@datahogo/core 0.1.0

package/dist/engines/url-scanner.js

@@ -0,0 +1,469 @@
+// URL scanner engine - checks deployed app for security headers, SSL, cookies
+// Makes HTTP requests to the target URL and analyzes the response
+const HEADER_CHECKS = [
+    {
+        id: 63,
+        header: "content-security-policy",
+        name: "Missing Content Security Policy",
+        severity: "medium",
+        expectedPresent: true,
+        category: "headers",
+    },
+    {
+        id: 64,
+        header: "x-frame-options",
+        name: "Missing X-Frame-Options",
+        severity: "medium",
+        expectedPresent: true,
+        category: "headers",
+    },
+    {
+        id: 65,
+        header: "x-content-type-options",
+        name: "Missing X-Content-Type-Options",
+        severity: "low",
+        expectedPresent: true,
+        category: "headers",
+    },
+    {
+        id: 66,
+        header: "strict-transport-security",
+        name: "Missing HSTS Header",
+        severity: "medium",
+        expectedPresent: true,
+        category: "headers",
+    },
+    {
+        id: 251,
+        header: "referrer-policy",
+        name: "Missing Referrer-Policy Header",
+        severity: "low",
+        expectedPresent: true,
+        category: "headers",
+    },
+];
+export async function scanUrl(appUrl) {
+    const findings = [];
+    try {
+        // Fetch the URL with a timeout
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 10000);
+        const response = await fetch(appUrl, {
+            method: "GET",
+            redirect: "follow",
+            signal: controller.signal,
+            headers: {
+                "User-Agent": "DataHogo-Scanner/1.0",
+            },
+        });
+        clearTimeout(timeout);
+        const body = (await response.text()).substring(0, 512_000);
+        const finalUrl = response.url || appUrl;
+        // Check security headers
+        for (const check of HEADER_CHECKS) {
+            const headerValue = response.headers.get(check.header);
+            if (check.expectedPresent && !headerValue) {
+                findings.push({
+                    vulnerability_id: check.id,
+                    severity: check.severity,
+                    category: check.category,
+                    title: check.name,
+                    description_technical: `The ${check.header} header is not set on ${appUrl}`,
+                    code_snippet: `Response headers missing: ${check.header}`,
+                    status: "open",
+                });
+            }
+            if (headerValue && check.valuePredicate && !check.valuePredicate(headerValue)) {
+                findings.push({
+                    vulnerability_id: check.id,
+                    severity: check.severity,
+                    category: check.category,
+                    title: check.name,
+                    description_technical: `The ${check.header} header has a weak value: ${headerValue}`,
+                    code_snippet: `${check.header}: ${headerValue}`,
+                    status: "open",
+                });
+            }
+        }
+        // Deep CSP analysis (when header IS present)
+        const csp = response.headers.get("content-security-policy");
+        if (csp) {
+            analyzeCspPolicy(csp, findings);
+        }
+        // Server version disclosure
+        const serverHeader = response.headers.get("server");
+        if (serverHeader && /\d+\.\d+/.test(serverHeader)) {
+            findings.push({
+                vulnerability_id: 4,
+                severity: "low",
+                category: "headers",
+                title: "Server Version Disclosed",
+                description_technical: `The Server header reveals version info: ${serverHeader}`,
+                code_snippet: `Server: ${serverHeader}`,
+                owasp_ref: "A05:2021",
+                status: "open",
+            });
+        }
+        // X-Powered-By disclosure
+        const poweredBy = response.headers.get("x-powered-by");
+        if (poweredBy) {
+            findings.push({
+                vulnerability_id: 4,
+                severity: "low",
+                category: "headers",
+                title: "X-Powered-By Header Disclosed",
+                description_technical: `The X-Powered-By header reveals technology: ${poweredBy}`,
+                code_snippet: `X-Powered-By: ${poweredBy}`,
+                owasp_ref: "A05:2021",
+                status: "open",
+            });
+        }
+        // Check cookies
+        const setCookieHeaders = response.headers.getSetCookie?.() ?? [];
+        for (const cookie of setCookieHeaders) {
+            // Extract just the cookie name (everything before the first '=')
+            const cookieName = cookie.split("=")[0].trim();
+            // Skip cookies managed by frameworks that intentionally omit HttpOnly because
+            // client-side JS must read them (Supabase Auth for session refresh, next-intl
+            // for locale sync via <Link>). Flagging these creates noise, not actionable findings.
