@guardbee/mcp-reverse-shield 0.1.0 → 0.2.0

package/dist/fixes.js

@@ -0,0 +1,396 @@
+import { existsSync, readFileSync, readdirSync, statSync } from "fs";
+import { basename, join, relative, sep } from "path";
+const MAX_DEPTH = 4;
+const SKIP = new Set(["node_modules", ".git", "dist", "build", "out", ".next", ".gradle", "Pods", "DerivedData", "bin", "obj", ".turbo", "vendor"]);
+function walk(dir, depth, onFile) {
+    if (depth > MAX_DEPTH)
+        return;
+    let entries;
+    try {
+        entries = readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const e of entries) {
+        const full = join(dir, e.name);
+        if (e.isDirectory()) {
+            if (!SKIP.has(e.name) && !e.name.startsWith("."))
+                walk(full, depth + 1, onFile);
+        }
+        else if (e.isFile()) {
+            onFile(full);
+        }
+    }
+}
+// ── Diff ────────────────────────────────────────────────────────────────────
+function splitLines(text) {
+    const finalNewline = text.endsWith("\n");
+    const lines = text.split("\n");
+    if (finalNewline)
+        lines.pop();
+    return { lines, finalNewline };
+}
+/** One hunk covering every changed line, with three lines of context; enough for config edits. */
+export function unifiedDiff(file, before, after) {
+    if (before === after)
+        return "";
+    const { lines: a, finalNewline: nlA } = splitLines(before);
+    const { lines: b, finalNewline: nlB } = splitLines(after);
+    let start = 0;
+    while (start < a.length && start < b.length && a[start] === b[start])
+        start++;
+    let endA = a.length - 1;
+    let endB = b.length - 1;
+    // Only a newline-at-EOF change: the last line differs in that respect alone.
+    const eofOnly = nlA !== nlB;
+    while (endA >= start && endB >= start && a[endA] === b[endB] && !(eofOnly && endA === a.length - 1)) {
+        endA--;
+        endB--;
+    }
+    const ctxStart = Math.max(0, start - 3);
+    const ctxEndA = Math.min(a.length - 1, endA + 3);
+    const ctxEndB = Math.min(b.length - 1, endB + 3);
+    const out = [];
+    const noNl = "\";
+    for (let i = ctxStart; i < start; i++)
+        out.push(` ${a[i]}`);
+    for (let i = start; i <= endA; i++) {
+        out.push(`-${a[i]}`);
+        if (i === a.length - 1 && !nlA)
+            out.push(noNl);
+    }
+    for (let i = start; i <= endB; i++) {
+        out.push(`+${b[i]}`);
+        if (i === b.length - 1 && !nlB)
+            out.push(noNl);
+    }
+    for (let i = endA + 1; i <= ctxEndA; i++) {
+        out.push(` ${a[i]}`);
+        if (i === a.length - 1 && !nlA)
+            out.push(noNl);
+    }
+    const lenA = ctxEndA - ctxStart + 1;
+    const lenB = ctxEndB - ctxStart + 1;
+    return [`--- a/${file}`, `+++ b/${file}`, `@@ -${ctxStart + 1},${lenA} +${ctxStart + 1},${lenB} @@`, ...out].join("\n") + "\n";
+}
+const fixers = [
+    // Vite
+    {
+        match: (n) => /^vite\.config\.[cm]?[jt]s$/.test(n),
+        fix: (text) => {
+            const after = text
+                .replace(/(\bsourcemap\s*:\s*)(true|["']inline["'])/g, "$1'hidden'")
+                .replace(/(\bminify\s*:\s*)false\b/g, "$1'esbuild'");
+            if (after === text)
+                return null;
+            return {
+                after,
+                ruleIds: ["sourcemap_shipped", "sourcemap_inline", "sourcemap_reference", "unminified_bundle"],
+                title: "Vite: hidden source maps and minification for production builds",
+                note: "'hidden' still writes .map files for your error tracker; delete them from the deployed output (or do not upload them).",
+            };
+        },
+    },
+    // webpack (not dev-only configs)
+    {
+        match: (n) => /^webpack(\.(prod|production|common|config))*\.config\.[cm]?[jt]s$|^webpack\.(prod|production)\.[cm]?[jt]s$/.test(n),
+        fix: (text) => {
+            const after = text
+                .replace(/(\bdevtool\s*:\s*)(["'])([\w-]{1,60})\2/g, (m, pre, q, value) => 
+            // Anything that ships a map or eval-wraps modules; leave hidden-*, false and nosources-* alone.
