5rem}.large:where(.astro-btgen76i){font-size:var(--sl-text-base)}a:where(.astro-btgen76i){font-size:var(--sl-text-sm)}}}@layer starlight.core{a:where(.astro-hw5omozx){clip:rect(0,0,0,0);position:fixed;top:.75rem;inset-inline-start:.75rem}a:where(.astro-hw5omozx):focus{clip:unset;z-index:var(--sl-z-index-skiplink);display:block;padding:.5rem 1rem;text-decoration:none;color:var(--sl-color-text-invert);background-color:var(--sl-color-text-accent);box-shadow:var(--sl-shadow-lg)}}@layer starlight.core{.main-pane:where(.astro-rjdbonso){isolation:isolate}@media(min-width:72rem){.right-sidebar-container:where(.astro-rjdbonso){order:2;position:relative;width:calc(var(--sl-sidebar-width) + (100% - var(--sl-content-width) - var(--sl-sidebar-width)) / 2)}.right-sidebar:where(.astro-rjdbonso){position:fixed;top:0;border-inline-start:1px solid var(--sl-color-hairline);padding-top:var(--sl-nav-height);width:100%;height:100vh;overflow-y:auto;scrollbar-width:none}.main-pane:where(.astro-rjdbonso){width:100%}[data-has-sidebar][data-has-toc] .main-pane:where(.astro-rjdbonso){--sl-content-margin-inline: auto 0;order:1;width:calc(var(--sl-content-width) + (100% - var(--sl-content-width) - var(--sl-sidebar-width)) / 2)}}}html:not([data-has-toc]){--sl-mobile-toc-height: 0rem}html:not([data-has-sidebar]){--sl-content-width: 67.5rem}html{scroll-padding-top:calc(1.5rem + var(--sl-nav-height) + var(--sl-mobile-toc-height))}main:where(.astro-st3ix2q2){padding:var(--sl-main-pad)}@media(min-width:50em){:where(.astro-st3ix2q2)[data-has-sidebar]{--sl-content-inline-start: var(--sl-sidebar-width)}}@media(min-width:72em){html{scroll-padding-top:calc(1.5rem + var(--sl-nav-height))}} diff --git a/_astro/index.z4HaydKp.css b/_astro/index.z4HaydKp.css deleted file mode 100644 index d84b7bef..00000000 --- a/_astro/index.z4HaydKp.css +++ /dev/null @@ -1 +0,0 @@ -:root{--sl-color-accent: rgb(49, 100, 49)}:root[data-theme=dark]{--sl-color-accent-high: #6ab549 !important}#nistheadergoeshere{position:fixed;top:0;left:0;right:0;z-index:1000;width:100%}#nistfootergoeshere{position:relative;z-index:0;margin-top:50px}.header{#position: fixed;top:40px;left:0;width:100%}.expressive-code .header{position:static!important;top:unset!important;left:unset!important;width:unset!important}.sidebar-content,.right-sidebar-content,.right-sidebar-panel{margin-top:45px}#starlight__on-this-page--mobile{margin-top:40px}body{margin-top:30px}body:has(.sl-banner){margin-top:40px}sl-anchor-link,.sl-heading-wrapper,.sl-heading-wrapper h1,.sl-heading-wrapper h2,.sl-heading-wrapper h3,.sl-heading-wrapper h4,.sl-heading-wrapper h5,.sl-heading-wrapper h6{scroll-margin-top:30px}@media(max-width:50rem){@layer starlight.core{starlight-menu-button>button{position:fixed;top:calc((var(--sl-nav-height) - var(--sl-menu-button-size)) / 2 + 40px);inset-inline-end:var(--sl-nav-pad-x);z-index:var(--sl-z-index-navbar)}}}.site-title{transition:transform .2s ease,color .2s ease}.site-title:hover{color:#6ab549;cursor:pointer;transform:translateY(-4px)}:root[data-theme=dark] .site-title:hover{color:#316431}.hero img,.hero>.hero-html{object-fit:contain;width:min(90%,32rem);height:auto;margin-inline:auto;transform:rotate(12deg) scale(1.05);transition:all .3s}.hero img:hover,.hero>.hero-html:hover{transform:rotate(-5deg) scale(1.12)}:root:not([data-theme=dark]) .hero img{filter:drop-shadow(0 0 16px #7ed957) brightness(1.1)}:root[data-theme=dark] .hero img{filter:drop-shadow(0 0 16px #236c2b) brightness(1.1)}:root:not([data-theme=dark]){--hero-btn-bg: #236c2b;--hero-btn-color: #fff}:root[data-theme=dark]{--hero-btn-bg: #236c2b;--hero-btn-color: #fff}.hero .Button{background:var(--hero-btn-bg, #7ed957);color:var(--hero-btn-color, #222);border:none;padding:.75em 1.5em;border-radius:.5em;font-weight:700;cursor:pointer;transition:background .3s,color .3s}.hero .Button:hover{background:var(--hero-btn-color, #222);color:var(--hero-btn-bg, #7ed957)}.hero .sl-link-button.primary:hover{color:var(--hero-primary-hover)}.hero .sl-link-button.secondary:hover,.hero .sl-link-button.minimal:hover{color:var(--hero-link-color)}:root:not([data-theme=dark]) .hero .sl-link-button.minimal:hover{text-shadow:0 0 8px #fff,0 0 16px #7ed957}.hero .sl-link-button.primary,.hero .sl-link-button.secondary{background:var(--hero-btn-bg);color:var(--hero-btn-color);border:none}.howto-link-list{list-style:none;padding:0;margin:0}.howto-link-list li{border-bottom:1px solid var(--sl-color-gray-6);padding:.25rem 0;margin:0}.howto-link-list li:last-child{border-bottom:none}.howto-link-list a{display:flex;justify-content:space-between;align-items:center;text-decoration:none}.howto-link-list .arrow{display:inline-block;width:1rem;height:1rem;background-color:currentColor;mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='M17.92 11.62a1.001 1.001 0 0 0-.21-.33l-5-5a1.003 1.003 0 1 0-1.42 1.42l3.3 3.29H7a1 1 0 0 0 0 2h7.59l-3.3 3.29a1.002 1.002 0 0 0 .325 1.639 1 1 0 0 0 1.095-.219l5-5a1 1 0 0 0 .21-.33 1 1 0 0 0 0-.76Z'%3E%3C/path%3E%3C/svg%3E");-webkit-mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='M17.92 11.62a1.001 1.001 0 0 0-.21-.33l-5-5a1.003 1.003 0 1 0-1.42 1.42l3.3 3.29H7a1 1 0 0 0 0 2h7.59l-3.3 3.29a1.002 1.002 0 0 0 .325 1.639 1 1 0 0 0 1.095-.219l5-5a1 1 0 0 0 .21-.33 1 1 0 0 0 0-.76Z'%3E%3C/path%3E%3C/svg%3E");mask-size:100%;-webkit-mask-size:100%}@media(max-width:600px){.hero img,.hero>.hero-html{width:85vw;max-width:20rem;padding:3rem 1rem 1rem}}@layer starlight.base,starlight.reset,starlight.core,starlight.content,starlight.components,starlight.utils;@layer starlight.base{:root,::backdrop{--sl-color-white: hsl(0, 0%, 100%);--sl-color-gray-1: hsl(224, 20%, 94%);--sl-color-gray-2: hsl(224, 6%, 77%);--sl-color-gray-3: hsl(224, 6%, 56%);--sl-color-gray-4: hsl(224, 7%, 36%);--sl-color-gray-5: hsl(224, 10%, 23%);--sl-color-gray-6: hsl(224, 14%, 16%);--sl-color-black: hsl(224, 10%, 10%);--sl-hue-orange: 41;--sl-color-orange-low: hsl(var(--sl-hue-orange), 39%, 22%);--sl-color-orange: hsl(var(--sl-hue-orange), 82%, 63%);--sl-color-orange-high: hsl(var(--sl-hue-orange), 82%, 87%);--sl-hue-green: 101;--sl-color-green-low: hsl(var(--sl-hue-green), 39%, 22%);--sl-color-green: hsl(var(--sl-hue-green), 82%, 63%);--sl-color-green-high: hsl(var(--sl-hue-green), 82%, 80%);--sl-hue-blue: 234;--sl-color-blue-low: hsl(var(--sl-hue-blue), 54%, 20%);--sl-color-blue: hsl(var(--sl-hue-blue), 100%, 60%);--sl-color-blue-high: hsl(var(--sl-hue-blue), 100%, 87%);--sl-hue-purple: 281;--sl-color-purple-low: hsl(var(--sl-hue-purple), 39%, 22%);--sl-color-purple: hsl(var(--sl-hue-purple), 82%, 63%);--sl-color-purple-high: hsl(var(--sl-hue-purple), 82%, 89%);--sl-hue-red: 339;--sl-color-red-low: hsl(var(--sl-hue-red), 39%, 22%);--sl-color-red: hsl(var(--sl-hue-red), 82%, 63%);--sl-color-red-high: hsl(var(--sl-hue-red), 82%, 87%);--sl-color-accent-low: hsl(224, 54%, 20%);--sl-color-accent: hsl(224, 100%, 60%);--sl-color-accent-high: hsl(224, 100%, 85%);--sl-color-text: var(--sl-color-gray-2);--sl-color-text-accent: var(--sl-color-accent-high);--sl-color-text-invert: var(--sl-color-accent-low);--sl-color-bg: var(--sl-color-black);--sl-color-bg-nav: var(--sl-color-gray-6);--sl-color-bg-sidebar: var(--sl-color-gray-6);--sl-color-bg-inline-code: var(--sl-color-gray-5);--sl-color-bg-accent: var(--sl-color-accent-high);--sl-color-hairline-light: var(--sl-color-gray-5);--sl-color-hairline: var(--sl-color-gray-6);--sl-color-hairline-shade: var(--sl-color-black);--sl-color-backdrop-overlay: hsla(223, 13%, 10%, .66);--sl-shadow-sm: 0px 1px 1px hsla(0, 0%, 0%, .12), 0px 2px 1px hsla(0, 0%, 0%, .24);--sl-shadow-md: 0px 8px 4px hsla(0, 0%, 0%, .08), 0px 5px 2px hsla(0, 0%, 0%, .08), 0px 3px 2px hsla(0, 0%, 0%, .12), 0px 1px 1px hsla(0, 0%, 0%, .15);--sl-shadow-lg: 0px 25px 7px hsla(0, 0%, 0%, .03), 0px 16px 6px hsla(0, 0%, 0%, .1), 0px 9px 5px hsla(223, 13%, 10%, .33), 0px 4px 4px hsla(0, 0%, 0%, .75), 0px 4px 2px hsla(0, 0%, 0%, .25);--sl-text-2xs: .75rem;--sl-text-xs: .8125rem;--sl-text-sm: .875rem;--sl-text-base: 1rem;--sl-text-lg: 1.125rem;--sl-text-xl: 1.25rem;--sl-text-2xl: 1.5rem;--sl-text-3xl: 1.8125rem;--sl-text-4xl: 2.1875rem;--sl-text-5xl: 2.625rem;--sl-text-6xl: 4rem;--sl-text-body: var(--sl-text-base);--sl-text-body-sm: var(--sl-text-xs);--sl-text-code: var(--sl-text-sm);--sl-text-code-sm: var(--sl-text-xs);--sl-text-h1: var(--sl-text-4xl);--sl-text-h2: var(--sl-text-3xl);--sl-text-h3: var(--sl-text-2xl);--sl-text-h4: var(--sl-text-xl);--sl-text-h5: var(--sl-text-lg);--sl-line-height: 1.75;--sl-line-height-headings: 1.2;--sl-font-system: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--sl-font-system-mono: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--__sl-font: var(--sl-font, var(--sl-font-system)), var(--sl-font-system);--__sl-font-mono: var(--sl-font-mono, var(--sl-font-system-mono)), var(--sl-font-system-mono);--sl-nav-height: 3.5rem;--sl-nav-pad-x: 1rem;--sl-nav-pad-y: .75rem;--sl-mobile-toc-height: 3rem;--sl-sidebar-width: 18.75rem;--sl-sidebar-pad-x: 1rem;--sl-content-width: 45rem;--sl-content-pad-x: 1rem;--sl-content-gap-y: 1rem;--sl-main-pad: 0 0 3vh 0;--sl-menu-button-size: 2rem;--sl-nav-gap: var(--sl-content-pad-x);--sl-outline-offset-inside: -.1875rem;--sl-z-index-toc: 4;--sl-z-index-menu: 5;--sl-z-index-navbar: 10;--sl-z-index-skiplink: 20}:root[data-theme=light],[data-theme=light] ::backdrop{--sl-color-white: hsl(224, 10%, 10%);--sl-color-gray-1: hsl(224, 14%, 16%);--sl-color-gray-2: hsl(224, 10%, 23%);--sl-color-gray-3: hsl(224, 7%, 36%);--sl-color-gray-4: hsl(224, 6%, 56%);--sl-color-gray-5: hsl(224, 6%, 77%);--sl-color-gray-6: hsl(224, 20%, 94%);--sl-color-gray-7: hsl(224, 19%, 97%);--sl-color-black: hsl(0, 0%, 100%);--sl-color-orange-high: hsl(var(--sl-hue-orange), 80%, 25%);--sl-color-orange: hsl(var(--sl-hue-orange), 90%, 60%);--sl-color-orange-low: hsl(var(--sl-hue-orange), 90%, 88%);--sl-color-green-high: hsl(var(--sl-hue-green), 80%, 22%);--sl-color-green: hsl(var(--sl-hue-green), 90%, 46%);--sl-color-green-low: hsl(var(--sl-hue-green), 85%, 90%);--sl-color-blue-high: hsl(var(--sl-hue-blue), 80%, 30%);--sl-color-blue: hsl(var(--sl-hue-blue), 90%, 60%);--sl-color-blue-low: hsl(var(--sl-hue-blue), 88%, 90%);--sl-color-purple-high: hsl(var(--sl-hue-purple), 90%, 30%);--sl-color-purple: hsl(var(--sl-hue-purple), 90%, 60%);--sl-color-purple-low: hsl(var(--sl-hue-purple), 80%, 90%);--sl-color-red-high: hsl(var(--sl-hue-red), 80%, 30%);--sl-color-red: hsl(var(--sl-hue-red), 90%, 60%);--sl-color-red-low: hsl(var(--sl-hue-red), 80%, 90%);--sl-color-accent-high: hsl(234, 80%, 30%);--sl-color-accent: hsl(234, 90%, 60%);--sl-color-accent-low: hsl(234, 88%, 90%);--sl-color-text-accent: var(--sl-color-accent);--sl-color-text-invert: var(--sl-color-black);--sl-color-bg-nav: var(--sl-color-gray-7);--sl-color-bg-sidebar: var(--sl-color-bg);--sl-color-bg-inline-code: var(--sl-color-gray-6);--sl-color-bg-accent: var(--sl-color-accent);--sl-color-hairline-light: var(--sl-color-gray-6);--sl-color-hairline-shade: var(--sl-color-gray-6);--sl-color-backdrop-overlay: hsla(225, 9%, 36%, .66);--sl-shadow-sm: 0px 1px 1px hsla(0, 0%, 0%, .06), 0px 2px 1px hsla(0, 0%, 0%, .06);--sl-shadow-md: 0px 8px 4px hsla(0, 0%, 0%, .03), 0px 5px 2px hsla(0, 0%, 0%, .03), 0px 3px 2px hsla(0, 0%, 0%, .06), 0px 1px 1px hsla(0, 0%, 0%, .06);--sl-shadow-lg: 0px 25px 7px rgba(0, 0, 0, .01), 0px 16px 6px hsla(0, 0%, 0%, .03), 0px 9px 5px hsla(223, 13%, 10%, .08), 0px 4px 4px hsla(0, 0%, 0%, .16), 0px 4px 2px hsla(0, 0%, 0%, .04)}@media(min-width:50em){:root{--sl-nav-height: 4rem;--sl-nav-pad-x: 1.5rem;--sl-text-h1: var(--sl-text-5xl);--sl-text-h2: var(--sl-text-4xl);--sl-text-h3: var(--sl-text-3xl);--sl-text-h4: var(--sl-text-2xl)}}@media(min-width:72rem){:root{--sl-content-pad-x: 1.5rem;--sl-mobile-toc-height: 0rem}}}@layer starlight.reset{*,*:before,*:after{box-sizing:border-box}*{margin:0}html{color-scheme:dark;accent-color:var(--sl-color-accent)}html[data-theme=light]{color-scheme:light}body{font-family:var(--__sl-font);line-height:var(--sl-line-height);-webkit-font-smoothing:antialiased;color:var(--sl-color-text);background-color:var(--sl-color-bg)}input,button,textarea,select{font:inherit}p,h1,h2,h3,h4,h5,h6,code{overflow-wrap:anywhere}code{font-family:var(--__sl-font-mono)}}@layer starlight.components{.starlight-aside{padding:1rem;border-inline-start:.25rem solid var(--sl-color-asides-border);color:var(--sl-color-white)}.starlight-aside--note{--sl-color-asides-text-accent: var(--sl-color-blue-high);--sl-color-asides-border: var(--sl-color-blue);background-color:var(--sl-color-blue-low)}.starlight-aside--tip{--sl-color-asides-text-accent: var(--sl-color-purple-high);--sl-color-asides-border: var(--sl-color-purple);background-color:var(--sl-color-purple-low)}.starlight-aside--caution{--sl-color-asides-text-accent: var(--sl-color-orange-high);--sl-color-asides-border: var(--sl-color-orange);background-color:var(--sl-color-orange-low)}.starlight-aside--danger{--sl-color-asides-text-accent: var(--sl-color-red-high);--sl-color-asides-border: var(--sl-color-red);background-color:var(--sl-color-red-low)}.starlight-aside__title{display:flex;gap:.5rem;align-items:center;font-size:var(--sl-text-h5);font-weight:600;line-height:var(--sl-line-height-headings);color:var(--sl-color-asides-text-accent)}.starlight-aside__icon{font-size:1.333em;width:1em;height:1em}.starlight-aside__title+.starlight-aside__content{margin-top:.5rem}.starlight-aside__content a{color:var(--sl-color-asides-text-accent)}}@layer starlight.utils{.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border-width:0}.sl-hidden{display:none}.sl-flex{display:flex}.sl-block{display:block}@media(min-width:50rem){.md\:sl-hidden{display:none}.md\:sl-flex{display:flex}.md\:sl-block{display:block}}@media(min-width:72rem){.lg\:sl-hidden{display:none}.lg\:sl-flex{display:flex}.lg\:sl-block{display:block}}[data-theme=light] .light\:sl-hidden,[data-theme=dark] .dark\:sl-hidden{display:none}[dir=rtl] .rtl\:flip:not(:where([dir=rtl] [dir=ltr] *)){transform:scaleX(-1)}}@layer starlight.content{.sl-markdown-content .sl-heading-wrapper{--sl-anchor-icon-size: .8275em;--sl-anchor-icon-gap: .25em;--sl-anchor-icon-space: calc(var(--sl-anchor-icon-size) + var(--sl-anchor-icon-gap));line-height:var(--sl-line-height-headings)}.sl-markdown-content :not(h1,h2,h3,h4,h5,h6,.sl-heading-wrapper)+:is(.sl-heading-wrapper){margin-top:1.5em}.sl-markdown-content .sl-heading-wrapper.level-h1{font-size:var(--sl-text-h1)}.sl-markdown-content .sl-heading-wrapper.level-h2{font-size:var(--sl-text-h2)}.sl-markdown-content .sl-heading-wrapper.level-h3{font-size:var(--sl-text-h3)}.sl-markdown-content .sl-heading-wrapper.level-h4{font-size:var(--sl-text-h4)}.sl-markdown-content .sl-heading-wrapper.level-h5{font-size:var(--sl-text-h5)}.sl-markdown-content .sl-heading-wrapper.level-h6{font-size:var(--sl-text-h6)}.sl-markdown-content .sl-heading-wrapper>:first-child{display:inline;padding-inline-end:var(--sl-anchor-icon-space)}.sl-markdown-content .sl-anchor-link{position:relative;margin-inline-start:calc(-1 * var(--sl-anchor-icon-size));-webkit-user-select:none;user-select:none;display:inline-flex}.sl-markdown-content .sl-anchor-link:after{content:"";position:absolute;inset:-.25rem -.5rem}.sl-markdown-content .sl-anchor-icon>svg{display:inline;width:var(--sl-anchor-icon-size);vertical-align:top;transform:translateY(calc((var(--sl-line-height-headings) * 1em - var(--sl-anchor-icon-size)) / 2))}@media(hover:hover){.sl-markdown-content .sl-anchor-link{opacity:0}.sl-markdown-content .sl-anchor-link:focus,.sl-markdown-content .sl-heading-wrapper:hover .sl-anchor-link{opacity:1}}}@layer starlight.core{.sl-banner:where(.astro-kjxjujhp){--__sl-banner-text: var(--sl-color-banner-text, var(--sl-color-text-invert));padding:var(--sl-nav-pad-y) var(--sl-nav-pad-x);background-color:var(--sl-color-banner-bg, var(--sl-color-bg-accent));color:var(--__sl-banner-text);line-height:var(--sl-line-height-headings);text-align:center;text-wrap:balance;box-shadow:var(--sl-shadow-sm)}.sl-banner:where(.astro-kjxjujhp) a{color:var(--__sl-banner-text)}}@layer starlight.core{.content-panel:where(.astro-2k7djlf2){padding:1.5rem var(--sl-content-pad-x)}.content-panel:where(.astro-2k7djlf2)+.content-panel:where(.astro-2k7djlf2){border-top:1px solid var(--sl-color-hairline)}.sl-container:where(.astro-2k7djlf2){max-width:var(--sl-content-width)}.sl-container:where(.astro-2k7djlf2)>*+*{margin-top:1.5rem}@media(min-width:72rem){.sl-container:where(.astro-2k7djlf2){margin-inline:var(--sl-content-margin-inline, auto)}}}@layer starlight.core{p:where(.astro-b4gktj77){border:1px solid var(--sl-color-orange);padding:.75em 1em;background-color:var(--sl-color-orange-low);color:var(--sl-color-orange-high);width:max-content;max-width:100%;align-items:center;gap:.75em;font-size:var(--sl-text-body-sm);line-height:var(--sl-line-height-headings)}}@layer starlight.core{a:where(.astro-vkwnwuio){gap:.5rem;align-items:center;text-decoration:none;color:var(--sl-color-gray-3)}a:where(.astro-vkwnwuio):hover{color:var(--sl-color-white)}}@layer starlight.core{.pagination-links:where(.astro-7k5ypggf){display:grid;grid-template-columns:repeat(auto-fit,minmax(min(18rem,100%),1fr));gap:1rem}a:where(.astro-7k5ypggf){display:flex;align-items:center;justify-content:flex-start;gap:.5rem;width:100%;flex-basis:calc(50% - .5rem);flex-grow:1;border:1px solid var(--sl-color-gray-5);border-radius:.5rem;padding:1rem;text-decoration:none;color:var(--sl-color-gray-2);box-shadow:var(--sl-shadow-md);overflow-wrap:anywhere}:where(.astro-7k5ypggf)[rel=next]{justify-content:end;text-align:end;flex-direction:row-reverse}a:where(.astro-7k5ypggf):hover{border-color:var(--sl-color-gray-2)}.link-title:where(.astro-7k5ypggf){color:var(--sl-color-white);font-size:var(--sl-text-2xl);line-height:var(--sl-line-height-headings)}svg:where(.astro-7k5ypggf){flex-shrink:0}}@layer starlight.core{footer:where(.astro-bu7puyol){flex-direction:column;gap:1.5rem}.meta:where(.astro-bu7puyol){gap:.75rem 3rem;justify-content:space-between;flex-wrap:wrap;margin-top:3rem;font-size:var(--sl-text-sm);color:var(--sl-color-gray-3)}.meta:where(.astro-bu7puyol)>p:only-child{margin-inline-start:auto}.kudos:where(.astro-bu7puyol){align-items:center;gap:.5em;margin:1.5rem auto;font-size:var(--sl-text-xs);text-decoration:none;color:var(--sl-color-gray-3)}.kudos:where(.astro-bu7puyol):hover{color:var(--sl-color-white)}}@layer starlight.components{.kudos:where(.astro-bu7puyol) svg{color:var(--sl-color-orange)}}@layer starlight.core{label:where(.astro-dqhcxxsi){--sl-label-icon-size: .875rem;--sl-caret-size: 1.25rem;--sl-inline-padding: .5rem;position:relative;display:flex;align-items:center;gap:.25rem;color:var(--sl-color-gray-1)}label:where(.astro-dqhcxxsi):hover{color:var(--sl-color-gray-2)}.icon:where(.astro-dqhcxxsi){position:absolute;top:50%;transform:translateY(-50%);pointer-events:none}select:where(.astro-dqhcxxsi){border:0;padding-block:.625rem;padding-inline:calc(var(--sl-label-icon-size) + var(--sl-inline-padding) + .25rem) calc(var(--sl-caret-size) + var(--sl-inline-padding) + .25rem);margin-inline:calc(var(--sl-inline-padding) * -1);width:calc(var(--sl-select-width) + var(--sl-inline-padding) * 2);background-color:transparent;text-overflow:ellipsis;color:inherit;cursor:pointer;appearance:none}option:where(.astro-dqhcxxsi){background-color:var(--sl-color-bg-nav);color:var(--sl-color-gray-1)}@media(min-width:50rem){select:where(.astro-dqhcxxsi){font-size:var(--sl-text-sm)}}}@layer starlight.components{.label-icon:where(.astro-dqhcxxsi){font-size:var(--sl-label-icon-size);inset-inline-start:0}.caret:where(.astro-dqhcxxsi){font-size:var(--sl-caret-size);inset-inline-end:0}}@layer starlight.core{.pagefind-ui__result.svelte-j9e30.svelte-j9e30{list-style-type:none;display:flex;align-items:flex-start;gap:min(calc(40px * var(--pagefind-ui-scale)),3%);padding:calc(30px * var(--pagefind-ui-scale)) 0 calc(40px * var(--pagefind-ui-scale));border-top:solid var(--pagefind-ui-border-width) var(--pagefind-ui-border)}.pagefind-ui__result.svelte-j9e30.svelte-j9e30:last-of-type{border-bottom:solid var(--pagefind-ui-border-width) var(--pagefind-ui-border)}.pagefind-ui__result-thumb.svelte-j9e30.svelte-j9e30{width:min(30%,calc((30% - (100px * var(--pagefind-ui-scale))) * 100000));max-width:calc(120px * var(--pagefind-ui-scale));margin-top:calc(10px * var(--pagefind-ui-scale));aspect-ratio:var(--pagefind-ui-image-box-ratio);position:relative}.pagefind-ui__result-image.svelte-j9e30.svelte-j9e30{display:block;position:absolute;left:50%;transform:translate(-50%);font-size:0;width:auto;height:auto;max-width:100%;max-height:100%;border-radius:var(--pagefind-ui-image-border-radius)}.pagefind-ui__result-inner.svelte-j9e30.svelte-j9e30{flex:1;display:flex;flex-direction:column;align-items:flex-start;margin-top:calc(10px * var(--pagefind-ui-scale))}.pagefind-ui__result-title.svelte-j9e30.svelte-j9e30{display:inline-block;font-weight:700;font-size:calc(21px * var(--pagefind-ui-scale));margin-top:0;margin-bottom:0}.pagefind-ui__result-title.svelte-j9e30 .pagefind-ui__result-link.svelte-j9e30{color:var(--pagefind-ui-text);text-decoration:none}.pagefind-ui__result-title.svelte-j9e30 .pagefind-ui__result-link.svelte-j9e30:hover{text-decoration:underline}.pagefind-ui__result-excerpt.svelte-j9e30.svelte-j9e30{display:inline-block;font-weight:400;font-size:calc(16px * var(--pagefind-ui-scale));margin-top:calc(4px * var(--pagefind-ui-scale));margin-bottom:0;min-width:calc(250px * var(--pagefind-ui-scale))}.pagefind-ui__loading.svelte-j9e30.svelte-j9e30{color:var(--pagefind-ui-text);background-color:var(--pagefind-ui-text);border-radius:var(--pagefind-ui-border-radius);opacity:.1;pointer-events:none}.pagefind-ui__result-tags.svelte-j9e30.svelte-j9e30{list-style-type:none;padding:0;display:flex;gap:calc(20px * var(--pagefind-ui-scale));flex-wrap:wrap;margin-top:calc(20px * var(--pagefind-ui-scale))}.pagefind-ui__result-tag.svelte-j9e30.svelte-j9e30{padding:calc(4px * var(--pagefind-ui-scale)) calc(8px * var(--pagefind-ui-scale));font-size:calc(14px * var(--pagefind-ui-scale));border-radius:var(--pagefind-ui-border-radius);background-color:var(--pagefind-ui-tag)}.pagefind-ui__result.svelte-4xnkmf.svelte-4xnkmf{list-style-type:none;display:flex;align-items:flex-start;gap:min(calc(40px * var(--pagefind-ui-scale)),3%);padding:calc(30px * var(--pagefind-ui-scale)) 0 calc(40px * var(--pagefind-ui-scale));border-top:solid var(--pagefind-ui-border-width) var(--pagefind-ui-border)}.pagefind-ui__result.svelte-4xnkmf.svelte-4xnkmf:last-of-type{border-bottom:solid var(--pagefind-ui-border-width) var(--pagefind-ui-border)}.pagefind-ui__result-nested.svelte-4xnkmf.svelte-4xnkmf{display:flex;flex-direction:column;padding-left:calc(20px * var(--pagefind-ui-scale))}.pagefind-ui__result-nested.svelte-4xnkmf.svelte-4xnkmf:first-of-type{padding-top:calc(10px * var(--pagefind-ui-scale))}.pagefind-ui__result-nested.svelte-4xnkmf .pagefind-ui__result-link.svelte-4xnkmf{font-size:.9em;position:relative}.pagefind-ui__result-nested.svelte-4xnkmf .pagefind-ui__result-link.svelte-4xnkmf:before{content:"⤷ ";position:absolute;top:0;right:calc(100% + .1em)}.pagefind-ui__result-thumb.svelte-4xnkmf.svelte-4xnkmf{width:min(30%,calc((30% - (100px * var(--pagefind-ui-scale))) * 100000));max-width:calc(120px * var(--pagefind-ui-scale));margin-top:calc(10px * var(--pagefind-ui-scale));aspect-ratio:var(--pagefind-ui-image-box-ratio);position:relative}.pagefind-ui__result-image.svelte-4xnkmf.svelte-4xnkmf{display:block;position:absolute;left:50%;transform:translate(-50%);font-size:0;width:auto;height:auto;max-width:100%;max-height:100%;border-radius:var(--pagefind-ui-image-border-radius)}.pagefind-ui__result-inner.svelte-4xnkmf.svelte-4xnkmf{flex:1;display:flex;flex-direction:column;align-items:flex-start;margin-top:calc(10px * var(--pagefind-ui-scale))}.pagefind-ui__result-title.svelte-4xnkmf.svelte-4xnkmf{display:inline-block;font-weight:700;font-size:calc(21px * var(--pagefind-ui-scale));margin-top:0;margin-bottom:0}.pagefind-ui__result-title.svelte-4xnkmf .pagefind-ui__result-link.svelte-4xnkmf{color:var(--pagefind-ui-text);text-decoration:none}.pagefind-ui__result-title.svelte-4xnkmf .pagefind-ui__result-link.svelte-4xnkmf:hover{text-decoration:underline}.pagefind-ui__result-excerpt.svelte-4xnkmf.svelte-4xnkmf{display:inline-block;font-weight:400;font-size:calc(16px * var(--pagefind-ui-scale));margin-top:calc(4px * var(--pagefind-ui-scale));margin-bottom:0;min-width:calc(250px * var(--pagefind-ui-scale))}.pagefind-ui__loading.svelte-4xnkmf.svelte-4xnkmf{color:var(--pagefind-ui-text);background-color:var(--pagefind-ui-text);border-radius:var(--pagefind-ui-border-radius);opacity:.1;pointer-events:none}.pagefind-ui__result-tags.svelte-4xnkmf.svelte-4xnkmf{list-style-type:none;padding:0;display:flex;gap:calc(20px * var(--pagefind-ui-scale));flex-wrap:wrap;margin-top:calc(20px * var(--pagefind-ui-scale))}.pagefind-ui__result-tag.svelte-4xnkmf.svelte-4xnkmf{padding:calc(4px * var(--pagefind-ui-scale)) calc(8px * var(--pagefind-ui-scale));font-size:calc(14px * var(--pagefind-ui-scale));border-radius:var(--pagefind-ui-border-radius);background-color:var(--pagefind-ui-tag)}legend.svelte-1v2r7ls.svelte-1v2r7ls{position:absolute;clip:rect(0 0 0 0)}.pagefind-ui__filter-panel.svelte-1v2r7ls.svelte-1v2r7ls{min-width:min(calc(260px * var(--pagefind-ui-scale)),100%);flex:1;display:flex;flex-direction:column;margin-top:calc(20px * var(--pagefind-ui-scale))}.pagefind-ui__filter-group.svelte-1v2r7ls.svelte-1v2r7ls{border:0;padding:0}.pagefind-ui__filter-block.svelte-1v2r7ls.svelte-1v2r7ls{padding:0;display:block;border-bottom:solid calc(2px * var(--pagefind-ui-scale)) var(--pagefind-ui-border);padding:calc(20px * var(--pagefind-ui-scale)) 0}.pagefind-ui__filter-name.svelte-1v2r7ls.svelte-1v2r7ls{font-size:calc(16px * var(--pagefind-ui-scale));position:relative;display:flex;align-items:center;list-style:none;font-weight:700;cursor:pointer;height:calc(24px * var(--pagefind-ui-scale))}.pagefind-ui__filter-name.svelte-1v2r7ls.svelte-1v2r7ls::-webkit-details-marker{display:none}.pagefind-ui__filter-name.svelte-1v2r7ls.svelte-1v2r7ls:after{position:absolute;content:"";right:calc(6px * var(--pagefind-ui-scale));top:50%;width:calc(8px * var(--pagefind-ui-scale));height:calc(8px * var(--pagefind-ui-scale));border:solid calc(2px * var(--pagefind-ui-scale)) currentColor;border-right:0;border-top:0;transform:translateY(-70%) rotate(-45deg)}.pagefind-ui__filter-block[open].svelte-1v2r7ls .pagefind-ui__filter-name.svelte-1v2r7ls:after{transform:translateY(-70%) rotate(-225deg)}.pagefind-ui__filter-group.svelte-1v2r7ls.svelte-1v2r7ls{display:flex;flex-direction:column;gap:calc(20px * var(--pagefind-ui-scale));padding-top:calc(30px * var(--pagefind-ui-scale))}.pagefind-ui__filter-value.svelte-1v2r7ls.svelte-1v2r7ls{position:relative;display:flex;align-items:center;gap:calc(8px * var(--pagefind-ui-scale))}.pagefind-ui__filter-value.svelte-1v2r7ls.svelte-1v2r7ls:before{position:absolute;content:"";top:50%;left:calc(8px * var(--pagefind-ui-scale));width:0px;height:0px;border:solid 1px #fff;opacity:0;transform:translate(calc(4.5px * var(--pagefind-ui-scale) * -1),calc(.8px * var(--pagefind-ui-scale))) skew(-5deg) rotate(-45deg);transform-origin:top left;border-top:0;border-right:0;pointer-events:none}.pagefind-ui__filter-value.pagefind-ui__filter-value--checked.svelte-1v2r7ls.svelte-1v2r7ls:before{opacity:1;width:calc(9px * var(--pagefind-ui-scale));height:calc(4px * var(--pagefind-ui-scale));transition:width .1s ease-out .1s,height .1s ease-in}.pagefind-ui__filter-checkbox.svelte-1v2r7ls.svelte-1v2r7ls{margin:0;width:calc(16px * var(--pagefind-ui-scale));height:calc(16px * var(--pagefind-ui-scale));border:solid 1px var(--pagefind-ui-border);appearance:none;-webkit-appearance:none;border-radius:calc(var(--pagefind-ui-border-radius) / 2);background-color:var(--pagefind-ui-background);cursor:pointer}.pagefind-ui__filter-checkbox.svelte-1v2r7ls.svelte-1v2r7ls:checked{background-color:var(--pagefind-ui-primary);border:solid 1px var(--pagefind-ui-primary)}.pagefind-ui__filter-label.svelte-1v2r7ls.svelte-1v2r7ls{cursor:pointer;font-size:calc(16px * var(--pagefind-ui-scale));font-weight:400}.pagefind-ui--reset *:where(:not(html,iframe,canvas,img,svg,video):not(svg *,symbol *)){all:unset;display:revert;outline:revert}.pagefind-ui--reset *,.pagefind-ui--reset *:before,.pagefind-ui--reset *:after{box-sizing:border-box}.pagefind-ui--reset a,.pagefind-ui--reset button{cursor:revert}.pagefind-ui--reset ol,.pagefind-ui--reset ul,.pagefind-ui--reset menu{list-style:none}.pagefind-ui--reset img{max-width:100%}.pagefind-ui--reset table{border-collapse:collapse}.pagefind-ui--reset input,.pagefind-ui--reset textarea{-webkit-user-select:auto}.pagefind-ui--reset textarea{white-space:revert}.pagefind-ui--reset meter{-webkit-appearance:revert;appearance:revert}.pagefind-ui--reset ::placeholder{color:unset}.pagefind-ui--reset :where([hidden]){display:none}.pagefind-ui--reset :where([contenteditable]:not([contenteditable=false])){-moz-user-modify:read-write;-webkit-user-modify:read-write;overflow-wrap:break-word;-webkit-line-break:after-white-space;-webkit-user-select:auto}.pagefind-ui--reset :where([draggable=true]){-webkit-user-drag:element}.pagefind-ui--reset mark{all:revert}:root{--pagefind-ui-scale:.8;--pagefind-ui-primary:#393939;--pagefind-ui-text:#393939;--pagefind-ui-background:#ffffff;--pagefind-ui-border:#eeeeee;--pagefind-ui-tag:#eeeeee;--pagefind-ui-border-width:2px;--pagefind-ui-border-radius:8px;--pagefind-ui-image-border-radius:8px;--pagefind-ui-image-box-ratio:3 / 2;--pagefind-ui-font:system, -apple-system, "BlinkMacSystemFont", ".SFNSText-Regular", "San Francisco", "Roboto", "Segoe UI", "Helvetica Neue", "Lucida Grande", "Ubuntu", "arial", sans-serif}.pagefind-ui.svelte-e9gkc3{width:100%;color:var(--pagefind-ui-text);font-family:var(--pagefind-ui-font)}.pagefind-ui__hidden.svelte-e9gkc3{display:none!important}.pagefind-ui__suppressed.svelte-e9gkc3{opacity:0;pointer-events:none}.pagefind-ui__form.svelte-e9gkc3{position:relative}.pagefind-ui__form.svelte-e9gkc3:before{background-color:var(--pagefind-ui-text);width:calc(18px * var(--pagefind-ui-scale));height:calc(18px * var(--pagefind-ui-scale));top:calc(23px * var(--pagefind-ui-scale));left:calc(20px * var(--pagefind-ui-scale));content:"";position:absolute;display:block;opacity:.7;-webkit-mask-image:url("data:image/svg+xml,%3Csvg width='18' height='18' viewBox='0 0 18 18' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M12.7549 11.255H11.9649L11.6849 10.985C12.6649 9.845 13.2549 8.365 13.2549 6.755C13.2549 3.165 10.3449 0.255005 6.75488 0.255005C3.16488 0.255005 0.254883 3.165 0.254883 6.755C0.254883 10.345 3.16488 13.255 6.75488 13.255C8.36488 13.255 9.84488 12.665 10.9849 11.685L11.2549 11.965V12.755L16.2549 17.745L17.7449 16.255L12.7549 11.255ZM6.75488 11.255C4.26488 11.255 2.25488 9.245 2.25488 6.755C2.25488 4.26501 4.26488 2.255 6.75488 2.255C9.24488 2.255 11.2549 4.26501 11.2549 6.755C11.2549 9.245 9.24488 11.255 6.75488 11.255Z' fill='%23000000'/%3E%3C/svg%3E%0A");mask-image:url("data:image/svg+xml,%3Csvg width='18' height='18' viewBox='0 0 18 18' fill='none' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M12.7549 11.255H11.9649L11.6849 10.985C12.6649 9.845 13.2549 8.365 13.2549 6.755C13.2549 3.165 10.3449 0.255005 6.75488 0.255005C3.16488 0.255005 0.254883 3.165 0.254883 6.755C0.254883 10.345 3.16488 13.255 6.75488 13.255C8.36488 13.255 9.84488 12.665 10.9849 11.685L11.2549 11.965V12.755L16.2549 17.745L17.7449 16.255L12.7549 11.255ZM6.75488 11.255C4.26488 11.255 2.25488 9.245 2.25488 6.755C2.25488 4.26501 4.26488 2.255 6.75488 2.255C9.24488 2.255 11.2549 4.26501 11.2549 6.755C11.2549 9.245 9.24488 11.255 6.75488 11.255Z' fill='%23000000'/%3E%3C/svg%3E%0A");-webkit-mask-size:100%;mask-size:100%;z-index:9;pointer-events:none}.pagefind-ui__search-input.svelte-e9gkc3{height:calc(64px * var(--pagefind-ui-scale));padding:0 calc(70px * var(--pagefind-ui-scale)) 0 calc(54px * var(--pagefind-ui-scale));background-color:var(--pagefind-ui-background);border:var(--pagefind-ui-border-width) solid var(--pagefind-ui-border);border-radius:var(--pagefind-ui-border-radius);font-size:calc(21px * var(--pagefind-ui-scale));position:relative;appearance:none;-webkit-appearance:none;display:flex;width:100%;box-sizing:border-box;font-weight:700}.pagefind-ui__search-input.svelte-e9gkc3::placeholder{opacity:.2}.pagefind-ui__search-clear.svelte-e9gkc3{position:absolute;top:calc(3px * var(--pagefind-ui-scale));right:calc(3px * var(--pagefind-ui-scale));height:calc(58px * var(--pagefind-ui-scale));padding:0 calc(15px * var(--pagefind-ui-scale)) 0 calc(2px * var(--pagefind-ui-scale));color:var(--pagefind-ui-text);font-size:calc(14px * var(--pagefind-ui-scale));cursor:pointer;background-color:var(--pagefind-ui-background);border-radius:var(--pagefind-ui-border-radius)}.pagefind-ui__drawer.svelte-e9gkc3{gap:calc(60px * var(--pagefind-ui-scale));display:flex;flex-direction:row;flex-wrap:wrap}.pagefind-ui__results-area.svelte-e9gkc3{min-width:min(calc(400px * var(--pagefind-ui-scale)),100%);flex:1000;margin-top:calc(20px * var(--pagefind-ui-scale))}.pagefind-ui__results.svelte-e9gkc3{padding:0}.pagefind-ui__message.svelte-e9gkc3{box-sizing:content-box;font-size:calc(16px * var(--pagefind-ui-scale));height:calc(24px * var(--pagefind-ui-scale));padding:calc(20px * var(--pagefind-ui-scale)) 0;display:flex;align-items:center;font-weight:700;margin-top:0}.pagefind-ui__button.svelte-e9gkc3{margin-top:calc(40px * var(--pagefind-ui-scale));border:var(--pagefind-ui-border-width) solid var(--pagefind-ui-border);border-radius:var(--pagefind-ui-border-radius);height:calc(48px * var(--pagefind-ui-scale));padding:0 calc(12px * var(--pagefind-ui-scale));font-size:calc(16px * var(--pagefind-ui-scale));color:var(--pagefind-ui-primary);background:var(--pagefind-ui-background);width:100%;text-align:center;font-weight:700;cursor:pointer}.pagefind-ui__button.svelte-e9gkc3:hover{border-color:var(--pagefind-ui-primary);color:var(--pagefind-ui-primary);background:var(--pagefind-ui-background)}}@layer starlight.core{[data-search-modal-open]{overflow:hidden}#starlight__search{--sl-search-result-spacing: calc(1.25rem * var(--pagefind-ui-scale));--sl-search-result-pad-inline-start: calc(3.75rem * var(--pagefind-ui-scale));--sl-search-result-pad-inline-end: calc(1.25rem * var(--pagefind-ui-scale));--sl-search-result-pad-block: calc(.9375rem * var(--pagefind-ui-scale));--sl-search-result-nested-pad-block: calc(.625rem * var(--pagefind-ui-scale));--sl-search-corners: calc(.3125rem * var(--pagefind-ui-scale));--sl-search-page-icon-size: calc(1.875rem * var(--pagefind-ui-scale));--sl-search-page-icon-inline-start: calc( (var(--sl-search-result-pad-inline-start) - var(--sl-search-page-icon-size)) / 2 );--sl-search-tree-diagram-size: calc(2.5rem * var(--pagefind-ui-scale));--sl-search-tree-diagram-inline-start: calc( (var(--sl-search-result-pad-inline-start) - var(--sl-search-tree-diagram-size)) / 2 )}#starlight__search .pagefind-ui__form:before{--pagefind-ui-text: var(--sl-color-gray-1);opacity:1}#starlight__search .pagefind-ui__search-input{color:var(--sl-color-white);font-weight:400;width:calc(100% - var(--sl-search-cancel-space))}#starlight__search input:focus{--pagefind-ui-border: var(--sl-color-accent)}#starlight__search .pagefind-ui__search-clear{inset-inline-end:var(--sl-search-cancel-space);width:calc(60px * var(--pagefind-ui-scale));padding:0;background-color:transparent;overflow:hidden}#starlight__search .pagefind-ui__search-clear:focus{outline:1px solid var(--sl-color-accent)}#starlight__search .pagefind-ui__search-clear:before{content:"";-webkit-mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='m13.41 12 6.3-6.29a1 1 0 1 0-1.42-1.42L12 10.59l-6.29-6.3a1 1 0 0 0-1.42 1.42l6.3 6.29-6.3 6.29a1 1 0 0 0 .33 1.64 1 1 0 0 0 1.09-.22l6.29-6.3 6.29 6.3a1 1 0 0 0 1.64-.33 1 1 0 0 0-.22-1.09L13.41 12Z'/%3E%3C/svg%3E") center / 50% no-repeat;mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='m13.41 12 6.3-6.29a1 1 0 1 0-1.42-1.42L12 10.59l-6.29-6.3a1 1 0 0 0-1.42 1.42l6.3 6.29-6.3 6.29a1 1 0 0 0 .33 1.64 1 1 0 0 0 1.09-.22l6.29-6.3 6.29 6.3a1 1 0 0 0 1.64-.33 1 1 0 0 0-.22-1.09L13.41 12Z'/%3E%3C/svg%3E") center / 50% no-repeat;background-color:var(--sl-color-text-accent);display:block;width:100%;height:100%}#starlight__search .pagefind-ui__results>*+*{margin-top:var(--sl-search-result-spacing)}#starlight__search .pagefind-ui__result{border:0;padding:0}#starlight__search .pagefind-ui__result-nested{position:relative;padding:var(--sl-search-result-nested-pad-block) var(--sl-search-result-pad-inline-end);padding-inline-start:var(--sl-search-result-pad-inline-start)}#starlight__search .pagefind-ui__result-title:not(:where(.pagefind-ui__result-nested *)),#starlight__search .pagefind-ui__result-nested{position:relative;background-color:var(--sl-color-black)}#starlight__search .pagefind-ui__result-title:not(:where(.pagefind-ui__result-nested *)):hover,#starlight__search .pagefind-ui__result-title:not(:where(.pagefind-ui__result-nested *)):focus-within,#starlight__search .pagefind-ui__result-nested:hover,#starlight__search .pagefind-ui__result-nested:focus-within{outline:1px solid var(--sl-color-accent-high)}#starlight__search .pagefind-ui__result-title:not(:where(.pagefind-ui__result-nested *)):focus-within,#starlight__search .pagefind-ui__result-nested:focus-within{background-color:var(--sl-color-accent-low)}#starlight__search .pagefind-ui__result-thumb,#starlight__search .pagefind-ui__result-inner{margin-top:0}#starlight__search .pagefind-ui__result-inner>:first-child{border-radius:var(--sl-search-corners) var(--sl-search-corners) 0 0}#starlight__search .pagefind-ui__result-inner>:last-child{border-radius:0 0 var(--sl-search-corners) var(--sl-search-corners)}#starlight__search .pagefind-ui__result-inner>.pagefind-ui__result-title{padding:var(--sl-search-result-pad-block) var(--sl-search-result-pad-inline-end);padding-inline-start:var(--sl-search-result-pad-inline-start)}#starlight__search .pagefind-ui__result-inner>.pagefind-ui__result-title:before{content:"";position:absolute;inset-block:0;inset-inline-start:var(--sl-search-page-icon-inline-start);width:var(--sl-search-page-icon-size);background:var(--sl-color-gray-3);-webkit-mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='currentColor' viewBox='0 0 24 24'%3E%3Cpath d='M9 10h1a1 1 0 1 0 0-2H9a1 1 0 0 0 0 2Zm0 2a1 1 0 0 0 0 2h6a1 1 0 0 0 0-2H9Zm11-3V8l-6-6a1 1 0 0 0-1 0H7a3 3 0 0 0-3 3v14a3 3 0 0 0 3 3h10a3 3 0 0 0 3-3V9Zm-6-4 3 3h-2a1 1 0 0 1-1-1V5Zm4 14a1 1 0 0 1-1 1H7a1 1 0 0 1-1-1V5a1 1 0 0 1 1-1h5v3a3 3 0 0 0 3 3h3v9Zm-3-3H9a1 1 0 0 0 0 2h6a1 1 0 0 0 0-2Z'/%3E%3C/svg%3E") center no-repeat;mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='currentColor' viewBox='0 0 24 24'%3E%3Cpath d='M9 10h1a1 1 0 1 0 0-2H9a1 1 0 0 0 0 2Zm0 2a1 1 0 0 0 0 2h6a1 1 0 0 0 0-2H9Zm11-3V8l-6-6a1 1 0 0 0-1 0H7a3 3 0 0 0-3 3v14a3 3 0 0 0 3 3h10a3 3 0 0 0 3-3V9Zm-6-4 3 3h-2a1 1 0 0 1-1-1V5Zm4 14a1 1 0 0 1-1 1H7a1 1 0 0 1-1-1V5a1 1 0 0 1 1-1h5v3a3 3 0 0 0 3 3h3v9Zm-3-3H9a1 1 0 0 0 0 2h6a1 1 0 0 0 0-2Z'/%3E%3C/svg%3E") center no-repeat}#starlight__search .pagefind-ui__result-inner{align-items:stretch;gap:1px}#starlight__search .pagefind-ui__result-link{position:unset;--pagefind-ui-text: var(--sl-color-white);font-weight:600}#starlight__search .pagefind-ui__result-link:hover{text-decoration:none}#starlight__search .pagefind-ui__result-nested .pagefind-ui__result-link:before{content:unset}#starlight__search .pagefind-ui__result-nested:before{content:"";position:absolute;inset-block:0;inset-inline-start:var(--sl-search-tree-diagram-inline-start);width:var(--sl-search-tree-diagram-size);background:var(--sl-color-gray-4);-webkit-mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' stroke='currentColor' stroke-linecap='round' viewBox='0 0 16 1000' preserveAspectRatio='xMinYMin slice'%3E%3Cpath d='M8 0v1000m6-988H8'/%3E%3C/svg%3E") 0% 0% / 100% no-repeat;mask:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' stroke='currentColor' stroke-linecap='round' viewBox='0 0 16 1000' preserveAspectRatio='xMinYMin slice'%3E%3Cpath d='M8 0v1000m6-988H8'/%3E%3C/svg%3E") 0% 0% / 100% no-repeat}#starlight__search .pagefind-ui__result-nested:last-of-type:before{-webkit-mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' stroke='currentColor' stroke-linecap='round' stroke-linejoin='round' viewBox='0 0 16 16'%3E%3Cpath d='M8 0v12m6 0H8'/%3E%3C/svg%3E");mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' stroke='currentColor' stroke-linecap='round' stroke-linejoin='round' viewBox='0 0 16 16'%3E%3Cpath d='M8 0v12m6 0H8'/%3E%3C/svg%3E")}[dir=rtl] .pagefind-ui__result-title:before,[dir=rtl] .pagefind-ui__result-nested:before{transform:scaleX(-1)}#starlight__search .pagefind-ui__result-link:after{content:"";position:absolute;inset:0}#starlight__search .pagefind-ui__result-excerpt{font-size:calc(1rem * var(--pagefind-ui-scale));overflow-wrap:anywhere}#starlight__search mark{color:var(--sl-color-gray-2);background-color:transparent;font-weight:600}#starlight__search .pagefind-ui__filter-value:before{border-color:var(--sl-color-text-invert)}#starlight__search .pagefind-ui__result-tags{background-color:var(--sl-color-black);margin-top:0;padding:var(--sl-search-result-nested-pad-block) var(--sl-search-result-pad-inline-end)}}@layer starlight.core{site-search:where(.astro-fiow75a5){display:contents}button:where(.astro-fiow75a5)[data-open-modal]{display:flex;align-items:center;gap:.5rem;border:0;background-color:transparent;color:var(--sl-color-gray-1);cursor:pointer;height:2.5rem;font-size:var(--sl-text-xl)}@media(min-width:50rem){button:where(.astro-fiow75a5)[data-open-modal]{border:1px solid var(--sl-color-gray-5);border-radius:.5rem;padding-inline-start:.75rem;padding-inline-end:.5rem;background-color:var(--sl-color-black);color:var(--sl-color-gray-2);font-size:var(--sl-text-sm);width:100%;max-width:22rem}button:where(.astro-fiow75a5)[data-open-modal]:hover{border-color:var(--sl-color-gray-2);color:var(--sl-color-white)}button:where(.astro-fiow75a5)[data-open-modal]>:where(.astro-fiow75a5):last-child{margin-inline-start:auto}}button:where(.astro-fiow75a5)>kbd:where(.astro-fiow75a5){border-radius:.25rem;font-size:var(--sl-text-2xs);gap:.25em;padding-inline:.375rem;background-color:var(--sl-color-gray-6)}kbd:where(.astro-fiow75a5){font-family:var(--__sl-font)}dialog:where(.astro-fiow75a5){margin:0;background-color:var(--sl-color-gray-6);border:1px