+            const isFrameworkCookie = cookieName.startsWith("sb-") ||
+                cookieName.startsWith("__supabase") ||
+                cookieName === "NEXT_LOCALE";
+            if (isFrameworkCookie)
+                continue;
+            if (!cookie.toLowerCase().includes("secure")) {
+                findings.push({
+                    vulnerability_id: 67,
+                    severity: "medium",
+                    category: "headers",
+                    title: "Cookie Without Secure Flag",
+                    code_snippet: maskCookieValue(cookie),
+                    status: "open",
+                });
+            }
+            if (!cookie.toLowerCase().includes("httponly")) {
+                findings.push({
+                    vulnerability_id: 68,
+                    severity: "medium",
+                    category: "headers",
+                    title: "Cookie Without HttpOnly Flag",
+                    code_snippet: maskCookieValue(cookie),
+                    status: "open",
+                });
+            }
+            if (!cookie.toLowerCase().includes("samesite")) {
+                findings.push({
+                    vulnerability_id: 69,
+                    severity: "medium",
+                    category: "headers",
+                    title: "Cookie Without SameSite Attribute",
+                    code_snippet: maskCookieValue(cookie),
+                    status: "open",
+                });
+            }
+        }
+        // Check if source maps are accessible
+        await checkSourceMaps(appUrl, findings);
+        // Check for exposed API docs
+        await checkExposedEndpoints(appUrl, findings);
+        // Check HTTP to HTTPS redirect
+        if (appUrl.startsWith("https://")) {
+            const httpUrl = appUrl.replace("https://", "http://");
+            try {
+                const httpResponse = await fetch(httpUrl, {
+                    method: "HEAD",
+                    redirect: "manual",
+                    signal: AbortSignal.timeout(5000),
+                });
+                const location = httpResponse.headers.get("location");
+                if (!location || !location.startsWith("https://")) {
+                    findings.push({
+                        vulnerability_id: 66,
+                        severity: "medium",
+                        category: "headers",
+                        title: "HTTP Does Not Redirect to HTTPS",
+                        description_technical: `${httpUrl} does not redirect to HTTPS`,
+                        status: "open",
+                    });
+                }
+            }
+            catch {
+                // HTTP not accessible - that's fine
+            }
+        }
+        // Mixed Content (ID 252) — HTTPS page loading HTTP subresources
+        if (finalUrl.startsWith("https://")) {
+            const mixedMatches = [...body.matchAll(/(src|href|action)\s*=\s*["']http:\/\/[^"']+["']/gi)]
+                .filter((m) => !m[0].includes("http://www.w3.org") && !m[0].includes("http://xmlns"))
+                .slice(0, 3);
+            if (mixedMatches.length > 0) {
+                findings.push({
+                    vulnerability_id: 252,
+                    severity: "medium",
+                    category: "headers",
+                    title: "Mixed Content Detected",
+                    description_technical: `HTTPS page loads subresources over HTTP, exposing them to interception`,
+                    code_snippet: mixedMatches.map((m) => m[0]).join("\n"),
+                    owasp_ref: "A05:2021",
+                    status: "open",
+                });
+            }
+        }
+        // Form Action Insecure (ID 253) — forms posting over HTTP from an HTTPS page
+        if (finalUrl.startsWith("https://")) {
+            const formMatches = [...body.matchAll(/<form[^>]*action\s*=\s*["']http:\/\/[^"']+["'][^>]*>/gi)]
+                .slice(0, 3);
+            if (formMatches.length > 0) {
+                findings.push({
+                    vulnerability_id: 253,
+                    severity: "medium",
+                    category: "headers",