+            !value.startsWith("hidden-") && !value.startsWith("nosources-") && (value.includes("source-map") || value.startsWith("eval")) ? `${pre}${q}hidden-source-map${q}` : m)
+                .replace(/(\bminimize\s*:\s*)false\b/g, "$1true");
+            if (after === text)
+                return null;
+            return { after, ruleIds: ["sourcemap_inline", "eval_devtool_bundle", "sourcemap_reference", "unminified_bundle"], title: "webpack: hidden-source-map and minimisation for the production config" };
+        },
+    },
+    // Next.js
+    {
+        match: (n) => /^next\.config\.[cm]?[jt]s$/.test(n),
+        fix: (text) => {
+            const after = text.replace(/(\bproductionBrowserSourceMaps\s*:\s*)true\b/g, "$1false");
+            return after === text ? null : { after, ruleIds: ["sourcemap_shipped", "sourcemap_publicly_reachable"], title: "Next.js: stop publishing browser source maps" };
+        },
+    },
+    // Angular
+    {
+        match: (n) => n === "angular.json",
+        fix: (text) => {
+            const prod = text.indexOf('"production"');
+            if (prod === -1)
+                return null;
+            const block = text.indexOf("}", prod);
+            const segment = text.slice(prod, block);
+            const fixed = segment.replace(/("sourceMap"\s*:\s*)true\b/, "$1false");
+            if (fixed === segment)
+                return null;
+            return { after: text.slice(0, prod) + fixed + text.slice(block), ruleIds: ["sourcemap_shipped"], title: "Angular: no source maps in the production configuration" };
+        },
+    },
+    // Create React App: GENERATE_SOURCEMAP
+    {
+        match: (n) => n === "package.json",
+        fix: (text, file, project) => {
+            if (!/"react-scripts"\s*:/.test(text))
+                return null;
+            const envProd = join(project, file.replace(/package\.json$/, ""), ".env.production");
+            const existing = existsSync(envProd) ? readFileSync(envProd, "utf8") : null;
+            if (existing && /^GENERATE_SOURCEMAP\s*=\s*false\s*$/m.test(existing))
+                return null;
+            return {
+                ruleIds: ["sourcemap_shipped"],
+                title: "Create React App: set GENERATE_SOURCEMAP=false for production builds",
+                note: `Add GENERATE_SOURCEMAP=false to ${relative(project, envProd).split(sep).join("/")}.`,
+            };
+        },
+    },
+    // Electron (electron-builder via package.json "build")
+    {
+        match: (n) => n === "package.json",
+        fix: (text) => {
+            if (!/"electron-builder"\s*:/.test(text) || /"electronFuses"\s*:/.test(text))
+                return null;
+            const lines = text.split("\n");
+            const i = lines.findIndex((l) => /^\s*"build"\s*:\s*\{\s*$/.test(l));
+            if (i === -1)
+                return null;
+            const indent = (lines[i].match(/^\s*/)?.[0] ?? "") + "  ";
+            // Flip an existing "asar" in place (removing it could strand a trailing comma); add it otherwise.
+            const asarLine = lines.findIndex((l, j) => j > i && /^\s*"asar"\s*:\s*(true|false)\s*,?\s*$/.test(l));
+            if (asarLine !== -1)
+                lines[asarLine] = lines[asarLine].replace("false", "true");
+            const block = [
+                ...(asarLine === -1 ? [`${indent}"asar": true,`] : []),
+                `${indent}"electronFuses": {`,
+                `${indent}  "runAsNode": false,`,
+                `${indent}  "enableCookieEncryption": true,`,
+                `${indent}  "enableNodeOptionsEnvironmentVariable": false,`,
+                `${indent}  "enableNodeCliInspectArguments": false,`,
+                `${indent}  "enableEmbeddedAsarIntegrityValidation": true,`,
+                `${indent}  "onlyLoadAppFromAsar": true`,
+                `${indent}},`,
+            ];
+            lines.splice(i + 1, 0, ...block);
+            return {
+                after: lines.join("\n"),
+                ruleIds: ["electron_fuse_run_as_node", "electron_fuse_inspect_args", "electron_fuse_node_options", "electron_fuse_asar_integrity_off", "electron_fuse_load_outside_asar", "electron_app_unpacked"],
+                title: "electron-builder: package into app.asar and flip the security fuses",
+                note: "electronFuses needs electron-builder 24.13 or later. If the app relies on ELECTRON_RUN_AS_NODE (e.g. to spawn helpers), keep runAsNode and use utilityProcess instead first.",
+            };
+        },
+    },
+    {
+        match: (n) => /^electron-builder\.ya?ml$/.test(n),
+        fix: (text) => {
+            if (/^electronFuses\s*:/m.test(text) && !/^asar\s*:\s*false/m.test(text))
+                return null;
+            let after = text.replace(/^asar\s*:\s*false\s*$/m, "asar: true");
+            if (!/^electronFuses\s*:/m.test(after)) {
+                after = `${after.replace(/\n*$/, "\n")}electronFuses:\n  runAsNode: false\n  enableCookieEncryption: true\n  enableNodeOptionsEnvironmentVariable: false\n  enableNodeCliInspectArguments: false\n  enableEmbeddedAsarIntegrityValidation: true\n  onlyLoadAppFromAsar: true\n`;
+            }
+            return {
+                after,
+                ruleIds: ["electron_fuse_run_as_node", "electron_fuse_inspect_args", "electron_fuse_node_options", "electron_fuse_asar_integrity_off", "electron_fuse_load_outside_asar", "electron_app_unpacked"],
+                title: "electron-builder: package into app.asar and flip the security fuses",
+                note: "electronFuses needs electron-builder 24.13 or later.",
+            };
+        },
+    },
+    {
+        match: (n) => /^forge\.config\.[cm]?[jt]s$/.test(n),
+        fix: (text) => {
+            if (/FusesPlugin/.test(text))
+                return null;
+            return {
+                ruleIds: ["electron_fuse_run_as_node", "electron_fuse_inspect_args", "electron_fuse_node_options", "electron_fuse_asar_integrity_off", "electron_fuse_load_outside_asar"],
+                title: "Electron Forge: add the fuses plugin",
+                note: [
+                    "Install @electron-forge/plugin-fuses and @electron/fuses, then add to plugins:",
+                    "  new FusesPlugin({ version: FuseVersion.V1, [FuseV1Options.RunAsNode]: false, [FuseV1Options.EnableCookieEncryption]: true,",
+                    "    [FuseV1Options.EnableNodeOptionsEnvironmentVariable]: false, [FuseV1Options.EnableNodeCliInspectArguments]: false,",
+                    "    [FuseV1Options.EnableEmbeddedAsarIntegrityValidation]: true, [FuseV1Options.OnlyLoadAppFromAsar]: true })",
+                ].join("\n"),
+            };
+        },
+    },
+    // Android Gradle
+    {
+        match: (n) => n === "build.gradle" || n === "build.gradle.kts",
+        fix: (text, file) => {
+            if (!/com\.android\.application|android\s*\{/.test(text))
+                return null;
+            const kts = file.endsWith(".kts");
+            const lines = text.split("\n");
+            // Only inside buildTypes: signingConfigs usually has a "release" block too.
