@cyberhub/shieldpm 0.1.0 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/allowlist/index.d.ts +49 -0
- package/dist/allowlist/index.d.ts.map +1 -0
- package/dist/allowlist/index.js +415 -0
- package/dist/allowlist/index.js.map +1 -0
- package/dist/cli.js +17 -12
- package/dist/cli.js.map +1 -1
- package/dist/index.d.ts +2 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +2 -0
- package/dist/index.js.map +1 -1
- package/package.json +1 -1
- package/src/allowlist/index.ts +458 -0
- package/src/cli.ts +18 -12
- package/src/index.ts +4 -0
|
@@ -0,0 +1,49 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* ShieldPM — Community-Maintained Allowlist
|
|
3
|
+
*
|
|
4
|
+
* Trusted packages that are known-safe despite having high-risk patterns.
|
|
5
|
+
* These packages legitimately need filesystem, network, or process access.
|
|
6
|
+
*
|
|
7
|
+
* Contributing: Add packages with justification. Each entry explains WHY
|
|
8
|
+
* the package triggers alerts and WHY it's safe.
|
|
9
|
+
*/
|
|
10
|
+
export interface AllowlistEntry {
|
|
11
|
+
/** npm package name */
|
|
12
|
+
name: string;
|
|
13
|
+
/** Why this package triggers alerts */
|
|
14
|
+
reason: string;
|
|
15
|
+
/** Maximum allowed risk score (findings above this still flag) */
|
|
16
|
+
maxAllowedScore: number;
|
|
17
|
+
/** Categories of findings to suppress */
|
|
18
|
+
suppressCategories: string[];
|
|
19
|
+
/** URL for verification */
|
|
20
|
+
repository: string;
|
|
21
|
+
/** Weekly npm downloads (approximate, for trust signal) */
|
|
22
|
+
weeklyDownloads: string;
|
|
23
|
+
/** Last verified date */
|
|
24
|
+
verified: string;
|
|
25
|
+
}
|
|
26
|
+
/**
|
|
27
|
+
* Packages verified as safe despite triggering static analysis alerts.
|
|
28
|
+
* Organized by category.
|
|
29
|
+
*/
|
|
30
|
+
export declare const ALLOWLIST: AllowlistEntry[];
|
|
31
|
+
/** Check if a package is in the allowlist */
|
|
32
|
+
export declare function isAllowlisted(packageName: string): boolean;
|
|
33
|
+
/** Get allowlist entry for a package */
|
|
34
|
+
export declare function getAllowlistEntry(packageName: string): AllowlistEntry | undefined;
|
|
35
|
+
/** Get all allowlisted package names */
|
|
36
|
+
export declare function getAllowlistedNames(): string[];
|
|
37
|
+
/**
|
|
38
|
+
* Apply allowlist to a risk score.
|
|
39
|
+
* If the package is allowlisted and the score is within the allowed range,
|
|
40
|
+
* return 0. Otherwise return the original score.
|
|
41
|
+
*/
|
|
42
|
+
export declare function applyAllowlist(packageName: string, originalScore: number, findings: {
|
|
43
|
+
category: string;
|
|
44
|
+
}[]): {
|
|
45
|
+
adjustedScore: number;
|
|
46
|
+
suppressed: boolean;
|
|
47
|
+
entry?: AllowlistEntry;
|
|
48
|
+
};
|
|
49
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/allowlist/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,cAAc;IAC7B,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,eAAe,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,eAAe,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,SAAS,EAAE,cAAc,EAuXrC,CAAC;AAMF,6CAA6C;AAC7C,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wCAAwC;AACxC,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEjF;AAED,wCAAwC;AACxC,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,EAAE,GAC/B;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,cAAc,CAAA;CAAE,CAqBxE"}
|
|
@@ -0,0 +1,415 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* ShieldPM — Community-Maintained Allowlist
|
|
3
|
+
*
|
|
4
|
+
* Trusted packages that are known-safe despite having high-risk patterns.
|
|
5
|
+
* These packages legitimately need filesystem, network, or process access.
|
|
6
|
+
*
|
|
7
|
+
* Contributing: Add packages with justification. Each entry explains WHY
|
|
8
|
+
* the package triggers alerts and WHY it's safe.
|
|
9
|
+
*/
|
|
10
|
+
/**
|
|
11
|
+
* Packages verified as safe despite triggering static analysis alerts.
|
|
12
|
+
* Organized by category.
|
|
13
|
+
*/
|
|
14
|
+
export const ALLOWLIST = [
|
|
15
|
+
// ─── Build Tools & Compilers ────────────────────────────────
|
|
16
|
+
{
|
|
17
|
+
name: 'typescript',
|
|
18
|
+
reason: 'Compiler — legitimately reads/writes files, spawns processes for compilation',
|
|
19
|
+
maxAllowedScore: 10,
|
|
20
|
+
suppressCategories: ['filesystem', 'process', 'code-execution'],
|
|
21
|
+
repository: 'https://github.com/microsoft/TypeScript',
|
|
22
|
+
weeklyDownloads: '50M+',
|
|
23
|
+
verified: '2026-03',
|
|
24
|
+
},
|
|
25
|
+
{
|
|
26
|
+
name: 'eslint',
|
|
27
|
+
reason: 'Linter — reads source files, loads plugins dynamically, accesses filesystem',
|
|
28
|
+
maxAllowedScore: 10,
|
|
29
|
+
suppressCategories: ['filesystem', 'code-execution', 'process'],
|
|
30
|
+
repository: 'https://github.com/eslint/eslint',
|
|
31
|
+
weeklyDownloads: '40M+',
|
|
32
|
+
verified: '2026-03',
|
|
33
|
+
},
|
|
34
|
+
{
|
|
35
|
+
name: 'tailwindcss',
|
|
36
|
+
reason: 'CSS framework — scans source files for class usage, writes output CSS',
|
|
37
|
+
maxAllowedScore: 10,
|
|
38
|
+
suppressCategories: ['filesystem', 'process'],
|
|
39
|
+
repository: 'https://github.com/tailwindlabs/tailwindcss',
|
|
40
|
+
weeklyDownloads: '15M+',
|
|
41
|
+
verified: '2026-03',
|
|
42
|
+
},
|
|
43
|
+
{
|
|
44
|
+
name: 'postcss',
|
|
45
|
+
reason: 'CSS processor — reads/transforms CSS files, loads plugins',
|
|
46
|
+
maxAllowedScore: 8,
|
|
47
|
+
suppressCategories: ['filesystem', 'code-execution'],
|
|
48
|
+
repository: 'https://github.com/postcss/postcss',
|
|
49
|
+
weeklyDownloads: '40M+',
|
|
50
|
+
verified: '2026-03',
|
|
51
|
+
},
|
|
52
|
+
{
|
|
53
|
+
name: 'tsx',
|
|
54
|
+
reason: 'TypeScript executor — compiles and runs TS files, spawns node processes',
|
|
55
|
+
maxAllowedScore: 10,
|
|
56
|
+
suppressCategories: ['filesystem', 'process', 'code-execution'],
|
|
57
|
+
repository: 'https://github.com/privatenumber/tsx',
|
|
58
|
+
weeklyDownloads: '5M+',
|
|
59
|
+
verified: '2026-03',
|
|
60
|
+
},
|
|
61
|
+
{
|
|
62
|
+
name: 'esbuild',
|
|
63
|
+
reason: 'Bundler — reads source files, writes bundles, uses native binaries',
|
|
64
|
+
maxAllowedScore: 10,
|
|
65
|
+
suppressCategories: ['filesystem', 'process', 'code-execution', 'network'],
|
|
66
|
+
repository: 'https://github.com/evanw/esbuild',
|
|
67
|
+
weeklyDownloads: '25M+',
|
|
68
|
+
verified: '2026-03',
|
|
69
|
+
},
|
|
70
|
+
{
|
|
71
|
+
name: 'webpack',
|
|
72
|
+
reason: 'Bundler — full filesystem access, dynamic requires, process spawning',
|
|
73
|
+
maxAllowedScore: 10,
|
|
74
|
+
suppressCategories: ['filesystem', 'process', 'code-execution'],
|
|
75
|
+
repository: 'https://github.com/webpack/webpack',
|
|
76
|
+
weeklyDownloads: '25M+',
|
|
77
|
+
verified: '2026-03',
|
|
78
|
+
},
|
|
79
|
+
{
|
|
80
|
+
name: 'vite',
|
|
81
|
+
reason: 'Build tool — dev server with network access, file watching, HMR',
|
|
82
|
+
maxAllowedScore: 10,
|
|
83
|
+
suppressCategories: ['filesystem', 'process', 'network', 'code-execution'],
|
|
84
|
+
repository: 'https://github.com/vitejs/vite',
|
|
85
|
+
weeklyDownloads: '15M+',
|
|
86
|
+
verified: '2026-03',
|
|
87
|
+
},
|
|
88
|
+
// ─── Frameworks & Runtimes ──────────────────────────────────
|
|
89
|
+
{
|
|
90
|
+
name: 'next',
|
|
91
|
+
reason: 'Full-stack framework — server rendering, API routes, file-based routing',
|
|
92
|
+
maxAllowedScore: 10,
|
|
93
|
+
suppressCategories: ['filesystem', 'process', 'network', 'code-execution'],
|
|
94
|
+
repository: 'https://github.com/vercel/next.js',
|
|
95
|
+
weeklyDownloads: '10M+',
|
|
96
|
+
verified: '2026-03',
|
|
97
|
+
},
|
|
98
|
+
{
|
|
99
|
+
name: 'react',
|
|
100
|
+
reason: 'UI library — uses eval-like patterns for JSX transform in dev mode',
|
|
101
|
+
maxAllowedScore: 6,
|
|
102
|
+
suppressCategories: ['code-execution'],
|
|
103
|
+
repository: 'https://github.com/facebook/react',
|
|
104
|
+
weeklyDownloads: '25M+',
|
|
105
|
+
verified: '2026-03',
|
|
106
|
+
},
|
|
107
|
+
{
|
|
108
|
+
name: 'react-dom',
|
|
109
|
+
reason: 'DOM renderer — innerHTML usage for hydration, process.env checks',
|
|
110
|
+
maxAllowedScore: 10,
|
|
111
|
+
suppressCategories: ['code-execution', 'environment'],
|
|
112
|
+
repository: 'https://github.com/facebook/react',
|
|
113
|
+
weeklyDownloads: '25M+',
|
|
114
|
+
verified: '2026-03',
|
|
115
|
+
},
|
|
116
|
+
{
|
|
117
|
+
name: 'express',
|
|
118
|
+
reason: 'Web framework — network listener, request parsing, middleware chain',
|
|
119
|
+
maxAllowedScore: 8,
|
|
120
|
+
suppressCategories: ['network', 'code-execution'],
|
|
121
|
+
repository: 'https://github.com/expressjs/express',
|
|
122
|
+
weeklyDownloads: '30M+',
|
|
123
|
+
verified: '2026-03',
|
|
124
|
+
},
|
|
125
|
+
// ─── Database & ORM ─────────────────────────────────────────
|
|
126
|
+
{
|
|
127
|
+
name: 'prisma',
|
|
128
|
+
reason: 'ORM — generates client code, reads schema files, spawns query engine binary',
|
|
129
|
+
maxAllowedScore: 10,
|
|
130
|
+
suppressCategories: ['filesystem', 'process', 'code-execution', 'network'],
|
|
131
|
+
repository: 'https://github.com/prisma/prisma',
|
|
132
|
+
weeklyDownloads: '3M+',
|
|
133
|
+
verified: '2026-03',
|
|
134
|
+
},
|
|
135
|
+
{
|
|
136
|
+
name: '@prisma/client',
|
|
137
|
+
reason: 'Generated DB client — connects to databases, reads env for connection strings',
|
|
138
|
+
maxAllowedScore: 10,
|
|
139
|
+
suppressCategories: ['filesystem', 'process', 'network', 'environment', 'code-execution'],
|
|
140
|
+
repository: 'https://github.com/prisma/prisma',
|
|
141
|
+
weeklyDownloads: '3M+',
|
|
142
|
+
verified: '2026-03',
|
|
143
|
+
},
|
|
144
|
+
// ─── API & SDK ──────────────────────────────────────────────
|
|
145
|
+
{
|
|
146
|
+
name: '@anthropic-ai/sdk',
|
|
147
|
+
reason: 'AI SDK — makes HTTPS calls to Anthropic API, reads API key from env',
|
|
148
|
+
maxAllowedScore: 10,
|
|
149
|
+
suppressCategories: ['network', 'environment'],
|
|
150
|
+
repository: 'https://github.com/anthropics/anthropic-sdk-node',
|
|
151
|
+
weeklyDownloads: '500K+',
|
|
152
|
+
verified: '2026-03',
|
|
153
|
+
},
|
|
154
|
+
{
|
|
155
|
+
name: 'openai',
|
|
156
|
+
reason: 'AI SDK — makes HTTPS calls to OpenAI API, reads API key from env',
|
|
157
|
+
maxAllowedScore: 10,
|
|
158
|
+
suppressCategories: ['network', 'environment'],
|
|
159
|
+
repository: 'https://github.com/openai/openai-node',
|
|
160
|
+
weeklyDownloads: '2M+',
|
|
161
|
+
verified: '2026-03',
|
|
162
|
+
},
|
|
163
|
+
{
|
|
164
|
+
name: 'axios',
|
|
165
|
+
reason: 'HTTP client — network requests are its core purpose',
|
|
166
|
+
maxAllowedScore: 8,
|
|
167
|
+
suppressCategories: ['network'],
|
|
168
|
+
repository: 'https://github.com/axios/axios',
|
|
169
|
+
weeklyDownloads: '45M+',
|
|
170
|
+
verified: '2026-03',
|
|
171
|
+
},
