@darrenjcoxon/codeguard 1.0.0

package/dist/scanners/gitleaks.js

@@ -0,0 +1,158 @@
+/**
+ * Gitleaks Scanner
+ *
+ * Secret detection scanner using Gitleaks CLI
+ * Covers: secret category
+ */
+import { execSync, exec } from 'child_process';
+import { promisify } from 'util';
+const execAsync = promisify(exec);
+export class GitleaksScanner {
+    name = 'gitleaks';
+    categories = ['secret'];
+    async isAvailable() {
+        try {
+            execSync('gitleaks version', { stdio: 'pipe' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async scan(target, config) {
+        const startTime = Date.now();
+        if (!await this.isAvailable()) {
+            return {
+                scanner: this.name,
+                success: false,
+                error: 'Gitleaks not installed. Install with: brew install gitleaks (or download from GitHub)',
+                findings: [],
+                metrics: { duration: Date.now() - startTime }
+            };
+        }
+        try {
+            const findings = await this.runGitleaks(target);
+            return {
+                scanner: this.name,
+                success: true,
+                findings,
+                metrics: {
+                    duration: Date.now() - startTime,
+                    filesScanned: findings.length > 0 ? new Set(findings.map(f => f.file)).size : 0
+                }
+            };
+        }
+        catch (error) {
+            return {
+                scanner: this.name,
+                success: false,
+                error: error instanceof Error ? error.message : String(error),
+                findings: [],
+                metrics: { duration: Date.now() - startTime }
+            };
+        }
+    }
+    async runGitleaks(target) {
+        // Use 'dir' mode for scanning directories, 'git' mode for git repos
+        const scanMode = target.git ? 'git' : 'dir';
+        const cmd = `gitleaks ${scanMode} --source "${target.path}" --report-format json --report-path /dev/stdout --no-banner 2>/dev/null || true`;
+        try {
+            const { stdout } = await execAsync(cmd, {
+                timeout: 120000, // 2 minutes
+                maxBuffer: 10 * 1024 * 1024
+            });
+            if (!stdout.trim() || stdout.trim() === '[]') {
+                return [];
+            }
+            const findings = JSON.parse(stdout);
+            return this.transformFindings(findings);
+        }
+        catch (error) {
+            // Try to parse output even on error
+            if (error.stdout) {
+                try {
+                    const findings = JSON.parse(error.stdout);
+                    return this.transformFindings(findings);
+                }
+                catch {
+                    // Empty or invalid output - no findings
+                    return [];
+                }
+            }
+            throw error;
+        }
+    }
+    transformFindings(gitleaksFindings) {
+        return gitleaksFindings.map(gf => {
+            const severity = this.determineSeverity(gf);
+            // Redact the actual secret value
+            const redactedSecret = this.redactSecret(gf.Secret);
+            const finding = {
+                id: `gitleaks-${gf.Fingerprint}`,
+                source: this.name,
+                severity,
+                category: 'secret',
+                file: gf.File,
+                line: gf.StartLine,
+                endLine: gf.EndLine,
+                column: gf.StartColumn,
+                endColumn: gf.EndColumn,
+                title: `Exposed Secret: ${gf.RuleID}`,
+                description: `${gf.Description}\n\nRedacted value: ${redactedSecret}`,
+                snippet: gf.Match ? this.redactSnippet(gf.Match, gf.Secret) : undefined,
+                suggestion: this.getSuggestion(gf.RuleID),
+                fixAvailable: true,
+                autoFixable: false, // Secrets require manual rotation
+                ruleId: gf.RuleID,
+                confidence: gf.Entropy > 4 ? 'high' : 'medium',
+                fingerprint: gf.Fingerprint
+            };
+            return finding;
+        });
+    }
+    determineSeverity(gf) {
+        const ruleId = gf.RuleID.toLowerCase();
+        // Critical: Production/API keys, AWS credentials
+        if (ruleId.includes('aws') ||
+            ruleId.includes('private-key') ||
+            ruleId.includes('api-key') ||
+            ruleId.includes('stripe') ||
+            ruleId.includes('github-token')) {
+            return 'critical';
+        }
+        // High: Database credentials, generic secrets
+        if (ruleId.includes('password') ||
+            ruleId.includes('database') ||
+            ruleId.includes('jwt') ||
+            ruleId.includes('oauth')) {
+            return 'high';
+        }
+        // Medium: Other secrets
+        return 'high'; // Default to high for any exposed secret
+    }
+    redactSecret(secret) {
+        if (secret.length <= 8) {
+            return '*'.repeat(secret.length);
+        }
+        const visible = Math.min(4, Math.floor(secret.length / 4));
+        return secret.slice(0, visible) + '*'.repeat(secret.length - visible * 2) + secret.slice(-visible);
+    }
+    redactSnippet(snippet, secret) {
+        if (!secret)
+            return snippet;
+        return snippet.replace(secret, this.redactSecret(secret));
+    }
+    getSuggestion(ruleId) {
+        const suggestions = {
+            'aws-access-key-id': 'Rotate the AWS access key immediately and use environment variables or AWS Secrets Manager',
+            'aws-secret-access-key': 'Rotate the AWS secret key immediately and use environment variables or AWS Secrets Manager',
+            'github-token': 'Revoke this GitHub token and generate a new one with minimum required permissions',
+            'generic-api-key': 'Rotate this API key and store securely using environment variables or a secrets manager',
+            'private-key': 'This private key is exposed. Generate a new key pair and revoke the compromised one',
+            'jwt-base64': 'Rotate the JWT signing secret and invalidate any tokens signed with the old secret'
+        };
+        return suggestions[ruleId] || 'Rotate this credential immediately and store it securely using environment variables or a secrets manager';
+    }
+}
+export default GitleaksScanner;
+//# sourceMappingURL=gitleaks.js.map