+                    title: "Form Action Uses Insecure HTTP URL",
+                    description_technical: `One or more HTML forms post data to an HTTP URL, exposing submitted data in transit`,
+                    code_snippet: formMatches.map((m) => m[0]).join("\n"),
+                    status: "open",
+                });
+            }
+        }
+        // Protocol-Relative Links (ID 254)
+        const protoRelativeMatches = [...body.matchAll(/(src|href)\s*=\s*["']\/\/[^"']+["']/gi)]
+            .slice(0, 3);
+        if (protoRelativeMatches.length > 0) {
+            findings.push({
+                vulnerability_id: 254,
+                severity: "low",
+                category: "headers",
+                title: "Protocol-Relative Links Detected",
+                description_technical: `Page uses protocol-relative URLs (//example.com), which inherit the page protocol and can load resources over HTTP`,
+                code_snippet: protoRelativeMatches.map((m) => m[0]).join("\n"),
+                status: "open",
+            });
+        }
+        // Bad Content-Type (ID 255)
+        const contentType = response.headers.get("content-type");
+        const urlPath = (() => {
+            try {
+                return new URL(finalUrl).pathname;
+            }
+            catch {
+                return finalUrl;
+            }
+        })();
+        const isLikelyHtmlPage = urlPath === "/" ||
+            urlPath === "" ||
+            urlPath.endsWith(".html") ||
+            urlPath.endsWith(".htm") ||
+            !urlPath.includes(".");
+        if (isLikelyHtmlPage) {
+            if (!contentType) {
+                findings.push({
+                    vulnerability_id: 255,
+                    severity: "low",
+                    category: "headers",
+                    title: "Missing Content-Type Header",
+                    description_technical: `The response does not include a Content-Type header, leaving browsers to sniff the content type`,
+                    code_snippet: `Content-Type header absent for ${finalUrl}`,
+                    status: "open",
+                });
+            }
+            else if (!contentType.includes("text/html")) {
+                findings.push({
+                    vulnerability_id: 255,
+                    severity: "low",
+                    category: "headers",
+                    title: "Unexpected Content-Type for Web Page",
+                    description_technical: `Expected text/html for this URL but received: ${contentType}`,
+                    code_snippet: `Content-Type: ${contentType}`,
+                    status: "open",
+                });
+            }
+        }
+    }
+    catch (error) {
+        // URL unreachable - not a finding, just means we can't scan
+        // The caller should handle this gracefully
+    }
+    return findings;
+}
+async function checkSourceMaps(baseUrl, findings) {
+    const mapPaths = [
+        "/_next/static/chunks/main.js.map",
+        "/static/js/main.js.map",
+        "/bundle.js.map",
+    ];
+    for (const path of mapPaths) {
+        try {
+            const response = await fetch(`${baseUrl}${path}`, {
+                method: "HEAD",
+                signal: AbortSignal.timeout(5000),
+            });
+            if (response.ok) {
+                findings.push({
+                    vulnerability_id: 49,
+                    severity: "medium",
+                    category: "react-nextjs",
+                    title: "Source Maps Accessible in Production",
+                    description_technical: `Source map file accessible at ${path}`,
+                    code_snippet: `GET ${path} → ${response.status}`,
+                    status: "open",
+                });
+                break; // One finding is enough
+            }
+        }
+        catch {
+            // Not accessible - good
+        }
+    }
+}
+async function checkExposedEndpoints(baseUrl, findings) {
+    const endpoints = [
+        { path: "/swagger", id: 94, severity: "low" },
+        { path: "/api-docs", id: 94, severity: "low" },
+        { path: "/swagger-ui.html", id: 94, severity: "low" },
