@backthread/extractor 0.1.0

package/dist/infra/terraform/hcl-parse.d.ts

@@ -0,0 +1,34 @@
+export interface HclBlock {
+    type: string;
+    labels: string[];
+    body: string;
+    /**
+     * repo-relative dir of the `.tf`/`.tofu` file this block came from
+     * ('' = repo root). parseHcl doesn't set it (it parses one text blob); the
+     * adapter's extract() stamps it per file so source-dir attributes (and
+     * `${path.module}` refs) resolve against the right module dir.
+     */
+    dir?: string;
+}
+/** Parse top-level HCL blocks. Nested blocks stay inside their parent's body. */
+export declare function parseHcl(text: string): HclBlock[];
+/**
+ * The "reference surface" of an HCL body: the text where a resource reference
+ * could legitimately live — bare HCL traversals (outside any string) plus the
+ * contents of `${…}` interpolations (which may sit inside strings). PR #9
+ * review: a plain substring scan matched addresses inside prose
+ * (`description = "see aws_lambda_function.api docs"`) and invented phantom
+ * edges. Stripping string prose (but keeping interpolations) + dropping heredoc
+ * bodies removes that false-positive class. Bias is toward MISSING a reference
+ * over INVENTING one — an absent edge is recoverable, a phantom edge lies.
+ */
+export declare function referenceSurface(body: string): string;
+/**
+ * Whether `text` references the Terraform address `addr` (e.g. `aws_x.api` or
+ * `data.aws_y.foo`). Matches the address not preceded by a word char/dot and
+ * not followed by a word char — so attribute access (`addr.arn`) counts but a
+ * longer sibling name (`addr2`) does not. Callers pass `referenceSurface(body)`
+ * so prose inside string literals can't produce phantom matches.
+ */
+export declare function bodyReferences(text: string, addr: string): boolean;
+//# sourceMappingURL=hcl-parse.d.ts.map

package/dist/infra/terraform/hcl-parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hcl-parse.d.ts","sourceRoot":"","sources":["../../../src/infra/terraform/hcl-parse.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA4ED,iFAAiF;AACjF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,CA0BjD;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkDrD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAOlE"}

package/dist/infra/terraform/hcl-parse.js

@@ -0,0 +1,203 @@
+// a dependency-free HCL-subset parser.
+//
+// DECISION (v0): rather than take an npm HCL dependency (the ticket floats
+// `hcl2-parser` "if mature"), we parse the HCL SUBSET Terraform configs use
+// with the standard library only. Rationale: (1) it preserves the phase's
+// vitest pure-import invariant — a parser that drags no transitive deps stays
+// unit-testable in isolation; (2) it avoids a supply-chain dependency on an
+// HCL parser of uncertain maintenance for a v0; (3) the dogfood repo (backthread) has
+// no `.tf` at all, so Terraform support is validated by fixtures, not the
+// dogfood. The subset covers what the topology needs: top-level blocks
+// (provider / resource / data / module / variable / output …), their labels,
+// and the raw body text (for cross-resource reference scanning). It does NOT
+// evaluate expressions, resolve variables, or recurse into module sources —
+// those are tracked refinements, not v0 requirements.
+// Strip `#` and `//` line comments and C-style block comments (string-aware).
+function stripComments(text) {
+    let out = '';
+    let inString = false;
+    let escaped = false;
+    for (let i = 0; i < text.length; i++) {
+        const c = text[i];
+        const next = text[i + 1];
+        if (inString) {
+            out += c;
+            if (escaped)
+                escaped = false;
+            else if (c === '\\')
+                escaped = true;
+            else if (c === '"')
+                inString = false;
+            continue;
+        }
+        if (c === '"') {
+            inString = true;
+            out += c;
+            continue;
+        }
+        if (c === '#') {
+            while (i < text.length && text[i] !== '\n')
+                i++;
+            out += '\n';
+            continue;
+        }
+        if (c === '/' && next === '/') {
+            while (i < text.length && text[i] !== '\n')
+                i++;
+            out += '\n';
+            continue;
+        }
+        if (c === '/' && next === '*') {
+            i += 2;
+            while (i < text.length && !(text[i] === '*' && text[i + 1] === '/'))
+                i++;
+            i++;
+            continue;
+        }
+        out += c;
+    }
+    return out;
+}
+// Index of the `}` matching the `{` at openIndex (string-aware brace balance).
