@mitre/hdf-converters 2.13.0 → 3.0.1

package/lib/src/asff-mapper/case-trivy.js

@@ -1,101 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getTrivy = getTrivy;
-const html_entities_1 = require("html-entities");
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const global_1 = require("../utils/global");
-function findingId(finding) {
-    const generatorId = _.get(finding, 'GeneratorId');
-    const cveId = _.get(finding, 'Resources[0].Details.Other.CVE ID');
-    if (typeof cveId === 'string') {
-        return (0, html_entities_1.encode)(`${generatorId}/${cveId}`);
-    }
-    else {
-        const id = _.get(finding, 'Id');
-        return (0, html_entities_1.encode)(`${generatorId}/${id}`);
-    }
-}
-function findingNistTag(finding) {
-    const cveId = _.get(finding, 'Resources[0].Details.Other.CVE ID');
-    if (typeof cveId === 'string') {
-        return global_1.DEFAULT_UPDATE_REMEDIATION_NIST_TAGS;
-    }
-    else {
-        return [];
-    }
-}
-function subfindingsStatus() {
-    return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
-}
-function subfindingsMessage(finding) {
-    const cveId = _.get(finding, 'Resources[0].Details.Other.CVE ID');
-    if (typeof cveId === 'string') {
-        const patchedPackage = _.get(finding, 'Resources[0].Details.Other.Patched Package');
-        const patchedVersionMessage = patchedPackage.length === 0
-            ? 'There is no patched version of the package.'
-            : `The package has been patched since version(s): ${patchedPackage}.`;
-        return `For package ${_.get(finding, 'Resources[0].Details.Other.PkgName')}, the current version that is installed is ${_.get(finding, 'Resources[0].Details.Other.Installed Package')}.  ${patchedVersionMessage}`;
-    }
-    else {
-        return undefined;
-    }
-}
-function productName() {
-    return 'Aqua Security - Trivy';
-}
-function titlePrefix() {
-    return '';
-}
-function filename() {
-    return `${productName()}.json`;
-}
-function meta() {
-    return { name: 'Trivy', title: 'Trivy Findings' };
-}
-function getTrivy() {
-    return {
-        findingId,
-        findingNistTag,
-        subfindingsStatus,
-        subfindingsMessage,
-        titlePrefix,
-        productName,
-        filename,
-        meta
-    };
-}
-//# sourceMappingURL=case-trivy.js.map

package/lib/src/asff-mapper/case-trivy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"case-trivy.js","sourceRoot":"","sources":["../../../src/asff-mapper/case-trivy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoEA,4BAWC;AA/ED,iDAAqC;AACrC,uCAAkC;AAClC,0CAA4B;AAC5B,4CAAqE;AAErE,SAAS,SAAS,CAAC,OAAgB;IACjC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAA,sBAAM,EAAC,GAAG,WAAW,IAAI,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,IAAA,sBAAM,EAAC,GAAG,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAAgB;IACtC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,6CAAoC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;AAC7C,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAC1B,OAAO,EACP,4CAA4C,CACxB,CAAC;QACvB,MAAM,qBAAqB,GACzB,cAAc,CAAC,MAAM,KAAK,CAAC;YACzB,CAAC,CAAC,6CAA6C;YAC/C,CAAC,CAAC,kDAAkD,cAAc,GAAG,CAAC;QAC1E,OAAO,eAAe,CAAC,CAAC,GAAG,CACzB,OAAO,EACP,oCAAoC,CACrC,8CAA8C,CAAC,CAAC,GAAG,CAClD,OAAO,EACP,8CAA8C,CAC/C,MAAM,qBAAqB,EAAE,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,GAAG,WAAW,EAAE,OAAO,CAAC;AACjC,CAAC;AAED,SAAS,IAAI;IACX,OAAO,EAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAC,CAAC;AAClD,CAAC;AAED,SAAgB,QAAQ;IACtB,OAAO;QACL,SAAS;QACT,cAAc;QACd,iBAAiB;QACjB,kBAAkB;QAClB,WAAW;QACX,WAAW;QACX,QAAQ;QACR,IAAI;KACL,CAAC;AACJ,CAAC","sourcesContent":["import {encode} from 'html-entities';\nimport {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {DEFAULT_UPDATE_REMEDIATION_NIST_TAGS} from '../utils/global';\n\nfunction findingId(finding: unknown): string {\n  const generatorId = _.get(finding, 'GeneratorId');\n  const cveId = _.get(finding, 'Resources[0].Details.Other.CVE ID');\n  if (typeof cveId === 'string') {\n    return encode(`${generatorId}/${cveId}`);\n  } else {\n    const id = _.get(finding, 'Id');\n    return encode(`${generatorId}/${id}`);\n  }\n}\n\nfunction findingNistTag(finding: unknown): string[] {\n  const cveId = _.get(finding, 'Resources[0].Details.Other.CVE ID');\n  if (typeof cveId === 'string') {\n    return DEFAULT_UPDATE_REMEDIATION_NIST_TAGS;\n  } else {\n    return [];\n  }\n}\n\nfunction subfindingsStatus(): ExecJSON.ControlResultStatus {\n  return ExecJSON.ControlResultStatus.Failed;\n}\n\nfunction subfindingsMessage(finding: unknown): string | undefined {\n  const cveId = _.get(finding, 'Resources[0].Details.Other.CVE ID');\n  if (typeof cveId === 'string') {\n    const patchedPackage = _.get(\n      finding,\n      'Resources[0].Details.Other.Patched Package'\n    ) as unknown as string;\n    const patchedVersionMessage =\n      patchedPackage.length === 0\n        ? 'There is no patched version of the package.'\n        : `The package has been patched since version(s): ${patchedPackage}.`;\n    return `For package ${_.get(\n      finding,\n      'Resources[0].Details.Other.PkgName'\n    )}, the current version that is installed is ${_.get(\n      finding,\n      'Resources[0].Details.Other.Installed Package'\n    )}.  ${patchedVersionMessage}`;\n  } else {\n    return undefined;\n  }\n}\n\nfunction productName() {\n  return 'Aqua Security - Trivy';\n}\n\nfunction titlePrefix() {\n  return '';\n}\n\nfunction filename() {\n  return `${productName()}.json`;\n}\n\nfunction meta() {\n  return {name: 'Trivy', title: 'Trivy Findings'};\n}\n\nexport function getTrivy(): Record<string, (...inputs: any) => any> {\n  return {\n    findingId,\n    findingNistTag,\n    subfindingsStatus,\n    subfindingsMessage,\n    titlePrefix,\n    productName,\n    filename,\n    meta\n  };\n}\n"]}

package/lib/src/aws-config-mapper.d.ts

@@ -1,27 +0,0 @@
-import { ConfigRule, ConfigService, ConfigServiceClientConfig } from '@aws-sdk/client-config-service';
-import { ExecJSON } from 'inspecjs';
-export declare class AwsConfigMapper {
-    configService: ConfigService;
-    issues: Promise<ConfigRule[]>;
-    results: ExecJSON.ControlResult[][];
