@mitre/hdf-converters 2.10.8 → 2.10.13

package/lib/src/ckl-mapper/checklist-metadata-utils.js

@@ -0,0 +1,154 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.throwIfInvalidAssetMetadata = exports.throwIfInvalidProfileMetadata = exports.validateChecklistMetadata = exports.validateChecklistProfileMetadata = exports.validateChecklistAssetMetadata = exports.InvalidChecklistMetadataException = void 0;
+const validator_1 = require("validator");
+const checklistJsonix_1 = require("./checklistJsonix");
+const Revalidator = __importStar(require("revalidator"));
+const lodash_1 = __importDefault(require("lodash"));
+class InvalidChecklistMetadataException extends Error {
+}
+exports.InvalidChecklistMetadataException = InvalidChecklistMetadataException;
+const assetMetadataSchema = {
+    properties: {
+        hostfqdn: {
+            type: 'string',
+            conform: (fqdn) => !fqdn || (0, validator_1.isFQDN)(fqdn) || (0, validator_1.isIP)(fqdn),
+            message: 'Host FQDN'
+        },
+        hostip: {
+            type: 'string',
+            conform: (ip) => !ip || (0, validator_1.isIP)(ip),
+            message: 'Host IP'
+        },
+        hostmac: {
+            type: 'string',
+            conform: (mac) => !mac || (0, validator_1.isMACAddress)(mac),
+            message: 'Host MAC'
+        },
+        role: {
+            type: 'string',
+            enum: Object.values(checklistJsonix_1.Role),
+            message: 'Role'
+        },
+        assettype: {
+            type: 'string',
+            enum: Object.values(checklistJsonix_1.Assettype),
+            message: 'Asset Type'
+        },
+        techarea: {
+            type: 'string',
+            enum: Object.values(checklistJsonix_1.Techarea),
+            message: 'Tech Area'
+        },
+        webordatabase: {
+            type: 'boolean',
+            message: 'Web or Database STIG'
+        }
+    }
+};
+const profileMetadataSchema = {
+    properties: {
+        version: {
+            type: 'integer',
+            minimum: 0,
+            message: 'Version must be a non-negative integer'
+        },
+        releasenumber: {
+            type: 'integer',
+            minimum: 0,
+            message: 'Release number must be a non-negative integer'
+        },
+        releasedate: {
+            type: 'string',
+            conform: (date) => !date || !Number.isNaN(Date.parse(date)),
+            message: 'Release date must be a valid date'
+        }
+    }
+};
+function validateChecklistAssetMetadata(asset) {
+    const errors = Revalidator.validate(asset, assetMetadataSchema).errors;
+    if (errors.length === 0)
+        return { ok: true, value: true };
+    const invalidFields = errors.map((e) => `${e.message} (${lodash_1.default.get(asset, e.property)})`);
+    const message = `Invalid checklist metadata fields:\n\t${invalidFields.join('\n\t')}`;
+    return { ok: false, error: { invalid: errors.map((e) => e.property), message } };
+}
+exports.validateChecklistAssetMetadata = validateChecklistAssetMetadata;
+function validateChecklistProfileMetadata(metadata) {
+    const errors = Revalidator.validate(metadata, {
+        ...profileMetadataSchema
+    }).errors;
+    if (errors.length === 0)
+        return { ok: true, value: true };
+    const invalidFields = errors.map((e) => `${e.message} (${lodash_1.default.get(metadata, e.property)})`);
+    const message = `Invalid checklist profile metadata fields:\n\t${invalidFields.join('\n\t')}`;
+    return { ok: false, error: { invalid: errors.map((e) => e.property), message } };
+}
+exports.validateChecklistProfileMetadata = validateChecklistProfileMetadata;
+function validateChecklistMetadata(metadata) {
+    let invalid = [];
+    const messages = [];
+    const assetResult = validateChecklistAssetMetadata({
+        ...metadata,
+        webordatabase: metadata.webordatabase === 'true',
+        targetkey: null
+    });
+    if (!assetResult.ok) {
+        invalid = invalid.concat(assetResult.error.invalid);
+        messages.push(assetResult.error.message);
+    }
+    for (const profile of metadata.profiles) {
+        const profileResult = validateChecklistProfileMetadata(profile);
+        if (!profileResult.ok) {
+            invalid = invalid.concat(profileResult.error.invalid);
+            messages.push(`In profile ${profile.name}:\n${profileResult.error.message.split(':\n').at(-1)}`);
+        }
+    }
+    if (invalid.length === 0)
+        return { ok: true, value: true };
+    const message = messages.join('\n');
+    return { ok: false, error: { invalid, message } };
+}
+exports.validateChecklistMetadata = validateChecklistMetadata;
+function throwIfInvalidProfileMetadata(profileMetadata) {
+    if (profileMetadata) {
+        const results = validateChecklistProfileMetadata(profileMetadata);
+        if (!results.ok) {
+            throw new InvalidChecklistMetadataException(results.error.message);
+        }
+    }
+}
+exports.throwIfInvalidProfileMetadata = throwIfInvalidProfileMetadata;
+function throwIfInvalidAssetMetadata(metadata) {
+    const result = validateChecklistAssetMetadata(metadata);
+    if (!result.ok)
+        throw new InvalidChecklistMetadataException(result.error.message);
+}
+exports.throwIfInvalidAssetMetadata = throwIfInvalidAssetMetadata;
+//# sourceMappingURL=checklist-metadata-utils.js.map