+function matchBrace(src, openIndex) {
+    let depth = 0;
+    let inString = false;
+    let escaped = false;
+    for (let i = openIndex; i < src.length; i++) {
+        const c = src[i];
+        if (inString) {
+            if (escaped)
+                escaped = false;
+            else if (c === '\\')
+                escaped = true;
+            else if (c === '"')
+                inString = false;
+            continue;
+        }
+        if (c === '"')
+            inString = true;
+        else if (c === '{')
+            depth++;
+        else if (c === '}') {
+            depth--;
+            if (depth === 0)
+                return i;
+        }
+    }
+    return src.length - 1; // unbalanced — treat rest of file as the body
+}
+function parseLabels(raw) {
+    const labels = [];
+    const re = /"([^"]*)"|([A-Za-z0-9_.-]+)/g;
+    let m;
+    while ((m = re.exec(raw)))
+        labels.push(m[1] ?? m[2]);
+    return labels;
+}
+const HEADER = /^([A-Za-z_]\w*)((?:\s+(?:"[^"]*"|[A-Za-z0-9_.-]+))*)\s*\{/;
+/** Parse top-level HCL blocks. Nested blocks stay inside their parent's body. */
+export function parseHcl(text) {
+    const src = stripComments(text);
+    const blocks = [];
+    let i = 0;
+    while (i < src.length) {
+        const c = src[i];
+        // Only attempt a header at a token boundary (start, after whitespace or a
+        // closing brace) — keeps the scan O(n) in practice on real configs.
+        const boundary = i === 0 || /[\s}]/.test(src[i - 1]);
+        if (boundary && /[A-Za-z_]/.test(c)) {
+            const m = HEADER.exec(src.slice(i));
+            if (m) {
+                const bodyOpen = i + m[0].length - 1; // index of the `{`
+                const bodyClose = matchBrace(src, bodyOpen);
+                blocks.push({
+                    type: m[1],
+                    labels: parseLabels(m[2]),
+                    body: src.slice(bodyOpen + 1, bodyClose),
+                });
+                i = bodyClose + 1;
+                continue;
+            }
+        }
+        i++;
+    }
+    return blocks;
+}
+/**
+ * The "reference surface" of an HCL body: the text where a resource reference
+ * could legitimately live — bare HCL traversals (outside any string) plus the
+ * contents of `${…}` interpolations (which may sit inside strings). PR #9
+ * review: a plain substring scan matched addresses inside prose
+ * (`description = "see aws_lambda_function.api docs"`) and invented phantom
+ * edges. Stripping string prose (but keeping interpolations) + dropping heredoc
+ * bodies removes that false-positive class. Bias is toward MISSING a reference
+ * over INVENTING one — an absent edge is recoverable, a phantom edge lies.
+ */
+export function referenceSurface(body) {
+    // Drop heredoc bodies wholesale (policy docs / prose; rarely carry real
+    // traversals, and keeping them risks phantom edges).
+    const s = body.replace(/<<-?\s*(["']?)(\w+)\1[^\n]*\n[\s\S]*?\n[ \t]*\2\b/g, ' ');
+    let out = '';
+    let inString = false;
+    let escaped = false;
+    for (let i = 0; i < s.length; i++) {
+        const c = s[i];
+        if (inString) {
+            if (escaped) {
+                escaped = false;
+                continue;
+            }
+            if (c === '\\') {
+                escaped = true;
+                continue;
+            }
+            if (c === '"') {
+                inString = false;
+                out += ' ';
+                continue;
+            }
+            if (c === '$' && s[i + 1] === '{') {
+                // Keep brace-balanced interpolation contents — a real reference.