solid var(--sl-color-gray-5);width:100%;max-width:100%;height:100%;max-height:100%;box-shadow:var(--sl-shadow-lg)}dialog:where(.astro-fiow75a5)[open]{display:flex}dialog:where(.astro-fiow75a5)::backdrop{background-color:var(--sl-color-backdrop-overlay);-webkit-backdrop-filter:blur(.25rem);backdrop-filter:blur(.25rem)}.dialog-frame:where(.astro-fiow75a5){position:relative;overflow:auto;flex-direction:column;flex-grow:1;gap:1rem;padding:1rem}button:where(.astro-fiow75a5)[data-close-modal]{position:absolute;z-index:1;align-items:center;align-self:flex-end;height:calc(64px * var(--pagefind-ui-scale));padding:.25rem;border:0;background:transparent;cursor:pointer;color:var(--sl-color-text-accent)}#starlight__search:where(.astro-fiow75a5){--pagefind-ui-primary: var(--sl-color-text);--pagefind-ui-text: var(--sl-color-gray-2);--pagefind-ui-font: var(--__sl-font);--pagefind-ui-background: var(--sl-color-black);--pagefind-ui-border: var(--sl-color-gray-5);--pagefind-ui-border-width: 1px;--pagefind-ui-tag: var(--sl-color-gray-5);--sl-search-cancel-space: 5rem}:root[data-theme=light] #starlight__search:where(.astro-fiow75a5){--pagefind-ui-tag: var(--sl-color-gray-6)}@media(min-width:50rem){#starlight__search:where(.astro-fiow75a5){--sl-search-cancel-space: 0px}dialog:where(.astro-fiow75a5){margin:4rem auto auto;border-radius:.5rem;width:90%;max-width:40rem;height:max-content;min-height:15rem;max-height:calc(100% - 8rem)}.dialog-frame:where(.astro-fiow75a5){padding:1.5rem}}}@layer starlight.core{.site-title:where(.astro-ltsvcsiu){align-items:center;gap:var(--sl-nav-gap);font-size:var(--sl-text-h4);font-weight:600;color:var(--sl-color-text-accent);text-decoration:none;white-space:nowrap;min-width:0}span:where(.astro-ltsvcsiu){overflow:hidden}img:where(.astro-ltsvcsiu){height:calc(var(--sl-nav-height) - 2 * var(--sl-nav-pad-y));width:auto;max-width:100%;object-fit:contain;object-position:0 50%}}@layer starlight.core{a:where(.astro-pwtbtf5p){color:var(--sl-color-text-accent);padding:.5em;margin:-.5em}a:where(.astro-pwtbtf5p):hover{opacity:.66}}@layer starlight.core{.header:where(.astro-wxcwk73d){display:flex;gap:var(--sl-nav-gap);justify-content:space-between;align-items:center;height:100%}.title-wrapper:where(.astro-wxcwk73d){overflow:clip;padding:.25rem;margin:-.25rem;min-width:0}.right-group:where(.astro-wxcwk73d),.social-icons:where(.astro-wxcwk73d){gap:1rem;align-items:center}.social-icons:where(.astro-wxcwk73d):after{content:"";height:2rem;border-inline-end:1px solid var(--sl-color-gray-5)}@media(min-width:50rem){:root[data-has-sidebar]{--__sidebar-pad: calc(2 * var(--sl-nav-pad-x))}:root:not([data-has-toc]){--__toc-width: 0rem}.header:where(.astro-wxcwk73d){--__sidebar-width: max(0rem, var(--sl-content-inline-start, 0rem) - var(--sl-nav-pad-x));--__main-column-fr: calc( ( 100% + var(--__sidebar-pad, 0rem) - var(--__toc-width, var(--sl-sidebar-width)) - (2 * var(--__toc-width, var(--sl-nav-pad-x))) - var(--sl-content-inline-start, 0rem) - var(--sl-content-width) ) / 2 );display:grid;grid-template-columns:minmax(calc(var(--__sidebar-width) + max(0rem,var(--__main-column-fr) - var(--sl-nav-gap))),auto) 1fr auto;align-content:center}}}@layer starlight.core{.hero:where(.astro-hjd4rimd){display:grid;align-items:center;gap:1rem;padding-bottom:1rem}.hero:where(.astro-hjd4rimd)>img:where(.astro-hjd4rimd),.hero:where(.astro-hjd4rimd)>.hero-html:where(.astro-hjd4rimd){object-fit:contain;width:min(70%,20rem);height:auto;margin-inline:auto}.stack:where(.astro-hjd4rimd){flex-direction:column;gap:clamp(1.5rem,calc(1.5rem + 1vw),2rem);text-align:center}.copy:where(.astro-hjd4rimd){flex-direction:column;gap:1rem;align-items:center}.copy:where(.astro-hjd4rimd)>:where(.astro-hjd4rimd){max-width:50ch}h1:where(.astro-hjd4rimd){font-size:clamp(var(--sl-text-3xl),calc(.25rem + 5vw),var(--sl-text-6xl));line-height:var(--sl-line-height-headings);font-weight:600;color:var(--sl-color-white)}.tagline:where(.astro-hjd4rimd){font-size:clamp(var(--sl-text-base),calc(.0625rem + 2vw),var(--sl-text-xl));color:var(--sl-color-gray-2)}.actions:where(.astro-hjd4rimd){gap:1rem 2rem;flex-wrap:wrap;justify-content:center}@media(min-width:50rem){.hero:where(.astro-hjd4rimd){grid-template-columns:7fr 4fr;gap:3%;padding-block:clamp(2.5rem,calc(1rem + 10vmin),10rem)}.hero:where(.astro-hjd4rimd)>img:where(.astro-hjd4rimd),.hero:where(.astro-hjd4rimd)>.hero-html:where(.astro-hjd4rimd){order:2;width:min(100%,25rem)}.stack:where(.astro-hjd4rimd){text-align:start}.copy:where(.astro-hjd4rimd){align-items:flex-start}.actions:where(.astro-hjd4rimd){justify-content:flex-start}}}@layer starlight.content{.sl-markdown-content :not(a,strong,em,del,span,input,code,br)+:not(a,strong,em,del,span,input,code,br,:where(.not-content *)){margin-top:var(--sl-content-gap-y)}.sl-markdown-content :not(a,strong,em,del,span,input,code,br)+:is(astro-island,astro-slot)>:not(a,strong,em,del,span,input,code,br,:where(.not-content *)):first-child{margin-top:var(--sl-content-gap-y)}.sl-markdown-content :not(h1,h2,h3,h4,h5,h6)+:is(h1,h2,h3,h4,h5,h6):not(:where(.not-content *)){margin-top:1.5em}.sl-markdown-content li+li:not(:where(.not-content *)),.sl-markdown-content dt+dt:not(:where(.not-content *)),.sl-markdown-content dt+dd:not(:where(.not-content *)),.sl-markdown-content dd+dd:not(:where(.not-content *)){margin-top:.25rem}.sl-markdown-content li:not(:where(.not-content *)){overflow-wrap:anywhere}.sl-markdown-content li>:is(:last-child:not(li,ul,ol,a,strong,em,del,span,input,code,br,script,:where(.not-content *)),:not(script):has(~script:last-child):not(:has(~:not(script)))){margin-bottom:1.25rem}.sl-markdown-content dt:not(:where(.not-content *)){font-weight:700}.sl-markdown-content dd:not(:where(.not-content *)){padding-inline-start:1rem}.sl-markdown-content :is(h1,h2,h3,h4,h5,h6):not(:where(.not-content *)){color:var(--sl-color-white);line-height:var(--sl-line-height-headings);font-weight:600}.sl-markdown-content :is(img,picture,video,canvas,svg,iframe):not(:where(.not-content *)){display:block;max-width:100%;height:auto}.sl-markdown-content h1:not(:where(.not-content *)){font-size:var(--sl-text-h1)}.sl-markdown-content h2:not(:where(.not-content *)){font-size:var(--sl-text-h2)}.sl-markdown-content h3:not(:where(.not-content *)){font-size:var(--sl-text-h3)}.sl-markdown-content h4:not(:where(.not-content *)){font-size:var(--sl-text-h4)}.sl-markdown-content h5:not(:where(.not-content *)){font-size:var(--sl-text-h5)}.sl-markdown-content h6:not(:where(.not-content *)){font-size:var(--sl-text-h6)}.sl-markdown-content a:not(:where(.not-content *)){color:var(--sl-color-text-accent)}.sl-markdown-content a:hover:not(:where(.not-content *)){color:var(--sl-color-white)}.sl-markdown-content code:not(:where(.not-content *)){background-color:var(--sl-color-bg-inline-code);margin-block:-.125rem;padding:.125rem .375rem;font-size:var(--sl-text-code-sm)}.sl-markdown-content :is(h1,h2,h3,h4,h5,h6) code{font-size:inherit}.sl-markdown-content pre:not(:where(.not-content *)){border:1px solid var(--sl-color-gray-5);padding:.75rem 1rem;font-size:var(--sl-text-code);tab-size:2}.sl-markdown-content pre code:not(:where(.not-content *)){all:unset;font-family:var(--__sl-font-mono)}.sl-markdown-content blockquote:not(:where(.not-content *)){border-inline-start:1px solid var(--sl-color-gray-5);padding-inline-start:1rem}.sl-markdown-content table:not(:where(.not-content *)){display:block;overflow:auto;border-spacing:0}.sl-markdown-content :is(th,td):not(:where(.not-content *)){border-bottom:1px solid var(--sl-color-gray-5);padding:.5rem 1rem;vertical-align:baseline}.sl-markdown-content :is(th:first-child,td:first-child):not(:where(.not-content *)){padding-inline-start:0}.sl-markdown-content :is(th:last-child,td:last-child):not(:where(.not-content *)){padding-inline-end:0}.sl-markdown-content th:not(:where(.not-content *)){color:var(--sl-color-white);font-weight:600}.sl-markdown-content th:not([align]):not(:where(.not-content *)){text-align:start}.sl-markdown-content .starlight-aside :is(th,td,hr,blockquote):not(:where(.not-content *)){border-color:var(--sl-color-gray-4)}@supports (border-color: color-mix(in srgb,var(--sl-color-asides-text-accent) 30%,transparent)){.sl-markdown-content .starlight-aside :is(th,td,hr,blockquote):not(:where(.not-content *)){border-color:color-mix(in srgb,var(--sl-color-asides-text-accent) 30%,transparent)}}@supports (border-color: color-mix(in srgb,var(--sl-color-asides-text-accent) 12%,transparent)){.sl-markdown-content .starlight-aside code:not(:where(.not-content *)){background-color:color-mix(in srgb,var(--sl-color-asides-text-accent) 12%,transparent)}}.sl-markdown-content hr:not(:where(.not-content *)){border:0;border-bottom:1px solid var(--sl-color-hairline)}.sl-markdown-content details:not(:where(.not-content *)){--sl-details-border-color: var(--sl-color-gray-5);--sl-details-border-color--hover: var(--sl-color-text-accent);border-inline-start:2px solid var(--sl-details-border-color);padding-inline-start:1rem}.sl-markdown-content details:not([open]):hover:not(:where(.not-content *)),.sl-markdown-content details:has(>summary:hover):not(:where(.not-content *)){border-color:var(--sl-details-border-color--hover)}.sl-markdown-content summary:not(:where(.not-content *)){color:var(--sl-color-white);cursor:pointer;display:block;font-weight:600;margin-inline-start:-.5rem;padding-inline-start:.5rem}.sl-markdown-content details[open]>summary:not(:where(.not-content *)){margin-bottom:1rem}.sl-markdown-content summary:not(:where(.not-content *))::marker,.sl-markdown-content summary:not(:where(.not-content *))::-webkit-details-marker{display:none}.sl-markdown-content summary:not(:where(.not-content *)):before{--sl-details-marker-size: 1.25rem;background-color:currentColor;content:"";display:inline-block;height:var(--sl-details-marker-size);width:var(--sl-details-marker-size);margin-inline:calc((var(--sl-details-marker-size) / 4) * -1) .25rem;vertical-align:middle;-webkit-mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='M14.8 11.3 10.6 7a1 1 0 1 0-1.4 1.5l3.5 3.5-3.5 3.5a1 1 0 0 0 0 1.4 1 1 0 0 0 .7.3 1 1 0 0 0 .7-.3l4.2-4.2a1 1 0 0 0 0-1.4Z'/%3E%3C/svg%3E%0A");mask-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='M14.8 11.3 10.6 7a1 1 0 1 0-1.4 1.5l3.5 3.5-3.5 3.5a1 1 0 0 0 0 1.4 1 1 0 0 0 .7.3 1 1 0 0 0 .7-.3l4.2-4.2a1 1 0 0 0 0-1.4Z'/%3E%3C/svg%3E%0A");-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat}@media(prefers-reduced-motion:no-preference){.sl-markdown-content summary:not(:where(.not-content *)):before{transition:transform .2s ease-in-out}}.sl-markdown-content details[open]>summary:not(:where(.not-content *)):before{transform:rotate(90deg)}[dir=rtl] .sl-markdown-content summary:not(:where(.not-content *)):before,.sl-markdown-content [dir=rtl] summary:not(:where(.not-content *)):before{transform:rotate(180deg)}.sl-markdown-content summary:not(:where(.not-content *)) p:only-child{display:inline}.sl-markdown-content .starlight-aside details:not(:where(.not-content *)){--sl-details-border-color: var(--sl-color-asides-border);--sl-details-border-color--hover: var(--sl-color-asides-text-accent)}}@layer starlight.core{[data-mobile-menu-expanded]{overflow:hidden}@media(min-width:50rem){[data-mobile-menu-expanded]{overflow:auto}}}@layer starlight.core{button:where(.astro-dhm62o35){position:fixed;top:calc((var(--sl-nav-height) - var(--sl-menu-button-size)) / 2);inset-inline-end:var(--sl-nav-pad-x);z-index:var(--sl-z-index-navbar);border:0;border-radius:50%;width:var(--sl-menu-button-size);height:var(--sl-menu-button-size);padding:.5rem;background-color:var(--sl-color-white);color:var(--sl-color-black);box-shadow:var(--sl-shadow-md);cursor:pointer}:where(.astro-dhm62o35)[aria-expanded=true] button:where(.astro-dhm62o35){background-color:var(--sl-color-gray-2);box-shadow:none}:where(.astro-dhm62o35)[aria-expanded=true] button:where(.astro-dhm62o35) .open-menu:where(.astro-dhm62o35){display:none}:where(.astro-dhm62o35):not([aria-expanded=true]) button:where(.astro-dhm62o35) .close-menu:where(.astro-dhm62o35){display:none}[data-theme=light] button:where(.astro-dhm62o35){background-color:var(--sl-color-black);color:var(--sl-color-white)}[data-theme=light] :where(.astro-dhm62o35)[aria-expanded=true] button:where(.astro-dhm62o35){background-color:var(--sl-color-gray-5)}}@layer starlight.core{.page:where(.astro-zcqk7bp6){flex-direction:column;min-height:100vh}.header:where(.astro-zcqk7bp6){z-index:var(--sl-z-index-navbar);position:fixed;inset-inline-start:0;inset-block-start:0;width:100%;height:var(--sl-nav-height);border-bottom:1px solid var(--sl-color-hairline-shade);padding:var(--sl-nav-pad-y) var(--sl-nav-pad-x);padding-inline-end:var(--sl-nav-pad-x);background-color:var(--sl-color-bg-nav)}[data-has-sidebar] .header:where(.astro-zcqk7bp6){padding-inline-end:calc(var(--sl-nav-gap) + var(--sl-nav-pad-x) + var(--sl-menu-button-size))}.sidebar-pane:where(.astro-zcqk7bp6){visibility:var(--sl-sidebar-visibility, hidden);position:fixed;z-index:var(--sl-z-index-menu);inset-block:var(--sl-nav-height) 0;inset-inline-start:0;width:100%;background-color:var(--sl-color-black);overflow-y:auto}[aria-expanded=true]~.sidebar-pane:where(.astro-zcqk7bp6){--sl-sidebar-visibility: visible}.sidebar-content:where(.astro-zcqk7bp6){height:100%;min-height:max-content;padding:1rem var(--sl-sidebar-pad-x) 0;flex-direction:column;gap:1rem}@media(min-width:50rem){.sidebar-content:where(.astro-zcqk7bp6):after{content:"";padding-bottom:1px}}.main-frame:where(.astro-zcqk7bp6){padding-top:calc(var(--sl-nav-height) + var(--sl-mobile-toc-height));padding-inline-start:var(--sl-content-inline-start)}@media(min-width:50rem){[data-has-sidebar] .header:where(.astro-zcqk7bp6){padding-inline-end:var(--sl-nav-pad-x)}.sidebar-pane:where(.astro-zcqk7bp6){--sl-sidebar-visibility: visible;width:var(--sl-sidebar-width);background-color:var(--sl-color-bg-sidebar);border-inline-end:1px solid var(--sl-color-hairline-shade)}}}@layer starlight.core{ul:where(.astro-i5cijz7l){padding:0;list-style:none}a:where(.astro-i5cijz7l){--pad-inline: .5rem;display:block;border-radius:.25rem;padding-block:.25rem;padding-inline:calc(1rem * var(--depth) + var(--pad-inline)) var(--pad-inline);line-height:1.25}a:where(.astro-i5cijz7l)[aria-current=true]{color:var(--sl-color-text-accent)}.isMobile:where(.astro-i5cijz7l) a:where(.astro-i5cijz7l){--pad-inline: 1rem;display:flex;justify-content:space-between;gap:var(--pad-inline);border-top:1px solid var(--sl-color-gray-6);border-radius:0;padding-block:.5rem;color:var(--sl-color-text);font-size:var(--sl-text-sm);text-decoration:none;outline-offset:var(--sl-outline-offset-inside)}.isMobile:where(.astro-i5cijz7l):first-child>li:where(.astro-i5cijz7l):first-child>a:where(.astro-i5cijz7l){border-top:0}.isMobile:where(.astro-i5cijz7l) a:where(.astro-i5cijz7l)[aria-current=true],.isMobile:where(.astro-i5cijz7l) a:where(.astro-i5cijz7l)[aria-current=true]:hover,.isMobile:where(.astro-i5cijz7l) a:where(.astro-i5cijz7l)[aria-current=true]:focus{color:var(--sl-color-white);background-color:unset}.isMobile:where(.astro-i5cijz7l) a:where(.astro-i5cijz7l)[aria-current=true]:after{content:"";width:1rem;background-color:var(--sl-color-text-accent);-webkit-mask-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0naHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmcnIHZpZXdCb3g9JzAgMCAxNCAxNCc+PHBhdGggZD0nTTEwLjkxNCA0LjIwNmEuNTgzLjU4MyAwIDAgMC0uODI4IDBMNS43NCA4LjU1NyAzLjkxNCA2LjcyNmEuNTk2LjU5NiAwIDAgMC0uODI4Ljg1N2wyLjI0IDIuMjRhLjU4My41ODMgMCAwIDAgLjgyOCAwbDQuNzYtNC43NmEuNTgzLjU4MyAwIDAgMCAwLS44NTdaJy8+PC9zdmc+Cg==);mask-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0naHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmcnIHZpZXdCb3g9JzAgMCAxNCAxNCc+PHBhdGggZD0nTTEwLjkxNCA0LjIwNmEuNTgzLjU4MyAwIDAgMC0uODI4IDBMNS43NCA4LjU1NyAzLjkxNCA2LjcyNmEuNTk2LjU5NiAwIDAgMC0uODI4Ljg1N2wyLjI0IDIuMjRhLjU4My41ODMgMCAwIDAgLjgyOCAwbDQuNzYtNC43NmEuNTgzLjU4MyAwIDAgMCAwLS44NTdaJy8+PC9zdmc+Cg==);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;flex-shrink:0}}@layer starlight.core{nav:where(.astro-khf2tsb6){position:fixed;z-index:var(--sl-z-index-toc);top:calc(var(--sl-nav-height) - 1px);inset-inline:0;border-top:1px solid var(--sl-color-gray-5);background-color:var(--sl-color-bg-nav)}@media(min-width:50rem){nav:where(.astro-khf2tsb6){inset-inline-start:var(--sl-content-inline-start, 0)}}summary:where(.astro-khf2tsb6){gap:.5rem;align-items:center;height:var(--sl-mobile-toc-height);border-bottom:1px solid var(--sl-color-hairline-shade);padding:.5rem 1rem;font-size:var(--sl-text-xs);outline-offset:var(--sl-outline-offset-inside)}summary:where(.astro-khf2tsb6)::marker,summary:where(.astro-khf2tsb6)::-webkit-details-marker{display:none}.toggle:where(.astro-khf2tsb6){flex-shrink:0;gap:1rem;align-items:center;justify-content:space-between;border:1px solid var(--sl-color-gray-5);border-radius:.5rem;padding-block:.5rem;padding-inline-start:.75rem;padding-inline-end:.5rem;line-height:1;background-color:var(--sl-color-black);user-select:none;cursor:pointer}details:where(.astro-khf2tsb6)[open] .toggle:where(.astro-khf2tsb6){color:var(--sl-color-white);border-color:var(--sl-color-accent)}details:where(.astro-khf2tsb6) .toggle:where(.astro-khf2tsb6):hover{color:var(--sl-color-white);border-color:var(--sl-color-gray-2)}[dir=rtl] .caret:where(.astro-khf2tsb6){transform:rotate(180deg)}details:where(.astro-khf2tsb6)[open] .caret:where(.astro-khf2tsb6){transform:rotate(90deg)}.display-current:where(.astro-khf2tsb6){white-space:nowrap;text-overflow:ellipsis;overflow:hidden;color:var(--sl-color-white)}.dropdown:where(.astro-khf2tsb6){--border-top: 1px;margin-top:calc(-1 * var(--border-top));border:var(--border-top) solid var(--sl-color-gray-6);border-top-color:var(--sl-color-hairline-shade);max-height:calc(85vh - var(--sl-nav-height) - var(--sl-mobile-toc-height));overflow-y:auto;background-color:var(--sl-color-black);box-shadow:var(--sl-shadow-md);overscroll-behavior:contain}}@layer starlight.core{.right-sidebar-panel:where(.astro-2mhlzuva){padding:1rem var(--sl-sidebar-pad-x)}.sl-container:where(.astro-2mhlzuva){width:calc(var(--sl-sidebar-width) - 2 * var(--sl-sidebar-pad-x))}.right-sidebar-panel:where(.astro-2mhlzuva) h2{color:var(--sl-color-white);font-size:var(--sl-text-h5);font-weight:600;line-height:var(--sl-line-height-headings);margin-bottom:.5rem}.right-sidebar-panel:where(.astro-2mhlzuva) :where(a){display:block;font-size:var(--sl-text-xs);text-decoration:none;color:var(--sl-color-gray-3);overflow-wrap:anywhere}.right-sidebar-panel:where(.astro-2mhlzuva) :where(a):hover{color:var(--sl-color-white)}@media(min-width:72rem){.sl-container:where(.astro-2mhlzuva){max-width:calc(((100vw - var(--sl-sidebar-width) - 2 * var(--sl-content-pad-x) - 2 * var(--sl-sidebar-pad-x)) * .25))}}}@layer starlight.core{h1:where(.astro-emuweoj6){margin-top:1rem;font-size:var(--sl-text-h1);line-height:var(--sl-line-height-headings);font-weight:600;color:var(--sl-color-white)}}@layer starlight.core{.social-icons:where(.astro-dwtsaaho){display:flex;margin-inline-end:auto;gap:1rem;align-items:center;padding-block:1rem}.social-icons:where(.astro-dwtsaaho):empty{display:none}.mobile-preferences:where(.astro-dwtsaaho){justify-content:space-between;flex-wrap:wrap;border-top:1px solid var(--sl-color-gray-6);column-gap:1rem;padding:.5rem 0}}@layer starlight.core{sl-sidebar-state-persist:where(.astro-lze7y3gz){display:contents}}@layer starlight.core{ul:where(.astro-mxyqbc63){--sl-sidebar-item-padding-inline: .5rem;list-style:none;padding:0}li:where(.astro-mxyqbc63){overflow-wrap:anywhere}ul:where(.astro-mxyqbc63) ul:where(.astro-mxyqbc63) li:where(.astro-mxyqbc63){margin-inline-start:var(--sl-sidebar-item-padding-inline);border-inline-start:1px solid var(--sl-color-hairline-light);padding-inline-start:var(--sl-sidebar-item-padding-inline)}.large:where(.astro-mxyqbc63){font-size:var(--sl-text-lg);font-weight:600;color:var(--sl-color-white)}.top-level:where(.astro-mxyqbc63)>li:where(.astro-mxyqbc63)+li:where(.astro-mxyqbc63){margin-top:.75rem}summary:where(.astro-mxyqbc63){display:flex;align-items:center;justify-content:space-between;padding:.2em var(--sl-sidebar-item-padding-inline);line-height:1.4;cursor:pointer;user-select:none}summary:where(.astro-mxyqbc63)::marker,summary:where(.astro-mxyqbc63)::-webkit-details-marker{display:none}.caret:where(.astro-mxyqbc63){transition:transform .2s ease-in-out;flex-shrink:0}[dir=rtl] .caret:where(.astro-mxyqbc63){transform:rotate(180deg)}:where(.astro-mxyqbc63)[open]>summary:where(.astro-mxyqbc63) .caret:where(.astro-mxyqbc63){transform:rotate(90deg)}a:where(.astro-mxyqbc63){display:block;border-radius:.25rem;text-decoration:none;color:var(--sl-color-gray-2);padding:.3em var(--sl-sidebar-item-padding-inline);line-height:1.4}a:where(.astro-mxyqbc63):hover,a:where(.astro-mxyqbc63):focus{color:var(--sl-color-white)}:where(.astro-mxyqbc63)[aria-current=page],:where(.astro-mxyqbc63)[aria-current=page]:hover,:where(.astro-mxyqbc63)[aria-current=page]:focus{font-weight:600;color:var(--sl-color-text-invert);background-color:var(--sl-color-text-accent)}a:where(.astro-mxyqbc63)>:where(.astro-mxyqbc63):not(:last-child),.group-label:where(.astro-mxyqbc63)>:where(.astro-mxyqbc63):not(:last-child){margin-inline-end:.25em}@media(min-width:50rem){.top-level:where(.astro-mxyqbc63)>li:where(.astro-mxyqbc63)+li:where(.astro-mxyqbc63){margin-top:.5rem}.large:where(.astro-mxyqbc63){font-size:var(--sl-text-base)}a:where(.astro-mxyqbc63){font-size:var(--sl-text-sm)}}}@layer starlight.core{a:where(.astro-tjlup7uw){clip:rect(0,0,0,0);position:fixed;top:.75rem;inset-inline-start:.75rem}a:where(.astro-tjlup7uw):focus{clip:unset;z-index:var(--sl-z-index-skiplink);display:block;padding:.5rem 1rem;text-decoration:none;color:var(--sl-color-text-invert);background-color:var(--sl-color-text-accent);box-shadow:var(--sl-shadow-lg)}}@layer starlight.core{.main-pane:where(.astro-mdmfzqxa){isolation:isolate}@media(min-width:72rem){.right-sidebar-container:where(.astro-mdmfzqxa){order:2;position:relative;width:calc(var(--sl-sidebar-width) + (100% - var(--sl-content-width) - var(--sl-sidebar-width)) / 2)}.right-sidebar:where(.astro-mdmfzqxa){position:fixed;top:0;border-inline-start:1px solid var(--sl-color-hairline);padding-top:var(--sl-nav-height);width:100%;height:100vh;overflow-y:auto;scrollbar-width:none}.main-pane:where(.astro-mdmfzqxa){width:100%}[data-has-sidebar][data-has-toc] .main-pane:where(.astro-mdmfzqxa){--sl-content-margin-inline: auto 0;order:1;width:calc(var(--sl-content-width) + (100% - var(--sl-content-width) - var(--sl-sidebar-width)) / 2)}}}html:not([data-has-toc]){--sl-mobile-toc-height: 0rem}html:not([data-has-sidebar]){--sl-content-width: 67.5rem}html{scroll-padding-top:calc(1.5rem + var(--sl-nav-height) + var(--sl-mobile-toc-height))}main:where(.astro-mrdytgmm){padding:var(--sl-main-pad)}@media(min-width:50em){:where(.astro-mrdytgmm)[data-has-sidebar]{--sl-content-inline-start: var(--sl-sidebar-width)}}@media(min-width:72em){html{scroll-padding-top:calc(1.5rem + var(--sl-nav-height))}} diff --git a/_astro/ui-core.Bc4QPfeb.js b/_astro/ui-core.CK7w4eC0.js similarity index 99% rename from _astro/ui-core.Bc4QPfeb.js rename to _astro/ui-core.CK7w4eC0.js index 29b57306..ae0b96ee 100644 --- a/_astro/ui-core.Bc4QPfeb.js +++ b/_astro/ui-core.CK7w4eC0.js @@ -1,2 +1,2 @@ -import{_ as ys}from"./Search.astro_astro_type_script_index_0_lang.Deq9_OSH.js";var ws=Object.defineProperty,F=(e,u)=>{for(var t in u)ws(e,t,{get:u[t],enumerable:!0})};function P(){}function du(e){return e()}function we(){return Object.create(null)}function W(e){e.forEach(du)}function Cu(e){return typeof e=="function"}function Ee(e,u){return e!=e?u==u:e!==u||e&&typeof e=="object"||typeof e=="function"}var oe;function ce(e,u){return oe||(oe=document.createElement("a")),oe.href=u,e===oe.href}function zs(e){return Object.keys(e).length===0}function R(e,u){e.appendChild(u)}function k(e,u,t){e.insertBefore(u,t||null)}function p(e){e.parentNode&&e.parentNode.removeChild(e)}function ie(e,u){for(let t=0;te.removeEventListener(u,t,r)}function C(e,u,t){t==null?e.removeAttribute(u):e.getAttribute(u)!==t&&e.setAttribute(u,t)}function Os(e){return Array.from(e.childNodes)}function j(e,u){u=""+u,e.data!==u&&(e.data=u)}function ze(e,u){e.value=u??""}function K(e,u,t){e.classList[t?"add":"remove"](u)}var Us=class{constructor(e=!1){this.is_svg=!1,this.is_svg=e,this.e=this.n=null}c(e){this.h(e)}m(e,u,t=null){this.e||(this.is_svg?this.e=js(u.nodeName):this.e=v(u.nodeType===11?"TEMPLATE":u.nodeName),this.t=u.tagName!=="TEMPLATE"?u:u.content,this.c(e)),this.i(t)}h(e){this.e.innerHTML=e,this.n=Array.from(this.e.nodeName==="TEMPLATE"?this.e.content.childNodes:this.e.childNodes)}i(e){for(let u=0;ue.indexOf(r)===-1?u.push(r):t.push(r)),t.forEach(r=>r()),$=u}var _e=new Set,J;function le(){J={r:0,c:[],p:J}}function ne(){J.r||W(J.c),J=J.p}function z(e,u){e&&e.i&&(_e.delete(e),e.i(u))}function U(e,u,t,r){if(e&&e.o){if(_e.has(e))return;_e.add(e),J.c.push(()=>{_e.delete(e),r&&(t&&e.d(1),r())}),e.o(u)}else r&&r()}function Gs(e,u){U(e,1,1,()=>{u.delete(e.key)})}function Js(e,u,t,r,s,a,l,n,i,E,_,f){let d=e.length,h=a.length,o=d;const c={};for(;o--;)c[e[o].key]=o;const g=[],A=new Map,B=new Map,T=[];for(o=h;o--;){const b=f(s,a,o),H=t(b);let y=l.get(H);y?T.push(()=>y.p(b,u)):(y=E(H,b),y.c()),A.set(H,g[o]=y),H in c&&B.set(H,Math.abs(o-c[H]))}const D=new Set,q=new Set;function L(b){z(b,1),b.m(n,_),l.set(b.key,b),_=b.first,h--}for(;d&&h;){const b=g[h-1],H=e[d-1],y=b.key,x=H.key;b===H?(_=b.first,d--,h--):A.has(x)?!l.has(y)||D.has(y)?L(b):q.has(x)?d--:B.get(y)>B.get(x)?(q.add(y),L(b)):(D.add(x),d--):(i(H,l),d--)}for(;d--;){const b=e[d];A.has(b.key)||i(b,l)}for(;h;)L(g[h-1]);return W(T),g}function Ws(e,u,t){const r=e.$$.props[u];r!==void 0&&(e.$$.bound[r]=t,t(e.$$.ctx[r]))}function Fe(e){e&&e.c()}function fe(e,u,t,r){const{fragment:s,after_update:a}=e.$$;s&&s.m(u,t),r||pe(()=>{const l=e.$$.on_mount.map(du).filter(Cu);e.$$.on_destroy?e.$$.on_destroy.push(...l):W(l),e.$$.on_mount=[]}),a.forEach(pe)}function he(e,u){const t=e.$$;t.fragment!==null&&(Ks(t.after_update),W(t.on_destroy),t.fragment&&t.fragment.d(u),t.on_destroy=t.fragment=null,t.ctx=[])}function Zs(e,u){e.$$.dirty[0]===-1&&(X.push(e),xs(),e.$$.dirty.fill(0)),e.$$.dirty[u/31|0]|=1<{const o=h.length?h[0]:d;return E.ctx&&s(E.ctx[f],E.ctx[f]=o)&&(!E.skip_bound&&E.bound[f]&&E.bound[f](o),_&&Zs(e,f)),d}):[],E.update(),_=!0,W(E.before_update),E.fragment=r?r(E.ctx):!1,u.target){if(u.hydrate){const f=Os(u.target);E.fragment&&E.fragment.l(f),f.forEach(p)}else E.fragment&&E.fragment.c();u.intro&&z(e.$$.fragment),fe(e,u.target,u.anchor,u.customElement),gu()}re(i)}var Ce=class{$destroy(){he(this,1),this.$destroy=P}$on(e,u){if(!Cu(u))return P;const t=this.$$.callbacks[e]||(this.$$.callbacks[e]=[]);return t.push(u),()=>{const r=t.indexOf(u);r!==-1&&t.splice(r,1)}}$set(e){this.$$set&&!zs(e)&&(this.$$.skip_bound=!0,this.$$set(e),this.$$.skip_bound=!1)}};function O(e){const u=typeof e=="string"?e.charCodeAt(0):e;return u>=97&&u<=122||u>=65&&u<=90}function Q(e){const u=typeof e=="string"?e.charCodeAt(0):e;return u>=48&&u<=57}function V(e){return O(e)||Q(e)}var Ys=["art-lojban","cel-gaulish","no-bok","no-nyn","zh-guoyu","zh-hakka","zh-min","zh-min-nan","zh-xiang"],je={"en-gb-oed":"en-GB-oxendict","i-ami":"ami","i-bnn":"bnn","i-default":null,"i-enochian":null,"i-hak":"hak","i-klingon":"tlh","i-lux":"lb","i-mingo":null,"i-navajo":"nv","i-pwn":"pwn","i-tao":"tao","i-tay":"tay","i-tsu":"tsu","sgn-be-fr":"sfb","sgn-be-nl":"vgt","sgn-ch-de":"sgg","art-lojban":"jbo","cel-gaulish":null,"no-bok":"nb","no-nyn":"nn","zh-guoyu":"cmn","zh-hakka":"hak","zh-min":null,"zh-min-nan":"nan","zh-xiang":"hsn"},Xs={}.hasOwnProperty;function Au(e,u={}){const t=Oe(),r=String(e),s=r.toLowerCase();let a=0;if(e==null)throw new Error("Expected string, got `"+e+"`");if(Xs.call(je,s)){const n=je[s];return(u.normalize===void 0||u.normalize===null||u.normalize)&&typeof n=="string"?Au(n):(t[Ys.includes(s)?"regular":"irregular"]=r,t)}for(;O(s.charCodeAt(a))&&a<9;)a++;if(a>1&&a<9){if(t.language=r.slice(0,a),a<4){let n=0;for(;s.charCodeAt(a)===45&&O(s.charCodeAt(a+1))&&O(s.charCodeAt(a+2))&&O(s.charCodeAt(a+3))&&!O(s.charCodeAt(a+4));){if(n>2)return l(a,3,"Too many extended language subtags, expected at most 3 subtags");t.extendedLanguageSubtags.push(r.slice(a+1,a+4)),a+=4,n++}}for(s.charCodeAt(a)===45&&O(s.charCodeAt(a+1))&&O(s.charCodeAt(a+2))&&O(s.charCodeAt(a+3))&&O(s.charCodeAt(a+4))&&!O(s.charCodeAt(a+5))&&(t.script=r.slice(a+1,a+5),a+=5),s.charCodeAt(a)===45&&(O(s.charCodeAt(a+1))&&O(s.charCodeAt(a+2))&&!O(s.charCodeAt(a+3))?(t.region=r.slice(a+1,a+3),a+=3):Q(s.charCodeAt(a+1))&&Q(s.charCodeAt(a+2))&&Q(s.charCodeAt(a+3))&&!Q(s.charCodeAt(a+4))&&(t.region=r.slice(a+1,a+4),a+=4));s.charCodeAt(a)===45;){const n=a+1;let i=n;for(;V(s.charCodeAt(i));){if(i-n>7)return l(i,1,"Too long variant, expected at most 8 characters");i++}if(i-n>4||i-n>3&&Q(s.charCodeAt(n)))t.variants.push(r.slice(n,i)),a=i;else break}for(;s.charCodeAt(a)===45&&!(s.charCodeAt(a+1)===120||!V(s.charCodeAt(a+1))||s.charCodeAt(a+2)!==45||!V(s.charCodeAt(a+3)));){let n=a+2,i=0;for(;s.charCodeAt(n)===45&&V(s.charCodeAt(n+1))&&V(s.charCodeAt(n+2));){const E=n+1;for(n=E+2,i++;V(s.charCodeAt(n));){if(n-E>7)return l(n,2,"Too long extension, expected at most 8 characters");n++}}if(!i)return l(n,4,"Empty extension, extensions must have at least 2 characters of content");t.extensions.push({singleton:r.charAt(a+1),extensions:r.slice(a+3,n).split("-")}),a=n}}else a=0;if(a===0&&s.charCodeAt(a)===120||s.charCodeAt(a)===45&&s.charCodeAt(a+1)===120){a=a?a+2:1;let n=a;for(;s.charCodeAt(n)===45&&V(s.charCodeAt(n+1));){const i=a+1;for(n=i;V(s.charCodeAt(n));){if(n-i>7)return l(n,5,"Too long private-use area, expected at most 8 characters");n++}t.privateuse.push(r.slice(a+1,n)),a=n}}if(a!==r.length)return l(a,6,"Found superfluous content after tag");return t;function l(n,i,E){return u.warning&&u.warning(E,i,n),u.forgiving?t:Oe()}}function Oe(){return{language:null,extendedLanguageSubtags:[],script:null,region:null,variants:[],extensions:[],privateuse:[],irregular:null,regular:null}}function Ue(e,u,t){const r=e.slice();return r[8]=u[t][0],r[9]=u[t][1],r}function Qs(e){let u,t,r,s,a,l=e[0]&&Ie();return{c(){l&&l.c(),u=M(),t=v("div"),r=v("p"),r.textContent=`${e[3](30)}`,s=M(),a=v("p"),a.textContent=`${e[3](40)}`,C(r,"class","pagefind-ui__result-title pagefind-ui__loading svelte-j9e30"),C(a,"class","pagefind-ui__result-excerpt pagefind-ui__loading svelte-j9e30"),C(t,"class","pagefind-ui__result-inner svelte-j9e30")},m(n,i){l&&l.m(n,i),k(n,u,i),k(n,t,i),R(t,r),R(t,s),R(t,a)},p(n,i){n[0]?l||(l=Ie(),l.c(),l.m(u.parentNode,u)):l&&(l.d(1),l=null)},d(n){l&&l.d(n),n&&p(u),n&&p(t)}}}function $s(e){let u,t,r,s,a=e[1].meta?.title+"",l,n,i,E,_=e[1].excerpt+"",f,d=e[0]&&Pe(e),h=e[2].length&&xe(e);return{c(){d&&d.c(),u=M(),t=v("div"),r=v("p"),s=v("a"),l=S(a),i=M(),E=v("p"),f=M(),h&&h.c(),C(s,"class","pagefind-ui__result-link svelte-j9e30"),C(s,"href",n=e[1].meta?.url||e[1].url),C(r,"class","pagefind-ui__result-title svelte-j9e30"),C(E,"class","pagefind-ui__result-excerpt svelte-j9e30"),C(t,"class","pagefind-ui__result-inner svelte-j9e30")},m(o,c){d&&d.m(o,c),k(o,u,c),k(o,t,c),R(t,r),R(r,s),R(s,l),R(t,i),R(t,E),E.innerHTML=_,R(t,f),h&&h.m(t,null)},p(o,c){o[0]?d?d.p(o,c):(d=Pe(o),d.c(),d.m(u.parentNode,u)):d&&(d.d(1),d=null),c&2&&a!==(a=o[1].meta?.title+"")&&j(l,a),c&2&&n!==(n=o[1].meta?.url||o[1].url)&&C(s,"href",n),c&2&&_!==(_=o[1].excerpt+"")&&(E.innerHTML=_),o[2].length?h?h.p(o,c):(h=xe(o),h.c(),h.m(t,null)):h&&(h.d(1),h=null)},d(o){d&&d.d(o),o&&p(u),o&&p(t),h&&h.d()}}}function Ie(e){let u;return{c(){u=v("div"),C(u,"class","pagefind-ui__result-thumb pagefind-ui__loading svelte-j9e30")},m(t,r){k(t,u,r)},d(t){t&&p(u)}}}function Pe(e){let u,t=e[1].meta.image&&Le(e);return{c(){u=v("div"),t&&t.c(),C(u,"class","pagefind-ui__result-thumb svelte-j9e30")},m(r,s){k(r,u,s),t&&t.m(u,null)},p(r,s){r[1].meta.image?t?t.p(r,s):(t=Le(r),t.c(),t.m(u,null)):t&&(t.d(1),t=null)},d(r){r&&p(u),t&&t.d()}}}function Le(e){let u,t,r;return{c(){u=v("img"),C(u,"class","pagefind-ui__result-image svelte-j9e30"),ce(u.src,t=e[1].meta?.image)||C(u,"src",t),C(u,"alt",r=e[1].meta?.image_alt||e[1].meta?.title)},m(s,a){k(s,u,a)},p(s,a){a&2&&!ce(u.src,t=s[1].meta?.image)&&C(u,"src",t),a&2&&r!==(r=s[1].meta?.image_alt||s[1].meta?.title)&&C(u,"alt",r)},d(s){s&&p(u)}}}function xe(e){let u,t=e[2],r=[];for(let s=0;se.toLocaleUpperCase();function ua(e,u,t){let{show_images:r=!0}=u,{process_result:s=null}=u,{result:a={data:async()=>{}}}=u;const l=["title","image","image_alt","url"];let n,i=[];const E=async f=>{t(1,n=await f.data()),t(1,n=s?.(n)??n),t(2,i=Object.entries(n.meta).filter(([d])=>!l.includes(d)))},_=(f=30)=>". ".repeat(Math.floor(10+Math.random()*f));return e.$$set=f=>{"show_images"in f&&t(0,r=f.show_images),"process_result"in f&&t(4,s=f.process_result),"result"in f&&t(5,a=f.result)},e.$$.update=()=>{e.$$.dirty&32&&E(a)},[r,n,i,_,s,a]}var ta=class extends Ce{constructor(e){super(),de(this,e,ua,ea,Ee,{show_images:0,process_result:4,result:5})}},ra=ta;function Ke(e,u,t){const r=e.slice();return r[11]=u[t][0],r[12]=u[t][1],r}function Ge(e,u,t){const r=e.slice();return r[15]=u[t],r}function sa(e){let u,t,r,s,a,l=e[0]&&Je();return{c(){l&&l.c(),u=M(),t=v("div"),r=v("p"),r.textContent=`${e[5](30)}`,s=M(),a=v("p"),a.textContent=`${e[5](40)}`,C(r,"class","pagefind-ui__result-title pagefind-ui__loading svelte-4xnkmf"),C(a,"class","pagefind-ui__result-excerpt pagefind-ui__loading svelte-4xnkmf"),C(t,"class","pagefind-ui__result-inner svelte-4xnkmf")},m(n,i){l&&l.m(n,i),k(n,u,i),k(n,t,i),R(t,r),R(t,s),R(t,a)},p(n,i){n[0]?l||(l=Je(),l.c(),l.m(u.parentNode,u)):l&&(l.d(1),l=null)},d(n){l&&l.d(n),n&&p(u),n&&p(t)}}}function aa(e){let u,t,r,s,a=e[1].meta?.title+"",l,n,i,E,_,f=e[0]&&We(e),d=e[4]&&Ye(e),h=e[3],o=[];for(let g=0;ge.toLocaleUpperCase();function na(e,u,t){let{show_images:r=!0}=u,{process_result:s=null}=u,{result:a={data:async()=>{}}}=u;const l=["title","image","image_alt","url"];let n,i=[],E=[],_=!1;const f=(o,c)=>{if(o.length<=c)return o;const g=[...o].sort((A,B)=>B.locations.length-A.locations.length).slice(0,3).map(A=>A.url);return o.filter(A=>g.includes(A.url))},d=async o=>{t(1,n=await o.data()),t(1,n=s?.(n)??n),t(2,i=Object.entries(n.meta).filter(([c])=>!l.includes(c))),Array.isArray(n.sub_results)&&(t(4,_=n.sub_results?.[0]?.url===(n.meta?.url||n.url)),_?t(3,E=f(n.sub_results.slice(1),3)):t(3,E=f([...n.sub_results],3)))},h=(o=30)=>". ".repeat(Math.floor(10+Math.random()*o));return e.$$set=o=>{"show_images"in o&&t(0,r=o.show_images),"process_result"in o&&t(6,s=o.process_result),"result"in o&&t(7,a=o.result)},e.$$.update=()=>{e.$$.dirty&128&&d(a)},[r,n,i,E,_,h,s,a]}var ia=class extends Ce{constructor(e){super(),de(this,e,na,la,Ee,{show_images:0,process_result:6,result:7})}},oa=ia;function uu(e,u,t){const r=e.slice();return r[10]=u[t][0],r[11]=u[t][1],r[12]=u,r[13]=t,r}function tu(e,u,t){const r=e.slice();return r[14]=u[t][0],r[15]=u[t][1],r[16]=u,r[17]=t,r}function ru(e){let u,t,r=e[4]("filters_label",e[5],e[6])+"",s,a,l=Object.entries(e[1]),n=[];for(let i=0;ie.toLocaleUpperCase(),iu=e=>e.toLowerCase();function ca(e,u,t){let{available_filters:r=null}=u,{show_empty_filters:s=!0}=u,{open_filters:a=[]}=u,{translate:l=()=>""}=u,{automatic_translations:n={}}=u,{translations:i={}}=u,{selected_filters:E={}}=u,_=!1,f=!1;function d(h,o){E[`${h}:${o}`]=this.checked,t(0,E)}return e.$$set=h=>{"available_filters"in h&&t(1,r=h.available_filters),"show_empty_filters"in h&&t(2,s=h.show_empty_filters),"open_filters"in h&&t(3,a=h.open_filters),"translate"in h&&t(4,l=h.translate),"automatic_translations"in h&&t(5,n=h.automatic_translations),"translations"in h&&t(6,i=h.translations),"selected_filters"in h&&t(0,E=h.selected_filters)},e.$$.update=()=>{if(e.$$.dirty&258&&r&&!_){t(8,_=!0);let h=Object.entries(r||{});h.length===1&&Object.entries(h[0][1])?.length<=6&&t(7,f=!0)}},[E,r,s,a,l,n,i,f,_,d]}var Ea=class extends Ce{constructor(e){super(),de(this,e,ca,_a,Ee,{available_filters:1,show_empty_filters:2,open_filters:3,translate:4,automatic_translations:5,translations:6,selected_filters:0})}},fa=Ea,Ru={};F(Ru,{comments:()=>vu,default:()=>ha,direction:()=>Tu,strings:()=>pu,thanks_to:()=>Bu});var Bu="Jan Claasen ",vu="",Tu="ltr",pu={placeholder:"Soek",clear_search:"Opruim",load_more:"Laai nog resultate",search_label:"Soek hierdie webwerf",filters_label:"Filters",zero_results:"Geen resultate vir [SEARCH_TERM]",many_results:"[COUNT] resultate vir [SEARCH_TERM]",one_result:"[COUNT] resultate vir [SEARCH_TERM]",alt_search:"Geen resultate vir [SEARCH_TERM]. Toon resultate vir [DIFFERENT_TERM] in plaas daarvan",search_suggestion:"Geen resultate vir [SEARCH_TERM]. Probeer eerder een van die volgende terme:",searching:"Soek vir [SEARCH_TERM]"},ha={thanks_to:Bu,comments:vu,direction:Tu,strings:pu},ku={};F(ku,{comments:()=>Du,default:()=>da,direction:()=>bu,strings:()=>Mu,thanks_to:()=>Fu});var Fu="Jermanuts",Du="",bu="rtl",Mu={placeholder:"بحث",clear_search:"امسح",load_more:"حمِّل المزيد من النتائج",search_label:"ابحث في هذا الموقع",filters_label:"تصفيات",zero_results:"لا توجد نتائج ل [SEARCH_TERM]",many_results:"[COUNT] نتائج ل [SEARCH_TERM]",one_result:"[COUNT] نتيجة ل [SEARCH_TERM]",alt_search:"لا توجد نتائج ل [SEARCH_TERM]. يعرض النتائج ل [DIFFERENT_TERM] بدلاً من ذلك",search_suggestion:"لا توجد نتائج ل [SEARCH_TERM]. جرب أحد عمليات البحث التالية:",searching:"يبحث عن [SEARCH_TERM]..."},da={thanks_to:Fu,comments:Du,direction:bu,strings:Mu},Su={};F(Su,{comments:()=>Nu,default:()=>Ca,direction:()=>yu,strings:()=>wu,thanks_to:()=>Hu});var Hu="Maruf Alom ",Nu="",yu="ltr",wu={placeholder:"অনুসন্ধান করুন",clear_search:"মুছে ফেলুন",load_more:"আরো ফলাফল দেখুন",search_label:"এই ওয়েবসাইটে অনুসন্ধান করুন",filters_label:"ফিল্টার",zero_results:"[SEARCH_TERM] এর জন্য কিছু খুঁজে পাওয়া যায়নি",many_results:"[COUNT]-টি ফলাফল পাওয়া গিয়েছে [SEARCH_TERM] এর জন্য",one_result:"[COUNT]-টি ফলাফল পাওয়া গিয়েছে [SEARCH_TERM] এর জন্য",alt_search:"কোন কিছু খুঁজে পাওয়া যায়নি [SEARCH_TERM] এর জন্য. পরিবর্তে [DIFFERENT_TERM] এর জন্য দেখানো হচ্ছে",search_suggestion:"কোন কিছু খুঁজে পাওয়া যায়নি [SEARCH_TERM] এর বিষয়ে. নিন্মের বিষয়বস্তু খুঁজে দেখুন:",searching:"অনুসন্ধান চলছে [SEARCH_TERM]..."},Ca={thanks_to:Hu,comments:Nu,direction:yu,strings:wu},zu={};F(zu,{comments:()=>Ou,default:()=>ma,direction:()=>Uu,strings:()=>Iu,thanks_to:()=>ju});var ju="Pablo Villaverde ",Ou="",Uu="ltr",Iu={placeholder:"Cerca",clear_search:"Netejar",load_more:"Veure més resultats",search_label:"Cerca en aquest lloc",filters_label:"Filtres",zero_results:"No es van trobar resultats per [SEARCH_TERM]",many_results:"[COUNT] resultats trobats per [SEARCH_TERM]",one_result:"[COUNT] resultat trobat per [SEARCH_TERM]",alt_search:"No es van trobar resultats per [SEARCH_TERM]. Mostrant al seu lloc resultats per [DIFFERENT_TERM]",search_suggestion:"No es van trobar resultats per [SEARCH_TERM]. Proveu una de les cerques següents:",searching:"Cercant [SEARCH_TERM]..."},ma={thanks_to:ju,comments:Ou,direction:Uu,strings:Iu},Pu={};F(Pu,{comments:()=>xu,default:()=>ga,direction:()=>qu,strings:()=>Vu,thanks_to:()=>Lu});var Lu="Dalibor Hon ",xu="",qu="ltr",Vu={placeholder:"Hledat",clear_search:"Smazat",load_more:"Načíst další výsledky",search_label:"Prohledat tuto stránku",filters_label:"Filtry",zero_results:"Žádné výsledky pro [SEARCH_TERM]",many_results:"[COUNT] výsledků pro [SEARCH_TERM]",one_result:"[COUNT] výsledek pro [SEARCH_TERM]",alt_search:"Žádné výsledky pro [SEARCH_TERM]. Zobrazují se výsledky pro [DIFFERENT_TERM]",search_suggestion:"Žádné výsledky pro [SEARCH_TERM]. Související výsledky hledání:",searching:"Hledám [SEARCH_TERM]..."},ga={thanks_to:Lu,comments:xu,direction:qu,strings:Vu},Ku={};F(Ku,{comments:()=>Ju,default:()=>Aa,direction:()=>Wu,strings:()=>Zu,thanks_to:()=>Gu});var Gu="Jonas Smedegaard ",Ju="",Wu="ltr",Zu={placeholder:"Søg",clear_search:"Nulstil",load_more:"Indlæs flere resultater",search_label:"Søg på dette website",filters_label:"Filtre",zero_results:"Ingen resultater for [SEARCH_TERM]",many_results:"[COUNT] resultater for [SEARCH_TERM]",one_result:"[COUNT] resultat for [SEARCH_TERM]",alt_search:"Ingen resultater for [SEARCH_TERM]. Viser resultater for [DIFFERENT_TERM] i stedet",search_suggestion:"Ingen resultater for [SEARCH_TERM]. Prøv et af disse søgeord i stedet:",searching:"Søger efter [SEARCH_TERM]..."},Aa={thanks_to:Gu,comments:Ju,direction:Wu,strings:Zu},Yu={};F(Yu,{comments:()=>Qu,default:()=>Ra,direction:()=>$u,strings:()=>et,thanks_to:()=>Xu});var Xu="Jan Claasen ",Qu="",$u="ltr",et={placeholder:"Suche",clear_search:"Löschen",load_more:"Mehr Ergebnisse laden",search_label:"Suche diese Seite",filters_label:"Filter",zero_results:"Keine Ergebnisse für [SEARCH_TERM]",many_results:"[COUNT] Ergebnisse für [SEARCH_TERM]",one_result:"[COUNT] Ergebnis für [SEARCH_TERM]",alt_search:"Keine Ergebnisse für [SEARCH_TERM]. Stattdessen werden Ergebnisse für [DIFFERENT_TERM] angezeigt",search_suggestion:"Keine Ergebnisse für [SEARCH_TERM]. Versuchen Sie eine der folgenden Suchen:",searching:"Suche für [SEARCH_TERM]"},Ra={thanks_to:Xu,comments:Qu,direction:$u,strings:et},ut={};F(ut,{comments:()=>rt,default:()=>Ba,direction:()=>st,strings:()=>at,thanks_to:()=>tt});var tt="Liam Bigelow ",rt="",st="ltr",at={placeholder:"Search",clear_search:"Clear",load_more:"Load more results",search_label:"Search this site",filters_label:"Filters",zero_results:"No results for [SEARCH_TERM]",many_results:"[COUNT] results for [SEARCH_TERM]",one_result:"[COUNT] result for [SEARCH_TERM]",alt_search:"No results for [SEARCH_TERM]. Showing results for [DIFFERENT_TERM] instead",search_suggestion:"No results for [SEARCH_TERM]. Try one of the following searches:",searching:"Searching for [SEARCH_TERM]..."},Ba={thanks_to:tt,comments:rt,direction:st,strings:at},lt={};F(lt,{comments:()=>it,default:()=>va,direction:()=>ot,strings:()=>_t,thanks_to:()=>nt});var nt="Pablo Villaverde ",it="",ot="ltr",_t={placeholder:"Buscar",clear_search:"Limpiar",load_more:"Ver más resultados",search_label:"Buscar en este sitio",filters_label:"Filtros",zero_results:"No se encontraron resultados para [SEARCH_TERM]",many_results:"[COUNT] resultados encontrados para [SEARCH_TERM]",one_result:"[COUNT] resultado encontrado para [SEARCH_TERM]",alt_search:"No se encontraron resultados para [SEARCH_TERM]. Mostrando en su lugar resultados para [DIFFERENT_TERM]",search_suggestion:"No se encontraron resultados para [SEARCH_TERM]. Prueba una de las siguientes búsquedas:",searching:"Buscando [SEARCH_TERM]..."