-    constructor(options: ConfigServiceClientConfig, verifySSLCertificates?: boolean, certificate?: string);
-    private delay;
-    private getAllConfigRules;
-    private getConfigRulePage;
-    private getResults;
-    private appendResourceNamesToResults;
-    private extractResourceNamesFromIds;
-    private getCodeDesc;
-    private getRunTime;
-    private getStatus;
-    private getMessage;
-    private fetchAllComplianceInfo;
-    private hdfTags;
-    private checkText;
-    private hdfDescriptions;
-    private getAccountId;
-    private getControls;
-    private getImpact;
-    toHdf(): Promise<ExecJSON.Execution>;
-}
-//# sourceMappingURL=aws-config-mapper.d.ts.map

package/lib/src/aws-config-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"aws-config-mapper.d.ts","sourceRoot":"","sources":["../../src/aws-config-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,UAAU,EACV,aAAa,EACb,yBAAyB,EAK1B,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAalC,qBAAa,eAAe;IAC1B,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9B,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;gBAElC,OAAO,EAAE,yBAAyB,EAClC,qBAAqB,UAAO,EAC5B,WAAW,CAAC,EAAE,MAAM;IAkBtB,OAAO,CAAC,KAAK;YAIC,iBAAiB;YA0BjB,iBAAiB;YAOjB,UAAU;YAkFV,4BAA4B;YA0B5B,2BAA2B;IAmDzC,OAAO,CAAC,WAAW;IAgBnB,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,SAAS;IAUjB,OAAO,CAAC,UAAU;YAcJ,sBAAsB;IAuBpC,OAAO,CAAC,OAAO;IAkBf,OAAO,CAAC,SAAS;IAqBjB,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,YAAY;YASN,WAAW;IAwBzB,OAAO,CAAC,SAAS;IAQJ,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;CAkClD"}

package/lib/src/aws-config-mapper.js

@@ -1,395 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AwsConfigMapper = void 0;
-const client_config_service_1 = require("@aws-sdk/client-config-service");
-const node_http_handler_1 = require("@smithy/node-http-handler");
-const https_1 = __importDefault(require("https"));
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const AwsConfigMapping_1 = require("./mappings/AwsConfigMapping");
-const NOT_APPLICABLE_MSG = 'No AWS resources found to evaluate compliance for this rule';
-const INSUFFICIENT_DATA_MSG = 'Not enough data has been collected to determine compliance yet.';
-const NAME = 'AWS Config';
-const AWS_CONFIG_MAPPING = new AwsConfigMapping_1.AwsConfigMapping();
-class AwsConfigMapper {
-    configService;
-    issues;
-    results;
-    constructor(options, verifySSLCertificates = true, certificate) {
-        const clientOptions = {
-            ...options,
-            requestHandler: new node_http_handler_1.NodeHttpHandler({
-                httpsAgent: new https_1.default.Agent({
-                    // Disable HTTPS verification if requested
-                    rejectUnauthorized: verifySSLCertificates,
-                    // Pass an SSL certificate to trust
-                    ca: certificate
-                })
-            })
-        };
-        this.configService = new client_config_service_1.ConfigService(clientOptions);
-        this.results = [];
-        this.issues = this.getAllConfigRules();
-    }
-    delay(ms) {
-        return new Promise((resolve) => setTimeout(resolve, ms));
-    }
-    async getAllConfigRules() {
-        let params = {
-            ConfigRuleNames: [],
-            NextToken: ''
-        };
-        const configRules = [];
-        let response = await this.getConfigRulePage(params);
-        if (response.ConfigRules === undefined) {
-            throw new Error('No data was returned');
-        }
-        else {
-            while (response !== undefined && response.ConfigRules !== undefined) {
-                response.ConfigRules.forEach((rule) => {
-                    configRules.push(rule);
-                });
-                if (response.NextToken) {
-                    params = _.set(params, 'NextToken', response.NextToken);
-                }
-                else {
-                    break;
-                }
-                response = await this.getConfigRulePage(params);
-            }
-        }
-        this.results = await this.getResults(configRules);
-        return configRules;
-    }
-    async getConfigRulePage(params) {
-        await this.delay(150);
-        return this.configService.describeConfigRules(params);
-    }
-    async getResults(configRules) {
-        const complianceResults = await this.fetchAllComplianceInfo(configRules);
-        const ruleData = [];
-        const allRulesResolved = [];
-        for (const configRule of configRules) {
-            const result = [];
-            let params = {
-                ConfigRuleName: configRule.ConfigRuleName || '',
-                Limit: 100
-            };
-            await this.delay(150);
-            let response = await this.configService.getComplianceDetailsByConfigRule(params);
-            let ruleResults = response.EvaluationResults || [];
-            allRulesResolved.push(...ruleResults);
-            while (response.NextToken !== undefined) {
-                params = _.set(params, 'NextToken', response.NextToken);
-                await this.delay(150);
-                response =
-                    await this.configService.getComplianceDetailsByConfigRule(params);
-                ruleResults = ruleResults?.concat(response.EvaluationResults || []);
-                allRulesResolved.push(...ruleResults);
-            }
-            ruleResults.forEach((evaluation) => {
-                const hdfResult = {
-                    code_desc: this.getCodeDesc(evaluation),
-                    start_time: evaluation.ConfigRuleInvokedTime?.toISOString() || '',
-                    run_time: this.getRunTime(evaluation),
-                    status: this.getStatus(evaluation),
-                    message: this.getMessage(evaluation, this.getCodeDesc(evaluation), this.getStatus(evaluation))
-                };
-                result.push(hdfResult);
-                const currentDate = new Date().toISOString();
-                if (result.length === 0) {
-                    switch (complianceResults.find((complianceResult) => complianceResult.ConfigRuleName === configRule.ConfigRuleName)?.Compliance?.ComplianceType) {
