@bevorai/sdk 0.0.0-stage → 0.1.0

package/dist/helpers/sarif.js

@@ -0,0 +1,191 @@
+export const BEVOR_TOOL_VERSION = "0.0.1";
+export const BEVOR_TO_SARIF_LEVEL = {
+    critical: "error",
+    high: "warning",
+    medium: "note",
+    low: "none",
+};
+export const SARIF_TO_BEVOR_LEVEL = {
+    error: "critical",
+    warning: "high",
+    note: "medium",
+    none: "low",
+};
+const PHYSICAL_REGION_KEYS = [
+    "startLine",
+    "startColumn",
+    "endLine",
+    "endColumn",
+    "charOffset",
+    "charLength",
+    "byteOffset",
+    "byteLength",
+];
+const NEWLINE = 0x0a;
+const strictUtf8 = new TextDecoder("utf-8", { fatal: true });
+const utf8Encoder = new TextEncoder();
+/** Like Python's `str.title()`: each run of letters capitalized, the rest lowercased. */
+const titleCase = (value) => value.replace(/[A-Za-z]+/g, (word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase());
+const countNewlines = (bytes) => bytes.reduce((n, b) => (b === NEWLINE ? n + 1 : n), 0);
+const codePointLength = (bytes) => [...strictUtf8.decode(bytes)].length;
+export const ruleForFinding = (finding) => ({
+    id: finding.type,
+    shortDescription: {
+        text: `${titleCase(finding.type.replaceAll("_", " "))} Vulnerability`,
+    },
+});
+/** Bevor-specific properties; SARIF property bags here carry strings only. */
+export const bevorProperties = (finding) => {
+    const properties = {
+        findingId: finding.id,
+        nodeId: finding.node_id,
+        is_acknowledged: finding.is_acknowledged,
+        recommendation: finding.recommendation,
+        poc: finding.poc,
+    };
+    const pruned = {};
+    for (const [key, value] of Object.entries(properties)) {
+        if (value === null || value === undefined)
+            continue;
+        pruned[key] = typeof value === "boolean" ? String(value) : value;
+    }
+    return { bevor: pruned };
+};
+export const resultFromFinding = (finding, location) => ({
+    ruleId: finding.type,
+    level: BEVOR_TO_SARIF_LEVEL[finding.level],
+    message: {
+        text: finding.name,
+        properties: { description: finding.explanation },
+    },
+    locations: [{ physicalLocation: location }],
+    properties: bevorProperties(finding),
+});
+/** Line/column (1-indexed), byte and code-point offsets for a byte range of a UTF-8 file. */
+export const computeRegion = (content, byteStart, byteEnd) => {
+    const before = content.subarray(0, byteStart);
+    const snippet = content.subarray(byteStart, byteEnd);
+    const startLine = countNewlines(before) + 1;
+    const startColumn = byteStart - before.lastIndexOf(NEWLINE);
+    const snippetNewlines = countNewlines(snippet);
+    const endLine = startLine + snippetNewlines;
+    const endColumn = snippetNewlines > 0
+        ? byteEnd - (byteStart + snippet.lastIndexOf(NEWLINE))
+        : startColumn + snippet.length;
+    return {
+        byteOffset: byteStart,
+        byteLength: byteEnd - byteStart,
+        charOffset: codePointLength(before),
+        charLength: codePointLength(snippet),
+        startLine,
+        startColumn,
+        endLine,
+        endColumn,
+    };
+};
+const locationFromResult = (result) => {
+    const location = result.locations?.[0];
+    if (!location)
+        throw new Error("result has no resolvable location");
+    const physical = location.physicalLocation;
+    const uri = physical?.artifactLocation?.uri;
+    if (uri && physical?.region) {
+        // SARIF defaults both offsets to -1 ("not provided"); the Python SDK sends them filled in
+        const region = {
+            charOffset: -1,
+            byteOffset: -1,
+            ...physical.region,
+        };
+        const found = { strategy: "physical", uri };
+        for (const key of PHYSICAL_REGION_KEYS) {
+            const value = region[key];
+            if (value !== null && value !== undefined)
+                found[key] = value;
+        }
+        return found;
+    }
+    const fullyQualifiedName = location.logicalLocations?.[0]?.fullyQualifiedName;
+    if (fullyQualifiedName)
+        return { strategy: "logical", fully_qualified_name: fullyQualifiedName };
+    throw new Error("result has no resolvable location");
+};
+/** Fetches (once per file) the UTF-8 bytes of every file a finding points at. */
+const getContents = async (graph, findings) => {
+    const fileIds = new Set(findings.map((finding) => graph.getNode(finding.node_id).file_id));
+    const contents = await Promise.all([...fileIds].map(async (fileId) => [
+        fileId,
+        utf8Encoder.encode(await graph.getFileContent(fileId)),
+    ]));
+    return new Map(contents);
+};
+/** Converts findings to a SARIF 2.1.0 log, one run per tool. The graph must be built. */
+export const bevorToSarif = async (graph, findings) => {
+    const contents = await getContents(graph, findings);
+    const rules = new Map();
+    const results = new Map();
+    const append = (map, key, value) => {
+        const list = map.get(key);
+        if (list)
+            list.push(value);
+        else
+            map.set(key, [value]);
+    };
+    for (const finding of findings) {
+        const node = graph.getNode(finding.node_id);
+        const file = graph.getFile(node.file_id);
+        const content = contents.get(file.id);
+        const toolName = finding.tool.startsWith("bevor") ? "Bevor" : finding.tool;
+        const location = {
+            artifactLocation: { uri: file.path },
+            region: computeRegion(content, node.src_start_pos, node.src_end_pos),
+        };
+        append(rules, toolName, ruleForFinding(finding));
+        append(results, toolName, resultFromFinding(finding, location));
+    }
+    const runs = [...rules.keys()].map((toolName) => ({
+        tool: {
+            driver: {
+                name: toolName,
+                rules: rules.get(toolName),
+                ...(toolName === "Bevor"
+                    ? {
+                        semanticVersion: BEVOR_TOOL_VERSION,
+                        informationUri: "https://bevor.io/docs",
+                    }
+                    : {}),
+            },
+        },
+        results: results.get(toolName),
+    }));
+    return { version: "2.1.0", runs };
+};
+/** Converts a SARIF log into finding bodies for `analyses.addFindings`. */
+export const sarifToBevor = (sarif) => {
+    const bodies = [];
+    for (const run of sarif.runs ?? []) {
+        const tool = run.tool.driver.name;
+        const rules = new Map((run.tool.driver.rules ?? []).map((rule) => [rule.id, rule]));
+        for (const result of run.results ?? []) {
+            const rule = rules.get(result.ruleId ?? "");
+            const findingType = result.ruleId || rule?.id || rule?.name;
+            if (!findingType)
+                throw new Error("result is missing a resolvable type");
+            const name = rule?.name || rule?.shortDescription?.text || findingType;
+            const explanation = result.message.text || result.message.markdown;
+            if (!explanation)
+                throw new Error("result is missing a resolvable explanation");
+            bodies.push({
+                metadata: {
+                    type: findingType,
+                    level: SARIF_TO_BEVOR_LEVEL[result.level ?? "warning"],
+                    name,
+                    explanation,
+                },
+                tool,
+                location: locationFromResult(result),
+            });
+        }
+    }
+    return bodies;
+};
+//# sourceMappingURL=sarif.js.map