+            const buildTypes = lines.findIndex((l) => /^\s*buildTypes\s*\{\s*$/.test(l));
+            if (buildTypes === -1)
+                return null;
+            const offset = lines.slice(buildTypes + 1).findIndex((l) => /^\s*(getByName\(\s*"release"\s*\)|release)\s*\{\s*$/.test(l));
+            if (offset === -1)
+                return null;
+            const rel = buildTypes + 1 + offset;
+            // The release block ends at the first line back at its indentation.
+            const indent = lines[rel].match(/^\s*/)?.[0] ?? "";
+            let end = rel + 1;
+            while (end < lines.length && !(lines[end].startsWith(`${indent}}`) && lines[end].trim() === "}"))
+                end++;
+            const body = lines.slice(rel + 1, end);
+            const inner = `${indent}    `;
+            const minifyRe = kts ? /^\s*isMinifyEnabled\s*=\s*(true|false)/ : /^\s*minifyEnabled\s*(=\s*)?(true|false)/;
+            const debugRe = kts ? /^\s*isDebuggable\s*=\s*true/ : /^\s*debuggable\s*(=\s*)?true/;
+            let changed = false;
+            const newBody = body
+                .filter((l) => {
+                if (debugRe.test(l)) {
+                    changed = true;
+                    return false;
+                }
+                return true;
+            })
+                .map((l) => {
+                if (minifyRe.test(l) && /false/.test(l)) {
+                    changed = true;
+                    return l.replace("false", "true");
+                }
+                return l;
+            });
+            if (!newBody.some((l) => minifyRe.test(l))) {
+                changed = true;
+                newBody.unshift(kts ? `${inner}isMinifyEnabled = true` : `${inner}minifyEnabled true`, kts ? `${inner}isShrinkResources = true` : `${inner}shrinkResources true`, kts
+                    ? `${inner}proguardFiles(getDefaultProguardFile("proguard-android-optimize.txt"), "proguard-rules.pro")`
+                    : `${inner}proguardFiles getDefaultProguardFile('proguard-android-optimize.txt'), 'proguard-rules.pro'`);
+            }
+            if (!changed)
+                return null;
+            return {
+                after: [...lines.slice(0, rel + 1), ...newBody, ...lines.slice(end)].join("\n"),
+                ruleIds: ["apk_no_obfuscation", "apk_debuggable"],
+                title: "Android: R8 on and debuggable off for the release build type",
+                note: "Run the release build and its tests after enabling R8; classes used through reflection (serialisation, DI) may need -keep rules in proguard-rules.pro.",
+            };
+        },
+    },
+    // React Native: Hermes
+    {
+        match: (n, p) => n === "gradle.properties" && p.split(sep).includes("android"),
+        fix: (text) => {
+            const after = text.replace(/^(hermesEnabled\s*=\s*)false\s*$/m, "$1true");
+            return after === text ? null : { after, ruleIds: ["apk_js_bundle_plaintext"], title: "React Native: ship the bundle as Hermes bytecode" };
+        },
+    },
+    // AndroidManifest
+    {
+        match: (n) => n === "AndroidManifest.xml",
+        fix: (text, file) => {
+            let after = text.replace(/\s+android:debuggable\s*=\s*"true"/g, "");
+            // A missing allowBackup only matters in the main manifest; debug/flavor
+            // overlays inherit it, so there only an explicit "true" is wrong.