|
|
172
|
+
{
|
|
173
|
+
name: 'node-fetch',
|
|
174
|
+
reason: 'Fetch polyfill — network requests are its core purpose',
|
|
175
|
+
maxAllowedScore: 8,
|
|
176
|
+
suppressCategories: ['network'],
|
|
177
|
+
repository: 'https://github.com/node-fetch/node-fetch',
|
|
178
|
+
weeklyDownloads: '35M+',
|
|
179
|
+
verified: '2026-03',
|
|
180
|
+
},
|
|
181
|
+
// ─── Auth & Security ────────────────────────────────────────
|
|
182
|
+
{
|
|
183
|
+
name: '@clerk/nextjs',
|
|
184
|
+
reason: 'Auth SDK — reads env for API keys, makes auth API calls, sets cookies',
|
|
185
|
+
maxAllowedScore: 8,
|
|
186
|
+
suppressCategories: ['network', 'environment'],
|
|
187
|
+
repository: 'https://github.com/clerk/javascript',
|
|
188
|
+
weeklyDownloads: '500K+',
|
|
189
|
+
verified: '2026-03',
|
|
190
|
+
},
|
|
191
|
+
{
|
|
192
|
+
name: 'jsonwebtoken',
|
|
193
|
+
reason: 'JWT library — crypto operations, Buffer usage for token encoding',
|
|
194
|
+
maxAllowedScore: 6,
|
|
195
|
+
suppressCategories: ['code-execution'],
|
|
196
|
+
repository: 'https://github.com/auth0/node-jsonwebtoken',
|
|
197
|
+
weeklyDownloads: '15M+',
|
|
198
|
+
verified: '2026-03',
|
|
199
|
+
},
|
|
200
|
+
{
|
|
201
|
+
name: 'bcrypt',
|
|
202
|
+
reason: 'Password hashing — native C++ addon, crypto operations',
|
|
203
|
+
maxAllowedScore: 6,
|
|
204
|
+
suppressCategories: ['process'],
|
|
205
|
+
repository: 'https://github.com/kelektiv/node.bcrypt.js',
|
|
206
|
+
weeklyDownloads: '3M+',
|
|
207
|
+
verified: '2026-03',
|
|
208
|
+
},
|
|
209
|
+
// ─── Utilities ──────────────────────────────────────────────
|
|
210
|
+
{
|
|
211
|
+
name: 'lodash',
|
|
212
|
+
reason: 'Utility library — pure functions, no side effects',
|
|
213
|
+
maxAllowedScore: 2,
|
|
214
|
+
suppressCategories: [],
|
|
215
|
+
repository: 'https://github.com/lodash/lodash',
|
|
216
|
+
weeklyDownloads: '50M+',
|
|
217
|
+
verified: '2026-03',
|
|
218
|
+
},
|
|
219
|
+
{
|
|
220
|
+
name: 'framer-motion',
|
|
221
|
+
reason: 'Animation library — DOM manipulation only, no system access',
|
|
222
|
+
maxAllowedScore: 2,
|
|
223
|
+
suppressCategories: [],
|
|
224
|
+
repository: 'https://github.com/framer/motion',
|
|
225
|
+
weeklyDownloads: '5M+',
|
|
226
|
+
verified: '2026-03',
|
|
227
|
+
},
|
|
228
|
+
{
|
|
229
|
+
name: 'lucide-react',
|
|
230
|
+
reason: 'Icon library — pure SVG components, no side effects',
|
|
231
|
+
maxAllowedScore: 1,
|
|
232
|
+
suppressCategories: [],
|
|
233
|
+
repository: 'https://github.com/lucide-icons/lucide',
|
|
234
|
+
weeklyDownloads: '3M+',
|
|
235
|
+
verified: '2026-03',
|
|
236
|
+
},
|
|
237
|
+
// ─── Image & Media ─────────────────────────────────────────
|
|
238
|
+
{
|
|
239
|
+
name: 'sharp',
|
|
240
|
+
reason: 'Image processing — native binary (libvips), filesystem I/O',
|
|
241
|
+
maxAllowedScore: 10,
|
|
242
|
+
suppressCategories: ['filesystem', 'process'],
|
|
243
|
+
repository: 'https://github.com/lovell/sharp',
|
|
244
|
+
weeklyDownloads: '10M+',
|
|
245
|
+
verified: '2026-03',
|
|
246
|
+
},
|
|
247
|
+
{
|
|
248
|
+
name: 'html-to-image',
|
|
249
|
+
reason: 'Screenshot library — DOM access, canvas rendering',
|
|
250
|
+
maxAllowedScore: 10,
|
|
251
|
+
suppressCategories: ['code-execution'],
|
|
252
|
+
repository: 'https://github.com/nicolo-ribaudo/html-to-image',
|
|
253
|
+
weeklyDownloads: '500K+',
|
|
254
|
+
verified: '2026-03',
|
|
255
|
+
},
|
|
256
|
+
// ─── Visualization ─────────────────────────────────────────
|
|
257
|
+
{
|
|
258
|
+
name: '@nivo/core',
|
|
259
|
+
reason: 'Chart library — pure rendering, no system access',
|
|
260
|
+
maxAllowedScore: 2,
|
|
261
|
+
suppressCategories: [],
|
|
262
|
+
repository: 'https://github.com/plouc/nivo',
|
|
263
|
+
weeklyDownloads: '500K+',
|
|
264
|
+
verified: '2026-03',
|
|
265
|
+
},
|
|
266
|
+
{
|
|
267
|
+
name: '@nivo/bar',
|
|
268
|
+
reason: 'Chart component — pure rendering',
|
|
269
|
+
maxAllowedScore: 2,
|
|
270
|
+
suppressCategories: [],
|
|
271
|
+
repository: 'https://github.com/plouc/nivo',
|
|
272
|
+
weeklyDownloads: '300K+',
|
|
273
|
+
verified: '2026-03',
|
|
274
|
+
},
|
|
275
|
+
{
|
|
276
|
+
name: '@nivo/line',
|
|
277
|
+
reason: 'Chart component — pure rendering',
|
|
278
|
+
maxAllowedScore: 2,
|
|
279
|
+
suppressCategories: [],
|
|
280
|
+
repository: 'https://github.com/plouc/nivo',
|
|
281
|
+
weeklyDownloads: '300K+',
|
|
282
|
+
verified: '2026-03',
|
|
283
|
+
},
|
|
284
|
+
{
|
|
285
|
+
name: '@nivo/pie',
|
|
286
|
+
reason: 'Chart component — pure rendering',
|
|
287
|
+
maxAllowedScore: 2,
|
|
288
|
+
suppressCategories: [],
|
|
289
|
+
repository: 'https://github.com/plouc/nivo',
|
|
290
|
+
weeklyDownloads: '200K+',
|
|
291
|
+
verified: '2026-03',
|
|
292
|
+
},
|
|
293
|
+
{
|
|
294
|
+
name: 'd3',
|
|
295
|
+
reason: 'Visualization library — DOM manipulation, math operations',
|
|
296
|
+
maxAllowedScore: 4,
|
|
297
|
+
suppressCategories: ['code-execution'],
|
|
298
|
+
repository: 'https://github.com/d3/d3',
|
|
299
|
+
weeklyDownloads: '5M+',
|
|
300
|
+
verified: '2026-03',
|
|
301
|
+
},
|
|
302
|
+
// ─── Graph & Layout ─────────────────────────────────────────
|
|
303
|
+
{
|
|
304
|
+
name: '@xyflow/react',
|
|
305
|
+
reason: 'Flow diagram library — DOM rendering, no system access',
|
|
306
|
+
maxAllowedScore: 3,
|
|
307
|
+
suppressCategories: [],
|
|
308
|
+
repository: 'https://github.com/xyflow/xyflow',
|
|
309
|
+
weeklyDownloads: '500K+',
|
|
310
|
+
verified: '2026-03',
|
|
311
|
+
},
|
|
312
|
+
{
|
|
313
|
+
name: 'elkjs',
|
|
314
|
+
reason: 'Graph layout engine — heavy computation, WASM/JS compiled from Java',
|
|
315
|
+
maxAllowedScore: 10,
|
|
316
|
+
suppressCategories: ['code-execution'],
|
|
317
|
+
repository: 'https://github.com/kieler/elkjs',
|
|
318
|
+
weeklyDownloads: '500K+',
|
|
319
|
+
verified: '2026-03',
|
|
320
|
+
},
|
|
321
|
+
// ─── Testing ────────────────────────────────────────────────
|
|
322
|
+
{
|
|
323
|
+
name: 'vitest',
|
|
324
|
+
reason: 'Test runner — spawns processes, reads test files, dynamic imports',
|
|
325
|
+
maxAllowedScore: 10,
|
|
326
|
+
suppressCategories: ['filesystem', 'process', 'code-execution'],
|
|
327
|
+
repository: 'https://github.com/vitest-dev/vitest',
|
|
328
|
+
weeklyDownloads: '10M+',
|
|
329
|
+
verified: '2026-03',
|
|
330
|
+
},
|
|
331
|
+
{
|
|
332
|
+
name: 'jest',
|
|
333
|
+
reason: 'Test runner — spawns workers, filesystem access, code transformation',
|
|
334
|
+
maxAllowedScore: 10,
|
|
335
|
+
suppressCategories: ['filesystem', 'process', 'code-execution'],
|
|
336
|
+
repository: 'https://github.com/jestjs/jest',
|
|
337
|
+
weeklyDownloads: '20M+',
|
|
338
|
+
verified: '2026-03',
|
|
339
|
+
},
|
|
340
|
+
// ─── Node.js Types ──────────────────────────────────────────
|
|
341
|
+
{
|
|
342
|
+
name: '@types/node',
|
|
343
|
+
reason: 'Type definitions — contains type signatures for all Node.js APIs including fs, net, child_process',
|
|
344
|
+
maxAllowedScore: 10,
|
|
345
|
+
suppressCategories: ['filesystem', 'process', 'network', 'code-execution'],
|
|
346
|
+
repository: 'https://github.com/DefinitelyTyped/DefinitelyTyped',
|
|
347
|
+
weeklyDownloads: '50M+',
|
|
348
|
+
verified: '2026-03',
|
|
349
|
+
},
|
|
350
|
+
{
|
|
351
|
+
name: '@types/react',
|
|
352
|
+
reason: 'Type definitions — pure types, no runtime code',
|
|
353
|
+
maxAllowedScore: 1,
|
|
354
|
+
suppressCategories: [],
|
|
355
|
+
repository: 'https://github.com/DefinitelyTyped/DefinitelyTyped',
|
|
356
|
+
weeklyDownloads: '20M+',
|
|
357
|
+
verified: '2026-03',
|
|
358
|
+
},
|
|
359
|
+
// ─── Process Managers ───────────────────────────────────────
|
|
360
|
+
{
|
|
361
|
+
name: 'pm2',
|
|
362
|
+
reason: 'Process manager — spawns/monitors/restarts processes by design',
|
|
363
|
+
maxAllowedScore: 10,
|
|
364
|
+
suppressCategories: ['filesystem', 'process', 'network', 'code-execution'],
|
|
365
|
+
repository: 'https://github.com/Unitech/pm2',
|
|
366
|
+
weeklyDownloads: '2M+',
|
|
367
|
+
verified: '2026-03',
|
|
368
|
+
},
|
|
369
|
+
{
|
|
370
|
+
name: 'nodemon',
|
|
371
|
+
reason: 'File watcher — watches filesystem, restarts processes on changes',
|
|
372
|
+
maxAllowedScore: 10,
|
|
373
|
+
suppressCategories: ['filesystem', 'process'],
|
|
374
|
+
repository: 'https://github.com/remy/nodemon',
|
|
375
|
+
weeklyDownloads: '5M+',
|
|
376
|
+
verified: '2026-03',
|
|
377
|
+
},
|
|
378
|
+
];
|
|
379
|
+
/* ─── Lookup helpers ─────────────────────────────────────────── */
|
|
380
|
+
const allowlistMap = new Map(ALLOWLIST.map((e) => [e.name, e]));
|
|
381
|
+
/** Check if a package is in the allowlist */
|
|
382
|
+
export function isAllowlisted(packageName) {
|
|
383
|
+
return allowlistMap.has(packageName);
|
|
384
|
+
}
|
|
385
|
+
/** Get allowlist entry for a package */
|
|
386
|
+
export function getAllowlistEntry(packageName) {
|
|
387
|
+
return allowlistMap.get(packageName);
|
|
388
|
+
}
|
|
389
|
+
/** Get all allowlisted package names */
|
|
390
|
+
export function getAllowlistedNames() {
|
|
391
|
+
return ALLOWLIST.map((e) => e.name);
|
|
392
|
+
}
|
|
393
|
+
/**
|
|
394
|
+
* Apply allowlist to a risk score.
|
|
395
|
+
* If the package is allowlisted and the score is within the allowed range,
|
|
396
|
+
* return 0. Otherwise return the original score.
|
|
397
|
+
*/
|
|
398
|
+
export function applyAllowlist(packageName, originalScore, findings) {
|
|
399
|
+
const entry = allowlistMap.get(packageName);
|
|
400
|
+
if (!entry)
|
|
401
|
+
return { adjustedScore: originalScore, suppressed: false };
|
|
402
|
+
// Filter out suppressed categories
|
|
403
|
+
const unsuppressedFindings = findings.filter((f) => !entry.suppressCategories.includes(f.category));
|
|
404
|
+
// If all findings are in suppressed categories, score is 0
|
|
405
|
+
if (unsuppressedFindings.length === 0) {
|
|
406
|
+
return { adjustedScore: 0, suppressed: true, entry };
|
|
407
|
+
}
|
|
408
|
+
// If score is within allowed range, reduce it
|
|
409
|
+
if (originalScore <= entry.maxAllowedScore) {
|
|
410
|
+
return { adjustedScore: 0, suppressed: true, entry };
|
|
411
|
+
}
|
|
412
|
+
// Score exceeds what's expected — something unusual, flag it
|
|
413
|
+
return { adjustedScore: originalScore, suppressed: false, entry };
|
|
414
|
+
}
|
|
415