+                let depth = 0;
+                let j = i;
+                for (; j < s.length; j++) {
+                    if (s[j] === '{')
+                        depth++;
+                    else if (s[j] === '}') {
+                        depth--;
+                        if (depth === 0) {
+                            j++;
+                            break;
+                        }
+                    }
+                }
+                out += ` ${s.slice(i, j)} `;
+                i = j - 1;
+                continue;
+            }
+            continue; // ordinary in-string prose — drop
+        }
+        if (c === '"') {
+            inString = true;
+            continue;
+        }
+        out += c;
+    }
+    return out;
+}
+/**
+ * Whether `text` references the Terraform address `addr` (e.g. `aws_x.api` or
+ * `data.aws_y.foo`). Matches the address not preceded by a word char/dot and
+ * not followed by a word char — so attribute access (`addr.arn`) counts but a
+ * longer sibling name (`addr2`) does not. Callers pass `referenceSurface(body)`
+ * so prose inside string literals can't produce phantom matches.
+ */
+export function bodyReferences(text, addr) {
+    // Terraform addresses are `[A-Za-z0-9_.]` only, so the sole regex-special
+    // char to escape is `.` — keeps the pattern construction simple and avoids a
+    // brittle full-escape regex literal.
+    const escaped = addr.replace(/\./g, '\\.');
+    const re = new RegExp('(?<![\\w.])' + escaped + '(?![\\w])');
+    return re.test(text);
+}
+//# sourceMappingURL=hcl-parse.js.map

package/dist/infra/terraform/hcl-parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hcl-parse.js","sourceRoot":"","sources":["../../../src/infra/terraform/hcl-parse.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAC1E,8EAA8E;AAC9E,4EAA4E;AAC5E,sFAAsF;AACtF,0EAA0E;AAC1E,uEAAuE;AACvE,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,sDAAsD;AAetD,8EAA8E;AAC9E,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,IAAI,CAAC,CAAC;YACT,IAAI,OAAO;gBAAE,OAAO,GAAG,KAAK,CAAC;iBACxB,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;iBAC/B,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,GAAG,IAAI,CAAC,CAAC;YACT,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAChD,GAAG,IAAI,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAChD,GAAG,IAAI,IAAI,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC9B,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;gBAAE,CAAC,EAAE,CAAC;YACzE,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,SAAS,UAAU,CAAC,GAAW,EAAE,SAAiB;IAChD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,OAAO;gBAAE,OAAO,GAAG,KAAK,CAAC;iBACxB,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;iBAC/B,IAAI,CAAC,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,CAAC;aAC1B,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACvB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACnB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,8CAA8C;AACvE,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,8BAA8B,CAAC;IAC1C,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,MAAM,GAAG,2DAA2D,CAAC;AAE3E,iFAAiF;AACjF,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,mBAAmB;gBACzD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;oBACV,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzB,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,SAAS,CAAC;iBACzC,CAAC,CAAC;gBACH,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;QACH,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,wEAAwE;IACxE,qDAAqD;IACrD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAC;IAClF,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,GAAG,KAAK,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACf,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACd,QAAQ,GAAG,KAAK,CAAC;gBACjB,GAAG,IAAI,GAAG,CAAC;gBACX,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAClC,iEAAiE;gBACjE,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,IAAI,CAAC,GAAG,CAAC,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACzB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;wBAAE,KAAK,EAAE,CAAC;yBACrB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;wBACtB,KAAK,EAAE,CAAC;wBACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;4BAChB,CAAC,EAAE,CAAC;4BACJ,MAAM;wBACR,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;gBAC5B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACV,SAAS;YACX,CAAC;YACD,SAAS,CAAC,kCAAkC;QAC9C,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY;IACvD,0EAA0E;IAC1E,6EAA6E;IAC7E,qCAAqC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,aAAa,GAAG,OAAO,GAAG,WAAW,CAAC,CAAC;IAC7D,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC"}

package/dist/infra/terraform/terraform.d.ts

@@ -0,0 +1,14 @@
+import type { InfraAdapter, InfraGraph } from '../types.js';
+import { type DockerfileIndex } from '../image-resolve.js';
+import { type HclBlock } from './hcl-parse.js';
+/**
+ * The repo-relative source roots a Terraform resource deploys. `dockerfileIndex`
+ * (when present) powers the image→source resolver path. Pure.
