@empline/preflight 1.1.58 → 1.1.59

package/dist/checks/security/security-headers-validation.js

@@ -0,0 +1,594 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.blocking = exports.category = exports.description = exports.name = exports.id = void 0;
+exports.run = run;
+/**
+ * Security Headers Validation Preflight (BLOCKING)
+ *
+ * Validates security headers and OWASP best practices:
+ *
+ * 1. Next.js Security Headers:
+ *    - Content-Security-Policy configured
+ *    - X-Frame-Options for clickjacking prevention
+ *    - X-Content-Type-Options: nosniff
+ *    - Referrer-Policy configured
+ *    - Permissions-Policy for feature restrictions
+ *
+ * 2. Cookie Security:
+ *    - HttpOnly flag for sensitive cookies
+ *    - Secure flag for HTTPS
+ *    - SameSite attribute configured
+ *
+ * 3. Subresource Integrity:
+ *    - External scripts have integrity attribute
+ *    - External stylesheets have integrity
+ *
+ * 4. CORS Configuration:
+ *    - No wildcard origins in production
+ *    - Credentials handling
+ *
+ * 5. Input Validation:
+ *    - Command injection prevention
+ *    - Path traversal prevention
+ *    - SSRF prevention
+ */
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const glob_1 = require("glob");
+const console_chars_1 = require("../../utils/console-chars");
+exports.id = "security/security-headers-validation";
+exports.name = "Security Headers Validation";
+exports.description = "Validates security headers, cookies, SRI, CORS, and OWASP best practices";
+exports.category = "security";
+exports.blocking = true;
+exports.tags = ["security", "headers", "owasp", "csp", "cors", "cookies"];
+function getLineNumber(content, index) {
+    return content.substring(0, index).split("\n").length;
+}
+async function checkSecurityHeaders() {
+    const issues = [];
+    // Check next.config.js/ts for security headers
+    const configFiles = await (0, glob_1.glob)([
+        "next.config.js",
+        "next.config.mjs",
+        "next.config.ts",
+    ], {
+        cwd: process.cwd(),
+        absolute: true,
+    });
+    let hasSecurityHeaders = false;
+    let hasCSP = false;
+    let hasXFrameOptions = false;
+    let hasXContentTypeOptions = false;
+    for (const file of configFiles) {
+        if (!fs.existsSync(file))
+            continue;
+        const content = fs.readFileSync(file, "utf-8");
+        // Check for headers configuration
+        if (/headers\s*:?\s*(?:async\s*)?\(\s*\)|headers\s*:\s*\[/.test(content)) {
+            hasSecurityHeaders = true;
+        }
+        // Check for specific headers
+        if (/Content-Security-Policy|contentSecurityPolicy/i.test(content)) {
+            hasCSP = true;
+        }
+        if (/X-Frame-Options/i.test(content)) {
+            hasXFrameOptions = true;
+        }
+        if (/X-Content-Type-Options/i.test(content)) {
+            hasXContentTypeOptions = true;
+        }
+    }
+    // Also check middleware for headers
+    const middlewareFile = path.join(process.cwd(), "middleware.ts");
+    if (fs.existsSync(middlewareFile)) {
+        const content = fs.readFileSync(middlewareFile, "utf-8");
+        if (/headers|Header/i.test(content)) {
+            hasSecurityHeaders = true;
+        }
+        if (/Content-Security-Policy/i.test(content)) {
+            hasCSP = true;
+        }
+    }
+    if (!hasSecurityHeaders) {
+        issues.push({
+            rule: "security-headers-missing",
+            message: "No security headers configuration found",
+            file: "next.config.js or middleware.ts",
+            severity: "warning",
+            suggestion: "Add headers() configuration in next.config.js or middleware.ts",
+            owaspCategory: "A05:2021 Security Misconfiguration",
+        });
+    }
+    else {
+        if (!hasCSP) {
+            issues.push({
+                rule: "csp-missing",
+                message: "Content-Security-Policy header not configured",
+                file: "next.config.js",
+                severity: "warning",
+                suggestion: "Add Content-Security-Policy header to prevent XSS attacks",
+                owaspCategory: "A03:2021 Injection",
+            });
+        }
+        if (!hasXFrameOptions) {
+            issues.push({
+                rule: "x-frame-options-missing",
+                message: "X-Frame-Options header not configured",
+                file: "next.config.js",
+                severity: "info",
+                suggestion: "Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking",
+                owaspCategory: "A05:2021 Security Misconfiguration",