package/dist/helpers/sarif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../src/helpers/sarif.ts"],"names":[],"mappings":"AAoBA,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAE1C,MAAM,CAAC,MAAM,oBAAoB,GAChC;IACC,QAAQ,EAAE,OAAO;IACjB,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,MAAM;IACd,GAAG,EAAE,MAAM;CACX,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAChC;IACC,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,MAAM;IACf,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,KAAK;CACX,CAAC;AAEH,MAAM,oBAAoB,GAAG;IAC5B,WAAW;IACX,aAAa;IACb,SAAS;IACT,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,YAAY;CACH,CAAC;AAEX,MAAM,OAAO,GAAG,IAAI,CAAC;AACrB,MAAM,UAAU,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7D,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,yFAAyF;AACzF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAC3C,KAAK,CAAC,OAAO,CACZ,YAAY,EACZ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CACpE,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,KAAiB,EAAU,EAAE,CACnD,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAExD,MAAM,eAAe,GAAG,CAAC,KAAiB,EAAU,EAAE,CACrD,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAEtC,MAAM,CAAC,MAAM,cAAc,GAAG,CAC7B,OAAsB,EACA,EAAE,CAAC,CAAC;IAC1B,EAAE,EAAE,OAAO,CAAC,IAAI;IAChB,gBAAgB,EAAE;QACjB,IAAI,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,gBAAgB;KACrE;CACD,CAAC,CAAC;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,CAC9B,OAAsB,EACmB,EAAE;IAC3C,MAAM,UAAU,GAA4C;QAC3D,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,OAAO,CAAC,OAAO;QACvB,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,GAAG,EAAE,OAAO,CAAC,GAAG;KAChB,CAAC;IACF,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QACpD,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAChC,OAAsB,EACtB,QAA0B,EACjB,EAAE,CAAC,CAAC;IACb,MAAM,EAAE,OAAO,CAAC,IAAI;IACpB,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C,OAAO,EAAE;QACR,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE;KAChD;IACD,SAAS,EAAE,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;IAC3C,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC;CACpC,CAAC,CAAC;AAEH,6FAA6F;AAC7F,MAAM,CAAC,MAAM,aAAa,GAAG,CAC5B,OAAmB,EACnB,SAAiB,EACjB,OAAe,EACN,EAAE;IACX,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAErD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAE5D,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,SAAS,GAAG,eAAe,CAAC;IAC5C,MAAM,SAAS,GACd,eAAe,GAAG,CAAC;QAClB,CAAC,CAAC,OAAO,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAEjC,OAAO;QACN,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,OAAO,GAAG,SAAS;QAC/B,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC;QACnC,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC;QACpC,SAAS;QACT,WAAW;QACX,OAAO;QACP,SAAS;KACT,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAC1B,MAAc,EACqC,EAAE;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAEpE,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,CAAC;IAC3C,MAAM,GAAG,GAAG,QAAQ,EAAE,gBAAgB,EAAE,GAAG,CAAC;IAC5C,IAAI,GAAG,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC7B,0FAA0F;QAC1F,MAAM,MAAM,GAAW;YACtB,UAAU,EAAE,CAAC,CAAC;YACd,UAAU,EAAE,CAAC,CAAC;YACd,GAAG,QAAQ,CAAC,MAAM;SAClB,CAAC;QACF,MAAM,KAAK,GAA4B,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QACrE,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC/D,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,GAAG,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC;IAC9E,IAAI,kBAAkB;QACrB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;IAE1E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACtD,CAAC,CAAC;AAEF,iFAAiF;AACjF,MAAM,WAAW,GAAG,KAAK,EACxB,KAAY,EACZ,QAAkC,EACH,EAAE;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CACtB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CACjE,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CACf,KAAK,EAAE,MAAM,EAAE,EAAE,CAChB;QACC,MAAM;QACN,WAAW,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;KAC7C,CACX,CACD,CAAC;IACF,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,yFAAyF;AACzF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAChC,KAAY,EACZ,QAAkC,EACnB,EAAE;IACjB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,MAAM,MAAM,GAAG,CAAI,GAAqB,EAAE,GAAW,EAAE,KAAQ,EAAE,EAAE;QAClE,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YACtB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAe,CAAC;QACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QAE3E,MAAM,QAAQ,GAAqB;YAClC,gBAAgB,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE;YACpC,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC;SACpE,CAAC;QACF,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,IAAI,GAAU,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,EAAE;YACL,MAAM,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC1B,GAAG,CAAC,QAAQ,KAAK,OAAO;oBACvB,CAAC,CAAC;wBACA,eAAe,EAAE,kBAAkB;wBACnC,cAAc,EAAE,uBAAuB;qBACvC;oBACF,CAAC,CAAC,EAAE,CAAC;aACN;SACD;QACD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;KAC9B,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC,CAAC;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAU,EAAiB,EAAE;IACzD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,GAAG,CACpB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAC5D,CAAC;QAEF,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,IAAI,CAAC;YAC5D,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAEzE,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,gBAAgB,EAAE,IAAI,IAAI,WAAW,CAAC;YACvE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;YACnE,IAAI,CAAC,WAAW;gBACf,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAE/D,MAAM,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE;oBACT,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE,oBAAoB,CAAC,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC;oBACtD,IAAI;oBACJ,WAAW;iBACX;gBACD,IAAI;gBACJ,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC,CAAC"}