+ */
+export declare function terraformSourceRoots(resourceType: string, body: string, moduleDir: string, dockerfileIndex?: DockerfileIndex): string[];
+/**
+ * Pure graph builder from parsed HCL blocks (one flattened list across files).
+ */
+export declare function buildTerraformGraph(blocks: HclBlock[], root: string, dockerfileIndex?: DockerfileIndex): InfraGraph;
+export declare const terraformAdapter: InfraAdapter;
+//# sourceMappingURL=terraform.d.ts.map

package/dist/infra/terraform/terraform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terraform.d.ts","sourceRoot":"","sources":["../../../src/infra/terraform/terraform.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,YAAY,EAAa,UAAU,EAAgC,MAAM,aAAa,CAAC;AAGrG,OAAO,EAAmD,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC5G,OAAO,EAA8C,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAoH3F;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,eAAe,CAAC,EAAE,eAAe,GAChC,MAAM,EAAE,CAyBV;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,eAAe,GAAG,UAAU,CA+DnH;AAED,eAAO,MAAM,gBAAgB,EAAE,YAqB9B,CAAC"}

package/dist/infra/terraform/terraform.js

@@ -0,0 +1,264 @@
+// the Terraform InfraAdapter (v0): the universal IaC unlock.
+//
+// One adapter covers AWS / GCP / Azure / Cloudflare / Vercel / fly for any repo
+// that uses Terraform — no per-cloud adapter needed. It parses the HCL subset
+// (hcl-parse.ts), emits a node per `resource`/`data` block, and lets 's
+// classifyResourceTypes decide each node's kind + domain-risk (an
+// `aws_lambda_function` is `worker`, an `aws_sqs_queue` is `queue`, …). That
+// classification is CACHED per (provider, resourceType) in
+// resource_type_classifications, so `aws_lambda_function` is labelled once and
+// reused across every Terraform repo forever.
+//
+// This is the ONLY v0 adapter that emits `classificationsNeeded`: CF and
+// Supabase have tight static binding models, but Terraform's `resource` space
+// is open-ended, so the kind decision is exactly the cross-vendor judgement the
+// LLM cache exists for. We still emit a deterministic heuristic kind +
+// `inferred` provenance up front so a --no-llm run (or a classifier miss) still
+// yields a usable topology; the classify step upgrades it to `llm-classified`.
+//
+// Cross-resource references (`${aws_lambda_function.api.arn}`) become edges,
+// deterministically — the reference exists in the HCL or it doesn't.
+//
+// v0 scope: per-provider PLATFORM/zone nodes are deferred (the locked 8-kind
+// InfraModuleKind enum has no "platform" kind; grouping belongs to 's ELK
+// zones + parentId, not a forced enum value). Variable/tfvars resolution and
+// `module {}` recursion are also deferred (tracked under ).
+import { readFileSync } from 'node:fs';
+import { relative } from 'node:path';
+import { findFiles } from '../walk.js';
+import { buildDockerfileIndex, resolveImageToSourceRoots } from '../image-resolve.js';
+import { parseHcl, bodyReferences, referenceSurface } from './hcl-parse.js';
+const TF_SKIP_DIRS = ['node_modules', '.git', 'dist', '.wrangler', '.terraform', '.next', 'build'];
+/** Find every `*.tf` file in the repo (bounded recursive walk). */
+function findTfFiles(repoDir) {
+    return findFiles(repoDir, (_abs, e) => e.name.endsWith('.tf'), { skipDirs: TF_SKIP_DIRS, maxDepth: 8 });
+}
+// Map a resource-type prefix to its cloud, for the classify `provider` field.