+        { path: "/graphql", id: 95, severity: "low" },
+        { path: "/debug", id: 116, severity: "medium" },
+        { path: "/_debug", id: 116, severity: "medium" },
+        { path: "/.env", id: 62, severity: "critical" },
+        { path: "/.git/HEAD", id: 62, severity: "critical" },
+        { path: "/.git/config", id: 62, severity: "critical" },
+        { path: "/server-status", id: 116, severity: "medium" },
+        { path: "/server-info", id: 116, severity: "medium" },
+        { path: "/actuator", id: 116, severity: "medium" },
+        { path: "/actuator/health", id: 116, severity: "low" },
+        { path: "/phpinfo.php", id: 116, severity: "medium" },
+        { path: "/wp-admin", id: 116, severity: "low" },
+        { path: "/wp-login.php", id: 116, severity: "low" },
+        { path: "/.DS_Store", id: 99, severity: "low" },
+        { path: "/robots.txt", id: 99, severity: "info" },
+    ];
+    for (const endpoint of endpoints) {
+        try {
+            const response = await fetch(`${baseUrl}${endpoint.path}`, {
+                method: "GET",
+                signal: AbortSignal.timeout(5000),
+                headers: { "User-Agent": "DataHogo-Scanner/1.0" },
+            });
+            if (response.ok) {
+                findings.push({
+                    vulnerability_id: endpoint.id,
+                    severity: endpoint.severity,
+                    category: endpoint.id === 62 ? "vibecoding" : endpoint.id === 95 ? "api" : "config",
+                    title: `Exposed Endpoint: ${endpoint.path}`,
+                    description_technical: `${endpoint.path} is publicly accessible and returned HTTP ${response.status}`,
+                    code_snippet: `GET ${endpoint.path} → ${response.status} OK`,
+                    owasp_ref: endpoint.id === 62 ? "A07:2021" : "A05:2021",
+                    status: "open",
+                });
+            }
+        }
+        catch {
+            // Not accessible - fine
+        }
+    }
+    // CORS preflight test — check if server reflects arbitrary origins
+    await checkCorsPreflight(baseUrl, findings);
+}
+function maskCookieValue(cookie) {
+    // Mask the cookie value, keep the name and attributes
+    return cookie.replace(/=([^;]{10,})/, "=***REDACTED***");
+}
+function analyzeCspPolicy(csp, findings) {
+    const directives = csp.split(";").map((d) => d.trim().toLowerCase());
+    for (const directive of directives) {
+        // Check for unsafe-inline in script-src
+        if (directive.startsWith("script-src") && directive.includes("'unsafe-inline'")) {
+            findings.push({
+                vulnerability_id: 63,
+                severity: "medium",
+                category: "headers",
+                title: "CSP Allows unsafe-inline Scripts",
+                description_technical: "Content-Security-Policy script-src includes 'unsafe-inline', enabling inline script execution",
+                code_snippet: directive,
+                owasp_ref: "A05:2021",
+                status: "open",
+            });
+        }
+        // Check for unsafe-eval in script-src
+        if (directive.startsWith("script-src") && directive.includes("'unsafe-eval'")) {
+            findings.push({
+                vulnerability_id: 63,
+                severity: "high",
+                category: "headers",
+                title: "CSP Allows unsafe-eval Scripts",
+                description_technical: "Content-Security-Policy script-src includes 'unsafe-eval', enabling eval() execution",
+                code_snippet: directive,
+                owasp_ref: "A05:2021",
+                status: "open",
+            });
+        }
+        // Check for wildcard in any source directive
+        if (directive.includes(" *") && !directive.includes("*.")) {
+            findings.push({
+                vulnerability_id: 63,
+                severity: "medium",
+                category: "headers",
+                title: "CSP Contains Wildcard Source",
+                description_technical: "Content-Security-Policy contains a wildcard (*) source, allowing resources from any origin",
+                code_snippet: directive,