package/lib/src/ckl-mapper/checklist-metadata-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checklist-metadata-utils.js","sourceRoot":"","sources":["../../../src/ckl-mapper/checklist-metadata-utils.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAqD;AAGrD,uDAAmE;AACnE,yDAA2C;AAC3C,oDAAuB;AAEvB,MAAa,iCAAkC,SAAQ,KAAK;CAAG;AAA/D,8EAA+D;AAE/D,MAAM,mBAAmB,GAAkC;IACzD,UAAU,EAAE;QACV,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YAEd,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAA,kBAAM,EAAC,IAAI,CAAC,IAAI,IAAA,gBAAI,EAAC,IAAI,CAAC;YAC9D,OAAO,EAAE,WAAW;SACrB;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAA,gBAAI,EAAC,EAAE,CAAC;YACxC,OAAO,EAAE,SAAS;SACnB;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,IAAA,wBAAY,EAAC,GAAG,CAAC;YACnD,OAAO,EAAE,UAAU;SACpB;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,sBAAI,CAAC;YACzB,OAAO,EAAE,MAAM;SAChB;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,2BAAS,CAAC;YAC9B,OAAO,EAAE,YAAY;SACtB;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,0BAAQ,CAAC;YAC7B,OAAO,EAAE,WAAW;SACrB;QACD,aAAa,EAAE;YACb,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,sBAAsB;SAChC;KACF;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAyC;IAClE,UAAU,EAAE;QACV,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,wCAAwC;SAClD;QACD,aAAa,EAAE;YACb,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,+CAA+C;SACzD;QACD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnE,OAAO,EAAE,mCAAmC;SAC7C;KACF;CACF,CAAC;AAEF,SAAgB,8BAA8B,CAC5C,KAAY;IAEZ,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAAC;IAEvE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC;IAExD,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CACpD,CAAC;IACF,MAAM,OAAO,GAAG,yCAAyC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtF,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAC,EAAC,CAAC;AAC/E,CAAC;AAZD,wEAYC;AAED,SAAgB,gCAAgC,CAC9C,QAAsB;IAEtB,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE;QAC5C,GAAG,qBAAqB;KACzB,CAAC,CAAC,MAAM,CAAC;IAEV,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC;IAExD,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,gBAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CACvD,CAAC;IACF,MAAM,OAAO,GAAG,iDAAiD,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9F,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAC,EAAC,CAAC;AAC/E,CAAC;AAdD,4EAcC;AAED,SAAgB,yBAAyB,CACvC,QAA2B;IAE3B,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,8BAA8B,CAAC;QACjD,GAAG,QAAQ;QACX,aAAa,EAAE,QAAQ,CAAC,aAAa,KAAK,MAAM;QAChD,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE;QACnB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;KAC1C;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE;QACvC,MAAM,aAAa,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE;YACrB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CACX,cAAc,OAAO,CAAC,IAAI,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAClF,CAAC;SACH;KACF;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAC,OAAO,EAAE,OAAO,EAAC,EAAC,CAAC;AAChD,CAAC;AA7BD,8DA6BC;AAED,SAAgB,6BAA6B,CAAC,eAA8B;IAC1E,IAAI,eAAe,EAAE;QACnB,MAAM,OAAO,GAAG,gCAAgC,CAAC,eAAe,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE;YACf,MAAM,IAAI,iCAAiC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;SACpE;KACF;AACH,CAAC;AAPD,sEAOC;AAED,SAAgB,2BAA2B,CAAC,QAAe;IACzD,MAAM,MAAM,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,EAAE;QACZ,MAAM,IAAI,iCAAiC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACtE,CAAC;AAJD,kEAIC"}

package/lib/src/gosec-mapper.d.ts

@@ -1,6 +1,6 @@
 import { ExecJSON } from 'inspecjs';
 import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class GoSecMapper extends BaseConverter {
+export declare class GosecMapper extends BaseConverter {
     withRaw: boolean;
     mappings: MappedTransform<ExecJSON.Execution & {
         passthrough: unknown;

package/lib/src/gosec-mapper.js

@@ -23,7 +23,7 @@ var __importStar = (this && this.__importStar) || function (mod) {
     return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GoSecMapper = void 0;
+exports.GosecMapper = void 0;
 const inspecjs_1 = require("inspecjs");
 const _ = __importStar(require("lodash"));
 const package_json_1 = require("../package.json");
@@ -31,32 +31,43 @@ const base_converter_1 = require("./base-converter");
 const CweNistMapping_1 = require("./mappings/CweNistMapping");
 const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping();
 const DEFAULT_NIST_TAG = ['SI-2', 'RA-5'];
+const IMPACT_MAPPING = new Map([
+    ['high', 0.7],
+    ['medium', 0.5],
+    ['low', 0.3]
+]);
 function nistTag(input) {
     const cwe = [`${_.get(input, 'id')}`];
     return CWE_NIST_MAPPING.nistFilter(cwe, DEFAULT_NIST_TAG);
 }
+function formatStatus(input) {
+    return `${_.get(input, 'nosec')}` === 'false' &&
+        `${_.get(input, 'suppressions')}` === 'null'
+        ? inspecjs_1.ExecJSON.ControlResultStatus.Failed
+        : inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
+}
+function formatSkipMessage(input) {
+    const suppressions = _.get(input, 'suppressions');
+    if (`${suppressions}` === 'null') {
+        return undefined;
+    }
+    if (!Array.isArray(suppressions)) {
+        return 'No justification provided';
+    }
+    return suppressions
+        .map((suppression) => `${suppression.justification ? suppression.justification : 'No justification provided'} (${suppression.kind})`)
+        .join('\n');
+}
+function formatCodeDesc(input) {
+    return `Rule ${_.get(input, 'rule_id')} violation detected at:\nFile: ${_.get(input, 'file')}\nLine: ${_.get(input, 'line')}\nColumn: ${_.get(input, 'column')}`;
+}
 function formatMessage(input) {
-    return `${_.get(input, 'file')}, line:${_.get(input, 'line')}, column:${_.get(input, 'column')}`;