package/dist/scanners/gitleaks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitleaks.js","sourceRoot":"","sources":["../../src/scanners/gitleaks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAYjC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAuBlC,MAAM,OAAO,eAAe;IAC1B,IAAI,GAAG,UAAU,CAAC;IAClB,UAAU,GAAsB,CAAC,QAAQ,CAAC,CAAC;IAE3C,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,QAAQ,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAkB,EAAE,MAAsB;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,uFAAuF;gBAC9F,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;aAC9C,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAEhD,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,IAAI;gBACb,QAAQ;gBACR,OAAO,EAAE;oBACP,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAChC,YAAY,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAChF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;aAC9C,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAkB;QAC1C,oEAAoE;QACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAE5C,MAAM,GAAG,GAAG,YAAY,QAAQ,cAAc,MAAM,CAAC,IAAI,kFAAkF,CAAC;QAE5I,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBACtC,OAAO,EAAE,MAAM,EAAE,YAAY;gBAC7B,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC7C,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,QAAQ,GAAsB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAE1C,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,oCAAoC;YACpC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAsB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC7D,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,wCAAwC;oBACxC,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,gBAAmC;QAC3D,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAE5C,iCAAiC;YACjC,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;YAEpD,MAAM,OAAO,GAAY;gBACvB,EAAE,EAAE,YAAY,EAAE,CAAC,WAAW,EAAE;gBAChC,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,QAAQ;gBACR,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,EAAE,CAAC,SAAS;gBAClB,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,MAAM,EAAE,EAAE,CAAC,WAAW;gBACtB,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,KAAK,EAAE,mBAAmB,EAAE,CAAC,MAAM,EAAE;gBACrC,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,uBAAuB,cAAc,EAAE;gBACrE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBACvE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC;gBACzC,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,KAAK,EAAE,kCAAkC;gBACtD,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,UAAU,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBAC9C,WAAW,EAAE,EAAE,CAAC,WAAW;aAC5B,CAAC;YAEF,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CAAC,EAAmB;QAC3C,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAEvC,iDAAiD;QACjD,IACE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC/B,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,8CAA8C;QAC9C,IACE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EACxB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,wBAAwB;QACxB,OAAO,MAAM,CAAC,CAAC,yCAAyC;IAC1D,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;IACrG,CAAC;IAEO,aAAa,CAAC,OAAe,EAAE,MAAc;QACnD,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC;QAC5B,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,MAAM,WAAW,GAA2B;YAC1C,mBAAmB,EAAE,4FAA4F;YACjH,uBAAuB,EAAE,4FAA4F;YACrH,cAAc,EAAE,mFAAmF;YACnG,iBAAiB,EAAE,yFAAyF;YAC5G,aAAa,EAAE,qFAAqF;YACpG,YAAY,EAAE,oFAAoF;SACnG,CAAC;QAEF,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,2GAA2G,CAAC;IAC5I,CAAC;CACF;AAED,eAAe,eAAe,CAAC"}