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/allowlist/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmBH;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAqB;IACzC,+DAA+D;IAC/D;QACE,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,8EAA8E;QACtF,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,gBAAgB,CAAC;QAC/D,UAAU,EAAE,yCAAyC;QACrD,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,6EAA6E;QACrF,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,SAAS,CAAC;QAC/D,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,uEAAuE;QAC/E,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;QAC7C,UAAU,EAAE,6CAA6C;QACzD,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,2DAA2D;QACnE,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;QACpD,UAAU,EAAE,oCAAoC;QAChD,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,yEAAyE;QACjF,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,gBAAgB,CAAC;QAC/D,UAAU,EAAE,sCAAsC;QAClD,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,oEAAoE;QAC5E,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,CAAC;QAC1E,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,sEAAsE;QAC9E,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,gBAAgB,CAAC;QAC/D,UAAU,EAAE,oCAAoC;QAChD,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,iEAAiE;QACzE,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC;QAC1E,UAAU,EAAE,gCAAgC;QAC5C,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IAED,+DAA+D;IAC/D;QACE,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,yEAAyE;QACjF,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC;QAC1E,UAAU,EAAE,mCAAmC;QAC/C,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,oEAAoE;QAC5E,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,CAAC,gBAAgB,CAAC;QACtC,UAAU,EAAE,mCAAmC;QAC/C,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,kEAAkE;QAC1E,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,gBAAgB,EAAE,aAAa,CAAC;QACrD,UAAU,EAAE,mCAAmC;QAC/C,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,qEAAqE;QAC7E,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC;QACjD,UAAU,EAAE,sCAAsC;QAClD,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IAED,+DAA+D;IAC/D;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,6EAA6E;QACrF,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,CAAC;QAC1E,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,+EAA+E;QACvF,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,CAAC;QACzF,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,SAAS;KACpB;IAED,+DAA+D;IAC/D;QACE,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,qEAAqE;QAC7E,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;QAC9C,UAAU,EAAE,kDAAkD;QAC9D,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,kEAAkE;QAC1E,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;QAC9C,UAAU,EAAE,uCAAuC;QACnD,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,qDAAqD;QAC7D,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,CAAC,SAAS,CAAC;QAC/B,UAAU,EAAE,gCAAgC;QAC5C,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,wDAAwD;QAChE,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,CAAC,SAAS,CAAC;QAC/B,UAAU,EAAE,0CAA0C;QACtD,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IAED,+DAA+D;IAC/D;QACE,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,uEAAuE;QAC/E,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;QAC9C,UAAU,EAAE,qCAAqC;QACjD,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,kEAAkE;QAC1E,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,CAAC,gBAAgB,CAAC;QACtC,UAAU,EAAE,4CAA4C;QACxD,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,wDAAwD;QAChE,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,CAAC,SAAS,CAAC;QAC/B,UAAU,EAAE,4CAA4C;QACxD,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,SAAS;KACpB;IAED,+DAA+D;IAC/D;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,mDAAmD;QAC3D,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,6DAA6D;QACrE,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,qDAAqD;QAC7D,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,wCAAwC;QACpD,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,SAAS;KACpB;IAED,8DAA8D;IAC9D;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,4DAA4D;QACpE,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;QAC7C,UAAU,EAAE,iCAAiC;QAC7C,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,mDAAmD;QAC3D,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,gBAAgB,CAAC;QACtC,UAAU,EAAE,iDAAiD;QAC7D,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE,SAAS;KACpB;IAED,8DAA8D;IAC9D;QACE,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,kDAAkD;QAC1D,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,+BAA+B;QAC3C,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,kCAAkC;QAC1C,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,+BAA+B;QAC3C,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,kCAAkC;QAC1C,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,+BAA+B;QAC3C,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,kCAAkC;QAC1C,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,+BAA+B;QAC3C,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,2DAA2D;QACnE,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,CAAC,gBAAgB,CAAC;QACtC,UAAU,EAAE,0BAA0B;QACtC,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,SAAS;KACpB;IAED,+DAA+D;IAC/D;QACE,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,wDAAwD;QAChE,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,kCAAkC;QAC9C,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,qEAAqE;QAC7E,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,gBAAgB,CAAC;QACtC,UAAU,EAAE,iCAAiC;QAC7C,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE,SAAS;KACpB;IAED,+DAA+D;IAC/D;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,mEAAmE;QAC3E,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,gBAAgB,CAAC;QAC/D,UAAU,EAAE,sCAAsC;QAClD,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,sEAAsE;QAC9E,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,gBAAgB,CAAC;QAC/D,UAAU,EAAE,gCAAgC;QAC5C,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IAED,+DAA+D;IAC/D;QACE,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,mGAAmG;QAC3G,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC;QAC1E,UAAU,EAAE,oDAAoD;QAChE,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,gDAAgD;QACxD,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,oDAAoD;QAChE,eAAe,EAAE,MAAM;QACvB,QAAQ,EAAE,SAAS;KACpB;IAED,+DAA+D;IAC/D;QACE,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,gEAAgE;QACxE,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC;QAC1E,UAAU,EAAE,gCAAgC;QAC5C,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,kEAAkE;QAC1E,eAAe,EAAE,EAAE;QACnB,kBAAkB,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;QAC7C,UAAU,EAAE,iCAAiC;QAC7C,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,SAAS;KACpB;CACF,CAAC;AAEF,oEAAoE;AAEpE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhE,6CAA6C;AAC7C,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,OAAO,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,mBAAmB;IACjC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,WAAmB,EACnB,aAAqB,EACrB,QAAgC;IAEhC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAEvE,mCAAmC;IACnC,MAAM,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CACtD,CAAC;IAEF,2DAA2D;IAC3D,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IAED,8CAA8C;IAC9C,IAAI,aAAa,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3C,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IAED,6DAA6D;IAC7D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC"}
|
package/dist/cli.js
CHANGED
|
@@ -18,8 +18,9 @@ import { runSandboxed } from './sandbox/runner.js';
|
|
|
18
18
|
import { loadManifest, saveManifest, generateManifest } from './monitor/permissions.js';
|
|
19
19
|
import { generateProfile, saveProfile } from './fingerprint/profile.js';
|
|
20
20
|
import { diffLockfiles } from './diff/dependency.js';
|
|
21
|
+
import { applyAllowlist } from './allowlist/index.js';
|
|
21
22
|
// ── Version ──────────────────────────────────────────────────────────────
|
|
22
|
-
const VERSION = '0.
|
|
23
|
+
const VERSION = '0.2.0';
|
|
23
24
|
// ── ASCII banner ─────────────────────────────────────────────────────────
|
|
24
25
|
function printBanner() {
|
|
25
26
|
console.log(boldCyan(`
|
|
@@ -254,19 +255,23 @@ async function cmdAudit(deep, flags) {
|
|
|
254
255
|
continue;
|
|
255
256
|
}
|
|
256
257
|
const report = await analyzePackage(pkgDir);
|
|
257
|
-
|
|
258
|
-
|
|
259
|
-
|
|
258
|
+
// Apply allowlist
|
|
259
|
+
const { adjustedScore, suppressed, entry: allowEntry } = applyAllowlist(dep, report.score, report.findings);
|
|
260
|
+
const displayScore = adjustedScore;
|
|
261
|
+
totalScore += displayScore;
|
|
262
|
+
if (displayScore > maxScore) {
|
|
263
|
+
maxScore = displayScore;
|
|
260
264
|
maxPkg = dep;
|
|
261
265
|
}
|
|
262
|
-
const scoreStr =
|
|
263
|
-
? boldRed(
|
|
264
|
-
:
|
|
265
|
-
? boldYellow(
|
|
266
|
-
: boldGreen(
|
|
267
|
-
|
|
268
|
-
|
|
269
|
-
|
|
266
|
+
const scoreStr = displayScore >= 7
|
|
267
|
+
? boldRed(displayScore.toFixed(1))
|
|
268
|
+
: displayScore >= 4
|
|
269
|
+
? boldYellow(displayScore.toFixed(1))
|
|
270
|
+
: boldGreen(displayScore.toFixed(1));
|
|
271
|
+
const allowTag = suppressed ? dim(' [allowlisted]') : '';
|
|
272
|
+
console.log(` ${scoreStr.padStart(18)} ${dep} ${dim(`(${report.findings.length} findings)`)}${allowTag}`);
|
|
273
|
+
if (displayScore >= 4) {
|
|
274
|
+
highRisk.push({ name: dep, score: displayScore });
|
|
270
275
|
}
|
|
271
276
|
if (deep && report.findings.length > 0) {
|
|
272
277
|
printFindings(report.findings, 5);
|
package/dist/cli.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClH,OAAO,GAAG,MAAM,mBAAmB,CAAC;AACpC,OAAO,EAAE,cAAc,EAAiC,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAwB,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,YAAY,EAAsB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAA2C,MAAM,0BAA0B,CAAC;AACjI,OAAO,EAAE,eAAe,EAAgB,WAAW,EAAe,MAAM,0BAA0B,CAAC;AACnG,OAAO,EAAuB,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1E,4EAA4E;AAE5E,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,4EAA4E;AAE5E,SAAS,WAAW;IAClB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;;;;;;;CAOtB,CAAC,CAAC,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,4EAA4E;AAE5E,SAAS,SAAS;IAChB,WAAW,EAAE,CAAC;IAEd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAuB;QACnC,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;QACjE,CAAC,OAAO,EAAE,oCAAoC,CAAC;QAC/C,CAAC,cAAc,EAAE,8CAA8C,CAAC;QAChE,CAAC,mBAAmB,EAAE,4CAA4C,CAAC;QACnE,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;QACjE,CAAC,mBAAmB,EAAE,mCAAmC,CAAC;QAC1D,CAAC,kBAAkB,EAAE,wCAAwC,CAAC;QAC9D,CAAC,MAAM,EAAE,yCAAyC,CAAC;QACnD,CAAC,MAAM,EAAE,wBAAwB,CAAC;QAClC,CAAC,SAAS,EAAE,cAAc,CAAC;KAC5B,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,WAAW,CAAC,aAAa,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,YAAY,CAAC,YAAY,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,gBAAgB,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,4EAA4E;AAE5E,SAAS,aAAa,CAAC,QAAgB;IACrC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU,CAAC,CAAC,OAAO,OAAO,CAAC;QAChC,KAAK,MAAM,CAAC,CAAC,OAAO,GAAG,CAAC;QACxB,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,CAAC;QAC7B,KAAK,