+                owasp_ref: "A05:2021",
+                status: "open",
+            });
+        }
+    }
+    // Check for missing frame-ancestors (clickjacking protection)
+    const hasFrameAncestors = directives.some((d) => d.startsWith("frame-ancestors"));
+    if (!hasFrameAncestors) {
+        findings.push({
+            vulnerability_id: 64,
+            severity: "low",
+            category: "headers",
+            title: "CSP Missing frame-ancestors Directive",
+            description_technical: "Content-Security-Policy does not include frame-ancestors, relying on X-Frame-Options for clickjacking protection",
+            code_snippet: `CSP: ${csp.substring(0, 200)}${csp.length > 200 ? "..." : ""}`,
+            status: "open",
+        });
+    }
+}
+async function checkCorsPreflight(baseUrl, findings) {
+    try {
+        const response = await fetch(baseUrl, {
+            method: "OPTIONS",
+            signal: AbortSignal.timeout(5000),
+            headers: {
+                "User-Agent": "DataHogo-Scanner/1.0",
+                Origin: "https://evil-attacker.com",
+                "Access-Control-Request-Method": "GET",
+            },
+        });
+        const allowOrigin = response.headers.get("access-control-allow-origin");
+        if (allowOrigin === "*" || allowOrigin === "https://evil-attacker.com") {
+            findings.push({
+                vulnerability_id: 4,
+                severity: "medium",
+                category: "headers",
+                title: "CORS Reflects Arbitrary Origins",
+                description_technical: `Server reflects arbitrary Origin in Access-Control-Allow-Origin: ${allowOrigin}`,
+                code_snippet: `OPTIONS ${baseUrl}\nOrigin: https://evil-attacker.com\n→ Access-Control-Allow-Origin: ${allowOrigin}`,
+                owasp_ref: "A05:2021",
+                status: "open",
+            });
+        }
+        const allowCredentials = response.headers.get("access-control-allow-credentials");
+        if (allowCredentials === "true" && (allowOrigin === "*" || allowOrigin === "https://evil-attacker.com")) {
+            findings.push({
+                vulnerability_id: 4,
+                severity: "high",
+                category: "headers",
+                title: "CORS Allows Credentials from Any Origin",
+                description_technical: "Server allows credentials (cookies) from arbitrary origins — critical cross-origin data theft risk",
+                code_snippet: `Access-Control-Allow-Origin: ${allowOrigin}\nAccess-Control-Allow-Credentials: true`,
+                owasp_ref: "A05:2021",
+                status: "open",
+            });
+        }
+    }
+    catch {
+        // CORS preflight not supported or request failed — fine
+    }
+}
+//# sourceMappingURL=url-scanner.js.map

package/dist/engines/url-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-scanner.js","sourceRoot":"","sources":["../../src/engines/url-scanner.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,kEAAkE;AAclE,MAAM,aAAa,GAAkB;IACnC;QACE,EAAE,EAAE,EAAE;QACN,MAAM,EAAE,yBAAyB;QACjC,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,QAAQ;QAClB,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,EAAE,EAAE,EAAE;QACN,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,QAAQ;QAClB,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,EAAE,EAAE,EAAE;QACN,MAAM,EAAE,wBAAwB;QAChC,IAAI,EAAE,gCAAgC;QACtC,QAAQ,EAAE,KAAK;QACf,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,EAAE,EAAE,EAAE;QACN,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,EAAE,EAAE,GAAG;QACP,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,gCAAgC;QACtC,QAAQ,EAAE,KAAK;QACf,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,SAAS;KACpB;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAc;IAC1C,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,IAAI,CAAC;QACH,+BAA+B;QAC/B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAE5D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YACnC,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE;gBACP,YAAY,EAAE,sBAAsB;aACrC;SACF,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,CAAC;QAEtB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC;QAExC,yBAAyB;QACzB,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEvD,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1C,QAAQ,CAAC,IAAI,CAAC;oBACZ,gBAAgB,EAAE,KAAK,CAAC,EAAE;oBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,qBAAqB,EAAE,OAAO,KAAK,CAAC,MAAM,yBAAyB,MAAM,EAAE;oBAC3E,YAAY,EAAE,6BAA6B,KAAK,CAAC,MAAM,EAAE;oBACzD,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;YAED,IAAI,WAAW,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9E,QAAQ,CAAC,IAAI,CAAC;oBACZ,gBAAgB,EAAE,KAAK,CAAC,EAAE;oBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,qBAAqB,EAAE,OAAO,KAAK,CAAC,MAAM,6BAA6B,WAAW,EAAE;oBACpF,YAAY,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE;oBAC/C,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAC5D,IAAI,GAAG,EAAE,CAAC;YACR,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC;gBACZ,gBAAgB,EAAE,CAAC;gBACnB,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,0BAA0B;gBACjC,qBAAqB,EAAE,2CAA2C,YAAY,EAAE;gBAChF,YAAY,EAAE,WAAW,YAAY,EAAE;gBACvC,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;QAED,0BAA0B;QAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACvD,IAAI,SAAS,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC;gBACZ,gBAAgB,EAAE,CAAC;gBACnB,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,+BAA+B;gBACtC,qBAAqB,EAAE,+CAA+C,SAAS,EAAE;gBACjF,YAAY,EAAE,iBAAiB,SAAS,EAAE;gBAC1C,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;QAED,gBAAgB;QAChB,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC;QACjE,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACtC,iEAAiE;YACjE,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAE/C,8EAA8E;YAC9E,8EAA8E;YAC9E,sFAAsF;YACtF,MAAM,iBAAiB,GACrB,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC5B,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC;gBACnC,UAAU,KAAK,aAAa,CAAC;YAE/B,IAAI,iBAAiB;gBAAE,SAAS;YAEhC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7C,QAAQ,CAAC,IAAI,CAAC;oBACZ,gBAAgB,EAAE,EAAE;oBACpB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,4BAA4B;oBACnC,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC;oBACrC,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CAAC,IAAI,CAAC;oBACZ,gBAAgB,EAAE,EAAE;oBACpB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,8BAA8B;oBACrC,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC;oBACrC,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CAAC,IAAI,CAAC;oBACZ,gBAAgB,EAAE,EAAE;oBACpB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,mCAAmC;oBAC1C,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC;oBACrC,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAExC,6BAA6B;QAC7B,MAAM,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE9C,+BAA+B;QAC/B,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE;oBACxC,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACtD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBAClD,QAAQ,CAAC,IAAI,CAAC;wBACZ,gBAAgB,EAAE,EAAE;wBACpB,QAAQ,EAAE,QAAQ;wBAClB,QAAQ,EAAE,SAAS;wBACnB,KAAK,EAAE,iCAAiC;wBACxC,qBAAqB,EAAE,GAAG,OAAO,6BAA6B;wBAC9D,MAAM,EAAE,MAAM;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC;iBACzF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;iBACpF,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACf,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACZ,gBAAgB,EAAE,GAAG;oBACrB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,wBAAwB;oBAC/B,qBAAqB,EAAE,wEAAwE;oBAC/F,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBACtD,SAAS,EAAE,UAAU;oBACrB,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,wDAAwD,CAAC,CAAC;iBAC7F,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACf,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC;oBACZ,gBAAgB,EAAE,GAAG;oBACrB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,oCAAoC;oBAC3C,qBAAqB,EAAE,qFAAqF;oBAC5G,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBACrD,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;aACrF,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACf,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC;gBACZ,gBAAgB,EAAE,GAAG;gBACrB,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,kCAAkC;gBACzC,qBAAqB,EAAE,oHAAoH;gBAC3I,YAAY,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC9D,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;QAED,4BAA4B;QAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;YACpB,IAAI,CAAC;gBACH,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,gBAAgB,GACpB,OAAO,KAAK,GAAG;YACf,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YACxB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC;oBACZ,gBAAgB,EAAE,GAAG;oBACrB,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,6BAA6B;oBACpC,qBAAqB,EAAE,iGAAiG;oBACxH,YAAY,EAAE,kCAAkC,QAAQ,EAAE;oBAC1D,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9C,QAAQ,CAAC,IAAI,CAAC;oBACZ,gBAAgB,EAAE,GAAG;oBACrB,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,sCAAsC;oBAC7C,qBAAqB,EAAE,iDAAiD,WAAW,EAAE;oBACrF,YAAY,EAAE,iBAAiB,WAAW,EAAE;oBAC5C,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IAEH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4DAA4D;QAC5D,2CAA2C;IAC7C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,QAAuB;IACrE,MAAM,QAAQ,GAAG;QACf,kCAAkC;QAClC,wBAAwB;QACxB,gBAAgB;KACjB,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;gBAChD,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC;oBACZ,gBAAgB,EAAE,EAAE;oBACpB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,cAAc;oBACxB,KAAK,EAAE,sCAAsC;oBAC7C,qBAAqB,EAAE,iCAAiC,IAAI,EAAE;oBAC9D,YAAY,EAAE,OAAO,IAAI,MAAM,QAAQ,CAAC,MAAM,EAAE;oBAChD,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;gBACH,MAAM,CAAC,wBAAwB;YACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,OAAe,EAAE,QAAuB;IAC3E,MAAM,SAAS,GAAG;QAChB,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAc,EAAE;QACtD,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAc,EAAE;QACvD,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAc,EAAE;QAC9D,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAc,EAAE;QACtD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAiB,EAAE;QACxD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAiB,EAAE;QACzD,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAmB,EAAE;QACxD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAmB,EAAE;QAC7D,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAmB,EAAE;QAC/D,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAiB,EAAE;QAChE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAiB,EAAE;QAC9D,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAiB,EAAE;QAC3D,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAc,EAAE;QAC/D,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAiB,EAAE;QAC9D,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAc,EAAE;QACxD,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAc,EAAE;QAC5D,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAc,EAAE;QACxD,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAe,EAAE;KAC3D,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE;gBACzD,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE;aAClD,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC;oBACZ,gBAAgB,EAAE,QAAQ,CAAC,EAAE;oBAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,QAAQ,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;oBACnF,KAAK,EAAE,qBAAqB,QAAQ,CAAC,IAAI,EAAE;oBAC3C,qBAAqB,EAAE,GAAG,QAAQ,CAAC,IAAI,6CAA6C,QAAQ,CAAC,MAAM,EAAE;oBACrG,YAAY,EAAE,OAAO,QAAQ,CAAC,IAAI,MAAM,QAAQ,CAAC,MAAM,KAAK;oBAC5D,SAAS,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;oBACvD,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,MAAM,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,sDAAsD;IACtD,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,QAAuB;IAC5D,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAErE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,wCAAwC;QACxC,IAAI,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAChF,QAAQ,CAAC,IAAI,CAAC;gBACZ,gBAAgB,EAAE,EAAE;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,kCAAkC;gBACzC,qBAAqB,EAAE,+FAA+F;gBACtH,YAAY,EAAE,SAAS;gBACvB,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;QAED,sCAAsC;QACtC,IAAI,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC9E,QAAQ,CAAC,IAAI,CAAC;gBACZ,gBAAgB,EAAE,EAAE;gBACpB,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,gCAAgC;gBACvC,qBAAqB,EAAE,sFAAsF;gBAC7G,YAAY,EAAE,SAAS;gBACvB,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