package/dist/scanners/index.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Scanner Index
+ *
+ * Exports all available scanners
+ */
+export { SemgrepScanner } from './semgrep.js';
+export { GitleaksScanner } from './gitleaks.js';
+export { NpmAuditScanner } from './npm-audit.js';
+export { ESLintScanner } from './eslint.js';
+export { ComplexityScanner } from './complexity.js';
+import type { Scanner } from '../types.js';
+/**
+ * Get all available scanners
+ * Ordered by priority (security first)
+ */
+export declare function getAllScanners(): Scanner[];
+/**
+ * Get scanners by category
+ */
+export declare function getScannersByCategory(categories: string[]): Scanner[];
+/**
+ * Scanner coverage matrix for documentation
+ */
+export declare const SCANNER_COVERAGE: {
+    semgrep: {
+        categories: string[];
+        description: string;
+        languages: string[];
+        requirements: string;
+    };
+    gitleaks: {
+        categories: string[];
+        description: string;
+        languages: string[];
+        requirements: string;
+    };
+    'npm-audit': {
+        categories: string[];
+        description: string;
+        languages: string[];
+        requirements: string;
+    };
+    eslint: {
+        categories: string[];
+        description: string;
+        languages: string[];
+        requirements: string;
+    };
+    complexity: {
+        categories: string[];
+        description: string;
+        languages: string[];
+        requirements: string;
+    };
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/scanners/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scanners/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAOpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;GAGG;AACH,wBAAgB,cAAc,IAAI,OAAO,EAAE,CAQ1C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAKrE;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+B5B,CAAC"}

package/dist/scanners/index.js

@@ -0,0 +1,71 @@
+/**
+ * Scanner Index
+ *
+ * Exports all available scanners
+ */
+export { SemgrepScanner } from './semgrep.js';
+export { GitleaksScanner } from './gitleaks.js';
+export { NpmAuditScanner } from './npm-audit.js';
+export { ESLintScanner } from './eslint.js';
+export { ComplexityScanner } from './complexity.js';
+import { SemgrepScanner } from './semgrep.js';
+import { GitleaksScanner } from './gitleaks.js';
+import { NpmAuditScanner } from './npm-audit.js';
+import { ESLintScanner } from './eslint.js';
+import { ComplexityScanner } from './complexity.js';
+/**
+ * Get all available scanners
+ * Ordered by priority (security first)
+ */
+export function getAllScanners() {
+    return [
+        new SemgrepScanner(), // Security + Quality (SAST)
+        new GitleaksScanner(), // Secrets
+        new NpmAuditScanner(), // Dependencies (SCA)
+        new ESLintScanner(), // Quality + Style
+        new ComplexityScanner() // Complexity + Code Smells
+    ];
+}
+/**
+ * Get scanners by category
+ */
+export function getScannersByCategory(categories) {
+    const allScanners = getAllScanners();
+    return allScanners.filter(scanner => scanner.categories.some(cat => categories.includes(cat)));
+}
+/**
+ * Scanner coverage matrix for documentation
+ */
+export const SCANNER_COVERAGE = {
+    semgrep: {
+        categories: ['security', 'quality', 'style'],
+        description: 'Static Application Security Testing (SAST)',
+        languages: ['JavaScript', 'TypeScript', 'Python', 'Go', 'Ruby', 'Java', 'C', 'PHP', 'and more'],
+        requirements: 'semgrep CLI'
+    },
+    gitleaks: {
+        categories: ['secret'],
+        description: 'Secret and credential detection',
+        languages: ['All (content-based scanning)'],
+        requirements: 'gitleaks CLI'
+    },
+    'npm-audit': {
+        categories: ['dependency'],
+        description: 'Dependency vulnerability scanning',
+        languages: ['JavaScript', 'TypeScript (Node.js)'],
+        requirements: 'npm'
+    },
+    eslint: {
+        categories: ['quality', 'style', 'security'],
+        description: 'JavaScript/TypeScript linting',
+        languages: ['JavaScript', 'TypeScript'],
+        requirements: 'eslint (project dependency)'
+    },
+    complexity: {
+        categories: ['complexity', 'quality'],
+        description: 'Code complexity and smell detection',
+        languages: ['JavaScript', 'TypeScript', 'Python', 'Ruby', 'PHP', 'Java', 'C#', 'Go'],
+        requirements: 'None (built-in)'
+    }
+};
+//# sourceMappingURL=index.js.map