+            });
+        }
+        if (!hasXContentTypeOptions) {
+            issues.push({
+                rule: "x-content-type-options-missing",
+                message: "X-Content-Type-Options header not configured",
+                file: "next.config.js",
+                severity: "info",
+                suggestion: "Add X-Content-Type-Options: nosniff to prevent MIME sniffing",
+                owaspCategory: "A05:2021 Security Misconfiguration",
+            });
+        }
+    }
+    return issues;
+}
+async function checkCookieSecurity() {
+    const issues = [];
+    const files = await (0, glob_1.glob)([
+        "app/api/**/*.ts",
+        "lib/**/*.ts",
+        "middleware.ts",
+    ], {
+        cwd: process.cwd(),
+        ignore: ["**/node_modules/**"],
+        absolute: true,
+    });
+    for (const file of files) {
+        if (!fs.existsSync(file))
+            continue;
+        const content = fs.readFileSync(file, "utf-8");
+        const relativePath = path.relative(process.cwd(), file);
+        // Check for cookie setting without security attributes
+        const setCookieRegex = /cookies\s*\(\s*\)\s*\.set\s*\([^)]+\)/g;
+        let match;
+        while ((match = setCookieRegex.exec(content)) !== null) {
+            const cookieCall = match[0];
+            // Check for security attributes
+            const hasHttpOnly = /httpOnly\s*:\s*true/i.test(cookieCall);
+            const hasSecure = /secure\s*:\s*true/i.test(cookieCall);
+            const hasSameSite = /sameSite\s*:/i.test(cookieCall);
+            if (!hasHttpOnly) {
+                issues.push({
+                    rule: "cookie-httponly",
+                    message: "Cookie set without httpOnly flag",
+                    file: relativePath,
+                    line: getLineNumber(content, match.index),
+                    severity: "warning",
+                    suggestion: "Add httpOnly: true to prevent XSS access to cookie",
+                    owaspCategory: "A07:2021 Identification and Authentication Failures",
+                });
+            }
+            if (!hasSecure) {
+                issues.push({
+                    rule: "cookie-secure",
+                    message: "Cookie set without secure flag",
+                    file: relativePath,
+                    line: getLineNumber(content, match.index),
+                    severity: "info",
+                    suggestion: "Add secure: true for HTTPS-only transmission",
+                    owaspCategory: "A02:2021 Cryptographic Failures",
+                });
+            }
+            if (!hasSameSite) {
+                issues.push({
+                    rule: "cookie-samesite",
+                    message: "Cookie set without sameSite attribute",
+                    file: relativePath,
+                    line: getLineNumber(content, match.index),
+                    severity: "info",
+                    suggestion: "Add sameSite: 'lax' or 'strict' to prevent CSRF",
+                    owaspCategory: "A01:2021 Broken Access Control",
+                });
+            }
+        }
+    }
+    return issues;
+}
+async function checkSubresourceIntegrity() {
+    const issues = [];
+    const files = await (0, glob_1.glob)([
+        "app/**/*.tsx",
+        "components/**/*.tsx",
+        "app/layout.tsx",
+    ], {
+        cwd: process.cwd(),
+        ignore: ["**/node_modules/**"],
+        absolute: true,
+    });
+    for (const file of files) {
+        if (!fs.existsSync(file))
+            continue;
+        const content = fs.readFileSync(file, "utf-8");
+        const relativePath = path.relative(process.cwd(), file);
+        // Check for external scripts without integrity
+        const externalScriptRegex = /<script[^>]*src\s*=\s*["'](https?:\/\/[^"']+)["'][^>]*>/gi;
+        let match;
+        while ((match = externalScriptRegex.exec(content)) !== null) {
+            const scriptTag = match[0];
+            if (!/\bintegrity\s*=/.test(scriptTag)) {
+                issues.push({
+                    rule: "sri-script",
+                    message: `External script missing integrity attribute: ${match[1].substring(0, 50)}...`,
+                    file: relativePath,
+                    line: getLineNumber(content, match.index),
+                    severity: "warning",
+                    suggestion: "Add integrity and crossorigin attributes for subresource integrity",
+                    owaspCategory: "A08:2021 Software and Data Integrity Failures",
+                });
+            }