+const CLOUD_PREFIX = [
+    [/^aws_/, 'aws'],
+    [/^google_/, 'google'],
+    [/^azurerm_/, 'azure'],
+    [/^azuread_/, 'azure'],
+    [/^cloudflare_/, 'cloudflare'],
+    [/^vercel_/, 'vercel'],
+    [/^fly/, 'fly'],
+    [/^render_/, 'render'],
+    [/^digitalocean_/, 'digitalocean'],
+];
+function cloudFor(resourceType) {
+    for (const [re, cloud] of CLOUD_PREFIX)
+        if (re.test(resourceType))
+            return cloud;
+    // Fallback: the prefix before the first underscore (e.g. `kubernetes_x`).
+    const us = resourceType.indexOf('_');
+    return us > 0 ? resourceType.slice(0, us) : 'unknown';
+}
+// Deterministic fallback kind (used pre-classification / under --no-llm). The
+// LLM cache is the authority when available; this just keeps the diagram sane
+// without it. Substring rules, most-specific first.
+const KIND_RULES = [
+    [/lambda|function|cloud_run|cloudfunction|app_runner|fargate|ecs_task/, 'worker'],
+    [/container|ecs_service|kubernetes|instance|compute|droplet|machine/, 'container'],
+    [/sqs|pubsub|queue|kinesis|eventbridge|event_bus|kafka|sns/, 'queue'],
+    [/dynamodb|rds|s3_bucket|bucket|database|_db|sql|spanner|firestore|bigtable|redis|elasticache|table|storage_bucket/, 'datastore'],
+    [/secret|kms|vault|key_vault/, 'secret-store'],
+    [/cloudfront|cdn|fastly/, 'cdn'],
+    [/api_gateway|cdn_domain/, 'cdn'],
+];
+function heuristicKind(resourceType) {
+    for (const [re, kind] of KIND_RULES)
+        if (re.test(resourceType))
+            return kind;
+    // PR #9 review: there is no neutral "unknown" member in the locked
+    // InfraModuleKind enum (and adding one ripples through the cache CHECK
+    // constraint, KIND_COLUMN, salience, icons — not worth it for a debug path).
+    // `datastore` is the single most common infra resource, so it's the
+    // least-bad heuristic guess — but it is NOT load-bearing: when the LLM runs
+    // (the real pipeline always classifies), classifyResourceTypes overwrites
+    // this kind; only a --no-llm run keeps it, and edges no longer depend on it
+    // (see below). A future neutral kind is tracked under the  expansion.
+    return 'datastore';
+}
+// ---------------------------------------------------------------------------
+// source-root extraction (deterministic, no LLM).
+//
+// Two signals: (1) DIRECT source dirs declared in HCL (archive/lambda
+// `source_dir`, lambda `filename`, docker `build { context }`) → that dir; and
+// (2) image refs (`image = "…"`, docker `name = "…"`) → the  resolver.
+// Unresolvable / interpolated → nothing (honest "Other").
+/** Normalize a repo-relative path: backslashes→/, collapse `.`/`./`, strip trailing `/`. */
+function normalizeRoot(p) {
+    return p.replace(/\\/g, '/').replace(/^\.(?:\/|$)/, '').replace(/\/+$/, '');
+}
+/** The repo-relative directory of a repo-relative file path ('' = repo root). */
+function dirOfPath(relPath) {
+    const i = relPath.lastIndexOf('/');
+    return i === -1 ? '' : relPath.slice(0, i);
+}
+/** Resolve `rel` (may contain `./`/`../`) against repo-relative `baseDir` → normalized. */
+function resolveRel(baseDir, rel) {
+    const parts = (baseDir ? baseDir.split('/') : []).concat(rel.split('/'));
+    const out = [];
+    for (const p of parts) {
+        if (p === '' || p === '.')
+            continue;
+        if (p === '..')