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC;QACvB,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC;AACvF,CAAC;AAED,SAAS,aAAa,CAAC,QAAmB,EAAE,KAAK,GAAG,EAAE;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,GAAG,KAAK,gBAAgB,CAAC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAkB,EAAE,WAAoB;IAC/D,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,YAAY,UAAU,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,4EAA4E;AAE5E,KAAK,UAAU,UAAU,CAAC,WAAmB,EAAE,KAAkB;IAC/D,GAAG,CAAC,MAAM,CAAC,cAAc,WAAW,kBAAkB,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,8BAA8B;IAC9B,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,WAAW,qBAAqB,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,UAAU,CAAC,MAAM,eAAe,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;QAEjF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAED,8BAA8B;IAC9B,GAAG,CAAC,IAAI,CAAC,uBAAuB,WAAW,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,QAAQ,CAAC,gCAAgC,WAAW,EAAE,EAAE;YACtD,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAChC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,0BAA0B;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5C,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAErC,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAClF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC;YACvF,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACpD,CAAC;QAED,gDAAgD;QAChD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAClF,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,WAAW,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;YAC7E,IAAI,WAAW,EAAE,CAAC;gBAChB,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;gBACrD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;oBAC3D,GAAG,EAAE,MAAM;oBACX,OAAO,EAAE,MAAM;oBACf,YAAY,EAAE,IAAI;oBAClB,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;gBAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;wBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;wBAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBAC5D,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBAC1B,GAAG,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAa,EAAE,KAAkB;IACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,gDAAgD;IAChD,IAAI,IAAI,GAAa,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,IAAI,GAAG;YACL,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;YAC1C,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;SAC9C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,kBAAkB,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,QAAQ,GAAsC,EAAE,CAAC;IAEvD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,6BAA6B,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5C,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC;QAE3B,IAAI,MAAM,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC;YAC5B,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC;YAChC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;gBACjB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACrC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzC,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;QAEhG,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,sBAAsB;QACtB,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,+CAA+C,IAAI,CAAC,SAAS,MAAM,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE5E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,MAAM,6BAA6B,CAAC,CAAC,CAAC;QAC3E,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,8DAA8D;QAC9D,GAAG,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,WAAmB;IAC3C,oDAAoD;IACpD,IAAI,SAAS,GAAG,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,KAAK,CAAC,YAAY,WAAW,2CAA2C,CAAC,CAAC;QAC9E,GAAG,CAAC,IAAI,CAAC,qCAAqC,GAAG,WAAW,CAAC,CAAC;QAC9D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAC/C,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAErC,gCAAgC;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAEvE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;YAChC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC/C,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAChD,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC1C,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;YACxC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAiB;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,GAAG,CAAC,MAAM,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,GAAG,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAC9D,OAAO,EAAE,MAAM;QACf,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,GAAG,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACjC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAE1D,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtD,GAAG,CAAC,OAAO,CAAC,0BAA0B,QAAQ,WAAW,CAAC,CAAC;IAC3D,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,GAAG,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAC1D,GAAG,CAAC,IAAI,CAAC,wBAAwB,QAAQ,gBAAgB,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,yDAAyD;IACzD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG;YACX,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;YAC1C,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;SAC9C,CAAC;QAEF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACxC,MAAM,YAAY,GAAa,EAAE,CAAC;gBAClC,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK;oBAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;qBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;oBAAE,YAAY,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,CAAC;gBACtF,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK;oBAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;qBACnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAE,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,MAAM,QAAQ,CAAC,CAAC;gBACnF,IAAI,KAAK,CAAC,MAAM;oBAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAClD,IAAI,KAAK,CAAC,IAAI;oBAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAE9C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,gDAAgD,CAAC,EAAE,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,gEAAgE,CAAC,CAAC;YACrF,GAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,yCAAyC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,iCAAiC;IACjC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,QAAQ,CAAC,iCAAiC,EAAE;YACpD,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;QACvF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1E,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC;QAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/G,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,oBAAoB,CAAC,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnG,GAAG,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,4EAA4E;AAE5E,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM;QAC1B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACnB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzD,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS;YACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;gBACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM;QAER,KAAK,OAAO;YACV,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM;QAER,KAAK,SAAS;YACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;gBACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM;QAER,KAAK,SAAS;YACZ,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM;QAER,KAAK,UAAU;YACb,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC3B,MAAM,mBAAmB,EAAE,CAAC;YAC9B,CAAC;iBAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,kBAAkB,EAAE,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;YACD,MAAM;QAER,KAAK,MAAM;YACT,MAAM,OAAO,EAAE,CAAC;YAChB,MAAM;QAER,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;YACpC,MAAM;QAER,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,SAAS,EAAE,CAAC;YACZ,MAAM;QAER;YACE,GAAG,CAAC,KAAK,CAAC,qBAAqB,OAAO,GAAG,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;YACjE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,MAAM;IACV,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,GAAG,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}
|
|
1
|
+
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClH,OAAO,GAAG,MAAM,mBAAmB,CAAC;AACpC,OAAO,EAAE,cAAc,EAAiC,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAwB,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,YAAY,EAAsB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAA2C,MAAM,0BAA0B,CAAC;AACjI,OAAO,EAAE,eAAe,EAAgB,WAAW,EAAe,MAAM,0BAA0B,CAAC;AACnG,OAAO,EAAuB,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAiB,cAAc,EAAqB,MAAM,sBAAsB,CAAC;AAExF,4EAA4E;AAE5E,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,4EAA4E;AAE5E,SAAS,WAAW;IAClB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;;;;;;;CAOtB,CAAC,CAAC,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,4EAA4E;AAE5E,SAAS,SAAS;IAChB,WAAW,EAAE,CAAC;IAEd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAuB;QACnC,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;QACjE,CAAC,OAAO,EAAE,oCAAoC,CAAC;QAC/C,CAAC,cAAc,EAAE,8CAA8C,CAAC;QAChE,CAAC,mBAAmB,EAAE,4CAA4C,CAAC;QACnE,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;QACjE,CAAC,mBAAmB,EAAE,mCAAmC,CAAC;QAC1D,CAAC,kBAAkB,EAAE,wCAAwC,CAAC;QAC9D,CAAC,MAAM,EAAE,yCAAyC,CAAC;QACnD,CAAC,MAAM,EAAE,wBAAwB,CAAC;QAClC,CAAC,SAAS,EAAE,cAAc,CAAC;KAC5B,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,WAAW,CAAC,aAAa,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,YAAY,CAAC,YAAY,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,gBAAgB,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,4EAA4E;AAE5E,SAAS,aAAa,CAAC,QAAgB;IACrC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU,CAAC,CAAC,OAAO,OAAO,CAAC;QAChC,KAAK,MAAM,CAAC,CAAC,OAAO,GAAG,CAAC;QACxB,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,CAAC;QAC7B,KAAK,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC;QACvB,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC;AACvF,CAAC;AAED,SAAS,aAAa,CAAC,QAAmB,EAAE,KAAK,GAAG,EAAE;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,GAAG,KAAK,gBAAgB,CAAC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAkB,EAAE,WAAoB;IAC/D,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,YAAY,UAAU,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACjC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,4EAA4E;AAE5E,KAAK,UAAU,UAAU,CAAC,WAAmB,EAAE,KAAkB;IAC/D,GAAG,CAAC,MAAM,CAAC,cAAc,WAAW,kBAAkB,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,8BAA8B;IAC9B,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,WAAW,qBAAqB,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,UAAU,CAAC,MAAM,eAAe,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;QAEjF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAED,8BAA8B;IAC9B,GAAG,CAAC,IAAI,CAAC,uBAAuB,WAAW,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,QAAQ,CAAC,gCAAgC,WAAW,EAAE,EAAE;YACtD,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAChC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