;QAED,6CAA6C;QAC7C,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,QAAQ,CAAC,IAAI,CAAC;gBACZ,gBAAgB,EAAE,EAAE;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,8BAA8B;gBACrC,qBAAqB,EAAE,4FAA4F;gBACnH,YAAY,EAAE,SAAS;gBACvB,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC;YACZ,gBAAgB,EAAE,EAAE;YACpB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,uCAAuC;YAC9C,qBAAqB,EAAE,kHAAkH;YACzI,YAAY,EAAE,QAAQ,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7E,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,QAAuB;IACxE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE;YACpC,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,OAAO,EAAE;gBACP,YAAY,EAAE,sBAAsB;gBACpC,MAAM,EAAE,2BAA2B;gBACnC,+BAA+B,EAAE,KAAK;aACvC;SACF,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QACxE,IAAI,WAAW,KAAK,GAAG,IAAI,WAAW,KAAK,2BAA2B,EAAE,CAAC;YACvE,QAAQ,CAAC,IAAI,CAAC;gBACZ,gBAAgB,EAAE,CAAC;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,iCAAiC;gBACxC,qBAAqB,EAAE,oEAAoE,WAAW,EAAE;gBACxG,YAAY,EAAE,WAAW,OAAO,uEAAuE,WAAW,EAAE;gBACpH,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;QAED,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAClF,IAAI,gBAAgB,KAAK,MAAM,IAAI,CAAC,WAAW,KAAK,GAAG,IAAI,WAAW,KAAK,2BAA2B,CAAC,EAAE,CAAC;YACxG,QAAQ,CAAC,IAAI,CAAC;gBACZ,gBAAgB,EAAE,CAAC;gBACnB,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,yCAAyC;gBAChD,qBAAqB,EAAE,oGAAoG;gBAC3H,YAAY,EAAE,gCAAgC,WAAW,0CAA0C;gBACnG,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { runScan } from "./orchestrator.js";
+export type { ScanParams, ScanResult } from "./orchestrator.js";
+export type { Severity, FindingContext, FindingConfidence, FindingData, EngineResult, } from "./engines/types.js";
+export { isRelevantFile, filterFiles } from "./utils/file-filter.js";
+export { detectTechnologies } from "./scanning/tech-detector.js";
+export type { TechDetectionResult } from "./scanning/tech-detector.js";
+export type { Technology, ScanLog } from "./scanning/types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEhE,YAAY,EACV,QAAQ,EACR,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,YAAY,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+// @datahogo/core — public API.
+// The scan engine takes a map of file paths to contents (plus an optional
+// directory on disk to enable the external-binary engines) and returns
+// findings, a security score, and per-engine results.
+export { runScan } from "./orchestrator.js";
+export { isRelevantFile, filterFiles } from "./utils/file-filter.js";
+export { detectTechnologies } from "./scanning/tech-detector.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,0EAA0E;AAC1E,uEAAuE;AACvE,sDAAsD;AAEtD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAW5C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/orchestrator.d.ts

@@ -0,0 +1,32 @@
+import type { FindingData, EngineResult } from "./engines/types.js";
+import type { ScanLog } from "./scanning/types.js";
+export interface ScanParams {
+    files: Map<string, string>;
+    repoDir?: string;
+    appUrl?: string;
+    dbRulesInput?: string;
+}
+export interface ScanResult {
+    findings: FindingData[];
+    engineResults: EngineResult[];
+    score: number;
+    summary: {
+        total: number;
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+        info: number;
+        allFindings: number;
+        production: number;
+        nonProduction: number;
+        byContext: Record<string, number>;
+        actionable: number;
+        informational: number;
+    };
+    failedEngines: string[];
+    durationMs: number;
+    scanLog?: ScanLog;
+}
+export declare function runScan(params: ScanParams): Promise<ScanResult>;
+//# sourceMappingURL=orchestrator.d.ts.map

package/dist/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAqC,YAAY,EAAY,MAAM,oBAAoB,CAAC;AACjH,OAAO,KAAK,EAAE,OAAO,EAAiC,MAAM,qBAAqB,CAAC;AAMlF,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE;QAEP,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QAEb,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAElC,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAsB,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CA2FrE"}