-                        case 'NOT_APPLICABLE':
-                            return [
-                                {
-                                    run_time: 0,
-                                    code_desc: NOT_APPLICABLE_MSG,
-                                    skip_message: NOT_APPLICABLE_MSG,
-                                    start_time: currentDate,
-                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Skipped
-                                }
-                            ];
-                        case 'INSUFFICIENT_DATA':
-                            return [
-                                {
-                                    run_time: 0,
-                                    code_desc: INSUFFICIENT_DATA_MSG,
-                                    skip_message: INSUFFICIENT_DATA_MSG,
-                                    start_time: currentDate,
-                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Skipped
-                                }
-                            ];
-                        default:
-                            return [];
-                    }
-                }
-                else {
-                    return ruleData.push(result);
-                }
-            });
-        }
-        return this.appendResourceNamesToResults(await Promise.all(ruleData), await this.extractResourceNamesFromIds(allRulesResolved));
-    }
-    async appendResourceNamesToResults(completedControlResults, extractedResourceNames) {
-        return completedControlResults.map((completedControlResult) => completedControlResult.map((completedControl) => {
-            for (const extractedResourceName in extractedResourceNames) {
-                if (completedControl.code_desc.indexOf(JSON.stringify(extractedResourceName)
-                    .replace(/\"/gi, '')
-                    .replace(/{/gi, '')
-                    .replace(/}/gi, '')) !== -1) {
-                    return {
-                        ...completedControl,
-                        code_desc: `${completedControl.code_desc}, resource_name: ${extractedResourceNames[extractedResourceName]}`
-                    };
-                }
-            }
-            return completedControl;
-        }));
-    }
-    async extractResourceNamesFromIds(evaluationResults) {
-        // Map of resource types to resource IDs {resourceType: ResourceId[]}
-        const resourceMap = {};
-        // Map of resource IDs to resource names
-        const resolvedResourcesMap = {};
-        // Extract resource Ids
-        evaluationResults.forEach((result) => {
-            const resourceType = client_config_service_1.ResourceType[_.get(result, 'EvaluationResultIdentifier.EvaluationResultQualifier.ResourceType')];
-            const resourceId = _.get(result, 'EvaluationResultIdentifier.EvaluationResultQualifier.ResourceId');
-            if (resourceType in resourceMap) {
-                if (!resourceMap[resourceType]?.includes(resourceId) &&
-                    typeof resourceId === 'string') {
-                    resourceMap[resourceType]?.push(resourceId);
-                }
-            }
-            else {
-                resourceMap[resourceType] = [resourceId];
-            }
-        });
-        // Resolve resource names from AWS
-        let resourceType;
-        for (resourceType in resourceMap) {
-            const resourceIDSlices = _.chunk(resourceMap[resourceType], 20);
-            for (const slice of resourceIDSlices) {
-                await this.delay(150);
-                const resources = await this.configService.listDiscoveredResources({
-                    resourceType: resourceType,
-                    resourceIds: slice
-                });
-                resources.resourceIdentifiers?.forEach((resource) => {
-                    if (resource.resourceId && resource.resourceName) {
-                        resolvedResourcesMap[resource.resourceId] = resource.resourceName;
-                    }
-                });
-            }
-        }
-        return resolvedResourcesMap;
-    }
-    getCodeDesc(result) {
-        let output = '';
-        if (result.EvaluationResultIdentifier !== undefined &&
-            result.EvaluationResultIdentifier.EvaluationResultQualifier !== undefined) {
-            output = JSON.stringify(result.EvaluationResultIdentifier.EvaluationResultQualifier)
-                .replace(/\"/gi, '')
-                .replace(/{/gi, '')
-                .replace(/}/gi, '');
-        }
-        return output;
-    }
-    getRunTime(result) {
-        let diff = 0;
-        if (result.ResultRecordedTime !== undefined &&
-            result.ConfigRuleInvokedTime !== undefined) {
-            diff =
-                (result.ResultRecordedTime.getTime() -
-                    result.ConfigRuleInvokedTime.getTime()) /
-                    1000;
-        }
-        return diff;
-    }
-    getStatus(result) {
-        if (result.ComplianceType === 'COMPLIANT') {
-            return inspecjs_1.ExecJSON.ControlResultStatus.Passed;
-        }
-        else if (result.ComplianceType === 'NON_COMPLIANT') {
-            return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
-        }
-        else {
-            return inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
-        }
-    }
-    getMessage(result, codeDesc, status) {
-        if (status === inspecjs_1.ExecJSON.ControlResultStatus.Failed) {
-            return `${codeDesc}: ${result.Annotation || 'Rule does not pass rule compliance'}`;
-        }
-        else {
-            return undefined;
-        }
-    }
-    async fetchAllComplianceInfo(configRules) {
-        const complianceResults = [];
-        // Should slice config rules into arrays of max size: 25 and make one request for each slice
-        const configRuleSlices = _.chunk(configRules, 25);
-        for (const slice of configRuleSlices) {
-            await this.delay(150);
-            const response = await this.configService.describeComplianceByConfigRule({
-                ConfigRuleNames: slice.map((rule) => rule.ConfigRuleName || '')
-            });
-            if (response.ComplianceByConfigRules === undefined) {