+        }
+        // Check for external stylesheets without integrity
+        const externalStyleRegex = /<link[^>]*href\s*=\s*["'](https?:\/\/[^"']+\.css[^"']*)["'][^>]*>/gi;
+        while ((match = externalStyleRegex.exec(content)) !== null) {
+            const linkTag = match[0];
+            if (!/\bintegrity\s*=/.test(linkTag)) {
+                issues.push({
+                    rule: "sri-stylesheet",
+                    message: `External stylesheet missing integrity attribute`,
+                    file: relativePath,
+                    line: getLineNumber(content, match.index),
+                    severity: "info",
+                    suggestion: "Add integrity attribute for stylesheet integrity verification",
+                    owaspCategory: "A08:2021 Software and Data Integrity Failures",
+                });
+            }
+        }
+    }
+    return issues;
+}
+async function checkCORSConfiguration() {
+    const issues = [];
+    const files = await (0, glob_1.glob)([
+        "app/api/**/*.ts",
+        "next.config.*",
+        "middleware.ts",
+    ], {
+        cwd: process.cwd(),
+        ignore: ["**/node_modules/**"],
+        absolute: true,
+    });
+    for (const file of files) {
+        if (!fs.existsSync(file))
+            continue;
+        const content = fs.readFileSync(file, "utf-8");
+        const relativePath = path.relative(process.cwd(), file);
+        // Check for wildcard CORS origin
+        const wildcardCorsRegex = /Access-Control-Allow-Origin['"]\s*,\s*['"]?\*['"]?|origin\s*:\s*['"]\*['"]/gi;
+        let match;
+        while ((match = wildcardCorsRegex.exec(content)) !== null) {
+            issues.push({
+                rule: "cors-wildcard",
+                message: "Wildcard CORS origin (*) allows any domain",
+                file: relativePath,
+                line: getLineNumber(content, match.index),
+                severity: "warning",
+                suggestion: "Specify allowed origins explicitly in production",
+                owaspCategory: "A01:2021 Broken Access Control",
+            });
+        }
+        // Check for CORS with credentials and wildcard
+        if (/Access-Control-Allow-Credentials.*true/i.test(content) &&
+            /Access-Control-Allow-Origin.*\*/i.test(content)) {
+            issues.push({
+                rule: "cors-credentials-wildcard",
+                message: "CORS allows credentials with wildcard origin (security risk)",
+                file: relativePath,
+                severity: "error",
+                suggestion: "Cannot use credentials with wildcard origin - specify explicit origins",
+                owaspCategory: "A01:2021 Broken Access Control",
+            });
+        }
+    }
+    return issues;
+}
+async function checkCommandInjection() {
+    const issues = [];
+    const files = await (0, glob_1.glob)([
+        "app/api/**/*.ts",
+        "lib/**/*.ts",
+        "scripts/**/*.ts",
+    ], {
+        cwd: process.cwd(),
+        ignore: ["**/node_modules/**", "**/preflight*/**"],
+        absolute: true,
+    });
+    for (const file of files) {
+        if (!fs.existsSync(file))
+            continue;
+        const content = fs.readFileSync(file, "utf-8");
+        const relativePath = path.relative(process.cwd(), file);
+        // Check for exec/spawn with user input
+        const execPatterns = [
+            /exec\s*\(\s*`[^`]*\$\{/g, // exec(`...${userInput}`)
+            /execSync\s*\(\s*`[^`]*\$\{/g, // execSync with template literal
+            /spawn\s*\([^,]+\+/g, // spawn(cmd + userInput)
+            /child_process.*exec.*\+/g, // child_process exec with concatenation
+        ];
+        for (const pattern of execPatterns) {
+            let match;
+            while ((match = pattern.exec(content)) !== null) {
+                issues.push({
+                    rule: "command-injection",
+                    message: "Potential command injection vulnerability",
+                    file: relativePath,
+                    line: getLineNumber(content, match.index),
+                    severity: "error",
+                    suggestion: "Never interpolate user input into shell commands - use spawn with arguments array",
+                    owaspCategory: "A03:2021 Injection",
+                });
+            }
+        }
+    }
+    return issues;
+}
+async function checkPathTraversal() {
+    const issues = [];
+    const files = await (0, glob_1.glob)([
+        "app/api/**/*.ts",
+        "lib/**/*.ts",
+    ], {
+        cwd: process.cwd(),