package/dist/helpers/source-fingerprint.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Non-hidden build/cache/tooling directories. Hidden paths (any segment starting with `.`, e.g.
+ * `.git`, `.env`, dotfiles) are always skipped.
+ */
+export declare const SKIP_DIRS: ReadonlySet<string>;
+export declare const SKIP_EXTS: ReadonlySet<string>;
+/** Path segments, normalized like `PurePosixPath` (empty and `.` segments dropped). */
+export declare const pathParts: (relPosix: string) => string[];
+/** Whether to exclude `relPosix` (relative to the repo / zip root, forward slashes). */
+export declare const skipRelativePath: (relPosix: string) => boolean;
+/** Orders paths as plain strings by code point, like Python's `str` (JS's default compares UTF-16 units). */
+export declare const comparePaths: (a: string, b: string) => number;
+export declare const isUtf8: (bytes: Uint8Array) => boolean;
+export interface SourceFile {
+    /** Path relative to the source root, with forward slashes. */
+    path: string;
+    content: Uint8Array;
+}
+export interface FingerprintedSource {
+    zip: Uint8Array;
+    nFiles: number;
+    nFilesSkipped: number;
+    versionFingerprint: string;
+}
+/**
+ * Zips the files that pass the path and UTF-8 rules under `rootName`, in path order, and
+ * fingerprints them. Mirrors the Python SDK's `fingerprint_source`.
+ */
+export declare const fingerprintSource: (files: Iterable<SourceFile>, rootName: string) => Promise<FingerprintedSource>;
+/** Every file in a zip, relative to its top-level folder. Mirrors the Python SDK's `zip_files`. */
+export declare const zipFiles: (zip: Uint8Array) => SourceFile[];
+//# sourceMappingURL=source-fingerprint.d.ts.map

package/dist/helpers/source-fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-fingerprint.d.ts","sourceRoot":"","sources":["../../src/helpers/source-fingerprint.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,CAuBxC,CAAC;AAEH,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,CAA6B,CAAC;AAQxE,uFAAuF;AACvF,eAAO,MAAM,SAAS,aAAc,MAAM,KAAG,MAAM,EACe,CAAC;AAEnE,wFAAwF;AACxF,eAAO,MAAM,gBAAgB,aAAc,MAAM,KAAG,OAKnD,CAAC;AAEF,6GAA6G;AAC7G,eAAO,MAAM,YAAY,MAAO,MAAM,KAAK,MAAM,KAAG,MASnD,CAAC;AAKF,eAAO,MAAM,MAAM,UAAW,UAAU,KAAG,OAO1C,CAAC;AAEF,MAAM,WAAW,UAAU;IAC1B,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IACnC,GAAG,EAAE,UAAU,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,UACtB,QAAQ,CAAC,UAAU,CAAC,YACjB,MAAM,KACd,OAAO,CAAC,mBAAmB,CA4B7B,CAAC;AAEF,mGAAmG;AACnG,eAAO,MAAM,QAAQ,QAAS,UAAU,KAAG,UAAU,EAKlD,CAAC"}