},va={thanks_to:nt,comments:it,direction:ot,strings:_t},ct={};F(ct,{comments:()=>ft,default:()=>Ta,direction:()=>ht,strings:()=>dt,thanks_to:()=>Et});var Et="Mikel Larreategi ",ft="",ht="ltr",dt={placeholder:"Bilatu",clear_search:"Garbitu",load_more:"Kargatu emaitza gehiagi",search_label:"Bilatu",filters_label:"Iragazkiak",zero_results:"Ez dago emaitzarik [SEARCH_TERM] bilaketarentzat",many_results:"[COUNT] emaitza [SEARCH_TERM] bilaketarentzat",one_result:"Emaitza bat [COUNT] [SEARCH_TERM] bilaketarentzat",alt_search:"Ez dago emaitzarik [SEARCH_TERM] bilaketarentzat. [DIFFERENT_TERM] bilaketaren emaitzak erakusten",search_suggestion:"Ez dago emaitzarik [SEARCH_TERM] bilaketarentzat. Saiatu hauetako beste bateikin:",searching:"[SEARCH_TERM] bilatzen..."},Ta={thanks_to:Et,comments:ft,direction:ht,strings:dt},Ct={};F(Ct,{comments:()=>gt,default:()=>pa,direction:()=>At,strings:()=>Rt,thanks_to:()=>mt});var mt="Ali Khaleqi Yekta ",gt="",At="rtl",Rt={placeholder:"جستجو",clear_search:"پاکسازی",load_more:"بارگذاری نتایج بیشتر",search_label:"جستجو در سایت",filters_label:"فیلترها",zero_results:"نتیجه‌ای برای [SEARCH_TERM] یافت نشد",many_results:"[COUNT] نتیجه برای [SEARCH_TERM] یافت شد",one_result:"[COUNT] نتیجه برای [SEARCH_TERM] یافت شد",alt_search:"نتیجه‌ای برای [SEARCH_TERM] یافت نشد. در عوض نتایج برای [DIFFERENT_TERM] نمایش داده می‌شود",search_suggestion:"نتیجه‌ای برای [SEARCH_TERM] یافت نشد. یکی از جستجوهای زیر را امتحان کنید:",searching:"در حال جستجوی [SEARCH_TERM]..."},pa={thanks_to:mt,comments:gt,direction:At,strings:Rt},Bt={};F(Bt,{comments:()=>Tt,default:()=>ka,direction:()=>pt,strings:()=>kt,thanks_to:()=>vt});var vt="Valtteri Laitinen ",Tt="",pt="ltr",kt={placeholder:"Haku",clear_search:"Tyhjennä",load_more:"Lataa lisää tuloksia",search_label:"Hae tältä sivustolta",filters_label:"Suodattimet",zero_results:"Ei tuloksia haulle [SEARCH_TERM]",many_results:"[COUNT] tulosta haulle [SEARCH_TERM]",one_result:"[COUNT] tulos haulle [SEARCH_TERM]",alt_search:"Ei tuloksia haulle [SEARCH_TERM]. Näytetään tulokset sen sijaan haulle [DIFFERENT_TERM]",search_suggestion:"Ei tuloksia haulle [SEARCH_TERM]. Kokeile jotain seuraavista:",searching:"Haetaan [SEARCH_TERM]..."},ka={thanks_to:vt,comments:Tt,direction:pt,strings:kt},Ft={};F(Ft,{comments:()=>bt,default:()=>Fa,direction:()=>Mt,strings:()=>St,thanks_to:()=>Dt});var Dt="Nicolas Friedli ",bt="",Mt="ltr",St={placeholder:"Rechercher",clear_search:"Nettoyer",load_more:"Charger plus de résultats",search_label:"Recherche sur ce site",filters_label:"Filtres",zero_results:"Pas de résultat pour [SEARCH_TERM]",many_results:"[COUNT] résultats pour [SEARCH_TERM]",one_result:"[COUNT] résultat pour [SEARCH_TERM]",alt_search:"Pas de résultat pour [SEARCH_TERM]. Montre les résultats pour [DIFFERENT_TERM] à la place",search_suggestion:"Pas de résultat pour [SEARCH_TERM]. Essayer une des recherches suivantes:",searching:"Recherche [SEARCH_TERM]..."},Fa={thanks_to:Dt,comments:bt,direction:Mt,strings:St},Ht={};F(Ht,{comments:()=>yt,default:()=>Da,direction:()=>wt,strings:()=>zt,thanks_to:()=>Nt});var Nt="Pablo Villaverde ",yt="",wt="ltr",zt={placeholder:"Buscar",clear_search:"Limpar",load_more:"Ver máis resultados",search_label:"Buscar neste sitio",filters_label:"Filtros",zero_results:"Non se atoparon resultados para [SEARCH_TERM]",many_results:"[COUNT] resultados atopados para [SEARCH_TERM]",one_result:"[COUNT] resultado atopado para [SEARCH_TERM]",alt_search:"Non se atoparon resultados para [SEARCH_TERM]. Amosando no seu lugar resultados para [DIFFERENT_TERM]",search_suggestion:"Non se atoparon resultados para [SEARCH_TERM]. Probe unha das seguintes pesquisas:",searching:"Buscando [SEARCH_TERM]..."},Da={thanks_to:Nt,comments:yt,direction:wt,strings:zt},jt={};F(jt,{comments:()=>Ut,default:()=>ba,direction:()=>It,strings:()=>Pt,thanks_to:()=>Ot});var Ot="Nir Tamir ",Ut="",It="rtl",Pt={placeholder:"חיפוש",clear_search:"ניקוי",load_more:"עוד תוצאות",search_label:"חיפוש באתר זה",filters_label:"מסננים",zero_results:"לא נמצאו תוצאות עבור [SEARCH_TERM]",many_results:"נמצאו [COUNT] תוצאות עבור [SEARCH_TERM]",one_result:"נמצאה תוצאה אחת עבור [SEARCH_TERM]",alt_search:"לא נמצאו תוצאות עבור [SEARCH_TERM]. מוצגות תוצאות עבור [DIFFERENT_TERM]",search_suggestion:"לא נמצאו תוצאות עבור [SEARCH_TERM]. נסו אחד מהחיפושים הבאים:",searching:"מחפש את [SEARCH_TERM]..."},ba={thanks_to:Ot,comments:Ut,direction:It,strings:Pt},Lt={};F(Lt,{comments:()=>qt,default:()=>Ma,direction:()=>Vt,strings:()=>Kt,thanks_to:()=>xt});var xt="Amit Yadav ",qt="",Vt="ltr",Kt={placeholder:"खोजें",clear_search:"साफ करें",load_more:"और अधिक परिणाम लोड करें",search_label:"इस साइट में खोजें",filters_label:"फ़िल्टर",zero_results:"कोई परिणाम [SEARCH_TERM] के लिए नहीं मिला",many_results:"[COUNT] परिणाम [SEARCH_TERM] के लिए मिले",one_result:"[COUNT] परिणाम [SEARCH_TERM] के लिए मिला",alt_search:"[SEARCH_TERM] के लिए कोई परिणाम नहीं मिला। इसके बजाय [DIFFERENT_TERM] के लिए परिणाम दिखा रहा है",search_suggestion:"[SEARCH_TERM] के लिए कोई परिणाम नहीं मिला। निम्नलिखित खोजों में से कोई एक आज़माएं:",searching:"[SEARCH_TERM] की खोज की जा रही है..."},Ma={thanks_to:xt,comments:qt,direction:Vt,strings:Kt},Gt={};F(Gt,{comments:()=>Wt,default:()=>Sa,direction:()=>Zt,strings:()=>Yt,thanks_to:()=>Jt});var Jt="Diomed ",Wt="",Zt="ltr",Yt={placeholder:"Traži",clear_search:"Očisti",load_more:"Učitaj više rezultata",search_label:"Pretraži ovu stranicu",filters_label:"Filteri",zero_results:"Nema rezultata za [SEARCH_TERM]",many_results:"[COUNT] rezultata za [SEARCH_TERM]",one_result:"[COUNT] rezultat za [SEARCH_TERM]",alt_search:"Nema rezultata za [SEARCH_TERM]. Prikazujem rezultate za [DIFFERENT_TERM]",search_suggestion:"Nema rezultata za [SEARCH_TERM]. Pokušaj s jednom od ovih pretraga:",searching:"Pretražujem [SEARCH_TERM]..."},Sa={thanks_to:Jt,comments:Wt,direction:Zt,strings:Yt},Xt={};F(Xt,{comments:()=>$t,default:()=>Ha,direction:()=>e0,strings:()=>u0,thanks_to:()=>Qt});var Qt="Adam Laki ",$t="",e0="ltr",u0={placeholder:"Keresés",clear_search:"Törlés",load_more:"További találatok betöltése",search_label:"Keresés az oldalon",filters_label:"Szűrés",zero_results:"Nincs találat a(z) [SEARCH_TERM] kifejezésre",many_results:"[COUNT] db találat a(z) [SEARCH_TERM] kifejezésre",one_result:"[COUNT] db találat a(z) [SEARCH_TERM] kifejezésre",alt_search:"Nincs találat a(z) [SEARCH_TERM] kifejezésre. Találatok mutatása inkább a(z) [DIFFERENT_TERM] kifejezésre",search_suggestion:"Nincs találat a(z) [SEARCH_TERM] kifejezésre. Próbáld meg a következő keresések egyikét:",searching:"Keresés a(z) [SEARCH_TERM] kifejezésre..."},Ha={thanks_to:Qt,comments:$t,direction:e0,strings:u0},t0={};F(t0,{comments:()=>s0,default:()=>Na,direction:()=>a0,strings:()=>l0,thanks_to:()=>r0});var r0="Nixentric",s0="",a0="ltr",l0={placeholder:"Cari",clear_search:"Bersihkan",load_more:"Muat lebih banyak hasil",search_label:"Telusuri situs ini",filters_label:"Filter",zero_results:"[SEARCH_TERM] tidak ditemukan",many_results:"Ditemukan [COUNT] hasil untuk [SEARCH_TERM]",one_result:"Ditemukan [COUNT] hasil untuk [SEARCH_TERM]",alt_search:"[SEARCH_TERM] tidak ditemukan. Menampilkan hasil [DIFFERENT_TERM] sebagai gantinya",search_suggestion:"[SEARCH_TERM] tidak ditemukan. Coba salah satu pencarian berikut ini:",searching:"Mencari [SEARCH_TERM]..."},Na={thanks_to:r0,comments:s0,direction:a0,strings:l0},n0={};F(n0,{comments:()=>o0,default:()=>ya,direction:()=>_0,strings:()=>c0,thanks_to:()=>i0});var i0="Cosette Bruhns Alonso, Andrew Janco ",o0="",_0="ltr",c0={placeholder:"Cerca",clear_search:"Cancella la cronologia",load_more:"Mostra più risultati",search_label:"Cerca nel sito",filters_label:"Filtri di ricerca",zero_results:"Nessun risultato per [SEARCH_TERM]",many_results:"[COUNT] risultati per [SEARCH_TERM]",one_result:"[COUNT] risultato per [SEARCH_TERM]",alt_search:"Nessun risultato per [SEARCH_TERM]. Mostrando risultati per [DIFFERENT_TERM] come alternativa.",search_suggestion:"Nessun risultato per [SEARCH_TERM]. Prova una delle seguenti ricerche:",searching:"Cercando [SEARCH_TERM]..."},ya={thanks_to:i0,comments:o0,direction:_0,strings:c0},E0={};F(E0,{comments:()=>h0,default:()=>wa,direction:()=>d0,strings:()=>C0,thanks_to:()=>f0});var f0="Tate",h0="",d0="ltr",C0={placeholder:"検索",clear_search:"クリア",load_more:"次を読み込む",search_label:"このサイトを検索",filters_label:"フィルタ",zero_results:"[SEARCH_TERM]の検索に一致する情報はありませんでした",many_results:"[SEARCH_TERM]の[COUNT]件の検索結果",one_result:"[SEARCH_TERM]の[COUNT]件の検索結果",alt_search:"[SEARCH_TERM]の検索に一致する情報はありませんでした。[DIFFERENT_TERM]の検索結果を表示しています",search_suggestion:"[SEARCH_TERM]の検索に一致する情報はありませんでした。次のいずれかの検索を試してください",searching:"[SEARCH_TERM]を検索しています"},wa={thanks_to:f0,comments:h0,direction:d0,strings:C0},m0={};F(m0,{comments:()=>A0,default:()=>za,direction:()=>R0,strings:()=>B0,thanks_to:()=>g0});var g0="Seokho Son ",A0="",R0="ltr",B0={placeholder:"검색어",clear_search:"비우기",load_more:"검색 결과 더 보기",search_label:"사이트 검색",filters_label:"필터",zero_results:"[SEARCH_TERM]에 대한 결과 없음",many_results:"[SEARCH_TERM]에 대한 결과 [COUNT]건",one_result:"[SEARCH_TERM]에 대한 결과 [COUNT]건",alt_search:"[SEARCH_TERM]에 대한 결과 없음. [DIFFERENT_TERM]에 대한 결과",search_suggestion:"[SEARCH_TERM]에 대한 결과 없음. 추천 검색어: ",searching:"[SEARCH_TERM] 검색 중..."},za={thanks_to:g0,comments:A0,direction:R0,strings:B0},v0={};F(v0,{comments:()=>p0,default:()=>ja,direction:()=>k0,strings:()=>F0,thanks_to:()=>T0});var T0="",p0="",k0="ltr",F0={placeholder:"Rapu",clear_search:"Whakakore",load_more:"Whakauta ētahi otinga kē",search_label:"Rapu",filters_label:"Tātari",zero_results:"Otinga kore ki [SEARCH_TERM]",many_results:"[COUNT] otinga ki [SEARCH_TERM]",one_result:"[COUNT] otinga ki [SEARCH_TERM]",alt_search:"Otinga kore ki [SEARCH_TERM]. Otinga kē ki [DIFFERENT_TERM]",search_suggestion:"Otinga kore ki [SEARCH_TERM]. whakamātau ki ngā mea atu:",searching:"Rapu ki [SEARCH_TERM]..."},ja={thanks_to:T0,comments:p0,direction:k0,strings:F0},D0={};F(D0,{comments:()=>M0,default:()=>Oa,direction:()=>S0,strings:()=>H0,thanks_to:()=>b0});var b0="Harry Min Khant ",M0="",S0="ltr",H0={placeholder:"ရှာရန်",clear_search:"ရှာဖွေမှုကို ရှင်းလင်းပါ။",load_more:"နောက်ထပ်ရလဒ်များကို တင်ပါ။",search_label:"ဤဆိုက်တွင်ရှာဖွေပါ။",filters_label:"စစ်ထုတ်မှုများ",zero_results:"[SEARCH_TERM] အတွက် ရလဒ်များ မရှိပါ",many_results:"[SEARCH_TERM] အတွက် ရလဒ် [COUNT] ခု",one_result:"[SEARCH_TERM] အတွက် ရလဒ် [COUNT]",alt_search:"[SEARCH_TERM] အတွက် ရလဒ်မရှိပါ။ ၎င်းအစား [DIFFERENT_TERM] အတွက် ရလဒ်များကို ပြသသည်။",search_suggestion:"[SEARCH_TERM] အတွက် ရလဒ်မရှိပါ။ အောက်ပါရှာဖွေမှုများထဲမှ တစ်ခုကို စမ်းကြည့်ပါ:",searching:"[SEARCH_TERM] ကို ရှာဖွေနေသည်..."},Oa={thanks_to:b0,comments:M0,direction:S0,strings:H0},N0={};F(N0,{comments:()=>w0,default:()=>Ua,direction:()=>z0,strings:()=>j0,thanks_to:()=>y0});var y0="Eirik Mikkelsen",w0="",z0="ltr",j0={placeholder:"Søk",clear_search:"Fjern",load_more:"Last flere resultater",search_label:"Søk på denne siden",filters_label:"Filtre",zero_results:"Ingen resultater for [SEARCH_TERM]",many_results:"[COUNT] resultater for [SEARCH_TERM]",one_result:"[COUNT] resultat for [SEARCH_TERM]",alt_search:"Ingen resultater for [SEARCH_TERM]. Viser resultater for [DIFFERENT_TERM] i stedet",search_suggestion:"Ingen resultater for [SEARCH_TERM]. Prøv en av disse søkeordene i stedet:",searching:"Søker etter [SEARCH_TERM]"},Ua={thanks_to:y0,comments:w0,direction:z0,strings:j0},O0={};F(O0,{comments:()=>I0,default:()=>Ia,direction:()=>P0,strings:()=>L0,thanks_to:()=>U0});var U0="Paul van Brouwershaven",I0="",P0="ltr",L0={placeholder:"Zoeken",clear_search:"Reset",load_more:"Meer resultaten laden",search_label:"Doorzoek deze site",filters_label:"Filters",zero_results:"Geen resultaten voor [SEARCH_TERM]",many_results:"[COUNT] resultaten voor [SEARCH_TERM]",one_result:"[COUNT] resultaat voor [SEARCH_TERM]",alt_search:"Geen resultaten voor [SEARCH_TERM]. In plaats daarvan worden resultaten voor [DIFFERENT_TERM] weergegeven",search_suggestion:"Geen resultaten voor [SEARCH_TERM]. Probeer een van de volgende zoekopdrachten:",searching:"Zoeken naar [SEARCH_TERM]..."},Ia={thanks_to:U0,comments:I0,direction:P0,strings:L0},x0={};F(x0,{comments:()=>V0,default:()=>Pa,direction:()=>K0,strings:()=>G0,thanks_to:()=>q0});var q0="Eirik Mikkelsen",V0="",K0="ltr",G0={placeholder:"Søk",clear_search:"Fjern",load_more:"Last fleire resultat",search_label:"Søk på denne sida",filters_label:"Filter",zero_results:"Ingen resultat for [SEARCH_TERM]",many_results:"[COUNT] resultat for [SEARCH_TERM]",one_result:"[COUNT] resultat for [SEARCH_TERM]",alt_search:"Ingen resultat for [SEARCH_TERM]. Viser resultat for [DIFFERENT_TERM] i staden",search_suggestion:"Ingen resultat for [SEARCH_TERM]. Prøv eitt av desse søkeorda i staden:",searching:"Søker etter [SEARCH_TERM]"},Pa={thanks_to:q0,comments:V0,direction:K0,strings:G0},J0={};F(J0,{comments:()=>Z0,default:()=>La,direction:()=>Y0,strings:()=>X0,thanks_to:()=>W0});var W0="Christopher Wingate",Z0="",Y0="ltr",X0={placeholder:"Søk",clear_search:"Fjern",load_more:"Last flere resultater",search_label:"Søk på denne siden",filters_label:"Filtre",zero_results:"Ingen resultater for [SEARCH_TERM]",many_results:"[COUNT] resultater for [SEARCH_TERM]",one_result:"[COUNT] resultat for [SEARCH_TERM]",alt_search:"Ingen resultater for [SEARCH_TERM]. Viser resultater for [DIFFERENT_TERM] i stedet",search_suggestion:"Ingen resultater for [SEARCH_TERM]. Prøv en av disse søkeordene i stedet:",searching:"Søker etter [SEARCH_TERM]"},La={thanks_to:W0,comments:Z0,direction:Y0,strings:X0},Q0={};F(Q0,{comments:()=>er,default:()=>xa,direction:()=>ur,strings:()=>tr,thanks_to:()=>$0});var $0="",er="",ur="ltr",tr={placeholder:"Szukaj",clear_search:"Wyczyść",load_more:"Załaduj więcej",search_label:"Przeszukaj tę stronę",filters_label:"Filtry",zero_results:"Brak wyników dla [SEARCH_TERM]",many_results:"[COUNT] wyników dla [SEARCH_TERM]",one_result:"[COUNT] wynik dla [SEARCH_TERM]",alt_search:"Brak wyników dla [SEARCH_TERM]. Wyświetlam wyniki dla [DIFFERENT_TERM]",search_suggestion:"Brak wyników dla [SEARCH_TERM]. Pokrewne wyniki wyszukiwania:",searching:"Szukam [SEARCH_TERM]..."},xa={thanks_to:$0,comments:er,direction:ur,strings:tr},rr={};F(rr,{comments:()=>ar,default:()=>qa,direction:()=>lr,strings:()=>nr,thanks_to:()=>sr});var sr="Jonatah",ar="",lr="ltr",nr={placeholder:"Pesquisar",clear_search:"Limpar",load_more:"Ver mais resultados",search_label:"Pesquisar",filters_label:"Filtros",zero_results:"Nenhum resultado encontrado para [SEARCH_TERM]",many_results:"[COUNT] resultados encontrados para [SEARCH_TERM]",one_result:"[COUNT] resultado encontrado para [SEARCH_TERM]",alt_search:"Nenhum resultado encontrado para [SEARCH_TERM]. Exibindo resultados para [DIFFERENT_TERM]",search_suggestion:"Nenhum resultado encontrado para [SEARCH_TERM]. Tente uma das seguintes pesquisas:",searching:"Pesquisando por [SEARCH_TERM]..."},qa={thanks_to:sr,comments:ar,direction:lr,strings:nr},ir={};F(ir,{comments:()=>_r,default:()=>Va,direction:()=>cr,strings:()=>Er,thanks_to:()=>or});var or="Bogdan Mateescu ",_r="",cr="ltr",Er={placeholder:"Căutare",clear_search:"Ştergeţi",load_more:"Încărcați mai multe rezultate",search_label:"Căutați în acest site",filters_label:"Filtre",zero_results:"Niciun rezultat pentru [SEARCH_TERM]",many_results:"[COUNT] rezultate pentru [SEARCH_TERM]",one_result:"[COUNT] rezultat pentru [SEARCH_TERM]",alt_search:"Niciun rezultat pentru [SEARCH_TERM]. Se afișează în schimb rezultatele pentru [DIFFERENT_TERM]",search_suggestion:"Niciun rezultat pentru [SEARCH_TERM]. Încercați una dintre următoarele căutări:",searching:"Se caută după: [SEARCH_TERM]..."},Va={thanks_to:or,comments:_r,direction:cr,strings:Er},fr={};F(fr,{comments:()=>dr,default:()=>Ka,direction:()=>Cr,strings:()=>mr,thanks_to:()=>hr});var hr="Aleksandr Gordeev",dr="",Cr="ltr",mr={placeholder:"Поиск",clear_search:"Очистить поле",load_more:"Загрузить еще",search_label:"Поиск по сайту",filters_label:"Фильтры",zero_results:"Ничего не найдено по запросу: [SEARCH_TERM]",many_results:"[COUNT] результатов по запросу: [SEARCH_TERM]",one_result:"[COUNT] результат по запросу: [SEARCH_TERM]",alt_search:"Ничего не найдено по запросу: [SEARCH_TERM]. Показаны результаты по запросу: [DIFFERENT_TERM]",search_suggestion:"Ничего не найдено по запросу: [SEARCH_TERM]. Попробуйте один из следующих вариантов",searching:"Поиск по запросу: [SEARCH_TERM]"},Ka={thanks_to:hr,comments:dr,direction:Cr,strings:mr},gr={};F(gr,{comments:()=>Rr,default:()=>Ga,direction:()=>Br,strings:()=>vr,thanks_to:()=>Ar});var Ar="Andrija Sagicc",Rr="",Br="ltr",vr={placeholder:"Претрага",clear_search:"Брисање",load_more:"Приказ више резултата",search_label:"Претрага сајта",filters_label:"Филтери",zero_results:"Нема резултата за [SEARCH_TERM]",many_results:"[COUNT] резултата за [SEARCH_TERM]",one_result:"[COUNT] резултата за [SEARCH_TERM]",alt_search:"Нема резултата за [SEARCH_TERM]. Приказ додатник резултата за [DIFFERENT_TERM]",search_suggestion:"Нема резултата за [SEARCH_TERM]. Покушајте са неком од следећих претрага:",searching:"Претрага термина [SEARCH_TERM]..."},Ga={thanks_to:Ar,comments:Rr,direction:Br,strings:vr},Tr={};F(Tr,{comments:()=>kr,default:()=>Ja,direction:()=>Fr,strings:()=>Dr,thanks_to:()=>pr});var pr="Montazar Al-Jaber ",kr="",Fr="ltr",Dr={placeholder:"Sök",clear_search:"Rensa",load_more:"Visa fler träffar",search_label:"Sök på denna sida",filters_label:"Filter",zero_results:"[SEARCH_TERM] gav inga träffar",many_results:"[SEARCH_TERM] gav [COUNT] träffar",one_result:"[SEARCH_TERM] gav [COUNT] träff",alt_search:"[SEARCH_TERM] gav inga träffar. Visar resultat för [DIFFERENT_TERM] istället",search_suggestion:"[SEARCH_TERM] gav inga träffar. Försök igen med en av följande sökord:",searching:"Söker efter [SEARCH_TERM]..."},Ja={thanks_to:pr,comments:kr,direction:Fr,strings:Dr},br={};F(br,{comments:()=>Sr,default:()=>Wa,direction:()=>Hr,strings:()=>Nr,thanks_to:()=>Mr});var Mr="Anonymous",Sr="",Hr="ltr",Nr={placeholder:"Tafuta",clear_search:"Futa",load_more:"Pakia matokeo zaidi",search_label:"Tafuta tovuti hii",filters_label:"Vichujio",zero_results:"Hakuna matokeo ya [SEARCH_TERM]",many_results:"Matokeo [COUNT] ya [SEARCH_TERM]",one_result:"Tokeo [COUNT] la [SEARCH_TERM]",alt_search:"Hakuna mayokeo ya [SEARCH_TERM]. Badala yake, inaonyesha matokeo ya [DIFFERENT_TERM]",search_suggestion:"Hakuna matokeo ya [SEARCH_TERM]. Jaribu mojawapo ya utafutaji ufuatao:",searching:"Kutafuta [SEARCH_TERM]..."},Wa={thanks_to:Mr,comments:Sr,direction:Hr,strings:Nr},yr={};F(yr,{comments:()=>zr,default:()=>Za,direction:()=>jr,strings:()=>Or,thanks_to:()=>wr});var wr="",zr="",jr="ltr",Or={placeholder:"தேடுக",clear_search:"அழிக்குக",load_more:"மேலும் முடிவுகளைக் காட்டுக",search_label:"இந்த தளத்தில் தேடுக",filters_label:"வடிகட்டல்கள்",zero_results:"[SEARCH_TERM] க்கான முடிவுகள் இல்லை",many_results:"[SEARCH_TERM] க்கான [COUNT] முடிவுகள்",one_result:"[SEARCH_TERM] க்கான முடிவு",alt_search:"[SEARCH_TERM] இத்தேடலுக்கான முடிவுகள் இல்லை, இந்த தேடல்களுக்கான ஒத்த முடிவுகள் [DIFFERENT_TERM]",search_suggestion:"[SEARCH_TERM] இத் தேடலுக்கான முடிவுகள் இல்லை.இதற்கு பதிலீடான தேடல்களை தேடுக:",searching:"[SEARCH_TERM] தேடப்படுகின்றது"},Za={thanks_to:wr,comments:zr,direction:jr,strings:Or},Ur={};F(Ur,{comments:()=>Pr,default:()=>Ya,direction:()=>Lr,strings:()=>xr,thanks_to:()=>Ir});var Ir="Patiphon Loetsuthakun ",Pr="",Lr="ltr",xr={placeholder:"ค้นหา",clear_search:"ล้าง",load_more:"โหลดผลลัพธ์เพิ่มเติม",search_label:"ค้นหาบนเว็บไซต์",filters_label:"ตัวกรอง",zero_results:"ไม่พบผลลัพธ์สำหรับ [SEARCH_TERM]",many_results:"พบ [COUNT] ผลการค้นหาสำหรับ [SEARCH_TERM]",one_result:"พบ [COUNT] ผลการค้นหาสำหรับ [SEARCH_TERM]",alt_search:"ไม่พบผลลัพธ์สำหรับ [SEARCH_TERM] แสดงผลลัพธ์จากการค้นหา [DIFFERENT_TERM] แทน",search_suggestion:"ไม่พบผลลัพธ์สำหรับ [SEARCH_TERM] ลองคำค้นหาเหล่านี้แทน:",searching:"กำลังค้นหา [SEARCH_TERM]..."},Ya={thanks_to:Ir,comments:Pr,direction:Lr,strings:xr},qr={};F(qr,{comments:()=>Kr,default:()=>Xa,direction:()=>Gr,strings:()=>Jr,thanks_to:()=>Vr});var Vr="Taylan Özgür Bildik",Kr="",Gr="ltr",Jr={placeholder:"Araştır",clear_search:"Temizle",load_more:"Daha fazla sonuç",search_label:"Site genelinde arama",filters_label:"Filtreler",zero_results:"[SEARCH_TERM] için sonuç yok",many_results:"[SEARCH_TERM] için [COUNT] sonuç bulundu",one_result:"[SEARCH_TERM] için [COUNT] sonuç bulundu",alt_search:"[SEARCH_TERM] için sonuç yok. Bunun yerine [DIFFERENT_TERM] için sonuçlar gösteriliyor",search_suggestion:"[SEARCH_TERM] için sonuç yok. Alternatif olarak aşağıdaki kelimelerden birini deneyebilirsiniz:",searching:"[SEARCH_TERM] araştırılıyor..."},Xa={thanks_to:Vr,comments:Kr,direction:Gr,strings:Jr},Wr={};F(Wr,{comments:()=>Yr,default:()=>Qa,direction:()=>Xr,strings:()=>Qr,thanks_to:()=>Zr});var Zr="Vladyslav Lyshenko ",Yr="",Xr="ltr",Qr={placeholder:"Пошук",clear_search:"Очистити поле",load_more:"Завантажити ще",search_label:"Пошук по сайту",filters_label:"Фільтри",zero_results:"Нічого не знайдено за запитом: [SEARCH_TERM]",many_results:"[COUNT] результатів на запит: [SEARCH_TERM]",one_result:"[COUNT] результат за запитом: [SEARCH_TERM]",alt_search:"Нічого не знайдено на запит: [SEARCH_TERM]. Показано результати на запит: [DIFFERENT_TERM]",search_suggestion:"Нічого не знайдено на запит: [SEARCH_TERM]. Спробуйте один із таких варіантів",searching:"Пошук за запитом: [SEARCH_TERM]"},Qa={thanks_to:Zr,comments:Yr,direction:Xr,strings:Qr},$r={};F($r,{comments:()=>us,default:()=>$a,direction:()=>ts,strings:()=>rs,thanks_to:()=>es});var es="Long Nhat Nguyen",us="",ts="ltr",rs={placeholder:"Tìm kiếm",clear_search:"Xóa",load_more:"Nhiều kết quả hơn",search_label:"Tìm kiếm trong trang này",filters_label:"Bộ lọc",zero_results:"Không tìm thấy kết quả cho [SEARCH_TERM]",many_results:"[COUNT] kết quả cho [SEARCH_TERM]",one_result:"[COUNT] kết quả cho [SEARCH_TERM]",alt_search:"Không tìm thấy kết quả cho [SEARCH_TERM]. Kiểm thị kết quả thay thế với [DIFFERENT_TERM]",search_suggestion:"Không tìm thấy kết quả cho [SEARCH_TERM]. Thử một trong các tìm kiếm:",searching:"Đang tìm kiếm cho [SEARCH_TERM]..."},$a={thanks_to:es,comments:us,direction:ts,strings:rs},ss={};F(ss,{comments:()=>ls,default:()=>el,direction:()=>ns,strings:()=>is,thanks_to:()=>as});var as="Amber Song",ls="",ns="ltr",is={placeholder:"搜索",clear_search:"清除",load_more:"加载更多结果",search_label:"站内搜索",filters_label:"筛选",zero_results:"未找到 [SEARCH_TERM] 的相关结果",many_results:"找到 [COUNT] 个 [SEARCH_TERM] 的相关结果",one_result:"找到 [COUNT] 个 [SEARCH_TERM] 的相关结果",alt_search:"未找到 [SEARCH_TERM] 的相关结果。改为显示 [DIFFERENT_TERM] 的相关结果",search_suggestion:"未找到 [SEARCH_TERM] 的相关结果。请尝试以下搜索。",searching:"正在搜索 [SEARCH_TERM]..."},el={thanks_to:as,comments:ls,direction:ns,strings:is},os={};F(os,{comments:()=>cs,default:()=>ul,direction:()=>Es,strings:()=>fs,thanks_to:()=>_s});var _s="Amber Song",cs="",Es="ltr",fs={placeholder:"搜索",clear_search:"清除",load_more:"加載更多結果",search_label:"站內搜索",filters_label:"篩選",zero_results:"未找到 [SEARCH_TERM] 的相關結果",many_results:"找到 [COUNT] 個 [SEARCH_TERM] 的相關結果",one_result:"找到 [COUNT] 個 [SEARCH_TERM] 的相關結果",alt_search:"未找到 [SEARCH_TERM] 的相關結果。改為顯示 [DIFFERENT_TERM] 的相關結果",search_suggestion:"未找到 [SEARCH_TERM] 的相關結果。請嘗試以下搜索。",searching:"正在搜索 [SEARCH_TERM]..."},ul={thanks_to:_s,comments:cs,direction:Es,strings:fs},hs={};F(hs,{comments:()=>Cs,default:()=>tl,direction:()=>ms,strings:()=>gs,thanks_to:()=>ds});var ds="Amber Song",Cs="",ms="ltr",gs={placeholder:"搜索",clear_search:"清除",load_more:"加载更多结果",search_label:"站内搜索",filters_label:"筛选",zero_results:"未找到 [SEARCH_TERM] 的相关结果",many_results:"找到 [COUNT] 个 [SEARCH_TERM] 的相关结果",one_result:"找到 [COUNT] 个 [SEARCH_TERM] 的相关结果",alt_search:"未找到 [SEARCH_TERM] 的相关结果。改为显示 [DIFFERENT_TERM] 的相关结果",search_suggestion:"未找到 [SEARCH_TERM] 的相关结果。请尝试以下搜索。",searching:"正在搜索 [SEARCH_TERM]..."},tl={thanks_to:ds,comments:Cs,direction:ms,strings:gs},rl=[Ru,ku,Su,zu,Pu,Ku,Yu,ut,lt,ct,Ct,Bt,Ft,Ht,jt,Lt,Gt,Xt,t0,n0,E0,m0,v0,D0,N0,O0,x0,J0,Q0,rr,ir,fr,gr,Tr,br,yr,Ur,qr,Wr,$r,ss,os,hs],sl=rl,al=["../../translations/af.json","../../translations/ar.json","../../translations/bn.json","../../translations/ca.json","../../translations/cs.json","../../translations/da.json","../../translations/de.json","../../translations/en.json","../../translations/es.json","../../translations/eu.json","../../translations/fa.json","../../translations/fi.json","../../translations/fr.json","../../translations/gl.json","../../translations/he.json","../../translations/hi.json","../../translations/hr.json","../../translations/hu.json","../../translations/id.json","../../translations/it.json","../../translations/ja.json","../../translations/ko.json","../../translations/mi.json","../../translations/my.json","../../translations/nb.json","../../translations/nl.json","../../translations/nn.json","../../translations/no.json","../../translations/pl.json","../../translations/pt.json","../../translations/ro.json","../../translations/ru.json","../../translations/sr.json","../../translations/sv.json","../../translations/sw.json","../../translations/ta.json","../../translations/th.json","../../translations/tr.json","../../translations/uk.json","../../translations/vi.json","../../translations/zh-cn.json","../../translations/zh-tw.json","../../translations/zh.json"];function ou(e,u,t){const r=e.slice();return r[51]=u[t],r}function _u(e){let u,t,r;function s(l){e[37](l)}let a={show_empty_filters:e[5],open_filters:e[6],available_filters:e[18],translate:e[20],automatic_translations:e[19],translations:e[7]};return e[0]!==void 0&&(a.selected_filters=e[0]),u=new fa({props:a}),ae.push(()=>Ws(u,"selected_filters",s)),{c(){Fe(u.$$.fragment)},m(l,n){fe(u,l,n),r=!0},p(l,n){const i={};n[0]&32&&(i.show_empty_filters=l[5]),n[0]&64&&(i.open_filters=l[6]),n[0]&262144&&(i.available_filters=l[18]),n[0]&524288&&(i.automatic_translations=l[19]),n[0]&128&&(i.translations=l[7]),!t&&n[0]&1&&(t=!0,i.selected_filters=l[0],qs(()=>t=!1)),u.$set(i)},i(l){r||(z(u.$$.fragment,l),r=!0)},o(l){U(u.$$.fragment,l),r=!1},d(l){he(u,l)}}}function cu(e){let u,t,r,s;const a=[nl,ll],l=[];function n(i,E){return i[14]?0:1}return t=n(e),r=l[t]=a[t](e),{c(){u=v("div"),r.c(),C(u,"class","pagefind-ui__results-area svelte-e9gkc3")},m(i,E){k(i,u,E),l[t].m(u,null),s=!0},p(i,E){let _=t;t=n(i),t===_?l[t].p(i,E):(le(),U(l[_],1,1,()=>{l[_]=null}),ne(),r=l[t],r?r.p(i,E):(r=l[t]=a[t](i),r.c()),z(r,1),r.m(u,null))},i(i){s||(z(r),s=!0)},o(i){U(r),s=!1},d(i){i&&p(u),l[t].d()}}}function ll(e){let u,t,r,s=[],a=new Map,l,n,i;function E(c,g){return c[13].results.length===0?_l:c[13].results.length===1?ol:il}let _=E(e),f=_(e),d=e[13].results.slice(0,e[17]);const h=c=>c[51].id;for(let c=0;ce[17]&&fu(e);return{c(){u=v("p"),f.c(),t=M(),r=v("ol");for(let c=0;cc[17]?o?o.p(c,g):(o=fu(c),o.c(),o.m(n.parentNode,n)):o&&(o.d(1),o=null)},i(c){if(!i){for(let g=0;g{i[d]=null}),ne(),s=i[r],s?s.p(u,f):(s=i[r]=n[r](u),s.c()),z(s,1),s.m(a.parentNode,a))},i(_){l||(z(s),l=!0)},o(_){U(s),l=!1},d(_){_&&p(t),i[r].d(_),_&&p(a)}}}function fu(e){let u,t=e[20]("load_more",e[19],e[7])+"",r,s,a;return{c(){u=v("button"),r=S(t),C(u,"type","button"),C(u,"class","pagefind-ui__button svelte-e9gkc3")},m(l,n){k(l,u,n),R(u,r),s||(a=G(u,"click",e[22]),s=!0)},p(l,n){n[0]&524416&&t!==(t=l[20]("load_more",l[19],l[7])+"")&&j(r,t)},d(l){l&&p(u),s=!1,a()}}}function hu(e){let u,t=e[20]("searching",e[19],e[7]).replace(/\[SEARCH_TERM\]/,e[16])+"",r;return{c(){u=v("p"),r=S(t),C(u,"class","pagefind-ui__message svelte-e9gkc3")},m(s,a){k(s,u,a),R(u,r)},p(s,a){a[0]&589952&&t!==(t=s[20]("searching",s[19],s[7]).replace(/\[SEARCH_TERM\]/,s[16])+"")&&j(r,t)},d(s){s&&p(u)}}}function fl(e){let u,t,r,s,a,l,n,i=e[20]("clear_search",e[19],e[7])+"",E,_,f,d,h,o,c,g,A=e[12]&&_u(e),B=e[15]&&cu(e);return{c(){u=v("div"),t=v("form"),r=v("input"),l=M(),n=v("button"),E=S(i),_=M(),f=v("div"),A&&A.c(),d=M(),B&&B.c(),C(r,"class","pagefind-ui__search-input svelte-e9gkc3"),C(r,"type","text"),C(r,"placeholder",s=e[20]("placeholder",e[19],e[7])),C(r,"title",a=e[20]("placeholder",e[19],e[7])),C(r,"autocapitalize","none"),C(r,"enterkeyhint","search"),r.autofocus=e[8],C(n,"class","pagefind-ui__search-clear svelte-e9gkc3"),K(n,"pagefind-ui__suppressed",!e[9]),C(f,"class","pagefind-ui__drawer svelte-e9gkc3"),K(f,"pagefind-ui__hidden",!e[15]),C(t,"class","pagefind-ui__form svelte-e9gkc3"),C(t,"role","search"),C(t,"aria-label",h=e[20]("search_label",e[19],e[7])),C(t,"action","javascript:void(0);"),C(u,"class","pagefind-ui svelte-e9gkc3"),K(u,"pagefind-ui--reset",e[1])},m(T,D){k(T,u,D),R(u,t),R(t,r),ze(r,e[9]),e[34](r),R(t,l),R(t,n),R(n,E),e[35](n),R(t,_),R(t,f),A&&A.m(f,null),R(f,d),B&&B.m(f,null),o=!0,e[8]&&r.focus(),c||(g=[G(r,"focus",e[21]),G(r,"keydown",e[32]),G(r,"input",e[33]),G(n,"click",e[36]),G(t,"submit",hl)],c=!0)},p(T,D){(!o||D[0]&524416&&s!==(s=T[20]("placeholder",T[19],T[7])))&&C(r,"placeholder",s),(!o||D[0]&524416&&a!==(a=T[20]("placeholder",T[19],T[7])))&&C(r,"title",a),(!o||D[0]&256)&&(r.autofocus=T[8]),D[0]&512&&r.value!==T[9]&&ze(r,T[9]),(!o||D[0]&524416)&&i!==(i=T[20]("clear_search",T[19],T[7])+"")&&j(E,i),(!o||D[0]&512)&&K(n,"pagefind-ui__suppressed",!T[9]),T[12]?A?(A.p(T,D),D[0]&4096&&z(A,1)):(A=_u(T),A.c(),z(A,1),A.m(f,d)):A&&(le(),U(A,1,1,()=>{A=null}),ne()),T[15]?B?(B.p(T,D),D[0]&32768&&z(B,1)):(B=cu(T),B.c(),z(B,1),B.m(f,null)):B&&(le(),U(B,1,1,()=>{B=null}),ne()),(!o||D[0]&32768)&&K(f,"pagefind-ui__hidden",!T[15]),(!o||D[0]&524416&&h!==(h=T[20]("search_label",T[19],T[7])))&&C(t,"aria-label",h),(!o||D[0]&2)&&K(u,"pagefind-ui--reset",T[1])},i(T){o||(z(A),z(B),o=!0)},o(T){U(A),U(B),o=!1},d(T){T&&p(u),e[34](null),e[35](null),A&&A.d(),B&&B.d(),c=!1,W(g)}}}var hl=e=>e.preventDefault();function dl(e,u,t){const r={},s=al.map(m=>m.match(/([^\/]+)\.json$/)[1]);for(let m=0;mw[m]??N[m]??"";Is(()=>{let m=document?.querySelector?.("html")?.getAttribute?.("lang")||"en",N=Au(m.toLocaleLowerCase());t(19,He=r[`${N.language}-${N.script}-${N.region}`]||r[`${N.language}-${N.region}`]||r[`${N.language}`]||r.en)}),Ps(()=>{H?.destroy?.(),H=null});const Ne=async()=>{if(!me&&(t(12,me=!0),!H)){let m;try{m=await ys(()=>import(`${a}pagefind.js`),[])}catch(w){console.error(w),console.error([`Pagefind couldn't be loaded from ${this.options.bundlePath}pagefind.js`,"You can configure this by passing a bundlePath option to PagefindUI"].join(` +import{_ as ys}from"./Search.astro_astro_type_script_index_0_lang.CfYcGagN.js";var ws=Object.defineProperty,F=(e,u)=>{for(var t in u)ws(e,t,{get:u[t],enumerable:!0})};function P(){}function du(e){return e()}function we(){return Object.create(null)}function W(e){e.forEach(du)}function Cu(e){return typeof e=="function"}function Ee(e,u){return e!=e?u==u:e!==u||e&&typeof e=="object"||typeof e=="function"}var oe;function ce(e,u){return oe||(oe=document.createElement("a")),oe.href=u,e===oe.href}function zs(e){return Object.keys(e).length===0}function R(e,u){e.appendChild(u)}function k(e,u,t){e.insertBefore(u,t||null)}function p(e){e.parentNode&&e.parentNode.removeChild(e)}function ie(e,u){for(let t=0;te.removeEventListener(u,t,r)}function C(e,u,t){t==null?e.removeAttribute(u):e.getAttribute(u)!==t&&e.setAttribute(u,t)}function Os(e){return Array.from(e.childNodes)}function j(e,u){u=""+u,e.data!==u&&(e.data=u)}function ze(e,u){e.value=u??""}function K(e,u,t){e.classList[t?"add":"remove"](u)}var Us=class{constructor(e=!1){this.is_svg=!1,this.is_svg=e,this.e=this.n=null}c(e){this.h(e)}m(e,u,t=null){this.e||(this.is_svg?this.e=js(u.nodeName):this.e=v(u.nodeType===11?"TEMPLATE":u.nodeName),this.t=u.tagName!=="TEMPLATE"?u:u.content,this.c(e)),this.i(t)}h(e){this.e.innerHTML=e,this.n=Array.from(this.e.nodeName==="TEMPLATE"?this.e.content.childNodes:this.e.childNodes)}i(e){for(let u=0;ue.indexOf(r)===-1?u.push(r):t.push(r)),t.forEach(r=>r()),$=u}var _e=new Set,J;function le(){J={r:0,c:[],p:J}}function ne(){J.r||W(J.c),J=J.p}function z(e,u){e&&e.i&&(_e.delete(e),e.i(u))}function U(e,u,t,r){if(e&&e.o){if(_e.has(e))return;_e.add(e),J.c.push(()=>{_e.delete(e),r&&(t&&e.d(1),r())}),e.o(u)}else r&&r()}function Gs(e,u){U(e,1,1,()=>{u.delete(e.key)})}function Js(e,u,t,r,s,a,l,n,i,E,_,f){let d=e.length,h=a.length,o=d;const c={};for(;o--;)c[e[o].key]=o;const g=[],A=new Map,B=new Map,T=[];for(o=h;o--;){const b=f(s,a,o),H=t(b);let y=l.get(H);y?T.push(()=>y.p(b,u)):(y=E(H,b),y.c()),A.set(H,g[o]=y),H in c&&B.set(H,Math.abs(o-c[H]))}const D=new Set,q=new Set;function L(b){z(b,1),b.m(n,_),l.set(b.key,b),_=b.first,h--}for(;d&&h;){const b=g[h-1],H=e[d-1],y=b.key,x=H.key;b===H?(_=b.first,d--,h--):A.has(x)?!l.has(y)||D.has(y)?L(b):q.has(x)?d--:B.get(y)>B.get(x)?(q.add(y),L(b)):(D.add(x),d--):(i(H,l),d--)}for(;d--;){const b=e[d];A.has(b.key)||i(b,l)}for(;h;)L(g[h-1]);return W(T),g}function Ws(e,u,t){const r=e.$$.props[u];r!==void 0&&(e.$$.bound[r]=t,t(e.$$.ctx[r]))}function Fe(e){e&&e.c()}function fe(e,u,t,r){const{fragment:s,after_update:a}=e.$$;s&&s.m(u,t),r||pe(()=>{const l=e.$$.on_mount.map(du).filter(Cu);e.$$.on_destroy?e.$$.on_destroy.push(...l):W(l),e.$$.on_mount=[]}),a.forEach(pe)}function he(e,u){const t=e.$$;t.fragment!==null&&(Ks(t.after_update),W(t.on_destroy),t.fragment&&t.fragment.d(u),t.on_destroy=t.fragment=null,t.ctx=[])}function Zs(e,u){e.$$.dirty[0]===-1&&(X.push(e),xs(),e.$$.dirty.fill(0)),e.$$.dirty[u/31|0]|=1<{const o=h.length?h[0]:d;return E.ctx&&s(E.ctx[f],E.ctx[f]=o)&&(!E.skip_bound&&E.bound[f]&&E.bound[f](o),_&&Zs(e,f)),d}):[],E.update(),_=!0,W(E.before_update),E.fragment=r?r(E.ctx):!1,u.target){if(u.hydrate){const f=Os(u.target);E.fragment&&E.fragment.l(f),f.forEach(p)}else E.fragment&&E.fragment.c();u.intro&&z(e.$$.fragment),fe(e,u.target,u.anchor,u.customElement),gu()}re(i)}var Ce=class{$destroy(){he(this,1),this.$destroy=P}$on(e,u){if(!Cu(u))return P;const t=this.$$.callbacks[e]||(this.$$.callbacks[e]=[]);return t.push(u),()=>{const r=t.indexOf(u);r!==-1&&t.splice(r,1)}}$set(e){this.$$set&&!zs(e)&&(this.$$.skip_bound=!0,this.$$set(e),this.$$.skip_bound=!1)}};function O(e){const u=typeof e=="string"?e.charCodeAt(0):e;return u>=97&&u<=122||u>=65&&u<=90}function Q(e){const u=typeof e=="string"?e.charCodeAt(0):e;return u>=48&&u<=57}function V(e){return O(e)||Q(e)}var Ys=["art-lojban","cel-gaulish","no-bok","no-nyn","zh-guoyu","zh-hakka","zh-min","zh-min-nan","zh-xiang"],je={"en-gb-oed":"en-GB-oxendict","i-ami":"ami","i-bnn":"bnn","i-default":null,"i-enochian":null,"i-hak":"hak","i-klingon":"tlh","i-lux":"lb","i-mingo":null,"i-navajo":"nv","i-pwn":"pwn","i-tao":"tao","i-tay":"tay","i-tsu":"tsu","sgn-be-fr":"sfb","sgn-be-nl":"vgt","sgn-ch-de":"sgg","art-lojban":"jbo","cel-gaulish":null,"no-bok":"nb","no-nyn":"nn","zh-guoyu":"cmn","zh-hakka":"hak","zh-min":null,"zh-min-nan":"nan","zh-xiang":"hsn"},Xs={}.hasOwnProperty;function Au(e,u={}){const t=Oe(),r=String(e),s=r.toLowerCase();let a=0;if(e==null)throw new Error("Expected string, got `"+e+"`");if(Xs.call(je,s)){const n=je[s];return(u.normalize===void 0||u.normalize===null||u.normalize)&&typeof n=="string"?Au(n):(t[Ys.includes(s)?"regular":"irregular"]=r,t)}for(;O(s.charCodeAt(a))&&a<9;)a++;if(a>1&&a<9){if(t.language=r.slice(0,a),a<4){let n=0;for(;s.charCodeAt(a)===45&&O(s.charCodeAt(a+1))&&O(s.charCodeAt(a+2))&&O(s.charCodeAt(a+3))&&!O(s.charCodeAt(a+4));){if(n>2)return l(a,3,"Too many extended language subtags, expected at most 3 subtags");t.extendedLanguageSubtags.push(r.slice(a+1,a+4)),a+=4,n++}}for(s.charCodeAt(a)===45&&O(s.charCodeAt(a+1))&&O(s.charCodeAt(a+2))&&O(s.charCodeAt(a+3))&&O(s.charCodeAt(a+4))&&!O(s.charCodeAt(a+5))&&(t.script=r.slice(a+1,a+5),a+=5),s.charCodeAt(a)===45&&(O(s.charCodeAt(a+1))&&O(s.charCodeAt(a+2))&&!O(s.charCodeAt(a+3))?(t.region=r.slice(a+1,a+3),a+=3):Q(s.charCodeAt(a+1))&&Q(s.charCodeAt(a+2))&&Q(s.charCodeAt(a+3))&&!Q(s.charCodeAt(a+4))&&(t.region=r.slice(a+1,a+4),a+=4));s.charCodeAt(a)===45;){const n=a+1;let i=n;for(;V(s.charCodeAt(i));){if(i-n>7)return l(i,1,"Too long variant, expected at most 8 characters");i++}if(i-n>4||i-n>3&&Q(s.charCodeAt(n)))t.variants.push(r.slice(n,i)),a=i;else break}for(;s.charCodeAt(a)===45&&!(s.charCodeAt(a+1)===120||!V(s.charCodeAt(a+1))||s.charCodeAt(a+2)!==45||!V(s.charCodeAt(a+3)));){let n=a+2,i=0;for(;s.charCodeAt(n)===45&&V(s.charCodeAt(n+1))&&V(s.charCodeAt(n+2));){const E=n+1;for(n=E+2,i++;V(s.charCodeAt(n));){if(n-E>7)return l(n,2,"Too long extension, expected at most 8 characters");n++}}if(!i)return l(n,4,"Empty extension, extensions must have at least 2 characters of content");t.extensions.push({singleton:r.charAt(a+1),extensions:r.slice(a+3,n).split("-")}),a=n}}else a=0;if(a===0&&s.charCodeAt(a)===120||s.charCodeAt(a)===45&&s.charCodeAt(a+1)===120){a=a?a+2:1;let n=a;for(;s.charCodeAt(n)===45&&V(s.charCodeAt(n+1));){const i=a+1;for(n=i;V(s.charCodeAt(n));){if(n-i>7)return l(n,5,"Too long private-use area, expected at most 8 characters");n++}t.privateuse.push(r.slice(a+1,n)),a=n}}if(a!==r.length)return l(a,6,"Found superfluous content after tag");return t;function l(n,i,E){return u.warning&&u.warning(E,i,n),u.forgiving?t:Oe()}}function Oe(){return{language:null,extendedLanguageSubtags:[],script:null,region:null,variants:[],extensions:[],privateuse:[],irregular:null,regular:null}}function Ue(e,u,t){const r=e.slice();return r[8]=u[t][0],r[9]=u[t][1],r}function Qs(e){let u,t,r,s,a,l=e[0]&&Ie();return{c(){l&&l.c(),u=M(),t=v("div"),r=v("p"),r.textContent=`${e[3](30)}`,s=M(),a=v("p"),a.textContent=`${e[3](40)}`,C(r,"class","pagefind-ui__result-title pagefind-ui__loading svelte-j9e30"),C(a,"class","pagefind-ui__result-excerpt pagefind-ui__loading svelte-j9e30"),C(t,"class","pagefind-ui__result-inner svelte-j9e30")},m(n,i){l&&l.m(n,i),k(n,u,i),k(n,t,i),R(t,r),R(t,s),R(t,a)},p(n,i){n[0]?l||(l=Ie(),l.c(),l.m(u.parentNode,u)):l&&(l.d(1),l=null)},d(n){l&&l.d(n),n&&p(u),n&&p(t)}}}function $s(e){let u,t,r,s,a=e[1].meta?.title+"",l,n,i,E,_=e[1].excerpt+"",f,d=e[0]&&Pe(e),h=e[2].length&&xe(e);return{c(){d&&d.c(),u=M(),t=v("div"),r=v("p"),s=v("a"),l=S(a),i=M(),E=v("p"),f=M(),h&&h.c(),C(s,"class","pagefind-ui__result-link svelte-j9e30"),C(s,"href",n=e[1].meta?.url||e[1].url),C(r,"class","pagefind-ui__result-title svelte-j9e30"),C(E,"class","pagefind-ui__result-excerpt svelte-j9e30"),C(t,"class","pagefind-ui__result-inner svelte-j9e30")},m(o,c){d&&d.m(o,c),k(o,u,c),k(o,t,c),R(t,r),R(r,s),R(s,l),R(t,i),R(t,E),E.innerHTML=_,R(t,f),h&&h.m(t,null)},p(o,c){o[0]?d?d.p(o,c):(d=Pe(o),d.c(),d.m(u.parentNode,u)):d&&(d.d(1),d=null),c&2&&a!==(a=o[1].meta?.title+"")&&j(l,a),c&2&&n!==(n=o[1].meta?.url||o[1].url)&&C(s,"href",n),c&2&&_!==(_=o[1].excerpt+"")&&(E.innerHTML=_),o[2].length?h?h.p(o,c):(h=xe(o),h.c(),h.m(t,null)):h&&(h.d(1),h=null)},d(o){d&&d.d(o),o&&p(u),o&&p(t),h&&h.d()}}}function Ie(e){let u;return{c(){u=v("div"),C(u,"class","pagefind-ui__result-thumb pagefind-ui__loading svelte-j9e30")},m(t,r){k(t,u,r)},d(t){t&&p(u)}}}function Pe(e){let u,t=e[1].meta.image&&Le(e);return{c(){u=v("div"),t&&t.c(),C(u,"class","pagefind-ui__result-thumb svelte-j9e30")},m(r,s){k(r,u,s),t&&t.m(u,null)},p(r,s){r[1].meta.image?t?t.p(r,s):(t=Le(r),t.c(),t.m(u,null)):t&&(t.d(1),t=null)},d(r){r&&p(u),t&&t.d()}}}function Le(e){let u,t,r;return{c(){u=v("img"),C(u,"class","pagefind-ui__result-image svelte-j9e30"),ce(u.src,t=e[1].meta?.image)||C(u,"src",t),C(u,"alt",r=e[1].meta?.image_alt||e[1].meta?.title)},m(s,a){k(s,u,a)},p(s,a){a&2&&!ce(u.src,t=s[1].meta?.image)&&C(u,"src",t),a&2&&r!==(r=s[1].meta?.image_alt||s[1].meta?.title)&&C(u,"alt",r)},d(s){s&&p(u)}}}function xe(e){let u,t=e[2],r=[];for(let s=0;se.toLocaleUpperCase();function ua(e,u,t){let{show_images:r=!0}=u,{process_result:s=null}=u,{result:a={data:async()=>{}}}=u;const l=["title","image","image_alt","url"];let n,i=[];const E=async f=>{t(1,n=await f.data()),t(1,n=s?.(n)??n),t(2,i=Object.entries(n.meta).filter(([d])=>!l.includes(d)))},_=(f=30)=>". ".repeat(Math.floor(10+Math.random()*f));return e.$$set=f=>{"show_images"in f&&t(0,r=f.show_images),"process_result"in f&&t(4,s=f.process_result),"result"in f&&t(5,a=f.result)},e.$$.update=()=>{e.$$.dirty&32&&E(a)},[r,n,i,_,s,a]}var ta=class extends Ce{constructor(e){super(),de(this,e,ua,ea,Ee,{show_images:0,process_result:4,result:5})}},ra=ta;function Ke(e,u,t){const r=e.slice();return r[11]=u[t][0],r[12]=u[t][1],r}function Ge(e,u,t){const r=e.slice();return r[15]=u[t],r}function sa(e){let u,t,r,s,a,l=e[0]&&Je();return{c(){l&&l.c(),u=M(),t=v("div"),r=v("p"),r.textContent=`${e[5](30)}`,s=M(),a=v("p"),a.textContent=`${e[5](40)}`,C(r,"class","pagefind-ui__result-title pagefind-ui__loading svelte-4xnkmf"),C(a,"class","pagefind-ui__result-excerpt pagefind-ui__loading svelte-4xnkmf"),C(t,"class","pagefind-ui__result-inner svelte-4xnkmf")},m(n,i){l&&l.m(n,i),k(n,u,i),k(n,t,i),R(t,r),R(t,s),R(t,a)},p(n,i){n[0]?l||(l=Je(),l.c(),l.m(u.parentNode,u)):l&&(l.d(1),l=null)},d(n){l&&l.d(n),n&&p(u),n&&p(t)}}}function aa(e){let u,t,r,s,a=e[1].meta?.title+"",l,n,i,E,_,f=e[0]&&We(e),d=e[4]&&Ye(e),h=e[3],o=[];for(let g=0;ge.toLocaleUpperCase();function na(e,u,t){let{show_images:r=!0}=u,{process_result:s=null}=u,{result:a={data:async()=>{}}}=u;const l=["title","image","image_alt","url"];let n,i=[],E=[],_=!1;const f=(o,c)=>{if(o.length<=c)return o;const g=[...o].sort((A,B)=>B.locations.length-A.locations.length).slice(0,3).map(A=>A.url);return o.filter(A=>g.includes(A.url))},d=async o=>{t(1,n=await o.data()),t(1,n=s?.(n)??n),t(2,i=Object.entries(n.meta).filter(([c])=>!l.includes(c))),Array.isArray(n.sub_results)&&(t(4,_=n.sub_results?.[0]?.url===(n.meta?.url||n.url)),_?t(3,E=f(n.sub_results.slice(1),3)):t(3,E=f([...n.sub_results],3)))},h=(o=30)=>". ".repeat(Math.floor(10+Math.random()*o));return e.$$set=o=>{"show_images"in o&&t(0,r=o.show_images),"process_result"in o&&t(6,s=o.process_result),"result"in o&&t(7,a=o.result)},e.$$.update=()=>{e.$$.dirty&128&&d(a)},[r,n,i,E,_,h,s,a]}var ia=class extends Ce{constructor(e){super(),de(this,e,na,la,Ee,{show_images:0,process_result:6,result:7})}},oa=ia;function uu(e,u,t){const r=e.slice();return r[10]=u[t][0],r[11]=u[t][1],r[12]=u,r[13]=t,r}function tu(e,u,t){const r=e.slice();return r[14]=u[t][0],r[15]=u[t][1],r[16]=u,r[17]=t,r}function ru(e){let u,t,r=e[4]("filters_label",e[5],e[6])+"",s,a,l=Object.entries(e[1]),n=[];for(let i=0;ie.toLocaleUpperCase(),iu=e=>e.toLowerCase();function ca(e,u,t){let{available_filters:r=null}=u,{show_empty_filters:s=!0}=u,{open_filters:a=[]}=u,{translate:l=()=>""}=u,{automatic_translations:n={}}=u,{translations:i={}}=u,{selected_filters:E={}}=u,_=!1,f=!1;function d(h,o){E[`${h}:${o}`]=this.checked,t(0,E)}return e.