+        ignore: ["**/node_modules/**"],
+        absolute: true,
+    });
+    for (const file of files) {
+        if (!fs.existsSync(file))
+            continue;
+        const content = fs.readFileSync(file, "utf-8");
+        const relativePath = path.relative(process.cwd(), file);
+        // Check for path.join with user input without sanitization
+        const pathJoinRegex = /path\.(?:join|resolve)\s*\([^)]*(?:req\.|params\.|query\.|body\.)/gi;
+        let match;
+        while ((match = pathJoinRegex.exec(content)) !== null) {
+            // Check if there's path traversal protection nearby
+            const surroundingCode = content.substring(Math.max(0, match.index - 300), match.index + 200);
+            const hasProtection = /\.\.\/|\.includes\s*\(\s*["']\.\.|normalize|sanitize|isAbsolute/i.test(surroundingCode);
+            if (!hasProtection) {
+                issues.push({
+                    rule: "path-traversal",
+                    message: "Potential path traversal vulnerability",
+                    file: relativePath,
+                    line: getLineNumber(content, match.index),
+                    severity: "warning",
+                    suggestion: "Validate user input doesn't contain '..' and normalize paths",
+                    owaspCategory: "A01:2021 Broken Access Control",
+                });
+            }
+        }
+    }
+    return issues;
+}
+async function checkSSRF() {
+    const issues = [];
+    const files = await (0, glob_1.glob)([
+        "app/api/**/*.ts",
+        "lib/**/*.ts",
+    ], {
+        cwd: process.cwd(),
+        ignore: ["**/node_modules/**"],
+        absolute: true,
+    });
+    for (const file of files) {
+        if (!fs.existsSync(file))
+            continue;
+        const content = fs.readFileSync(file, "utf-8");
+        const relativePath = path.relative(process.cwd(), file);
+        // Check for fetch/axios with user-provided URLs
+        const ssrfPatterns = [
+            /fetch\s*\(\s*(?:req\.|params\.|query\.|body\.)(\w+)/g,
+            /axios\.(?:get|post|put|delete)\s*\(\s*(?:req\.|params\.|query\.|body\.)/g,
+            /fetch\s*\(\s*`\$\{/g, // fetch with template literal
+        ];
+        for (const pattern of ssrfPatterns) {
+            let match;
+            while ((match = pattern.exec(content)) !== null) {
+                // Check for URL validation
+                const surroundingCode = content.substring(Math.max(0, match.index - 500), match.index + 300);
+                const hasValidation = /URL|validateUrl|allowedHosts|whitelist|allowlist|isValidUrl/i.test(surroundingCode);
+                if (!hasValidation) {
+                    issues.push({
+                        rule: "ssrf-prevention",
+                        message: "Potential SSRF vulnerability - user-controlled URL in request",
+                        file: relativePath,
+                        line: getLineNumber(content, match.index),
+                        severity: "warning",
+                        suggestion: "Validate URLs against allowlist and block internal addresses",
+                        owaspCategory: "A10:2021 Server-Side Request Forgery",
+                    });
+                }
+            }
+        }
+    }
+    return issues;
+}
+async function checkHardcodedSecrets() {
+    const issues = [];
+    const files = await (0, glob_1.glob)([
+        "app/**/*.ts",
+        "app/**/*.tsx",
+        "lib/**/*.ts",
+        "components/**/*.tsx",
+    ], {
+        cwd: process.cwd(),
+        ignore: ["**/node_modules/**", "**/*.test.ts", "**/*.spec.ts"],
+        absolute: true,
+    });
+    const secretPatterns = [
+        { pattern: /(?:api[_-]?key|apikey)\s*[:=]\s*["'][a-zA-Z0-9]{20,}["']/gi, name: "API key" },
+        { pattern: /(?:secret|token)\s*[:=]\s*["'][a-zA-Z0-9_-]{20,}["']/gi, name: "secret/token" },
+        { pattern: /(?:password|passwd|pwd)\s*[:=]\s*["'][^"']{8,}["']/gi, name: "password" },
+        { pattern: /sk_(?:live|test)_[a-zA-Z0-9]{20,}/g, name: "Stripe key" },
+        { pattern: /ghp_[a-zA-Z0-9]{36}/g, name: "GitHub token" },
+        { pattern: /xox[baprs]-[a-zA-Z0-9-]+/g, name: "Slack token" },
+    ];
+    for (const file of files) {
+        if (!fs.existsSync(file))
+            continue;
+        const content = fs.readFileSync(file, "utf-8");
+        const relativePath = path.relative(process.cwd(), file);
+        for (const { pattern, name } of secretPatterns) {
+            let match;
+            const regex = new RegExp(pattern.source, pattern.flags);