package/dist/scanners/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scanners/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,IAAI,cAAc,EAAE,EAAO,4BAA4B;QACvD,IAAI,eAAe,EAAE,EAAM,UAAU;QACrC,IAAI,eAAe,EAAE,EAAM,qBAAqB;QAChD,IAAI,aAAa,EAAE,EAAQ,kBAAkB;QAC7C,IAAI,iBAAiB,EAAE,CAAI,2BAA2B;KACvD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAoB;IACxD,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,OAAO,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAClC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,OAAO,EAAE;QACP,UAAU,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;QAC5C,WAAW,EAAE,4CAA4C;QACzD,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC;QAC/F,YAAY,EAAE,aAAa;KAC5B;IACD,QAAQ,EAAE;QACR,UAAU,EAAE,CAAC,QAAQ,CAAC;QACtB,WAAW,EAAE,iCAAiC;QAC9C,SAAS,EAAE,CAAC,8BAA8B,CAAC;QAC3C,YAAY,EAAE,cAAc;KAC7B;IACD,WAAW,EAAE;QACX,UAAU,EAAE,CAAC,YAAY,CAAC;QAC1B,WAAW,EAAE,mCAAmC;QAChD,SAAS,EAAE,CAAC,YAAY,EAAE,sBAAsB,CAAC;QACjD,YAAY,EAAE,KAAK;KACpB;IACD,MAAM,EAAE;QACN,UAAU,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;QAC5C,WAAW,EAAE,+BAA+B;QAC5C,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;QACvC,YAAY,EAAE,6BAA6B;KAC5C;IACD,UAAU,EAAE;QACV,UAAU,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;QACrC,WAAW,EAAE,qCAAqC;QAClD,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;QACpF,YAAY,EAAE,iBAAiB;KAChC;CACF,CAAC"}

package/dist/scanners/npm-audit.d.ts

@@ -0,0 +1,19 @@
+/**
+ * NPM Audit Scanner
+ *
+ * Dependency vulnerability scanning for JavaScript/Node.js projects
+ * Covers: dependency category
+ */
+import { Scanner, ScanTarget, ScannerConfig, ScannerResult, FindingCategory } from '../types.js';
+export declare class NpmAuditScanner implements Scanner {
+    name: string;
+    categories: FindingCategory[];
+    isAvailable(): Promise<boolean>;
+    scan(target: ScanTarget, config?: ScannerConfig): Promise<ScannerResult>;
+    private runNpmAudit;
+    private transformFindings;
+    private mapSeverity;
+    private getFixInfo;
+}
+export default NpmAuditScanner;
+//# sourceMappingURL=npm-audit.d.ts.map