package/dist/helpers/source-fingerprint.js

@@ -0,0 +1,115 @@
+/**
+ * Shared rules and aggregation for a folder's `version_fingerprint` (HASH method), matching the
+ * Python SDK and the API byte for byte.
+ *
+ * Paths are skipped with `skipRelativePath`; only valid UTF-8 files count. The fingerprint is an
+ * XXH128 over, per file in path string order (by code point), the relative POSIX path's UTF-8
+ * bytes followed by the 16-byte XXH128 digest of the file's raw bytes.
+ */
+import { unzipSync, zipSync } from "fflate";
+import { createXXHash128 } from "hash-wasm";
+/**
+ * Non-hidden build/cache/tooling directories. Hidden paths (any segment starting with `.`, e.g.
+ * `.git`, `.env`, dotfiles) are always skipped.
+ */
+export const SKIP_DIRS = new Set([
+    "__pycache__",
+    "venv",
+    "dist",
+    "build",
+    "out",
+    "obj",
+    "_build",
+    "htmlcov",
+    "coverage",
+    "site",
+    "tmp",
+    "tests",
+    "test",
+    "temp",
+    "logs",
+    "__MACOSX",
+    "playwright-report",
+    "test-results",
+    "storybook-static",
+    "DerivedData",
+    "nimcache",
+    ".bevor",
+]);
+export const SKIP_EXTS = new Set([".pyc", ".pyo"]);
+/** Python's `PurePosixPath.suffix`: the final segment's extension, ignoring a leading dot. */
+const suffix = (name) => {
+    const dot = name.lastIndexOf(".");
+    return dot > 0 && dot < name.length - 1 ? name.slice(dot) : "";
+};
+/** Path segments, normalized like `PurePosixPath` (empty and `.` segments dropped). */
+export const pathParts = (relPosix) => relPosix.split("/").filter((part) => part !== "" && part !== ".");
+/** Whether to exclude `relPosix` (relative to the repo / zip root, forward slashes). */
+export const skipRelativePath = (relPosix) => {
+    const parts = pathParts(relPosix);
+    if (parts.some((part) => part.startsWith(".")))
+        return true;
+    if (parts.slice(0, -1).some((part) => SKIP_DIRS.has(part)))
+        return true;
+    return SKIP_EXTS.has(suffix(parts[parts.length - 1] ?? ""));
+};
+/** Orders paths as plain strings by code point, like Python's `str` (JS's default compares UTF-16 units). */
+export const comparePaths = (a, b) => {
+    const left = [...a];
+    const right = [...b];
+    for (let i = 0; i < Math.min(left.length, right.length); i++) {
+        const diff = (left[i]?.codePointAt(0) ?? 0) - (right[i]?.codePointAt(0) ?? 0);
+        if (diff !== 0)
+            return diff;
+    }
+    return left.length - right.length;
+};
+const strictUtf8 = new TextDecoder("utf-8", { fatal: true });
+const utf8Encoder = new TextEncoder();
+export const isUtf8 = (bytes) => {
+    try {
+        strictUtf8.decode(bytes);
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+/**
+ * Zips the files that pass the path and UTF-8 rules under `rootName`, in path order, and
+ * fingerprints them. Mirrors the Python SDK's `fingerprint_source`.
+ */
+export const fingerprintSource = async (files, rootName) => {
+    const [hasher, fileHasher] = await Promise.all([
+        createXXHash128(),
+        createXXHash128(),
+    ]);
+    hasher.init();
+    const entries = {};
+    let nFiles = 0;
+    let nFilesSkipped = 0;
+    for (const file of [...files].sort((a, b) => comparePaths(a.path, b.path))) {
+        if (skipRelativePath(file.path) || !isUtf8(file.content)) {
+            nFilesSkipped++;
+            continue;
+        }
+        hasher.update(utf8Encoder.encode(file.path));
+        // fixed-width digest, so no framing ambiguity
+        hasher.update(fileHasher.init().update(file.content).digest("binary"));
+        entries[`${rootName}/${file.path}`] = file.content;
+        nFiles++;
+    }
+    return {
+        zip: zipSync(entries, { level: 6 }),
+        nFiles,
+        nFilesSkipped,
+        versionFingerprint: hasher.digest("hex"),
+    };
+};
+/** Every file in a zip, relative to its top-level folder. Mirrors the Python SDK's `zip_files`. */
+export const zipFiles = (zip) => Object.entries(unzipSync(zip)).flatMap(([name, content]) => {
+    const slash = name.indexOf("/");
+    const path = slash === -1 ? "" : name.slice(slash + 1);
+    return path && !name.endsWith("/") ? [{ path, content }] : [];
+});
+//# sourceMappingURL=source-fingerprint.js.map