+            const isMain = file.includes("/src/main/") || !file.includes("/src/");
+            if (/android:allowBackup\s*=\s*"true"/.test(after))
+                after = after.replace(/android:allowBackup\s*=\s*"true"/, 'android:allowBackup="false"');
+            else if (isMain && /<application\b/.test(after) && !/android:allowBackup\s*=/.test(after)) {
+                after = after.replace(/<application\b([^>]*)>/, (m, attrs) => {
+                    const indent = (attrs.match(/\n(\s+)android:/)?.[1]) ?? " ";
+                    const sepr = attrs.includes("\n") ? `\n${indent}` : " ";
+                    return `<application${sepr}android:allowBackup="false"${attrs}>`;
+                });
+            }
+            if (after === text)
+                return null;
+            return {
+                after,
+                ruleIds: ["apk_allow_backup", "apk_debuggable"],
+                title: "Android manifest: no backup of app data, no hard-coded debuggable",
+                note: "If the app relies on Auto Backup, keep it and exclude sensitive files with android:dataExtractionRules instead.",
+            };
+        },
+    },
+    // .NET
+    {
+        match: (n) => /\.(cs|fs|vb)proj$/.test(n) || n === "Directory.Build.props",
+        fix: (text) => {
+            const after = text
+                .replace(/<DebugType>\s*embedded\s*<\/DebugType>/gi, "<DebugType>portable</DebugType>")
+                .replace(/<EmbedAllSources>\s*true\s*<\/EmbedAllSources>/gi, "<EmbedAllSources>false</EmbedAllSources>");
+            if (after === text)
+                return null;
+            return {
+                after,
+                ruleIds: ["dotnet_embedded_pdb"],
+                title: ".NET: keep the PDB (and sources) out of the shipped assembly",
+                note: "portable writes a separate .pdb; leave it out of the published output, or use <DebugType>none</DebugType> for Release. Obfuscation is a separate step (e.g. Obfuscar in the publish pipeline).",
+            };
+        },
+    },
+    // Flutter: build flags, not a config file
+    {
+        match: (n) => n === "pubspec.yaml",
+        fix: (text) => {
+            if (!/^\s*flutter\s*:/m.test(text))
+                return null;
+            return {
+                ruleIds: ["native_symbols_not_stripped"],
+                title: "Flutter: obfuscate Dart code and split debug info at build time",
+                note: "Build releases with: flutter build apk --obfuscate --split-debug-info=build/symbols (same flags for appbundle/ipa). Keep build/symbols private for crash symbolication.",
+            };
+        },
+    },
+];
+/**
+ * Reads a project's build configuration and proposes the changes that close
+ * the exposures reverse-shield reports, as diffs to review and apply. It
+ * never writes files.
+ */
+export function suggestFixes(projectDir) {
+    if (!existsSync(projectDir) || !statSync(projectDir).isDirectory())
+        throw new Error(`Not a project directory: ${projectDir}`);
+    const suggestions = [];
+    const inspected = [];
+    walk(projectDir, 0, (full) => {
+        const name = basename(full);
+        const matching = fixers.filter((f) => f.match(name, full));
+        if (matching.length === 0)
+            return;
+        const rel = relative(projectDir, full).split(sep).join("/");
+        let text;
+        try {
+            if (statSync(full).size > 2 * 1024 * 1024)
+                return;
+            text = readFileSync(full, "utf8");
+        }
+        catch {
+            return;
+        }
+        inspected.push(rel);
+        for (const f of matching) {
+            const result = f.fix(text, rel, projectDir);
+            if (!result)
+                continue;
+            const { after, ...rest } = result;
+            suggestions.push({ file: rel, diff: after !== undefined ? unifiedDiff(rel, text, after) : "", ...rest });
+        }
+    });
+    return { project: projectDir, suggestions, inspected: inspected.sort() };
+}
+export function formatFixReport(report) {
+    if (report.suggestions.length === 0) {
+        return `✅ No changes to suggest in ${report.inspected.length} build config file(s)${report.inspected.length ? `: ${report.inspected.join(", ")}` : " (none recognised)"}.`;
+    }
+    const lines = [`🔧 ${report.suggestions.length} suggested change(s) from ${report.inspected.length} build config file(s). Nothing was modified.`, ""];
+    for (const s of report.suggestions) {
+        lines.push(`## ${s.title}`, `File: ${s.file}`, `Addresses: ${s.ruleIds.join(", ")}`);
+        if (s.diff)
+            lines.push("```diff", s.diff.trimEnd(), "```");
+        if (s.note)
+            lines.push(s.note);
+        lines.push("");
+    }
+    return lines.join("\n");
+}
+/** All diffs concatenated, ready for `git apply`. */
+export function patchOf(report) {
+    return report.suggestions.map((s) => s.diff).filter(Boolean).join("");
+}
+//# sourceMappingURL=fixes.js.map