package/dist/scanners/npm-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-audit.d.ts","sourceRoot":"","sources":["../../src/scanners/npm-audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EACL,OAAO,EACP,UAAU,EACV,aAAa,EACb,aAAa,EAEb,eAAe,EAGhB,MAAM,aAAa,CAAC;AAuDrB,qBAAa,eAAgB,YAAW,OAAO;IAC7C,IAAI,SAAe;IACnB,UAAU,EAAE,eAAe,EAAE,CAAkB;IAEzC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAS/B,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;YA+ChE,WAAW;IA8BzB,OAAO,CAAC,iBAAiB;IA2CzB,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,UAAU;CAuCnB;AAED,eAAe,eAAe,CAAC"}

package/dist/scanners/npm-audit.js

@@ -0,0 +1,176 @@
+/**
+ * NPM Audit Scanner
+ *
+ * Dependency vulnerability scanning for JavaScript/Node.js projects
+ * Covers: dependency category
+ */
+import { exec } from 'child_process';
+import { promisify } from 'util';
+import { existsSync } from 'fs';
+import { join } from 'path';
+import { generateFingerprint } from '../types.js';
+const execAsync = promisify(exec);
+export class NpmAuditScanner {
+    name = 'npm-audit';
+    categories = ['dependency'];
+    async isAvailable() {
+        try {
+            const { stdout } = await execAsync('npm --version', { timeout: 5000 });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async scan(target, config) {
+        const startTime = Date.now();
+        // Check if this is a Node.js project
+        const packageJsonPath = join(target.path, 'package.json');
+        if (!existsSync(packageJsonPath)) {
+            return {
+                scanner: this.name,
+                success: true,
+                findings: [],
+                metrics: { duration: Date.now() - startTime },
+                metadata: { skipped: true, reason: 'No package.json found' }
+            };
+        }
+        if (!await this.isAvailable()) {
+            return {
+                scanner: this.name,
+                success: false,
+                error: 'npm not available',
+                findings: [],
+                metrics: { duration: Date.now() - startTime }
+            };
+        }
+        try {
+            const findings = await this.runNpmAudit(target);
+            return {
+                scanner: this.name,
+                success: true,
+                findings,
+                metrics: {
+                    duration: Date.now() - startTime
+                }
+            };
+        }
+        catch (error) {
+            return {
+                scanner: this.name,
+                success: false,
+                error: error instanceof Error ? error.message : String(error),
+                findings: [],
+                metrics: { duration: Date.now() - startTime }
+            };
+        }
+    }
+    async runNpmAudit(target) {
+        const cmd = `cd "${target.path}" && npm audit --json 2>/dev/null || true`;
+        try {
+            const { stdout } = await execAsync(cmd, {
+                timeout: 120000,
+                maxBuffer: 10 * 1024 * 1024
+            });
+            if (!stdout.trim()) {
+                return [];
+            }
+            const output = JSON.parse(stdout);
+            return this.transformFindings(output, target.path);
+        }
+        catch (error) {
+            // npm audit returns exit code 1 when vulnerabilities exist
+            if (error.stdout) {
+                try {
+                    const output = JSON.parse(error.stdout);
+                    return this.transformFindings(output, target.path);
+                }
+                catch {
+                    return [];
+                }
+            }
+            throw error;
+        }
+    }
+    transformFindings(output, basePath) {
+        const findings = [];
+        for (const [pkgName, vuln] of Object.entries(output.vulnerabilities || {})) {
+            // Get the most specific vulnerability info
+            const viaDetails = vuln.via.filter(v => typeof v === 'object')[0];
+            if (!viaDetails)
+                continue;
+            const severity = this.mapSeverity(vuln.severity);
+            const fixInfo = this.getFixInfo(vuln.fixAvailable);
+            const finding = {
+                id: `npm-${pkgName}-${viaDetails.source || Date.now()}`,
+                source: this.name,
+                severity,
+                category: 'dependency',
+                file: 'package.json',
+                title: `Vulnerable dependency: ${pkgName}`,
+                description: `${viaDetails.title || 'Security vulnerability'}\n\n` +
+                    `Package: ${pkgName}\n` +
+                    `Vulnerable versions: ${vuln.range}\n` +
+                    `Dependency path: ${vuln.isDirect ? 'Direct dependency' : 'Transitive dependency'}\n` +
+                    (viaDetails.url ? `\nMore info: ${viaDetails.url}` : ''),
+                cwe: viaDetails.cwe?.[0] ? `CWE-${viaDetails.cwe[0]}` : undefined,
+                cvss: viaDetails.cvss?.score,
+                suggestion: fixInfo.suggestion,
+                fixAvailable: fixInfo.available,
+                autoFixable: fixInfo.autoFixable,
+                ruleId: `npm-advisory-${viaDetails.source}`,
+                ruleUrl: viaDetails.url,
+                confidence: 'high',
+                effort: fixInfo.effort,
+                fingerprint: ''
+            };
+            finding.fingerprint = generateFingerprint(finding);
+            findings.push(finding);
+        }
+        return findings;
+    }
+    mapSeverity(npmSeverity) {
+        const mapping = {
+            'critical': 'critical',
+            'high': 'high',
+            'moderate': 'medium',
+            'low': 'low',
+            'info': 'info'
+        };
+        return mapping[npmSeverity.toLowerCase()] || 'medium';
+    }
+    getFixInfo(fixAvailable) {
+        if (fixAvailable === true) {
+            return {
+                available: true,
+                autoFixable: true,
+                suggestion: 'Run `npm audit fix` to automatically fix this vulnerability',
+                effort: 'trivial'
+            };
+        }
+        if (typeof fixAvailable === 'object' && fixAvailable !== null) {
+            if (fixAvailable.isSemVerMajor) {
+                return {
+                    available: true,
+                    autoFixable: false,
+                    suggestion: `Update to ${fixAvailable.name}@${fixAvailable.version} (breaking change - review required). Run \`npm audit fix --force\` with caution`,
+                    effort: 'medium'
+                };
+            }
+            return {
+                available: true,
+                autoFixable: true,
+                suggestion: `Update to ${fixAvailable.name}@${fixAvailable.version}. Run \`npm audit fix\``,
+                effort: 'easy'
+            };
+        }
+        return {
+            available: false,
+            autoFixable: false,
+            suggestion: 'No fix currently available. Consider using an alternative package or implementing mitigations',
+            effort: 'hard'
+        };
+    }
+}
+export default NpmAuditScanner;
+//# sourceMappingURL=npm-audit.js.map