,0BAA0B;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5C,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAErC,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAClF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC;YACvF,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACpD,CAAC;QAED,gDAAgD;QAChD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAClF,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,WAAW,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;YAC7E,IAAI,WAAW,EAAE,CAAC;gBAChB,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;gBACrD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;oBAC3D,GAAG,EAAE,MAAM;oBACX,OAAO,EAAE,MAAM;oBACf,YAAY,EAAE,IAAI;oBAClB,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;gBAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;wBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;wBAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBAC5D,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBAC1B,GAAG,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAa,EAAE,KAAkB;IACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,gDAAgD;IAChD,IAAI,IAAI,GAAa,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,IAAI,GAAG;YACL,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;YAC1C,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;SAC9C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,kBAAkB,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,QAAQ,GAAsC,EAAE,CAAC;IAEvD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,6BAA6B,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAE5C,kBAAkB;QAClB,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5G,MAAM,YAAY,GAAG,aAAa,CAAC;QACnC,UAAU,IAAI,YAAY,CAAC;QAE3B,IAAI,YAAY,GAAG,QAAQ,EAAE,CAAC;YAC5B,QAAQ,GAAG,YAAY,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,IAAI,CAAC;YAChC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC,CAAC,YAAY,IAAI,CAAC;gBACjB,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACrC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC;QAE3G,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,sBAAsB;QACtB,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,+CAA+C,IAAI,CAAC,SAAS,MAAM,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE5E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,MAAM,6BAA6B,CAAC,CAAC,CAAC;QAC3E,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,8DAA8D;QAC9D,GAAG,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,WAAmB;IAC3C,oDAAoD;IACpD,IAAI,SAAS,GAAG,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,KAAK,CAAC,YAAY,WAAW,2CAA2C,CAAC,CAAC;QAC9E,GAAG,CAAC,IAAI,CAAC,qCAAqC,GAAG,WAAW,CAAC,CAAC;QAC9D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAC/C,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAErC,gCAAgC;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAEvE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;YAChC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC/C,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAChD,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC1C,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;YACxC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAiB;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,GAAG,CAAC,MAAM,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,GAAG,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAC9D,OAAO,EAAE,MAAM;QACf,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,GAAG,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACjC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAE1D,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtD,GAAG,CAAC,OAAO,CAAC,0BAA0B,QAAQ,WAAW,CAAC,CAAC;IAC3D,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,GAAG,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAC1D,GAAG,CAAC,IAAI,CAAC,wBAAwB,QAAQ,gBAAgB,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,yDAAyD;IACzD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG;YACX,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;YAC1C,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;SAC9C,CAAC;QAEF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACxC,MAAM,YAAY,GAAa,EAAE,CAAC;gBAClC,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK;oBAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;qBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;oBAAE,YAAY,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,CAAC;gBACtF,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK;oBAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;qBACnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAE,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,MAAM,QAAQ,CAAC,CAAC;gBACnF,IAAI,KAAK,CAAC,MAAM;oBAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAClD,IAAI,KAAK,CAAC,IAAI;oBAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAE9C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,gDAAgD,CAAC,EAAE,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,gEAAgE,CAAC,CAAC;YACrF,GAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,yCAAyC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,iCAAiC;IACjC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,QAAQ,CAAC,iCAAiC,EAAE;YACpD,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;QACvF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1E,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC;QAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/G,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,oBAAoB,CAAC,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnG,GAAG,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,4EAA4E;AAE5E,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM;QAC1B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACnB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzD,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS;YACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;gBACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM;QAER,KAAK,OAAO;YACV,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM;QAER,KAAK,SAAS;YACZ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;gBACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM;QAER,KAAK,SAAS;YACZ,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM;QAER,KAAK,UAAU;YACb,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC3B,MAAM,mBAAmB,EAAE,CAAC;YAC9B,CAAC;iBAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,kBAAkB,EAAE,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;YACD,MAAM;QAER,KAAK,MAAM;YACT,MAAM,OAAO,EAAE,CAAC;YAChB,MAAM;QAER,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;YACpC,MAAM;QAER,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,SAAS,EAAE,CAAC;YACZ,MAAM;QAER;YACE,GAAG,CAAC,KAAK,CAAC,qBAAqB,OAAO,GAAG,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;YACjE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,MAAM;IACV,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,GAAG,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}
|
package/dist/index.d.ts
CHANGED
|
@@ -16,6 +16,8 @@ export { generateProfile, diffProfiles, saveProfile, loadProfile } from './finge
|
|
|
16
16
|
export type { BehaviorProfile, ProfileDiff } from './fingerprint/profile.js';
|
|
17
17
|
export { diffLockfiles, diffLockfilesByPath } from './diff/dependency.js';
|
|
18
18
|
export type { DependencyDiffReport, PackageDelta, DeltaFlag } from './diff/dependency.js';
|
|
19
|
+
export { isAllowlisted, getAllowlistEntry, getAllowlistedNames, applyAllowlist, ALLOWLIST } from './allowlist/index.js';
|
|
20
|
+
export type { AllowlistEntry } from './allowlist/index.js';
|
|
19
21
|
export { log } from './utils/logger.js';
|
|
20
22
|
export * as colors from './utils/colors.js';
|
|
21
23
|
//# sourceMappingURL=index.d.ts.map
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAG1E,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3G,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAGhF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACnE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACxG,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGlH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACnG,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG7E,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAG1F,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAG1E,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3G,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAGhF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACnE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACxG,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGlH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACnG,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG7E,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAG1F,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACxH,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC"}
|
package/dist/index.js
CHANGED
|
@@ -16,6 +16,8 @@ export { loadManifest, saveManifest, validateAccess, generateManifest } from './
|
|
|
16
16
|
export { generateProfile, diffProfiles, saveProfile, loadProfile } from './fingerprint/profile.js';
|
|
17
17
|
// Dependency diff
|
|
18
18
|
export { diffLockfiles, diffLockfilesByPath } from './diff/dependency.js';
|
|
19
|
+
// Allowlist
|
|
20
|
+
export { isAllowlisted, getAllowlistEntry, getAllowlistedNames, applyAllowlist, ALLOWLIST } from './allowlist/index.js';
|
|
19
21
|
// Utilities
|
|
20
22
|
export { log } from './utils/logger.js';
|
|
21
23
|
export * as colors from './utils/colors.js';
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,kBAAkB;AAClB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrE,0BAA0B;AAC1B,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3G,oBAAoB;AACpB,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGnE,sBAAsB;AACtB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGxG,4BAA4B;AAC5B,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGnG,kBAAkB;AAClB,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG1E,YAAY;AACZ,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,kBAAkB;AAClB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrE,0BAA0B;AAC1B,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3G,oBAAoB;AACpB,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGnE,sBAAsB;AACtB,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGxG,4BAA4B;AAC5B,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGnG,kBAAkB;AAClB,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG1E,YAAY;AACZ,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGxH,YAAY;AACZ,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC"}
|
package/package.json
CHANGED
|
@@ -0,0 +1,458 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* ShieldPM — Community-Maintained Allowlist
|
|
3
|
+
*
|
|
4
|
+
* Trusted packages that are known-safe despite having high-risk patterns.