package/dist/fixes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixes.js","sourceRoot":"","sources":["../src/fixes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAqBrD,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEpJ,SAAS,IAAI,CAAC,GAAW,EAAE,KAAa,EAAE,MAA8B;IACtE,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO;IAC9B,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAClF,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,YAAY;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IAC9B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACjC,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAc,EAAE,KAAa;IACrE,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,CAAC;IAC9E,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACxB,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACxB,6EAA6E;IAC7E,MAAM,OAAO,GAAG,GAAG,KAAK,GAAG,CAAC;IAC5B,OAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACpG,IAAI,EAAE,CAAC;QACP,IAAI,EAAE,CAAC;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,8BAA8B,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5D,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,GAAG,QAAQ,GAAG,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,GAAG,QAAQ,GAAG,CAAC,CAAC;IACpC,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,SAAS,IAAI,EAAE,EAAE,OAAO,QAAQ,GAAG,CAAC,IAAI,IAAI,KAAK,QAAQ,GAAG,CAAC,IAAI,IAAI,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjI,CAAC;AAMD,MAAM,MAAM,GAA0E;IACpF,OAAO;IACP;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,KAAK,GAAG,IAAI;iBACf,OAAO,CAAC,4CAA4C,EAAE,YAAY,CAAC;iBACnE,OAAO,CAAC,2BAA2B,EAAE,aAAa,CAAC,CAAC;YACvD,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO;gBACL,KAAK;gBACL,OAAO,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB,CAAC;gBAC9F,KAAK,EAAE,iEAAiE;gBACxE,IAAI,EAAE,wHAAwH;aAC/H,CAAC;QACJ,CAAC;KACF;IACD,iCAAiC;IACjC;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,4GAA4G,CAAC,IAAI,CAAC,CAAC,CAAC;QAClI,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,KAAK,GAAG,IAAI;iBACf,OAAO,CAAC,0CAA0C,EAAE,CAAC,CAAS,EAAE,GAAW,EAAE,CAAS,EAAE,KAAa,EAAE,EAAE;YACxG,gGAAgG;YAChG,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CACtK;iBACA,OAAO,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;YACpD,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,kBAAkB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,mBAAmB,CAAC,EAAE,KAAK,EAAE,uEAAuE,EAAE,CAAC;QACrM,CAAC;KACF;IACD,UAAU;IACV;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,+CAA+C,EAAE,SAAS,CAAC,CAAC;YACvF,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,mBAAmB,EAAE,8BAA8B,CAAC,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC;QAClK,CAAC;KACF;IACD,UAAU;IACV;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc;QAClC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAC1C,IAAI,IAAI,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,4BAA4B,EAAE,SAAS,CAAC,CAAC;YACvE,IAAI,KAAK,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC;YACnC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,yDAAyD,EAAE,CAAC;QACtK,CAAC;KACF;IACD,uCAAuC;IACvC;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc;QAClC,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YAC3B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACrF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5E,IAAI,QAAQ,IAAI,sCAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnF,OAAO;gBACL,OAAO,EAAE,CAAC,mBAAmB,CAAC;gBAC9B,KAAK,EAAE,sEAAsE;gBAC7E,IAAI,EAAE,mCAAmC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;aAC5F,CAAC;QACJ,CAAC;KACF;IACD,uDAAuD;IACvD;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc;QAClC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1B,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YAC1D,kGAAkG;YAClG,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,wCAAwC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACtG,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChF,MAAM,KAAK,GAAG;gBACZ,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,GAAG,MAAM,oBAAoB;gBAC7B,GAAG,MAAM,uBAAuB;gBAChC,GAAG,MAAM,mCAAmC;gBAC5C,GAAG,MAAM,kDAAkD;gBAC3D,GAAG,MAAM,2CAA2C;gBACpD,GAAG,MAAM,kDAAkD;gBAC3D,GAAG,MAAM,+BAA+B;gBACxC,GAAG,MAAM,IAAI;aACd,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;YACjC,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,OAAO,EAAE,CAAC,2BAA2B,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,kCAAkC,EAAE,iCAAiC,EAAE,uBAAuB,CAAC;gBAClM,KAAK,EAAE,qEAAqE;gBAC5E,IAAI,EAAE,8KAA8K;aACrL,CAAC;QACJ,CAAC;KACF;IACD;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtF,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC;YACjE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,KAAK,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,yOAAyO,CAAC;YAClR,CAAC;YACD,OAAO;gBACL,KAAK;gBACL,OAAO,EAAE,CAAC,2BAA2B,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,kCAAkC,EAAE,iCAAiC,EAAE,uBAAuB,CAAC;gBAClM,KAAK,EAAE,qEAAqE;gBAC5E,IAAI,EAAE,sDAAsD;aAC7D,CAAC;QACJ,CAAC;KACF;IACD;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,CAAC,2BAA2B,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,kCAAkC,EAAE,iCAAiC,CAAC;gBACzK,KAAK,EAAE,sCAAsC;gBAC7C,IAAI,EAAE;oBACJ,gFAAgF;oBAChF,8HAA8H;oBAC9H,wHAAwH;oBACxH,+GAA+G;iBAChH,CAAC,IAAI,CAAC,IAAI,CAAC;aACb,CAAC;QACJ,CAAC;KACF;IACD,iBAAiB;IACjB;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,kBAAkB;QAC9D,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YAClB,IAAI,CAAC,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,4EAA4E;YAC5E,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,IAAI,UAAU,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACnC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qDAAqD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3H,IAAI,MAAM,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/B,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC;YACpC,oEAAoE;YACpE