package/dist/scanners/npm-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-audit.js","sourceRoot":"","sources":["../../src/scanners/npm-audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAQL,mBAAmB,EACpB,MAAM,aAAa,CAAC;AAErB,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAqDlC,MAAM,OAAO,eAAe;IAC1B,IAAI,GAAG,WAAW,CAAC;IACnB,UAAU,GAAsB,CAAC,YAAY,CAAC,CAAC;IAE/C,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAkB,EAAE,MAAsB;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,qCAAqC;QACrC,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;gBAC7C,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE;aAC7D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,mBAAmB;gBAC1B,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;aAC9C,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAEhD,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,IAAI;gBACb,QAAQ;gBACR,OAAO,EAAE;oBACP,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACjC;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;aAC9C,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAkB;QAC1C,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,IAAI,2CAA2C,CAAC;QAE1E,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBACtC,OAAO,EAAE,MAAM;gBACf,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnB,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAErD,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,2DAA2D;YAC3D,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACxD,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,MAAsB,EAAE,QAAgB;QAChE,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3E,2CAA2C;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAElE,IAAI,CAAC,UAAU;gBAAE,SAAS;YAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAEnD,MAAM,OAAO,GAAY;gBACvB,EAAE,EAAE,OAAO,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;gBACvD,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,QAAQ;gBACR,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,0BAA0B,OAAO,EAAE;gBAC1C,WAAW,EAAE,GAAG,UAAU,CAAC,KAAK,IAAI,wBAAwB,MAAM;oBAChE,YAAY,OAAO,IAAI;oBACvB,wBAAwB,IAAI,CAAC,KAAK,IAAI;oBACtC,oBAAoB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,uBAAuB,IAAI;oBACrF,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;gBACjE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK;gBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,YAAY,EAAE,OAAO,CAAC,SAAS;gBAC/B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,MAAM,EAAE,gBAAgB,UAAU,CAAC,MAAM,EAAE;gBAC3C,OAAO,EAAE,UAAU,CAAC,GAAG;gBACvB,UAAU,EAAE,MAAM;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,WAAW,EAAE,EAAE;aAChB,CAAC;YAEF,OAAO,CAAC,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,WAAW,CAAC,WAAmB;QACrC,MAAM,OAAO,GAAkC;YAC7C,UAAU,EAAE,UAAU;YACtB,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,QAAQ;YACpB,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,MAAM;SACf,CAAC;QACF,OAAO,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,IAAI,QAAQ,CAAC;IACxD,CAAC;IAEO,UAAU,CAAC,YAAmD;QAMpE,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,IAAI;gBACjB,UAAU,EAAE,6DAA6D;gBACzE,MAAM,EAAE,SAAS;aAClB,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC9D,IAAI,YAAY,CAAC,aAAa,EAAE,CAAC;gBAC/B,OAAO;oBACL,SAAS,EAAE,IAAI;oBACf,WAAW,EAAE,KAAK;oBAClB,UAAU,EAAE,aAAa,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,OAAO,kFAAkF;oBACpJ,MAAM,EAAE,QAAQ;iBACjB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,IAAI;gBACjB,UAAU,EAAE,aAAa,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,OAAO,yBAAyB;gBAC3F,MAAM,EAAE,MAAM;aACf,CAAC;QACJ,CAAC;QAED,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,+FAA+F;YAC3G,MAAM,EAAE,MAAM;SACf,CAAC;IACJ,CAAC;CACF;AAED,eAAe,eAAe,CAAC"}