+            while ((match = regex.exec(content)) !== null) {
+                // Skip if it's in a comment or type definition
+                const lineStart = content.lastIndexOf("\n", match.index) + 1;
+                const line = content.substring(lineStart, content.indexOf("\n", match.index));
+                if (line.includes("//") || line.includes("/*") || line.includes("type ") || line.includes("interface "))
+                    continue;
+                // Skip if it's a placeholder
+                if (/xxx|placeholder|example|your_|YOUR_|dummy/i.test(match[0]))
+                    continue;
+                issues.push({
+                    rule: "hardcoded-secret",
+                    message: `Potential hardcoded ${name} detected`,
+                    file: relativePath,
+                    line: getLineNumber(content, match.index),
+                    severity: "error",
+                    suggestion: "Use environment variables for secrets",
+                    owaspCategory: "A02:2021 Cryptographic Failures",
+                });
+            }
+        }
+    }
+    return issues;
+}
+async function run() {
+    const startTime = Date.now();
+    const allIssues = [];
+    // Run all security checks
+    allIssues.push(...await checkSecurityHeaders());
+    allIssues.push(...await checkCookieSecurity());
+    allIssues.push(...await checkSubresourceIntegrity());
+    allIssues.push(...await checkCORSConfiguration());
+    allIssues.push(...await checkCommandInjection());
+    allIssues.push(...await checkPathTraversal());
+    allIssues.push(...await checkSSRF());
+    allIssues.push(...await checkHardcodedSecrets());
+    // Convert to findings
+    const findings = allIssues.map(issue => ({
+        level: issue.severity,
+        message: issue.message + (issue.owaspCategory ? ` [${issue.owaspCategory}]` : ""),
+        file: issue.file,
+        startLine: issue.line,
+        ruleId: issue.rule,
+        suggestion: issue.suggestion,
+    }));
+    const errors = findings.filter(f => f.level === "error");
+    const warnings = findings.filter(f => f.level === "warning");
+    const infos = findings.filter(f => f.level === "info");
+    return {
+        passed: errors.length === 0,
+        findings,
+        duration: Date.now() - startTime,
+        metadata: {
+            errors: errors.length,
+            warnings: warnings.length,
+            infos: infos.length,
+            owaspCoverage: [...new Set(allIssues.map(i => i.owaspCategory).filter(Boolean))],
+        },
+    };
+}
+async function main() {
+    console.log(`\n${console_chars_1.emoji.shield} SECURITY HEADERS VALIDATION`);
+    console.log((0, console_chars_1.createDivider)(65, "heavy"));
+    const result = await run();
+    const { errors, warnings, infos, owaspCoverage } = result.metadata || {};
+    console.log(`\n${console_chars_1.emoji.search} Checking security configuration...`);
+    console.log(`   OWASP coverage: ${(owaspCoverage || []).length} categories`);
+    console.log(`\n${console_chars_1.emoji.chart} Summary:`);
+    console.log(`   Errors: ${errors}`);
+    console.log(`   Warnings: ${warnings}`);
+    console.log(`   Info: ${infos}`);
+    if (result.passed && warnings === 0) {
+        console.log(`\n${console_chars_1.emoji.success} SECURITY HEADERS VALIDATION PASSED`);
+        process.exit(0);
+    }
+    // Print findings
+    const errorFindings = result.findings.filter(f => f.level === "error");
+    if (errorFindings.length > 0) {
+        console.log(`\n${console_chars_1.emoji.error} Errors (blocking):`);
+        for (const finding of errorFindings) {
+            console.log(`\n   ${finding.file}${finding.startLine ? `:${finding.startLine}` : ""}`);
+            console.log(`     ${finding.message}`);
+            if (finding.suggestion) {
+                console.log(`     ${console_chars_1.emoji.hint} ${finding.suggestion}`);
+            }
+        }
+    }
+    const warningFindings = result.findings.filter(f => f.level === "warning");
+    if (warningFindings.length > 0) {
+        console.log(`\n${console_chars_1.emoji.warning} Warnings:`);
+        for (const finding of warningFindings.slice(0, 10)) {
+            console.log(`\n   ${finding.file}${finding.startLine ? `:${finding.startLine}` : ""}`);
+            console.log(`     ${finding.message}`);
+        }
+        if (warningFindings.length > 10) {
+            console.log(`\n   ... and ${warningFindings.length - 10} more warnings`);
+        }
+    }
+    console.log(`\n${console_chars_1.emoji.info} Security Best Practices:`);