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;YAClB,OAAO,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC;gBAAE,GAAG,EAAE,CAAC;YACxG,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,GAAG,MAAM,MAAM,CAAC;YAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,yCAAyC,CAAC;YAC5G,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,8BAA8B,CAAC;YACrF,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,OAAO,GAAG,IAAI;iBACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBACZ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpB,OAAO,GAAG,IAAI,CAAC;oBACf,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;iBACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxC,OAAO,GAAG,IAAI,CAAC;oBACf,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO,CAAC,CAAC;YACX,CAAC,CAAC,CAAC;YACL,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,OAAO,CACb,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC,CAAC,GAAG,KAAK,oBAAoB,EACrE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,EACzE,GAAG;oBACD,CAAC,CAAC,GAAG,KAAK,8FAA8F;oBACxG,CAAC,CAAC,GAAG,KAAK,6FAA6F,CAC1G,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC1B,OAAO;gBACL,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/E,OAAO,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;gBACjD,KAAK,EAAE,8DAA8D;gBACrE,IAAI,EAAE,wJAAwJ;aAC/J,CAAC;QACJ,CAAC;KACF;IACD,uBAAuB;IACvB;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,mBAAmB,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC9E,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,mCAAmC,EAAE,QAAQ,CAAC,CAAC;YAC1E,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;QAC5I,CAAC;KACF;IACD,kBAAkB;IAClB;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,qBAAqB;QACzC,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YAClB,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC,CAAC;YACpE,wEAAwE;YACxE,kEAAkE;YAClE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACtE,IAAI,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,kCAAkC,EAAE,6BAA6B,CAAC,CAAC;iBACxI,IAAI,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1F,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAS,EAAE,KAAa,EAAE,EAAE;oBAC3E,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;oBAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;oBACxD,OAAO,eAAe,IAAI,8BAA8B,KAAK,GAAG,CAAC;gBACnE,CAAC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO;gBACL,KAAK;gBACL,OAAO,EAAE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;gBAC/C,KAAK,EAAE,mEAAmE;gBAC1E,IAAI,EAAE,iHAAiH;aACxH,CAAC;QACJ,CAAC;KACF;IACD,OAAO;IACP;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,uBAAuB;QAC1E,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,KAAK,GAAG,IAAI;iBACf,OAAO,CAAC,0CAA0C,EAAE,iCAAiC,CAAC;iBACtF,OAAO,CAAC,kDAAkD,EAAE,0CAA0C,CAAC,CAAC;YAC3G,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAChC,OAAO;gBACL,KAAK;gBACL,OAAO,EAAE,CAAC,qBAAqB,CAAC;gBAChC,KAAK,EAAE,8DAA8D;gBACrE,IAAI,EAAE,gMAAgM;aACvM,CAAC;QACJ,CAAC;KACF;IACD,0CAA0C;IAC1C;QACE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,cAAc;QAClC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChD,OAAO;gBACL,OAAO,EAAE,CAAC,6BAA6B,CAAC;gBACxC,KAAK,EAAE,iEAAiE;gBACxE,IAAI,EAAE,yKAAyK;aAChL,CAAC;QACJ,CAAC;KACF;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;IAC9H,MAAM,WAAW,GAAoB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBAAE,OAAO;YAClD,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,8BAA8B,MAAM,CAAC,SAAS,CAAC,MAAM,wBAAwB,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,GAAG,CAAC;IAC7K,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,6BAA6B,MAAM,CAAC,SAAS,CAAC,MAAM,8CAA8C,EAAE,EAAE,CAAC,CAAC;IACtJ,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,OAAO,CAAC,MAAiB;IACvC,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC"}

package/dist/frameworks.d.ts

@@ -0,0 +1,19 @@
+import type { Finding } from "./finding.js";
+import type { ArtifactFile } from "./web.js";
+export interface FrameworkResult {
+    findings: Finding[];
+    notes: string[];
+}
+export declare function frameworkChecks(files: ArtifactFile[]): FrameworkResult;
+/**
+ * A PyInstaller executable ends with a CArchive whose cookie marks it; the
+ * archive holds the app's .pyc files, which extract and decompile with
+ * public tools. PyArmor-protected archives carry its runtime module.
+ */
+export declare function pyinstallerCheck(buf: Buffer, file: string): FrameworkResult;
+export declare function isJar(path: string): boolean;
+/** Class names in a JAR (plain or Spring Boot) judged like dex: ProGuard leaves one- and two-letter names. */
+export declare function analyzeJar(path: string): FrameworkResult & {
+    scannedFiles: number;
+};
+//# sourceMappingURL=frameworks.d.ts.map

package/dist/frameworks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frameworks.d.ts","sourceRoot":"","sources":["../src/frameworks.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AA6ED,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,eAAe,CAGtE;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,CAa3E;AAID,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3C;AASD,8GAA8G;AAC9G,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAwBnF"}

package/dist/frameworks.js

@@ -0,0 +1,148 @@
+import { closeSync, openSync, statSync } from "fs";
+import { assessDexObfuscation } from "./dex.js";
+import { finding } from "./finding.js";
+import { assessDotnetNames, detectNativeFormat, readDotnetStringsHeap } from "./native.js";