-                throw new Error('No compliance data was returned');
-            }
-            else {
-                response.ComplianceByConfigRules?.forEach((compliance) => complianceResults.push(compliance));
-            }
-        }
-        return complianceResults;
-    }
-    // eslint-disable-next-line @typescript-eslint/ban-types
-    hdfTags(configRule) {
-        let result = {};
-        const sourceIdentifier = configRule.Source?.SourceIdentifier;
-        result = _.set(result, 'nist', []);
-        let defaultMatch = [];
-        if (sourceIdentifier !== undefined) {
-            defaultMatch = AWS_CONFIG_MAPPING.searchNIST([sourceIdentifier]);
-        }
-        if (Array.isArray(defaultMatch) && defaultMatch.length !== 0) {
-            result = _.set(result, 'nist', _.get(result, 'nist').concat(defaultMatch));
-        }
-        return result;
-    }
-    checkText(configRule) {
-        let params = [];
-        if (configRule.InputParameters !== undefined &&
-            configRule.InputParameters !== '{}') {
-            params = configRule.InputParameters.replace(/{/gi, '')
-                .replace(/}/gi, '')
-                .split(',');
-        }
-        const checkText = [];
-        checkText.push(`ARN: ${configRule.ConfigRuleArn || 'N/A'}`);
-        checkText.push(`Source Identifier: ${configRule.Source?.SourceIdentifier || 'N/A'}`);
-        if (params.length !== 0) {
-            checkText.push(`${params.join('<br/>').replace(/\"/gi, '')}`);
-        }
-        return checkText.join('<br/>');
-    }
-    hdfDescriptions(configRule) {
-        return [
-            {
-                data: this.checkText(configRule),
-                label: 'check'
-            }
-        ];
-    }
-    getAccountId(arn) {
-        const matches = arn.match(/:(\d{12}):config-rule/);
-        if (matches === null) {
-            return 'no-account-id';
-        }
-        else {
-            return matches[0];
-        }
-    }
-    async getControls() {
-        let index = 0;
-        return (await this.issues).map((issue) => {
-            const control = {
-                id: issue.ConfigRuleId || '',
-                title: `${this.getAccountId(issue.ConfigRuleArn || '')} - ${issue.ConfigRuleName}`
-                    .replace(/:/gi, '')
-                    .replace(/config-rule/gi, ''),
-                desc: issue.Description || null,
-                impact: this.getImpact(issue),
-                tags: this.hdfTags(issue),
-                descriptions: this.hdfDescriptions(issue),
-                refs: [],
-                source_location: { ref: issue.ConfigRuleArn, line: 1 },
-                code: '',
-                results: this.results[index]
-            };
-            index++;
-            return control;
-        });
-    }
-    getImpact(issue) {
-        if (_.get(issue, 'compliance') === 'NOT_APPLICABLE') {
-            return 0;
-        }
-        else {
-            return 0.5;
-        }
-    }
-    async toHdf() {
-        const hdf = {
-            platform: {
-                name: 'Heimdall Tools',
-                release: package_json_1.version,
-                target_id: ''
-            },
-            version: package_json_1.version,
-            statistics: {
-                //aws_config_sdk_version: ConfigService., // How do i get the sdk version?
-                duration: null
-            },
-            profiles: [
-                {
-                    name: NAME,
-                    version: '',
-                    title: NAME,
-                    maintainer: null,
-                    summary: NAME,
-                    license: null,
-                    copyright: null,
-                    copyright_email: null,
-                    supports: [],
-                    attributes: [],
-                    depends: [],
-                    groups: [],
-                    status: 'loaded',
-                    controls: await this.getControls(),
-                    sha256: ''
-                }
-            ]
-        };
-        return hdf;
-    }
-}
-exports.AwsConfigMapper = AwsConfigMapper;
-//# sourceMappingURL=aws-config-mapper.js.map

package/lib/src/aws-config-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"aws-config-mapper.js","sourceRoot":"","sources":["../../src/aws-config-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0EASwC;AACxC,iEAA0D;AAC1D,kDAA0B;AAC1B,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,kEAA6D;AAE7D,MAAM,kBAAkB,GACtB,6DAA6D,CAAC;AAChE,MAAM,qBAAqB,GACzB,iEAAiE,CAAC;AACpE,MAAM,IAAI,GAAG,YAAY,CAAC;AAE1B,MAAM,kBAAkB,GAAG,IAAI,mCAAgB,EAAE,CAAC;AAElD,MAAa,eAAe;IAC1B,aAAa,CAAgB;IAC7B,MAAM,CAAwB;IAC9B,OAAO,CAA6B;IACpC,YACE,OAAkC,EAClC,qBAAqB,GAAG,IAAI,EAC5B,WAAoB;QAEpB,MAAM,aAAa,GAA8B;YAC/C,GAAG,OAAO;YACV,cAAc,EAAE,IAAI,mCAAe,CAAC;gBAClC,UAAU,EAAE,IAAI,eAAK,CAAC,KAAK,CAAC;oBAC1B,0CAA0C;oBAC1C,kBAAkB,EAAE,qBAAqB;oBACzC,mCAAmC;oBACnC,EAAE,EAAE,WAAW;iBAChB,CAAC;aACH,CAAC;SACH,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,IAAI,qCAAa,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,MAAM,GAAoC;YAC5C,eAAe,EAAE,EAAE;YACnB,SAAS,EAAE,EAAE;SACd,CAAC;QACF,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACpE,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;oBACpC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACvB,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC1D,CAAC;qBAAM,CAAC;oBACN,MAAM;gBACR,CAAC;gBACD,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,MAAuC;QAEvC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,WAAyB;QAEzB,MAAM,iBAAiB,GACrB,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACjD,MAAM,QAAQ,GAA+B,EAAE,CAAC;QAChD,MAAM,gBAAgB,GAAuB,EAAE,CAAC;QAChD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,MAAM,GAA6B,EAAE,CAAC;YAC5C,IAAI,MAAM,GAAG;gBACX,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,EAAE;gBAC/C,KAAK,EAAE,GAAG;aACX,CAAC;YACF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,QAAQ,GACV,MAAM,IAAI,CAAC,aAAa,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,WAAW,GAAG,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;YACnD,gBAAgB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YACtC,OAAO,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACxD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACtB,QAAQ;oBACN,MAAM,IAAI,CAAC,aAAa,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC;gBACpE,WAAW,GAAG,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;gBACpE,gBAAgB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YACxC,CAAC;YACD,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;gBACjC,MAAM,SAAS,GAA2B;oBACxC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;oBACvC,UAAU,EAAE,UAAU,CAAC,qBAAqB,EAAE,WAAW,EAAE,IAAI,EAAE;oBACjE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;oBACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;oBAClC,OAAO,EAAE,IAAI,CAAC,UAAU,CACtB,UAAU,EACV,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAC5B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAC3B;iBACF,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACvB,MAAM,WAAW,GAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxB,QACE,iBAAiB,CAAC,IAAI,CACpB,CAAC,gBAAgB,EAAE,EAAE,CACnB,gBAAgB,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc,CAChE,EAAE,UAAU,EAAE,cAAc,EAC7B,CAAC;wBACD,KAAK,gBAAgB;4BACnB,OAAO;gCACL;oCACE,QAAQ,EAAE,CAAC;oCACX,SAAS,EAAE,kBAAkB;oCAC7B,YAAY,EAAE,kBAAkB;oCAChC,UAAU,EAAE,WAAW;oCACvB,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,OAAO;iCAC7C;6BACF,CAAC;wBACJ,KAAK,mBAAmB;4BACtB,OAAO;gCACL;oCACE,QAAQ,EAAE,CAAC;oCACX,SAAS,EAAE,qBAAqB;oCAChC,YAAY,EAAE,qBAAqB;oCACnC,UAAU,EAAE,WAAW;oCACvB,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,OAAO;iCAC7C;6BACF,CAAC;wBACJ;4BACE,OAAO,EAAE,CAAC;oBACd,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,4BAA4B,CACtC,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAC3B,MAAM,IAAI,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,CACzD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,4BAA4B,CACxC,uBAAmD,EACnD,sBAA8C;QAE9C,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC,sBAAsB,EAAE,EAAE,CAC5D,sBAAsB,CAAC,GAAG,CAAC,CAAC,gBAAgB,EAAE,EAAE;YAC9C,KAAK,MAAM,qBAAqB,IAAI,sBAAsB,EAAE,CAAC;gBAC3D,IACE,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAChC,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC;qBAClC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;qBACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;qBAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CACtB,KAAK,CAAC,CAAC,EACR,CAAC;oBACD,OAAO;wBACL,GAAG,gBAAgB;wBACnB,SAAS,EAAE,GAAG,gBAAgB,CAAC,SAAS,oBAAoB,sBAAsB,CAAC,qBAAqB,CAAC,EAAE;qBAC5G,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,gBAAgB,CAAC;QAC1B,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,2BAA2B,CACvC,iBAAqC;QAErC,qEAAqE;QACrE,MAAM,WAAW,GAA4C,EAAE,CAAC;QAChE,wCAAwC;QACxC,MAAM,oBAAoB,GAA2B,EAAE,CAAC;QACxD,uBAAuB;QACvB,iBAAiB,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACnC,MAAM,YAAY,GAChB,oCAAY,CACV,CAAC,CAAC,GAAG,CACH,MAAM,EACN,mEAAmE,CACvC,CAC/B,CAAC;YACJ,MAAM,UAAU,GAAW,CAAC,CAAC,GAAG,CAC9B,MAAM,EACN,iEAAiE,CAC7C,CAAC;YACvB,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;gBAChC,IACE,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC;oBAChD,OAAO,UAAU,KAAK,QAAQ,EAC9B,CAAC;oBACD,WAAW,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC,CAAC,CAAC;QACH,kCAAkC;QAClC,IAAI,YAA0B,CAAC;QAC/B,KAAK,YAAY,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;YAChE,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACtB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC;oBACjE,YAAY,EAAE,YAAY;oBAC1B,WAAW,EAAE,KAAK;iBACnB,CAAC,CAAC;gBACH,SAAS,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;oBAClD,IAAI,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;wBACjD,oBAAoB,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC;oBACpE,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAEO,WAAW,CAAC,MAAwB;QAC1C,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IACE,MAAM,CAAC,0BAA0B,KAAK,SAAS;YAC/C,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,KAAK,SAAS,EACzE,CAAC;YACD,MAAM,GAAG,IAAI,CAAC,SAAS,CACrB,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAC5D;iBACE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;iBACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;iBAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,UAAU,CAAC,MAAwB;QACzC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IACE,MAAM,CAAC,kBAAkB,KAAK,SAAS;YACvC,MAAM,CAAC,qBAAqB,KAAK,SAAS,EAC1C,CAAC;YACD,IAAI;gBACF,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE;oBAClC,MAAM,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC;oBACzC,IAAI,CAAC;QACT,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,SAAS,CAAC,MAAwB;QACxC,IAAI,MAAM,CAAC,cAAc,KAAK,WAAW,EAAE,CAAC;YAC1C,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC7C,CAAC;aAAM,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,EAAE,CAAC;YACrD,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC9C,CAAC;IACH,CAAC;IAEO,UAAU,CAChB,MAAwB,EACxB,QAAgB,EAChB,MAAoC;QAEpC,IAAI,MAAM,KAAK,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC;YACnD,OAAO,GAAG,QAAQ,KAChB,MAAM,CAAC,UAAU,IAAI,oCACvB,EAAE,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,WAAyB;QAEzB,MAAM,iBAAiB,GAA6B,EAAE,CAAC;QACvD,4FAA4F;QAC5F,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAClD,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,8BAA8B,CAAC;gBACvE,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;aAChE,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACvD,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CACnC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,wDAAwD;IAChD,OAAO,CAAC,UAAsB;QACpC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC;QAC7D,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,YAAY,GAAoB,EAAE,CAAC;QACvC,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,GAAG,CAAC,CAAC,GAAG,CACZ,MAAM,EACN,MAAM,EACL,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAyB,CAAC,MAAM,CAAC,YAAY,CAAC,CACpE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,SAAS,CAAC,UAAsB;QACtC,IAAI,MAAM,GAAU,EAAE,CAAC;QACvB,IACE,UAAU,CAAC,eAAe,KAAK,SAAS;YACxC,UAAU,CAAC,eAAe,KAAK,IAAI,EACnC,CAAC;YACD,MAAM,GAAG,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;iBACnD,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;iBAClB,KAAK,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