+    console.log(`   - Configure Content-Security-Policy`);
+    console.log(`   - Set secure cookie attributes (HttpOnly, Secure, SameSite)`);
+    console.log(`   - Use Subresource Integrity for external resources`);
+    console.log(`   - Validate user input before shell commands`);
+    console.log(`   - Prevent SSRF with URL allowlists`);
+    if (!result.passed) {
+        console.log(`\n${console_chars_1.emoji.error} SECURITY HEADERS VALIDATION FAILED`);
+        process.exit(1);
+    }
+    console.log(`\n${console_chars_1.emoji.success} SECURITY HEADERS VALIDATION PASSED`);
+    process.exit(0);
+}
+if (require.main === module) {
+    main().catch((err) => {
+        console.error(`${console_chars_1.emoji.error} Preflight failed:`, err);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=security-headers-validation.js.map

package/dist/checks/security/security-headers-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-headers-validation.js","sourceRoot":"","sources":["../../../src/checks/security/security-headers-validation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmhBA,kBAuCC;AAzjBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,4CAA8B;AAC9B,gDAAkC;AAClC,+BAA4B;AAE5B,6DAAiE;AAEpD,QAAA,EAAE,GAAG,sCAAsC,CAAC;AAC5C,QAAA,IAAI,GAAG,6BAA6B,CAAC;AACrC,QAAA,WAAW,GAAG,0EAA0E,CAAC;AACzF,QAAA,QAAQ,GAAG,UAAU,CAAC;AACtB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,IAAI,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAY/E,SAAS,aAAa,CAAC,OAAe,EAAE,KAAa;IACnD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,+CAA+C;IAC/C,MAAM,WAAW,GAAG,MAAM,IAAA,WAAI,EAAC;QAC7B,gBAAgB;QAChB,iBAAiB;QACjB,gBAAgB;KACjB,EAAE;QACD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,sBAAsB,GAAG,KAAK,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE/C,kCAAkC;QAClC,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,kBAAkB,GAAG,IAAI,CAAC;QAC5B,CAAC;QAED,6BAA6B;QAC7B,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,sBAAsB,GAAG,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,eAAe,CAAC,CAAC;IACjE,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,kBAAkB,GAAG,IAAI,CAAC;QAC5B,CAAC;QACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,yCAAyC;YAClD,IAAI,EAAE,iCAAiC;YACvC,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,gEAAgE;YAC5E,aAAa,EAAE,oCAAoC;SACpD,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,+CAA+C;gBACxD,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,2DAA2D;gBACvE,aAAa,EAAE,oBAAoB;aACpC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,uCAAuC;gBAChD,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,iEAAiE;gBAC7E,aAAa,EAAE,oCAAoC;aACpD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,gCAAgC;gBACtC,OAAO,EAAE,8CAA8C;gBACvD,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,8DAA8D;gBAC1E,aAAa,EAAE,oCAAoC;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,MAAM,IAAA,WAAI,EAAC;QACvB,iBAAiB;QACjB,aAAa;QACb,eAAe;KAChB,EAAE;QACD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,EAAE,CAAC,oBAAoB,CAAC;QAC9B,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAExD,uDAAuD;QACvD,MAAM,cAAc,GAAG,wCAAwC,CAAC;QAChE,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAE5B,gCAAgC;YAChC,MAAM,WAAW,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAErD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,kCAAkC;oBAC3C,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;oBACzC,QAAQ,EAAE,SAAS;oBACnB,UAAU,EAAE,oDAAoD;oBAChE,aAAa,EAAE,qDAAqD;iBACrE,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,gCAAgC;oBACzC,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;oBACzC,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,8CAA8C;oBAC1D,aAAa,EAAE,iCAAiC;iBACjD,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,uCAAuC;oBAChD,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;oBACzC,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,iDAAiD;oBAC7D,aAAa,EAAE,gCAAgC;iBAChD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,yBAAyB;IACtC,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,MAAM,IAAA,WAAI,EAAC;QACvB,cAAc;QACd,qBAAqB;QACrB,gBAAgB;KACjB,EAAE;QACD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,EAAE,CAAC,oBAAoB,CAAC;QAC9B,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAExD,+CAA+C;QAC/C,MAAM,mBAAmB,GAAG,2DAA2D,CAAC;QACxF,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,gDAAgD,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;oBACvF,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;oBACzC,QAAQ,EAAE,SAAS;oBACnB,UAAU,EAAE,oEAAoE;oBAChF,aAAa,EAAE,+CAA+C;iBAC/D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,MAAM,kBAAkB,GAAG,qEAAqE,CAAC;QACjG,OAAO,CAAC,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iDAAiD;oBAC1D,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;oBACzC,QAAQ,EAAE,MAAM;oBAChB,UAAU,EAAE,+DAA+D;oBAC3E,aAAa,EAAE,+CAA+C;iBAC/D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,sBAAsB;IACnC,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,MAAM,IAAA,WAAI,EAAC;QACvB,iBAAiB;QACjB,eAAe;QACf,eAAe;KAChB,EAAE;QACD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,EAAE,CAAC,oBAAoB,CAAC;QAC9B,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAExD,iCAAiC;QACjC,MAAM,iBAAiB,GAAG,8EAA8E,CAAC;QACzG,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,4CAA4C;gBACrD,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;gBACzC,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,kDAAkD;gBAC9D,aAAa,EAAE,gCAAgC;aAChD,CAAC,CAAC;QACL,CAAC;QAED,+CAA+C;QAC/C,IAAI,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC;YACvD,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,8DAA8D;gBACvE,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,wEAAwE;gBACpF,aAAa,EAAE,gCAAgC;aAChD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,qBAAqB;IAClC,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,MAAM,IAAA,WAAI,EAAC;QACvB,iBAAiB;QACjB,aAAa;QACb,iBAAiB;KAClB,EAAE;QACD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,EAAE,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;QAClD,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAExD,uCAAuC;QACvC,MAAM,YAAY,GAAG;YACnB,yBAAyB,EAAY,0BAA0B;YAC/D,6BAA6B,EAAQ,iCAAiC;YACtE,oBAAoB,EAAiB,yBAAyB;YAC9D,0BAA0B,EAAW,wCAAwC;SAC9E,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,2CAA2C;oBACpD,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;oBACzC,QAAQ,EAAE,OAAO;oBACjB,UAAU,EAAE,mFAAmF;oBAC/F,aAAa,EAAE,oBAAoB;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,MAAM,IAAA,WAAI,EAAC;QACvB,iBAAiB;QACjB,aAAa;KACd,EAAE;QACD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,EAAE,CAAC,oBAAoB,CAAC;QAC9B,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAExD,2DAA2D;QAC3D,MAAM,aAAa,GAAG,qEAAqE,CAAC;QAC5F,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,oDAAoD;YACpD,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,CACvC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,EAC9B,KAAK,CAAC,KAAK,GAAG,GAAG,CAClB,CAAC;YACF,MAAM,aAAa,GAAG,kEAAkE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAE/G,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,wCAAwC;oBACjD,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;oBACzC,QAAQ,EAAE,SAAS;oBACnB,UAAU,EAAE,8DAA8D;oBAC1E,aAAa,EAAE,gCAAgC;iBAChD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,MAAM,IAAA,WAAI,EAAC;QACvB,iBAAiB;QACjB,aAAa;KACd,EAAE;QACD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,EAAE,CAAC,oBAAoB,CAAC;QAC9B,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAExD,gDAAgD;QAChD,MAAM,YAAY,GAAG;YACnB,sDAAsD;YACtD,0EAA0E;YAC1E,qBAAqB,EAAG,8BAA8B;SACvD,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChD,2BAA2B;gBAC3B,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,CACvC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,EAC9B,KAAK,CAAC,KAAK,GAAG,GAAG,CAClB,CAAC;gBACF,MAAM,aAAa,GAAG,8DAA8D,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAE3G,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,iBAAiB;wBACvB,OAAO,EAAE,+DAA+D;wBACxE,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;wBACzC,QAAQ,EAAE,SAAS;wBACnB,UAAU,EAAE,8DAA8D;wBAC1E,aAAa,EAAE,sCAAsC;qBACtD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,qBAAqB;IAClC,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,MAAM,IAAA,WAAI,EAAC;QACvB,aAAa;QACb,cAAc;QACd,aAAa;QACb,qBAAqB;KACtB,EAAE;QACD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,EAAE,CAAC,oBAAoB,EAAE,cAAc,EAAE,cAAc,CAAC;QAC9D,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG;QACrB,EAAE,OAAO,EAAE,4DAA4D,EAAE,IAAI,EAAE,SAAS,EAAE;QAC1F,EAAE,OAAO,EAAE,wDAAwD,EAAE,IAAI,EAAE,cAAc,EAAE;QAC3F,EAAE,OAAO,EAAE,sDAAsD,EAAE,IAAI,EAAE,UAAU,EAAE;QACrF,EAAE,OAAO,EAAE,oCAAoC,EAAE,IAAI,EAAE,YAAY,EAAE;QACrE,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,cAAc,EAAE;QACzD,EAAE,OAAO,EAAE,2BAA2B,EAAE,IAAI,EAAE,aAAa,EAAE;KAC9D,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAExD,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,cAAc,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC;YACV,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9C,+CAA+C;gBAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9E,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;oBAAE,SAAS;gBAElH,6BAA6B;gBAC7B,IAAI,4CAA4C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAE1E,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,uBAAuB,IAAI,WAAW;oBAC/C,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;oBACzC,QAAQ,EAAE,OAAO;oBACjB,UAAU,EAAE,uCAAuC;oBACnD,aAAa,EAAE,iCAAiC;iBACjD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,GAAG;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAoB,EAAE,CAAC;IAEtC,0BAA0B;IAC1B,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,oBAAoB,EAAE,CAAC,CAAC;IAChD,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,mBAAmB,EAAE,CAAC,CAAC;IAC/C,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,yBAAyB,EAAE,CAAC,CAAC;IACrD,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,sBAAsB,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,qBAAqB,EAAE,CAAC,CAAC;IACjD,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,kBAAkB,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC,CAAC;IACrC,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,qBAAqB,EAAE,CAAC,CAAC;IAEjD,sBAAsB;IACtB,MAAM,QAAQ,GAAuB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,KAAK,EAAE,KAAK,CAAC,QAAQ;QACrB,OAAO,EAAE,KAAK,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC,CAAC;IAEJ,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IAEvD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC3B,QAAQ;QACR,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QAChC,QAAQ,EAAE;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,QAAQ,CAAC,MAAM;YACzB,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;SACjF;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,MAAM,8BAA8B,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IAEzE,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,MAAM,qCAAqC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,aAAyB,IAAI,EAAE,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC;IAEzF,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,WAAW,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;IAEjC,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iBAAiB;IACjB,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;IACvE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,qBAAqB,CAAC,CAAC;QACnD,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,QAAQ,qBAAK,CAAC,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC3E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,YAAY,CAAC,CAAC;QAC5C,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,gBAAgB,eAAe,CAAC,MAAM,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,2BAA2B,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IAErD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,qCAAqC,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;IACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;QAC1B,OAAO,CAAC,KAAK,CAAC,GAAG,qBAAK,CAAC,KAAK,oBAAoB,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/reporters/github-reporter.d.ts

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+import { PreflightReport } from "../core/types";
+interface GitHubReporterOptions {
+    token?: string;
+    repo?: string;
+    prNumber?: number;
+    commitSha?: string;
+    baselineReport?: PreflightReport;
+    commentOnPr?: boolean;
+    updateStatus?: boolean;
+    outputMarkdown?: string;
+}
+export declare function generateMarkdownReport(report: PreflightReport, options?: GitHubReporterOptions): string;
+/**
+ * Post comment to GitHub PR
+ */
+export declare function postPrComment(markdown: string, options: GitHubReporterOptions): Promise<void>;
+/**
+ * Update GitHub commit status
+ */
+export declare function updateCommitStatus(report: PreflightReport, options: GitHubReporterOptions): Promise<void>;
+/**
+ * Detect GitHub environment from CI variables
+ */
+export declare function detectGitHubEnvironment(): Partial<GitHubReporterOptions>;
+/**
+ * Get current git info
+ */
+export declare function getGitInfo(): {
+    branch: string;
+    sha: string;
+    repo?: string;
+};
+export {};
+//# sourceMappingURL=github-reporter.d.ts.map

package/dist/reporters/github-reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-reporter.d.ts","sourceRoot":"","sources":["../../src/reporters/github-reporter.ts"],"names":[],"mappings":";AAgBA,OAAO,EAAE,eAAe,EAAqC,MAAM,eAAe,CAAC;AAEnF,UAAU,qBAAqB;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,eAAe,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAkCD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,GAAE,qBAA0B,GAAG,MAAM,CA+I3G;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CA6Cf;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CA8BxE;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAoB3E"}