package/dist/helpers/source-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-fingerprint.js","sourceRoot":"","sources":["../../src/helpers/source-fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAwB,IAAI,GAAG,CAAC;IACrD,aAAa;IACb,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,KAAK;IACL,QAAQ;IACR,SAAS;IACT,UAAU;IACV,MAAM;IACN,KAAK;IACL,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,UAAU;IACV,mBAAmB;IACnB,cAAc;IACd,kBAAkB;IAClB,aAAa;IACb,UAAU;IACV,QAAQ;CACR,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAExE,8FAA8F;AAC9F,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC,CAAC;AAEF,uFAAuF;AACvF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAY,EAAE,CACvD,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;AAEnE,wFAAwF;AACxF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAW,EAAE;IAC7D,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC;AAEF,6GAA6G;AAC7G,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE;IAC5D,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,GACT,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7D,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAW,EAAE;IACpD,IAAI,CAAC;QACJ,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC,CAAC;AAeF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACrC,KAA2B,EAC3B,QAAgB,EACe,EAAE;IACjC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,eAAe,EAAE;QACjB,eAAe,EAAE;KACjB,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,EAAE,CAAC;IACd,MAAM,OAAO,GAA+B,EAAE,CAAC;IAC/C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5E,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,aAAa,EAAE,CAAC;YAChB,SAAS;QACV,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,8CAA8C;QAC9C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACnD,MAAM,EAAE,CAAC;IACV,CAAC;IAED,OAAO;QACN,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACnC,MAAM;QACN,aAAa;QACb,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;KACxC,CAAC;AACH,CAAC,CAAC;AAEF,mGAAmG;AACnG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAe,EAAgB,EAAE,CACzD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACvD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC,CAAC,CAAC"}

package/dist/helpers/static-analysis.d.ts

@@ -0,0 +1,18 @@
+import { type CategoricalAnalysisFields, type NumericAnalysisFields, type StaticAnalysisDict } from "../types/static-analysis.js";
+/** Static analysis flags and counters for a graph node. */
+export declare class StaticAnalysis {
+    state: StaticAnalysisDict;
+    constructor(state?: StaticAnalysisDict);
+    /** Wraps an existing state dict. */
+    static fromState(state: StaticAnalysisDict): StaticAnalysis;
+    /** Combines with another analysis: flags are OR'd, counters summed. */
+    intersect(other: StaticAnalysis): StaticAnalysis;
+    /** Only the fields with meaningful values (true or > 0). */
+    filter(): StaticAnalysisDict;
+    setField(field: CategoricalAnalysisFields, value?: boolean): void;
+    incField(field: NumericAnalysisFields, value?: number): void;
+    getState(): StaticAnalysisDict;
+    /** A bulleted, human-readable summary of the meaningful fields. */
+    stringify(): string;
+}
+//# sourceMappingURL=static-analysis.d.ts.map

package/dist/helpers/static-analysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-analysis.d.ts","sourceRoot":"","sources":["../../src/helpers/static-analysis.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,KAAK,yBAAyB,EAE9B,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EAEvB,MAAM,6BAA6B,CAAC;AAkDrC,2DAA2D;AAC3D,qBAAa,cAAc;IAC1B,KAAK,EAAE,kBAAkB,CAAC;IAE1B,YAAY,KAAK,GAAE,kBAAmC,EAErD;IAED,oCAAoC;IACpC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,cAAc,CAE1D;IAED,uEAAuE;IACvE,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAU/C;IAED,4DAA4D;IAC5D,MAAM,IAAI,kBAAkB,CAM3B;IAED,QAAQ,CAAC,KAAK,EAAE,yBAAyB,EAAE,KAAK,UAAO,GAAG,IAAI,CAE7D;IAED,QAAQ,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,SAAI,GAAG,IAAI,CAEtD;IAED,QAAQ,IAAI,kBAAkB,CAE7B;IAED,mEAAmE;IACnE,SAAS,IAAI,MAAM,CAiBlB;CACD"}