,SAAS,CAAC,IAAI,CAAC,QAAQ,UAAU,CAAC,aAAa,IAAI,KAAK,EAAE,CAAC,CAAC;QAC5D,SAAS,CAAC,IAAI,CACZ,sBAAsB,UAAU,CAAC,MAAM,EAAE,gBAAgB,IAAI,KAAK,EAAE,CACrE,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAEO,eAAe,CAAC,UAAsB;QAC5C,OAAO;YACL;gBACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;gBAChC,KAAK,EAAE,OAAO;aACf;SACF,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,GAAW;QAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,eAAe,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAiB,EAAE,EAAE;YACnD,MAAM,OAAO,GAAqB;gBAChC,EAAE,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;gBAC5B,KAAK,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,MACpD,KAAK,CAAC,cACR,EAAE;qBACC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;qBAClB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;gBAC/B,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;gBAC/B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAC7B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBACzB,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;gBACzC,IAAI,EAAE,EAAE;gBACR,eAAe,EAAE,EAAC,GAAG,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,EAAC;gBACpD,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;aAC7B,CAAC;YACF,KAAK,EAAE,CAAC;YACR,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,KAAiB;QACjC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,gBAAgB,EAAE,CAAC;YACpD,OAAO,CAAC,CAAC;QACX,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,GAAG,GAAuB;YAC9B,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,EAAE;aACd;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBACV,0EAA0E;gBAC1E,QAAQ,EAAE,IAAI;aACf;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,EAAE;oBACX,KAAK,EAAE,IAAI;oBACX,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE;oBAClC,MAAM,EAAE,EAAE;iBACX;aACF;SACF,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAraD,0CAqaC","sourcesContent":["import {\n  ComplianceByConfigRule,\n  ConfigRule,\n  ConfigService,\n  ConfigServiceClientConfig,\n  DescribeConfigRulesCommandInput,\n  DescribeConfigRulesResponse,\n  EvaluationResult,\n  ResourceType\n} from '@aws-sdk/client-config-service';\nimport {NodeHttpHandler} from '@smithy/node-http-handler';\nimport https from 'https';\nimport {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {AwsConfigMapping} from './mappings/AwsConfigMapping';\n\nconst NOT_APPLICABLE_MSG =\n  'No AWS resources found to evaluate compliance for this rule';\nconst INSUFFICIENT_DATA_MSG =\n  'Not enough data has been collected to determine compliance yet.';\nconst NAME = 'AWS Config';\n\nconst AWS_CONFIG_MAPPING = new AwsConfigMapping();\n\nexport class AwsConfigMapper {\n  configService: ConfigService;\n  issues: Promise<ConfigRule[]>;\n  results: ExecJSON.ControlResult[][];\n  constructor(\n    options: ConfigServiceClientConfig,\n    verifySSLCertificates = true,\n    certificate?: string\n  ) {\n    const clientOptions: ConfigServiceClientConfig = {\n      ...options,\n      requestHandler: new NodeHttpHandler({\n        httpsAgent: new https.Agent({\n          // Disable HTTPS verification if requested\n          rejectUnauthorized: verifySSLCertificates,\n          // Pass an SSL certificate to trust\n          ca: certificate\n        })\n      })\n    };\n    this.configService = new ConfigService(clientOptions);\n    this.results = [];\n    this.issues = this.getAllConfigRules();\n  }\n\n  private delay(ms: number): Promise<void> {\n    return new Promise((resolve) => setTimeout(resolve, ms));\n  }\n\n  private async getAllConfigRules(): Promise<ConfigRule[]> {\n    let params: DescribeConfigRulesCommandInput = {\n      ConfigRuleNames: [],\n      NextToken: ''\n    };\n    const configRules: ConfigRule[] = [];\n    let response = await this.getConfigRulePage(params);\n    if (response.ConfigRules === undefined) {\n      throw new Error('No data was returned');\n    } else {\n      while (response !== undefined && response.ConfigRules !== undefined) {\n        response.ConfigRules.forEach((rule) => {\n          configRules.push(rule);\n        });\n        if (response.NextToken) {\n          params = _.set(params, 'NextToken', response.NextToken);\n        } else {\n          break;\n        }\n        response = await this.getConfigRulePage(params);\n      }\n    }\n    this.results = await this.getResults(configRules);\n    return configRules;\n  }\n\n  private async getConfigRulePage(\n    params: DescribeConfigRulesCommandInput\n  ): Promise<DescribeConfigRulesResponse> {\n    await this.delay(150);\n    return this.configService.describeConfigRules(params);\n  }\n\n  private async getResults(\n    configRules: ConfigRule[]\n  ): Promise<ExecJSON.ControlResult[][]> {\n    const complianceResults: ComplianceByConfigRule[] =\n      await this.fetchAllComplianceInfo(configRules);\n    const ruleData: ExecJSON.ControlResult[][] = [];\n    const allRulesResolved: EvaluationResult[] = [];\n    for (const configRule of configRules) {\n      const result: ExecJSON.ControlResult[] = [];\n      let params = {\n        ConfigRuleName: configRule.ConfigRuleName || '',\n        Limit: 100\n      };\n      await this.delay(150);\n      let response =\n        await this.configService.getComplianceDetailsByConfigRule(params);\n      let ruleResults = response.EvaluationResults || [];\n      allRulesResolved.push(...ruleResults);\n      while (response.NextToken !