$$set=h=>{"available_filters"in h&&t(1,r=h.available_filters),"show_empty_filters"in h&&t(2,s=h.show_empty_filters),"open_filters"in h&&t(3,a=h.open_filters),"translate"in h&&t(4,l=h.translate),"automatic_translations"in h&&t(5,n=h.automatic_translations),"translations"in h&&t(6,i=h.translations),"selected_filters"in h&&t(0,E=h.selected_filters)},e.$$.update=()=>{if(e.$$.dirty&258&&r&&!_){t(8,_=!0);let h=Object.entries(r||{});h.length===1&&Object.entries(h[0][1])?.length<=6&&t(7,f=!0)}},[E,r,s,a,l,n,i,f,_,d]}var Ea=class extends Ce{constructor(e){super(),de(this,e,ca,_a,Ee,{available_filters:1,show_empty_filters:2,open_filters:3,translate:4,automatic_translations:5,translations:6,selected_filters:0})}},fa=Ea,Ru={};F(Ru,{comments:()=>vu,default:()=>ha,direction:()=>Tu,strings:()=>pu,thanks_to:()=>Bu});var Bu="Jan Claasen ",vu="",Tu="ltr",pu={placeholder:"Soek",clear_search:"Opruim",load_more:"Laai nog resultate",search_label:"Soek hierdie webwerf",filters_label:"Filters",zero_results:"Geen resultate vir [SEARCH_TERM]",many_results:"[COUNT] resultate vir [SEARCH_TERM]",one_result:"[COUNT] resultate vir [SEARCH_TERM]",alt_search:"Geen resultate vir [SEARCH_TERM]. Toon resultate vir [DIFFERENT_TERM] in plaas daarvan",search_suggestion:"Geen resultate vir [SEARCH_TERM]. Probeer eerder een van die volgende terme:",searching:"Soek vir [SEARCH_TERM]"},ha={thanks_to:Bu,comments:vu,direction:Tu,strings:pu},ku={};F(ku,{comments:()=>Du,default:()=>da,direction:()=>bu,strings:()=>Mu,thanks_to:()=>Fu});var Fu="Jermanuts",Du="",bu="rtl",Mu={placeholder:"بحث",clear_search:"امسح",load_more:"حمِّل المزيد من النتائج",search_label:"ابحث في هذا الموقع",filters_label:"تصفيات",zero_results:"لا توجد نتائج ل [SEARCH_TERM]",many_results:"[COUNT] نتائج ل [SEARCH_TERM]",one_result:"[COUNT] نتيجة ل [SEARCH_TERM]",alt_search:"لا توجد نتائج ل [SEARCH_TERM]. يعرض النتائج ل [DIFFERENT_TERM] بدلاً من ذلك",search_suggestion:"لا توجد نتائج ل [SEARCH_TERM]. جرب أحد عمليات البحث التالية:",searching:"يبحث عن [SEARCH_TERM]..."},da={thanks_to:Fu,comments:Du,direction:bu,strings:Mu},Su={};F(Su,{comments:()=>Nu,default:()=>Ca,direction:()=>yu,strings:()=>wu,thanks_to:()=>Hu});var Hu="Maruf Alom ",Nu="",yu="ltr",wu={placeholder:"অনুসন্ধান করুন",clear_search:"মুছে ফেলুন",load_more:"আরো ফলাফল দেখুন",search_label:"এই ওয়েবসাইটে অনুসন্ধান করুন",filters_label:"ফিল্টার",zero_results:"[SEARCH_TERM] এর জন্য কিছু খুঁজে পাওয়া যায়নি",many_results:"[COUNT]-টি ফলাফল পাওয়া গিয়েছে [SEARCH_TERM] এর জন্য",one_result:"[COUNT]-টি ফলাফল পাওয়া গিয়েছে [SEARCH_TERM] এর জন্য",alt_search:"কোন কিছু খুঁজে পাওয়া যায়নি [SEARCH_TERM] এর জন্য. পরিবর্তে [DIFFERENT_TERM] এর জন্য দেখানো হচ্ছে",search_suggestion:"কোন কিছু খুঁজে পাওয়া যায়নি [SEARCH_TERM] এর বিষয়ে. নিন্মের বিষয়বস্তু খুঁজে দেখুন:",searching:"অনুসন্ধান চলছে [SEARCH_TERM]..."},Ca={thanks_to:Hu,comments:Nu,direction:yu,strings:wu},zu={};F(zu,{comments:()=>Ou,default:()=>ma,direction:()=>Uu,strings:()=>Iu,thanks_to:()=>ju});var ju="Pablo Villaverde ",Ou="",Uu="ltr",Iu={placeholder:"Cerca",clear_search:"Netejar",load_more:"Veure més resultats",search_label:"Cerca en aquest lloc",filters_label:"Filtres",zero_results:"No es van trobar resultats per [SEARCH_TERM]",many_results:"[COUNT] resultats trobats per [SEARCH_TERM]",one_result:"[COUNT] resultat trobat per [SEARCH_TERM]",alt_search:"No es van trobar resultats per [SEARCH_TERM]. Mostrant al seu lloc resultats per [DIFFERENT_TERM]",search_suggestion:"No es van trobar resultats per [SEARCH_TERM]. Proveu una de les cerques següents:",searching:"Cercant [SEARCH_TERM]..."},ma={thanks_to:ju,comments:Ou,direction:Uu,strings:Iu},Pu={};F(Pu,{comments:()=>xu,default:()=>ga,direction:()=>qu,strings:()=>Vu,thanks_to:()=>Lu});var Lu="Dalibor Hon ",xu="",qu="ltr",Vu={placeholder:"Hledat",clear_search:"Smazat",load_more:"Načíst další výsledky",search_label:"Prohledat tuto stránku",filters_label:"Filtry",zero_results:"Žádné výsledky pro [SEARCH_TERM]",many_results:"[COUNT] výsledků pro [SEARCH_TERM]",one_result:"[COUNT] výsledek pro [SEARCH_TERM]",alt_search:"Žádné výsledky pro [SEARCH_TERM]. Zobrazují se výsledky pro [DIFFERENT_TERM]",search_suggestion:"Žádné výsledky pro [SEARCH_TERM]. Související výsledky hledání:",searching:"Hledám [SEARCH_TERM]..."},ga={thanks_to:Lu,comments:xu,direction:qu,strings:Vu},Ku={};F(Ku,{comments:()=>Ju,default:()=>Aa,direction:()=>Wu,strings:()=>Zu,thanks_to:()=>Gu});var Gu="Jonas Smedegaard ",Ju="",Wu="ltr",Zu={placeholder:"Søg",clear_search:"Nulstil",load_more:"Indlæs flere resultater",search_label:"Søg på dette website",filters_label:"Filtre",zero_results:"Ingen resultater for [SEARCH_TERM]",many_results:"[COUNT] resultater for [SEARCH_TERM]",one_result:"[COUNT] resultat for [SEARCH_TERM]",alt_search:"Ingen resultater for [SEARCH_TERM]. Viser resultater for [DIFFERENT_TERM] i stedet",search_suggestion:"Ingen resultater for [SEARCH_TERM]. Prøv et af disse søgeord i stedet:",searching:"Søger efter [SEARCH_TERM]..."},Aa={thanks_to:Gu,comments:Ju,direction:Wu,strings:Zu},Yu={};F(Yu,{comments:()=>Qu,default:()=>Ra,direction:()=>$u,strings:()=>et,thanks_to:()=>Xu});var Xu="Jan Claasen ",Qu="",$u="ltr",et={placeholder:"Suche",clear_search:"Löschen",load_more:"Mehr Ergebnisse laden",search_label:"Suche diese Seite",filters_label:"Filter",zero_results:"Keine Ergebnisse für [SEARCH_TERM]",many_results:"[COUNT] Ergebnisse für [SEARCH_TERM]",one_result:"[COUNT] Ergebnis für [SEARCH_TERM]",alt_search:"Keine Ergebnisse für [SEARCH_TERM]. Stattdessen werden Ergebnisse für [DIFFERENT_TERM] angezeigt",search_suggestion:"Keine Ergebnisse für [SEARCH_TERM]. Versuchen Sie eine der folgenden Suchen:",searching:"Suche für [SEARCH_TERM]"},Ra={thanks_to:Xu,comments:Qu,direction:$u,strings:et},ut={};F(ut,{comments:()=>rt,default:()=>Ba,direction:()=>st,strings:()=>at,thanks_to:()=>tt});var tt="Liam Bigelow ",rt="",st="ltr",at={placeholder:"Search",clear_search:"Clear",load_more:"Load more results",search_label:"Search this site",filters_label:"Filters",zero_results:"No results for [SEARCH_TERM]",many_results:"[COUNT] results for [SEARCH_TERM]",one_result:"[COUNT] result for [SEARCH_TERM]",alt_search:"No results for [SEARCH_TERM]. Showing results for [DIFFERENT_TERM] instead",search_suggestion:"No results for [SEARCH_TERM]. Try one of the following searches:",searching:"Searching for [SEARCH_TERM]..."},Ba={thanks_to:tt,comments:rt,direction:st,strings:at},lt={};F(lt,{comments:()=>it,default:()=>va,direction:()=>ot,strings:()=>_t,thanks_to:()=>nt});var nt="Pablo Villaverde ",it="",ot="ltr",_t={placeholder:"Buscar",clear_search:"Limpiar",load_more:"Ver más resultados",search_label:"Buscar en este sitio",filters_label:"Filtros",zero_results:"No se encontraron resultados para [SEARCH_TERM]",many_results:"[COUNT] resultados encontrados para [SEARCH_TERM]",one_result:"[COUNT] resultado encontrado para [SEARCH_TERM]",alt_search:"No se encontraron resultados para [SEARCH_TERM]. Mostrando en su lugar resultados para [DIFFERENT_TERM]",search_suggestion:"No se encontraron resultados para [SEARCH_TERM]. Prueba una de las siguientes búsquedas:",searching:"Buscando [SEARCH_TERM]..."},va={thanks_to:nt,comments:it,direction:ot,strings:_t},ct={};F(ct,{comments:()=>ft,default:()=>Ta,direction:()=>ht,strings:()=>dt,thanks_to:()=>Et});var Et="Mikel Larreategi ",ft="",ht="ltr",dt={placeholder:"Bilatu",clear_search:"Garbitu",load_more:"Kargatu emaitza gehiagi",search_label:"Bilatu",filters_label:"Iragazkiak",zero_results:"Ez dago emaitzarik [SEARCH_TERM] bilaketarentzat",many_results:"[COUNT] emaitza [SEARCH_TERM] bilaketarentzat",one_result:"Emaitza bat [COUNT] [SEARCH_TERM] bilaketarentzat",alt_search:"Ez dago emaitzarik [SEARCH_TERM] bilaketarentzat. [DIFFERENT_TERM] bilaketaren emaitzak erakusten",search_suggestion:"Ez dago emaitzarik [SEARCH_TERM] bilaketarentzat. Saiatu hauetako beste bateikin:",searching:"[SEARCH_TERM] bilatzen..."},Ta={thanks_to:Et,comments:ft,direction:ht,strings:dt},Ct={};F(Ct,{comments:()=>gt,default:()=>pa,direction:()=>At,strings:()=>Rt,thanks_to:()=>mt});var mt="Ali Khaleqi Yekta ",gt="",At="rtl",Rt={placeholder:"جستجو",clear_search:"پاکسازی",load_more:"بارگذاری نتایج بیشتر",search_label:"جستجو در سایت",filters_label:"فیلترها",zero_results:"نتیجه‌ای برای [SEARCH_TERM] یافت نشد",many_results:"[COUNT] نتیجه برای [SEARCH_TERM] یافت شد",one_result:"[COUNT] نتیجه برای [SEARCH_TERM] یافت شد",alt_search:"نتیجه‌ای برای [SEARCH_TERM] یافت نشد. در عوض نتایج برای [DIFFERENT_TERM] نمایش داده می‌شود",search_suggestion:"نتیجه‌ای برای [SEARCH_TERM] یافت نشد. یکی از جستجوهای زیر را امتحان کنید:",searching:"در حال جستجوی [SEARCH_TERM]..."},pa={thanks_to:mt,comments:gt,direction:At,strings:Rt},Bt={};F(Bt,{comments:()=>Tt,default:()=>ka,direction:()=>pt,strings:()=>kt,thanks_to:()=>vt});var vt="Valtteri Laitinen ",Tt="",pt="ltr",kt={placeholder:"Haku",clear_search:"Tyhjennä",load_more:"Lataa lisää tuloksia",search_label:"Hae tältä sivustolta",filters_label:"Suodattimet",zero_results:"Ei tuloksia haulle [SEARCH_TERM]",many_results:"[COUNT] tulosta haulle [SEARCH_TERM]",one_result:"[COUNT] tulos haulle [SEARCH_TERM]",alt_search:"Ei tuloksia haulle [SEARCH_TERM]. Näytetään tulokset sen sijaan haulle [DIFFERENT_TERM]",search_suggestion:"Ei tuloksia haulle [SEARCH_TERM]. Kokeile jotain seuraavista:",searching:"Haetaan [SEARCH_TERM]..."},ka={thanks_to:vt,comments:Tt,direction:pt,strings:kt},Ft={};F(Ft,{comments:()=>bt,default:()=>Fa,direction:()=>Mt,strings:()=>St,thanks_to:()=>Dt});var Dt="Nicolas Friedli ",bt="",Mt="ltr",St={placeholder:"Rechercher",clear_search:"Nettoyer",load_more:"Charger plus de résultats",search_label:"Recherche sur ce site",filters_label:"Filtres",zero_results:"Pas de résultat pour [SEARCH_TERM]",many_results:"[COUNT] résultats pour [SEARCH_TERM]",one_result:"[COUNT] résultat pour [SEARCH_TERM]",alt_search:"Pas de résultat pour [SEARCH_TERM]. Montre les résultats pour [DIFFERENT_TERM] à la place",search_suggestion:"Pas de résultat pour [SEARCH_TERM]. Essayer une des recherches suivantes:",searching:"Recherche [SEARCH_TERM]..."},Fa={thanks_to:Dt,comments:bt,direction:Mt,strings:St},Ht={};F(Ht,{comments:()=>yt,default:()=>Da,direction:()=>wt,strings:()=>zt,thanks_to:()=>Nt});var Nt="Pablo Villaverde ",yt="",wt="ltr",zt={placeholder:"Buscar",clear_search:"Limpar",load_more:"Ver máis resultados",search_label:"Buscar neste sitio",filters_label:"Filtros",zero_results:"Non se atoparon resultados para [SEARCH_TERM]",many_results:"[COUNT] resultados atopados para [SEARCH_TERM]",one_result:"[COUNT] resultado atopado para [SEARCH_TERM]",alt_search:"Non se atoparon resultados para [SEARCH_TERM]. Amosando no seu lugar resultados para [DIFFERENT_TERM]",search_suggestion:"Non se atoparon resultados para [SEARCH_TERM]. Probe unha das seguintes pesquisas:",searching:"Buscando [SEARCH_TERM]..."},Da={thanks_to:Nt,comments:yt,direction:wt,strings:zt},jt={};F(jt,{comments:()=>Ut,default:()=>ba,direction:()=>It,strings:()=>Pt,thanks_to:()=>Ot});var Ot="Nir Tamir ",Ut="",It="rtl",Pt={placeholder:"חיפוש",clear_search:"ניקוי",load_more:"עוד תוצאות",search_label:"חיפוש באתר זה",filters_label:"מסננים",zero_results:"לא נמצאו תוצאות עבור [SEARCH_TERM]",many_results:"נמצאו [COUNT] תוצאות עבור [SEARCH_TERM]",one_result:"נמצאה תוצאה אחת עבור [SEARCH_TERM]",alt_search:"לא נמצאו תוצאות עבור [SEARCH_TERM]. מוצגות תוצאות עבור [DIFFERENT_TERM]",search_suggestion:"לא נמצאו תוצאות עבור [SEARCH_TERM]. נסו אחד מהחיפושים הבאים:",searching:"מחפש את [SEARCH_TERM]..."},ba={thanks_to:Ot,comments:Ut,direction:It,strings:Pt},Lt={};F(Lt,{comments:()=>qt,default:()=>Ma,direction:()=>Vt,strings:()=>Kt,thanks_to:()=>xt});var xt="Amit Yadav ",qt="",Vt="ltr",Kt={placeholder:"खोजें",clear_search:"साफ करें",load_more:"और अधिक परिणाम लोड करें",search_label:"इस साइट में खोजें",filters_label:"फ़िल्टर",zero_results:"कोई परिणाम [SEARCH_TERM] के लिए नहीं मिला",many_results:"[COUNT] परिणाम [SEARCH_TERM] के लिए मिले",one_result:"[COUNT] परिणाम [SEARCH_TERM] के लिए मिला",alt_search:"[SEARCH_TERM] के लिए कोई परिणाम नहीं मिला। इसके बजाय [DIFFERENT_TERM] के लिए परिणाम दिखा रहा है",search_suggestion:"[SEARCH_TERM] के लिए कोई परिणाम नहीं मिला। निम्नलिखित खोजों में से कोई एक आज़माएं:",searching:"[SEARCH_TERM] की खोज की जा रही है..."},Ma={thanks_to:xt,comments:qt,direction:Vt,strings:Kt},Gt={};F(Gt,{comments:()=>Wt,default:()=>Sa,direction:()=>Zt,strings:()=>Yt,thanks_to:()=>Jt});var Jt="Diomed ",Wt="",Zt="ltr",Yt={placeholder:"Traži",clear_search:"Očisti",load_more:"Učitaj više rezultata",search_label:"Pretraži ovu stranicu",filters_label:"Filteri",zero_results:"Nema rezultata za [SEARCH_TERM]",many_results:"[COUNT] rezultata za [SEARCH_TERM]",one_result:"[COUNT] rezultat za [SEARCH_TERM]",alt_search:"Nema rezultata za [SEARCH_TERM]. Prikazujem rezultate za [DIFFERENT_TERM]",search_suggestion:"Nema rezultata za [SEARCH_TERM]. Pokušaj s jednom od ovih pretraga:",searching:"Pretražujem [SEARCH_TERM]..."},Sa={thanks_to:Jt,comments:Wt,direction:Zt,strings:Yt},Xt={};F(Xt,{comments:()=>$t,default:()=>Ha,direction:()=>e0,strings:()=>u0,thanks_to:()=>Qt});var Qt="Adam Laki ",$t="",e0="ltr",u0={placeholder:"Keresés",clear_search:"Törlés",load_more:"További találatok betöltése",search_label:"Keresés az oldalon",filters_label:"Szűrés",zero_results:"Nincs találat a(z) [SEARCH_TERM] kifejezésre",many_results:"[COUNT] db találat a(z) [SEARCH_TERM] kifejezésre",one_result:"[COUNT] db találat a(z) [SEARCH_TERM] kifejezésre",alt_search:"Nincs találat a(z) [SEARCH_TERM] kifejezésre. Találatok mutatása inkább a(z) [DIFFERENT_TERM] kifejezésre",search_suggestion:"Nincs találat a(z) [SEARCH_TERM] kifejezésre. Próbáld meg a következő keresések egyikét:",searching:"Keresés a(z) [SEARCH_TERM] kifejezésre..."},Ha={thanks_to:Qt,comments:$t,direction:e0,strings:u0},t0={};F(t0,{comments:()=>s0,default:()=>Na,direction:()=>a0,strings:()=>l0,thanks_to:()=>r0});var r0="Nixentric",s0="",a0="ltr",l0={placeholder:"Cari",clear_search:"Bersihkan",load_more:"Muat lebih banyak hasil",search_label:"Telusuri situs ini",filters_label:"Filter",zero_results:"[SEARCH_TERM] tidak ditemukan",many_results:"Ditemukan [COUNT] hasil untuk [SEARCH_TERM]",one_result:"Ditemukan [COUNT] hasil untuk [SEARCH_TERM]",alt_search:"[SEARCH_TERM] tidak ditemukan. Menampilkan hasil [DIFFERENT_TERM] sebagai gantinya",search_suggestion:"[SEARCH_TERM] tidak ditemukan. Coba salah satu pencarian berikut ini:",searching:"Mencari [SEARCH_TERM]..."},Na={thanks_to:r0,comments:s0,direction:a0,strings:l0},n0={};F(n0,{comments:()=>o0,default:()=>ya,direction:()=>_0,strings:()=>c0,thanks_to:()=>i0});var i0="Cosette Bruhns Alonso, Andrew Janco ",o0="",_0="ltr",c0={placeholder:"Cerca",clear_search:"Cancella la cronologia",load_more:"Mostra più risultati",search_label:"Cerca nel sito",filters_label:"Filtri di ricerca",zero_results:"Nessun risultato per [SEARCH_TERM]",many_results:"[COUNT] risultati per [SEARCH_TERM]",one_result:"[COUNT] risultato per [SEARCH_TERM]",alt_search:"Nessun risultato per [SEARCH_TERM]. Mostrando risultati per [DIFFERENT_TERM] come alternativa.",search_suggestion:"Nessun risultato per [SEARCH_TERM]. Prova una delle seguenti ricerche:",searching:"Cercando [SEARCH_TERM]..."},ya={thanks_to:i0,comments:o0,direction:_0,strings:c0},E0={};F(E0,{comments:()=>h0,default:()=>wa,direction:()=>d0,strings:()=>C0,thanks_to:()=>f0});var f0="Tate",h0="",d0="ltr",C0={placeholder:"検索",clear_search:"クリア",load_more:"次を読み込む",search_label:"このサイトを検索",filters_label:"フィルタ",zero_results:"[SEARCH_TERM]の検索に一致する情報はありませんでした",many_results:"[SEARCH_TERM]の[COUNT]件の検索結果",one_result:"[SEARCH_TERM]の[COUNT]件の検索結果",alt_search:"[SEARCH_TERM]の検索に一致する情報はありませんでした。[DIFFERENT_TERM]の検索結果を表示しています",search_suggestion:"[SEARCH_TERM]の検索に一致する情報はありませんでした。次のいずれかの検索を試してください",searching:"[SEARCH_TERM]を検索しています"},wa={thanks_to:f0,comments:h0,direction:d0,strings:C0},m0={};F(m0,{comments:()=>A0,default:()=>za,direction:()=>R0,strings:()=>B0,thanks_to:()=>g0});var g0="Seokho Son ",A0="",R0="ltr",B0={placeholder:"검색어",clear_search:"비우기",load_more:"검색 결과 더 보기",search_label:"사이트 검색",filters_label:"필터",zero_results:"[SEARCH_TERM]에 대한 결과 없음",many_results:"[SEARCH_TERM]에 대한 결과 [COUNT]건",one_result:"[SEARCH_TERM]에 대한 결과 [COUNT]건",alt_search:"[SEARCH_TERM]에 대한 결과 없음. [DIFFERENT_TERM]에 대한 결과",search_suggestion:"[SEARCH_TERM]에 대한 결과 없음. 추천 검색어: ",searching:"[SEARCH_TERM] 검색 중..."},za={thanks_to:g0,comments:A0,direction:R0,strings:B0},v0={};F(v0,{comments:()=>p0,default:()=>ja,direction:()=>k0,strings:()=>F0,thanks_to:()=>T0});var T0="",p0="",k0="ltr",F0={placeholder:"Rapu",clear_search:"Whakakore",load_more:"Whakauta ētahi otinga kē",search_label:"Rapu",filters_label:"Tātari",zero_results:"Otinga kore ki [SEARCH_TERM]",many_results:"[COUNT] otinga ki [SEARCH_TERM]",one_result:"[COUNT] otinga ki [SEARCH_TERM]",alt_search:"Otinga kore ki [SEARCH_TERM]. Otinga kē ki [DIFFERENT_TERM]",search_suggestion:"Otinga kore ki [SEARCH_TERM]. whakamātau ki ngā mea atu:",searching:"Rapu ki [SEARCH_TERM]..."},ja={thanks_to:T0,comments:p0,direction:k0,strings:F0},D0={};F(D0,{comments:()=>M0,default:()=>Oa,direction:()=>S0,strings:()=>H0,thanks_to:()=>b0});var b0="Harry Min Khant ",M0="",S0="ltr",H0={placeholder:"ရှာရန်",clear_search:"ရှာဖွေမှုကို ရှင်းလင်းပါ။",load_more:"နောက်ထပ်ရလဒ်များကို တင်ပါ။",search_label:"ဤဆိုက်တွင်ရှာဖွေပါ။",filters_label:"စစ်ထုတ်မှုများ",zero_results:"[SEARCH_TERM] အတွက် ရလဒ်များ မရှိပါ",many_results:"[SEARCH_TERM] အတွက် ရလဒ် [COUNT] ခု",one_result:"[SEARCH_TERM] အတွက် ရလဒ် [COUNT]",alt_search:"[SEARCH_TERM] အတွက် ရလဒ်မရှိပါ။ ၎င်းအစား [DIFFERENT_TERM] အတွက် ရလဒ်များကို ပြသသည်။",search_suggestion:"[SEARCH_TERM] အတွက် ရလဒ်မရှိပါ။ အောက်ပါရှာဖွေမှုများထဲမှ တစ်ခုကို စမ်းကြည့်ပါ:",searching:"[SEARCH_TERM] ကို ရှာဖွေနေသည်..."},Oa={thanks_to:b0,comments:M0,direction:S0,strings:H0},N0={};F(N0,{comments:()=>w0,default:()=>Ua,direction:()=>z0,strings:()=>j0,thanks_to:()=>y0});var y0="Eirik Mikkelsen",w0="",z0="ltr",j0={placeholder:"Søk",clear_search:"Fjern",load_more:"Last flere resultater",search_label:"Søk på denne siden",filters_label:"Filtre",zero_results:"Ingen resultater for [SEARCH_TERM]",many_results:"[COUNT] resultater for [SEARCH_TERM]",one_result:"[COUNT] resultat for [SEARCH_TERM]",alt_search:"Ingen resultater for [SEARCH_TERM]. Viser resultater for [DIFFERENT_TERM] i stedet",search_suggestion:"Ingen resultater for [SEARCH_TERM]. Prøv en av disse søkeordene i stedet:",searching:"Søker etter [SEARCH_TERM]"},Ua={thanks_to:y0,comments:w0,direction:z0,strings:j0},O0={};F(O0,{comments:()=>I0,default:()=>Ia,direction:()=>P0,strings:()=>L0,thanks_to:()=>U0});var U0="Paul van Brouwershaven",I0="",P0="ltr",L0={placeholder:"Zoeken",clear_search:"Reset",load_more:"Meer resultaten laden",search_label:"Doorzoek deze site",filters_label:"Filters",zero_results:"Geen resultaten voor [SEARCH_TERM]",many_results:"[COUNT] resultaten voor [SEARCH_TERM]",one_result:"[COUNT] resultaat voor [SEARCH_TERM]",alt_search:"Geen resultaten voor [SEARCH_TERM]. In plaats daarvan worden resultaten voor [DIFFERENT_TERM] weergegeven",search_suggestion:"Geen resultaten voor [SEARCH_TERM]. Probeer een van de volgende zoekopdrachten:",searching:"Zoeken naar [SEARCH_TERM]..."},Ia={thanks_to:U0,comments:I0,direction:P0,strings:L0},x0={};F(x0,{comments:()=>V0,default:()=>Pa,direction:()=>K0,strings:()=>G0,thanks_to:()=>q0});var q0="Eirik Mikkelsen",V0="",K0="ltr",G0={placeholder:"Søk",clear_search:"Fjern",load_more:"Last fleire resultat",search_label:"Søk på denne sida",filters_label:"Filter",zero_results:"Ingen resultat for [SEARCH_TERM]",many_results:"[COUNT] resultat for [SEARCH_TERM]",one_result:"[COUNT] resultat for [SEARCH_TERM]",alt_search:"Ingen resultat for [SEARCH_TERM]. Viser resultat for [DIFFERENT_TERM] i staden",search_suggestion:"Ingen resultat for [SEARCH_TERM]. Prøv eitt av desse søkeorda i staden:",searching:"Søker etter [SEARCH_TERM]"},Pa={thanks_to:q0,comments:V0,direction:K0,strings:G0},J0={};F(J0,{comments:()=>Z0,default:()=>La,direction:()=>Y0,strings:()=>X0,thanks_to:()=>W0});var W0="Christopher Wingate",Z0="",Y0="ltr",X0={placeholder:"Søk",clear_search:"Fjern",load_more:"Last flere resultater",search_label:"Søk på denne siden",filters_label:"Filtre",zero_results:"Ingen resultater for [SEARCH_TERM]",many_results:"[COUNT] resultater for [SEARCH_TERM]",one_result:"[COUNT] resultat for [SEARCH_TERM]",alt_search:"Ingen resultater for [SEARCH_TERM]. Viser resultater for [DIFFERENT_TERM] i stedet",search_suggestion:"Ingen resultater for [SEARCH_TERM]. Prøv en av disse søkeordene i stedet:",searching:"Søker etter [SEARCH_TERM]"},La={thanks_to:W0,comments:Z0,direction:Y0,strings:X0},Q0={};F(Q0,{comments:()=>er,default:()=>xa,direction:()=>ur,strings:()=>tr,thanks_to:()=>$0});var $0="",er="",ur="ltr",tr={placeholder:"Szukaj",clear_search:"Wyczyść",load_more:"Załaduj więcej",search_label:"Przeszukaj tę stronę",filters_label:"Filtry",zero_results:"Brak wyników dla [SEARCH_TERM]",many_results:"[COUNT] wyników dla [SEARCH_TERM]",one_result:"[COUNT] wynik dla [SEARCH_TERM]",alt_search:"Brak wyników dla [SEARCH_TERM]. Wyświetlam wyniki dla [DIFFERENT_TERM]",search_suggestion:"Brak wyników dla [SEARCH_TERM]. Pokrewne wyniki wyszukiwania:",searching:"Szukam [SEARCH_TERM]..."},xa={thanks_to:$0,comments:er,direction:ur,strings:tr},rr={};F(rr,{comments:()=>ar,default:()=>qa,direction:()=>lr,strings:()=>nr,thanks_to:()=>sr});var sr="Jonatah",ar="",lr="ltr",nr={placeholder:"Pesquisar",clear_search:"Limpar",load_more:"Ver mais resultados",search_label:"Pesquisar",filters_label:"Filtros",zero_results:"Nenhum resultado encontrado para [SEARCH_TERM]",many_results:"[COUNT] resultados encontrados para [SEARCH_TERM]",one_result:"[COUNT] resultado encontrado para [SEARCH_TERM]",alt_search:"Nenhum resultado encontrado para [SEARCH_TERM]. Exibindo resultados para [DIFFERENT_TERM]",search_suggestion:"Nenhum resultado encontrado para [SEARCH_TERM]. Tente uma das seguintes pesquisas:",searching:"Pesquisando por [SEARCH_TERM]..."},qa={thanks_to:sr,comments:ar,direction:lr,strings:nr},ir={};F(ir,{comments:()=>_r,default:()=>Va,direction:()=>cr,strings:()=>Er,thanks_to:()=>or});var or="Bogdan Mateescu ",_r="",cr="ltr",Er={placeholder:"Căutare",clear_search:"Ştergeţi",load_more:"Încărcați mai multe rezultate",search_label:"Căutați în acest site",filters_label:"Filtre",zero_results:"Niciun rezultat pentru [SEARCH_TERM]",many_results:"[COUNT] rezultate pentru [SEARCH_TERM]",one_result:"[COUNT] rezultat pentru [SEARCH_TERM]",alt_search:"Niciun rezultat pentru [SEARCH_TERM]. Se afișează în schimb rezultatele pentru [DIFFERENT_TERM]",search_suggestion:"Niciun rezultat pentru [SEARCH_TERM]. Încercați una dintre următoarele căutări:",searching:"Se caută după: [SEARCH_TERM]..."},Va={thanks_to:or,comments:_r,direction:cr,strings:Er},fr={};F(fr,{comments:()=>dr,default:()=>Ka,direction:()=>Cr,strings:()=>mr,thanks_to:()=>hr});var hr="Aleksandr Gordeev",dr="",Cr="ltr",mr={placeholder:"Поиск",clear_search:"Очистить поле",load_more:"Загрузить еще",search_label:"Поиск по сайту",filters_label:"Фильтры",zero_results:"Ничего не найдено по запросу: [SEARCH_TERM]",many_results:"[COUNT] результатов по запросу: [SEARCH_TERM]",one_result:"[COUNT] результат по запросу: [SEARCH_TERM]",alt_search:"Ничего не найдено по запросу: [SEARCH_TERM]. Показаны результаты по запросу: [DIFFERENT_TERM]",search_suggestion:"Ничего не найдено по запросу: [SEARCH_TERM]. Попробуйте один из следующих вариантов",searching:"Поиск по запросу: [SEARCH_TERM]"},Ka={thanks_to:hr,comments:dr,direction:Cr,strings:mr},gr={};F(gr,{comments:()=>Rr,default:()=>Ga,direction:()=>Br,strings:()=>vr,thanks_to:()=>Ar});var Ar="Andrija Sagicc",Rr="",Br="ltr",vr={placeholder:"Претрага",clear_search:"Брисање",load_more:"Приказ више резултата",search_label:"Претрага сајта",filters_label:"Филтери",zero_results:"Нема резултата за [SEARCH_TERM]",many_results:"[COUNT] резултата за [SEARCH_TERM]",one_result:"[COUNT] резултата за [SEARCH_TERM]",alt_search:"Нема резултата за [SEARCH_TERM]. Приказ додатник резултата за [DIFFERENT_TERM]",search_suggestion:"Нема резултата за [SEARCH_TERM]. Покушајте са неком од следећих претрага:",searching:"Претрага термина [SEARCH_TERM]..."},Ga={thanks_to:Ar,comments:Rr,direction:Br,strings:vr},Tr={};F(Tr,{comments:()=>kr,default:()=>Ja,direction:()=>Fr,strings:()=>Dr,thanks_to:()=>pr});var pr="Montazar Al-Jaber ",kr="",Fr="ltr",Dr={placeholder:"Sök",clear_search:"Rensa",load_more:"Visa fler träffar",search_label:"Sök på denna sida",filters_label:"Filter",zero_results:"[SEARCH_TERM] gav inga träffar",many_results:"[SEARCH_TERM] gav [COUNT] träffar",one_result:"[SEARCH_TERM] gav [COUNT] träff",alt_search:"[SEARCH_TERM] gav inga träffar. Visar resultat för [DIFFERENT_TERM] istället",search_suggestion:"[SEARCH_TERM] gav inga träffar. Försök igen med en av följande sökord:",searching:"Söker efter [SEARCH_TERM]..."},Ja={thanks_to:pr,comments:kr,direction:Fr,strings:Dr},br={};F(br,{comments:()=>Sr,default:()=>Wa,direction:()=>Hr,strings:()=>Nr,thanks_to:()=>Mr});var Mr="Anonymous",Sr="",Hr="ltr",Nr={placeholder:"Tafuta",clear_search:"Futa",load_more:"Pakia matokeo zaidi",search_label:"Tafuta tovuti hii",filters_label:"Vichujio",zero_results:"Hakuna matokeo ya [SEARCH_TERM]",many_results:"Matokeo [COUNT] ya [SEARCH_TERM]",one_result:"Tokeo [COUNT] la [SEARCH_TERM]",alt_search:"Hakuna mayokeo ya [SEARCH_TERM]. Badala yake, inaonyesha matokeo ya [DIFFERENT_TERM]",search_suggestion:"Hakuna matokeo ya [SEARCH_TERM]. Jaribu mojawapo ya utafutaji ufuatao:",searching:"Kutafuta [SEARCH_TERM]..."},Wa={thanks_to:Mr,comments:Sr,direction:Hr,strings:Nr},yr={};F(yr,{comments:()=>zr,default:()=>Za,direction:()=>jr,strings:()=>Or,thanks_to:()=>wr});var wr="",zr="",jr="ltr",Or={placeholder:"தேடுக",clear_search:"அழிக்குக",load_more:"மேலும் முடிவுகளைக் காட்டுக",search_label:"இந்த தளத்தில் தேடுக",filters_label:"வடிகட்டல்கள்",zero_results:"[SEARCH_TERM] க்கான முடிவுகள் இல்லை",many_results:"[SEARCH_TERM] க்கான [COUNT] முடிவுகள்",one_result:"[SEARCH_TERM] க்கான முடிவு",alt_search:"[SEARCH_TERM] இத்தேடலுக்கான முடிவுகள் இல்லை, இந்த தேடல்களுக்கான ஒத்த முடிவுகள் [DIFFERENT_TERM]",search_suggestion:"[SEARCH_TERM] இத் தேடலுக்கான முடிவுகள் இல்லை.இதற்கு பதிலீடான தேடல்களை தேடுக:",searching:"[SEARCH_TERM] தேடப்படுகின்றது"},Za={thanks_to:wr,comments:zr,direction:jr,strings:Or},Ur={};F(Ur,{comments:()=>Pr,default:()=>Ya,direction:()=>Lr,strings:()=>xr,thanks_to:()=>Ir});var Ir="Patiphon Loetsuthakun ",Pr="",Lr="ltr",xr={placeholder:"ค้นหา",clear_search:"ล้าง",load_more:"โหลดผลลัพธ์เพิ่มเติม",search_label:"ค้นหาบนเว็บไซต์",filters_label:"ตัวกรอง",zero_results:"ไม่พบผลลัพธ์สำหรับ [SEARCH_TERM]",many_results:"พบ [COUNT] ผลการค้นหาสำหรับ [SEARCH_TERM]",one_result:"พบ [COUNT] ผลการค้นหาสำหรับ [SEARCH_TERM]",alt_search:"ไม่พบผลลัพธ์สำหรับ [SEARCH_TERM] แสดงผลลัพธ์จากการค้นหา [DIFFERENT_TERM] แทน",search_suggestion:"ไม่พบผลลัพธ์สำหรับ [SEARCH_TERM] ลองคำค้นหาเหล่านี้แทน:",searching:"กำลังค้นหา [SEARCH_TERM]..."},Ya={thanks_to:Ir,comments:Pr,direction:Lr,strings:xr},qr={};F(qr,{comments:()=>Kr,default:()=>Xa,direction:()=>Gr,strings:()=>Jr,thanks_to:()=>Vr});var Vr="Taylan Özgür Bildik",Kr="",Gr="ltr",Jr={placeholder:"Araştır",clear_search:"Temizle",load_more:"Daha fazla sonuç",search_label:"Site genelinde arama",filters_label:"Filtreler",zero_results:"[SEARCH_TERM] için sonuç yok",many_results:"[SEARCH_TERM] için [COUNT] sonuç bulundu",one_result:"[SEARCH_TERM] için [COUNT] sonuç bulundu",alt_search:"[SEARCH_TERM] için sonuç yok. Bunun yerine [DIFFERENT_TERM] için sonuçlar gösteriliyor",search_suggestion:"[SEARCH_TERM] için sonuç yok. Alternatif olarak aşağıdaki kelimelerden birini deneyebilirsiniz:",searching:"[SEARCH_TERM] araştırılıyor..."},Xa={thanks_to:Vr,comments:Kr,direction:Gr,strings:Jr},Wr={};F(Wr,{comments:()=>Yr,default:()=>Qa,direction:()=>Xr,strings:()=>Qr,thanks_to:()=>Zr});var Zr="Vladyslav Lyshenko ",Yr="",Xr="ltr",Qr={placeholder:"Пошук",clear_search:"Очистити поле",load_more:"Завантажити ще",search_label:"Пошук по сайту",filters_label:"Фільтри",zero_results:"Нічого не знайдено за запитом: [SEARCH_TERM]",many_results:"[COUNT] результатів на запит: [SEARCH_TERM]",one_result:"[COUNT] результат за запитом: [SEARCH_TERM]",alt_search:"Нічого не знайдено на запит: [SEARCH_TERM]. Показано результати на запит: [DIFFERENT_TERM]",search_suggestion:"Нічого не знайдено на запит: [SEARCH_TERM]. Спробуйте один із таких варіантів",searching:"Пошук за запитом: [SEARCH_TERM]"},Qa={thanks_to:Zr,comments:Yr,direction:Xr,strings:Qr},$r={};F($r,{comments:()=>us,default:()=>$a,direction:()=>ts,strings:()=>rs,thanks_to:()=>es});var es="Long Nhat Nguyen",us="",ts="ltr",rs={placeholder:"Tìm kiếm",clear_search:"Xóa",load_more:"Nhiều kết quả hơn",search_label:"Tìm kiếm trong trang này",filters_label:"Bộ lọc",zero_results:"Không tìm thấy kết quả cho [SEARCH_TERM]",many_results:"[COUNT] kết quả cho [SEARCH_TERM]",one_result:"[COUNT] kết quả cho [SEARCH_TERM]",alt_search:"Không tìm thấy kết quả cho [SEARCH_TERM]. Kiểm thị kết quả thay thế với [DIFFERENT_TERM]",search_suggestion:"Không tìm thấy kết quả cho [SEARCH_TERM]. Thử một trong các tìm kiếm:",searching:"Đang tìm kiếm cho [SEARCH_TERM]..."},$a={thanks_to:es,comments:us,direction:ts,strings:rs},ss={};F(ss,{comments:()=>ls,default:()=>el,direction:()=>ns,strings:()=>is,thanks_to:()=>as});var as="Amber Song",ls="",ns="ltr",is={placeholder:"搜索",clear_search:"清除",load_more:"加载更多结果",search_label:"站内搜索",filters_label:"筛选",zero_results:"未找到 [SEARCH_TERM] 的相关结果",many_results:"找到 [COUNT] 个 [SEARCH_TERM] 的相关结果",one_result:"找到 [COUNT] 个 [SEARCH_TERM] 的相关结果",alt_search:"未找到 [SEARCH_TERM] 的相关结果。改为显示 [DIFFERENT_TERM] 的相关结果",search_suggestion:"未找到 [SEARCH_TERM] 的相关结果。请尝试以下搜索。",searching:"正在搜索 [SEARCH_TERM]..."},el={thanks_to:as,comments:ls,direction:ns,strings:is},os={};F(os,{comments:()=>cs,default:()=>ul,direction:()=>Es,strings:()=>fs,thanks_to:()=>_s});var _s="Amber Song",cs="",Es="ltr",fs={placeholder:"搜索",clear_search:"清除",load_more:"加載更多結果",search_label:"站內搜索",filters_label:"篩選",zero_results:"未找到 [SEARCH_TERM] 的相關結果",many_results:"找到 [COUNT] 個 [SEARCH_TERM] 的相關結果",one_result:"找到 [COUNT] 個 [SEARCH_TERM] 的相關結果",alt_search:"未找到 [SEARCH_TERM] 的相關結果。改為顯示 [DIFFERENT_TERM] 的相關結果",search_suggestion:"未找到 [SEARCH_TERM] 的相關結果。請嘗試以下搜索。",searching:"正在搜索 [SEARCH_TERM]..."},ul={thanks_to:_s,comments:cs,direction:Es,strings:fs},hs={};F(hs,{comments:()=>Cs,default:()=>tl,direction:()=>ms,strings:()=>gs,thanks_to:()=>ds});var ds="Amber Song",Cs="",ms="ltr",gs={placeholder:"搜索",clear_search:"清除",load_more:"加载更多结果",search_label:"站内搜索",filters_label:"筛选",zero_results:"未找到 [SEARCH_TERM] 的相关结果",many_results:"找到 [COUNT] 个 [SEARCH_TERM] 的相关结果",one_result:"找到 [COUNT] 个 [SEARCH_TERM] 的相关结果",alt_search:"未找到 [SEARCH_TERM] 的相关结果。改为显示 [DIFFERENT_TERM] 的相关结果",search_suggestion:"未找到 [SEARCH_TERM] 的相关结果。请尝试以下搜索。",searching:"正在搜索 [SEARCH_TERM]..."},tl={thanks_to:ds,comments:Cs,direction:ms,strings:gs},rl=[Ru,ku,Su,zu,Pu,Ku,Yu,ut,lt,ct,Ct,Bt,Ft,Ht,jt,Lt,Gt,Xt,t0,n0,E0,m0,v0,D0,N0,O0,x0,J0,Q0,rr,ir,fr,gr,Tr,br,yr,Ur,qr,Wr,$r,ss,os,hs],sl=rl,al=["../../translations/af.json","../../translations/ar.json","../../translations/bn.json","../../translations/ca.json","../../translations/cs.json","../../translations/da.json","../../translations/de.json","../../translations/en.json","../../translations/es.json","../../translations/eu.json","../../translations/fa.json","../../translations/fi.json","../../translations/fr.json","../../translations/gl.json","../../translations/he.json","../../translations/hi.json","../../translations/hr.json","../../translations/hu.json","../../translations/id.json","../../translations/it.json","../../translations/ja.json","../../translations/ko.json","../../translations/mi.json","../../translations/my.json","../../translations/nb.json","../../translations/nl.json","../../translations/nn.json","../../translations/no.json","../../translations/pl.json","../../translations/pt.json","../../translations/ro.json","../../translations/ru.json","../../translations/sr.json","../../translations/sv.json","../../translations/sw.json","../../translations/ta.json","../../translations/th.json","../../translations/tr.json","../../translations/uk.json","../../translations/vi.json","../../translations/zh-cn.json","../../translations/zh-tw.json","../../translations/zh.json"];function ou(e,u,t){const r=e.slice();return r[51]=u[t],r}function _u(e){let u,t,r;function s(l){e[37](l)}let a={show_empty_filters:e[5],open_filters:e[6],available_filters:e[18],translate:e[20],automatic_translations:e[19],translations:e[7]};return e[0]!==void 0&&(a.selected_filters=e[0]),u=new fa({props:a}),ae.push(()=>Ws(u,"selected_filters",s)),{c(){Fe(u.$$.fragment)},m(l,n){fe(u,l,n),r=!0},p(l,n){const i={};n[0]&32&&(i.show_empty_filters=l[5]),n[0]&64&&(i.open_filters=l[6]),n[0]&262144&&(i.available_filters=l[18]),n[0]&524288&&(i.automatic_translations=l[19]),n[0]&128&&(i.translations=l[7]),!t&&n[0]&1&&(t=!0,i.selected_filters=l[0],qs(()=>t=!1)),u.$set(i)},i(l){r||(z(u.$$.fragment,l),r=!0)},o(l){U(u.$$.fragment,l),r=!1},d(l){he(u,l)}}}function cu(e){let u,t,r,s;const a=[nl,ll],l=[];function n(i,E){return i[14]?0:1}return t=n(e),r=l[t]=a[t](e),{c(){u=v("div"),r.c(),C(u,"class","pagefind-ui__results-area svelte-e9gkc3")},m(i,E){k(i,u,E),l[t].m(u,null),s=!0},p(i,E){let _=t;t=n(i),t===_?l[t].p(i,E):(le(),U(l[_],1,1,()=>{l[_]=null}),ne(),r=l[t],r?r.p(i,E):(r=l[t]=a[t](i),r.c()),z(r,1),r.m(u,null))},i(i){s||(z(r),s=!0)},o(i){U(r),s=!1},d(i){i&&p(u),l[t].d()}}}function ll(e){let u,t,r,s=[],a=new Map,l,n,i;function E(c,g){return c[13].results.length===0?_l:c[13].results.length===1?ol:il}let _=E(e),f=_(e),d=e[13].results.slice(0,e[17]);const h=c=>c[51].id;for(let c=0;ce[17]&&fu(e);return{c(){u=v("p"),f.c(),t=M(),r=v("ol");for(let c=0;cc[17]?o?o.p(c,g):(o=fu(c),o.c(),o.m(n.parentNode,n)):o&&(o.d(1),o=null)},i(c){if(!i){for(let g=0;g{i[d]=null}),ne(),s=i[r],s?s.p(u,f):(s=i[r]=n[r](u),s.c()),z(s,1),s.m(a.parentNode,a))},i(_){l||(z(s),l=!0)},o(_){U(s),l=!1},d(_){_&&p(t),i[r].d(_),_&&p(a)}}}function fu(e){let u,t=e[20]("load_more",e[19],e[7])+"",r,s,a;return{c(){u=v("button"),r=S(t),C(u,"type","button"),C(u,"class","pagefind-ui__button svelte-e9gkc3")},m(l,n){k(l,u,n),R(u,r),s||(a=G(u,"click",e[22]),s=!0)},p(l,n){n[0]&524416&&t!==(t=l[20]("load_more",l[19],l[7])+"")&&j(r,t)},d(l){l&&p(u),s=!1,a()}}}function hu(e){let u,t=e[20]("searching",e[19],e[7]).replace(/\[SEARCH_TERM\]/,e[16])+"",r;return{c(){u=v("p"),r=S(t),C(u,"class","pagefind-ui__message svelte-e9gkc3")},m(s,a){k(s,u,a),R(u,r)},p(s,a){a[0]&589952&&t!==(t=s[20]("searching",s[19],s[7]).replace(/\[SEARCH_TERM\]/,s[16])+"")&&j(r,t)},d(s){s&&p(u)}}}function fl(e){let u,t,r,s,a,l,n,i=e[20]("clear_search",e[19],e[7])+"",E,_,f,d,h,o,c,g,A=e[12]&&_u(e),B=e[15]&&cu(e);return{c(){u=v("div"),t=v("form"),r=v("input"),l=M(),n=v("button"),E=S(i),_=M(),f=v("div"),A&&A.c(),d=M(),B&&B.c(),C(r,"class","pagefind-ui__search-input svelte-e9gkc3"),C(r,"type","text"),C(r,"placeholder",s=e[20]("placeholder",e[19],e[7])),C(r,"title",a=e[20]("placeholder",e[19],e[7])),C(r,"autocapitalize","none"),C(r,"enterkeyhint","search"),r.autofocus=e[8],C(n,"class","pagefind-ui__search-clear svelte-e9gkc3"),K(n,"pagefind-ui__suppressed",!e[9]),C(f,"class","pagefind-ui__drawer svelte-e9gkc3"),K(f,"pagefind-ui__hidden",!e[15]),C(t,"class","pagefind-ui__form svelte-e9gkc3"),C(t,"role","search"),C(t,"aria-label",h=e[20]("search_label",e[19],e[7])),C(t,"action","javascript:void(0);"),C(u,"class","pagefind-ui svelte-e9gkc3"),K(u,"pagefind-ui--reset",e[1])},m(T,D){k(T,u,D),R(u,t),R(t,r),ze(r,e[9]),e[34](r),R(t,l),R(t,n),R(n,E),e[35](n),R(t,_),R(t,f),A&&A.m(f,null),R(f,d),B&&B.m(f,null),o=!0,e[8]&&r.focus(),c||(g=[G(r,"focus",e[21]),G(r,"keydown",e[32]),G(r,"input",e[33]),G(n,"click",e[36]),G(t,"submit",hl)],c=!0)},p(T,D){(!o||D[0]&524416&&s!==(s=T[20]("placeholder",T[19],T[7])))&&C(r,"placeholder",s),(!o||D[0]&524416&&a!==(a=T[20]("placeholder",T[19],T[7])))&&C(r,"title",a),(!o||D[0]&256)&&(r.autofocus=T[8]),D[0]&512&&r.value!==T[9]&&ze(r,T[9]),(!o||D[0]&524416)&&i!==(i=T[20]("clear_search",T[19],T[7])+"")&&j(E,i),(!o||D[0]&512)&&K(n,"pagefind-ui__suppressed",!T[9]),T[12]?A?(A.p(T,D),D[0]&4096&&z(A,1)):(A=_u(T),A.c(),z(A,1),A.m(f,d)):A&&(le(),U(A,1,1,()=>{A=null}),ne()),T[15]?B?(B.p(T,D),D[0]&32768&&z(B,1)):(B=cu(T),B.c(),z(B,1),B.m(f,null)):B&&(le(),U(B,1,1,()=>{B=null}),ne()),(!o||D[0]&32768)&&K(f,"pagefind-ui__hidden",!T[15]),(!o||D[0]&524416&&h!==(h=T[20]("search_label",T[19],T[7])))&&C(t,"aria-label",h),(!o||D[0]&2)&&K(u,"pagefind-ui--reset",T[1])},i(T){o||(z(A),z(B),o=!0)},o(T){U(A),U(B),o=!1},d(T){T&&p(u),e[34](null),e[35](null),A&&A.d(),B&&B.d(),c=!1,W(g)}}}var hl=e=>e.preventDefault();function dl(e,u,t){const r={},s=al.map(m=>m.match(/([^\/]+)\.json$/)[1]);for(let m=0;mw[m]??N[m]??"";Is(()=>{let m=document?.querySelector?.("html")?.getAttribute?.("lang")||"en",N=Au(m.toLocaleLowerCase());t(19,He=r[`${N.language}-${N.script}-${N.region}`]||r[`${N.language}-${N.region}`]||r[`${N.language}`]||r.en)}),Ps(()=>{H?.destroy?.(),H=null});const Ne=async()=>{if(!me&&(t(12,me=!0),!H)){let m;try{m=await ys(()=>import(`${a}pagefind.js`),[])}catch(w){console.error(w),console.error([`Pagefind couldn't be loaded from ${this.options.bundlePath}pagefind.js`,"You can configure this by passing a bundlePath option to PagefindUI"].join(` `)),document?.currentScript&&document.currentScript.tagName.toUpperCase()==="SCRIPT"?console.error(`[DEBUG: Loaded from ${document.currentScript.src??"bad script location"}]`):console.error("no known script location")}_||t(24,_=E?12:30);let N={...g||{},excerptLength:_};await m.options(N);for(const w of A){if(!w.bundlePath)throw new Error("mergeIndex requires a bundlePath parameter");const I=w.bundlePath;delete w.bundlePath,await m.mergeIndex(I,w)}H=m,Bs()}},Bs=async()=>{H&&(Se=await H.filters(),(!ue||!Object.keys(ue).length)&&t(18,ue=Se))},vs=m=>{let N={};return Object.entries(m).filter(([,w])=>w).forEach(([w])=>{let[I,Z]=w.split(/:(.*)$/);N[I]=N[I]||[],N[I].push(Z)}),N};let te;const Ts=async(m,N)=>{if(!m){t(15,Ae=!1),te&&clearTimeout(te);return}const w=vs(N),I=()=>ps(m,w);c>0&&m?(te&&clearTimeout(te),te=setTimeout(I,c),await ye(),H.preload(m,{filters:w})):I(),ks()},ye=async()=>{for(;!H;)Ne(),await new Promise(m=>setTimeout(m,50))},ps=async(m,N)=>{t(16,Me=m||""),typeof d=="function"&&(m=d(m)),t(14,ge=!0),t(15,Ae=!0),await ye();const w=++be,I={filters:N};q&&typeof q=="object"&&(I.sort=q);const Z=await H.search(m,I);be===w&&(Z.filters&&Object.keys(Z.filters)?.length&&t(18,ue=Z.filters),t(13,De=Z),t(14,ge=!1),t(17,Re=l))},ks=()=>{const m=x.offsetWidth;m!=As&&t(10,y.style.paddingRight=`${m+2}px`,y)},Fs=m=>{m?.preventDefault(),t(17,Re+=l)},Ds=m=>{m.key==="Escape"&&(t(9,b=""),y.blur()),m.key==="Enter"&&m.preventDefault()};function bs(){b=this.value,t(9,b),t(23,B)}function Ms(m){ae[m?"unshift":"push"](()=>{y=m,t(10,y)})}function Ss(m){ae[m?"unshift":"push"](()=>{x=m,t(11,x)})}const Hs=()=>{t(9,b=""),y.blur()};function Ns(m){L=m,t(0,L)}return e.$$set=m=>{"base_path"in m&&t(25,a=m.base_path),"page_size"in m&&t(26,l=m.page_size),"reset_styles"in m&&t(1,n=m.reset_styles),"show_images"in m&&t(2,i=m.show_images),"show_sub_results"in m&&t(3,E=m.show_sub_results),"excerpt_length"in m&&t(24,_=m.excerpt_length),"process_result"in m&&t(4,f=m.process_result),"process_term"in m&&t(27,d=m.process_term),"show_empty_filters"in m&&t(5,h=m.show_empty_filters),"open_filters"in m&&t(6,o=m.open_filters),"debounce_timeout_ms"in m&&t(28,c=m.debounce_timeout_ms),"pagefind_options"in m&&t(29,g=m.pagefind_options),"merge_index"in m&&t(30,A=m.merge_index),"trigger_search_term"in m&&t(23,B=m.trigger_search_term),"translations"in m&&t(7,T=m.translations),"autofocus"in m&&t(8,D=m.autofocus),"sort"in m&&t(31,q=m.sort),"selected_filters"in m&&t(0,L=m.selected_filters)},e.$$.update=()=>{e.$$.dirty[0]&8388608&&B&&(t(9,b=B),t(23,B="")),e.$$.dirty[0]&513&&Ts(b,L)},[L,n,i,E,f,h,o,T,D,b,y,x,me,De,ge,Ae,Me,Re,ue,He,Rs,Ne,Fs,B,_,a,l,d,c,g,A,q,Ds,bs,Ms,Ss,Hs,Ns]}var Cl=class extends Ce{constructor(e){super(),de(this,e,dl,fl,Ee,{base_path:25,page_size:26,reset_styles:1,show_images:2,show_sub_results:3,excerpt_length:24,process_result:4,process_term:27,show_empty_filters:5,open_filters:6,debounce_timeout_ms:28,pagefind_options:29,merge_index:30,trigger_search_term:23,translations:7,autofocus:8,sort:31,selected_filters:0},null,[-1,-1])}},ml=Cl,ke;try{document?.currentScript&&document.currentScript.tagName.toUpperCase()==="SCRIPT"&&(ke=new URL(document.currentScript.src).pathname.match(/^(.*\/)(?:pagefind-)?ui.js.*$/)[1])}catch{ke="/pagefind/"}var Al=class{constructor(e){this._pfs=null;let u=e.element??"[data-pagefind-ui]",t=e.bundlePath??ke,r=e.pageSize??5,s=e.resetStyles??!0,a=e.showImages??!0,l=e.showSubResults??!1,n=e.excerptLength??0,i=e.processResult??null,E=e.processTerm??null,_=e.showEmptyFilters??!0,f=e.openFilters??[],d=e.debounceTimeoutMs??300,h=e.mergeIndex??[],o=e.translations??[],c=e.autofocus??!1,g=e.sort??null;delete e.element,delete e.bundlePath,delete e.pageSize,delete e.resetStyles,delete e.showImages,delete e.showSubResults,delete e.excerptLength,delete e.processResult,delete e.processTerm,delete e.showEmptyFilters,delete e.openFilters,delete e.debounceTimeoutMs,delete e.mergeIndex,delete e.translations,delete e.autofocus,delete e.sort;const A=u instanceof HTMLElement?u:document.querySelector(u);A?this._pfs=new ml({target:A,props:{base_path:t,page_size:r,reset_styles:s,show_images:a,show_sub_results:l,excerpt_length:n,process_result:i,process_term:E,show_empty_filters:_,open_filters:f,debounce_timeout_ms:d,merge_index:h,translations:o,autofocus:c,sort:g,pagefind_options:e}}):console.error(`Pagefind UI couldn't find the selector ${u}`)}triggerSearch(e){this._pfs.$$set({trigger_search_term:e})}triggerFilters(e){let u={};for(let[t,r]of Object.entries(e))if(Array.isArray(r))for(let s of r)u[`${t}:${s}`]=!0;else u[`${t}:${r}`]=!0;this._pfs.$$set({selected_filters:u})}destroy(){this._pfs.$destroy()}};export{Al as PagefindUI}; diff --git a/baselines/baseline-file-layout/index.html b/baselines/baseline-file-layout/index.html index de9abc6d..419996cc 100644 --- a/baselines/baseline-file-layout/index.html +++ b/baselines/baseline-file-layout/index.html @@ -1,4 +1,4 @@ - Baseline File Layout | mSCP - Skip to content
mSCP
Skip to content
mSCP