+    return `${_.get(input, 'confidence')} confidence of rule violation at:\n${_.get(input, 'code')}`;
 }
-class GoSecMapper extends base_converter_1.BaseConverter {
+class GosecMapper extends base_converter_1.BaseConverter {
     constructor(gosecJson, withRaw = false) {
         super(JSON.parse(gosecJson));
         this.mappings = {
-            passthrough: {
-                transformer: (data) => {
-                    return {
-                        auxiliary_data: [
-                            {
-                                name: 'Gosec',
-                                data: {
-                                    'Golang errors': _.get(data, 'Golang errors')
-                                }
-                            }
-                        ],
-                        ...(this.withRaw && { raw: data })
-                    };
-                }
-            },
             platform: {
                 name: 'Heimdall Tools',
                 release: package_json_1.version
@@ -65,8 +76,8 @@ class GoSecMapper extends base_converter_1.BaseConverter {
             statistics: {},
             profiles: [
                 {
-                    name: 'Gosec scanner',
-                    title: 'gosec',
+                    name: 'gosec Scan',
+                    title: 'gosec Scan',
                     version: { path: 'GosecVersion' },
                     supports: [],
                     attributes: [],
@@ -81,22 +92,22 @@ class GoSecMapper extends base_converter_1.BaseConverter {
                                     path: 'cwe',
                                     transformer: nistTag
                                 },
-                                cwe: { path: 'cwe' },
-                                nosec: { path: 'nosec' },
-                                suppressions: { path: 'suppressions' },
-                                severity: { path: 'severity' },
-                                confidence: { path: 'confidence' }
+                                cwe: { path: 'cwe' }
                             },
                             refs: [],
                             source_location: {},
                             title: { path: 'details' },
                             id: { path: 'rule_id' },
                             desc: '',
-                            impact: 0.5,
+                            impact: {
+                                path: 'severity',
+                                transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
+                            },
                             results: [
                                 {
-                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                    code_desc: { path: 'code' },
+                                    status: { transformer: formatStatus },
+                                    skip_message: { transformer: formatSkipMessage },
+                                    code_desc: { transformer: formatCodeDesc },
                                     message: { transformer: formatMessage },
                                     start_time: ''
                                 }
@@ -105,10 +116,26 @@ class GoSecMapper extends base_converter_1.BaseConverter {
                     ],
                     sha256: ''
                 }
-            ]
+            ],
+            passthrough: {
+                transformer: (data) => {
+                    return {
+                        auxiliary_data: [
+                            {
+                                name: 'gosec',
+                                data: {
+                                    'Golang errors': _.get(data, 'Golang errors'),
+                                    Stats: _.get(data, 'Stats')
+                                }
+                            }
+                        ],
+                        ...(this.withRaw && { raw: data })
+                    };
+                }
+            }
         };
         this.withRaw = withRaw;
     }
 }
-exports.GoSecMapper = GoSecMapper;
+exports.GosecMapper = GosecMapper;
 //# sourceMappingURL=gosec-mapper.js.map

package/lib/src/gosec-mapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"gosec-mapper.js","sourceRoot":"","sources":["../../src/gosec-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAA6E;AAC7E,8DAAyD;AAEzD,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAC9C,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE1C,SAAS,OAAO,CAAC,KAA8B;IAC7C,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,gBAAgB,CAAC,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B;IACnD,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAC3E,KAAK,EACL,QAAQ,CACT,EAAE,CAAC;AACN,CAAC;AAED,MAAa,WAAY,SAAQ,8BAAa;IAwE5C,YAAY,SAAiB,EAAE,OAAO,GAAG,KAAK;QAC5C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAtE/B,aAAQ,GAGJ;YACF,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;oBACtE,OAAO;wBACL,cAAc,EAAE;4BACd;gCACE,IAAI,EAAE,OAAO;gCACb,IAAI,EAAE;oCACJ,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC;iCAC9C;6BACF;yBACF;wBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;aAC9B;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,OAAO;oBACd,OAAO,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;oBAC/B,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,QAAQ;4BACd,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE;gCACJ,IAAI,EAAE;oCACJ,IAAI,EAAE,KAAK;oCACX,WAAW,EAAE,OAAO;iCACrB;gCACD,GAAG,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC;gCAClB,KAAK,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC;gCACtB,YAAY,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;gCACpC,QAAQ,EAAE,EAAC,IAAI,EAAE,UAAU,EAAC;gCAC5B,UAAU,EAAE,EAAC,IAAI,EAAE,YAAY,EAAC;6BACjC;4BACD,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,KAAK,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;4BACxB,EAAE,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;4BACrB,IAAI,EAAE,EAAE;4BACR,MAAM,EAAE,GAAG;4BACX,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oCAC3C,SAAS,EAAE,EAAC,IAAI,EAAE,MAAM,EAAC;oCACzB,OAAO,EAAE,EAAC,WAAW,EAAE,aAAa,EAAC;oCACrC,UAAU,EAAE,EAAE;iCACf;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;SACF,CAAC;QAGA,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA5ED,kCA4EC"}