== undefined) {\n        params = _.set(params, 'NextToken', response.NextToken);\n        await this.delay(150);\n        response =\n          await this.configService.getComplianceDetailsByConfigRule(params);\n        ruleResults = ruleResults?.concat(response.EvaluationResults || []);\n        allRulesResolved.push(...ruleResults);\n      }\n      ruleResults.forEach((evaluation) => {\n        const hdfResult: ExecJSON.ControlResult = {\n          code_desc: this.getCodeDesc(evaluation),\n          start_time: evaluation.ConfigRuleInvokedTime?.toISOString() || '',\n          run_time: this.getRunTime(evaluation),\n          status: this.getStatus(evaluation),\n          message: this.getMessage(\n            evaluation,\n            this.getCodeDesc(evaluation),\n            this.getStatus(evaluation)\n          )\n        };\n        result.push(hdfResult);\n        const currentDate: string = new Date().toISOString();\n        if (result.length === 0) {\n          switch (\n            complianceResults.find(\n              (complianceResult) =>\n                complianceResult.ConfigRuleName === configRule.ConfigRuleName\n            )?.Compliance?.ComplianceType\n          ) {\n            case 'NOT_APPLICABLE':\n              return [\n                {\n                  run_time: 0,\n                  code_desc: NOT_APPLICABLE_MSG,\n                  skip_message: NOT_APPLICABLE_MSG,\n                  start_time: currentDate,\n                  status: ExecJSON.ControlResultStatus.Skipped\n                }\n              ];\n            case 'INSUFFICIENT_DATA':\n              return [\n                {\n                  run_time: 0,\n                  code_desc: INSUFFICIENT_DATA_MSG,\n                  skip_message: INSUFFICIENT_DATA_MSG,\n                  start_time: currentDate,\n                  status: ExecJSON.ControlResultStatus.Skipped\n                }\n              ];\n            default:\n              return [];\n          }\n        } else {\n          return ruleData.push(result);\n        }\n      });\n    }\n\n    return this.appendResourceNamesToResults(\n      await Promise.all(ruleData),\n      await this.extractResourceNamesFromIds(allRulesResolved)\n    );\n  }\n\n  private async appendResourceNamesToResults(\n    completedControlResults: ExecJSON.ControlResult[][],\n    extractedResourceNames: Record<string, string>\n  ) {\n    return completedControlResults.map((completedControlResult) =>\n      completedControlResult.map((completedControl) => {\n        for (const extractedResourceName in extractedResourceNames) {\n          if (\n            completedControl.code_desc.indexOf(\n              JSON.stringify(extractedResourceName)\n                .replace(/\\\"/gi, '')\n                .replace(/{/gi, '')\n                .replace(/}/gi, '')\n            ) !== -1\n          ) {\n            return {\n              ...completedControl,\n              code_desc: `${completedControl.code_desc}, resource_name: ${extractedResourceNames[extractedResourceName]}`\n            };\n          }\n        }\n        return completedControl;\n      })\n    );\n  }\n\n  private async extractResourceNamesFromIds(\n    evaluationResults: EvaluationResult[]\n  ) {\n    // Map of resource types to resource IDs {resourceType: ResourceId[]}\n    const resourceMap: Partial<Record<ResourceType, string[]>> = {};\n    // Map of resource IDs to resource names\n    const resolvedResourcesMap: Record<string, string> = {};\n    // Extract resource Ids\n    evaluationResults.forEach((result) => {\n      const resourceType: ResourceType =\n        ResourceType[\n          _.get(\n            result,\n            'EvaluationResultIdentifier.EvaluationResultQualifier.ResourceType'\n          ) as keyof typeof ResourceType\n        ];\n      const resourceId: string = _.get(\n        result,\n        'EvaluationResultIdentifier.EvaluationResultQualifier.ResourceId'\n      ) as unknown as string;\n      if (resourceType in resourceMap) {\n        if (\n          !resourceMap[resourceType]?.includes(resourceId) &&\n          typeof resourceId === 'string'\n        ) {\n          resourceMap[resourceType]?.push(resourceId);\n        }\n      } else {\n        resourceMap[resourceType] = [resourceId];\n      }\n    });\n    // Resolve resource names from AWS\n    let resourceType: ResourceType;\n    for (resourceType in resourceMap) {\n      const resourceIDSlices = _.chunk(resourceMap[resourceType], 20);\n      for (const slice of resourceIDSlices) {\n        await this.delay(150);\n        const resources = await this.configService.listDiscoveredResources({\n          resourceType: resourceType,\n          resourceIds: slice\n        });\n        resources.resourceIdentifiers?.forEach((resource) => {\n          if (resource.resourceId && resource.resourceName) {\n            resolvedResourcesMap[resource.resourceId] = resource.resourceName;\n          }\n        });\n      }\n    }\n    return resolvedResourcesMap;\n  }\n\n  private getCodeDesc(result: EvaluationResult): string {\n    let output = '';\n    if (\n      result.EvaluationResultIdentifier !== undefined &&\n      result.EvaluationResultIdentifier.EvaluationResultQualifier !== undefined\n    ) {\n      output = JSON.stringify(\n        result.EvaluationResultIdentifier.EvaluationResultQualifier\n      )\n        .replace(/\\\"/gi, '')\n        .replace(/{/gi, '')\n        .replace(/}/gi, '');\n    }\n    return output;\n  }\n\n  private getRunTime(result: EvaluationResult): number {\n    let diff = 0;\n    if (\n      result.ResultRecordedTime !== undefined &&\n      result.ConfigRuleInvokedTime !== undefined\n    ) {\n      diff =\n        (result.ResultRecordedTime.getTime() -\n          result.ConfigRuleInvokedTime.getTime()) /\n        1000;\n    }\n    return diff;\n  }\n\n  private getStatus(result: EvaluationResult): ExecJSON.ControlResultStatus {\n    if (result.ComplianceType === 'COMPLIANT') {\n      return ExecJSON.ControlResultStatus.Passed;\n    } else if (result.ComplianceType === 'NON_COMPLIANT') {\n      return ExecJSON.ControlResultStatus.Failed;\n    } else {\n      return ExecJSON.ControlResultStatus.Skipped;\n    }\n  }\n\n  private getMessage(\n    result: EvaluationResult,\n    codeDesc: string,\n    status: ExecJSON.ControlResultStatus\n  ): string | undefined {\n    if (status === ExecJSON.ControlResultStatus.Failed) {\n      return `${codeDesc}: ${\n        result.Annotation || 'Rule does not pass rule compliance'\n      }`;\n    } else {\n      return undefined;\n    }\n  }\n\n  private async fetchAllComplianceInfo(\n    configRules: ConfigRule[]\n  ): Promise<ComplianceByConfigRule[]> {\n    const complianceResults: ComplianceByConfigRule[] = [];\n    // Should slice config rules into arrays of max size: 25 and make one request for each slice\n    const configRuleSlices = _.chunk(configRules, 25);\n    for (const slice of configRuleSlices) {\n      await this.delay(150);\n      const response = await this.configService.describeComplianceByConfigRule({\n        ConfigRuleNames: slice.map((rule) => rule.ConfigRuleName || '')\n      });\n      if (response.ComplianceByConfigRules === undefined) {\n        throw new Error('No compliance data was returned');\n      } else {\n        response.ComplianceByConfigRules?.forEach((compliance) =>\n          complianceResults.push(compliance)\n        );\n      }\n    }\n    return complianceResults;\n  }\n\n  // eslint-disable-next-line @typescript-eslint/ban-types\n  private hdfTags(configRule: ConfigRule): Record<string, unknown> {\n    let result = {};\n    const sourceIdentifier = configRule.Source?.SourceIdentifier;\n    result = _.set(result, 'nist', []);\n    let defaultMatch: string[] | null = [];\n    if (sourceIdentifier !