|
|
5
|
+
* These packages legitimately need filesystem, network, or process access.
|
|
6
|
+
*
|
|
7
|
+
* Contributing: Add packages with justification. Each entry explains WHY
|
|
8
|
+
* the package triggers alerts and WHY it's safe.
|
|
9
|
+
*/
|
|
10
|
+
|
|
11
|
+
export interface AllowlistEntry {
|
|
12
|
+
/** npm package name */
|
|
13
|
+
name: string;
|
|
14
|
+
/** Why this package triggers alerts */
|
|
15
|
+
reason: string;
|
|
16
|
+
/** Maximum allowed risk score (findings above this still flag) */
|
|
17
|
+
maxAllowedScore: number;
|
|
18
|
+
/** Categories of findings to suppress */
|
|
19
|
+
suppressCategories: string[];
|
|
20
|
+
/** URL for verification */
|
|
21
|
+
repository: string;
|
|
22
|
+
/** Weekly npm downloads (approximate, for trust signal) */
|
|
23
|
+
weeklyDownloads: string;
|
|
24
|
+
/** Last verified date */
|
|
25
|
+
verified: string;
|
|
26
|
+
}
|
|
27
|
+
|
|
28
|
+
/**
|
|
29
|
+
* Packages verified as safe despite triggering static analysis alerts.
|
|
30
|
+
* Organized by category.
|
|
31
|
+
*/
|
|
32
|
+
export const ALLOWLIST: AllowlistEntry[] = [
|
|
33
|
+
// ─── Build Tools & Compilers ────────────────────────────────
|
|
34
|
+
{
|
|
35
|
+
name: 'typescript',
|
|
36
|
+
reason: 'Compiler — legitimately reads/writes files, spawns processes for compilation',
|
|
37
|
+
maxAllowedScore: 10,
|
|
38
|
+
suppressCategories: ['filesystem', 'process', 'code-execution'],
|
|
39
|
+
repository: 'https://github.com/microsoft/TypeScript',
|
|
40
|
+
weeklyDownloads: '50M+',
|
|
41
|
+
verified: '2026-03',
|
|
42
|
+
},
|
|
43
|
+
{
|
|
44
|
+
name: 'eslint',
|
|
45
|
+
reason: 'Linter — reads source files, loads plugins dynamically, accesses filesystem',
|
|
46
|
+
maxAllowedScore: 10,
|
|
47
|
+
suppressCategories: ['filesystem', 'code-execution', 'process'],
|
|
48
|
+
repository: 'https://github.com/eslint/eslint',
|
|
49
|
+
weeklyDownloads: '40M+',
|
|
50
|
+
verified: '2026-03',
|
|
51
|
+
},
|
|
52
|
+
{
|
|
53
|
+
name: 'tailwindcss',
|
|
54
|
+
reason: 'CSS framework — scans source files for class usage, writes output CSS',
|
|
55
|
+
maxAllowedScore: 10,
|
|
56
|
+
suppressCategories: ['filesystem', 'process'],
|
|
57
|
+
repository: 'https://github.com/tailwindlabs/tailwindcss',
|
|
58
|
+
weeklyDownloads: '15M+',
|
|
59
|
+
verified: '2026-03',
|
|
60
|
+
},
|
|
61
|
+
{
|
|
62
|
+
name: 'postcss',
|
|
63
|
+
reason: 'CSS processor — reads/transforms CSS files, loads plugins',
|
|
64
|
+
maxAllowedScore: 8,
|
|
65
|
+
suppressCategories: ['filesystem', 'code-execution'],
|
|
66
|
+
repository: 'https://github.com/postcss/postcss',
|
|
67
|
+
weeklyDownloads: '40M+',
|
|
68
|
+
verified: '2026-03',
|
|
69
|
+
},
|
|
70
|
+
{
|
|
71
|
+
name: 'tsx',
|
|
72
|
+
reason: 'TypeScript executor — compiles and runs TS files, spawns node processes',
|
|
73
|
+
maxAllowedScore: 10,
|
|
74
|
+
suppressCategories: ['filesystem', 'process', 'code-execution'],
|
|
75
|
+
repository: 'https://github.com/privatenumber/tsx',
|
|
76
|
+
weeklyDownloads: '5M+',
|
|
77
|
+
verified: '2026-03',
|
|
78
|
+
},
|
|
79
|
+
{
|
|
80
|
+
name: 'esbuild',
|
|
81
|
+
reason: 'Bundler — reads source files, writes bundles, uses native binaries',
|
|
82
|
+
maxAllowedScore: 10,
|
|
83
|
+
suppressCategories: ['filesystem', 'process', 'code-execution', 'network'],
|
|
84
|
+
repository: 'https://github.com/evanw/esbuild',
|
|
85
|
+
weeklyDownloads: '25M+',
|
|
86
|
+
verified: '2026-03',
|
|
87
|
+
},
|
|
88
|
+
{
|
|
89
|
+
name: 'webpack',
|
|
90
|
+
reason: 'Bundler — full filesystem access, dynamic requires, process spawning',
|
|
91
|
+
maxAllowedScore: 10,
|
|
92
|
+
suppressCategories: ['filesystem', 'process', 'code-execution'],
|
|
93
|
+
repository: 'https://github.com/webpack/webpack',
|
|
94
|
+
weeklyDownloads: '25M+',
|
|
95
|
+
verified: '2026-03',
|
|
96
|
+
},
|
|
97
|
+
{
|
|
98
|
+
name: 'vite',
|
|
99
|
+
reason: 'Build tool — dev server with network access, file watching, HMR',
|
|
100
|
+
maxAllowedScore: 10,
|
|
101
|
+
suppressCategories: ['filesystem', 'process', 'network', 'code-execution'],
|
|
102
|
+
repository: 'https://github.com/vitejs/vite',
|
|
103
|
+
weeklyDownloads: '15M+',
|
|
104
|
+
verified: '2026-03',
|
|
105
|
+
},
|
|
106
|
+
|
|
107
|
+
// ─── Frameworks & Runtimes ──────────────────────────────────
|
|
108
|
+
{
|
|
109
|
+
name: 'next',
|
|
110
|
+
reason: 'Full-stack framework — server rendering, API routes, file-based routing',
|
|
111
|
+
maxAllowedScore: 10,
|
|
112
|
+
suppressCategories: ['filesystem', 'process', 'network', 'code-execution'],
|
|
113
|
+
repository: 'https://github.com/vercel/next.js',
|
|
114
|
+
weeklyDownloads: '10M+',
|
|
115
|
+
verified: '2026-03',
|
|
116
|
+
},
|
|
117
|
+
{
|
|
118
|
+
name: 'react',
|
|
119
|
+
reason: 'UI library — uses eval-like patterns for JSX transform in dev mode',
|
|
120
|
+
maxAllowedScore: 6,
|
|
121
|
+
suppressCategories: ['code-execution'],
|
|
122
|
+
repository: 'https://github.com/facebook/react',
|
|
123
|
+
weeklyDownloads: '25M+',
|
|
124
|
+
verified: '2026-03',
|
|
125
|
+
},
|
|
126
|
+
{
|
|
127
|
+
name: 'react-dom',
|
|
128
|
+
reason: 'DOM renderer — innerHTML usage for hydration, process.env checks',
|
|
129
|
+
maxAllowedScore: 10,
|
|
130
|
+
suppressCategories: ['code-execution', 'environment'],
|
|
131
|
+
repository: 'https://github.com/facebook/react',
|
|
132
|
+
weeklyDownloads: '25M+',
|
|
133
|
+
verified: '2026-03',
|
|
134
|
+
},
|
|
135
|
+
{
|
|
136
|
+
name: 'express',
|
|
137
|
+
reason: 'Web framework — network listener, request parsing, middleware chain',
|
|
138
|
+
maxAllowedScore: 8,
|
|
139
|
+
suppressCategories: ['network', 'code-execution'],
|
|
140
|
+
repository: 'https://github.com/expressjs/express',
|
|
141
|
+
weeklyDownloads: '30M+',
|
|
142
|
+
verified: '2026-03',
|
|
143
|
+
},
|
|
144
|
+
|
|
145
|
+
// ─── Database & ORM ─────────────────────────────────────────
|
|
146
|
+
{
|
|
147
|
+
name: 'prisma',
|
|
148
|
+
reason: 'ORM — generates client code, reads schema files, spawns query engine binary',
|
|
149
|
+
maxAllowedScore: 10,
|
|
150
|
+
suppressCategories: ['filesystem', 'process', 'code-execution', 'network'],
|
|
151
|
+
repository: 'https://github.com/prisma/prisma',
|
|
152
|
+
weeklyDownloads: '3M+',
|
|
153
|
+
verified: '2026-03',
|
|
154
|
+
},
|
|
155
|
+
{
|
|
156
|
+
name: '@prisma/client',
|
|
157
|
+
reason: 'Generated DB client — connects to databases, reads env for connection strings',
|
|
158
|
+
maxAllowedScore: 10,
|
|
159
|
+
suppressCategories: ['filesystem', 'process', 'network', 'environment', 'code-execution'],
|
|
160
|
+
repository: 'https://github.com/prisma/prisma',
|
|
161
|
+
weeklyDownloads: '3M+',
|
|
162
|
+
verified: '2026-03',
|
|
163
|
+
},
|
|
164
|
+
|
|
165
|
+
// ─── API & SDK ──────────────────────────────────────────────
|
|
166
|
+
{
|
|
167
|
+
name: '@anthropic-ai/sdk',
|
|
168
|
+
reason: 'AI SDK — makes HTTPS calls to Anthropic API, reads API key from env',
|
|
169
|
+
maxAllowedScore: 10,
|
|
170
|
+
suppressCategories: ['network', 'environment'],
|
|
171
|
+
repository: 'https://github.com/anthropics/anthropic-sdk-node',
|
|
172
|
+
weeklyDownloads: '500K+',
|
|
173
|
+
verified: '2026-03',
|
|
174