+            out.pop();
+        else
+            out.push(p);
+    }
+    return out.join('/');
+}
+/**
+ * Resolve an HCL path value (`source_dir`/`filename`/`context`) to a repo-relative
+ * dir. Handles `${path.module}` (relative to the .tf file's dir) and `${path.root}`
+ * (repo root). Returns '' when the value carries any OTHER `${…}` interpolation
+ * (unresolvable → skip, never guess).
+ */
+function resolveTfPath(moduleDir, raw) {
+    let v = raw.trim();
+    let base = moduleDir;
+    if (v.includes('${path.root}'))
+        base = '';
+    v = v.replace(/\$\{path\.(module|root|cwd)\}/g, '');
+    if (v.includes('${'))
+        return ''; // an unresolved var/ref — don't guess
+    v = v.replace(/^\/+/, '');
+    return resolveRel(base, v);
+}
+/** All `attr = "VALUE"` (HCL) and `"attr": "VALUE"` (JSON-in-HCL) literal values. */
+function attrValues(body, attr) {
+    const re = new RegExp(`(?:"${attr}"|\\b${attr})\\s*[=:]\\s*"([^"]+)"`, 'g');
+    const out = [];
+    let m;
+    while ((m = re.exec(body)) !== null)
+        out.push(m[1]);
+    return out;
+}
+/**
+ * The repo-relative source roots a Terraform resource deploys. `dockerfileIndex`
+ * (when present) powers the image→source resolver path. Pure.
+ */
+export function terraformSourceRoots(resourceType, body, moduleDir, dockerfileIndex) {
+    const roots = new Set();
+    const addDir = (d) => {
+        const n = normalizeRoot(d);
+        if (n)
+            roots.add(n);
+    };
+    const isDocker = /docker/i.test(resourceType);
+    const isLambdaish = /lambda|function/i.test(resourceType);
+    // (1) Direct source dirs.
+    for (const v of attrValues(body, 'source_dir'))
+        addDir(resolveTfPath(moduleDir, v)); // archive_file / lambda
+    if (isLambdaish)
+        for (const v of attrValues(body, 'filename'))
+            addDir(dirOfPath(resolveTfPath(moduleDir, v)));
+    if (isDocker)
+        for (const v of attrValues(body, 'context'))
+            addDir(resolveTfPath(moduleDir, v)); // docker build context
+    // (2) Image refs → resolver (literal refs only; interpolated → skip).
+    if (dockerfileIndex) {
+        const imageRefs = attrValues(body, 'image');
+        if (isDocker)
+            imageRefs.push(...attrValues(body, 'name')); // docker_image `name`
+        for (const ref of imageRefs) {
+            if (!ref || ref.includes('${'))
+                continue;
+            for (const r of resolveImageToSourceRoots(ref, dockerfileIndex))
+                roots.add(r);
+        }
+    }
+    return [...roots].sort();
+}
+/**
+ * Pure graph builder from parsed HCL blocks (one flattened list across files).
+ */
+export function buildTerraformGraph(blocks, root, dockerfileIndex) {
+    const resources = [];
+    for (const b of blocks) {
+        if ((b.type === 'resource' || b.type === 'data') && b.labels.length >= 2) {
+            const [resourceType, name] = b.labels;
+            const isData = b.type === 'data';
+            resources.push({
+                nodeId: `${isData ? 'data' : 'resource'}:${resourceType}.${name}`,
+                refAddr: `${isData ? 'data.' : ''}${resourceType}.${name}`,
+                resourceType,
+                body: b.body,
+                isData,
+                dir: b.dir ?? '',
+            });
+        }
+    }
+    const nodes = [];
+    const classificationsNeeded = [];
+    for (const r of resources) {
+        const kind = heuristicKind(r.resourceType);
+        // deployment-target source roots (direct dirs + image→resolver).