package/dist/helpers/static-analysis.js

@@ -0,0 +1,89 @@
+import { CATEGORICAL_ANALYSIS_FIELDS, NUMERIC_ANALYSIS_FIELDS, } from "../types/static-analysis.js";
+const DESCRIPTIONS = {
+    calls_self: "Has recursion. Carefully check the stop conditions and gas griefing.",
+    has_assembly: "Uses assembly, make sure the logic is sound.",
+    has_block_dependency: "Has a dependency on block number or time. Consider how this could be manipulated.",
+    has_contract_creation: "Includes contract creation. Carefully check the constructor parameters.",
+    has_external_call: "Makes an external call. Evaluate potential re-entrants and checked statements.",
+    has_internal_call: "Makes an internal call. Carefully follow the call-chain to observe state updates and soundness of logic.",
+    has_loop: "Has a loop. Be sure to check the condition of the loop and consider potential gas concerns and boundedness.",
+    has_modifiers: "Relies on modifiers. These are common for access controls and re-entrancy protections. Evaluate their logic and check where else these states could be updated.",
+    has_ownership_transfer: "Includes ownership transfer. These are not inherently bad patterns, even to the zero address, but ensure this transfer is done properly.",
+    can_selfdestruct_contract: "Has self-destruct.",
+    has_unbounded_loop: "Has an unbounded loop. Follow the loop condition and ensure that there are early stop conditions, or that the logic is sound such that this code can execute given real world parameterization.",
+    uses_delegatecall: "Relies on delegatecall. Make sure the return is checked, and that the function guards against re-entrants",
+    uses_math: "Uses math, which is not inherently bad, but you should evaluate the units of the math, and make sure overflow or underflow is not possible.",
+    uses_txorigin: "Uses tx.origin, which should generally be avoided.",
+    writes_state: "Writes to global state. Be certain to consider how this could impact other functions, and make sure that these writes are done properly.",
+};
+/** When both are set, only the first is reported. */
+const DEDUPLICATE = [["has_unbounded_loop", "has_loop"]];
+const initialState = () => {
+    const state = {};
+    for (const field of CATEGORICAL_ANALYSIS_FIELDS)
+        state[field] = false;
+    for (const field of NUMERIC_ANALYSIS_FIELDS)
+        state[field] = 0;
+    return state;
+};
+const entries = (state) => Object.entries(state);
+/** Static analysis flags and counters for a graph node. */
+export class StaticAnalysis {
+    state;
+    constructor(state = initialState()) {
+        this.state = state;
+    }
+    /** Wraps an existing state dict. */
+    static fromState(state) {
+        return new StaticAnalysis(state);
+    }
+    /** Combines with another analysis: flags are OR'd, counters summed. */
+    intersect(other) {
+        const out = {};
+        for (const [field, value] of entries(this.state)) {
+            const theirs = other.state[field];
+            out[field] =
+                typeof value === "boolean"
+                    ? value || Boolean(theirs)
+                    : value + Number(theirs ?? 0);
+        }
+        return StaticAnalysis.fromState(out);
+    }
+    /** Only the fields with meaningful values (true or > 0). */
+    filter() {
+        const out = {};
+        for (const [field, value] of entries(this.state)) {
+            if (typeof value === "boolean" ? value : value > 0)
+                out[field] = value;
+        }
+        return out;
+    }
+    setField(field, value = true) {
+        this.state[field] = value;
+    }
+    incField(field, value = 1) {
+        this.state[field] = Number(this.state[field] ?? 0) + value;
+    }
+    getState() {
+        return this.state;
+    }
+    /** A bulleted, human-readable summary of the meaningful fields. */
+    stringify() {
+        const fields = this.filter();
+        for (const [higher, lower] of DEDUPLICATE) {
+            if (higher in fields && lower in fields)
+                delete fields[lower];
+        }
+        let out = "";
+        for (const [field, value] of entries(fields)) {
+            const description = DESCRIPTIONS[field];
+            // matches the Python SDK's rendering of the value, e.g. "True occurences of has_require"
+            const rendered = typeof value === "boolean" ? (value ? "True" : "False") : String(value);
+            out += description
+                ? `\n- ${description}`
+                : `\n- ${rendered} occurences of ${field}`;
+        }
+        return out.trim();
+    }
+}
+//# sourceMappingURL=static-analysis.js.map

package/dist/helpers/static-analysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-analysis.js","sourceRoot":"","sources":["../../src/helpers/static-analysis.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,2BAA2B,EAE3B,uBAAuB,GAIvB,MAAM,6BAA6B,CAAC;AAErC,MAAM,YAAY,GAAkD;IACnE,UAAU,EACT,sEAAsE;IACvE,YAAY,EAAE,8CAA8C;IAC5D,oBAAoB,EACnB,mFAAmF;IACpF,qBAAqB,EACpB,yEAAyE;IAC1E,iBAAiB,EAChB,gFAAgF;IACjF,iBAAiB,EAChB,0GAA0G;IAC3G,QAAQ,EACP,6GAA6G;IAC9G,aAAa,EACZ,iKAAiK;IAClK,sBAAsB,EACrB,0IAA0I;IAC3I,yBAAyB,EAAE,oBAAoB;IAC/C,kBAAkB,EACjB,iMAAiM;IAClM,iBAAiB,EAChB,2GAA2G;IAC5G,SAAS,EACR,6IAA6I;IAC9I,aAAa,EAAE,oDAAoD;IACnE,YAAY,EACX,0IAA0I;CAC3I,CAAC;AAEF,qDAAqD;AACrD,MAAM,WAAW,GAGX,CAAC,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC,CAAC;AAE3C,MAAM,YAAY,GAAG,GAAuB,EAAE;IAC7C,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,2BAA2B;QAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACtE,KAAK,MAAM,KAAK,IAAI,uBAAuB;QAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CACf,KAAyB,EACoB,EAAE,CAC/C,MAAM,CAAC,OAAO,CAAC,KAAK,CAA+C,CAAC;AAErE,2DAA2D;AAC3D,MAAM,OAAO,cAAc;IAC1B,KAAK,CAAqB;IAE1B,YAAY,KAAK,GAAuB,YAAY,EAAE;QACrD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,oCAAoC;IACpC,MAAM,CAAC,SAAS,CAAC,KAAyB;QACzC,OAAO,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,uEAAuE;IACvE,SAAS,CAAC,KAAqB;QAC9B,MAAM,GAAG,GAAuB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClC,GAAG,CAAC,KAAK,CAAC;gBACT,OAAO,KAAK,KAAK,SAAS;oBACzB,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;oBAC1B,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,4DAA4D;IAC5D,MAAM;QACL,MAAM,GAAG,GAAuB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;gBAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QACxE,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;IAED,QAAQ,CAAC,KAAgC,EAAE,KAAK,GAAG,IAAI;QACtD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,QAAQ,CAAC,KAA4B,EAAE,KAAK,GAAG,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IAC5D,CAAC;IAED,QAAQ;QACP,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,mEAAmE;IACnE,SAAS;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC;YAC3C,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,yFAAyF;YACzF,MAAM,QAAQ,GACb,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzE,GAAG,IAAI,WAAW;gBACjB,CAAC,CAAC,OAAO,WAAW,EAAE;gBACtB,CAAC,CAAC,OAAO,QAAQ,kBAAkB,KAAK,EAAE,CAAC;QAC7C,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACnB,CAAC;CACD"}