package/dist/scanners/semgrep.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Semgrep Scanner
+ *
+ * Provides SAST scanning using Semgrep CLI with fallback to MCP
+ * Covers: security, quality, style categories
+ */
+import { Scanner, ScanTarget, ScannerConfig, ScannerResult, FindingCategory } from '../types.js';
+export declare class SemgrepScanner implements Scanner {
+    name: string;
+    categories: FindingCategory[];
+    private rulesets;
+    constructor(rulesets?: string[]);
+    isAvailable(): Promise<boolean>;
+    scan(target: ScanTarget, config?: ScannerConfig): Promise<ScannerResult>;
+    private runSemgrep;
+    private transformFindings;
+    private mapSeverity;
+    private mapCategory;
+    private mapConfidence;
+}
+export default SemgrepScanner;
+//# sourceMappingURL=semgrep.d.ts.map

package/dist/scanners/semgrep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semgrep.d.ts","sourceRoot":"","sources":["../../src/scanners/semgrep.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EACL,OAAO,EACP,UAAU,EACV,aAAa,EACb,aAAa,EAEb,eAAe,EAGhB,MAAM,aAAa,CAAC;AAiCrB,qBAAa,cAAe,YAAW,OAAO;IAC5C,IAAI,SAAa;IACjB,UAAU,EAAE,eAAe,EAAE,CAAoC;IAEjE,OAAO,CAAC,QAAQ,CAAW;gBAEf,QAAQ,GAAE,MAAM,EAAa;IAYnC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAS/B,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;YAoChE,UAAU;IA0CxB,OAAO,CAAC,iBAAiB;IAkCzB,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,WAAW;IAiBnB,OAAO,CAAC,aAAa;CAQtB;AAED,eAAe,cAAc,CAAC"}