|
+
},
|
|
175
|
+
{
|
|
176
|
+
name: 'openai',
|
|
177
|
+
reason: 'AI SDK — makes HTTPS calls to OpenAI API, reads API key from env',
|
|
178
|
+
maxAllowedScore: 10,
|
|
179
|
+
suppressCategories: ['network', 'environment'],
|
|
180
|
+
repository: 'https://github.com/openai/openai-node',
|
|
181
|
+
weeklyDownloads: '2M+',
|
|
182
|
+
verified: '2026-03',
|
|
183
|
+
},
|
|
184
|
+
{
|
|
185
|
+
name: 'axios',
|
|
186
|
+
reason: 'HTTP client — network requests are its core purpose',
|
|
187
|
+
maxAllowedScore: 8,
|
|
188
|
+
suppressCategories: ['network'],
|
|
189
|
+
repository: 'https://github.com/axios/axios',
|
|
190
|
+
weeklyDownloads: '45M+',
|
|
191
|
+
verified: '2026-03',
|
|
192
|
+
},
|
|
193
|
+
{
|
|
194
|
+
name: 'node-fetch',
|
|
195
|
+
reason: 'Fetch polyfill — network requests are its core purpose',
|
|
196
|
+
maxAllowedScore: 8,
|
|
197
|
+
suppressCategories: ['network'],
|
|
198
|
+
repository: 'https://github.com/node-fetch/node-fetch',
|
|
199
|
+
weeklyDownloads: '35M+',
|
|
200
|
+
verified: '2026-03',
|
|
201
|
+
},
|
|
202
|
+
|
|
203
|
+
// ─── Auth & Security ────────────────────────────────────────
|
|
204
|
+
{
|
|
205
|
+
name: '@clerk/nextjs',
|
|
206
|
+
reason: 'Auth SDK — reads env for API keys, makes auth API calls, sets cookies',
|
|
207
|
+
maxAllowedScore: 8,
|
|
208
|
+
suppressCategories: ['network', 'environment'],
|
|
209
|
+
repository: 'https://github.com/clerk/javascript',
|
|
210
|
+
weeklyDownloads: '500K+',
|
|
211
|
+
verified: '2026-03',
|
|
212
|
+
},
|
|
213
|
+
{
|
|
214
|
+
name: 'jsonwebtoken',
|
|
215
|
+
reason: 'JWT library — crypto operations, Buffer usage for token encoding',
|
|
216
|
+
maxAllowedScore: 6,
|
|
217
|
+
suppressCategories: ['code-execution'],
|
|
218
|
+
repository: 'https://github.com/auth0/node-jsonwebtoken',
|
|
219
|
+
weeklyDownloads: '15M+',
|
|
220
|
+
verified: '2026-03',
|
|
221
|
+
},
|
|
222
|
+
{
|
|
223
|
+
name: 'bcrypt',
|
|
224
|
+
reason: 'Password hashing — native C++ addon, crypto operations',
|
|
225
|
+
maxAllowedScore: 6,
|
|
226
|
+
suppressCategories: ['process'],
|
|
227
|
+
repository: 'https://github.com/kelektiv/node.bcrypt.js',
|
|
228
|
+
weeklyDownloads: '3M+',
|
|
229
|
+
verified: '2026-03',
|
|
230
|
+
},
|
|
231
|
+
|
|
232
|
+
// ─── Utilities ──────────────────────────────────────────────
|
|
233
|
+
{
|
|
234
|
+
name: 'lodash',
|
|
235
|
+
reason: 'Utility library — pure functions, no side effects',
|
|
236
|
+
maxAllowedScore: 2,
|
|
237
|
+
suppressCategories: [],
|
|
238
|
+
repository: 'https://github.com/lodash/lodash',
|
|
239
|
+
weeklyDownloads: '50M+',
|
|
240
|
+
verified: '2026-03',
|
|
241
|
+
},
|
|
242
|
+
{
|
|
243
|
+
name: 'framer-motion',
|
|
244
|
+
reason: 'Animation library — DOM manipulation only, no system access',
|
|
245
|
+
maxAllowedScore: 2,
|
|
246
|
+
suppressCategories: [],
|
|
247
|
+
repository: 'https://github.com/framer/motion',
|
|
248
|
+
weeklyDownloads: '5M+',
|
|
249
|
+
verified: '2026-03',
|
|
250
|
+
},
|
|
251
|
+
{
|
|
252
|
+
name: 'lucide-react',
|
|
253
|
+
reason: 'Icon library — pure SVG components, no side effects',
|
|
254
|
+
maxAllowedScore: 1,
|
|
255
|
+
suppressCategories: [],
|
|
256
|
+
repository: 'https://github.com/lucide-icons/lucide',
|
|
257
|
+
weeklyDownloads: '3M+',
|
|
258
|
+
verified: '2026-03',
|
|
259
|
+
},
|
|
260
|
+
|
|
261
|
+
// ─── Image & Media ─────────────────────────────────────────
|
|
262
|
+
{
|
|
263
|
+
name: 'sharp',
|
|
264
|
+
reason: 'Image processing — native binary (libvips), filesystem I/O',
|
|
265
|
+
maxAllowedScore: 10,
|
|
266
|
+
suppressCategories: ['filesystem', 'process'],
|
|
267
|
+
repository: 'https://github.com/lovell/sharp',
|
|
268
|
+
weeklyDownloads: '10M+',
|
|
269
|
+
verified: '2026-03',
|
|
270
|
+
},
|
|
271
|
+
{
|
|
272
|
+
name: 'html-to-image',
|
|
273
|
+
reason: 'Screenshot library — DOM access, canvas rendering',
|
|
274
|
+
maxAllowedScore: 10,
|
|
275
|
+
suppressCategories: ['code-execution'],
|
|
276
|
+
repository: 'https://github.com/nicolo-ribaudo/html-to-image',
|
|
277
|
+
weeklyDownloads: '500K+',
|
|
278
|
+
verified: '2026-03',
|
|
279
|
+
},
|
|
280
|
+
|
|
281
|
+
// ─── Visualization ─────────────────────────────────────────
|
|
282
|
+
{
|
|
283
|
+
name: '@nivo/core',
|
|
284
|
+
reason: 'Chart library — pure rendering, no system access',
|
|
285
|
+
maxAllowedScore: 2,
|
|
286
|
+
suppressCategories: [],
|
|
287
|
+
repository: 'https://github.com/plouc/nivo',
|
|
288
|
+
weeklyDownloads: '500K+',
|
|
289
|
+
verified: '2026-03',
|
|
290
|
+
},
|
|
291
|
+
{
|
|
292
|
+
name: '@nivo/bar',
|
|
293
|
+
reason: 'Chart component — pure rendering',
|
|
294
|
+
maxAllowedScore: 2,
|
|
295
|
+
suppressCategories: [],
|
|
296
|
+
repository: 'https://github.com/plouc/nivo',
|
|
297
|
+
weeklyDownloads: '300K+',
|
|
298
|
+
verified: '2026-03',
|
|
299
|
+
},
|
|
300
|
+
{
|
|
301
|
+
name: '@nivo/line',
|
|
302
|
+
reason: 'Chart component — pure rendering',
|
|
303
|
+
maxAllowedScore: 2,
|
|
304
|
+
suppressCategories: [],
|
|
305
|
+
repository: 'https://github.com/plouc/nivo',
|
|
306
|
+
weeklyDownloads: '300K+',
|
|
307
|
+
verified: '2026-03',
|
|
308
|
+
},
|
|
309
|
+
{
|
|
310
|
+
name: '@nivo/pie',
|
|
311
|
+
reason: 'Chart component — pure rendering',
|
|
312
|
+
maxAllowedScore: 2,
|
|
313
|
+
suppressCategories: [],
|
|
314
|
+
repository: 'https://github.com/plouc/nivo',
|
|
315
|
+
weeklyDownloads: '200K+',
|
|
316
|
+
verified: '2026-03',
|
|
317
|
+
},
|
|
318
|
+
{
|
|
319
|
+
name: 'd3',
|
|
320
|
+
reason: 'Visualization library — DOM manipulation, math operations',
|
|
321
|
+
maxAllowedScore: 4,
|
|
322
|
+
suppressCategories: ['code-execution'],
|
|
323
|
+
repository: 'https://github.com/d3/d3',
|
|
324
|
+
weeklyDownloads: '5M+',
|
|
325
|
+
verified: '2026-03',
|
|
326
|
+
},
|
|
327
|
+
|
|
328
|
+
// ─── Graph & Layout ─────────────────────────────────────────
|
|
329
|
+
{
|
|
330
|
+
name: '@xyflow/react',
|
|
331
|
+
reason: 'Flow diagram library — DOM rendering, no system access',
|
|
332
|
+
maxAllowedScore: 3,
|
|
333
|
+
suppressCategories: [],
|
|
334
|
+
repository: 'https://github.com/xyflow/xyflow',
|
|
335
|
+
weeklyDownloads: '500K+',
|
|
336
|
+
verified: '2026-03',
|
|
337
|
+
},
|
|
338
|
+
{
|
|
339
|
+
name: 'elkjs',
|
|
340
|
+
reason: 'Graph layout engine — heavy computation, WASM/JS compiled from Java',
|
|
341
|
+
maxAllowedScore: 10,
|
|
342
|
+
suppressCategories: ['code-execution'],
|
|
343
|
+
repository: 'https://github.com/kieler/elkjs',
|
|
344
|
+
weeklyDownloads: '500K+',
|
|
345
|
+
verified: '2026-03',
|
|
346
|
+
},
|
|
347
|
+
|
|
348
|
+
// ─── Testing ────────────────────────────────────────────────
|
|
349
|
+
{
|
|
350
|
+
name: 'vitest',
|
|
351
|
+
reason: 'Test runner — spawns processes, reads test files, dynamic imports',
|
|
352
|
+
maxAllowedScore: 10,
|
|
353
|
+
suppressCategories: ['filesystem', 'process', 'code-execution'],
|
|
354
|
+
repository: 'https://github.com/vitest-dev/vitest',
|
|
355
|
+
weeklyDownloads: '10M+',
|
|
356
|
+
verified: '2026-03',
|
|
357
|
+
},
|
|
358
|
+
{
|
|
359
|
+
name: 'jest',
|
|
360
|
+
reason: 'Test runner — spawns workers, filesystem access, code transformation',
|
|