package/dist/index.d.ts

@@ -0,0 +1,31 @@
+export { BevorClient, type ClientOptions, type HttpMethod, type PaginationOptions, type QueryValue, type RequestConfig, type RequestOptions, type StreamingOptions, } from "./client.js";
+export * from "./errors.js";
+export { CallNode, type CallNodeDict } from "./graph/call-node.js";
+export { GraphCursor } from "./graph/cursor.js";
+export { FieldMetadata } from "./graph/field-metadata.js";
+export { type EdgeFilter, Graph, type GraphSnapshot } from "./graph/graph.js";
+export * from "./helpers/call-chain.js";
+export * from "./helpers/sarif.js";
+export { comparePaths, type FingerprintedSource, fingerprintSource, isUtf8, SKIP_DIRS, SKIP_EXTS, type SourceFile, skipRelativePath, zipFiles, } from "./helpers/source-fingerprint.js";
+export { StaticAnalysis } from "./helpers/static-analysis.js";
+export { PaginatedResource } from "./pagination.js";
+export { AnalysisResources, type AnalysisRunResource, BoundAnalysisResources, } from "./resources/analyses.js";
+export { BoundChatResources, ChatResources } from "./resources/chats.js";
+export { BoundCodesResources, type CodeResource, CodesResources, type UploadFile, } from "./resources/codes.js";
+export { BoundFileResources, FileResources } from "./resources/files.js";
+export { BoundFindingResources, FindingResources, } from "./resources/findings.js";
+export { BoundNodeResources, NodeResources } from "./resources/nodes.js";
+export { ProjectResources } from "./resources/projects.js";
+export type { WithoutPagination, WithoutStreaming, WithPagination, WithStreaming, } from "./resources/shared.js";
+export { AnalysisSummaryResources } from "./resources/summary.js";
+export { BoundTransitionResources, TransitionResources, } from "./resources/transitions.js";
+export { ProjectUserResources } from "./resources/users.js";
+export { AnalysisVersionsResources } from "./resources/versions.js";
+export { EventResource, type EventResourceConfig, type SSEEvent, SSEParser, } from "./streaming.js";
+export type * from "./types/graph-data.js";
+export * from "./types/literals.js";
+export * from "./types/node-types.js";
+export * from "./types/requests.js";
+export * from "./types/responses.js";
+export * from "./types/static-analysis.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,WAAW,EACX,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACrB,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC9E,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACN,YAAY,EACZ,KAAK,mBAAmB,EACxB,iBAAiB,EACjB,MAAM,EACN,SAAS,EACT,SAAS,EACT,KAAK,UAAU,EACf,gBAAgB,EAChB,QAAQ,GACR,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACN,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,sBAAsB,GACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EACN,mBAAmB,EACnB,KAAK,YAAY,EACjB,cAAc,EACd,KAAK,UAAU,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EACN,qBAAqB,EACrB,gBAAgB,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EACX,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,aAAa,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EACN,wBAAwB,EACxB,mBAAmB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EACN,aAAa,EACb,KAAK,mBAAmB,EACxB,KAAK,QAAQ,EACb,SAAS,GACT,MAAM,gBAAgB,CAAC;AAExB,mBAAmB,uBAAuB,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC"}