+import { extractZipEntry, readZipEntries } from "./zip.js";
+const IL2CPP_METADATA_MAGIC = 0xfab11baf;
+const PYINSTALLER_COOKIE = Buffer.from([0x4d, 0x45, 0x49, 0x0c, 0x0b, 0x0a, 0x0b, 0x0e]); // "MEI\014\013\012\013\016"
+// ── Unity ───────────────────────────────────────────────────────────────────
+/** The .NET #Strings heap of a managed DLL, located the same way analyzeNative does. */
+function dotnetNames(buf) {
+    if (detectNativeFormat(buf) !== "pe")
+        return null;
+    try {
+        const peOff = buf.readUInt32LE(0x3c);
+        const coff = peOff + 4;
+        const nSections = buf.readUInt16LE(coff + 2);
+        const optSize = buf.readUInt16LE(coff + 16);
+        const opt = coff + 20;
+        const dirBase = opt + (buf.readUInt16LE(opt) === 0x20b ? 112 : 96);
+        const clrRva = buf.readUInt32LE(dirBase + 14 * 8);
+        if (!clrRva)
+            return null;
+        const toOffset = (rva) => {
+            for (let i = 0; i < nSections; i++) {
+                const o = opt + optSize + i * 40;
+                const va = buf.readUInt32LE(o + 12);
+                const size = Math.max(buf.readUInt32LE(o + 8), buf.readUInt32LE(o + 16));
+                if (rva >= va && rva < va + size)
+                    return rva - va + buf.readUInt32LE(o + 20);
+            }
+            return null;
+        };
+        const clr = toOffset(clrRva);
+        const meta = clr === null ? null : toOffset(buf.readUInt32LE(clr + 8));
+        return meta === null ? null : readDotnetStringsHeap(buf, meta);
+    }
+    catch {
+        return null;
+    }
+}
+function unity(files) {
+    const findings = [];
+    const notes = [];
+    for (const f of files.filter((x) => x.key.endsWith("/Metadata/global-metadata.dat"))) {
+        const head = f.read()?.subarray(0, 8);
+        if (!head || head.length < 8)
+            continue;
+        if (head.readUInt32LE(0) === IL2CPP_METADATA_MAGIC) {
+            findings.push(finding("unity_il2cpp_metadata", f.display, { match: `global-metadata.dat v${head.readUInt32LE(4)} with an intact header (${(f.size / 1024 / 1024).toFixed(1)} MiB)` }));
+        }
+        else {
+            notes.push(`Unity IL2CPP metadata at ${f.key} does not start with the standard header (encrypted or protected)`);
+        }
+    }
+    const managed = files.filter((x) => /(^|\/)Managed\/Assembly-CSharp(-firstpass)?\.dll$/.test(x.key));
+    for (const f of managed) {
+        const buf = f.read();
+        const names = buf ? dotnetNames(buf) : null;
+        if (!names)
+            continue;
+        const verdict = assessDotnetNames(names);
+        if (verdict.obfuscated)
+            notes.push(`${f.key}: ${verdict.summary}`);
+        else
+            findings.push(finding("unity_mono_assemblies", f.display, { match: verdict.summary }));
+    }
+    if (findings.length + notes.length > 0)
+        notes.unshift("Unity player detected");
+    return { findings, notes };
+}
+// ── Flutter ─────────────────────────────────────────────────────────────────
+function flutter(files) {
+    const engine = files.some((f) => /(^|\/)libflutter\.so$/.test(f.key) || /(^|\/)Flutter\.framework\/Flutter$/.test(f.key));
+    const app = files.find((f) => /(^|\/)libapp\.so$/.test(f.key) || /(^|\/)App\.framework\/App$/.test(f.key));
+    if (!engine || !app)
+        return { findings: [], notes: [] };
+    return {
+        findings: [],
+        notes: [
+            `Flutter app (${app.key}): Dart code ships as an AOT snapshot. reverse-shield does not measure Dart obfuscation; build releases with --obfuscate --split-debug-info=<dir>.`,
+        ],
+    };
+}
+export function frameworkChecks(files) {
+    const results = [unity(files), flutter(files)];
+    return { findings: results.flatMap((r) => r.findings), notes: results.flatMap((r) => r.notes) };
+}
+// ── PyInstaller ─────────────────────────────────────────────────────────────
+/**
+ * A PyInstaller executable ends with a CArchive whose cookie marks it; the
+ * archive holds the app's .pyc files, which extract and decompile with
+ * public tools. PyArmor-protected archives carry its runtime module.
+ */
+export function pyinstallerCheck(buf, file) {
+    // At the very end on Linux/Windows; on macOS the archive sits in its own
+    // Mach-O section and the code signature follows, so search the whole file.
+    const cookieAt = buf.lastIndexOf(PYINSTALLER_COOKIE);
+    if (cookieAt === -1) {
+        if (buf.includes("Nuitka") && buf.includes("__compiled__"))
+            return { findings: [], notes: [`${file}: compiled with Nuitka (Python compiled to C)`] };
+        return { findings: [], notes: [] };
+    }
+    const python = buf.subarray(cookieAt + 24, cookieAt + 88).toString("latin1").match(/python\d+(?:\.\d+)*/i)?.[0];
+    if (buf.includes("pyarmor_runtime") || buf.includes("__pyarmor__")) {
+        return { findings: [], notes: [`${file}: PyInstaller bundle protected with PyArmor`] };
+    }
+    return { findings: [finding("python_pyinstaller_bundle", file, { match: `PyInstaller archive${python ? ` (${python})` : ""}` })], notes: [] };
+}
+// ── Java ────────────────────────────────────────────────────────────────────
+export function isJar(path) {
+    return /\.(jar|war)$/i.test(path);
+}
+function manifestValue(manifest, key) {
+    // MANIFEST.MF wraps long values onto continuation lines that start with a space.