+{"version":3,"file":"gosec-mapper.js","sourceRoot":"","sources":["../../src/gosec-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,8DAAyD;AAEzD,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAC9C,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1C,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;CACb,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,KAA8B;IAC7C,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,gBAAgB,CAAC,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;AAC5D,CAAC;AAGD,SAAS,YAAY,CAAC,KAA8B;IAClD,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,OAAO;QAC3C,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,KAAK,MAAM;QAC5C,CAAC,CAAC,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;QACrC,CAAC,CAAC,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;AAC3C,CAAC;AAGD,SAAS,iBAAiB,CAAC,KAA8B;IACvD,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAGlD,IAAI,GAAG,YAAY,EAAE,KAAK,MAAM,EAAE;QAChC,OAAO,SAAS,CAAC;KAClB;IAGD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE;QAChC,OAAO,2BAA2B,CAAC;KACpC;IAED,OAAO,YAAY;SAChB,GAAG,CACF,CAAC,WAAW,EAAE,EAAE,CACd,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,2BAA2B,KAAK,WAAW,CAAC,IAAI,GAAG,CACjH;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAGD,SAAS,cAAc,CAAC,KAA8B;IACpD,OAAO,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;AACnK,CAAC;AAGD,SAAS,aAAa,CAAC,KAA8B;IACnD,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,MAAa,WAAY,SAAQ,8BAAa;IAyE5C,YAAY,SAAiB,EAAE,OAAO,GAAG,KAAK;QAC5C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAvE/B,aAAQ,GAGJ;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;aAC9B;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,YAAY;oBACnB,OAAO,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;oBAC/B,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,QAAQ;4BACd,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE;gCACJ,IAAI,EAAE;oCACJ,IAAI,EAAE,KAAK;oCACX,WAAW,EAAE,OAAO;iCACrB;gCACD,GAAG,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC;6BACnB;4BACD,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,KAAK,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;4BACxB,EAAE,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;4BACrB,IAAI,EAAE,EAAE;4BACR,MAAM,EAAE;gCACN,IAAI,EAAE,UAAU;gCAChB,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;6BAC3C;4BACD,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE,EAAC,WAAW,EAAE,YAAY,EAAC;oCACnC,YAAY,EAAE,EAAC,WAAW,EAAE,iBAAiB,EAAC;oCAC9C,SAAS,EAAE,EAAC,WAAW,EAAE,cAAc,EAAC;oCACxC,OAAO,EAAE,EAAC,WAAW,EAAE,aAAa,EAAC;oCACrC,UAAU,EAAE,EAAE;iCACf;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;oBACtE,OAAO;wBACL,cAAc,EAAE;4BACd;gCACE,IAAI,EAAE,OAAO;gCACb,IAAI,EAAE;oCACJ,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC;oCAC7C,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;iCAC5B;6BACF;yBACF;wBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;QAGA,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA7ED,kCA6EC"}

package/lib/src/msft-secure-score-mapper.d.ts

@@ -0,0 +1,33 @@
+import { SecureScore, SecureScoreControlProfile } from '@microsoft/microsoft-graph-types';
+import { ExecJSON } from 'inspecjs';
+import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
+export type ProfileResponse = {
+    '@odata.context': string;
+    '@odata.nextLink': string;
+    value: SecureScoreControlProfile[];
+};
+export type SecureScoreResponse = {
+    '@odata.context': string;
+    '@odata.nextLink': string;
+    value: SecureScore[];
+};
+export type CombinedResponse = {
+    secureScore: SecureScoreResponse;
+    profiles: ProfileResponse;
+};
+export declare class MsftSecureScoreResults {
+    data: CombinedResponse;
+    withRaw: boolean;
+    constructor(combinedJson: string, withRaw?: boolean);
+    toHdf(): ExecJSON.Execution[];
+}
+export declare class MsftSecureScoreMapper extends BaseConverter {
+    withRaw: boolean;
+    rawData: CombinedResponse;
+    getProfiles: (controlName: string) => SecureScoreControlProfile[];
+    memoizedGetProfiles(): (controlName: string) => SecureScoreControlProfile[];
+    mappings: MappedTransform<ExecJSON.Execution & {
+        passthrough: unknown;
+    }, ILookupPath>;
+    constructor(secureScore_and_profiles_combined: string, withRaw?: boolean);
+}

package/lib/src/msft-secure-score-mapper.js

@@ -0,0 +1,254 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MsftSecureScoreMapper = exports.MsftSecureScoreResults = void 0;
+const inspecjs_1 = require("inspecjs");
+const package_json_1 = require("../package.json");
+const base_converter_1 = require("./base-converter");
+const _ = __importStar(require("lodash"));
+const global_1 = require("./utils/global");
+class MsftSecureScoreResults {
+    constructor(combinedJson, withRaw = false) {
+        this.data = JSON.parse(combinedJson);
+        this.withRaw = withRaw;