361
|
+
maxAllowedScore: 10,
|
|
362
|
+
suppressCategories: ['filesystem', 'process', 'code-execution'],
|
|
363
|
+
repository: 'https://github.com/jestjs/jest',
|
|
364
|
+
weeklyDownloads: '20M+',
|
|
365
|
+
verified: '2026-03',
|
|
366
|
+
},
|
|
367
|
+
|
|
368
|
+
// ─── Node.js Types ──────────────────────────────────────────
|
|
369
|
+
{
|
|
370
|
+
name: '@types/node',
|
|
371
|
+
reason: 'Type definitions — contains type signatures for all Node.js APIs including fs, net, child_process',
|
|
372
|
+
maxAllowedScore: 10,
|
|
373
|
+
suppressCategories: ['filesystem', 'process', 'network', 'code-execution'],
|
|
374
|
+
repository: 'https://github.com/DefinitelyTyped/DefinitelyTyped',
|
|
375
|
+
weeklyDownloads: '50M+',
|
|
376
|
+
verified: '2026-03',
|
|
377
|
+
},
|
|
378
|
+
{
|
|
379
|
+
name: '@types/react',
|
|
380
|
+
reason: 'Type definitions — pure types, no runtime code',
|
|
381
|
+
maxAllowedScore: 1,
|
|
382
|
+
suppressCategories: [],
|
|
383
|
+
repository: 'https://github.com/DefinitelyTyped/DefinitelyTyped',
|
|
384
|
+
weeklyDownloads: '20M+',
|
|
385
|
+
verified: '2026-03',
|
|
386
|
+
},
|
|
387
|
+
|
|
388
|
+
// ─── Process Managers ───────────────────────────────────────
|
|
389
|
+
{
|
|
390
|
+
name: 'pm2',
|
|
391
|
+
reason: 'Process manager — spawns/monitors/restarts processes by design',
|
|
392
|
+
maxAllowedScore: 10,
|
|
393
|
+
suppressCategories: ['filesystem', 'process', 'network', 'code-execution'],
|
|
394
|
+
repository: 'https://github.com/Unitech/pm2',
|
|
395
|
+
weeklyDownloads: '2M+',
|
|
396
|
+
verified: '2026-03',
|
|
397
|
+
},
|
|
398
|
+
{
|
|
399
|
+
name: 'nodemon',
|
|
400
|
+
reason: 'File watcher — watches filesystem, restarts processes on changes',
|
|
401
|
+
maxAllowedScore: 10,
|
|
402
|
+
suppressCategories: ['filesystem', 'process'],
|
|
403
|
+
repository: 'https://github.com/remy/nodemon',
|
|
404
|
+
weeklyDownloads: '5M+',
|
|
405
|
+
verified: '2026-03',
|
|
406
|
+
},
|
|
407
|
+
];
|
|
408
|
+
|
|
409
|
+
/* ─── Lookup helpers ─────────────────────────────────────────── */
|
|
410
|
+
|
|
411
|
+
const allowlistMap = new Map(ALLOWLIST.map((e) => [e.name, e]));
|
|
412
|
+
|
|
413
|
+
/** Check if a package is in the allowlist */
|
|
414
|
+
export function isAllowlisted(packageName: string): boolean {
|
|
415
|
+
return allowlistMap.has(packageName);
|
|
416
|
+
}
|
|
417
|
+
|
|
418
|
+
/** Get allowlist entry for a package */
|
|
419
|
+
export function getAllowlistEntry(packageName: string): AllowlistEntry | undefined {
|
|
420
|
+
return allowlistMap.get(packageName);
|
|
421
|
+
}
|
|
422
|
+
|
|
423
|
+
/** Get all allowlisted package names */
|
|
424
|
+
export function getAllowlistedNames(): string[] {
|
|
425
|
+
return ALLOWLIST.map((e) => e.name);
|
|
426
|
+
}
|
|
427
|
+
|
|
428
|
+
/**
|
|
429
|
+
* Apply allowlist to a risk score.
|
|
430
|
+
* If the package is allowlisted and the score is within the allowed range,
|
|
431
|
+
* return 0. Otherwise return the original score.
|
|
432
|
+
*/
|
|
433
|
+
export function applyAllowlist(
|
|
434
|
+
packageName: string,
|
|
435
|
+
originalScore: number,
|
|
436
|
+
findings: { category: string }[],
|
|
437
|
+
): { adjustedScore: number; suppressed: boolean; entry?: AllowlistEntry } {
|
|
438
|
+
const entry = allowlistMap.get(packageName);
|
|
439
|
+
if (!entry) return { adjustedScore: originalScore, suppressed: false };
|
|
440
|
+
|
|
441
|
+
// Filter out suppressed categories
|
|
442
|
+
const unsuppressedFindings = findings.filter(
|
|
443
|
+
(f) => !entry.suppressCategories.includes(f.category),
|
|
444
|
+
);
|
|
445
|
+
|
|
446
|
+
// If all findings are in suppressed categories, score is 0
|
|
447
|
+
if (unsuppressedFindings.length === 0) {
|
|
448
|
+
return { adjustedScore: 0, suppressed: true, entry };
|
|
449
|
+
}
|
|
450
|
+
|
|
451
|
+
// If score is within allowed range, reduce it
|
|
452
|
+
if (originalScore <= entry.maxAllowedScore) {
|
|
453
|
+
return { adjustedScore: 0, suppressed: true, entry };
|
|
454
|
+
}
|
|
455
|
+
|
|
456
|
+
// Score exceeds what's expected — something unusual, flag it
|
|
457
|
+
return { adjustedScore: originalScore, suppressed: false, entry };
|
|
458
|
+
}
|
package/src/cli.ts
CHANGED
|
@@ -20,10 +20,11 @@ import { runSandboxed, type SandboxResult } from './sandbox/runner.js';
|
|
|
20
20
|
import { loadManifest, saveManifest, generateManifest, validateAccess, type PermissionManifest } from './monitor/permissions.js';
|
|
21
21
|
import { generateProfile, diffProfiles, saveProfile, loadProfile } from './fingerprint/profile.js';
|
|
22
22
|
import { diffLockfilesByPath, diffLockfiles } from './diff/dependency.js';
|
|
23
|
+
import { isAllowlisted, applyAllowlist, getAllowlistEntry } from './allowlist/index.js';
|
|
23
24
|
|
|
24
25
|
// ── Version ──────────────────────────────────────────────────────────────
|
|
25
26
|
|
|
26
|
-
const VERSION = '0.
|
|
27
|
+
const VERSION = '0.2.0';
|
|
27
28
|
|
|
28
29
|
// ── ASCII banner ─────────────────────────────────────────────────────────
|
|
29
30
|
|
|
@@ -282,23 +283,28 @@ async function cmdAudit(deep: boolean, flags: Set<string>): Promise<void> {
|
|
|
282
283
|
}
|
|
283
284
|
|
|
284
285
|
const report = await analyzePackage(pkgDir);
|
|
285
|
-
totalScore += report.score;
|
|
286
286
|
|
|
287
|
-
|
|
288
|
-
|
|
287
|
+
// Apply allowlist
|
|
288
|
+
const { adjustedScore, suppressed, entry: allowEntry } = applyAllowlist(dep, report.score, report.findings);
|
|
289
|
+
const displayScore = adjustedScore;
|
|
290
|
+
totalScore += displayScore;
|
|
291
|
+
|
|
292
|
+
if (displayScore > maxScore) {
|
|
293
|
+
maxScore = displayScore;
|
|
289
294
|
maxPkg = dep;
|
|
290
295
|
}
|
|
291
296
|
|
|
292
|
-
const scoreStr =
|
|
293
|
-
? boldRed(
|
|
294
|
-
:
|
|
295
|
-
? boldYellow(
|
|
296
|
-
: boldGreen(
|
|
297
|
+
const scoreStr = displayScore >= 7
|
|
298
|
+
? boldRed(displayScore.toFixed(1))
|
|
299
|
+
: displayScore >= 4
|
|
300
|
+
? boldYellow(displayScore.toFixed(1))
|
|
301
|
+
: boldGreen(displayScore.toFixed(1));
|
|
297
302
|
|
|
298
|
-
|
|
303
|
+
const allowTag = suppressed ? dim(' [allowlisted]') : '';
|
|
304
|
+
console.log(` ${scoreStr.padStart(18)} ${dep} ${dim(`(${report.findings.length} findings)`)}${allowTag}`);
|
|
299
305
|
|
|
300
|
-
if (
|
|
301
|
-
highRisk.push({ name: dep, score:
|
|
306
|
+
if (displayScore >= 4) {
|
|
307
|
+
highRisk.push({ name: dep, score: displayScore });
|
|
302
308
|
}
|
|
303
309
|
|
|
304
310
|
if (deep && report.findings.length > 0) {
|
package/src/index.ts
CHANGED
|
@@ -29,6 +29,10 @@ export type { BehaviorProfile, ProfileDiff } from './fingerprint/profile.js';
|
|
|
29
29
|
export { diffLockfiles, diffLockfilesByPath } from './diff/dependency.js';
|
|
30
30
|
export type { DependencyDiffReport, PackageDelta, DeltaFlag } from './diff/dependency.js';
|
|
31
31
|
|
|
32
|
+
// Allowlist
|
|
33
|
+
export { isAllowlisted, getAllowlistEntry, getAllowlistedNames, applyAllowlist, ALLOWLIST } from './allowlist/index.js';
|
|
34
|
+
export type { AllowlistEntry } from './allowlist/index.js';
|
|
35
|
+
|
|
32
36
|
// Utilities
|
|
33
37
|
export { log } from './utils/logger.js';
|
|
34
38
|
export * as colors from './utils/colors.js';
|