+    const unfolded = manifest.replace(/\r?\n /g, "");
+    const line = unfolded.split(/\r?\n/).find((l) => l.startsWith(`${key}:`));
+    return line ? line.slice(key.length + 1).trim() : null;
+}
+/** Class names in a JAR (plain or Spring Boot) judged like dex: ProGuard leaves one- and two-letter names. */
+export function analyzeJar(path) {
+    const size = statSync(path).size;
+    const fd = openSync(path, "r");
+    try {
+        const entries = readZipEntries(fd, size);
+        const mfEntry = entries.find((e) => e.name === "META-INF/MANIFEST.MF");
+        const mf = mfEntry ? extractZipEntry(fd, mfEntry)?.toString("utf8") ?? "" : "";
+        const main = manifestValue(mf, "Start-Class") ?? manifestValue(mf, "Main-Class");
+        const classes = entries
+            .filter((e) => e.name.endsWith(".class") && !e.name.startsWith("META-INF/"))
+            .map((e) => e.name.replace(/^(BOOT-INF|WEB-INF)\/classes\//, ""));
+        const notes = [];
+        if (classes.length === 0)
+            return { findings: [], notes: [`${path}: no classes in the archive`], scannedFiles: 1 };
+        const pkg = main && main.includes(".") ? main.slice(0, main.lastIndexOf(".")) : null;
+        if (!pkg)
+            return { findings: [], notes: [`${path}: ${classes.length} classes, no Main-Class/Start-Class to locate the application package`], scannedFiles: 1 };
+        const verdict = assessDexObfuscation(classes.map((c) => `L${c.slice(0, -".class".length)};`), pkg);
+        notes.push(`${pkg}: ${verdict.appClasses} app classes, ${verdict.shortNamed} with 1–2 letter names`);
+        const findings = verdict.obfuscated
+            ? []
+            : [finding("java_not_obfuscated", path, { match: `${verdict.appClasses} classes under ${pkg}, ${verdict.shortNamed} renamed; e.g. ${verdict.sample.join(", ")}` })];
+        return { findings, notes, scannedFiles: 1 };
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+//# sourceMappingURL=frameworks.js.map

package/dist/frameworks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frameworks.js","sourceRoot":"","sources":["../src/frameworks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAE3F,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAO3D,MAAM,qBAAqB,GAAG,UAAU,CAAC;AACzC,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,4BAA4B;AAEtH,+EAA+E;AAE/E,wFAAwF;AACxF,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC;QACvB,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAiB,EAAE;YAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC;gBACjC,MAAM,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;gBACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACzE,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,GAAG,EAAE,GAAG,IAAI;oBAAE,OAAO,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,KAAqB;IAClC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACvC,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,qBAAqB,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,wBAAwB,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,GAAG,mEAAmE,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mDAAmD,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrG,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;;YAC9D,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC/E,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,+EAA+E;AAE/E,SAAS,OAAO,CAAC,KAAqB;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,oCAAoC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1H,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3G,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxD,OAAO;QACL,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE;YACL,gBAAgB,GAAG,CAAC,GAAG,oJAAoJ;SAC5K;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAqB;IACnD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAY;IACxD,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IACrD,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,+CAA+C,CAAC,EAAE,CAAC;QACrJ,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChH,IAAI,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,6CAA6C,CAAC,EAAE,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,2BAA2B,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,sBAAsB,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAChJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,KAAK,CAAC,IAAY;IAChC,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAW;IAClD,iFAAiF;IACjF,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IACjC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC;QACvE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,aAAa,CAAC,EAAE,EAAE,aAAa,CAAC,IAAI,aAAa,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,OAAO;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;aAC3E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,6BAA6B,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAClH,MAAM,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,uEAAuE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAC/J,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACnG,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,OAAO,CAAC,UAAU,iBAAiB,OAAO,CAAC,UAAU,wBAAwB,CAAC,CAAC;QACrG,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU;YACjC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,UAAU,kBAAkB,GAAG,KAAK,OAAO,CAAC,UAAU,kBAAkB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACtK,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -13,4 +13,8 @@ export { readAsar } from "./asar.js";
 export { analyzeElectron, detectElectron, parseFuseWire, readFuseWire, FUSE_SENTINEL } from "./electron.js";
 export { analyzeNative, detectNativeFormat } from "./native.js";
 export { registerTools } from "./server.js";
+export { applyIgnores, compareToBaseline, createBaseline, fingerprint, normalizeLocation, readBaseline, writeBaseline } from "./baseline.js";
+export type { Baseline, BaselineDiff } from "./baseline.js";
+export { formatFixReport, patchOf, suggestFixes, unifiedDiff } from "./fixes.js";
+export type { FixReport, FixSuggestion } from "./fixes.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5C,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC3E,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5C,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC3E,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrC,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC7I,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACjF,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -9,4 +9,6 @@ export { readAsar } from "./asar.js";
 export { analyzeElectron, detectElectron, parseFuseWire, readFuseWire, FUSE_SENTINEL } from "./electron.js";
 export { analyzeNative, detectNativeFormat } from "./native.js";
 export { registerTools } from "./server.js";
+export { applyIgnores, compareToBaseline, createBaseline, fingerprint, normalizeLocation, readBaseline, writeBaseline } from "./baseline.js";
+export { formatFixReport, patchOf, suggestFixes, unifiedDiff } from "./fixes.js";
 //# sourceMappingURL=index.js.map