+        const roots = terraformSourceRoots(r.resourceType, r.body, r.dir, dockerfileIndex);
+        nodes.push({
+            id: r.nodeId,
+            label: r.refAddr,
+            kind,
+            provenance: 'inferred', // upgraded to llm-classified by the classify step
+            metadata: { provider: cloudFor(r.resourceType), resourceType: r.resourceType, ...(r.isData ? { data: true } : {}) },
+            ...(roots.length ? { sourceRoots: roots } : {}),
+        });
+        classificationsNeeded.push({
+            provider: `terraform/${cloudFor(r.resourceType)}`,
+            resourceType: r.resourceType,
+            forNodeId: r.nodeId,
+        });
+    }
+    // Cross-resource edges: a resource that references another's address depends
+    // on it. The verb is ALWAYS `calls` (PR #9 review): an HCL reference is a
+    // structural dependency, not a known read/write/publish — and deriving the
+    // verb from the *heuristic* target kind was both a guess and stale (the LLM
+    // rewrites kinds afterward, but the edge verb was never recomputed). `calls`
+    // is the honest general structural verb (what coerceEdgeKind maps onto), so
+    // it stays correct regardless of how classification later labels the target.
+    // Matching runs over each source's reference SURFACE (string prose stripped)
+    // so a resource named in a description doesn't invent a phantom edge.
+    const surfaceById = new Map(resources.map((r) => [r.nodeId, referenceSurface(r.body)]));
+    const edges = [];
+    const seen = new Set();
+    for (const src of resources) {
+        const surface = surfaceById.get(src.nodeId);
+        for (const tgt of resources) {
+            if (src.nodeId === tgt.nodeId)
+                continue;
+            if (!bodyReferences(surface, tgt.refAddr))
+                continue;
+            const key = `${src.nodeId}→${tgt.nodeId}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            edges.push({ source: src.nodeId, target: tgt.nodeId, kind: 'calls', metadata: { via: 'tf-ref' } });
+        }
+    }
+    return { root, adapter: 'terraform', nodes, edges, classificationsNeeded };
+}
+export const terraformAdapter = {
+    name: 'terraform',
+    async detect(repoDir) {
+        return findTfFiles(repoDir).length > 0;
+    },
+    async extract(repoDir) {
+        const blocks = [];
+        for (const file of findTfFiles(repoDir)) {
+            const dir = dirOfPath((relative(repoDir, file) || file).split('\\').join('/'));
+            try {
+                for (const b of parseHcl(readFileSync(file, 'utf8'))) {
+                    b.dir = dir; // module dir for source-path resolution
+                    blocks.push(b);
+                }
+            }
+            catch (err) {
+                console.warn(`  [terraform] skipping unparseable ${relative(repoDir, file)}: ${err.message}`);
+            }
+        }
+        // Dockerfile index for image-referencing resources.
+        return buildTerraformGraph(blocks, repoDir, buildDockerfileIndex(repoDir));
+    },
+};
+//# sourceMappingURL=terraform.js.map

package/dist/infra/terraform/terraform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terraform.js","sourceRoot":"","sources":["../../../src/infra/terraform/terraform.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,wEAAwE;AACxE,kEAAkE;AAClE,6EAA6E;AAC7E,2DAA2D;AAC3D,+EAA+E;AAC/E,8CAA8C;AAC9C,EAAE;AACF,yEAAyE;AACzE,8EAA8E;AAC9E,gFAAgF;AAChF,uEAAuE;AACvE,gFAAgF;AAChF,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,qEAAqE;AACrE,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,4DAA4D;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGrC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAwB,MAAM,qBAAqB,CAAC;AAC5G,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAiB,MAAM,gBAAgB,CAAC;AAE3F,MAAM,YAAY,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAEnG,mEAAmE;AACnE,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AAC1G,CAAC;AAED,8EAA8E;AAC9E,MAAM,YAAY,GAA4B;IAC5C,CAAC,OAAO,EAAE,KAAK,CAAC;IAChB,CAAC,UAAU,EAAE,QAAQ,CAAC;IACtB,CAAC,WAAW,EAAE,OAAO,CAAC;IACtB,CAAC,WAAW,EAAE,OAAO,CAAC;IACtB,CAAC,cAAc,EAAE,YAAY,CAAC;IAC9B,CAAC,UAAU,EAAE,QAAQ,CAAC;IACtB,CAAC,MAAM,EAAE,KAAK,CAAC;IACf,CAAC,UAAU,EAAE,QAAQ,CAAC;IACtB,CAAC,gBAAgB,EAAE,cAAc,CAAC;CACnC,CAAC;AACF,SAAS,QAAQ,CAAC,YAAoB;IACpC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,YAAY;QAAE,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC;IAChF,0EAA0E;IAC1E,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,oDAAoD;AACpD,MAAM,UAAU,GAAqC;IACnD,CAAC,qEAAqE,EAAE,QAAQ,CAAC;IACjF,CAAC,mEAAmE,EAAE,WAAW,CAAC;IAClF,CAAC,0DAA0D,EAAE,OAAO,CAAC;IACrE,CAAC,kHAAkH,EAAE,WAAW,CAAC;IACjI,CAAC,4BAA4B,EAAE,cAAc,CAAC;IAC9C,CAAC,uBAAuB,EAAE,KAAK,CAAC;IAChC,CAAC,wBAAwB,EAAE,KAAK,CAAC;CAClC,CAAC;AACF,SAAS,aAAa,CAAC,YAAoB;IACzC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,UAAU;QAAE,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5E,mEAAmE;IACnE,uEAAuE;IACvE,6EAA6E;IAC7E,oEAAoE;IACpE,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,OAAO,WAAW,CAAC;AACrB,CAAC;AAWD,8EAA8E;AAC9E,kDAAkD;AAClD,EAAE;AACF,sEAAsE;AACtE,+EAA+E;AAC/E,uEAAuE;AACvE,0DAA0D;AAE1D,4FAA4F;AAC5F,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AACD,iFAAiF;AACjF,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AACD,2FAA2F;AAC3F,SAAS,UAAU,CAAC,OAAe,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;YAAE,SAAS;QACpC,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,GAAG,EAAE,CAAC;;YACrB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,SAAiB,EAAE,GAAW;IACnD,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,IAAI,GAAG,SAAS,CAAC;IACrB,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,IAAI,GAAG,EAAE,CAAC;IAC1C,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,sCAAsC;IACvE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1B,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,qFAAqF;AACrF,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,IAAI,QAAQ,IAAI,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAoB,EACpB,IAAY,EACZ,SAAiB,EACjB,eAAiC;IAEjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE;QAC3B,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAE1D,0BAA0B;IAC1B,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC;QAAE,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;IAC7G,IAAI,WAAW;QAAE,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC;YAAE,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9G,IAAI,QAAQ;QAAE,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC;YAAE,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB;IAEvH,sEAAsE;IACtE,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,sBAAsB;QACjF,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAS;YACzC,KAAK,MAAM,CAAC,IAAI,yBAAyB,CAAC,GAAG,EAAE,eAAe,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAkB,EAAE,IAAY,EAAE,eAAiC;IACrG,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACzE,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;YACtC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC;gBACb,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,YAAY,IAAI,IAAI,EAAE;gBACjE,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,IAAI,IAAI,EAAE;gBAC1D,YAAY;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM;gBACN,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,qBAAqB,GAAwB,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC3C,iEAAiE;QACjE,MAAM,KAAK,GAAG,oBAAoB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACnF,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,CAAC,CAAC,MAAM;YACZ,KAAK,EAAE,CAAC,CAAC,OAAO;YAChB,IAAI;YACJ,UAAU,EAAE,UAAU,EAAE,kDAAkD;YAC1E,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACnH,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,qBAAqB,CAAC,IAAI,CAAC;YACzB,QAAQ,EAAE,aAAa,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE;YACjD,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,SAAS,EAAE,CAAC,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;gBAAE,SAAS;YACxC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YACpD,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC5C,IAAI,EAAE,WAAW;IACjB,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,OAAe;QAC3B,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/E,IAAI,CAAC;gBACH,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;oBACrD,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,wCAAwC;oBACrD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,sCAAsC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;QACD,oDAAoD;QACpD,OAAO,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF,CAAC"}