+    }
+    toHdf() {
+        return this.data.secureScore.value.map((element) => new MsftSecureScoreMapper(JSON.stringify({
+            secureScore: {
+                value: [element],
+                ..._.pick(this.data.secureScore, [
+                    '@odata.context',
+                    '@odata.context'
+                ])
+            },
+            profiles: this.data.profiles
+        }), this.withRaw).toHdf());
+    }
+}
+exports.MsftSecureScoreResults = MsftSecureScoreResults;
+class MsftSecureScoreMapper extends base_converter_1.BaseConverter {
+    memoizedGetProfiles() {
+        const cache = {};
+        return (controlName) => {
+            if (Object.prototype.hasOwnProperty.call(cache, controlName)) {
+                return cache[controlName];
+            }
+            return (cache[controlName] = this.rawData.profiles.value.filter((profile) => profile.id === controlName));
+        };
+    }
+    constructor(secureScore_and_profiles_combined, withRaw = false) {
+        const rawParams = JSON.parse(secureScore_and_profiles_combined);
+        super(rawParams.secureScore.value[0]);
+        this.mappings = {
+            platform: {
+                name: 'Heimdall Tools',
+                release: package_json_1.version
+            },
+            version: package_json_1.version,
+            statistics: {},
+            profiles: [
+                {
+                    name: 'Microsoft Secure Score Scan',
+                    title: {
+                        transformer: (data) => `Azure Secure Score report - Tenant ID: ${data.azureTenantId} - Run ID: ${data.id}`
+                    },
+                    supports: [],
+                    attributes: [],
+                    groups: [],
+                    status: 'loaded',
+                    controls: [
+                        {
+                            path: 'controlScores',
+                            id: {
+                                transformer: (data) => `${data.controlCategory}:${data.controlName}`
+                            },
+                            title: {
+                                transformer: (data) => {
+                                    const titles = this.getProfiles(data.controlName || '')
+                                        .filter((profile) => profile.title !== undefined)
+                                        .map((profile) => profile.title);
+                                    if (titles.length > 0) {
+                                        return titles.join('\n');
+                                    }
+                                    else {
+                                        return [data.controlCategory || '', data.controlName || '']
+                                            .filter((title) => title)
+                                            .join(':');
+                                    }
+                                }
+                            },
+                            desc: { path: 'description' },
+                            impact: {
+                                transformer: (data) => {
+                                    const knownMaxScores = this.getProfiles(data.controlName || '').map((profile) => profile.maxScore || 0);
+                                    if (knownMaxScores.length === 0) {
+                                        return 0.5;
+                                    }
+                                    const highMaxScore = Math.max(...knownMaxScores);
+                                    return highMaxScore / 10.0;
+                                }
+                            },
+                            refs: [],
+                            tags: {
+                                transformer: (data) => ({
+                                    ...(0, global_1.conditionallyProvideAttribute)('category', this.getProfiles(data.controlName || '').map((profile) => profile.controlCategory), (() => {
+                                        const result = this.getProfiles(data.controlName || '')
+                                            .map((profile) => profile.controlCategory)
+                                            .filter((v) => Boolean(v));
+                                        return result.length > 0;
+                                    })()),
+                                    ...(0, global_1.conditionallyProvideAttribute)('maxScore', this.getProfiles(data.controlName || '').map((profile) => profile.maxScore), (() => {
+                                        const result = this.getProfiles(data.controlName || '')
+                                            .map((profile) => profile.maxScore)
+                                            .filter((v) => Boolean(v));
+                                        return result.length > 0;
+                                    })()),
+                                    ...(0, global_1.conditionallyProvideAttribute)('rank', this.getProfiles(data.controlName || '').map((profile) => profile.rank), (() => {
+                                        const result = this.getProfiles(data.controlName || '')
+                                            .map((profile) => profile.rank)
+                                            .filter((v) => Boolean(v));
+                                        return result.length > 0;
+                                    })()),
+                                    ...(0, global_1.conditionallyProvideAttribute)('tiers', this.getProfiles(data.controlName || '').map((profile) => profile.tier), (() => {