Baseline File Layout

Baseline files define the controls and rules that make up a security profile. They are used to generate guides, scripts, and mobileconfig files for macOS security.

-

Baseline File Structure

Section titled “Baseline File Structure”
-

A baseline file typically includes the following fields:

-

title

Section titled “title”
-

A human-readable name for the baseline.
-Example:

-
title: "Apple macOS 13 (Ventura) Test Baseline"
-

description

Section titled “description”
-

A brief summary describing the purpose and scope of the baseline.
-Example:

-
description: |
  This guide describes the prudent actions to take when securing a macOS 13 system against the Test Baseline.
-

authors

Section titled “authors”
-

A list of authors and their organizations.
-Example:

-
authors: |
  |===
  |John Smith|NIST
  |Jack Doe|NIST
  |===
-

profile

Section titled “profile”
-

Defines the structure of the baseline, mapping sections to their associated rules:

-
    -
  • section: The name of the section (as defined in the sections directory) to be included in the guide.
    • -
  • rules: A list of rule IDs that are part of this section. Each rule ID should match the filename and ID of a corresponding rule in the rules directory.
    • -
-

Example:

-
profile:
  - section: "Authentication"
    rules:
      - auth_pam_login_smartcard_enforce
      - auth_pam_su_smartcard_enforce
      - auth_pam_sudo_smartcard_enforce
      - auth_smartcard_allow
  - section: "Auditing"
    rules:
      - audit_acls_files_configure
      - audit_acls_files_mode_configure
      - audit_acls_folder_wheel_configure
+

Baseline File Layout

A baseline file is a YAML document that defines which security rules apply to a specific compliance framework. Understanding the structure helps you customize baselines or create your own.

+
-

Complete Example Baseline File

Section titled “Complete Example Baseline File”
-
title: "Apple macOS 13 (Ventura) Test Baseline"
description: |
  This guide describes the prudent actions to take when securing a macOS 13 system against the Test Baseline.
authors: |
  |===
  |John Smith|NIST
  |Jack Doe|NIST
  |===
profile:
  - section: "Authentication"
    rules:
      - auth_pam_login_smartcard_enforce
      - auth_pam_su_smartcard_enforce
      - auth_pam_sudo_smartcard_enforce
      - auth_smartcard_allow
  - section: "Auditing"
    rules:
      - audit_acls_files_configure
      - audit_acls_files_mode_configure
      - audit_acls_folder_wheel_configure
\ No newline at end of file +

File Structure Overview

Section titled “File Structure Overview”
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FieldPurpose
titleHuman-readable name for the baseline
descriptionBrief summary of the baseline’s purpose
authorsList of contributors and their organizations
parent_valuesDefault configuration level for organization-defined values
profileSections and rules that make up the baseline
+
+

Field Details

Section titled “Field Details”
+

title

Section titled “title”
+

The display name shown in generated documentation.

+
title: "macOS 15 (Sequoia): NIST 800-53r5 Moderate"
+

description

Section titled “description”
+

A summary that appears at the top of generated guides. Use the | character for multi-line text.

+
description: |
  This guide describes the actions to take when
  securing a macOS 15 system against the NIST
  800-53 Rev 5 Moderate baseline.
+

authors

Section titled “authors”
+

Contributors listed in AsciiDoc table format. This appears in generated documentation.

+
authors: |
  |===
  |Name|Organization
  |John Smith|NIST
  |Jane Doe|NASA
  |===
+

parent_values

Section titled “parent_values”
+

Sets the default configuration level for organization-defined values (ODVs). Common values include recommended, cis_lvl1, or cis_lvl2.

+
parent_values: "recommended"
+ +

profile

Section titled “profile”
+

The core of the baseline. Organizes rules into sections for the generated documentation.

+
    +
  • section - Category name (matches files in the sections/ folder)
    • +
  • rules - List of rule IDs (matches files in the rules/ folder)
    • +
+
profile:
  - section: "Authentication"
    rules:
      - auth_pam_login_smartcard_enforce
      - auth_pam_su_smartcard_enforce
      - auth_smartcard_allow
  - section: "Auditing"
    rules:
      - audit_acls_files_configure
      - audit_acls_files_mode_configure
+
+

Complete Example

Section titled “Complete Example”
+
title: "macOS 15 (Sequoia): NIST 800-53r5 Moderate"
description: |
  This guide describes the actions to take when securing
  a macOS 15 system against the NIST 800-53 Rev 5 Moderate baseline.
authors: |
  |===
  |Name|Organization
  |John Smith|NIST
  |Jane Doe|NASA
  |===
parent_values: "recommended"
profile:
  - section: "Authentication"
    rules:
      - auth_pam_login_smartcard_enforce
      - auth_pam_su_smartcard_enforce
      - auth_smartcard_allow
  - section: "Auditing"
    rules:
      - audit_acls_files_configure
      - audit_acls_files_mode_configure
  - section: "System Settings"
    rules:
      - system_settings_firewall_enable
      - system_settings_gatekeeper_enable
+
+

Next Steps

Section titled “Next Steps”
+ +
\ No newline at end of file diff --git a/baselines/how-to-generate-baselines/index.html b/baselines/how-to-generate-baselines/index.html index 593f61d2..1a08b53a 100644 --- a/baselines/how-to-generate-baselines/index.html +++ b/baselines/how-to-generate-baselines/index.html @@ -1,4 +1,4 @@ - How To Generate Baselines | mSCP - Skip to content
mSCP
Skip to content
mSCP

How To Generate Baselines

The primary script for generating baselines is located here in the macos_security repository:

-
  • Directorymacos_security/ -
    • Directoryscripts/ ---> Project scripts -
      • generate_baseline.py ---> Script to generate baselines
 - -

Follow these steps to generate a baseline:

+

How to Generate Baselines

Generating a baseline creates the YAML file that defines which security rules apply to your environment. This file is required before you can generate guidance documents, configuration profiles, or compliance scripts.

+ + +
+

Generate a Baseline

Section titled “Generate a Baseline”
  1. -

    Select or Download the Correct Branch

    -
      -
    • Make sure you are on the branch you want to work from.
      • -
    • If using git, run git checkout <branch-name> to switch branches if needed.
      • -
    +

    List available baselines

    +
    Terminal window
    ./scripts/generate_baseline.py -l
  2. -

    Choose the Baseline to Generate

    -
      -
    • Identify the baseline you want to generate (e.g., CIS_lvl1, STIG, etc.).
      • -
    • Use the -l flag to list available baseline options for the selected branch: -
      Terminal window
      ./macos_security-sequoia/scripts/generate_baseline.sh -l
      -
      • -
    +

    Generate your baseline

    +
    Terminal window
    ./scripts/generate_baseline.py -k BASELINE_NAME
    +

    Example:

    +
    Terminal window
    ./scripts/generate_baseline.py -k 800-53r5_moderate
  3. -

    Generate the Selected Baseline

    -
      -
    • -

      Use the -k flag with the selected tag to generate the baseline:

      -
      Terminal window
      ./macos_security-sequoia/scripts/generate_baseline.sh -k 800-53r5_moderate
      -

      This example generates a baseline for 800-53r5_moderate.

      -
      • -
    • -

      Use the -t flag to customize the baseline for your organization:

      -
      Terminal window
      ./macos_security-sequoia/scripts/generate_baseline.sh -k 800-53r5_moderate -t
      -

      If you use -t, you will be prompted with questions to tailor the baseline. See How to Tailor a Baseline for more details.

      -
      • -
    -
    4. -
  4. -

    Locate the Generated Files

    -
      -
    • After running the generation command, the baseline files are created in the following directories:
      • -
    +

    Find your file

    +

    The baseline is saved to:

    +
    build/baselines/BASELINE_NAME.yaml
-
  • Directorymacos_security/ +
    +

    Customize with Tailoring

    Section titled “Customize with Tailoring”
    +

    Add the -t flag to customize the baseline for your organization:

    +
    Terminal window
    ./scripts/generate_baseline.py -k 800-53r5_moderate -t
    +

    This starts an interactive process where you can:

    +
      +
    • Include or exclude specific rules
      • +
    • Set organization-specific values (like password length or timeout periods)
      • +
    +

    Custom values are saved to custom/rules/ for reuse.

    + +
    +

    Command Reference

    Section titled “Command Reference”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FlagDescription
    -hShow help message
    -lList all available baselines
    -k NAMEGenerate baseline for the specified framework
    -tEnable interactive tailoring
    -cShow NIST 800-53 controls covered by the baseline
    +
    +

    Output Files

    Section titled “Output Files”
    +
    • Directorymacos_security/
      • Directorybuild/
        • Directorybaselines/ -
          • BASELINENAME.yaml ---> The generated baseline file (name depends on your selection or customization)
      • Directorycustom/ +
        • BASELINE_NAME.yaml - The generated baseline file
    • Directorycustom/
      • Directoryrules/ -
        • *.yaml ---> Custom values you set if you used -t
 -

These files are required to generate the guidance files.
-For more information, see How to Tailor a Baseline or review the baseline file layout.

\ No newline at end of file +
  • *.yaml - Custom values (if you used -t)
+
+

Next Steps

Section titled “Next Steps”
+ +
\ No newline at end of file diff --git a/baselines/tailoring-a-baseline/index.html b/baselines/tailoring-a-baseline/index.html index 0fc4d0c3..22aacfbf 100644 --- a/baselines/tailoring-a-baseline/index.html +++ b/baselines/tailoring-a-baseline/index.html @@ -1,4 +1,4 @@ - Tailoring a baseline | mSCP - Skip to content
mSCP
Skip to content
mSCP

Tailoring a baseline

Tailoring allows you to create a custom security baseline that fits your organization’s needs. The tailoring process lets you select which rules to include and set organization-defined values (ODVs) for controls that require them.

-
  • Directorymacos_security/ -
    • Directoryscripts/ -
      • generate_baseline.py ---> Script to generate and tailor baselines
 -

Follow these steps to tailor a baseline:

+

Tailoring a Baseline

Tailoring lets you customize a baseline to fit your organization’s specific needs. You can include or exclude rules and set organization-defined values like password length or screen lock timeout.

+ +
+

When to Tailor

Section titled “When to Tailor”
+

Consider tailoring when you need to:

+
    +
  • Exclude rules that don’t apply to your environment
    • +
  • Set custom values for settings like password requirements or timeout periods
    • +
  • Document exceptions for rules your organization can’t implement
    • +
  • Create a named baseline specific to your organization
    • +
+
+

Tailor a Baseline

Section titled “Tailor a Baseline”
  1. -

    Start the Tailoring Script

    -
      -
    • Run the script with the -t flag to begin tailoring: -
      Terminal window
      ./macos_security/scripts/generate_baseline.py -k 800-53r5_moderate -t
      -Replace 800-53r5_moderate with your desired baseline tag.
      • -
    +

    Run the tailoring command

    +
    Terminal window
    ./scripts/generate_baseline.py -k BASELINE_NAME -t
    +

    Example:

    +
    Terminal window
    ./scripts/generate_baseline.py -k 800-53r5_moderate -t
  2. -

    Enter Basic Information

    +

    Enter baseline information

    +

    You’ll be prompted for:

      -
    • You will be prompted for: -
        -
      • Benchmark Name
        • -
      • Author’s Name
        • +
      • Baseline name
        • +
      • Author name
      • Organization
      • -
    +
  3. +

    Select rules to include

    +

    For each rule, choose whether to include it:

    +
    Include "audit_acls_files_configure"? [Y/n/all/?]:
    + + + + + + + + + + + + + + + + + + + + + + + + + +
    OptionAction
    YInclude this rule (default)
    nExclude this rule
    allInclude all remaining rules
    ?Show rule details
    +
  4. -

    Select Rules to Include

    -
      -
    • For each rule, you will be asked whether to include it in your tailored baseline: -
      Would you like to include the rule for "audit_acls_files_configure" in your benchmark? [Y/n/all/?]:
      -
      • -
    • Enter ? to see more details about a rule.
      • -
    +

    Set organization-defined values

    +

    For rules that need custom values, enter your setting or press Enter for the default:

    +
    Enter value for "pwpolicy_account_lockout_enforce"
    or press Enter for recommended (3):
  5. -

    Set Organization Defined Values (ODVs)

    -
      -
    • If a rule requires an ODV, you will be prompted to enter a value or accept the recommended default: -
      Number of failed attempts.
      Enter the ODV for "pwpolicy_account_lockout_enforce" or press Enter for the recommended value (3):
      -
      • -
    -
    6. -
  6. -

    Review Output Files

    -
      -
    • After completing the prompts, the following files are created:
      • -
    -
    7. -
-
  • Directorymacos_security/ +

    Find your files

    +

    Your tailored baseline and custom values are saved:

    +
    • Directorymacos_security/
      • Directorybuild/
        • Directorybaselines/ -
          • YOUR_BENCHMARK.yaml ---> The tailored baseline file
      • Directorycustom/ +
        • YOUR_BASELINE.yaml - Tailored baseline
    • Directorycustom/
      • Directoryrules/ -
        • *.yaml ---> Custom ODV values for tailored rules
 -

Each tailored rule with a custom ODV will have a YAML file like:

-
odv:
  custom: 11
+
  • *.yaml - Custom ODV values
+ + +
+

Custom ODV Files

Section titled “Custom ODV Files”
+

When you set a custom value, a YAML file is created in custom/rules/:

+
---
odv:
  custom: 5
+

This file overrides the default value for that rule. Your custom values are preserved and reused when you regenerate the baseline.

+
+

Example Workflow

Section titled “Example Workflow”
+
Terminal window
# Generate a tailored NIST 800-53 Moderate baseline
./scripts/generate_baseline.py -k 800-53r5_moderate -t

+
# Generate outputs from your tailored baseline
./scripts/generate_guidance.py -s -p build/baselines/my_org_baseline.yaml
+
+

Next Steps

Section titled “Next Steps”
-

Use these tailored files to generate guidance or further customize your security posture. For more details, see Customization.

\ No newline at end of file +
\ No newline at end of file diff --git a/baselines/what-are-baselines/index.html b/baselines/what-are-baselines/index.html index dc68122c..da1fab29 100644 --- a/baselines/what-are-baselines/index.html +++ b/baselines/what-are-baselines/index.html @@ -1,4 +1,4 @@ - What Are Baselines? | mSCP - Skip to content
mSCP
Skip to content
mSCP

What Are Baselines?

A baseline is a collection of security rules and configuration settings that define a minimum standard for compliance with a specific security framework or policy. Baselines help organizations ensure their systems meet required security controls and best practices. In this project, a baseline is represented as a YAML file that lists all the rules relevant to a particular compliance target, such as NIST 800-53, DISA-STIG, CIS, or CMMC.

-

Each baseline is tailored to a specific operating system (macOS, iOS/iPadOS, or visionOS) and compliance level (such as High, Moderate, or Low). This ensures that the security guidance and automation generated from a baseline are appropriate for the OS and the compliance requirements you are targeting. Selecting the correct baseline for your OS and compliance needs is essential for generating accurate guidance and scripts.

-

The baselines provided in this project are derived from widely recognized security standards and frameworks, including:

- +

What Are Baselines?

A baseline is a YAML file that defines which security rules apply to your environment. Each baseline maps to a compliance framework (NIST 800-53, CIS Benchmarks, DISA STIG, etc.) and includes all the rules needed to meet that framework’s requirements.

+

Once you have a baseline, the project scripts use it to generate everything you need: guidance documents, configuration profiles, compliance scripts, and more.

+
-

Baselines Available in This Project

Section titled “Baselines Available in This Project”
-

The project provides a variety of baselines, each designed for a specific OS and compliance framework. These files are located in the /baselines/ folder of the repository. Below is a summary of the available baselines:

-
    -
  • NIST 800-53 (macOS, iOS/iPadOS, visionOS) -
      -
    • High: 800-53r5_high.yaml
      • -
    • Moderate: 800-53r5_moderate.yaml
      • -
    • Low: 800-53r5_low.yaml
      • -
    -
    • -
  • DISA-STIG -
      -
    • macOS: DISA-STIG.yaml
      • -
    • iOS/iPadOS: -
        -
      • iOS STIG: ios_stig.yaml
        • -
      • iOS STIG BYOAD: ios_stig_byoad.yaml
        • -
      -
      • -
    -
    • -
  • NIST 800-171 -
      -
    • 800-171.yaml
      • -
    -
    • -
  • CIS Benchmarks -
      -
    • macOS: -
        -
      • Level 1: cis_lvl1.yaml
        • -
      • Level 2: cis_lvl2.yaml (includes Level 1)
        • -
      -
      • -
    • iOS/iPadOS: -
        -
      • Level 1 BYOD: cis_lvl1_byod.yaml
        • -
      • Level 2 BYOD: cis_lvl2_byod.yaml
        • -
      • Level 1 Enterprise: cis_lvl1_enterprise.yaml
        • -
      • Level 2 Enterprise: cis_lvl2_enterprise.yaml
        • -
      -
      • -
    -
    • -
  • CIS Controls V8 -
      -
    • cisv8.yaml
      • -
    -
    • -
  • CMMC -
      -
    • Level 1: cmmc_lvl1.yaml
      • -
    • Level 2: cmmc_lvl2.yaml
      • -
    -
    • -
  • CNSSI 1254 -
      -
    • High: cnssi-1254_high.yaml
      • -
    • Moderate: cnssi-1254_moderate.yaml
      • -
    • Low: cnssi-1254_low.yaml
      • -
    -
    • -
  • Indigo (iOS Only) -
      -
    • Base: indigo_base.yaml
      • -
    • High: indigo_high.yaml
      • -
    -
    • -
- +

How Baselines Work

Section titled “How Baselines Work”
+
    +
  1. Choose a framework - Pick the compliance standard you need (NIST, CIS, STIG, etc.)
    2. +
  2. Generate the baseline - Run generate_baseline.py to create the YAML file
    3. +
  3. Customize if needed - Tailor the baseline to your organization’s requirements
    4. +
  4. Generate outputs - Use the baseline to create profiles, scripts, and documentation
    5. +
+

Each baseline is specific to an operating system (macOS, iOS/iPadOS, or visionOS) and compliance level (High, Moderate, Low, or Level 1/2 depending on the framework).

-

Checking Available Baselines for the Selected Branch

Section titled “Checking Available Baselines for the Selected Branch”
-

To see all available baseline tags for the currently checked-out branch, run:

+

Available Baselines

Section titled “Available Baselines”
+

Baselines are located in the /baselines/ folder. Here’s what’s available:

+

Government Frameworks

Section titled “Government Frameworks”
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FrameworkBaseline Files
NIST 800-53 Rev 5800-53r5_high.yaml, 800-53r5_moderate.yaml, 800-53r5_low.yaml
NIST 800-171800-171.yaml
DISA STIGmacOS: DISA-STIG.yaml
iOS: ios_stig.yaml, ios_stig_byoad.yaml
CMMC 2.0cmmc_lvl1.yaml, cmmc_lvl2.yaml
CNSSI 1253cnssi-1253_high.yaml, cnssi-1253_moderate.yaml, cnssi-1253_low.yaml

Industry Frameworks

Section titled “Industry Frameworks”
+ + + + + + + + + + + + + + + + + + + + +
FrameworkBaseline Files
CIS Benchmarks (macOS)cis_lvl1.yaml, cis_lvl2.yaml
CIS Benchmarks (iOS)cis_lvl1_byod.yaml, cis_lvl2_byod.yaml
cis_lvl1_enterprise.yaml, cis_lvl2_enterprise.yaml
CIS Controls v8cisv8.yaml

International

Section titled “International”
+ + + + + + + + + + + + +
FrameworkBaseline Files
Indigo (iOS only)indigo_base.yaml, indigo_high.yaml
+ +
+

List Available Baselines

Section titled “List Available Baselines”
+

To see all baselines available for your current branch:

Terminal window
./scripts/generate_baseline.py -l
-

This will list all baseline tags available for your current branch.

Example output:

-
Terminal window
800-171
800-53r4_high
800-53r4_low
800-53r4_moderate
800-53r5_high
800-53r5_low
800-53r5_moderate
800-53r5_privacy
all_rules
arm64
cis_lvl1
cis_lvl2
cisv8
cmmc_lvl1
cmmc_lvl2
cnssi-1253_high
cnssi-1253_low
cnssi-1253_moderate
i386
inherent
manual
n_a
none
permanent
srg
stig
supplemental
+
800-53r5_high
800-53r5_moderate
800-53r5_low
cis_lvl1
cis_lvl2
DISA-STIG
cmmc_lvl1
cmmc_lvl2
...
-

More About Baselines

Section titled “More About Baselines”
+

Key Concepts

Section titled “Key Concepts”
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ConceptDescription
PurposeDefine what security settings your systems should have
CustomizationTailor baselines to fit your organization’s specific needs
AuditingProvide evidence that systems meet compliance standards
AutomationScripts can check and fix settings automatically
MaintenanceUpdated with each macOS release and when frameworks change
+
+

Next Steps

Section titled “Next Steps”
    -
  • Purpose: Baselines provide a clear, measurable standard for system configuration and security, serving as a benchmark for compliance efforts.
    • -
  • Maintenance: Baselines are periodically reviewed and updated to reflect changes in security standards, best practices, and emerging threats.
    • -
  • Customization: Organizations can adapt baselines to fit their specific operational requirements or risk tolerance.
    • -
  • Auditing: Baselines are essential during audits, providing evidence that systems are configured according to recognized standards.
    • -
  • Automation: Baselines enable automated tools to assess, enforce, and remediate system configurations.
    • -
  • Versioning: Each baseline may have versions to track updates and changes over time.
    • -
  • Community Contributions: Contributions from the community help keep baselines current and relevant.
    • -
\ No newline at end of file +
  • How to Generate Baselines - Create your first baseline
    • +
  • Tailoring a Baseline - Customize for your organization
    • +
  • Baseline File Layout - Understand the YAML structure
    • + +
    \ No newline at end of file diff --git a/compliance-scripts/compliance-script-layout/index.html b/compliance-scripts/compliance-script-layout/index.html index 1075bb93..9a51ccc1 100644 --- a/compliance-scripts/compliance-script-layout/index.html +++ b/compliance-scripts/compliance-script-layout/index.html @@ -1,4 +1,4 @@ - Compliance Script Layout | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Compliance Script Layout

    Below are the main parameters and interactive options available in the compliance script.
    -Due to the script’s complexity and flexibility, we provide an overview of its usage and interface rather than the full layout.

    -

    Running the Script

    Section titled “Running the Script”
    -

    You can run the script either interactively or by using command-line flags:

    -
    Terminal window
    sudo ./build/800-53r5_moderate/800-53r5_moderate_compliance.sh
    -

    Interactive Menu Example

    Section titled “Interactive Menu Example”
    -

    When run interactively, you’ll see a menu like this:

    -
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
            M A I N - M E N U
      macOS Security Compliance Tool
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Last compliance scan: No scans have been run
    
-
    1. View Last Compliance Report
    2. Run New Compliance Scan
    3. Run Commands to remediate non-compliant settings
    4. Exit
    Enter choice [ 1 - 4 ]
    -

    Command-Line Options

    Section titled “Command-Line Options”
    -

    You can also use command-line flags for automated or non-interactive use:

    -
    Terminal window
    ./mscp_compliance.sh Usage
    ./mscp_compliance.sh [--check] [--fix] [--cfc] [--stats] [--compliant] [--non_compliant] [--reset] [--reset-all] [--quiet=<value>]
    -

    Optional parameters:

    +

    Compliance Script Layout

    The compliance script is a zsh script with functions for checking settings, applying fixes, and reporting results. Understanding the structure helps you troubleshoot or customize the script.

    + +
    +

    Script Structure

    Section titled “Script Structure”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    SectionDescription
    HeaderShebang, variables, paths to audit plist and log file
    Utility functionsLogging, prompts, menu display
    Rule checksIndividual check function for each rule
    Rule fixesIndividual fix function for each rule
    Main logicMenu system and command-line argument handling
    +
    +

    Key Functions

    Section titled “Key Functions”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FunctionPurpose
    run_scanExecute all rule checks and write results to plist
    run_fixApply remediation commands for non-compliant settings
    generate_statsDisplay pass/fail counts and compliance percentage
    show_menusDisplay interactive menu
    logmessageWrite results to log file
    +
    +

    How Rules Are Checked

    Section titled “How Rules Are Checked”
    +

    Each rule in your baseline becomes a check block in the script:

    +
      +
    1. Extract current value - Run a command to get the current system setting
      2. +
    2. Compare to expected - Check if the value matches the baseline requirement
      3. +
    3. Log result - Record pass, fail, or exempt status to the audit plist
      4. +
    +
    +

    How Fixes Are Applied

    Section titled “How Fixes Are Applied”
    +

    Each rule with a fix becomes a fix block in the script:

    +
      +
    1. Check exemption - Skip if the rule is marked exempt
      2. +
    2. Check compliance - Skip if the rule already passed
      3. +
    3. Prompt user - Ask for confirmation (unless running with --fix)
      4. +
    4. Apply fix - Run the remediation command
      5. +
    +
    +

    Output Files

    Section titled “Output Files”
    + + + + + + + + + + + + + + + + + +
    FilePurpose
    /Library/Preferences/org.BASELINE_NAME.audit.plistStores check results and exemptions
    /Library/Logs/BASELINE_NAME_baseline.logTimestamped log of all actions
    +
    +

    Next Steps

    Section titled “Next Steps”
      -
    • -

      --check
      -Run the compliance checks without interaction.

      -
      • -
    • -

      --fix
      -Run the remediation commands without interaction.

      -
      • -
    • -

      --cfc
      -Runs a check, fix, and check cycle without interaction.

      -
      • -
    • -

      --stats
      -Display statistics from the last compliance check.

      -
      • -
    • -

      --compliant
      -Report the number of compliant checks.

      -
      • -
    • -

      --non_compliant
      -Report the number of non-compliant checks.

      -
      • -
    • -

      --reset
      -Clear all results for the current baseline.

      -
      • -
    • -

      --reset-all
      -Clear all results for all MSCP baselines.

      -
      • -
    • -

      --quiet=<value>
      -Control output verbosity:
      -  1 – Show only failed and exempted checks
      -  2 – Show minimal output

      -
      • -
    \ No newline at end of file +
  • How to Generate Compliance Scripts - Create a script from your baseline
    • +
  • What Are Compliance Scripts? - Learn more about compliance scripts
    • + +
    \ No newline at end of file diff --git a/compliance-scripts/how-to-generate-compliance-scripts/index.html b/compliance-scripts/how-to-generate-compliance-scripts/index.html index dda7c385..d7bc0f67 100644 --- a/compliance-scripts/how-to-generate-compliance-scripts/index.html +++ b/compliance-scripts/how-to-generate-compliance-scripts/index.html @@ -1,4 +1,4 @@ - How To Generate Compliance Scripts | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    How To Generate Compliance Scripts

    The primary script for generating compliance scripts is located here in the macos_security repository:

    -
    • Directorymacos_security/ -
      • Directoryscripts/ -
        • generate_guidance.py
     - -

    Steps to Generate a Compliance Script

    Section titled “Steps to Generate a Compliance Script”
    +

    How to Generate Compliance Scripts

    Compliance scripts are generated using the generate_guidance.py script with the -s flag. The script reads your baseline and creates a zsh script ready for deployment.

    + + +
    +

    Generate a Compliance Script

    Section titled “Generate a Compliance Script”
    1. -

      Run the Compliance Script Generator

      -

      Use the -s flag with generate_guidance.py to generate a compliance script for your baseline YAML file:

      -
      Terminal window
      ./scripts/generate_guidance.py -s baselines/800-53r5_moderate.yaml
      +

      Run the generation script

      +
      Terminal window
      ./scripts/generate_guidance.py -s baselines/BASELINE_NAME.yaml
      +

      Example:

      +
      Terminal window
      ./scripts/generate_guidance.py -s baselines/800-53r5_moderate.yaml
    2. -

      Review the Output

      -

      The script will generate several files in the build/BASELINE/ directory:

      -
      • Directorybuild/ +

        Find your files

        +

        The -s flag generates the compliance script and audit plist. Guidance documents are also created by default.

        +
        • Directorybuild/
          • Directory800-53r5_moderate/ -
            • 800-53r5_moderate.adoc
            • 800-53r5_moderate.html
            • 800-53r5_moderate.pdf
            • 800-53r5_moderate_compliance.sh
            • Directorypreferences/ +
              • 800-53r5_moderate_compliance.sh - Compliance script
              • 800-53r5_moderate.adoc - AsciiDoc guidance
              • 800-53r5_moderate.html - HTML guidance
              • 800-53r5_moderate.pdf - PDF guidance
              • Directorypreferences/
                • org.800-53r5_moderate.audit.plist
    -

    What Gets Generated?

    Section titled “What Gets Generated?”
    +
    +

    Running the Script

    Section titled “Running the Script”
    +

    Run with sudo for full access to system settings:

    +
    Terminal window
    sudo ./build/BASELINE_NAME/BASELINE_NAME_compliance.sh
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FlagDescription
    (no flags)Interactive menu mode
    --checkRun compliance checks without interaction
    --fixRun remediation commands without interaction
    --cfcRun check, fix, check sequence
    --statsDisplay statistics from last scan
    --compliantReport number of compliant checks
    --non_compliantReport number of non-compliant checks
    --resetClear results for current baseline
    --reset-allClear results for all mSCP baselines
    + +
    +

    Runtime Output

    Section titled “Runtime Output”
    +

    When executed, the script creates:

    + + + + + + + + + + + + + + + + + +
    FileLocation
    Audit plist/Library/Preferences/org.BASELINE_NAME.audit.plist
    Log file/Library/Logs/BASELINE_NAME_baseline.log
    +
    +

    Next Steps

    Section titled “Next Steps”
      -
    • Compliance Script: {baseline}_compliance.sh
      -The main script to check/fix compliance.
      • -
    • Audit Plist: org.{baseline}.audit.plist
      -Used for exemptions and compliance tracking.
      • -
    • Reports: .adoc, .html, .pdf
      -Documentation and reports for the baseline.
      • +
    • Compliance Script Layout - Understand the script structure
      • +
    • What Are Compliance Scripts? - Learn more about compliance scripts
    - -

    Running the Compliance Script

    Section titled “Running the Compliance Script”
    -

    You can run the script interactively or with command-line flags:

    -
    Terminal window
    sudo ./build/800-53r5_moderate/800-53r5_moderate_compliance.sh
    -

    This will present an interactive menu:

    -
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
            M A I N - M E N U
      macOS Security Compliance Tool
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Last compliance scan: No scans have been run
    
-
    1. View Last Compliance Report
    2. Run New Compliance Scan
    3. Run Commands to remediate non-compliant settings
    4. Exit
    Enter choice [ 1 - 4 ]
    -

    Note:
    -The --cfc flag will trigger a check/fix/check when running the compliance script.

    -

    After running, results are written to:

    -
      -
    • /Library/Preferences/org.{baseline}.audit.plist
      • -
    • /Library/Logs/{baseline}_baseline.log
      • -
    -

    Example log output:

    -
    Thu Jan 21 15:09:41 UTC 2021 auth_pam_login_smartcard_enforce passed (Result: 2, Expected: {integer: 2})
    Thu Jan 21 15:09:41 UTC 2021 auth_smartcard_allow passed (Result: 1, Expected: {integer: 1})
    Thu Jan 21 15:09:41 UTC 2021 auth_pam_sudo_smartcard_enforce passed (Result: 2, Expected: {integer: 2})
    Thu Jan 21 15:09:41 UTC 2021 auth_smartcard_certificate_trust_enforce_moderate passed (Result: 2, Expected: {integer: 2})
    Thu Jan 21 15:09:41 UTC 2021 auth_smartcard_enforce has an exemption (Reason: Broken Reader)
    - -

    Compliance Script Command Line Reference

    Section titled “Compliance Script Command Line Reference”
    -

    Note:
    -The compliance script expects to be run in a Z Shell (zsh). Running with sh or bash will result in errors.

    -
    Terminal window
    ./mscp_compliance.sh Usage
    ./mscp_compliance.sh [--check] [--fix] [--cfc] [--stats] [--compliant] [--non_compliant] [--reset] [--reset-all] [--quiet=<value>]
    
-
    Optional parameters:
    --check            :   run the compliance checks without interaction
    --fix              :   run the remediation commands without interaction
    --cfc              :   runs a check, fix, check without interaction
    --stats            :   display the statistics from last compliance check
    --compliant        :   reports the number of compliant checks
    --non_compliant    :   reports the number of non_compliant checks
    --reset            :   clear out all results for current baseline
    --reset-all        :   clear out all results for ALL MSCP baselines
    --quiet=<value>    :   1 - show only failed and exempted checks in output
                           2 - show minimal output
    \ No newline at end of file +
    \ No newline at end of file diff --git a/compliance-scripts/what-are-compliance-scripts/index.html b/compliance-scripts/what-are-compliance-scripts/index.html index d19fab1d..da593d02 100644 --- a/compliance-scripts/what-are-compliance-scripts/index.html +++ b/compliance-scripts/what-are-compliance-scripts/index.html @@ -1,4 +1,4 @@ - What Are Compliance Scripts? | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    What Are Compliance Scripts?

    Compliance scripts in the NIST macOS Security Compliance Project (mSCP) are automated scripts designed to check and enforce security settings on macOS systems. These scripts are generated from the project’s baselines, which define recommended security controls and configurations.

    -

    The compliance scripts allow organizations to:

    +

    What Are Compliance Scripts?

    Compliance scripts are zsh scripts that check macOS security settings against your baseline and optionally fix non-compliant settings. They handle settings that can’t be enforced through configuration profiles or DDM.

    +

    The mSCP project generates a compliance script from your baseline, designed to be deployed via MDM or run locally.

    +
    +

    What the Script Does

    Section titled “What the Script Does”
    + + + + + + + + + + + + + + + + + + + + + + + + + +
    FeatureDescription
    CheckScan current settings against the baseline and report status
    FixRemediate non-compliant settings to match the baseline
    ExemptionsRespect rules marked as exempt (configured via MDM)
    InteractiveMenu-driven mode for running scans and viewing reports
    +
    +

    When to Use Compliance Scripts

    Section titled “When to Use Compliance Scripts”
    + + + + + + + + + + + + + + + + + + + + + + + + + +
    Use CaseDescription
    Settings not supported by profilesSome security settings can only be configured via script
    AuditingGenerate compliance reports for review
    RemediationFix settings that drift from the baseline
    Standalone MacsDevices not managed by MDM
    + +
    +

    What the Project Generates

    Section titled “What the Project Generates”
    + + + + + + + + + + + + + + + + + +
    OutputLocation
    BASELINE_NAME_compliance.shbuild/BASELINE_NAME/
    org.BASELINE_NAME.audit.plistbuild/BASELINE_NAME/preferences/
    +
    +

    Next Steps

    Section titled “Next Steps”
      -
    • Assess: Automatically check a system’s current configuration against the selected baseline.
      • -
    • Remediate: Apply changes to bring the system into compliance with the baseline.
      • -
    • Report: Generate output showing which settings are compliant or non-compliant.
      • +
    • How to Generate Compliance Scripts - Create a script from your baseline
      • +
    • Compliance Script Layout - Understand the script structure
    -

    These scripts are typically generated using the project’s tooling and can be run locally or integrated into enterprise management workflows. They help ensure that macOS devices meet NIST and organizational security requirements efficiently and consistently.

    \ No newline at end of file +
    \ No newline at end of file diff --git a/configuration-profiles/configuration-profile-layout/index.html b/configuration-profiles/configuration-profile-layout/index.html index 77158382..5670ea84 100644 --- a/configuration-profiles/configuration-profile-layout/index.html +++ b/configuration-profiles/configuration-profile-layout/index.html @@ -1,4 +1,4 @@ - Configuration Profile Layout | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Configuration Profile Layout

    This page provides a detailed breakdown of a macOS configuration profile in XML (plist) format. Each element is explained to help you understand how to configure and interpret configuration profiles.

    -

    ConsentText

    Section titled “ConsentText”
    -
      -
    • ConsentText: Text displayed to users to inform them about terms, conditions, or warnings before applying the profile. -
        -
      • default: The default consent message shown to users.
        • -
      -
      • -
    +

    Configuration Profile Layout

    Configuration profiles are XML files in Apple’s property list (plist) format. Understanding the structure helps you troubleshoot profiles or make manual adjustments.

    + +
    +

    Profile Structure Overview

    Section titled “Profile Structure Overview”
    +

    A configuration profile has two main parts:

    + + + + + + + + + + + + + + + + + +
    SectionDescription
    Profile-level keysMetadata about the profile itself (name, organization, UUID)
    PayloadContentArray of payloads containing the actual settings
    +
    +

    Profile-Level Keys

    Section titled “Profile-Level Keys”
    +

    These keys describe the profile:

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    KeyDescription
    PayloadDisplayNameName shown in System Settings
    PayloadDescriptionDescription of the profile’s purpose
    PayloadIdentifierUnique identifier for the profile
    PayloadOrganizationOrganization that created the profile
    PayloadUUIDUnique UUID for this profile
    PayloadVersionVersion number (usually 1)
    PayloadTypeAlways Configuration for profiles
    PayloadScopeSystem or User
    ConsentTextTerms displayed before installation
    +

    PayloadContent

    Section titled “PayloadContent”
    -
      -
    • PayloadContent: An array of dictionaries, each representing a payload (setting or policy) included in the profile.
      • -
    -

    Example Payload (com.apple.screensaver)

    Section titled “Example Payload (com.apple.screensaver)”
    -
      -
    • PayloadIdentifier: A unique identifier for this payload.
      • -
    • PayloadType: The type of payload, specifying the domain or feature being configured.
      • -
    • PayloadUUID: A unique UUID for this payload.
      • -
    • PayloadVersion: The version number of this payload.
      • -
    • askForPassword: If true, requires a password to unlock the screensaver.
      • -
    • askForPasswordDelay: The delay (in seconds) before requiring a password after the screensaver starts.
      • -
    • idleTime: Time (in seconds) of inactivity before the screensaver activates.
      • -
    • loginWindowIdleTime: Time (in seconds) of inactivity at the login window before the screensaver activates.
      • -
    • moduleName: The name of the screensaver module to use.
      • -
    -

    Other Top-Level Keys

    Section titled “Other Top-Level Keys”
    -
      -
    • PayloadDescription: A description of the profile and its purpose.
      • -
    • PayloadDisplayName: The display name for the profile.
      • -
    • PayloadIdentifier: A unique identifier for the entire profile.
      • -
    • PayloadOrganization: The organization responsible for the profile.
      • -
    • PayloadScope: The scope of the profile (e.g., System).
      • -
    • PayloadType: The type of the profile (should be Configuration).
      • -
    • PayloadUUID: A unique UUID for the profile.
      • -
    • PayloadVersion: The version number of the profile.
      • -
    +

    The PayloadContent array contains one or more payloads. Each payload configures a specific feature or preference domain.

    +

    Each payload includes:

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    KeyDescription
    PayloadTypeThe preference domain (e.g., com.apple.screensaver)
    PayloadIdentifierUnique identifier for this payload
    PayloadUUIDUnique UUID for this payload
    PayloadVersionVersion number
    (settings)Domain-specific keys and values
    +
    +

    Example: Screensaver Payload

    Section titled “Example: Screensaver Payload”
    +

    This payload configures screensaver settings:

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    KeyValueDescription
    PayloadTypecom.apple.screensaverThe preference domain
    askForPasswordtrueRequire password to unlock
    askForPasswordDelay5Seconds before password required
    idleTime1200Seconds before screensaver starts

    Complete Example

    Section titled “Complete Example”
    -
    <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
    <plist version="1.0">
    <dict>
        <key>ConsentText</key>
        <dict>
            <key>default</key>
            <string>THE SOFTWARE IS PROVIDED 'AS IS' WITHOUT ANY WARRANTY OF ANY KIND, EITHER EXPRESSED, IMPLIED, OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY THAT THE SOFTWARE WILL CONFORM TO SPECIFICATIONS, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND FREEDOM FROM INFRINGEMENT, AND ANY WARRANTY THAT THE DOCUMENTATION WILL CONFORM TO THE SOFTWARE, OR ANY WARRANTY THAT THE SOFTWARE WILL BE ERROR FREE.  IN NO EVENT SHALL NIST BE LIABLE FOR ANY DAMAGES, INCLUDING, BUT NOT LIMITED TO, DIRECT, INDIRECT, SPECIAL OR CONSEQUENTIAL DAMAGES, ARISING OUT OF, RESULTING FROM, OR IN ANY WAY CONNECTED WITH THIS SOFTWARE, WHETHER OR NOT BASED UPON WARRANTY, CONTRACT, TORT, OR OTHERWISE, WHETHER OR NOT INJURY WAS SUSTAINED BY PERSONS OR PROPERTY OR OTHERWISE, AND WHETHER OR NOT LOSS WAS SUSTAINED FROM, OR AROSE OUT OF THE RESULTS OF, OR USE OF, THE SOFTWARE OR SERVICES PROVIDED HEREUNDER.</string>
        </dict>
        <key>PayloadContent</key>
        <array>
            <dict>
                <key>PayloadIdentifier</key>
                <string>alacarte.macOS.all_rules.4413990e-a57b-4e0e-8902-59f780718b1c</string>
                <key>PayloadType</key>
                <string>com.apple.screensaver</string>
                <key>PayloadUUID</key>
                <string>4413990e-a57b-4e0e-8902-59f780718b1c</string>
                <key>PayloadVersion</key>
                <integer>1</integer>
                <key>askForPassword</key>
                <true/>
                <key>askForPasswordDelay</key>
                <integer>5</integer>
                <key>idleTime</key>
                <integer>1200</integer>
                <key>loginWindowIdleTime</key>
                <integer>1200</integer>
                <key>moduleName</key>
                <string>Sequoia</string>
            </dict>
        </array>
        <key>PayloadDescription</key>
        <string>Created: 2025-07-23
    Configuration settings for the com.apple.screensaver preference domain.</string>
        <key>PayloadDisplayName</key>
        <string>[all_rules] com.apple.screensaver settings</string>
        <key>PayloadIdentifier</key>
        <string>com.apple.screensaver.all_rules</string>
        <key>PayloadOrganization</key>
        <string>macOS Security Compliance Project</string>
        <key>PayloadScope</key>
        <string>System</string>
        <key>PayloadType</key>
        <string>Configuration</string>
        <key>PayloadUUID</key>
        <string>8e4caf27-a378-4fca-b753-a87d8123636b</string>
        <key>PayloadVersion</key>
        <integer>1</integer>
    </dict>
    </plist>
    \ No newline at end of file +
    <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
    <plist version="1.0">
    <dict>
        <key>ConsentText</key>
        <dict>
            <key>default</key>
            <string>THE SOFTWARE IS PROVIDED 'AS IS' WITHOUT ANY WARRANTY OF ANY KIND, EITHER EXPRESSED, IMPLIED, OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY THAT THE SOFTWARE WILL CONFORM TO SPECIFICATIONS, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND FREEDOM FROM INFRINGEMENT, AND ANY WARRANTY THAT THE DOCUMENTATION WILL CONFORM TO THE SOFTWARE, OR ANY WARRANTY THAT THE SOFTWARE WILL BE ERROR FREE.  IN NO EVENT SHALL NIST BE LIABLE FOR ANY DAMAGES, INCLUDING, BUT NOT LIMITED TO, DIRECT, INDIRECT, SPECIAL OR CONSEQUENTIAL DAMAGES, ARISING OUT OF, RESULTING FROM, OR IN ANY WAY CONNECTED WITH THIS SOFTWARE, WHETHER OR NOT BASED UPON WARRANTY, CONTRACT, TORT, OR OTHERWISE, WHETHER OR NOT INJURY WAS SUSTAINED BY PERSONS OR PROPERTY OR OTHERWISE, AND WHETHER OR NOT LOSS WAS SUSTAINED FROM, OR AROSE OUT OF THE RESULTS OF, OR USE OF, THE SOFTWARE OR SERVICES PROVIDED HEREUNDER.</string>
        </dict>
        <key>PayloadContent</key>
        <array>
            <dict>
                <key>PayloadIdentifier</key>
                <string>alacarte.macOS.all_rules.4413990e-a57b-4e0e-8902-59f780718b1c</string>
                <key>PayloadType</key>
                <string>com.apple.screensaver</string>
                <key>PayloadUUID</key>
                <string>4413990e-a57b-4e0e-8902-59f780718b1c</string>
                <key>PayloadVersion</key>
                <integer>1</integer>
                <key>askForPassword</key>
                <true/>
                <key>askForPasswordDelay</key>
                <integer>5</integer>
                <key>idleTime</key>
                <integer>1200</integer>
                <key>loginWindowIdleTime</key>
                <integer>1200</integer>
                <key>moduleName</key>
                <string>Sequoia</string>
            </dict>
        </array>
        <key>PayloadDescription</key>
        <string>Created: 2025-07-23
    Configuration settings for the com.apple.screensaver preference domain.</string>
        <key>PayloadDisplayName</key>
        <string>[all_rules] com.apple.screensaver settings</string>
        <key>PayloadIdentifier</key>
        <string>com.apple.screensaver.all_rules</string>
        <key>PayloadOrganization</key>
        <string>macOS Security Compliance Project</string>
        <key>PayloadScope</key>
        <string>System</string>
        <key>PayloadType</key>
        <string>Configuration</string>
        <key>PayloadUUID</key>
        <string>8e4caf27-a378-4fca-b753-a87d8123636b</string>
        <key>PayloadVersion</key>
        <integer>1</integer>
    </dict>
    </plist>
    +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/configuration-profiles/how-to-generate-configuration-profiles/index.html b/configuration-profiles/how-to-generate-configuration-profiles/index.html index 77be3663..bcb98462 100644 --- a/configuration-profiles/how-to-generate-configuration-profiles/index.html +++ b/configuration-profiles/how-to-generate-configuration-profiles/index.html @@ -1,4 +1,4 @@ - How To Generate Configuration Profiles | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    How To Generate Configuration Profiles

    The primary script for generating configuration profiles is located here in the macos_security repository:

    -
    • Directorymacos_security/ -
      • Directoryscripts/ ---> Project scripts -
        • generate_guidance.py ---> Script to generate configuration profiles
     - -

    Follow these steps to generate configuration profiles:

    +

    How to Generate Configuration Profiles

    Configuration profiles are generated using the generate_guidance.py script with the -p flag. The script reads your baseline and creates .mobileconfig files ready for MDM deployment.

    + + +
    +

    Generate Configuration Profiles

    Section titled “Generate Configuration Profiles”
    1. -

      Prepare Your Rules YAML

      -
        -
      • Ensure your rules YAML file contains rules with mobileconfig: true and the appropriate mobileconfig_info section.
        -Example: -
        mobileconfig: true
        mobileconfig_info:
          com.apple.security.smartcard:
            enforceSmartCard: true
        -
        • -
      +

      Generate unsigned profiles

      +
      Terminal window
      ./scripts/generate_guidance.py -p baselines/BASELINE_NAME.yaml
      +

      Example:

      +
      Terminal window
      ./scripts/generate_guidance.py -p baselines/800-53r5_moderate.yaml
    2. -

      Generate Unsigned Configuration Profiles

      -
        -
      • Run the following command to generate unsigned configuration profiles and corresponding plists: -
        Terminal window
        ./scripts/generate_guidance.py -p build/baselines/800-53r5_moderate.yaml
        -
        • -
      -
      3. -
    3. -

      (Optional) Generate Signed Configuration Profiles

      -
        -
      • If you want to generate signed configuration profiles, you need the certificate Subject Key ID (not the SHA-1 hash).
        • -
      • Retrieve the Subject Key ID with: -
        Terminal window
        skid=$(security find-certificate -c "CodeSigning Certificate Name" -p | openssl asn1parse | awk -F: '/X509v3 Subject Key Identifier/ {getline; print $1}')
        security find-certificate -c "CodeSigning Certificate Name" -p | openssl asn1parse -strparse $skid | awk -F: '/HEX DUMP/{print $4}'
        -
        • -
      • Then use the -H flag with the Subject Key ID to generate signed profiles: -
        Terminal window
        ./scripts/generate_guidance.py -p -H <HASHVALUE> build/baselines/800-53r5_moderate.yaml
        -
        • -
      -
      4. -
    4. -

      Locate the Generated Files

      -
        -
      • After running the script, the configuration profiles and plists will be created in the appropriate output directories.
        • -
      +

      Find your files

      +

      Profiles are saved to build/BASELINE_NAME/mobileconfigs/:

      +
      • Directorybuild/ +
        • Directory800-53r5_moderate/ +
          • Directorymobileconfigs/ +
            • Directoryunsigned/ - Unsigned profiles (.mobileconfig)
              • …
            • Directorypreferences/ - Preference plists (.plist)
              • …
    -

    For more information, see How to Generate Baselines or review the baseline file layout.

    \ No newline at end of file +
    +

    Generate Signed Profiles

    Section titled “Generate Signed Profiles”
    +

    Signed profiles verify authenticity and prevent tampering. You need a signing certificate installed in your keychain.

    +
      +
    1. +

      Get your certificate’s Subject Key ID

      +

      First, find the offset:

      +
      Terminal window
      security find-certificate -c "Your Certificate Name" -p | \
        openssl asn1parse | \
        awk -F: '/X509v3 Subject Key Identifier/ {getline; print $1}'
      +

      Then extract the hash using that offset (replace OFFSET with the number from above):

      +
      Terminal window
      security find-certificate -c "Your Certificate Name" -p | \
        openssl asn1parse -strparse OFFSET | \
        awk -F: '/HEX DUMP/{print $4}'
      +

      Replace "Your Certificate Name" with your signing certificate’s common name.

      +
      2. +
    2. +

      Generate signed profiles

      +
      Terminal window
      ./scripts/generate_guidance.py -p -H SUBJECT_KEY_ID baselines/BASELINE_NAME.yaml
      +

      Example:

      +
      Terminal window
      ./scripts/generate_guidance.py -p -H ABC123DEF456 baselines/800-53r5_moderate.yaml
      +
      3. +
    3. +

      Find your signed files

      +
      • Directorybuild/ +
        • Directory800-53r5_moderate/ +
          • Directorymobileconfigs/ +
            • Directoryunsigned/ - Unsigned profiles
              • …
            • Directorysigned/ - Signed profiles
              • …
            • Directorypreferences/ - Preference plists
              • …
       +
      4. +
    + +
    +

    Command Reference

    Section titled “Command Reference”
    + + + + + + + + + + + + + + + + + + + + + +
    FlagDescription
    -pGenerate individual profiles (one per payload type)
    -PGenerate a single consolidated profile
    -H HASHSign profiles with your certificate’s Subject Key ID
    +
    +

    Individual vs Consolidated Profiles

    Section titled “Individual vs Consolidated Profiles”
    + + + + + + + + + + + + + + + + + + + + +
    TypeFlagBest For
    Individual-pFlexibility - deploy only the profiles you need
    Consolidated-PSimplicity - one profile with all settings
    +

    Most organizations prefer individual profiles (-p) for easier management and troubleshooting.

    +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/configuration-profiles/what-are-configuration-profiles/index.html b/configuration-profiles/what-are-configuration-profiles/index.html index 0375be89..8b12d97d 100644 --- a/configuration-profiles/what-are-configuration-profiles/index.html +++ b/configuration-profiles/what-are-configuration-profiles/index.html @@ -1,4 +1,4 @@ - What Are Configuration Profiles? | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    What Are Configuration Profiles?

    Apple Configuration Profiles are XML files (.mobileconfig) used to define settings, restrictions, and policies for macOS, iOS, iPadOS, and tvOS devices. They allow administrators to manage and enforce configurations such as Wi-Fi settings, VPN, certificates, security restrictions, and more across Apple devices.

    -

    How Configuration Profiles Work

    Section titled “How Configuration Profiles Work”
    -

    Configuration profiles are created by IT administrators and can be distributed to devices via Mobile Device Management (MDM) solutions, Apple Configurator, email, or direct download. Once installed, the profile automatically applies the specified settings to the device. Profiles can be signed to ensure authenticity and integrity.

    -

    End-User Experience

    Section titled “End-User Experience”
    -

    For end-users, configuration profiles are typically deployed silently and automatically through the organization’s MDM solution. Once the profile is pushed to the device, most restrictions and settings are enforced immediately—users may notice changes right away, or in some cases, a reboot may be required before all settings take full effect.

    -

    Profiles can be viewed or removed in System Settings > Privacy & Security > Profiles (macOS) or Settings > General > VPN & Device Management (iOS/iPadOS).

    - -
    Section titled “Helpful Links”
    +

    What Are Configuration Profiles?

    Configuration profiles are XML files (.mobileconfig) that define settings and restrictions for Apple devices. They allow administrators to enforce security configurations across macOS, iOS, iPadOS, and tvOS devices.

    +

    The mSCP project generates configuration profiles from your baseline, ready to deploy via MDM.

    + +
    +

    How They Work

    Section titled “How They Work”
    + + + + + + + + + + + + + + + + + + + + + +
    StepDescription
    GenerateRun generate_guidance.py -p to create profiles from your baseline
    DeployUpload profiles to your MDM solution
    EnforceSettings are applied automatically to managed devices
    +

    Profiles can also be signed with a certificate (-H flag) to ensure authenticity and prevent tampering.

    +
    +

    What the Project Generates

    Section titled “What the Project Generates”
    + + + + + + + + + + + + + + + + + + + + + + + + + +
    TypeFlagDescription
    Individual profiles-pOne profile per payload type (recommended for flexibility)
    Consolidated profile-PAll settings in a single profile
    Signed profiles-H HASHProfiles signed with your certificate
    +

    Output location: build/BASELINE_NAME/mobileconfigs/

    +
    +

    End-User Experience

    Section titled “End-User Experience”
    +
      +
    • Profiles are deployed silently through MDM
      • +
    • Settings take effect immediately (some may require reboot)
      • +
    • Users can view profiles in System Settings > Privacy & Security > Profiles
      • +
    + +
    +
    Section titled “Helpful Links”
    \ No newline at end of file +
  • Apple Developer: Device Management Profile
    • +
  • Configuration profiles on Mac
    • + +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/ddm-components/ddm-component-layout/index.html b/ddm-components/ddm-component-layout/index.html index b3e5d09d..2c707c6c 100644 --- a/ddm-components/ddm-component-layout/index.html +++ b/ddm-components/ddm-component-layout/index.html @@ -1,4 +1,4 @@ - DDM Component Layout | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    DDM Component Layout

    This page provides a detailed breakdown of a DDM payload for com.apple.configuration.passcode.settings. Each setting is explained to help you understand how to configure passcode requirements effectively.

    -

    Identifier

    Section titled “Identifier”
    -
      -
    • Identifier: A unique string that identifies this configuration profile.
      -Example: "org.mscp.all_rules.config.passcode.settings"
      • -
    -

    Type

    Section titled “Type”
    -
      -
    • Type: Specifies the type of configuration.
      -Example: "com.apple.configuration.passcode.settings"
      • -
    -

    Payload

    Section titled “Payload”
    -
      -
    • Payload: Contains the actual settings for the passcode policy.
      • -
    -

    MaximumFailedAttempts

    Section titled “MaximumFailedAttempts”
    -
      -
    • MaximumFailedAttempts: The number of failed passcode attempts allowed before the device is locked or wiped.
      -Example: 3
      • -
    -

    MaximumGracePeriodInMinutes

    Section titled “MaximumGracePeriodInMinutes”
    -
      -
    • MaximumGracePeriodInMinutes: The maximum time (in minutes) allowed after unlocking before the passcode is required again.
      -Example: 15
      • -
    -

    RequireAlphanumericPasscode

    Section titled “RequireAlphanumericPasscode”
    -
      -
    • RequireAlphanumericPasscode: If true, the passcode must include both letters and numbers.
      -Example: true
      • -
    -

    CustomRegex

    Section titled “CustomRegex”
    -
      -
    • CustomRegex: A custom regular expression that the passcode must match.
      -Example: ^(?=.*[A-Z])(?=.*[a-z])(?=.*[0-9]).*$
      -This requires at least one uppercase letter, one lowercase letter, and one digit.
      • -
    -

    PasscodeReuseLimit

    Section titled “PasscodeReuseLimit”
    -
      -
    • PasscodeReuseLimit: The number of previous passcodes that cannot be reused.
      -Example: 5
      • -
    -

    MaximumPasscodeAgeInDays

    Section titled “MaximumPasscodeAgeInDays”
    -
      -
    • MaximumPasscodeAgeInDays: The maximum number of days a passcode can be used before it must be changed.
      -Example: 60
      • -
    -

    MinimumLength

    Section titled “MinimumLength”
    -
      -
    • MinimumLength: The minimum number of characters required for the passcode.
      -Example: 15
      • -
    -

    RequireComplexPasscode

    Section titled “RequireComplexPasscode”
    -
      -
    • RequireComplexPasscode: If true, the passcode must meet complexity requirements (such as including special characters).
      -Example: true
      • -
    -

    MinimumComplexCharacters

    Section titled “MinimumComplexCharacters”
    -
      -
    • MinimumComplexCharacters: The minimum number of complex (non-alphanumeric) characters required in the passcode.
      -Example: 1
      • -
    +

    DDM Component Layout

    DDM declarations are JSON files that define device configurations. Understanding the structure helps you troubleshoot deployments or customize declarations.

    +
    -

    Complete Example

    Section titled “Complete Example”
    -
    {
        "Identifier": "org.mscp.all_rules.config.passcode.settings",
        "Type": "com.apple.configuration.passcode.settings",
        "Payload": {
            "MaximumFailedAttempts": 3,
            "MaximumGracePeriodInMinutes": 15,
            "RequireAlphanumericPasscode": true,
            "CustomRegex": "^(?=.*[A-Z])(?=.*[a-z])(?=.*[0-9]).*$",
            "PasscodeReuseLimit": 5,
            "MaximumPasscodeAgeInDays": 60,
            "MinimumLength": 15,
            "RequireComplexPasscode": true,
            "MinimumComplexCharacters": 1
        }
    }
    \ No newline at end of file +

    Component Types

    Section titled “Component Types”
    +

    The project generates DDM declarations that work together:

    + + + + + + + + + + + + + + + + + +
    TypePurpose
    ActivationEnables a configuration on the device
    ConfigurationDefines what settings to apply
    +
    +

    Common Structure

    Section titled “Common Structure”
    +

    All DDM declarations share these keys:

    + + + + + + + + + + + + + + + + + + + + + +
    KeyDescription
    IdentifierUnique identifier for this declaration
    TypeThe Apple declaration type
    PayloadThe declaration-specific settings
    +
    +

    Activation Declaration

    Section titled “Activation Declaration”
    +

    Activations enable configurations on the device.

    +
    {
      "Identifier": "org.mscp.baseline_name.activation.service",
      "Type": "com.apple.activation.simple",
      "Payload": {
        "StandardConfigurations": ["org.mscp.baseline_name.config.service"]
      }
    }
    + + + + + + + + + + + + + +
    KeyDescription
    StandardConfigurationsArray of configuration identifiers to activate
    +
    +

    Configuration Declaration

    Section titled “Configuration Declaration”
    +

    Configurations define the settings to apply. For service configurations:

    +
    {
      "Identifier": "org.mscp.baseline_name.config.service",
      "Type": "com.apple.configuration.services.configuration-files",
      "Payload": {
        "ServiceType": "com.apple.service",
        "DataAssetReference": "org.mscp.baseline_name.asset.service"
      }
    }
    + + + + + + + + + + + + + + + + + +
    KeyDescription
    ServiceTypeThe Apple service being configured
    DataAssetReferenceIdentifier of the asset containing the config files
    +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/ddm-components/how-to-generate-ddm-components/index.html b/ddm-components/how-to-generate-ddm-components/index.html index 791e6bf4..39588180 100644 --- a/ddm-components/how-to-generate-ddm-components/index.html +++ b/ddm-components/how-to-generate-ddm-components/index.html @@ -1,4 +1,4 @@ - How To Generate DDM Components | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    How To Generate DDM Components

    The primary script for generating DDM components is located here in the macos_security repository:

    -
    • Directorymacos_security/ -
      • Directoryscripts/ -
        • generate_guidance.py
     - -

    To generate all DDM components, run:

    -
    Terminal window
    ./scripts/generate_guidance.py -D baselines/all_rules.yaml -p -s
    -

    This will create DDM components in the following directories:

    -
    • DirectoryBuild/ -
      • DirectoryBASELINENAME/ -
        • Directoryactivations/ -
          • org.mscp.all_rules.activation.diskmanagement.settings.json
          • org.mscp.all_rules.activation.pam.json
          • org.mscp.all_rules.activation.passcode.settings.json
          • org.mscp.all_rules.activation.sshd.json
          • org.mscp.all_rules.activation.sudo.json
        • Directoryassets/ -
          • com.apple.pam.zip
          • com.apple.sshd.zip
          • com.apple.sudo.zip
          • org.mscp.all_rules.asset.pam.json
          • org.mscp.all_rules.asset.sshd.json
          • org.mscp.all_rules.asset.sudo.json
        • Directoryconfigurations/ -
          • org.mscp.all_rules.config.diskmanagement.settings.json
          • org.mscp.all_rules.config.pam.json
          • org.mscp.all_rules.config.passcode.settings.json
          • org.mscp.all_rules.config.sshd.json
          • org.mscp.all_rules.config.sudo.json
     -

    For more information, see How to Generate Baselines or review the baseline file layout.

    \ No newline at end of file +

    How to Generate DDM Components

    DDM components are generated using the generate_guidance.py script with the -D flag. The script reads your baseline and creates JSON declarations ready for MDM deployment.

    + + +
    +

    Generate DDM Components

    Section titled “Generate DDM Components”
    +
      +
    1. +

      Run the generation script

      +
      Terminal window
      ./scripts/generate_guidance.py -D baselines/BASELINE_NAME.yaml
      +

      Example:

      +
      Terminal window
      ./scripts/generate_guidance.py -D baselines/800-53r5_moderate.yaml
      +
      2. +
    2. +

      Find your files

      +

      DDM declarations are saved to build/BASELINE_NAME/declarative/:

      +
      • Directorybuild/ +
        • Directory800-53r5_moderate/ +
          • Directorydeclarative/ +
            • Directoryactivations/ - Activation declarations (.json)
              • …
            • Directoryconfigurations/ - Configuration declarations (.json)
              • …
            • Directoryassets/ - Asset declarations and data files (.json, .zip)
              • …
       +
      3. +
    +
    +

    Command Reference

    Section titled “Command Reference”
    + + + + + + + + + + + + + +
    FlagDescription
    -DGenerate DDM declarations
    + +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/ddm-components/what-is-ddm/index.html b/ddm-components/what-is-ddm/index.html index aa34e74d..60261490 100644 --- a/ddm-components/what-is-ddm/index.html +++ b/ddm-components/what-is-ddm/index.html @@ -1,4 +1,4 @@ - What is Declarative Device Management (DDM)? | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    What is Declarative Device Management (DDM)?

    Declarative Device Management (DDM) is Apple’s modern framework for managing Apple devices, introduced to provide a more efficient, scalable, and responsive approach to device management compared to traditional MDM (Mobile Device Management). DDM enables devices to take a more active role in their own management by evaluating conditions and applying configurations locally, rather than relying solely on server-driven commands.

    -

    Why Do You Need DDM?

    Section titled “Why Do You Need DDM?”
    +

    What is DDM?

    Declarative Device Management (DDM) is Apple’s modern approach to managing devices. Unlike traditional MDM where the server sends commands, DDM lets devices manage themselves based on declared configurations.

    +

    The mSCP project generates DDM components from your baseline, ready to deploy via your MDM solution.

    + +
    +

    DDM vs Traditional MDM

    Section titled “DDM vs Traditional MDM”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    AspectTraditional MDMDDM
    ControlServer sends commands to deviceDevice applies declared configurations
    ResponsivenessWaits for server check-inApplies changes immediately
    Offline behaviorLimited until reconnectedEnforces policies even offline
    ScalabilityServer handles all logicLogic distributed to devices
    +
    +

    Why DDM Matters

    Section titled “Why DDM Matters”
    + + + + + + + + + + + + + + + + + + + + + + + + + +
    BenefitDescription
    Faster responseDevices apply settings immediately without waiting for server
    Offline enforcementPolicies remain active even without network connectivity
    Reduced server loadDevices handle their own compliance evaluation
    Better securityGranular control with Apple’s latest security standards
    +
    +

    What the Project Generates

    Section titled “What the Project Generates”
    +

    The project creates DDM declarations in three categories:

    + + + + + + + + + + + + + + + + + + + + + +
    ComponentDescription
    ActivationsEnable configurations on the device
    ConfigurationsSettings declarations for various Apple declaration types
    AssetsData files referenced by configurations (e.g., zipped config files)
    +

    Output location: build/BASELINE_NAME/declarative/

    +
    +
    Section titled “Helpful Links”
      -
    • Efficiency: DDM reduces the need for constant communication between the device and the management server. Devices can react to changes and apply configurations immediately, improving responsiveness and reducing network traffic.
      • -
    • Scalability: By shifting logic and evaluation to the device, DDM allows organizations to manage large fleets of Apple devices more effectively.
      • -
    • Reliability: Devices can enforce compliance and configuration even when offline, ensuring that security and policy requirements are always met.
      • -
    • Security: DDM supports more granular and secure management of settings, profiles, and compliance checks, aligning with Apple’s latest security and privacy standards.
      • +
    • Apple Developer: Declarative Device Management
      • +
    • Apple WWDC: Declarative Device Management
    -

    The Old Way: Traditional MDM

    Section titled “The Old Way: Traditional MDM”
    -

    Before DDM, Apple devices were managed using Mobile Device Management (MDM), a server-driven approach where the management server dictated all device configurations, compliance checks, and actions. In this model:

    +
    +

    Next Steps

    Section titled “Next Steps”
      -
    • The server sends commands and configuration profiles to the device.
      • -
    • The device passively waits for instructions and reports back its status.
      • -
    • Any change or compliance check requires a round-trip to the server.
      • -
    • Devices are less responsive to changes when offline or between server check-ins.
      • +
    • How to Generate DDM Components - Create DDM files from your baseline
      • +
    • DDM Component Layout - Understand the file structure
    -

    Limitations of Traditional MDM:

    -
      -
    • Latency: Devices may not react instantly to policy changes or compliance issues, especially if they are offline or have infrequent check-ins.
      • -
    • Scalability: As organizations grow, the server becomes a bottleneck, handling all logic and state for every device.
      • -
    • Reliability: Devices cannot enforce or adapt policies without server communication.
      • -
    • Limited Autonomy: Devices are unable to make decisions or enforce compliance on their own.
      • -
    -

    Why Apple is Shifting to DDM

    Section titled “Why Apple is Shifting to DDM”
    -

    Apple is moving away from traditional MDM because modern device fleets require:

    -
      -
    • Real-time responsiveness: Devices should react to changes and enforce policies immediately, even when offline.
      • -
    • Distributed logic: Offloading evaluation and compliance to the device itself reduces server load and increases scalability.
      • -
    • Better user experience: Devices can provide instant feedback and adapt to user or environment changes without waiting for server instructions.
      • -
    • Enhanced security and privacy: DDM enables more granular, secure, and privacy-respecting management.
      • -
    -
    \ No newline at end of file +
    \ No newline at end of file diff --git a/guidance/guidance-file-example/index.html b/guidance/guidance-file-example/index.html index 0537d011..9455b2f8 100644 --- a/guidance/guidance-file-example/index.html +++ b/guidance/guidance-file-example/index.html @@ -1,4 +1,4 @@ - Guidance File Layout | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Guidance File Layout

    Below is a full example PDF of a generated STIG baseline guidance document.

    -
    -

    Note: This example is for the Sequoia branch and the DISA STIGS baseline.

     - -
    \ No newline at end of file +

    Guidance File Example

    This is an example of a generated guidance document. The PDF below was created from the DISA STIG baseline on the Sequoia branch.

    + +
    +

    Document Structure

    Section titled “Document Structure”
    +

    As you scroll through the example, you’ll see:

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    SectionDescription
    Title pageBaseline name, macOS version, and date
    ForewordIntroduction and purpose of the document
    Revision historyDocument version changes
    ScopeWhat systems and configurations are covered
    AuthorsContributors and their organizations
    AcronymsTerminology used in the document
    Rules by sectionSecurity controls grouped by category
    +

    Each rule includes:

    +
      +
    • Discussion (why it matters)
      • +
    • Check (how to verify)
      • +
    • Fix (how to implement)
      • +
    • Result (expected value)
      • +
    • References (NIST, CIS, STIG mappings)
      • +
    +
    +

    Example PDF

    Section titled “Example PDF”
    + +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/guidance/how-to-generate-guidance/index.html b/guidance/how-to-generate-guidance/index.html index 490239d9..6a9df112 100644 --- a/guidance/how-to-generate-guidance/index.html +++ b/guidance/how-to-generate-guidance/index.html @@ -1,4 +1,4 @@ - How To Generate Guidance | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    How To Generate Guidance

    To generate guidance files (AsciiDoc, HTML, and PDF) from an existing baseline, use the generate_guidance.py script in the macos_security repository.

    - -
    • Directorymacos_security/ -
      • Directoryscripts/ -
        • generate_guidance.py ---> Script to generate guidance files
      • Directorybuild/ -
        • Directorybaselines/ -
          • BASELINENAME.yaml ---> Your generated or customized baseline file
     - +

    How to Generate Guidance

    The generate_guidance.py script creates outputs from your baseline. By default it generates documentation (AsciiDoc, HTML, PDF). With additional flags, you can also generate compliance scripts, configuration profiles, and more.

    + + +
    +

    Generate Guidance

    Section titled “Generate Guidance”
    1. -

      Ensure You Are Using the Correct Baseline File

      -
        -
      • Use either a baseline you generated (custom baseline) or one of the built-in baselines provided by the project.
        • -
      +

      Run the script with your baseline

      +
      Terminal window
      ./scripts/generate_guidance.py baselines/BASELINE_NAME.yaml
      +

      Example:

      +
      Terminal window
      ./scripts/generate_guidance.py baselines/800-53r5_moderate.yaml
    2. -

      Run the Guidance Generation Script

      -
        -
      • -

        Point the script to your baseline YAML file:

        -
        Terminal window
        ./scripts/generate_guidance.py build/baselines/BASELINENAME.yaml
        -

        Replace BASELINENAME.yaml with your actual baseline file.

        +

        Add flags for additional outputs

        +
        Terminal window
        ./scripts/generate_guidance.py -s -p baselines/800-53r5_moderate.yaml
        +

        This generates guidance docs plus compliance script (-s) and configuration profiles (-p).

      • -

        The script will generate AsciiDoc, HTML, and PDF guidance documents.

        -
        • -
      -
      3. -
    3. -

      Locate the Generated Guidance Files

      -
        -
      • -

        The output files will be created in a directory under build/ matching your baseline name, for example:

        -
        • Directorymacos_security/ -
          • Directorybuild/ +

            Find your files

            +

            All outputs are saved to build/BASELINE_NAME/:

            +
            • Directorybuild/
              • Directory800-53r5_moderate/ -
                • 800-53r5_moderate.adoc
                • 800-53r5_moderate.html
                • 800-53r5_moderate.pdf
          -
          • -
        +
        • 800-53r5_moderate.adoc - AsciiDoc source
        • 800-53r5_moderate.html - Web documentation
        • 800-53r5_moderate.pdf - Printable documentation
        • 800-53r5_moderate_compliance.sh - Compliance script (if -s)
        • 800-53r5_moderate.xls - Excel spreadsheet (if -x)
        • Directorymobileconfigs/ - Configuration profiles (if -p) +
          • Directoryunsigned/ - Unsigned profiles
            • …
          • Directorysigned/ - Signed profiles (if -H)
            • …
          • Directorypreferences/ - Preference plists
            • …
        • Directorydeclarative/ - DDM components (if -D) +
          • Directoryactivations/
            • …
          • Directoryconfigurations/
            • …
          • Directoryassets/
            • …
        • Directorypreferences/ - Audit preference files
          • …
    -

    Built-in Baseline vs Custom Baseline

    Section titled “Built-in Baseline vs Custom Baseline”
    -

    When generating guidance, you can use either a built-in baseline or a custom baseline:

    +
    +

    Command Reference

    Section titled “Command Reference”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FlagOutput
    (none)Guidance documents (.adoc, .html, .pdf)
    -sCompliance script
    -pConfiguration profiles (one per payload)
    -PSingle consolidated configuration profile
    -DDeclarative Device Management (DDM) components
    -xExcel spreadsheet
    +

    Additional options:

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FlagDescription
    -hShow help message
    -l LOGOInclude custom logo in documentation
    -H HASHSign configuration profiles with certificate
    -a NAMECustom name for audit plist and log
    -r REFUse reference ID instead of rule ID
    +
    +

    Common Examples

    Section titled “Common Examples”
    +

    Generate documentation only:

    +
    Terminal window
    ./scripts/generate_guidance.py baselines/800-53r5_moderate.yaml
    +

    Generate everything for MDM deployment:

    +
    Terminal window
    ./scripts/generate_guidance.py -s -p -D baselines/DISA-STIG.yaml
    +

    Generate with signed profiles:

    +
    Terminal window
    ./scripts/generate_guidance.py -p -H YOUR_CERT_HASH baselines/cis_lvl2.yaml
    +

    Generate documentation with custom logo:

    +
    Terminal window
    ./scripts/generate_guidance.py -l /path/to/logo.png baselines/800-53r5_moderate.yaml
    +
    +

    Built-in vs Custom Baselines

    Section titled “Built-in vs Custom Baselines”
    +

    You can use either type of baseline:

    + + + + + + + + + + + + + + + + + + + + +
    TypeLocationUse Case
    Built-inbaselines/Standard frameworks without customization
    Custombuild/baselines/Tailored baselines for your organization
    +

    Both produce the same outputs. Custom baselines reflect your organization’s specific settings and excluded rules.

    +
    +

    Next Steps

    Section titled “Next Steps”
      -
    • -

      Built-in Baseline:
      -These are standard baseline YAML files provided by the project and located in the baselines/ directory. They represent default security configurations such as NIST 800-53, CIS, or STIG profiles.

      -
      • Directorymacos_security/ -
        • Directorybaselines/ -
          • 800-53r5_moderate.yaml
       -

      Example usage:

      -
      Terminal window
      ./scripts/generate_guidance.py baselines/800-53r5_moderate.yaml
      -

      The output files will be generated in a directory under build/ matching the baseline name.

      -
      • -
    • -

      Custom Baseline:
      -These are baselines you have tailored for your organization, typically created using the baseline generation and tailoring scripts. Custom baseline files are usually found in build/baselines/.

      -
      • Directorymacos_security/ -
        • Directorybuild/ -
          • Directorybaselines/ -
            • 800-53r5_moderate.yaml
       -

      Example usage:

      -
      Terminal window
      ./scripts/generate_guidance.py build/baselines/800-53r5_moderate.yaml
      -

      The output files will be generated in a directory under build/ matching your custom baseline.

      -
      • +
    • How to Generate Configuration Profiles - Details on the -p flag
      • +
    • How to Generate Compliance Scripts - Details on the -s flag
      • +
    • Guidance File Example - See a sample PDF output
    -

    Both approaches produce guidance files in AsciiDoc, HTML, and PDF formats, but custom baselines allow you to reflect organization-specific requirements and tailoring.

    -

    Example output files:

    -
    • Directorymacos_security/ -
      • Directorybuild/ -
        • Directory800-53r5_moderate/ -
          • 800-53r5_moderate.adoc
          • 800-53r5_moderate.html
          • 800-53r5_moderate.pdf
    \ No newline at end of file +
    \ No newline at end of file diff --git a/guidance/what-is-guidance/index.html b/guidance/what-is-guidance/index.html index e6e70bf9..9654b146 100644 --- a/guidance/what-is-guidance/index.html +++ b/guidance/what-is-guidance/index.html @@ -1,4 +1,4 @@ - What is Guidance? | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    What is Guidance?

    Guidance provides clear documentation for security controls, describing what each control is, its purpose, and how it protects your systems.

    +

    What is Guidance?

    Guidance is the human-readable documentation generated from your baseline. It explains each security control: what it does, why it matters, how to implement it, and how to verify compliance.

    +

    Once you have a baseline, run the generate_guidance.py script to create documentation in multiple formats.

    + +
    +

    Output Formats

    Section titled “Output Formats”
    + + + + + + + + + + + + + + + + + + + + + +
    FormatDescription
    AsciiDoc (.adoc)Source format for the documentation
    HTML (.html)Web-viewable documentation
    PDF (.pdf)Printable format for auditors and compliance teams
    +
    +

    What’s Included

    Section titled “What’s Included”
    +

    Each guidance document contains:

    +

    Document sections:

      -
    • Explanations of security controls: Clarifies the intent and importance of each control, and how it contributes to securing macOS systems.
      • -
    • Implementation steps: Offers detailed instructions for configuring macOS settings to meet baseline requirements.
      • -
    • Assessment procedures: Outlines methods to verify that systems are properly configured and compliant with security objectives.
      • -
    • References and rationale: Includes links to relevant NIST standards, Apple documentation, and other authoritative sources to support each control.
      • +
    • Foreword and scope
      • +
    • Authors and contributors
      • +
    • Acronyms and terminology
    -

    You can generate guidance files based on the created baseline in formats such as AsciiDoc, HTML, and PDF. These documents are often required by organizations for submission, enabling administrators to efficiently document and justify how the baseline is enforced and the reasoning behind each control.

    \ No newline at end of file +

    For each security rule:

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    SectionDescription
    DiscussionWhat the control does and why it’s important
    CheckHow to verify the setting is correctly applied
    FixHow to configure macOS to meet the requirement
    ResultExpected values when compliant
    ReferencesLinks to NIST 800-53, CIS, DISA STIG, and Apple documentation
    SeverityImpact level of the control
    +
    +

    Example Use Cases

    Section titled “Example Use Cases”
    +
      +
    • Compliance audits - Provide documentation showing how your systems meet framework requirements
      • +
    • Security reviews - Share implementation details with security teams
      • +
    • Change management - Document what settings are being applied and why
      • +
    • Training - Help administrators understand the security controls
      • +
    +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/index.html b/index.html index 40aa09d2..5d759385 100644 --- a/index.html +++ b/index.html @@ -1,4 +1,4 @@ - macOS Security Compliance Project | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    macOS Security Compliance Project

    Comprehensive, open source macOS security guidance—built by federal experts, based on NIST SP 800-53 and 800-219, and recognized by Apple.
    Introduction Getting Started

    Latest Release:

    Section titled “Latest Release:”
    +

    macOS Security Compliance Project

    Comprehensive, open source macOS security guidance—built by federal experts, based on NIST SP 800-53 and 800-219, and recognized by Apple.
    Introduction Getting Started

    Latest Release

    Section titled “Latest Release”
    +

    mSCP Branches

    Section titled “mSCP Branches”
    +
    Loading branch information…
    +
    Section titled “Quick Links”
    -
    -
    \ No newline at end of file +
    +
    \ No newline at end of file diff --git a/more-information/additional-documents/index.html b/more-information/additional-documents/index.html index d839035b..bbf87cd9 100644 --- a/more-information/additional-documents/index.html +++ b/more-information/additional-documents/index.html @@ -1,4 +1,4 @@ - Additional Documents | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Additional Documents

    Government Documents

    Section titled “Government Documents”
    -

    These documents are published by official government agencies and provide standards, guidelines, and requirements for cybersecurity and information assurance. They are widely referenced for compliance and best practices.

    -

    National Institute of Standards and Technology (NIST)

    Section titled “National Institute of Standards and Technology (NIST)”
    +

    Additional Documents

    Reference documents from government agencies and industry organizations that inform the macOS Security Compliance Project.

    +
    +

    Government Documents

    Section titled “Government Documents”
    +

    These documents are published by official government agencies and provide standards, guidelines, and requirements for cybersecurity and information assurance.

    +

    National Institute of Standards and Technology (NIST)

    Section titled “National Institute of Standards and Technology (NIST)”
    @@ -106,8 +109,11 @@ -
    Document Number or DescriptorDocument Title
    NIST Special Publication 800-53 Rev 5NIST Special Publication 800-53 Rev 5.1.1
    NIST Special Publication 800-63NIST Special Publication 800-63
    NIST Special Publication 800-171NIST Special Publication 800-171 Rev 3
    NIST Special Publication 800-219NIST Special Publication 800-219 Rev 1
    -
    + + + + +
    DocumentTitle
    NIST SP 800-53 Rev 5Security and Privacy Controls for Information Systems and Organizations
    NCP Tahoe ChecklistmSCP Guidance for macOS 26 (Tahoe)
    NIST SP 800-63Digital Identity Guidelines
    NIST SP 800-171 Rev 3Protecting Controlled Unclassified Information in Nonfederal Systems
    NIST SP 800-219 Rev 1macOS Security Compliance Project (mSCP)

    Defense Information Systems Agency (DISA)

    Section titled “Defense Information Systems Agency (DISA)”
    @@ -122,8 +128,19 @@ -
    Document Number or DescriptorDocument Title
    STIG Ver 1, Rel 3Apple macOS 15 (Sequoia) STIG
    -
    + + + + + + + + + + + + +
    DocumentTitle
    macOS 26 STIGApple macOS 26 (Tahoe) STIG
    macOS 15 STIGApple macOS 15 (Sequoia) STIG
    macOS 14 STIGApple macOS 14 (Sonoma) STIG
    macOS 13 STIGApple macOS 13 (Ventura) STIG

    Cybersecurity Maturity Model Certification (CMMC)

    Section titled “Cybersecurity Maturity Model Certification (CMMC)”
    @@ -138,8 +155,7 @@ -
    Document Number or DescriptorDocument Title
    CMMC Model Overview v2.0Cybersecurity Maturity Model Certification (CMMC) Model Overview v2.0
    -
    +
    DocumentTitle
    CMMC Model Overview v2.0Cybersecurity Maturity Model Certification Model Overview

    Committee on National Security Systems (CNSS)

    Section titled “Committee on National Security Systems (CNSS)”
    @@ -154,8 +170,7 @@ -
    Document Number or DescriptorDocument Title
    CNSSI No. 1253Security Categorization and Control Selection for National Security Systems
    -
    +
    DocumentTitle
    CNSSI No. 1253Security Categorization and Control Selection for National Security Systems

    Germany (BSI)

    Section titled “Germany (BSI)”
    @@ -170,10 +185,10 @@ -
    Document Number or DescriptorDocument Title
    BSI List of Approved Products (Indigo)BSI List of Approved Products (Indigo)
    -
    +
    DocumentTitle
    BSI Approved Products (Indigo)BSI List of Approved Products
    +

    Non-Government Documents

    Section titled “Non-Government Documents”
    -

    These documents are produced by private organizations and industry groups. They offer additional guidance, platform-specific information, and security benchmarks that complement government standards.

    +

    These documents are produced by private organizations and industry groups, offering platform-specific guidance and security benchmarks.

    Apple

    Section titled “Apple”
    @@ -200,9 +215,8 @@ -
    Document Number or DescriptorDocument Title
    Apple Platform Security GuideApple Platform Security
    Apple Platform DeploymentApple Platform Deployment
    Apple Platform CertificationsApple Platform Certifications
    Profile-Specific Payload KeysProfile-Specific Payload Keys
    -
    -

    Center for Internet Security

    Section titled “Center for Internet Security”
    +
    DocumentTitle
    Apple Platform SecurityApple Platform Security Guide
    Apple Platform DeploymentApple Platform Deployment Guide
    Apple Platform CertificationsApple Platform Certifications
    Profile-Specific Payload KeysMDM Profile Payload Reference
    +

    Center for Internet Security (CIS)

    Section titled “Center for Internet Security (CIS)”
    @@ -216,4 +230,31 @@ -
    Document Number or DescriptorDocument Title
    Apple macOS 15.0CIS Apple macOS 15.0 Benchmark version 1.1.0
    \ No newline at end of file + + + + +
    DocumentTitle
    CIS macOS 26 BenchmarkCIS Apple macOS 26 (Tahoe) Benchmark v1.0.0
    CIS macOS 15 BenchmarkCIS Apple macOS 15 (Sequoia) Benchmark
    +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/more-information/contributing/index.html b/more-information/contributing/index.html index 4e9996b3..03e06155 100644 --- a/more-information/contributing/index.html +++ b/more-information/contributing/index.html @@ -1,4 +1,4 @@ - How to Contribute to the macOS Security Compliance Project | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    How to Contribute to the macOS Security Compliance Project

    We encourage contributions and feedback from the community! This project was created by Mac Admins, for Mac Admins—your input, questions, and improvements help make it better for everyone. If you see something that can be improved, have an idea, or spot an issue, please speak up and get involved.

    +

    How to Contribute

    We encourage contributions and feedback from the community! This project was created by Mac Admins, for Mac Admins—your input, questions, and improvements help make it better for everyone. If you see something that can be improved, have an idea, or spot an issue, please speak up and get involved.

    Operating Rules

    Section titled “Operating Rules”

    These operating rules describe and govern NIST’s management of this repository and contributors’ responsibilities. NIST reserves the right to modify this policy at any time.

    +

    Criteria for Contributions and Feedback

    Section titled “Criteria for Contributions and Feedback”

    This is a moderated platform. NIST will only accept contributions that comply with the terms of the license file. Contributors may submit links or materials for hosting in the repository. Upon submission, materials will be public and considered publicly available information, unless noted in the license file.

    NIST reserves the right to reject, remove, or edit any contribution or feedback, including anything that:

      -
    • states or implies NIST endorsement of any entities, services, or products;
      • -
    • is inaccurate;
      • -
    • contains abusive or vulgar content, spam, hate speech, personal attacks, or similar content;
      • -
    • is clearly “off topic”;
      • -
    • makes unsupported accusations;
      • -
    • includes personally identifiable or business identifiable information according to Department of Commerce Office of Privacy and Open Government guidelines; or,
      • -
    • contains .exe or .jar file types.
      • +
    • States or implies NIST endorsement of any entities, services, or products
      • +
    • Is inaccurate
      • +
    • Contains abusive or vulgar content, spam, hate speech, personal attacks, or similar content
      • +
    • Is clearly “off topic”
      • +
    • Makes unsupported accusations
      • +
    • Includes personally identifiable or business identifiable information according to Department of Commerce Office of Privacy and Open Government guidelines
      • +
    • Contains .exe or .jar file types
    -

    These file types will not be hosted in the NIST repository; instead, NIST may link to these if hosted elsewhere.

    + +

    Contributor Responsibilities

    Section titled “Contributor Responsibilities”

    NIST also reserves the right to reject or remove contributions from the repository if the contributor fails to carry out any of the following responsibilities:

      -
    • following the contribution instructions;
      • -
    • responding to feedback from other repository users in a timely manner;
      • -
    • responding to NIST representatives in a timely manner;
      • -
    • keeping contributions and contributor GitHub username up to date
      • +
    • Following the contribution instructions
      • +
    • Responding to feedback from other repository users in a timely manner
      • +
    • Responding to NIST representatives in a timely manner
      • +
    • Keeping contributions and contributor GitHub username up to date
    +

    Contributing

    Section titled “Contributing”

    All requests for changes and enhancements are initiated through the project’s GitHub issue tracker. To initiate a request, please create a new issue. The following issue templates exist for creating a new issue:

    -

    Feature Request: Use to describe a new feature or capability to be added to the macOS security compliance project.

    -

    Bug Report: Use to report a problem with an existing the macOS security compliance project feature or capability.

    -

    Question: Use to ask a question about the macOS security compliance project.

    + + + + + + + + + + + + + + + + + + + + + +
    Issue TypeUse For
    Feature RequestDescribe a new feature or capability to be added to the project
    Bug ReportReport a problem with an existing feature or capability
    QuestionAsk a question about the project

    The core project team regularly reviews the open issues, prioritizes their handling, and updates the issue statuses and comments as needed.

    +

    Feature Request or Bug Report Process

    Section titled “Feature Request or Bug Report Process”

    A good feature request or bug report will help our team assess the issue submitted.

    Great Bug Reports or Feature Requests tend to have:

    @@ -117,26 +141,69 @@
  • Steps to reproduce
    • Be specific!
      • -
    • Provide sample code if you can.
      • -
    • Include all relevant setup.
      • +
    • Provide sample code if you can
      • +
    • Include all relevant setup
  • What you expected would happen
  • What actually happens (if it’s a bug report)
  • Any additional notes
    • -

    Issues submitted that are single words or irrelevant to the development of the project

    +

    Contributing Code

    Section titled “Contributing Code”
    -

    The macOS Security Compliance Project uses a typical GitHub fork and pull request workflow. Learn more about cloning a GitHub repository. -Learn more about GitHub pull requests. To establish a development environment for contributing to the project, you must do the following:

    -
      -
    1. Before you start working on a fix it’s a good practice to leave a comment in the issue that you work on the fix so other contributors know that the fix is in progress.
      2. -
    2. Fork the macOS Security Compliance Project repository to your personal workspace. Please refer to the Github guide on forking a repository for more details.
      3. -
    3. Create a feature branch from the master branch for making changes. You can create a branch in your personal repository directly on GitHub or create the branch using a Git client. For example, the git branch working command can be used to create a branch named working.
      4. -
    4. You will need to make your modifications by adding, removing, and changing the content in the branch, then staging your changes using the git add and git rm commands.
      5. -
    5. Once you have staged your changes, you will need to commit them. When committing, you will need to include a commit message. The commit message should describe the nature of your changes (e.g., added new feature X which supports Y). You can also reference an issue from the repository by using the hash symbol. For example, to reference issue #34, you would include the text “#34”. The full command would be: git commit -m “added new feature X which supports Y addressing issue #34”.
      6. -
    6. Next, you must push your changes to your personal repo. You can do this with the command: git push.
      7. -
    7. Finally, you can create a pull request. Make sure to link the pull request to an issue using a keyword
      8. +

      The macOS Security Compliance Project uses a typical GitHub fork and pull request workflow. To establish a development environment for contributing to the project, you must do the following:

      +
        +
      1. +

        Comment on the issue

        +

        Before you start working on a fix, leave a comment in the issue that you’re working on the fix so other contributors know it’s in progress.

        +
        2. +
      2. +

        Fork the repository

        +

        Fork the macOS Security Compliance Project repository to your personal workspace. See the GitHub guide on forking a repository for details.

        +
        3. +
      3. +

        Create a feature branch

        +

        Create a feature branch from the appropriate macOS version branch for making changes. You can create a branch in your personal repository directly on GitHub or using a Git client.

        +
        4. +
      4. +

        Make your modifications

        +

        Add, remove, and change content in the branch, then stage your changes using git add and git rm commands.

        +
        5. +
      5. +

        Commit your changes

        +

        Include a commit message describing the nature of your changes. You can reference an issue using the hash symbol (e.g., #34).

        +
        Terminal window
        git commit -m "Added new feature X which supports Y addressing issue #34"
        +
        6. +
      6. +

        Push to your fork

        +
        Terminal window
        git push
        +
        7. +
      7. +

        Create a pull request

        +

        Make sure to link the pull request to an issue using a keyword.

        +
      + +

      Contributor License Agreement

      Section titled “Contributor License Agreement”
      -

      By contributing, you agree that your contributions will be licensed under Creative Commons Attribution 4.0 International Public License (CC By 4.0).

    \ No newline at end of file +

    By contributing, you agree that your contributions will be licensed under the Creative Commons Attribution 4.0 International Public License (CC BY 4.0).

    +
    +

    Next Steps

    Section titled “Next Steps”
    +
      +
    • FAQ - Frequently asked questions
      • +
    • Resources - Additional resources and links
      • +
    +
    \ No newline at end of file diff --git a/more-information/faq/index.html b/more-information/faq/index.html index 273eef58..cfbea19f 100644 --- a/more-information/faq/index.html +++ b/more-information/faq/index.html @@ -1,4 +1,4 @@ - FAQ | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    FAQ

    Why create this project?

    Section titled “Why create this project?”
    +

    FAQ

    Why create this project?

    Section titled “Why create this project?”

    Every year, Apple releases a new version of macOS. Traditionally, security professionals and administrators spend months waiting for the release of an official security baseline. By creating an open source, community-driven method for generating baselines for new macOS versions, we can dramatically reduce the time to release and improve security for everyone.

    How can I contribute, ask questions, or report bugs?

    Section titled “How can I contribute, ask questions, or report bugs?”
    @@ -103,7 +104,7 @@

    Where can I find more help or documentation?

    Section titled “Where can I find more help or documentation?”
    @@ -111,9 +112,14 @@

    How do I stay up to date with project changes?

    Section titled “How do I stay up to date with project changes?”
    -
    \ No newline at end of file + +
    +

    Next Steps

    Section titled “Next Steps”
    +
    \ No newline at end of file diff --git a/more-information/resources/index.html b/more-information/resources/index.html index b48e51ba..d4e0913e 100644 --- a/more-information/resources/index.html +++ b/more-information/resources/index.html @@ -1,4 +1,4 @@ - mSCP Training & Resources | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    mSCP Training & Resources

    Explore these curated resources to help you learn, implement, and get the most out of the macOS Security Compliance Project (mSCP).

    +

    Training & Resources

    Explore these curated resources to help you learn, implement, and get the most out of the macOS Security Compliance Project (mSCP).

    +
    +

    Apple Training

    Section titled “Apple Training”
    + +
    +

    Apple Documentation

    Section titled “Apple Documentation”
    +

    mSCP Presentations

    Section titled “mSCP Presentations”
    -

    Apple Training

    Section titled “Apple Training”
    +

    Additional Tools

    Section titled “Additional Tools”
    -

    Additional Tools & Tutorials

    Section titled “Additional Tools & Tutorials”
    +

    Tutorials

    Section titled “Tutorials”
    -
    \ No newline at end of file + +
    +

    Next Steps

    Section titled “Next Steps”
    +
      +
    • FAQ - Frequently asked questions
      • +
    • Contributing - How to contribute to the project
      • +
    \ No newline at end of file diff --git a/more-information/vendor-attribution/index.html b/more-information/vendor-attribution/index.html index b3a2dffa..fc900ac8 100644 --- a/more-information/vendor-attribution/index.html +++ b/more-information/vendor-attribution/index.html @@ -1,4 +1,4 @@ - Vendor-Attribution | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Vendor-Attribution

    The following vendors have contributed to or implemented various portions of the macOS Security Compliance Project in their products.

    -

    Product and/or vendor acknowledgement does not constitute recommendation or endorsement by the National Institute of Standards and Technology.

    +

    Vendor Attribution

    The following vendors have contributed to or implemented various portions of the macOS Security Compliance Project in their products.

    + +
    +

    Vendor Overview

    Section titled “Vendor Overview”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    VendorProductContribution
    AppleProfessional ServicesExpert guidance and deployment planning
    CISmacOS BenchmarkSecure configuration expertise
    JamfCompliance Editor (JCE)Automated compliance monitoring
    MosyleMosyle BusinessStandards-based security controls
    TenableAudit PluginsYAML to .audit format conversion
    NIWC AtlanticSCAP Compliance CheckerSCAP content development
    QmulosQ-ComplianceReal-time compliance assessment
    AddigyCompliance ModuleCIS and NIST benchmark enforcement

    Apple – Apple Professional Services

    Section titled “Apple – Apple Professional Services”

    Apple Professional Services is a team within Apple that provides organizations with expert guidance, deployment planning, and technical implementation services for Apple products and solutions. They help customers design, deploy, and optimize Apple technology in enterprise and education environments, including security and compliance initiatives.

    -

    Apple Professional Services

    +

    Link: Apple Professional Services

    Center for Internet Security – CIS macOS Benchmark

    Section titled “Center for Internet Security – CIS macOS Benchmark”
    -

    “By contributing our secure configuration expertise to the NIST macOS Security Compliance Project, we are supporting our mission in making the connected world a safer place by promoting timely, consistent macOS configuration security best practices which will help people, businesses, and governments better protect themselves against pervasive cyber threats.”
    -— Center for Internet Security (CIS)

    +

    “By contributing our secure configuration expertise to the NIST macOS Security Compliance Project, we are supporting our mission in making the connected world a safer place by promoting timely, consistent macOS configuration security best practices which will help people, businesses, and governments better protect themselves against pervasive cyber threats.”

    +

    — Center for Internet Security (CIS)

    -

    https://www.cisecurity.org/benchmark/apple_os

    +

    Link: CIS Apple macOS Benchmarks

    Jamf – Jamf Compliance Editor

    Section titled “Jamf – Jamf Compliance Editor”
    -

    “By implementing automated monitoring and enforcement of the compliance standards published by the NIST Special Publication 800-219 (macOS Security Compliance Project), Jamf easily helps organizations maintain OS compliance of the latest macOS releases according to industry recognized hardening benchmarks.”
    -— Jamf

    +

    “By implementing automated monitoring and enforcement of the compliance standards published by the NIST Special Publication 800-219 (macOS Security Compliance Project), Jamf easily helps organizations maintain OS compliance of the latest macOS releases according to industry recognized hardening benchmarks.”

    +

    — Jamf

    -

    https://trusted.jamf.com/docs/establishing-compliance-baselines

    +

    Link: Jamf Compliance Editor Documentation

    Mosyle – Mosyle Business

    Section titled “Mosyle – Mosyle Business”
    -

    “macOS hardening & compliance is a foundational requirement for all organizations using Apple as they work to minimize risk. It would take countless labor hours if each company had to dissect the operating system and applications within their environment to achieve this goal. The excellent work by NIST macOS Security compliance project and other trusted standards provide frameworks and methodologies to alleviate the burden of individually identifying each setting and feature’s “safe” configuration. As macOS increases in capabilities with each version, so does the library of controls these frameworks address. These public projects continue to grow in scale and value through the collaborative effort put forth by their authors. We rely on these resources to provide our customers with easy to implement, standards-based security controls for each entity’s hardening and compliance needs.”
    -— Mosyle

    +

    “macOS hardening & compliance is a foundational requirement for all organizations using Apple as they work to minimize risk. It would take countless labor hours if each company had to dissect the operating system and applications within their environment to achieve this goal. The excellent work by NIST macOS Security compliance project and other trusted standards provide frameworks and methodologies to alleviate the burden of individually identifying each setting and feature’s “safe” configuration. As macOS increases in capabilities with each version, so does the library of controls these frameworks address. These public projects continue to grow in scale and value through the collaborative effort put forth by their authors. We rely on these resources to provide our customers with easy to implement, standards-based security controls for each entity’s hardening and compliance needs.”