package/dist/index.js

@@ -0,0 +1,29 @@
+export { BevorClient, } from "./client.js";
+export * from "./errors.js";
+export { CallNode } from "./graph/call-node.js";
+export { GraphCursor } from "./graph/cursor.js";
+export { FieldMetadata } from "./graph/field-metadata.js";
+export { Graph } from "./graph/graph.js";
+export * from "./helpers/call-chain.js";
+export * from "./helpers/sarif.js";
+export { comparePaths, fingerprintSource, isUtf8, SKIP_DIRS, SKIP_EXTS, skipRelativePath, zipFiles, } from "./helpers/source-fingerprint.js";
+export { StaticAnalysis } from "./helpers/static-analysis.js";
+export { PaginatedResource } from "./pagination.js";
+export { AnalysisResources, BoundAnalysisResources, } from "./resources/analyses.js";
+export { BoundChatResources, ChatResources } from "./resources/chats.js";
+export { BoundCodesResources, CodesResources, } from "./resources/codes.js";
+export { BoundFileResources, FileResources } from "./resources/files.js";
+export { BoundFindingResources, FindingResources, } from "./resources/findings.js";
+export { BoundNodeResources, NodeResources } from "./resources/nodes.js";
+export { ProjectResources } from "./resources/projects.js";
+export { AnalysisSummaryResources } from "./resources/summary.js";
+export { BoundTransitionResources, TransitionResources, } from "./resources/transitions.js";
+export { ProjectUserResources } from "./resources/users.js";
+export { AnalysisVersionsResources } from "./resources/versions.js";
+export { EventResource, SSEParser, } from "./streaming.js";
+export * from "./types/literals.js";
+export * from "./types/node-types.js";
+export * from "./types/requests.js";
+export * from "./types/responses.js";
+export * from "./types/static-analysis.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,WAAW,GAQX,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAqB,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAmB,KAAK,EAAsB,MAAM,kBAAkB,CAAC;AAC9E,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACN,YAAY,EAEZ,iBAAiB,EACjB,MAAM,EACN,SAAS,EACT,SAAS,EAET,gBAAgB,EAChB,QAAQ,GACR,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EACN,iBAAiB,EAEjB,sBAAsB,GACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EACN,mBAAmB,EAEnB,cAAc,GAEd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EACN,qBAAqB,EACrB,gBAAgB,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAO3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EACN,wBAAwB,EACxB,mBAAmB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EACN,aAAa,EAGb,SAAS,GACT,MAAM,gBAAgB,CAAC;AAGxB,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC"}

package/dist/node.d.ts

@@ -0,0 +1,4 @@
+import type { SourceFile } from "./helpers/source-fingerprint.js";
+/** Every file under `root`, relative to it. Mirrors the Python SDK's `directory_files`. */
+export declare const directoryFiles: (root: string) => Promise<SourceFile[]>;
+//# sourceMappingURL=node.d.ts.map

package/dist/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAkBlE,2FAA2F;AAC3F,eAAO,MAAM,cAAc,SAAgB,MAAM,KAAG,OAAO,CAAC,UAAU,EAAE,CAMtE,CAAC"}

package/dist/node.js

@@ -0,0 +1,26 @@
+/**
+ * Node-only helpers (filesystem access). Import from `@bevor/sdk/node`.
+ */
+import { readdir, readFile, stat } from "node:fs/promises";
+import { join } from "node:path";
+/** Relative POSIX paths of every file under `dir`, following file symlinks but not directory ones. */
+const listFiles = async (root, dir = "") => {
+    const out = [];
+    for (const entry of await readdir(join(root, dir), { withFileTypes: true })) {
+        const rel = dir ? `${dir}/${entry.name}` : entry.name;
+        if (entry.isDirectory())
+            out.push(...(await listFiles(root, rel)));
+        else if (entry.isFile())
+            out.push(rel);
+        else if (entry.isSymbolicLink() &&
+            (await stat(join(root, rel)).catch(() => null))?.isFile())
+            out.push(rel);
+    }
+    return out;
+};
+/** Every file under `root`, relative to it. Mirrors the Python SDK's `directory_files`. */
+export const directoryFiles = async (root) => Promise.all((await listFiles(root)).map(async (path) => ({
+    path,
+    content: new Uint8Array(await readFile(join(root, path))),
+})));
+//# sourceMappingURL=node.js.map

package/dist/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,sGAAsG;AACtG,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAAE,GAAG,GAAG,EAAE,EAAqB,EAAE;IACrE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7E,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACtD,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;aAC9D,IAAI,KAAK,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aAClC,IACJ,KAAK,CAAC,cAAc,EAAE;YACtB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE;YAEzD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC,CAAC;AAEF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,IAAY,EAAyB,EAAE,CAC3E,OAAO,CAAC,GAAG,CACV,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI;IACJ,OAAO,EAAE,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;CACzD,CAAC,CAAC,CACH,CAAC"}

package/dist/pagination.d.ts

@@ -0,0 +1,13 @@
+import type { Pagination } from "./types/responses.js";
+/** Incrementally accumulates the pages of a paginated list. */
+export declare class PaginatedResource<T> {
+    #private;
+    constructor(data: Pagination<T>, fetchPage: (page: number) => Promise<Pagination<T>>);
+    /** Every result fetched so far, across pages. */
+    get results(): T[];
+    /** The most recently fetched page. */
+    get current(): Pagination<T>;
+    get hasMore(): boolean;
+    fetchNext(): Promise<void>;
+}
+//# sourceMappingURL=pagination.d.ts.map

package/dist/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../src/pagination.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,+DAA+D;AAC/D,qBAAa,iBAAiB,CAAC,CAAC;;IAK/B,YACC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EACnB,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAKnD;IAED,iDAAiD;IACjD,IAAI,OAAO,IAAI,CAAC,EAAE,CAEjB;IAED,sCAAsC;IACtC,IAAI,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAE3B;IAED,IAAI,OAAO,IAAI,OAAO,CAErB;IAEK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAM/B;CACD"}