+                                        const result = this.getProfiles(data.controlName || '')
+                                            .map((profile) => profile.tier)
+                                            .filter((v) => Boolean(v));
+                                        return result.length > 0;
+                                    })()),
+                                    ...(0, global_1.conditionallyProvideAttribute)('threats', _.uniq(this.getProfiles(data.controlName || '').map((profile) => profile.threats)), (() => {
+                                        const result = this.getProfiles(data.controlName || '')
+                                            .map((profile) => profile.threats)
+                                            .filter((v) => Boolean(v));
+                                        return result.length > 0;
+                                    })()),
+                                    ...(0, global_1.conditionallyProvideAttribute)('services', _.uniq(this.getProfiles(data.controlName || '').map((profile) => profile.service)), (() => {
+                                        const result = this.getProfiles(data.controlName || '')
+                                            .map((profile) => profile.service)
+                                            .filter((v) => Boolean(v));
+                                        return result.length > 0;
+                                    })()),
+                                    ...(0, global_1.conditionallyProvideAttribute)('userImpacts', _.uniq(this.getProfiles(data.controlName || '').map((profile) => profile.userImpact)), (() => {
+                                        const result = this.getProfiles(data.controlName || '')
+                                            .map((profile) => profile.userImpact)
+                                            .filter((v) => Boolean(v));
+                                        return result.length > 0;
+                                    })())
+                                }),
+                                nist: global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS
+                            },
+                            source_location: {},
+                            descriptions: [
+                                {
+                                    data: {
+                                        transformer: (data) => {
+                                            const profiles = this.getProfiles(data.controlName || '');
+                                            const remediationSteps = profiles
+                                                .map((profile) => { var _a; return (_a = profile.remediation) === null || _a === void 0 ? void 0 : _a.toString(); })
+                                                .filter((remediation) => remediation !== undefined);
+                                            return remediationSteps.join('\n');
+                                        }
+                                    },
+                                    label: 'fix'
+                                },
+                                {
+                                    data: {
+                                        transformer: (data) => {
+                                            const profiles = this.getProfiles(data.controlName || '');
+                                            const impact = profiles
+                                                .map((profile) => { var _a; return (_a = profile.remediationImpact) === null || _a === void 0 ? void 0 : _a.toString(); })
+                                                .filter((remediationImpact) => remediationImpact !== undefined);
+                                            return impact.join('\n');
+                                        }
+                                    },
+                                    label: 'rationale'
+                                }
+                            ],
+                            results: [
+                                {
+                                    status: {
+                                        transformer: (data) => {
+                                            if (data.scoreInPercentage === 100) {
+                                                return inspecjs_1.ExecJSON.ControlResultStatus.Passed;
+                                            }
+                                            const knownMaxScores = this.getProfiles(data.controlName || '').map((profile) => profile.maxScore || 0);
+                                            const highMaxScore = Math.max(...knownMaxScores);
+                                            if (knownMaxScores.length === 0) {
+                                                return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
+                                            }
+                                            else if (data.score === undefined) {
+                                                return inspecjs_1.ExecJSON.ControlResultStatus.Error;
+                                            }
+                                            else if (data.score === highMaxScore) {
+                                                return inspecjs_1.ExecJSON.ControlResultStatus.Passed;
+                                            }
+                                            else {
+                                                return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