    +

    — Mosyle

    -

    https://business.mosyle.com/solutions/macos/hardening

    +

    Link: Mosyle Hardening Solutions

    Tenable

    Section titled “Tenable”
    -

    “Tenable, Inc. automated the conversion of https://github.com/usnistgov/macos_security YAML rules into the .audit format using Python and YAML libraries. Programmatically approaching this conversion allows for faster future releases, consistency, and maintaining the integrity of the source content. Because the YAML content is all command driven, this is converted to Tenable’s CMD_EXEC check type for use with the Unix plugin. The YAML rules have a “tags” section that was used to create unique audit profiles related to common frameworks.”
    -— Tenable

    +

    “Tenable, Inc. automated the conversion of https://github.com/usnistgov/macos_security YAML rules into the .audit format using Python and YAML libraries. Programmatically approaching this conversion allows for faster future releases, consistency, and maintaining the integrity of the source content. Because the YAML content is all command driven, this is converted to Tenable’s CMD_EXEC check type for use with the Unix plugin. The YAML rules have a “tags” section that was used to create unique audit profiles related to common frameworks.”

    +

    — Tenable

    -

    https://www.tenable.com

    +

    Link: Tenable

    Naval Information Warfare Center (NIWC) Atlantic – SCAP Compliance Checker (SCC)

    Section titled “Naval Information Warfare Center (NIWC) Atlantic – SCAP Compliance Checker (SCC)”

    “The SCC development team at NIWC Atlantic assisted in developing and troubleshooting SCAP content for the macOS Security Compliance Project. NIWC Atlantic tests the content using SCC, and bundles the content released by the macOS Security Compliance Project with SCC to promote security automation on MacOS.”

    +

    — NIWC Atlantic

    -

    https://www.niwcatlantic.navy.mil/scap/

    +

    Link: NIWC Atlantic SCAP

    Qmulos

    Section titled “Qmulos”

    “Qmulos Apple Compliance leverages the NIST macOS Security Compliance Project to bring secure configuration assessment data to our flagship product Q-Compliance, which is built on top of the leading big data platform, Splunk. Qmulos products provide the ability to continuously assess in near real-time and report against multiple frameworks like NIST 800-53, CMMC, CIS and many more. We are the only platform enabling Converged Continuous Compliance® enterprise wide.”

    +

    — Qmulos

    -

    https://www.qmulos.com/qmulos-apple-compliance-enterprise-compliance-scanning-for-macos/

    +

    Link: Qmulos Apple Compliance

    Addigy

    Section titled “Addigy”

    “Using the macOS Security Compliance Project, Addigy facilitates a seamless approach to implementing, monitoring, and enforcing the most recent CIS and NIST benchmarks. We ardently advocate for the notion that simplifying the journey toward device compliance is crucial in bolstering global security and mitigating cyber threats.”

    +

    — Addigy

    -

    https://support.addigy.com/hc/en-us/articles/11443879062931

    \ No newline at end of file +

    Link: Addigy Compliance Documentation

    +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/mscp-2/overview/index.html b/mscp-2/overview/index.html new file mode 100644 index 00000000..de47ccac --- /dev/null +++ b/mscp-2/overview/index.html @@ -0,0 +1,282 @@ + mSCP 2.0 Beta | mSCP + Skip to content
    mSCP

    mSCP 2.0 Beta

    BETA

    mSCP 2.0 is in active development
    +Available on the dev_2.0 branch. Not for production use.
    +All information is subject to change.

    +

    mSCP 2.0 is a major architectural evolution — a unified codebase that eliminates the need for separate branches per macOS version.

    +
    +

    What’s New

    Section titled “What’s New”
    +
    📦
    Unified RepositoryOne branch for all macOS versions — no more per-version branches.
    📋
    Multi-Version RulesEach rule contains configs for macOS 14, 15, 26+ in one file.
    🗂️
    Organized ReferencesReferences grouped by source: nist, disa, cis.
    ⚡
    Simplified SetupJust pip3 install -r requirements.txt to get started.
    +
    +

    At a Glance

    Section titled “At a Glance”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    mSCP 1.0mSCP 2.0
    RepositoryBranch per macOS versionSingle unified branch
    RulesOne version per fileAll versions in one file
    ReferencesFlat (800-53r5, disa_stig)Nested (nist.800-53r5, disa.disa_stig)
    MaintenanceUpdate each branchSingle source of truth
    +
    +

    Rule Comparison

    Section titled “Rule Comparison”
    +

    The biggest change is how rules handle multiple macOS versions:

    +

    mSCP 1.0 — Separate file per version in each branch:

    macOS: ['15.0']
    references:
      cce: [CCE-94195-5]
      disa_stig: [APPL-15-002064]

    mSCP 2.0 — All versions in one file:

    references:
      nist:
        cce:
          macos_26: [CCE-95195-4]
          macos_15: [CCE-94195-5]
          macos_14: [CCE-92795-4]
      disa:
        disa_stig:
          macos_26: [APPL-26-002064]
          macos_15: [APPL-15-002064]
          macos_14: [APPL-14-002064]
    
+
    platforms:
      macOS:
        '26.0':
          benchmarks:
            - name: disa_stig
              severity: high
        '15.0':
          benchmarks:
            - name: disa_stig
              severity: high
    + +
    +

    Directory Structure

    Section titled “Directory Structure”
    +
    macos_security/
    ├── config/
    │   └── default/
    │       ├── rules/           # Rule YAML files
    │       │   ├── audit/
    │       │   ├── auth/
    │       │   ├── os/
    │       │   ├── pwpolicy/
    │       │   └── system_settings/
    │       └── baselines/       # Baseline definitions
    ├── src/
    │   └── mscp/                # Python CLI package
    │       ├── cli.py
    │       ├── classes/
    │       └── generate/
    ├── schema/                  # YAML schema definitions
    ├── rules → config/default/rules      # Symlink
    ├── baselines → config/default/baselines
    └── custom/                  # User customizations
    +
    +

    Installation

    Section titled “Installation”
    + +
      +
    1. +

      Clone the dev_2.0 Branch

      Section titled “Clone the dev_2.0 Branch”
      +
      Terminal window
      git clone -b dev_2.0 https://github.com/usnistgov/macos_security.git
      cd macos_security
      +
      2. +
    2. +

      Install Prerequisites

      Section titled “Install Prerequisites”
      +

      Requires Python 3.12.1 or higher.

      +

      Python packages (required):

      +
      Terminal window
      pip3 install -r requirements.txt
      +

      Ruby gems (optional — only needed for PDF output):

      +
      Terminal window
      gem install asciidoctor asciidoctor-pdf rouge --user-install
      +
      Want isolated installs? Click to expand

      Python virtual environment:

      Terminal window
      python3 -m venv .venv
      source .venv/bin/activate
      pip3 install -r requirements.txt
      deactivate  # when done
      +
      3. +
    +
    +

    Why the Change?

    Section titled “Why the Change?”
    +
      +
    • Faster Updates — Rule changes apply to all versions at once
      • +
    • Less Maintenance — No branch synchronization headaches
      • +
    • Clear Version Support — See all supported versions in one file
      • +
    • Version Overrides — Different checks per macOS version when needed
      • +
    • Easier Contributions — Work in one branch, not many
      • +
    +
    +

    Status

    Section titled “Status”
    +
    Completed
    • Unified multi-version rule format
    • Restructured references (nist/disa/cis)
    • New directory layout
    • Python package setup
    In Progress
    • Full feature parity with 1.0
    • CLI documentation
    • Migration guide
    • Production release
    +
    +

    Get Involved

    Section titled “Get Involved”
    +
    Test the BetaTry the dev_2.0 branchReport IssuesGitHub IssuesDiscussGitHub DiscussionsChat#macos_security_compliance
    +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/other/generate-mapping/index.html b/other/generate-mapping/index.html index 7d11ae1b..d0766ff1 100644 --- a/other/generate-mapping/index.html +++ b/other/generate-mapping/index.html @@ -1,4 +1,4 @@ - Generate Mapping | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Generate Mapping

    The generate mapping script helps you quickly create custom rules and baselines for a compliance framework not published by the project. This is done by providing a CSV that maps controls from your framework (Column 1) to a supported framework (Column 2).

    - +

    Generate Mapping

    The generate_mapping.py script creates custom rules and baselines for compliance frameworks not included in the project. You provide a CSV that maps your framework’s controls to a supported framework (like NIST 800-53r5).

    + + +

    CSV Format

    Section titled “CSV Format”
    +

    Create a CSV with two columns:

    + + + + + + + + + + + + + + + + + +
    ColumnDescription
    Column 1Your framework’s control identifier
    Column 2Corresponding controls from a supported framework
    +

    The first row should contain the framework names:

    800-171r2,800-53r5
    3.1.1,"AC-2, AC-3, AC-17"
    3.1.2,"AC-2, AC-3, AC-17"
    3.1.3,AC-4
    3.1.4,AC-5
    +
    +

    Generate Custom Mapping

    Section titled “Generate Custom Mapping”
    +
      +
    1. +

      Run the mapping script

      +
      Terminal window
      ./scripts/generate_mapping.py PATH_TO_CSV
      +

      Example:

      +
      Terminal window
      ./scripts/generate_mapping.py ~/Desktop/171-to-53.csv
      +
      2. +
    2. +

      Find your files

      + + + + + + + + + + + + + + + + + +
      OutputLocation
      Custom rule filesbuild/800-171r2/rules/
      Generated baselinebuild/baselines/800-171r2.yaml
      +
      3. +
    +
    +

    Command Reference

    Section titled “Command Reference”
    + + + + + + + + + + + + + +
    FlagDescription
    -f FRAMEWORKSource framework to map from (default: 800-53r5)
    +

    Example mapping to CIS Controls:

    +
    Terminal window
    ./scripts/generate_mapping.py ~/Desktop/cis-mapping.csv -f "cis/controls v8"
    + +
    +

    Next Steps

    Section titled “Next Steps”
      -
    • Column 1: Your framework’s control identifier (e.g., 800-171r2 3.1.1)
      • -
    • Column 2: Supported framework controls (e.g., 800-53r5 AC-2)
      • +
    • Tailoring a Baseline - Customize the generated baseline
      • +
    • How to Generate Guidance - Generate documentation from your baseline
    - -

    Generate Custom Rule Files

    Section titled “Generate Custom Rule Files”
    - -

    Run the script with your mapping CSV:

    -
    Terminal window
    ./scripts/generate_mapping.py ~/Desktop/171-to-53.csv
    -

    Example output:

    -
    Mapping CSV: /Users/mscp/Desktop/171-to-53.csv
    Source compliance framework: 800-53r5
    auth_pam_login_smartcard_enforce - 800-53r5 IA-2(1) maps to 800-171r2 3.5.3
    auth_pam_login_smartcard_enforce - 800-53r5 IA-2(8) maps to 800-171r2 3.5.4
    auth_smartcard_allow - 800-53r5 IA-2(1) maps to 800-171r2 3.5.3
    auth_pam_sudo_smartcard_enforce - 800-53r5 IA-2(1) maps to 800-171r2 3.5.3
    auth_pam_sudo_smartcard_enforce - 800-53r5 IA-2(8) maps to 800-171r2 3.5.4
    auth_smartcard_enforce - 800-53r5 IA-2 maps to 800-171r2 3.5.1
    ...
    sysprefs_improve_siri_dictation_disable - 800-53r5 AC-20 maps to 800-171r2 3.1.20
    sysprefs_improve_siri_dictation_disable - 800-53r5 CM-7 maps to 800-171r2 3.4.6
    sysprefs_improve_siri_dictation_disable - 800-53r5 CM-7(1) maps to 800-171r2 3.4.7
    800-171r2.yaml baseline file created in build/800-171r2/baseline/
    Move all of the folders in rules into the custom folder.
    -
    • Directorybuild/ -
      • Directory800-171r2/ -
        • Directorybaseline/ -
          • 800-171r2.yaml
    • Directoryrules/ -
      • … (move generated folders here into your custom folder)
     - -

    Mapping to Other Frameworks

    Section titled “Mapping to Other Frameworks”
    -

    For frameworks such as CIS Controls v8, set the Column 2 header to cis/controls v8 and use the same value with the -f option.

    -
    \ No newline at end of file +
    \ No newline at end of file diff --git a/other/generate-scap/index.html b/other/generate-scap/index.html index ef6ba3ca..7f778d2d 100644 --- a/other/generate-scap/index.html +++ b/other/generate-scap/index.html @@ -1,4 +1,4 @@ - Generate SCAP | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Generate SCAP

    -

    To generate SCAP, OVAL, or XCCDF documents, use the generate_scap.py script.

    -
    1. List available baselines:
      ./scripts/generate_scap.py -l
    2. Generate SCAP 1.3 document for all baselines:
      ./scripts/generate_scap.py
    3. Generate only XCCDF or OVAL:
      ./scripts/generate_scap.py -x(XCCDF)
      ./scripts/generate_scap.py -o(OVAL)
    4. Generate for a specific baseline:
      ./scripts/generate_scap.py -b stig -x
    - -
    • Directory

      build/

      • [generated SCAP/XCCDF/OVAL files]
    • Directory

      rules/

      • [rule files with baseline tags]
    • Directory

      custom/

      • [custom rule files with baseline tags]
    • Directory

      scripts/

      • generate_scap.py
     -

    Example Output:

    -
    Terminal window
    ➜  macos_security git:(sequoia) ./scripts/generate_scap.py
    ./scripts/generate_scap.py -l
    800-171
    800-53r4_high
    800-53r4_low
    800-53r4_moderate
    800-53r5_high
    800-53r5_low
    800-53r5_moderate
    800-53r5_privacy
    cis_lvl1
    cis_lvl2
    cisv8
    cnssi-1253
    stig
    ➜  macos_security git:(ventura) ./scripts/generate_scap.py -b stig -x
    -

    This generates an XCCDF document in the build folder for just the stig baseline.

    +

    Generate SCAP

    The generate_scap.py script creates security compliance documents in SCAP (Security Content Automation Protocol) formats. These documents can be used with SCAP-compatible scanning tools.

    + +
    +

    Output Formats

    Section titled “Output Formats”
    + + + + + + + + + + + + + + + + + + + + + +
    FormatDescription
    SCAPComplete SCAP 1.4 datastream (default)
    XCCDFeXtensible Configuration Checklist Description Format
    OVALOpen Vulnerability and Assessment Language
    +
    +

    Generate SCAP Documents

    Section titled “Generate SCAP Documents”
    +
      +
    1. +

      List available baselines

      +
      Terminal window
      ./scripts/generate_scap.py -l
      +
      2. +
    2. +

      Generate SCAP for all rules

      +
      Terminal window
      ./scripts/generate_scap.py
      +
      3. +
    3. +

      Generate for a specific baseline

      +
      Terminal window
      ./scripts/generate_scap.py -b stig
      +
      4. +
    4. +

      Find your files

      +

      Output is saved to build/:

      + + + + + + + + + + + + + + + + + + + + + +
      FileDescription
      *_xccdf.xmlXCCDF document
      *_oval.xmlOVAL document
      *.xmlComplete SCAP datastream
      +
      5. +
    +
    +

    Command Reference

    Section titled “Command Reference”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FlagDescription
    -lList available baseline tags
    -b BASELINEGenerate for a specific baseline
    -xGenerate only XCCDF
    -oGenerate only OVAL
    -d FILEInclude DISA STIG references from file
    +

    SCAP References

    Section titled “SCAP References”
    -

    Security Content Automation Protocol (SCAP) 1.3

    - -

    An SCAP data stream (typically) consists of several XML documents knit together in a containing XML document. -The component documents are:

    -

    National Checklist Program for IT Products Guidelines for Checklist Users and Developers

    -

    National Checklist Program Repository

    \ No newline at end of file + +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/pagefind/fragment/en_056e9e9.pf_fragment b/pagefind/fragment/en_056e9e9.pf_fragment deleted file mode 100644 index 41b868e4..00000000 Binary files a/pagefind/fragment/en_056e9e9.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_0ca8648.pf_fragment b/pagefind/fragment/en_0ca8648.pf_fragment deleted file mode 100644 index e037f8c2..00000000 Binary files a/pagefind/fragment/en_0ca8648.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_17bb328.pf_fragment b/pagefind/fragment/en_17bb328.pf_fragment deleted file mode 100644 index 0900c997..00000000 Binary files a/pagefind/fragment/en_17bb328.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_1870e9d.pf_fragment b/pagefind/fragment/en_1870e9d.pf_fragment deleted file mode 100644 index 5236318c..00000000 Binary files a/pagefind/fragment/en_1870e9d.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_1a82eb7.pf_fragment b/pagefind/fragment/en_1a82eb7.pf_fragment deleted file mode 100644 index 85ce3187..00000000 Binary files a/pagefind/fragment/en_1a82eb7.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_21a72db.pf_fragment b/pagefind/fragment/en_21a72db.pf_fragment deleted file mode 100644 index dcde6b8a..00000000 Binary files a/pagefind/fragment/en_21a72db.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_2271608.pf_fragment b/pagefind/fragment/en_2271608.pf_fragment deleted file mode 100644 index c3022d87..00000000 Binary files a/pagefind/fragment/en_2271608.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_295d818.pf_fragment b/pagefind/fragment/en_295d818.pf_fragment deleted file mode 100644 index 83a85e04..00000000 Binary files a/pagefind/fragment/en_295d818.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_298df4a.pf_fragment b/pagefind/fragment/en_298df4a.pf_fragment new file mode 100644 index 00000000..9e0cdd4c Binary files /dev/null and b/pagefind/fragment/en_298df4a.pf_fragment differ diff --git a/pagefind/fragment/en_2f8b2ed.pf_fragment b/pagefind/fragment/en_2f8b2ed.pf_fragment deleted file mode 100644 index dd7e4c63..00000000 Binary files a/pagefind/fragment/en_2f8b2ed.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_35e3782.pf_fragment b/pagefind/fragment/en_35e3782.pf_fragment deleted file mode 100644 index a0a64c95..00000000 Binary files a/pagefind/fragment/en_35e3782.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_35f40da.pf_fragment b/pagefind/fragment/en_35f40da.pf_fragment new file mode 100644 index 00000000..4f67b121 Binary files /dev/null and b/pagefind/fragment/en_35f40da.pf_fragment differ diff --git a/pagefind/fragment/en_3a689e2.pf_fragment b/pagefind/fragment/en_3a689e2.pf_fragment new file mode 100644 index 00000000..859551c9 Binary files /dev/null and b/pagefind/fragment/en_3a689e2.pf_fragment differ diff --git a/pagefind/fragment/en_3ef45df.pf_fragment b/pagefind/fragment/en_3ef45df.pf_fragment new file mode 100644 index 00000000..ed85bf9f Binary files /dev/null and b/pagefind/fragment/en_3ef45df.pf_fragment differ diff --git a/pagefind/fragment/en_3fc8778.pf_fragment b/pagefind/fragment/en_3fc8778.pf_fragment new file mode 100644 index 00000000..1ce0d742 Binary files /dev/null and b/pagefind/fragment/en_3fc8778.pf_fragment differ diff --git a/pagefind/fragment/en_43ada8f.pf_fragment b/pagefind/fragment/en_43ada8f.pf_fragment deleted file mode 100644 index 4e860b16..00000000 Binary files a/pagefind/fragment/en_43ada8f.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_451f92a.pf_fragment b/pagefind/fragment/en_451f92a.pf_fragment new file mode 100644 index 00000000..7371e9ac Binary files /dev/null and b/pagefind/fragment/en_451f92a.pf_fragment differ diff --git a/pagefind/fragment/en_46ab284.pf_fragment b/pagefind/fragment/en_46ab284.pf_fragment new file mode 100644 index 00000000..336239f6 Binary files /dev/null and b/pagefind/fragment/en_46ab284.pf_fragment differ diff --git a/pagefind/fragment/en_4e55426.pf_fragment b/pagefind/fragment/en_4e55426.pf_fragment new file mode 100644 index 00000000..53d2c8d2 Binary files /dev/null and b/pagefind/fragment/en_4e55426.pf_fragment differ diff --git a/pagefind/fragment/en_4ff2902.pf_fragment b/pagefind/fragment/en_4ff2902.pf_fragment deleted file mode 100644 index f0b8dd73..00000000 Binary files a/pagefind/fragment/en_4ff2902.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_509f847.pf_fragment b/pagefind/fragment/en_509f847.pf_fragment new file mode 100644 index 00000000..99158fc0 Binary files /dev/null and b/pagefind/fragment/en_509f847.pf_fragment differ diff --git a/pagefind/fragment/en_54c397d.pf_fragment b/pagefind/fragment/en_54c397d.pf_fragment deleted file mode 100644 index 898abed7..00000000 Binary files a/pagefind/fragment/en_54c397d.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_595377e.pf_fragment b/pagefind/fragment/en_595377e.pf_fragment new file mode 100644 index 00000000..9529dbc6 Binary files /dev/null and b/pagefind/fragment/en_595377e.pf_fragment differ diff --git a/pagefind/fragment/en_5f2a83b.pf_fragment b/pagefind/fragment/en_5f2a83b.pf_fragment new file mode 100644 index 00000000..de754137 Binary files /dev/null and b/pagefind/fragment/en_5f2a83b.pf_fragment differ diff --git a/pagefind/fragment/en_68f0754.pf_fragment b/pagefind/fragment/en_68f0754.pf_fragment deleted file mode 100644 index 9faab3ab..00000000 Binary files a/pagefind/fragment/en_68f0754.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_6978570.pf_fragment b/pagefind/fragment/en_6978570.pf_fragment deleted file mode 100644 index 5c960251..00000000 Binary files a/pagefind/fragment/en_6978570.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_6bd9528.pf_fragment b/pagefind/fragment/en_6bd9528.pf_fragment new file mode 100644 index 00000000..6605bb9f Binary files /dev/null and b/pagefind/fragment/en_6bd9528.pf_fragment differ diff --git a/pagefind/fragment/en_71ce441.pf_fragment b/pagefind/fragment/en_71ce441.pf_fragment deleted file mode 100644 index d5bac44d..00000000 Binary files a/pagefind/fragment/en_71ce441.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_776faa7.pf_fragment b/pagefind/fragment/en_776faa7.pf_fragment new file mode 100644 index 00000000..4db29b7a Binary files /dev/null and b/pagefind/fragment/en_776faa7.pf_fragment differ diff --git a/pagefind/fragment/en_7ba49c4.pf_fragment b/pagefind/fragment/en_7ba49c4.pf_fragment new file mode 100644 index 00000000..71fc1f78 Binary files /dev/null and b/pagefind/fragment/en_7ba49c4.pf_fragment differ diff --git a/pagefind/fragment/en_8029322.pf_fragment b/pagefind/fragment/en_8029322.pf_fragment deleted file mode 100644 index dabcc6e6..00000000 Binary files a/pagefind/fragment/en_8029322.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_805b596.pf_fragment b/pagefind/fragment/en_805b596.pf_fragment deleted file mode 100644 index 8ed0f82e..00000000 Binary files a/pagefind/fragment/en_805b596.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_8eb66ec.pf_fragment b/pagefind/fragment/en_8eb66ec.pf_fragment new file mode 100644 index 00000000..a9a7e2f9 Binary files /dev/null and b/pagefind/fragment/en_8eb66ec.pf_fragment differ diff --git a/pagefind/fragment/en_8f7bf57.pf_fragment b/pagefind/fragment/en_8f7bf57.pf_fragment deleted file mode 100644 index a40cd21c..00000000 Binary files a/pagefind/fragment/en_8f7bf57.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_8f7ce19.pf_fragment b/pagefind/fragment/en_8f7ce19.pf_fragment deleted file mode 100644 index bb7e6caf..00000000 Binary files a/pagefind/fragment/en_8f7ce19.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_9767af9.pf_fragment b/pagefind/fragment/en_9767af9.pf_fragment deleted file mode 100644 index d7b9dd94..00000000 Binary files a/pagefind/fragment/en_9767af9.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_976e5a9.pf_fragment b/pagefind/fragment/en_976e5a9.pf_fragment new file mode 100644 index 00000000..687d5bdc Binary files /dev/null and b/pagefind/fragment/en_976e5a9.pf_fragment differ diff --git a/pagefind/fragment/en_a234dcf.pf_fragment b/pagefind/fragment/en_a234dcf.pf_fragment deleted file mode 100644 index aa2e741c..00000000 Binary files a/pagefind/fragment/en_a234dcf.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_a2b6764.pf_fragment b/pagefind/fragment/en_a2b6764.pf_fragment new file mode 100644 index 00000000..017abcbb Binary files /dev/null and b/pagefind/fragment/en_a2b6764.pf_fragment differ diff --git a/pagefind/fragment/en_a354ce5.pf_fragment b/pagefind/fragment/en_a354ce5.pf_fragment new file mode 100644 index 00000000..2688d039 Binary files /dev/null and b/pagefind/fragment/en_a354ce5.pf_fragment differ diff --git a/pagefind/fragment/en_a65122e.pf_fragment b/pagefind/fragment/en_a65122e.pf_fragment deleted file mode 100644 index cd72a1e6..00000000 Binary files a/pagefind/fragment/en_a65122e.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_aa4119f.pf_fragment b/pagefind/fragment/en_aa4119f.pf_fragment new file mode 100644 index 00000000..50cc1dbb Binary files /dev/null and b/pagefind/fragment/en_aa4119f.pf_fragment differ diff --git a/pagefind/fragment/en_aad9442.pf_fragment b/pagefind/fragment/en_aad9442.pf_fragment new file mode 100644 index 00000000..bd3c2c42 Binary files /dev/null and b/pagefind/fragment/en_aad9442.pf_fragment differ diff --git a/pagefind/fragment/en_acbfe78.pf_fragment b/pagefind/fragment/en_acbfe78.pf_fragment deleted file mode 100644 index 78cda34c..00000000 Binary files a/pagefind/fragment/en_acbfe78.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_b228233.pf_fragment b/pagefind/fragment/en_b228233.pf_fragment deleted file mode 100644 index 95755f43..00000000 Binary files a/pagefind/fragment/en_b228233.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_b7669a8.pf_fragment b/pagefind/fragment/en_b7669a8.pf_fragment new file mode 100644 index 00000000..f66ffdc6 Binary files /dev/null and b/pagefind/fragment/en_b7669a8.pf_fragment differ diff --git a/pagefind/fragment/en_beff183.pf_fragment b/pagefind/fragment/en_beff183.pf_fragment deleted file mode 100644 index 1089b1c8..00000000 Binary files a/pagefind/fragment/en_beff183.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_c0b5b34.pf_fragment b/pagefind/fragment/en_c0b5b34.pf_fragment new file mode 100644 index 00000000..06220890 Binary files /dev/null and b/pagefind/fragment/en_c0b5b34.pf_fragment differ diff --git a/pagefind/fragment/en_c133ae8.pf_fragment b/pagefind/fragment/en_c133ae8.pf_fragment new file mode 100644 index 00000000..4798282f Binary files /dev/null and b/pagefind/fragment/en_c133ae8.pf_fragment differ diff --git a/pagefind/fragment/en_c242f66.pf_fragment b/pagefind/fragment/en_c242f66.pf_fragment new file mode 100644 index 00000000..666abe64 Binary files /dev/null and b/pagefind/fragment/en_c242f66.pf_fragment differ diff --git a/pagefind/fragment/en_c4a6208.pf_fragment b/pagefind/fragment/en_c4a6208.pf_fragment deleted file mode 100644 index b0a1c3b9..00000000 Binary files a/pagefind/fragment/en_c4a6208.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_c7572b4.pf_fragment b/pagefind/fragment/en_c7572b4.pf_fragment new file mode 100644 index 00000000..d61ddbb0 Binary files /dev/null and b/pagefind/fragment/en_c7572b4.pf_fragment differ diff --git a/pagefind/fragment/en_d729b1e.pf_fragment b/pagefind/fragment/en_d729b1e.pf_fragment new file mode 100644 index 00000000..b02e0d3e Binary files /dev/null and b/pagefind/fragment/en_d729b1e.pf_fragment differ diff --git a/pagefind/fragment/en_d81dd67.pf_fragment b/pagefind/fragment/en_d81dd67.pf_fragment new file mode 100644 index 00000000..629e0f4a Binary files /dev/null and b/pagefind/fragment/en_d81dd67.pf_fragment differ diff --git a/pagefind/fragment/en_d9fb2f1.pf_fragment b/pagefind/fragment/en_d9fb2f1.pf_fragment new file mode 100644 index 00000000..b507416f Binary files /dev/null and b/pagefind/fragment/en_d9fb2f1.pf_fragment differ diff --git a/pagefind/fragment/en_dd8895d.pf_fragment b/pagefind/fragment/en_dd8895d.pf_fragment new file mode 100644 index 00000000..47e79c48 Binary files /dev/null and b/pagefind/fragment/en_dd8895d.pf_fragment differ diff --git a/pagefind/fragment/en_df65666.pf_fragment b/pagefind/fragment/en_df65666.pf_fragment deleted file mode 100644 index 96b520d6..00000000 Binary files a/pagefind/fragment/en_df65666.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_e25dd08.pf_fragment b/pagefind/fragment/en_e25dd08.pf_fragment deleted file mode 100644 index f8f3932c..00000000 Binary files a/pagefind/fragment/en_e25dd08.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_e2b9ddf.pf_fragment b/pagefind/fragment/en_e2b9ddf.pf_fragment new file mode 100644 index 00000000..e36dbdc7 Binary files /dev/null and b/pagefind/fragment/en_e2b9ddf.pf_fragment differ diff --git a/pagefind/fragment/en_e5ff4f3.pf_fragment b/pagefind/fragment/en_e5ff4f3.pf_fragment deleted file mode 100644 index 121308da..00000000 Binary files a/pagefind/fragment/en_e5ff4f3.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_e765a03.pf_fragment b/pagefind/fragment/en_e765a03.pf_fragment new file mode 100644 index 00000000..403a6b22 Binary files /dev/null and b/pagefind/fragment/en_e765a03.pf_fragment differ diff --git a/pagefind/fragment/en_e8bf989.pf_fragment b/pagefind/fragment/en_e8bf989.pf_fragment new file mode 100644 index 00000000..2b52cf13 Binary files /dev/null and b/pagefind/fragment/en_e8bf989.pf_fragment differ diff --git a/pagefind/fragment/en_e964ca2.pf_fragment b/pagefind/fragment/en_e964ca2.pf_fragment new file mode 100644 index 00000000..8ea6dc82 Binary files /dev/null and b/pagefind/fragment/en_e964ca2.pf_fragment differ diff --git a/pagefind/fragment/en_eb925a9.pf_fragment b/pagefind/fragment/en_eb925a9.pf_fragment new file mode 100644 index 00000000..16f95fba Binary files /dev/null and b/pagefind/fragment/en_eb925a9.pf_fragment differ diff --git a/pagefind/fragment/en_f365cbe.pf_fragment b/pagefind/fragment/en_f365cbe.pf_fragment deleted file mode 100644 index 94b86b1f..00000000 Binary files a/pagefind/fragment/en_f365cbe.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_f44439a.pf_fragment b/pagefind/fragment/en_f44439a.pf_fragment new file mode 100644 index 00000000..18707c06 Binary files /dev/null and b/pagefind/fragment/en_f44439a.pf_fragment differ diff --git a/pagefind/fragment/en_f6b66ac.pf_fragment b/pagefind/fragment/en_f6b66ac.pf_fragment deleted file mode 100644 index a0bf62b1..00000000 Binary files a/pagefind/fragment/en_f6b66ac.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_fb9af7b.pf_fragment b/pagefind/fragment/en_fb9af7b.pf_fragment deleted file mode 100644 index 72570b7d..00000000 Binary files a/pagefind/fragment/en_fb9af7b.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_fde3318.pf_fragment b/pagefind/fragment/en_fde3318.pf_fragment new file mode 100644 index 00000000..8665ab41 Binary files /dev/null and b/pagefind/fragment/en_fde3318.pf_fragment differ diff --git a/pagefind/fragment/en_fe695e7.pf_fragment b/pagefind/fragment/en_fe695e7.pf_fragment deleted file mode 100644 index 54dd0095..00000000 Binary files a/pagefind/fragment/en_fe695e7.pf_fragment and /dev/null differ diff --git a/pagefind/fragment/en_ffc1f4f.pf_fragment b/pagefind/fragment/en_ffc1f4f.pf_fragment deleted file mode 100644 index 4b728e5b..00000000 Binary files a/pagefind/fragment/en_ffc1f4f.pf_fragment and /dev/null differ diff --git a/pagefind/index/en_222c145.pf_index b/pagefind/index/en_222c145.pf_index new file mode 100644 index 00000000..edc7cb5f Binary files /dev/null and b/pagefind/index/en_222c145.pf_index differ diff --git a/pagefind/index/en_514887c.pf_index b/pagefind/index/en_514887c.pf_index new file mode 100644 index 00000000..94cf5df2 Binary files /dev/null and b/pagefind/index/en_514887c.pf_index differ diff --git a/pagefind/index/en_556e131.pf_index b/pagefind/index/en_556e131.pf_index deleted file mode 100644 index ad5407ea..00000000 Binary files a/pagefind/index/en_556e131.pf_index and /dev/null differ diff --git a/pagefind/index/en_5e15fef.pf_index b/pagefind/index/en_5e15fef.pf_index deleted file mode 100644 index 8dbc5463..00000000 Binary files a/pagefind/index/en_5e15fef.pf_index and /dev/null differ diff --git a/pagefind/pagefind-entry.json b/pagefind/pagefind-entry.json index daa11fef..cb78ba06 100644 --- a/pagefind/pagefind-entry.json +++ b/pagefind/pagefind-entry.json @@ -1 +1 @@ -{"version":"1.4.0","languages":{"en":{"hash":"en_6314f1b1e4","wasm":"en","page_count":35}},"include_characters":["_","‿","⁀","⁔","︳","︴","﹍","﹎","﹏","＿"]} \ No newline at end of file +{"version":"1.4.0","languages":{"en":{"hash":"en_1b266052c7","wasm":"en","page_count":36}},"include_characters":["_","‿","⁀","⁔","︳","︴","﹍","﹎","﹏","＿"]} \ No newline at end of file diff --git a/pagefind/pagefind.en_1b266052c7.pf_meta b/pagefind/pagefind.en_1b266052c7.pf_meta new file mode 100644 index 00000000..faebe723 Binary files /dev/null and b/pagefind/pagefind.en_1b266052c7.pf_meta differ diff --git a/pagefind/pagefind.en_6314f1b1e4.pf_meta b/pagefind/pagefind.en_6314f1b1e4.pf_meta deleted file mode 100644 index 3841b30b..00000000 Binary files a/pagefind/pagefind.en_6314f1b1e4.pf_meta and /dev/null differ diff --git a/personalization/customize-rules/index.html b/personalization/customize-rules/index.html index fead7433..267ed7a5 100644 --- a/personalization/customize-rules/index.html +++ b/personalization/customize-rules/index.html @@ -1,4 +1,4 @@ - Customizing Rules | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Customizing Rules

    The project supports modifying existing rules and adding new rules to a baseline to meet your organization’s requirements. Customizing a rule means changing the rule’s content itself, while tailoring is about selecting which rules to include in a benchmark.

    - -

    Modifying an Existing Rule

    Section titled “Modifying an Existing Rule”
    -
      -
    1. Copy the existing rule file to the custom folder. The filename must remain the same.
      2. -
    2. Remove any fields that don’t need to be modified.
      3. -
    3. Edit the fields to match your organization’s requirements.
      4. -
    4. Run generate_guidance.py. The custom version of the rule will be included in the output.
      5. -
    -

    Example: Configure macOS to Use an Authorized Time Server

    -
    references:
      custom:
        MSCP:
          - MSCP-OS-001
        URL:
          - https://developer.apple.com/documentation/devicemanagement/timeserver
        Remediation Tool:
          - MDM
    +

    Customize Rules

    Customizing lets you modify rule content (check commands, fixes, references) or add entirely new rules. This is different from tailoring, which selects which rules to include and sets ODV values.

    + +
    -

    Adding a New Rule

    Section titled “Adding a New Rule”
    +

    How Merging Works

    Section titled “How Merging Works”
    +

    When you create a custom rule file, the project:

    +
      +
    1. Loads your custom version from custom/rules/
      2. +
    2. Loads the original rule from rules/
      3. +
    3. Uses your custom values where they differ
      4. +
    4. Keeps original values for fields you didn’t customize
      5. +
    5. Merges tags and references (concatenates rather than replaces)
      6. +
    +
    +

    Modify an Existing Rule

    Section titled “Modify an Existing Rule”
      -
    1. Create a new rules.yaml file in the custom folder. -
        -
      • If your rule uses a configuration profile payload not already in the project, add it to supported_payloads.yaml in the includes folder.
        • -
      +
    2. +

      Create your custom rule file

      +

      Create a YAML file in custom/rules/ with the same filename as the original rule.

      +
      3. +
    3. +

      Include only fields to customize

      +

      Add only the fields you want to change:

      +
      references:
        custom:
          MSCP:
            - MSCP-OS-001
          URL:
            - https://example.com/policy
      +
      4. +
    4. +

      Generate your outputs

      +
      Terminal window
      ./scripts/generate_guidance.py baselines/YOUR_BASELINE.yaml
      +

      The custom values merge with the original rule automatically.

      5. -
    5. Run generate_baseline.py to add the new rule to your baseline.
      6. -
    6. Run generate_guidance.py against your customized baseline.
    -

    Use Case: Informational Rules (No Check/Result/Fix)

    Section titled “Use Case: Informational Rules (No Check/Result/Fix)”
    -

    If you want a custom rule that explains a control but does not include a check, result, or fix, add the manual tag. This ensures it does not appear in the compliance script.

    -

    Example Rule (No Check/Result/Fix)

    -
    check: |
    result: |
    fix: |
    tag:
      - manual
    +

    Add a New Rule

    Section titled “Add a New Rule”
    +
      +
    1. +

      Create your rule file

      +

      Create a new YAML file in custom/rules/ with your rule ID as the filename (e.g., my_org_custom_rule.yaml).

      +
      2. +
    2. +

      Define the required fields

      + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
      FieldDescription
      idUnique rule identifier
      titleHuman-readable name
      discussionWhy this rule matters
      checkCommand to verify compliance
      resultExpected output format
      fixRemediation instructions
      tagsInclude your baseline tag
      +
      3. +
    3. +

      Add payload support (if needed)

      +

      If your rule uses a configuration profile payload not in the project, add it to includes/supported_payloads.yaml.

      +
      4. +
    4. +

      Generate your baseline

      +
      Terminal window
      ./scripts/generate_baseline.py -k YOUR_TAG
      +
      5. +
    5. +

      Generate your outputs

      +
      Terminal window
      ./scripts/generate_guidance.py baselines/YOUR_BASELINE.yaml
      +
      6. +
    -

    Customizing rules helps ensure your security baseline is both robust and tailored to your organization’s needs. -Customizing rules helps ensure your security baseline is both robust and tailored to your organization’s needs.

    \ No newline at end of file +

    Informational Rules (No Check/Fix)

    Section titled “Informational Rules (No Check/Fix)”
    +

    For rules that explain a control but don’t require compliance checking, use the manual tag. These rules appear in guidance documents but not in compliance scripts.

    +
    id: my_org_policy_statement
    title: Organization Security Policy
    discussion: |
      This control documents the organization's security policy requirements.
    check: |
    result: |
    fix: |
    tags:
      - manual
      - my_org_baseline
    +
    +

    File Structure

    Section titled “File Structure”
    +
    • Directorycustom/ +
      • Directoryrules/ +
        • os_authenticated_root_enable.yaml - Override existing rule
        • my_org_custom_rule.yaml - New custom rule
     +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/personalization/exempting-rules/index.html b/personalization/exempting-rules/index.html index 5d4ad8b6..6efcc359 100644 --- a/personalization/exempting-rules/index.html +++ b/personalization/exempting-rules/index.html @@ -1,4 +1,4 @@ - Exemptions | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Exemptions

    Exemptions allow you to mark certain rules as “approved exceptions” for your organization. Systems with exemptions are reported as compliant, even if the setting differs from the rule’s expected result.

    -
    -

    Note: The check will still be logged as a finding, but marking it as exempt allows reporting tools to exclude it from non-compliance.

    -
    +

    Exempting Rules

    Exemptions let you mark rules as approved exceptions. When a rule is exempt, the compliance script reports it as an exemption rather than a failure, and skips remediation for that rule.

    +

    How Exemptions Work

    Section titled “How Exemptions Work”
    -

    Exemptions are set in the org.{baseline}.audit.plist file, which can be placed in /Library/Preferences/org.{baseline}.audit.plist or applied via a custom configuration profile.

    +

    Exemptions are stored in the audit plist file at:

    +
    /Library/Preferences/org.{baseline_name}.audit.plist
    +

    Each exempted rule has two keys:

    + + + + + + + + + + + + + + + + + + + + +
    KeyTypeDescription
    exemptBooleantrue to mark as exempt
    exempt_reasonStringWhy the exemption is approved
    -

    Setting an Exemption

    Section titled “Setting an Exemption”
    +

    Set an Exemption Locally

    Section titled “Set an Exemption Locally”
      -
    1. Set exempt to true for the rule.
      2. -
    2. Add an exempt_reason describing why the exemption is needed.
      3. +
    3. +

      Set the exempt flag

      +
      Terminal window
      sudo /usr/libexec/PlistBuddy -c "Add :RULE_ID:exempt bool true" /Library/Preferences/org.BASELINE.audit.plist
      +
      4. +
    4. +

      Add the reason

      +
      Terminal window
      sudo /usr/libexec/PlistBuddy -c "Add :RULE_ID:exempt_reason string 'Your reason'" /Library/Preferences/org.BASELINE.audit.plist
      +
      5. +
    5. +

      Verify the exemption

      +
      Terminal window
      /usr/libexec/PlistBuddy -c "Print :RULE_ID" /Library/Preferences/org.BASELINE.audit.plist
      +

      Output:

      +
      Dict {
          finding = true
          exempt = true
          exempt_reason = Your reason
      }
      +
    -

    Example: Exempting auth_smartcard_enforce

    -
    Terminal window
    sudo /usr/libexec/PlistBuddy -c "Add :auth_smartcard_enforce:exempt bool true" /Library/Preferences/org.800-53r5_moderate.audit.plist
    sudo /usr/libexec/PlistBuddy -c "Add :auth_smartcard_enforce:exempt_reason string 'Reader Issues'" /Library/Preferences/org.800-53r5_moderate.audit.plist
    
-
    /usr/libexec/PlistBuddy -c "Print auth_smartcard_enforce" /Library/Preferences/org.800-53r5_moderate.audit.plist
    -

    Result:

    -
    Dict {
        finding = true
        exempt = true
        exempt_reason = Reader Issues
    }
    +

    Example: Exempt auth_smartcard_enforce from the 800-53r5_moderate baseline:

    +
    Terminal window
    sudo /usr/libexec/PlistBuddy -c "Add :auth_smartcard_enforce:exempt bool true" /Library/Preferences/org.800-53r5_moderate.audit.plist
    sudo /usr/libexec/PlistBuddy -c "Add :auth_smartcard_enforce:exempt_reason string 'Hardware reader not available'" /Library/Preferences/org.800-53r5_moderate.audit.plist
    - -

    Exemptions help you document and manage approved exceptions in your compliance reporting.

    \ No newline at end of file +

    Deploy Exemptions via MDM

    Section titled “Deploy Exemptions via MDM”
    +

    For enterprise deployments, deploy exemptions as a managed preference profile targeting the org.{baseline_name}.audit preference domain.

    +

    The compliance script checks for managed preferences and respects exemptions set through MDM.

    + +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/personalization/tailoring-rules/index.html b/personalization/tailoring-rules/index.html index 55f64caf..93aa46ea 100644 --- a/personalization/tailoring-rules/index.html +++ b/personalization/tailoring-rules/index.html @@ -1,4 +1,4 @@ - Tailoring | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Tailoring

    The project makes it simple for organizations to construct a tailored benchmark whether starting from one of the NIST 800-53 control baselines, or customizing an already established benchmark. Tailoring a benchmark is different than customizing specific rules. See Customization to learn more.

    -

    Organization Defined Values

    -

    Organization Defined Values, or ODVs, are values determined for controls that meet both the security and functional requirements in an organization. Benchmark authors, like DISA and CIS, provide these values for their respective published guidance. In the project, we include recommended values, as well as the defined values for the DISA STIG and CIS Benchmarks as part of the ODV field in the YAML.

    -

    Tailoring a Benchmark

    Section titled “Tailoring a Benchmark”
    -

    Running the generate_baseline script with the -t argument will step you through the tailoring process. The process will start by prompting for the following:

    +

    Tailoring Rules

    Tailoring lets you create a customized baseline by choosing which rules to include and setting organization-defined values (ODVs). This is different from customizing individual rules.

    + + +
    +

    Tailor a Baseline

    Section titled “Tailor a Baseline”
    +
      +
    1. +

      Run the tailoring wizard

      +
      Terminal window
      ./scripts/generate_baseline.py -k BASELINE -t
      +

      Example:

      +
      Terminal window
      ./scripts/generate_baseline.py -k 800-53r5_moderate -t
      +
      2. +
    2. +

      Enter your organization details

      +
      Enter a name for your tailored benchmark: MyOrgs_Benchmark
      Enter your name: Your Name
      Enter your organization: Your Org
      +
      3. +
    3. +

      Choose rules to include

      +

      For each rule, you’ll be prompted:

      +
      Would you like to include the rule for "audit_acls_files_configure"? [Y/n/all/?]:
      + + + + + + + + + + + + + + + + + + + + + + + + + +
      OptionDescription
      YInclude this rule
      nSkip this rule
      allInclude all remaining rules
      ?Show rule details
      +
      4. +
    4. +

      Set ODV values

      +

      For rules with ODVs, enter your value or press Enter for the default:

      +
      Enter the ODV for "pwpolicy_account_lockout_enforce" or press Enter for the recommended value (3):
      +
      5. +
    5. +

      Find your files

      + + + + + + + + + + + + + + + + + +
      OutputLocation
      Tailored baselinebuild/baselines/MyOrgs_Benchmark.yaml
      Custom ODV rulescustom/rules/*.yaml
      +
      6. +
    +
    +

    Generate from Tailored Baseline

    Section titled “Generate from Tailored Baseline”
    +

    After tailoring, generate your outputs:

    +
    Terminal window
    ./scripts/generate_guidance.py build/baselines/MyOrgs_Benchmark.yaml -p -s
    +
    +

    Custom Rule File Format

    Section titled “Custom Rule File Format”
    +

    When you set custom ODV values, the project creates a YAML file for each tailored rule:

    +
    ---
    odv:
      custom: 11
    +

    These files are stored in custom/rules/ and contain only your custom values.

    +
    +

    Next Steps

    Section titled “Next Steps”
      -
    • Benchmark Name
      • -
    • Author’s Name
      • -
    • Organization
      • +
    • Customize Rules - Modify rule behavior beyond ODVs
      • +
    • Exempting Rules - Exclude rules from compliance checks
    -
    ➜  macos_security git:(sequoia) ./scripts/generate_baseline.py -k 800-53r5_moderate -t
    Enter a name for your tailored benchmark or press Enter for the default value (800-53r5_moderate): MyOrgs_Benchmark
    Enter your name: Allen Golbig
    Enter your organization: MyOrg
    The inclusion of any given rule is a risk-based decision (RBD). While each rule is mapped to an 800-53 control, deploying it in your organization should be part of the decision-making process.
    You will be prompted to include each rule, and for those with specific organizational defined values (ODV), you will be prompted for those as well.
    -

    Once completed, you will be prompted whether or not to include each rule in your benchmark.

    -
    Would you like to include the rule for "audit_acls_files_configure" in your benchmark? [Y/n/all/?]:
    -

    📌 NOTE
    -The ? option will display additional details about the rule to help your organization decide if it meets your requirements.

    -

    If a rule contains an ODV, you will be prompted to assign a value that meets your organization’s requirements.

    -
    Number of failed attempts.
    Enter the ODV for "pwpolicy_account_lockout_enforce" or press Enter for the recommended value (3):
    -

    After the tailoring process is completed, a new YAML file will be created in build/baselines, and custom rules containing their ODV values will be created in custom/rules/. Now you can run the generate guidance script against that tailored benchmark.

    -
    ./scripts/generate_guidance.py build/baselines/MyOrgs_Benchmark.yaml -p -s -x
    -

    Tailored File Layout

    Section titled “Tailored File Layout”
    -

    When you provide custom ODV values during tailoring, the project creates a separate YAML file for each tailored rule. These files are saved in the following directory structure:

    -
    • Directorymacos_security/ -
      • Directorycustom/ -
        • Directoryrules/ -
          • *.yaml ---> Custom values you set if you used -t
     -

    Here, * matches the ID of the rule you tailored.

    -

    Tailored Rule File Structure

    Section titled “Tailored Rule File Structure”
    -

    A tailored rule file contains only the custom ODV values you specified. For example:

    -
    odv:
      custom: 11
    -
      -
    • The odv field contains a custom key with your organization’s chosen value (in this example, 11).
      • -
    • This structure makes it easy to see and manage the specific ODV values set for each tailored rule.
      • -
    -

    All tailored rule files are stored in the custom/rules/ directory, allowing you to track and update your organization’s customizations as needed.

    -

    This process helps ensure your security baseline is both robust and tailored to your organization’s needs.

    \ No newline at end of file +
    \ No newline at end of file diff --git a/repository/directory-layout/index.html b/repository/directory-layout/index.html index d2fdc293..b49c6649 100644 --- a/repository/directory-layout/index.html +++ b/repository/directory-layout/index.html @@ -1,4 +1,4 @@ - Directory Layout | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Directory Layout

    Repository Layout Overview

    Section titled “Repository Layout Overview”
    -

    Below is a quick reference to the main directories in this repository and their purposes.

    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    DirectoryDescription
    baselines/Baseline profiles containing all rules (e.g., NIST, CIS, DISA STIG, CMMC, CNSSI, indigo).
    build/Output directory for generated scripts, documents, and mobileconfig files.
    custom/Custom rules and sections for organization-specific requirements.
    includes/Supporting YAML libraries for build scripts.
    rules/YAML files, one per rule, for securing the operating system.
    SCAP/Makefile, scripts, and content for SCAP document generation.
    scripts/Scripts for generating reports, baselines, and configurations.
    sections/YAML configurations for guide sections, mapping to rule categories.
    templates/AsciiDoc templates for generating documentation guides.
    -
    • Directorybaselines/ -
      • baseline.yaml
    • Directorybuild/
      • …
    • Directorycustom/
      • …
    • Directoryincludes/
      • …
    • Directoryrules/
      • …
    • DirectorySCAP/
      • …
    • Directoryscripts/
      • …
    • Directorysections/
      • …
    • Directorytemplates/
      • …
     +

    Directory Layout

    This page describes the directory structure of the macOS Security Compliance Project repository.

    -

    Directory Details

    Section titled “Directory Details”
    -

    baselines/

    Section titled “baselines/”
    -

    Contains baseline files for various standards and frameworks:

    +

    Repository Structure

    Section titled “Repository Structure”
    +
    • Directorybaselines/ - Baseline YAML files for compliance frameworks
      • …
    • Directorybuild/ - Generated output files
      • …
    • Directorycustom/ - Organization-specific customizations
      • …
    • Directoryincludes/ - Supporting YAML libraries and resources
      • …
    • Directoryrules/ - Individual rule YAML files
      • …
    • Directoryscripts/ - Generation and utility scripts
      • …
    • Directorysections/ - Section definition files for guides
      • …
    • Directorytemplates/ - AsciiDoc templates for documentation
      • …
     +
    +

    Directory Reference

    Section titled “Directory Reference”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    DirectoryDescription
    baselines/Baseline profiles for NIST 800-53, CIS, DISA STIG, CMMC, and more
    build/Output directory for generated scripts, documents, and profiles
    custom/Custom rules and sections for organization-specific requirements
    includes/Supporting YAML files and resources for build scripts
    rules/YAML files defining individual security rules
    scripts/Python scripts for generating content
    sections/YAML files defining guide sections
    templates/AsciiDoc templates for documentation
    +
    +

    Rules Directory

    Section titled “Rules Directory”
    +

    The rules/ directory contains subdirectories organized by category:

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    CategoryDescription
    audit/OpenBSM auditing settings
    auth/Authentication and smartcard settings
    icloud/Apple iCloud and Apple ID configuration
    os/General operating system settings
    pwpolicy/Password policy enforcement
    supplemental/Additional supporting information
    system_settings/System Settings configuration
    +
    +

    Custom Directory

    Section titled “Custom Directory”
    +

    The custom/ directory mirrors the main structure for organization-specific overrides:

    +
    • Directorycustom/ +
      • Directoryrules/ - Custom rule overrides
        • …
      • Directorysections/ - Custom section overrides
        • …
     + +
    +

    Next Steps

    Section titled “Next Steps”
      -
    • NIST SP 800-53 rev5 (Low, Moderate, High)
      • -
    • NIST SP 800-171 Rev2
      • -
    • DISA STIG
      • -
    • CIS Level 1 & 2
      • -
    • CIS Controls Version 8
      • -
    • CMMC Level 1 & 2
      • -
    • CNSSI 1253 (Low, Moderate, High)
      • -
    • indigo Base & High
      • -
    • A comprehensive baseline for all repository rules
      • +
    • Rule File Layout - Understand rule YAML structure
      • +
    • Sections File Layout - Understand section YAML structure
      • +
    • Includes Directory - Supporting files reference
    -

    build/

    Section titled “build/”
    -

    Stores all generated outputs, such as documents and mobileconfig files.

    -

    custom/

    Section titled “custom/”
    -

    For organization-specific customizations of rules and sections.
    -Note: Filenames must match the originals to override them during guide generation.

    -

    includes/

    Section titled “includes/”
    -

    YAML-based libraries and supporting files for build scripts.

    -

    rules/

    Section titled “rules/”
    -

    Contains individual YAML files for each rule, organized by category:

    -
      -
    • audit: OpenBSM settings
      • -
    • auth: Smartcard authentication
      • -
    • icloud: Apple iCloud/Apple ID configuration
      • -
    • os: General OS settings
      • -
    • pwpolicy: Password policy enforcement
      • -
    • supplemental: Additional supporting information
      • -
    • system_settings: System Settings/Preferences configuration
      • -
    -

    SCAP/

    Section titled “SCAP/”
    -

    Resources for SCAP document generation, including XSL files, CPE OVAL/definitions, and scripts.

    -

    scripts/

    Section titled “scripts/”
    -

    Scripts for generating reports, baselines, and configurations, plus required resources.

    -

    sections/

    Section titled “sections/”
    -

    YAML files defining guide sections, mapping to rule categories.

    -

    templates/

    Section titled “templates/”
    -

    AsciiDoc templates for generating documentation guides.