+                                            }
+                                        }
+                                    },
+                                    code_desc: {
+                                        transformer: (data) => data.implementationStatus
+                                    },
+                                    start_time: { transformer: () => this.data.createdDateTime }
+                                }
+                            ]
+                        }
+                    ],
+                    sha256: ''
+                }
+            ],
+            passthrough: {
+                transformer: () => {
+                    return {
+                        auxiliary_data: [
+                            {
+                                name: 'Microsoft Secure Score',
+                                data: {
+                                    reportId: this.rawData.secureScore.value[0].id,
+                                    tenantId: this.rawData.secureScore.value[0].azureTenantId,
+                                    profiles: this.rawData.profiles,
+                                    enabledServices: this.rawData.secureScore.value[0].enabledServices,
+                                    averageComparativeScores: this.rawData.secureScore.value[0].averageComparativeScores,
+                                    currentScore: this.rawData.secureScore.value[0].currentScore,
+                                    maxScore: this.rawData.secureScore.value[0].maxScore,
+                                    secureScores: _.pick(this.rawData.secureScore, [
+                                        '@odata.context',
+                                        '@odata.nextLink'
+                                    ])
+                                }
+                            }
+                        ],
+                        ...(this.withRaw && { raw: this.rawData })
+                    };
+                }
+            }
+        };
+        this.withRaw = withRaw;
+        this.rawData = rawParams;
+        this.getProfiles = this.memoizedGetProfiles();
+    }
+}
+exports.MsftSecureScoreMapper = MsftSecureScoreMapper;
+//# sourceMappingURL=msft-secure-score-mapper.js.map

package/lib/src/msft-secure-score-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"msft-secure-score-mapper.js","sourceRoot":"","sources":["../../src/msft-secure-score-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,uCAAkC;AAClC,kDAAgE;AAChE,qDAA6E;AAC7E,0CAA4B;AAC5B,2CAGwB;AAmBxB,MAAa,sBAAsB;IAIjC,YAAY,YAAoB,EAAE,OAAO,GAAG,KAAK;QAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACjD,IAAI,qBAAqB,CACvB,IAAI,CAAC,SAAS,CAAC;YACb,WAAW,EAAE;gBACX,KAAK,EAAE,CAAC,OAAO,CAAC;gBAChB,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;oBAC/B,gBAAgB;oBAChB,gBAAgB;iBACjB,CAAC;aACH;YACD,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;SAC7B,CAAC,EACF,IAAI,CAAC,OAAO,CACb,CAAC,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;CACF;AA1BD,wDA0BC;AAED,MAAa,qBAAsB,SAAQ,8BAAa;IAKtD,mBAAmB;QACjB,MAAM,KAAK,GAAgD,EAAE,CAAC;QAE9D,OAAO,CAAC,WAAmB,EAA+B,EAAE;YAC1D,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE;gBAC5D,OAAO,KAAK,CAAC,WAAW,CAAC,CAAC;aAC3B;YACD,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC7D,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,WAAW,CACxC,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IA6QD,YAAY,iCAAyC,EAAE,OAAO,GAAG,KAAK;QACpE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChE,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QA7QxC,aAAQ,GAGJ;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;aAC9B;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,6BAA6B;oBACnC,KAAK,EAAE;wBACL,WAAW,EAAE,CAAC,IAAiB,EAAE,EAAE,CACjC,0CAA0C,IAAI,CAAC,aAAa,cAAc,IAAI,CAAC,EAAE,EAAE;qBACtF;oBACD,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,eAAe;4BACrB,EAAE,EAAE;gCACF,WAAW,EAAE,CAAC,IAAkB,EAAE,EAAE,CAClC,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,WAAW,EAAE;6BAChD;4BACD,KAAK,EAAE;gCACL,WAAW,EAAE,CAAC,IAAkB,EAAE,EAAE;oCAClC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;yCACpD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC;yCAChD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oCAEnC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;wCACrB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qCAC1B;yCAAM;wCACL,OAAO,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;6CACxD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC;6CACxB,IAAI,CAAC,GAAG,CAAC,CAAC;qCACd;gCACH,CAAC;6BACF;4BACD,IAAI,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC;4BAC3B,MAAM,EAAE;gCACN,WAAW,EAAE,CAAC,IAAkB,EAAE,EAAE;oCAElC,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CACrC,IAAI,CAAC,WAAW,IAAI,EAAE,CACvB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;oCAE1C,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE;wCAC/B,OAAO,GAAG,CAAC;qCACZ;oCAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;oCACjD,OAAO,YAAY,GAAG,IAAI,CAAC;gCAC7B,CAAC;6BACF;4BACD,IAAI,EAAE,EAAE;4BACR,IAAI,EAAE;gCACJ,WAAW,EAAE,CAAC,IAAkB,EAAE,EAAE,CAAC,CAAC;oCACpC,GAAG,IAAA,sCAA6B,EAC9B,UAAU,EACV,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAC1C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CACrC,EACD,CAAC,GAAG,EAAE;wCACJ,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;6CACpD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;6CACzC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;wCAC7B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;oCAC3B,CAAC,CAAC,EAAE,CACL;oCACD,GAAG,IAAA,sCAA6B,EAC9B,UAAU,EACV,