    \ No newline at end of file +
    \ No newline at end of file diff --git a/repository/includes-directory/index.html b/repository/includes-directory/index.html index 14b61e7f..7ffd75dd 100644 --- a/repository/includes-directory/index.html +++ b/repository/includes-directory/index.html @@ -1,4 +1,4 @@ - Includes | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Includes

    The includes/ directory contains reusable YAML libraries that support the repository’s build scripts.
    -These libraries provide structured data and helper content used to:

    +

    Includes Directory

    The includes/ directory contains supporting files used by the generation scripts. These files provide baseline data, configuration profile templates, and payload definitions.

    +
    +

    Files Reference

    Section titled “Files Reference”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FileDescription
    800-53_baselines.yamlNIST 800-53 control baseline definitions
    mscp-data.yamlProject metadata and configuration
    supported_payloads.yamlSupported configuration profile payloads
    pwpolicy.xmlPassword policy configuration template
    com.apple.alf.private_data.mobileconfigApplication firewall profile template
    com.apple.security.authorization.mobileconfigSecurity authorization profile template
    enablePF-mscp.shPacket filter enablement script
    +
    +

    Key Files

    Section titled “Key Files”
    +

    supported_payloads.yaml

    Section titled “supported_payloads.yaml”
    +

    Defines which configuration profile payloads the project supports. When adding custom rules that use new payloads, add them here.

    +

    800-53_baselines.yaml

    Section titled “800-53_baselines.yaml”
    +

    Contains the NIST 800-53 control mappings used by the -c flag in generate_baseline.py to output controls covered by rules.

    +

    mscp-data.yaml

    Section titled “mscp-data.yaml”
    +

    Project-wide metadata including version information and default settings.

    +
    +

    Directory Structure

    Section titled “Directory Structure”
    +
    • Directoryincludes/ +
      • 800-53_baselines.yaml
      • mscp-data.yaml
      • supported_payloads.yaml
      • pwpolicy.xml
      • com.apple.alf.private_data.mobileconfig
      • com.apple.security.authorization.mobileconfig
      • enablePF-mscp.sh
     +
    +

    Next Steps

    Section titled “Next Steps”
      -
    • Build validation scripts
      • -
    • Generate mobileconfig files
      • -
    • Assemble guide documents
      • +
    • Directory Layout - Repository structure overview
      • +
    • Customize Rules - Add custom payloads for new rules
    -

    Purpose:
    -Centralize supporting YAML files so scripts can efficiently parse and reuse information across different outputs.

    -

    Tip:
    -Keep this directory organized and up-to-date to ensure all scripts have access to the latest supporting data.

    \ No newline at end of file +
    \ No newline at end of file diff --git a/repository/rule-file-layout/index.html b/repository/rule-file-layout/index.html index 80886116..22b25923 100644 --- a/repository/rule-file-layout/index.html +++ b/repository/rule-file-layout/index.html @@ -1,4 +1,4 @@ - Rules File Layout | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Rules File Layout

    A rule file defines a single security control for macOS. Each rule is written in YAML and should follow the structure below.

    -

    Rule File Fields

    Section titled “Rule File Fields”
    -

    id

    Section titled “id”
    -

    A unique identifier for the rule. This should match the filename (without the .yaml extension).

    -

    title

    Section titled “title”
    -

    A human-readable title for the rule.

    -

    discussion

    Section titled “discussion”
    -

    A concise description of the rule’s intent and context.

    -

    check

    Section titled “check”
    -

    A shell-based or script-based check to validate compliance.

    -

    result

    Section titled “result”
    -

    The expected result from the check.

    -

    fix

    Section titled “fix”
    -

    Remediation steps or configuration to enforce the rule. If a fix includes [source,bash], it will be used for script generation.

    -

    references

    Section titled “references”
    -

    Mappings to CCEs, security frameworks, and controls relevant to the rule.

    -

    macOS

    Section titled “macOS”
    -

    The macOS versions for which this rule is validated.

    -

    odv

    Section titled “odv”
    -

    (Optional) Organization Defined Values. If present, should include a hint and default/recommended values.

    -

    tags

    Section titled “tags”
    -

    Keywords for categorizing and searching rules.

    -

    severity

    Section titled “severity”
    -

    The severity level of the rule (e.g., low, medium, high).

    -

    mobileconfig

    Section titled “mobileconfig”
    -

    Set to true if the rule can be enforced via a configuration profile.

    -

    mobileconfig_info

    Section titled “mobileconfig_info”
    -

    Required if mobileconfig is true. Contains the configuration profile payload.

    +

    Rule File Layout

    A rule file defines a single security control for macOS. Each rule is written in YAML and must follow the structure below.

    +
    +

    Required Fields

    Section titled “Required Fields”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FieldDescription
    idUnique identifier matching the filename (without .yaml)
    titleHuman-readable title for the rule
    discussionDescription of the rule’s intent and context
    checkShell command or script to validate compliance
    resultExpected result from the check
    fixRemediation steps or configuration to enforce the rule
    tagsKeywords for categorizing and filtering rules
    +
    +

    Optional Fields

    Section titled “Optional Fields”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FieldDescription
    referencesMappings to CCEs, security frameworks, and controls
    macOSmacOS versions this rule is validated for
    odvOrganization Defined Values with hint and defaults
    severitySeverity level (low, medium, high)
    mobileconfigSet to true if enforceable via configuration profile
    mobileconfig_infoConfiguration profile payload (required if mobileconfig is true)
    ddm_infoDDM configuration declaration (for DDM-supported settings)
    +
    +

    References Structure

    Section titled “References Structure”
    +

    The references field maps to various compliance frameworks:

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    KeyFramework
    cceCommon Configuration Enumeration
    cciControl Correlation Identifier
    800-53r5NIST SP 800-53 Rev 5
    800-53r4NIST SP 800-53 Rev 4
    800-171r3NIST SP 800-171 Rev 3
    srgSecurity Requirements Guide
    disa_stigDISA STIG identifiers
    cisCIS Benchmarks and Controls
    cmmcCMMC level mappings

    Example Rule File

    Section titled “Example Rule File”
    -
    id: system_settings_bluetooth_disable
    title: Disable Bluetooth When no Approved Device is Connected
    discussion: |
      The macOS system _MUST_ be configured to disable Bluetooth unless there is an approved device connected.
    
-
      [IMPORTANT]
      ====
      Information System Security Officers (ISSOs) may make the risk-based decision not to disable Bluetooth, so as to maintain necessary functionality, but they are advised to first fully weigh the potential risks posed to their organization.
      ====
    check: |
      /usr/bin/osascript -l JavaScript << EOS
      $.NSUserDefaults.alloc.initWithSuiteName('com.apple.MCXBluetooth')\
      .objectForKey('DisableBluetooth').js
      EOS
    result:
      string: 'true'
    fix: |
      This is implemented by a Configuration Profile.
    references:
      cce:
        - CCE-94352-2
      cci:
        - CCI-001967
        - CCI-002418
      800-53r5:
        - AC-18
        - SC-8
        - AC-18(3)
      800-53r4:
        - AC-18(3)
        - SC-8
      srg:
        - SRG-OS-000423-GPOS-00187
        - SRG-OS-000481-GPOS-00481
        - SRG-OS-000480-GPOS-00228
      disa_stig:
        - APPL-15-002062
      800-171r2:
        - 3.13.8
        - N/A
      800-171r3:
        - 03.01.16
        - 03.13.08
      cis:
        benchmark:
          - N/A
        controls v8:
          - 4.8
          - 12.6
          - 13.9
      cmmc:
        - AC.L2-3.1.16
    macOS:
      - '15.0'
    tags:
      - 800-53r5_low
      - 800-53r4_moderate
      - 800-53r4_high
      - 800-53r5_moderate
      - 800-53r5_high
      - 800-171
      - cisv8
      - cnssi-1253_low
      - cnssi-1253_high
      - cmmc_lvl2
      - stig
      - cnssi-1253_moderate
    severity: high
    mobileconfig: true
    mobileconfig_info:
      com.apple.ManagedClient.preferences:
        com.apple.MCXBluetooth:
          DisableBluetooth: true
    \ No newline at end of file +
    id: system_settings_bluetooth_disable
    title: Disable Bluetooth When no Approved Device is Connected
    discussion: |
      The macOS system _MUST_ be configured to disable Bluetooth unless
      there is an approved device connected.
    check: |
      /usr/bin/osascript -l JavaScript << EOS
      $.NSUserDefaults.alloc.initWithSuiteName('com.apple.MCXBluetooth')\
      .objectForKey('DisableBluetooth').js
      EOS
    result:
      string: 'true'
    fix: |
      This is implemented by a Configuration Profile.
    references:
      cce:
        - CCE-94352-2
      800-53r5:
        - AC-18
        - SC-8
      disa_stig:
        - APPL-15-002062
    macOS:
      - '15.0'
    tags:
      - 800-53r5_moderate
      - 800-53r5_high
      - stig
    severity: high
    mobileconfig: true
    mobileconfig_info:
      com.apple.ManagedClient.preferences:
        com.apple.MCXBluetooth:
          DisableBluetooth: true
    + +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/repository/script-arguments-list/index.html b/repository/script-arguments-list/index.html index 28d984fe..0db5962f 100644 --- a/repository/script-arguments-list/index.html +++ b/repository/script-arguments-list/index.html @@ -1,4 +1,4 @@ - Scripts Arugments List | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Scripts Arugments List

    This page explains the main scripts used for generating content in this repository, including their arguments and usage examples.

    +

    Script Arguments

    This page documents the command-line arguments for the main generation scripts.

    -

    generate_guidance.py

    Section titled “generate_guidance.py”
    -

    Generates various outputs from a baseline YAML file:

    +

    generate_guidance.py

    Section titled “generate_guidance.py”
    +

    Generates documentation, configuration profiles, compliance scripts, and DDM components from a baseline.

    +
    Terminal window
    ./scripts/generate_guidance.py [OPTIONS] BASELINE
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    ArgumentDescription
    BASELINEPath to the baseline YAML file (required)
    -h, --helpShow help message
    -a NAME, --audit_name NAMEName for audit plist and log (defaults to baseline name)
    -D, --ddmGenerate DDM components
    -l LOGO, --logo LOGOPath to logo file for the guide
    -p, --profilesGenerate individual configuration profiles
    -P, --consolidated-profileGenerate a single consolidated profile
    -r REFERENCE, --reference REFERENCEUse reference ID instead of rule ID
    -s, --scriptGenerate the compliance script
    -x, --xlsGenerate Excel document
    -H HASH, --hash HASHSign profiles with subject key ID
    + +
    +

    generate_baseline.py

    Section titled “generate_baseline.py”
    +

    Creates baseline YAML files by collecting rules with matching tags.

    +
    Terminal window
    ./scripts/generate_baseline.py [OPTIONS]
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    ArgumentDescription
    -h, --helpShow help message
    -c, --controlsOutput the 800-53 controls covered by the rules
    -k KEYWORD, --keyword KEYWORDTag to collect rules containing the tag
    -l, --list_tagsList available keyword tags
    -t, --tailorCustomize baseline with organization values
    + +
    +

    generate_scap.py

    Section titled “generate_scap.py”
    +

    Creates SCAP 1.4 datastream, XCCDF, and OVAL documents.

    +
    Terminal window
    ./scripts/generate_scap.py [OPTIONS]
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    ArgumentDescription
    -h, --helpShow help message
    -x, --xccdfGenerate XCCDF file only
    -o, --ovalGenerate OVAL file only
    -l, --list_tagsList available keyword tags
    -b BASELINE, --baseline BASELINEGenerate for a specific baseline
    -d FILE, --disastig FILEInclude DISA STIG references from file
    + +
    +

    generate_mapping.py

    Section titled “generate_mapping.py”
    +

    Creates custom rules and baselines for unsupported compliance frameworks.

    +
    Terminal window
    ./scripts/generate_mapping.py [OPTIONS] CSV_FILE
    + + + + + + + + + + + + + + + + + + + + + +
    ArgumentDescription
    CSV_FILEPath to CSV mapping file (required)
    -h, --helpShow help message
    -f FRAMEWORK, --framework FRAMEWORKSource framework to map from (default: 800-53r5)
    +
    +

    Next Steps

    Section titled “Next Steps”
    -

    Usage:

    -
    Terminal window
    python3 ./scripts/generate_guidance.py -h
    usage: generate_guidance.py [-h] [-l LOGO] [-p] [-r REFERENCE] [-s] [-x] [-H HASH] baseline
    
-
    Given a baseline, create guidance documents and files.
    
-
    positional arguments:
      baseline              Baseline YAML file used to create the guide.
    
-
    optional arguments:
      -h, --help            Show this help message and exit.
      -l LOGO, --logo LOGO  Full path to logo file to be included in the guide.
      -p, --profiles        Generate configuration profiles for the rules.
      -r REFERENCE, --reference REFERENCE
                            Use the reference ID instead of rule ID for identification.
      -s, --script          Generate the compliance script for the rules.
      -x, --xls             Generate the Excel (xls) document for the rules.
      -H HASH, --hash HASH  Sign the configuration profiles with subject key ID (hash value without spaces)
    - -

    Example:

    -
    baselines/800-53r5_moderate.yaml
    python3 scripts/generate_guidance.py baselines/800-53r5_moderate.yaml
    # Output:
    # Output path: /Users/mscp/src/macos_security/build/800-53r5_moderate/800-53r5_moderate.adoc
    # Generating HTML file from AsciiDoc...
    # Generating PDF file from AsciiDoc...
    -
    -

    generate_baseline.py

    Section titled “generate_baseline.py”
    -

    Creates a baseline.yaml file for content generation. The output is saved under build/baselines.

    -

    Usage:

    -
    Terminal window
    python3 scripts/generate_baseline.py -h
    usage: generate_baseline.py [-h] [-c] [-k KEYWORD] [-l] [-t]
    
-
    Given a keyword tag, generate a generic baseline.yaml file containing rules with the tag.
    
-
    optional arguments:
      -h, --help            Show this help message and exit.
      -c, --controls        Output the 800-53 controls covered by the rules.
      -k KEYWORD, --keyword KEYWORD
                            Keyword tag to collect rules containing the tag.
      -l, --list_tags       List the available keyword tags to search for.
      -t, --tailor          Customize the baseline to your organization's values.
    - -

    Example:

    -
    Terminal window
    python3 scripts/generate_baseline.py -k all_rules
    -
    -

    generate_scap.py

    Section titled “generate_scap.py”
    -

    Creates OVAL checks and SCAP content for compliance automation.

    -

    Usage:

    -
    Terminal window
    usage: generate_scap.py [-h] [-x] [-o] [-l] [-b BASELINE]
    
-
    Easily generate xccdf, oval, or scap datastream. If no option is defined, it will generate a SCAP datastream file.
    
-
    optional arguments:
      -h, --help            Show this help message and exit.
      -x, --xccdf           Generate an XCCDF file.
      -o, --oval            Generate an OVAL file of the checks.
      -l, --list_tags       List the available keyword tags to search for.
      -b BASELINE, --baseline BASELINE
                            Choose a baseline to generate an XML file for. If none is specified, it will generate for every rule found.
    -

    Example:

    -
    Terminal window
    git checkout monterey
    python3 scripts/generate_scap.py
    # Builds an SCAP 1.3 document in build/macOS_12.0_Security_Compliance_Benchmark-Revision_3.xml
    \ No newline at end of file +
    \ No newline at end of file diff --git a/repository/sections-file-layout/index.html b/repository/sections-file-layout/index.html index 1f05f5eb..88eed251 100644 --- a/repository/sections-file-layout/index.html +++ b/repository/sections-file-layout/index.html @@ -1,4 +1,4 @@ - Sections File Layout | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Sections File Layout

    The sections/ directory contains YAML files that define the major sections of your security guide. Each section file provides a name and a description, which are used to organize and present rules in generated documentation.

    +

    Sections File Layout

    The sections/ directory contains YAML files that define the major sections of your security guide. Each section file provides a name and description used to organize rules in generated documentation.

    +

    Section File Structure

    Section titled “Section File Structure”
    -
      -
    • -

      name:
      -The display name of the section as it will appear in the guide.

      -
      • -
    • -

      description:
      -A description of the section, shown in the guide for context.

      -
      • -
    + + + + + + + + + + + + + + + + + +
    FieldDescription
    nameDisplay name of the section in the guide
    descriptionDescription shown in the guide for context
    +

    Example Section File

    Section titled “Example Section File”
    name: "iCloud"
    description: |
      This section contains the configuration and enforcement of iCloud and the Apple ID service settings.
    
 
      NOTE: The check/fix commands outlined in this section _MUST_ be run by a user with elevated privileges.
    -

    Common Sections

    Section titled “Common Sections”
    -

    Below are typical section names you may find in this repository:

    -
    . auditing
    . authentication
    . icloud
    . inherent
    . macos
    . not_applicable
    . passwordpolicy
    . permanent
    . srg
    . supplemental
    . system_settings
    . systempreferences
    -

    Tip:
    -Keep section names and descriptions clear and concise to ensure guides are easy to navigate and understand.

    \ No newline at end of file +
    +

    Available Sections

    Section titled “Available Sections”
    +

    The project includes these section files:

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    SectionDescription
    auditing.yamlOpenBSM audit configuration
    authentication.yamlAuthentication and smartcard settings
    icloud.yamliCloud and Apple ID settings
    inherent.yamlInherent macOS security features
    macos.yamlGeneral macOS settings
    not_applicable.yamlRules not applicable to this platform
    passwordpolicy.yamlPassword policy settings
    permanent.yamlPermanently enabled security features
    srg.yamlSecurity Requirements Guide mappings
    supplemental.yamlAdditional supporting information
    systemsettings.yamlSystem Settings configuration
    + +
    +

    Next Steps

    Section titled “Next Steps”
    + +
    \ No newline at end of file diff --git a/scripts/github-branch-table.js b/scripts/github-branch-table.js new file mode 100644 index 00000000..ed735fe8 --- /dev/null +++ b/scripts/github-branch-table.js @@ -0,0 +1,261 @@ +// GitHub Branch Version Table Script +// Shows macOS version branches with their last update date + +const GITHUB_OWNER = 'usnistgov'; +const GITHUB_REPO = 'macos_security'; +const BRANCH_CONTAINER_ID = 'github-branch-table'; + +// Define the branches with their macOS version info +const BRANCHES = [ + { name: 'tahoe', macOS: 'macOS 26 (Tahoe)', current: true }, + { name: 'sequoia', macOS: 'macOS 15 (Sequoia)', current: false }, + { name: 'sonoma', macOS: 'macOS 14 (Sonoma)', current: false }, + { name: 'dev_2.0', macOS: 'mSCP 2.0 (Beta)', current: false, beta: true }, +]; + +function fetchBranchInfo(branchName) { + return fetch('https://api.github.com/repos/' + GITHUB_OWNER + '/' + GITHUB_REPO + '/branches/' + branchName) + .then(function(res) { + if (!res.ok) return null; + return res.json(); + }) + .then(function(data) { + if (!data) return null; + var commitDate = data.commit && data.commit.commit && data.commit.commit.author && data.commit.commit.author.date; + var sha = data.commit && data.commit.sha ? data.commit.sha.substring(0, 7) : null; + return { + lastCommit: commitDate, + sha: sha + }; + }) + .catch(function() { + return null; + }); +} + +function formatDate(dateString) { + if (!dateString) return 'N/A'; + return new Date(dateString).toLocaleDateString(undefined, { + year: 'numeric', + month: 'short', + day: 'numeric' + }); +} + +function renderBranchTable(branchData) { + var rows = branchData.map(function(branch) { + var badge = ''; + if (branch.current) { + badge = 'Current'; + } else if (branch.beta) { + badge = 'Beta'; + } + var dateDisplay = branch.info + ? formatDate(branch.info.lastCommit) + : 'Loading...'; + + return '' + + '' + + '' + + branch.name + + '' + + badge + + '' + + '' + branch.macOS + '' + + '' + dateDisplay + '' + + '' + + '' + + 'View commits →' + + '' + + '' + + ''; + }).join(''); + + return '
    ' + + '' + + '' + + '' + + '' + + '' + + '' + + '' + + '' + + '' + + '' + + rows + + '' + + '
    BranchmacOS VersionLast UpdatedHistory
    ' + + '
    '; +} + +function loadBranchTable() { + const container = document.getElementById(BRANCH_CONTAINER_ID); + if (!container) { + console.error('Branch table container not found'); + return; + } + + // Initial render with loading state + const initialData = BRANCHES.map(function(b) { return Object.assign({}, b, { info: null }); }); + container.innerHTML = renderBranchTable(initialData); + + // Fetch all branch info in parallel + var promises = BRANCHES.map(function(branch) { + return fetchBranchInfo(branch.name).then(function(info) { + return Object.assign({}, branch, { info: info }); + }); + }); + + Promise.all(promises).then(function(branchData) { + container.innerHTML = renderBranchTable(branchData); + }).catch(function(err) { + console.error('Error loading branch data:', err); + }); +} + +function injectBranchTableStyles() { + if (document.getElementById('github-branch-table-style')) return; + const style = document.createElement('style'); + style.id = 'github-branch-table-style'; + style.textContent = ` + .github-branch-table-wrapper { + margin: 1em 0; + border-radius: 12px; + overflow: hidden; + border: 1px solid var(--sl-color-gray-5, #ddd); + } + [data-theme="dark"] .github-branch-table-wrapper { + border-color: var(--sl-color-gray-5, #333); + } + .github-branch-table { + width: 100%; + border-collapse: collapse; + font-size: 0.95em; + } + .github-branch-table thead { + background: var(--sl-color-accent-low, #e8f5e9); + } + [data-theme="dark"] .github-branch-table thead { + background: rgba(49, 100, 49, 0.2); + } + .github-branch-table th { + text-align: left; + padding: 0.75em 1em; + font-weight: 600; + color: var(--sl-color-text, #333); + border-bottom: 2px solid var(--sl-color-accent, #316431); + } + [data-theme="dark"] .github-branch-table th { + color: var(--sl-color-white, #fff); + } + .github-branch-table td { + padding: 0.7em 1em; + border-bottom: 1px solid var(--sl-color-gray-6, #eee); + vertical-align: middle; + } + [data-theme="dark"] .github-branch-table td { + border-bottom-color: var(--sl-color-gray-5, #333); + } + .github-branch-table tbody tr:last-child td { + border-bottom: none; + } + .github-branch-table tbody tr:hover { + background: var(--sl-color-gray-7, #f9f9f9); + } + [data-theme="dark"] .github-branch-table tbody tr:hover { + background: rgba(255,255,255,0.03); + } + .branch-link { + color: var(--sl-color-accent, #316431); + font-weight: 600; + text-decoration: none; + } + .branch-link:hover { + text-decoration: underline; + } + [data-theme="dark"] .branch-link { + color: var(--sl-color-accent-high, #6ab549); + } + .branch-current-badge { + display: inline-block; + background: var(--sl-color-green, #316431); + color: #fff; + font-size: 0.7em; + font-weight: 600; + padding: 0.15em 0.5em; + border-radius: 4px; + margin-left: 0.5em; + vertical-align: middle; + } + [data-theme="dark"] .branch-current-badge { + background: var(--sl-color-green-high, #6ab549); + color: #111; + } + .branch-beta-badge { + display: inline-block; + background: var(--sl-color-orange, #f5a623); + color: #111; + font-size: 0.7em; + font-weight: 600; + padding: 0.15em 0.5em; + border-radius: 4px; + margin-left: 0.5em; + vertical-align: middle; + } + [data-theme="dark"] .branch-beta-badge { + background: var(--sl-color-orange-high, #ffc670); + color: #111; + } + .branch-date { + color: var(--sl-color-gray-2, #666); + } + [data-theme="dark"] .branch-date { + color: var(--sl-color-gray-3, #aaa); + } + .branch-commits-link { + color: var(--sl-color-gray-2, #666); + font-size: 0.9em; + text-decoration: none; + } + .branch-commits-link:hover { + color: var(--sl-color-accent, #316431); + text-decoration: underline; + } + [data-theme="dark"] .branch-commits-link { + color: var(--sl-color-gray-3, #aaa); + } + [data-theme="dark"] .branch-commits-link:hover { + color: var(--sl-color-accent-high, #6ab549); + } + .branch-loading { + color: var(--sl-color-gray-3, #999); + font-style: italic; + } + @media (max-width: 600px) { + .github-branch-table th, + .github-branch-table td { + padding: 0.5em 0.6em; + font-size: 0.9em; + } + .github-branch-table th:nth-child(4), + .github-branch-table td:nth-child(4) { + display: none; + } + } + `; + document.head.appendChild(style); +} + +// Run immediately if DOM is already loaded, otherwise wait for it +function init() { + console.log('Branch table script initializing...'); + injectBranchTableStyles(); + loadBranchTable(); + console.log('Branch table script initialized'); +} + +if (document.readyState === 'loading') { + document.addEventListener('DOMContentLoaded', init); +} else { + init(); +} diff --git a/scripts/github-latest-release.js b/scripts/github-latest-release.js index cff23073..3cd9a2b4 100644 --- a/scripts/github-latest-release.js +++ b/scripts/github-latest-release.js @@ -20,18 +20,35 @@ function renderReleaseInfo({ tag_name, name, html_url, published_at, body }) { (match, url) => `Full Changelog` ); - notes = `
    ${notes}
    `; + notes = `
    ${notes}
    `; } return `
    - - ${name || tag_name} - - (${tag_name}) - ${date ? `
    Released: ${date}
    ` : ''} +
    + + + + + +
    + + ${name || tag_name} + + ${tag_name} +
    +
    + ${date ? `
    Released: ${date}
    ` : ''} ${notes} -
    - +
    + + + + + + + Download + + View all releases →
    @@ -69,56 +86,151 @@ function injectReleaseBoxStyles() { style.id = 'github-release-style'; style.textContent = ` .github-release-info { - border-radius: 12px; - padding: 1.25em 1.5em; - margin: 1.5em 0; - border: 1px solid #cbd3d8ff; - background: var(--sl-color-bg, #fff); - color: var(--sl-color-text, #316431); - box-shadow: 0 2px 8px 0 rgba(60,60,60,0.06); - transition: background 0.2s, color 0.2s, border-color 0.2s; + border-radius: 8px; + padding: 1em 1.25em; + margin: 1em 0; + border: 1px solid var(--sl-color-gray-5, #ddd); + border-left: 3px solid var(--sl-color-accent, #316431); + background: transparent; + color: var(--sl-color-text, #333); + transition: border-color 0.15s ease; + } + .github-release-info:hover { + border-color: var(--sl-color-accent, #316431); + border-left-color: var(--sl-color-accent, #316431); } [data-theme="dark"] .github-release-info { - background: var(--sl-color-bg, #161b22); - color: var(--sl-color-text, #6ab549); - border-color: #2d3133ff; - box-shadow: 0 2px 8px 0 rgba(0,0,0,0.10); + background: transparent; + color: var(--sl-color-text, #ccc); + border-color: var(--sl-color-gray-5, #2a2d35); + border-left-color: var(--sl-color-accent-high, #6ab549); } - .github-release-info a { + [data-theme="dark"] .github-release-info:hover { + border-color: var(--sl-color-accent-high, #6ab549); + } + .github-release-header { + display: flex; + align-items: center; + gap: 0.75rem; + margin-bottom: 0.5rem; + } + .github-release-icon { color: var(--sl-color-accent, #316431); - text-decoration: none; - font-weight: 500; - transition: color 0.2s; + flex-shrink: 0; + opacity: 0.7; } - [data-theme="dark"] .github-release-info a { + [data-theme="dark"] .github-release-icon { color: var(--sl-color-accent-high, #6ab549); + opacity: 0.8; } - .github-release-info a:hover { + .github-release-title-group { + display: flex; + align-items: center; + flex-wrap: wrap; + gap: 0.5rem; + } + .github-release-title { + color: var(--sl-color-text, #111); + font-size: 1.15em; + font-weight: 600; + text-decoration: none; + } + .github-release-title:hover { text-decoration: underline; } - .github-release-info span { - color: #888; - font-size: 0.9em; - } - [data-theme="dark"] .github-release-info span { - color: #aaa; - } - .github-release-info strong { - color: #111; - font-size: 1.08em; - } - [data-theme="dark"] .github-release-info strong { + [data-theme="dark"] .github-release-title { color: #fff; } + .github-release-tag { + background: rgba(0,0,0,0.06); + color: var(--sl-color-gray-2, #666); + font-size: 0.75em; + font-weight: 600; + padding: 0.2em 0.6em; + border-radius: 4px; + } + [data-theme="dark"] .github-release-tag { + background: rgba(255,255,255,0.1); + color: var(--sl-color-gray-2, #aaa); + } + .github-release-date { + font-size: 0.9em; + color: var(--sl-color-gray-3, #666); + margin-bottom: 0.5rem; + } + [data-theme="dark"] .github-release-date { + color: var(--sl-color-gray-2, #aaa); + } .github-release-notes { + margin-top: 0.75em; + font-size: 0.95em; + color: var(--sl-color-text, #444); + white-space: pre-line; overflow-wrap: anywhere; word-break: break-word; + padding: 0.75em; + background: rgba(0,0,0,0.015); + border-radius: 6px; + border: 1px solid rgba(0,0,0,0.04); + } + [data-theme="dark"] .github-release-notes { + background: rgba(255,255,255,0.02); + border-color: rgba(255,255,255,0.05); + } + .github-release-links { + display: flex; + align-items: center; + gap: 1rem; + margin-top: 1rem; + flex-wrap: wrap; + } + .github-release-btn { + display: inline-flex; + align-items: center; + gap: 0.4rem; + background: var(--sl-color-accent, #316431); + color: #fff !important; + padding: 0.5em 1em; + border-radius: 6px; + font-size: 0.9em; + font-weight: 500; + text-decoration: none !important; + transition: background 0.2s, transform 0.2s; + } + .github-release-btn:hover { + opacity: 0.9; + transform: translateY(-1px); + } + [data-theme="dark"] .github-release-btn { + background: var(--sl-color-accent-high, #6ab549); + color: #111 !important; + } + [data-theme="dark"] .github-release-btn:hover { + opacity: 0.9; + } + .github-release-link { + color: var(--sl-color-accent, #316431); + font-size: 0.9em; + text-decoration: none; + } + .github-release-link:hover { + text-decoration: underline; + } + [data-theme="dark"] .github-release-link { + color: var(--sl-color-accent-high, #6ab549); } `; document.head.appendChild(style); } -window.addEventListener('DOMContentLoaded', () => { +// Run immediately if DOM is already loaded, otherwise wait for it +function initRelease() { injectReleaseBoxStyles(); fetchLatestRelease(); -}); +} + +if (document.readyState === 'loading') { + document.addEventListener('DOMContentLoaded', initRelease); +} else { + initRelease(); +} diff --git a/sitemap-0.xml b/sitemap-0.xml index 61383a95..2419167b 100644 --- a/sitemap-0.xml +++ b/sitemap-0.xml @@ -1 +1 @@ -https://pages.nist.gov/macos_securityhttps://pages.nist.gov/macos_security/baselines/baseline-file-layout/https://pages.nist.gov/macos_security/baselines/how-to-generate-baselines/https://pages.nist.gov/macos_security/baselines/tailoring-a-baseline/https://pages.nist.gov/macos_security/baselines/what-are-baselines/https://pages.nist.gov/macos_security/compliance-scripts/compliance-script-layout/https://pages.nist.gov/macos_security/compliance-scripts/how-to-generate-compliance-scripts/https://pages.nist.gov/macos_security/compliance-scripts/what-are-compliance-scripts/https://pages.nist.gov/macos_security/configuration-profiles/configuration-profile-layout/https://pages.nist.gov/macos_security/configuration-profiles/how-to-generate-configuration-profiles/https://pages.nist.gov/macos_security/configuration-profiles/what-are-configuration-profiles/https://pages.nist.gov/macos_security/ddm-components/ddm-component-layout/https://pages.nist.gov/macos_security/ddm-components/how-to-generate-ddm-components/https://pages.nist.gov/macos_security/ddm-components/what-is-ddm/https://pages.nist.gov/macos_security/guidance/guidance-file-example/https://pages.nist.gov/macos_security/guidance/how-to-generate-guidance/https://pages.nist.gov/macos_security/guidance/what-is-guidance/https://pages.nist.gov/macos_security/more-information/additional-documents/https://pages.nist.gov/macos_security/more-information/contributing/https://pages.nist.gov/macos_security/more-information/faq/https://pages.nist.gov/macos_security/more-information/resources/https://pages.nist.gov/macos_security/more-information/vendor-attribution/https://pages.nist.gov/macos_security/other/generate-mapping/https://pages.nist.gov/macos_security/other/generate-scap/https://pages.nist.gov/macos_security/personalization/customize-rules/https://pages.nist.gov/macos_security/personalization/exempting-rules/https://pages.nist.gov/macos_security/personalization/tailoring-rules/https://pages.nist.gov/macos_security/repository/directory-layout/https://pages.nist.gov/macos_security/repository/includes-directory/https://pages.nist.gov/macos_security/repository/rule-file-layout/https://pages.nist.gov/macos_security/repository/script-arguments-list/https://pages.nist.gov/macos_security/repository/sections-file-layout/https://pages.nist.gov/macos_security/welcome/getting-started/https://pages.nist.gov/macos_security/welcome/introduction/https://pages.nist.gov/macos_security/welcome/quick-guide/ \ No newline at end of file +https://pages.nist.gov/macos_security/https://pages.nist.gov/macos_security/baselines/baseline-file-layout/https://pages.nist.gov/macos_security/baselines/how-to-generate-baselines/https://pages.nist.gov/macos_security/baselines/tailoring-a-baseline/https://pages.nist.gov/macos_security/baselines/what-are-baselines/https://pages.nist.gov/macos_security/compliance-scripts/compliance-script-layout/https://pages.nist.gov/macos_security/compliance-scripts/how-to-generate-compliance-scripts/https://pages.nist.gov/macos_security/compliance-scripts/what-are-compliance-scripts/https://pages.nist.gov/macos_security/configuration-profiles/configuration-profile-layout/https://pages.nist.gov/macos_security/configuration-profiles/how-to-generate-configuration-profiles/https://pages.nist.gov/macos_security/configuration-profiles/what-are-configuration-profiles/https://pages.nist.gov/macos_security/ddm-components/ddm-component-layout/https://pages.nist.gov/macos_security/ddm-components/how-to-generate-ddm-components/https://pages.nist.gov/macos_security/ddm-components/what-is-ddm/https://pages.nist.gov/macos_security/guidance/guidance-file-example/https://pages.nist.gov/macos_security/guidance/how-to-generate-guidance/https://pages.nist.gov/macos_security/guidance/what-is-guidance/https://pages.nist.gov/macos_security/more-information/additional-documents/https://pages.nist.gov/macos_security/more-information/contributing/https://pages.nist.gov/macos_security/more-information/faq/https://pages.nist.gov/macos_security/more-information/resources/https://pages.nist.gov/macos_security/more-information/vendor-attribution/https://pages.nist.gov/macos_security/mscp-2/overview/https://pages.nist.gov/macos_security/other/generate-mapping/https://pages.nist.gov/macos_security/other/generate-scap/https://pages.nist.gov/macos_security/personalization/customize-rules/https://pages.nist.gov/macos_security/personalization/exempting-rules/https://pages.nist.gov/macos_security/personalization/tailoring-rules/https://pages.nist.gov/macos_security/repository/directory-layout/https://pages.nist.gov/macos_security/repository/includes-directory/https://pages.nist.gov/macos_security/repository/rule-file-layout/https://pages.nist.gov/macos_security/repository/script-arguments-list/https://pages.nist.gov/macos_security/repository/sections-file-layout/https://pages.nist.gov/macos_security/welcome/getting-started/https://pages.nist.gov/macos_security/welcome/introduction/https://pages.nist.gov/macos_security/welcome/quick-guide/ \ No newline at end of file diff --git a/welcome/getting-started/index.html b/welcome/getting-started/index.html index 281fec13..69cf1294 100644 --- a/welcome/getting-started/index.html +++ b/welcome/getting-started/index.html @@ -1,4 +1,4 @@ - Getting Started | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Getting Started

    The macOS Security Compliance Project is developed and maintained on GitHub.
    -Each branch of the repository contains the rules and resources specific to a particular macOS version. To work with the project or run its workflows, there are some prerequisites you need to install first.

    +

    Getting Started

    Get the project files on your Mac and install the required packages. This takes about 5 minutes.

    +
    -

    Prerequisites

    Section titled “Prerequisites”
    -

    Before you begin, ensure you have the following installed on your system:

    -
      -
    • Git (optional, only needed if you want to clone the repository instead of downloading files directly from GitHub)
      -Download Git or use your system’s package manager (see note below).
      • -
    • Python 3 (required for running the project scripts and generating files)
      -Download Python or install via your package manager (see note below). -
        -
      • Python modules: -
          -
        • pyyaml
          • -
        • xlwt
          • -
        • These can be installed using pip after Python is set up.
          -For example: +

          Setup

          Section titled “Setup”
          +
            +
          1. +

            Install Python Packages

            Section titled “Install Python Packages”
            +

            macOS includes Python 3. Just install the required packages:

            Terminal window
            pip3 install pyyaml xlwt --user
            +

            Optional — for PDF output, also install Ruby gems:

            +
            Terminal window
            gem install asciidoctor asciidoctor-pdf rouge --user-install
            +
            Want isolated installs? Click to expand

            A virtual environment keeps packages separate from your system Python — useful if you don’t want to install packages globally or need to avoid conflicts.

            Python virtual environment:

            Terminal window
            # Create environment (once)
            python3 -m venv venv
            
+
            # Activate before running scripts
            source venv/bin/activate
            
+
            # Install packages inside the environment
            pip3 install -r requirements.txt
            
+
            # When done, deactivate
            deactivate

            Ruby local bundle:

            Terminal window
            bundle install --path vendor/bundle
            2. -
        +
      • +

        Get the Repository

        Section titled “Get the Repository”
        +

        Option A: Clone with Git (recommended)

        +
        Terminal window
        git clone https://github.com/usnistgov/macos_security.git
        cd macos_security
        git checkout sequoia
        +

        Replace sequoia with your target macOS version.

        +

        Option B: Download ZIP

        +
          +
        1. Go to the GitHub repository
          2. +
        2. Click the branch dropdown and select your macOS version
          3. +
        3. Click Code → Download ZIP
          4. +
        4. Extract and open the folder
          5. +
        • -
      +
    • +

      Verify Setup

      Section titled “Verify Setup”
      +

      Run this command to confirm everything works:

      +
      Terminal window
      ./scripts/generate_baseline.py -l
      +

      You should see a list of available baselines.

      • -
    • Ruby (optional, only needed for working with certain documentation formats)
      -Download Ruby or install via your package manager (see note below). + +
      +

      What You Can Do

      Section titled “What You Can Do”
      +

      With the project set up, you can:

        -
      • Gems: -
          -
        • asciidoctor
          • -
        • asciidoctor-pdf
          • -
        • rouge
          • -
        • These can be installed using gem or bundle after Ruby is set up.
          • -
        -
        • -
      -
      • +
    • Generate baselines — Create YAML files for security frameworks (NIST, CIS, DISA STIG, etc.)
      • +
    • Generate guidance — Produce HTML/PDF documentation for your baseline
      • +
    • Create configuration profiles — Deploy settings via MDM
      • +
    • Run compliance checks — Scan Macs against your baseline
      • +
    • Customize rules — Tailor settings to your organization’s needs
    -

    Downloading the Repository

    Section titled “Downloading the Repository”
    -

    You can obtain the project files in one of two ways:

    +

    Next Steps

    Section titled “Next Steps”
    +
    Quick Guide Step-by-step workflow for generating security compliance files.
    +

    Or explore specific topics:

    • -

      Download directly from GitHub:

      -

      Visit the GitHub repository, select the branch that matches your target OS version (e.g., sequoia) using the branch dropdown, then use the “Download ZIP” option.

      - -If you download the ZIP for the correct branch, you can skip to Working with Project Files. +How to Generate Baselines
      • -
    -

    OR

    -
    • -

      Clone using Git:

      -
      Terminal window
      git clone https://github.com/usnistgov/macos_security.git
      cd macos_security
      -

      Then, continue below to select the correct branch.

      +How to Generate Guidance
      • -
    -
    -

    Selecting the Correct Branch

    Section titled “Selecting the Correct Branch”
    -

    Before you begin working, select the repository branch that corresponds to the macOS version you intend to work with.

    - -

    To switch to the appropriate branch:

    -
    Terminal window
    git checkout sequoia
    -
    -

    Working with Project Files

    Section titled “Working with Project Files”
    -

    All the files you will work with are located in the macos_security folder. The contents of this folder are specific to the branch you have selected and include the tools and resources required to generate project outputs.

    -

    Within this folder, you can:

    -
      -
    • Generate baselines
      • -
    • Produce guidance documentation
      • -
    • Create DDM and SCAP content
      • -
    • Generate mappings and compliance scripts
      • -
    • Make exemptions
      • -
    • Customize and tailor the output content to your needs
      • -
    -

    For next steps, feel free to check out the Quick Guide for a quick overview, explore the Guides section of this website, or visit the project’s wiki.

    \ No newline at end of file +
  • +How to Generate Configuration Profiles +
    • +
    \ No newline at end of file diff --git a/welcome/introduction/index.html b/welcome/introduction/index.html index 3db000db..4f9e0513 100644 --- a/welcome/introduction/index.html +++ b/welcome/introduction/index.html @@ -1,4 +1,4 @@ - Introduction | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Introduction

    The macOS Security Compliance Project is an open source initiative providing a programmatic approach to generating security guidance for macOS. This project enables the creation of customized security baselines by leveraging a comprehensive library of rules mapped to compliance requirements from established security guides, or for developing custom guidance.

    -

    By mapping security-enhancing rules to existing guides and policies, this project supports multiple security frameworks and regulated industry policies. Documentation and QA are uniformly managed, simplifying and accelerating the annual update process through unified and standardized efforts.

    +

    Introduction

    The macOS Security Compliance Project (mSCP) is an open source effort to provide a programmatic approach to generating security guidance for macOS.

    +

    The project maintains a library of security rules, each mapped to one or more compliance frameworks (NIST 800-53, CIS Benchmarks, DISA STIG, and others). You select a framework, run a script, and generate tailored outputs: baseline YAML files, human-readable guidance documents, MDM configuration profiles, and shell scripts for checking and remediating settings.

    +

    mSCP was created by a collaboration of federal agencies including NIST, NASA, DISA, and Los Alamos National Lab. It is recognized by Apple and updated with each major macOS release to ensure guidance stays current.

    + +
    +

    What You Get

    Section titled “What You Get”
    +

    Run the scripts and generate:

    +
      +
    • Security baselines - YAML files defining which rules apply to your environment
      • +
    • Guidance documents - HTML and PDF documentation for auditors and teams
      • +
    • Configuration profiles - Ready-to-deploy .mobileconfig files for MDM
      • +
    • Compliance scripts - Shell scripts to check and fix settings on any Mac
      • +
    • SCAP/OVAL content - For compliance scanning tools
      • +
    +
    +

    Who It’s For

    Section titled “Who It’s For”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    RoleHow You’ll Use It
    System AdministratorsGenerate profiles and scripts to harden Macs
    Security ProfessionalsAudit systems against compliance frameworks
    Policy AuthorsCreate or customize baselines for your org
    MDM/Compliance VendorsIntegrate trusted security guidance into products
    Privacy OfficersVerify privacy controls are in place
    +
    +

    Supported Frameworks

    Section titled “Supported Frameworks”
    +

    Government

    Industry

    International

    • indigo Germany, iOS only
    • BIO Netherlands
    • NLMAPGOV Apple Baselines Base, Plus
    +

    Why This Project?

    Section titled “Why This Project?”
      -
    • Accelerate Adoption: Ensure guidance is available for new OS/hardware releases.
      • -
    • Reduce Global Effort: Unify and consolidate compliance work into a single project.
      • -
    • Foster Collaboration: Develop methodologies to reduce overhead and redundancy among baseline authors.
      • -
    • Standardize Controls: Unify the approach to setting security controls.
      • -
    • Inform Vendors: Provide MDM/EMM/security/audit vendors and Apple with insight into customer hardening needs.
      • -
    - -
    -

    Supported Publications

    Section titled “Supported Publications”
    -

    The project includes guidance from the following sources:

    -

    Government Publications

    Section titled “Government Publications”
    -
      -
    • NIST 800-53 (link) -
        -
      • FISMA High
        • -
      • FISMA Moderate
        • -
      • FISMA Low
        • -
      -
      • -
    • NIST 800-171 (link)
      • -
    • DISA STIG (link)
      • -
    • CMMC 2.0 (link)
      • -
    • CNSSI-1253 (link)
      • -
    • indigo (link) -
        -
      • indigo Base (iOS Only)
        • -
      • indigo High (iOS Only)
        • -
      -
      • -
    • BIO (Link and Link)
      • -
    • NLMAPGOV Apple Baselines -
        -
      • NLMAPGOV Base
        • -
      • NLMAPGOV Plus
        • -
      -
      • -
    -

    Non-Governmental Standards

    Section titled “Non-Governmental Standards”
    -
      -
    • CIS Benchmarks (link)
      • -
    • CIS Critical Security Controls v8 (link)
      • +
    • Ready when you are - Guidance available for new macOS releases
      • +
    • Single source of truth - One project, many frameworks
      • +
    • Community-driven - Collaborate instead of duplicating effort
      • +
    • Recognized by Apple - Built with input from Apple’s security team

    Development Team

    Section titled “Development Team”
    -

    This project is a collaboration between federal IT Security staff and macOS Administrators, published by:

    +

    A collaboration between federal IT security staff and macOS administrators:

    -
    -

    Objective

    Section titled “Objective”
    -

    To develop an extensible, modern approach to security guidance usable by any organization (Government, Enterprise, Education) needing to adhere to security compliance frameworks and policy. Project outputs include scripts, documentation, and configuration profile payloads for use with modern management tools.

    -
    -

    Audience

    Section titled “Audience”
    -
      -
    • System Administrators: Generate baseline documentation, configuration profile payloads, and scripts.
      • -
    • Security Professionals: Review reporting of applied controls against guidance.
      • -
    • Policy Authors: Map policy metadata to a library of verified controls to create or update baselines.
      • -
    • MDM/EMM/Security/Compliance Tool Vendors: Support configuration, verification, and reporting of security guidance and controls in products using trusted source material.
      • -
    • Privacy Officers: Ensure adequate privacy controls are enabled for institutional organizations.
      • -
    \ No newline at end of file +
    \ No newline at end of file diff --git a/welcome/quick-guide/index.html b/welcome/quick-guide/index.html index 538a10c5..2fc7b531 100644 --- a/welcome/quick-guide/index.html +++ b/welcome/quick-guide/index.html @@ -1,4 +1,4 @@ - Quick Guide | mSCP - Skip to content
    mSCP
    Skip to content
    mSCP

    Quick Guide

    If you’re new to the project, start with this Quick Guide for a high-level overview of the workflow. After reviewing these steps, check out each step’s corresponding “How To” section in the documentation menu. These sections explain in more detail what each step does, why it’s important, and what outputs to expect.

    -

    This quick guide provides a high-level overview of the steps required to generate all files with the macOS Security Compliance Project.

    - -
    1. 1. Prepare Your Environment
      • Ensure all prerequisites are installed (Python, required modules, etc.).
      • Download or clone the repository.
    2. 2. Verify and Select the Correct Branch
      • Checkout the branch that matches your target OS version (e.g., sequoia).
    3. 3. Generate a Baseline
    4. 4. Personalize: Customize RulesOptional
      • Customize rules by modifying or adding rule YAML files in the custom folder as needed.
    5. 5. Generate Guidance DocumentationOptional
    6. 6. Generate Configuration Profiles
      • Add the -p flag to generate_guidance.py to generate configuration profiles for supported rules.
    7. 7. Generate DDM Content
      • Add the -D flag to generate_guidance.py to generate Declarative Device Management (DDM) components.
    8. 8. Generate Compliance Scripts
      • Add the -s flag to generate_guidance.py to generate a compliance script for automated checking and remediation.
    9. 9. Make ExemptionsOptional
      • Customize or exempt specific rules as needed for your environment.
    -
    \ No newline at end of file +

    Quick Guide

    + + +
    +

    5-Step Workflow

    Section titled “5-Step Workflow”
    +Already completed Getting Started? Skip to Step 3: Generate a Baseline. +
      +
    1. +

      Install Prerequisites

      Section titled “Install Prerequisites”
      +

      macOS includes Python 3 and Ruby. You just need to install the packages:

      +

      Python packages (required):

      +
      Terminal window
      pip3 install pyyaml xlwt --user
      +

      Ruby gems (optional — only needed for PDF output):

      +
      Terminal window
      gem install asciidoctor asciidoctor-pdf rouge --user-install
      +
      Want isolated installs? Click to expand

      A virtual environment keeps packages separate from your system Python — useful if you don’t want to install packages globally or need to avoid conflicts.

      Python virtual environment:

      Terminal window
      # Create environment (once)
      python3 -m venv venv
      
+
      # Activate before running scripts
      source venv/bin/activate
      
+
      # Install packages inside the environment
      pip3 install -r requirements.txt
      
+
      # When done, deactivate
      deactivate

      Ruby local bundle:

      Terminal window
      bundle install --path vendor/bundle
      +
      2. +
    2. +

      Clone & Checkout Branch

      Section titled “Clone & Checkout Branch”
      +
      Terminal window
      git clone https://github.com/usnistgov/macos_security.git
      cd macos_security
      git checkout sequoia
      +

      Replace sequoia with your target macOS version.

      +
      3. +
    3. +

      Generate a Baseline

      Section titled “Generate a Baseline”
      +

      List baselines: ./scripts/generate_baseline.py -l

      Generate: ./scripts/generate_baseline.py -k BASELINE_NAME

      With tailoring: ./scripts/generate_baseline.py -k BASELINE_NAME -t

      +
      Terminal window
      # Example: Generate NIST 800-53 Moderate baseline
      ./scripts/generate_baseline.py -k 800-53r5_moderate
      +
      4. +
    4. +

      Generate Outputs

      Section titled “Generate Outputs”
      +

      Run generate_guidance.py with the flags you need:

      +
      Terminal window
      ./scripts/generate_guidance.py [flags] baselines/BASELINE_NAME.yaml
      + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
      FlagOutput
      (none)Guidance docs (.adoc, .html, .pdf)
      -sCompliance script
      -pConfiguration profiles (one per payload)
      -PSingle consolidated profile
      -DDDM components
      -xExcel spreadsheet
      +

      Example — Generate all common outputs:

      +
      Terminal window
      ./scripts/generate_guidance.py -s -p -x baselines/800-53r5_moderate.yaml
      +
      5. +
    5. +

      Use Your Files

      Section titled “Use Your Files”
      +

      Everything goes to build/BASELINE_NAME/:

      +
      build/800-53r5_moderate/
      ├── 800-53r5_moderate.adoc
      ├── 800-53r5_moderate.html
      ├── 800-53r5_moderate.pdf
      ├── 800-53r5_moderate_compliance.sh
      ├── mobileconfigs/
      ├── preferences/
      ├── activations/    ← DDM (if -D used)
      ├── assets/
      └── configurations/
      +
      6. +
    +
    +

    Running the Compliance Script

    Section titled “Running the Compliance Script”
    + +

    Interactive mode:

    +
    Terminal window
    sudo ./build/800-53r5_moderate/800-53r5_moderate_compliance.sh
    +

    Automated mode:

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FlagWhat it does
    --checkRun checks only
    --fixRun fixes only
    --cfcCheck → Fix → Check
    --statsShow last run statistics
    --compliantReport compliant count
    --non_compliantReport non-compliant count
    --resetClear results for this baseline
    --reset-allClear results for all baselines
    --quiet=1Show failed/exempt only
    --quiet=2Minimal output
    +
    Terminal window
    # Quick check
    sudo ./build/800-53r5_moderate/800-53r5_moderate_compliance.sh --check
    
+
    # Full remediation
    sudo ./build/800-53r5_moderate/800-53r5_moderate_compliance.sh --cfc --quiet=2
    +
    +

    Available Baselines

    Section titled “Available Baselines”
    +

    Example baselines (may vary by branch):

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FrameworkBaseline Name
    NIST 800-53 Rev 5800-53r5_high, 800-53r5_moderate, 800-53r5_low
    NIST 800-171800-171
    DISA STIGDISA-STIG
    CIS Benchmarkscis_lvl1, cis_lvl2, cisv8
    CMMC 2.0cmmc_lvl1, cmmc_lvl2
    CNSSI 1253cnssi-1253_high, cnssi-1253_moderate, cnssi-1253_low
    All Rulesall_rules
    +
    +

    Script Reference

    Section titled “Script Reference”
    +

    generate_baseline.py

    Section titled “generate_baseline.py”
    +

    Creates the baseline YAML file.

    + + + + + + + + + + + + + + + + + + + + + + + + + +
    FlagPurpose
    -lList available baselines
    -k NAMEGenerate baseline
    -tInteractive tailoring
    -cShow 800-53 controls
    +

    generate_guidance.py

    Section titled “generate_guidance.py”
    +

    Generates all outputs from a baseline.

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FlagPurpose
    -sCompliance script
    -pConfig profiles
    -PConsolidated profile
    -DDDM components
    -xExcel file
    -l LOGOCustom logo
    -H HASHSign profiles
    -a NAMECustom audit name
    -r REFCustom reference ID
    +

    generate_scap.py

    Section titled “generate_scap.py”
    +

    Generates SCAP/OVAL content for compliance scanning tools.

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FlagPurpose
    -xXCCDF file
    -oOVAL file
    -b NAMESpecific baseline
    -d FILEInclude DISA STIG references from file
    -lList tags
    +
    +

    Common Workflows

    Section titled “Common Workflows”
    +

    Compliance Check

    Section titled “Compliance Check”
    +

    Scan a Mac for compliance issues:

    +
    Terminal window
    ./scripts/generate_baseline.py -k 800-53r5_moderate
    ./scripts/generate_guidance.py -s baselines/800-53r5_moderate.yaml
    sudo ./build/800-53r5_moderate/800-53r5_moderate_compliance.sh --check
    +

    MDM Deployment Package

    Section titled “MDM Deployment Package”
    +

    Generate profiles and DDM for device management:

    +
    Terminal window
    ./scripts/generate_baseline.py -k DISA-STIG -t
    ./scripts/generate_guidance.py -p -D -s build/baselines/DISA-STIG.yaml
    +

    Full Documentation Set

    Section titled “Full Documentation Set”
    +

    Create all outputs for documentation and audit:

    +
    Terminal window
    ./scripts/generate_baseline.py -k cis_lvl2
    ./scripts/generate_guidance.py -s -p -x baselines/cis_lvl2.yaml
    +
    +

    Customization Options

    Section titled “Customization Options”
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    OptionDescriptionLink
    Tailor BaselineSelect rules and set Organization Defined ValuesLearn more →
    Customize RulesModify rules in custom/rules/ folderLearn more →
    Exempt RulesMark rules as approved exceptionsLearn more →
    Sign ProfilesSign with your certificate using -H HASHLearn more →
    \ No newline at end of file