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAC1C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAC9B,EACD,CAAC,GAAG,EAAE;wCACJ,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;6CACpD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;6CAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;wCAC7B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;oCAC3B,CAAC,CAAC,EAAE,CACL;oCACD,GAAG,IAAA,sCAA6B,EAC9B,MAAM,EACN,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAC1C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAC1B,EACD,CAAC,GAAG,EAAE;wCACJ,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;6CACpD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;6CAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;wCAC7B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;oCAC3B,CAAC,CAAC,EAAE,CACL;oCACD,GAAG,IAAA,sCAA6B,EAC9B,OAAO,EACP,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAC1C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAC1B,EACD,CAAC,GAAG,EAAE;wCACJ,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;6CACpD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;6CAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;wCAC7B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;oCAC3B,CAAC,CAAC,EAAE,CACL;oCACD,GAAG,IAAA,sCAA6B,EAC9B,SAAS,EACT,CAAC,CAAC,IAAI,CACJ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAC1C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAC7B,CACF,EACD,CAAC,GAAG,EAAE;wCACJ,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;6CACpD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;6CACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;wCAC7B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;oCAC3B,CAAC,CAAC,EAAE,CACL;oCACD,GAAG,IAAA,sCAA6B,EAC9B,UAAU,EACV,CAAC,CAAC,IAAI,CACJ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAC1C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAC7B,CACF,EACD,CAAC,GAAG,EAAE;wCACJ,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;6CACpD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;6CACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;wCAC7B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;oCAC3B,CAAC,CAAC,EAAE,CACL;oCACD,GAAG,IAAA,sCAA6B,EAC9B,aAAa,EACb,CAAC,CAAC,IAAI,CACJ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAC1C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAChC,CACF,EACD,CAAC,GAAG,EAAE;wCACJ,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;6CACpD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;6CACpC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;wCAC7B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;oCAC3B,CAAC,CAAC,EAAE,CACL;iCACF,CAAC;gCACF,IAAI,EAAE,+CAAsC;6BAC7C;4BACD,eAAe,EAAE,EAAE;4BACnB,YAAY,EAAE;gCACZ;oCACE,IAAI,EAAE;wCACJ,WAAW,EAAE,CACX,IAAmD,EACnD,EAAE;4CACF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;4CAC1D,MAAM,gBAAgB,GAAG,QAAQ;iDAC9B,GAAG,CAAC,CAAC,OAAkC,EAAE,EAAE,WAC1C,OAAA,MAAA,OAAO,CAAC,WAAW,0CAAE,QAAQ,EAAE,CAAA,EAAA,CAChC;iDACA,MAAM,CACL,CAAC,WAA+B,EAAE,EAAE,CAClC,WAAW,KAAK,SAAS,CAC5B,CAAC;4CAEJ,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wCACrC,CAAC;qCACF;oCACD,KAAK,EAAE,KAAK;iCACb;gCACD;oCACE,IAAI,EAAE;wCACJ,WAAW,EAAE,CACX,IAAmD,EACnD,EAAE;4CACF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;4CAC1D,MAAM,MAAM,GAAG,QAAQ;iDACpB,GAAG,CAAC,CAAC,OAAkC,EAAE,EAAE,WAC1C,OAAA,MAAA,OAAO,CAAC,iBAAiB,0CAAE,QAAQ,EAAE,CAAA,EAAA,CACtC;iDACA,MAAM,CACL,CAAC,iBAAqC,EAAE,EAAE,CACxC,iBAAiB,KAAK,SAAS,CAClC,CAAC;4CAEJ,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wCAC3B,CAAC;qCACF;oCACD,KAAK,EAAE,WAAW;iCACnB;6BACF;4BACD,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE;wCACN,WAAW,EAAE,CACX,IAAgD,EAChD,EAAE;4CACF,IAAI,IAAI,CAAC,iBAAiB,KAAK,GAAG,EAAE;gDAClC,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;6CAC5C;4CAED,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CACrC,IAAI,CAAC,WAAW,IAAI,EAAE,CACvB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;4CAE1C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;4CAEjD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE;gDAE/B,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;6CAC5C;iDAAM,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE;gDACnC,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC;6CAC3C;iDAAM,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE;gDACtC,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;6CAC5C;iDAAM;gDACL,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;6CAC5C;wCACH,CAAC;qCACF;oCACD,SAAS,EAAE;wCACT,WAAW,EAAE,CACX,IAAmD,EACnD,EAAE,CAAC,IAAI,CAAC,oBAAoB;qCAC/B;oCACD,UAAU,EAAE,EAAC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAC;iCAC3D;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,GAA4B,EAAE;oBACzC,OAAO;wBACL,cAAc,EAAE;4BACd;gCACE,IAAI,EAAE,wBAAwB;gCAC9B,IAAI,EAAE;oCACJ,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;oCAC9C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa;oCACzD,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;oCAC/B,eAAe,EACb,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe;oCACnD,wBAAwB,EACtB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,wBAAwB;oCAC5D,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY;oCAC5D,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ;oCACpD,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;wCAC7C,gBAAgB;wCAChB,iBAAiB;qCAClB,CAAC;iCACH;6BACF;yBACF;wBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAC,CAAC;qBACzC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;QAIA,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAChD,CAAC;CACF;AApSD,sDAoSC"}