== undefined) {\n      defaultMatch = AWS_CONFIG_MAPPING.searchNIST([sourceIdentifier]);\n    }\n    if (Array.isArray(defaultMatch) && defaultMatch.length !== 0) {\n      result = _.set(\n        result,\n        'nist',\n        (_.get(result, 'nist') as unknown as string[]).concat(defaultMatch)\n      );\n    }\n    return result;\n  }\n\n  private checkText(configRule: ConfigRule): string {\n    let params: any[] = [];\n    if (\n      configRule.InputParameters !== undefined &&\n      configRule.InputParameters !== '{}'\n    ) {\n      params = configRule.InputParameters.replace(/{/gi, '')\n        .replace(/}/gi, '')\n        .split(',');\n    }\n    const checkText = [];\n    checkText.push(`ARN: ${configRule.ConfigRuleArn || 'N/A'}`);\n    checkText.push(\n      `Source Identifier: ${configRule.Source?.SourceIdentifier || 'N/A'}`\n    );\n    if (params.length !== 0) {\n      checkText.push(`${params.join('<br/>').replace(/\\\"/gi, '')}`);\n    }\n    return checkText.join('<br/>');\n  }\n\n  private hdfDescriptions(configRule: ConfigRule) {\n    return [\n      {\n        data: this.checkText(configRule),\n        label: 'check'\n      }\n    ];\n  }\n\n  private getAccountId(arn: string): string {\n    const matches = arn.match(/:(\\d{12}):config-rule/);\n    if (matches === null) {\n      return 'no-account-id';\n    } else {\n      return matches[0];\n    }\n  }\n\n  private async getControls(): Promise<ExecJSON.Control[]> {\n    let index = 0;\n    return (await this.issues).map((issue: ConfigRule) => {\n      const control: ExecJSON.Control = {\n        id: issue.ConfigRuleId || '',\n        title: `${this.getAccountId(issue.ConfigRuleArn || '')} - ${\n          issue.ConfigRuleName\n        }`\n          .replace(/:/gi, '')\n          .replace(/config-rule/gi, ''),\n        desc: issue.Description || null,\n        impact: this.getImpact(issue),\n        tags: this.hdfTags(issue),\n        descriptions: this.hdfDescriptions(issue),\n        refs: [],\n        source_location: {ref: issue.ConfigRuleArn, line: 1},\n        code: '',\n        results: this.results[index]\n      };\n      index++;\n      return control;\n    });\n  }\n\n  private getImpact(issue: ConfigRule): number {\n    if (_.get(issue, 'compliance') === 'NOT_APPLICABLE') {\n      return 0;\n    } else {\n      return 0.5;\n    }\n  }\n\n  public async toHdf(): Promise<ExecJSON.Execution> {\n    const hdf: ExecJSON.Execution = {\n      platform: {\n        name: 'Heimdall Tools',\n        release: HeimdallToolsVersion,\n        target_id: ''\n      },\n      version: HeimdallToolsVersion,\n      statistics: {\n        //aws_config_sdk_version: ConfigService., // How do i get the sdk version?\n        duration: null\n      },\n      profiles: [\n        {\n          name: NAME,\n          version: '',\n          title: NAME,\n          maintainer: null,\n          summary: NAME,\n          license: null,\n          copyright: null,\n          copyright_email: null,\n          supports: [],\n          attributes: [],\n          depends: [],\n          groups: [],\n          status: 'loaded',\n          controls: await this.getControls(),\n          sha256: ''\n        }\n      ]\n    };\n    return hdf;\n  }\n}\n"]}

package/lib/src/base-converter.d.ts

@@ -1,40 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-export interface ILookupPath {
-    shortcircuit?: boolean;
-    path?: string | string[];
-    transformer?: (value: any) => unknown;
-    arrayTransformer?: (value: unknown[], file: any) => unknown[];
-    pathTransform?: (value: unknown, file: any) => unknown;
-    key?: string;
-}
-export type ObjectEntryValue<T> = {
-    [K in keyof T]: readonly [K, T[K]];
-}[keyof T];
-export type MappedTransform<T, U extends ILookupPath> = {
-    [K in keyof T]: Exclude<T[K], undefined | null> extends Array<any> ? MappedTransform<T[K], U> : T[K] extends Function ? T[K] : T[K] extends object ? MappedTransform<T[K] & U, U> : T[K] | U;
-};
-export type MappedReform<T, U> = {
-    [K in keyof T]: Exclude<T[K], undefined | null> extends Array<any> ? MappedReform<T[K], U> : T[K] extends object ? MappedReform<T[K] & U, U> : Exclude<T[K], U>;
-};
-export declare function generateHash(data: string, algorithm?: string): string;
-export declare function buildParseHtmlFunc(): Promise<(input: unknown) => string>;
-export declare function parseXml(xml: string, additionalOptions?: Record<string, unknown>): Record<string, unknown>;
-export declare function parseCsv(csv: string): unknown[];
-export declare function impactMapping(mapping: Map<string, number>): (severity: unknown) => number;
-export declare class BaseConverter<D = Record<string, unknown>> {
-    data: D;
-    mappings?: MappedTransform<ExecJSON.Execution, ILookupPath>;
-    collapseResults: boolean;
-    constructor(data: D, collapseResults?: boolean);
-    setMappings(mappings: MappedTransform<ExecJSON.Execution, ILookupPath>): void;
-    toHdf(): ExecJSON.Execution;
-    objectMap<T extends Array<unknown>, V>(obj: T, fn: (v: ObjectEntryValue<T>) => V): {
-        [K in keyof T]: V;
-    };
-    convertInternal<T>(file: Record<string, unknown>, fields: T): MappedReform<T, ILookupPath>;
-    evaluate<T>(file: Record<string, unknown>, v: T | Array<T>): T | Array<T> | MappedReform<T, ILookupPath>;
-    handleArray<T>(file: Record<string, unknown>, v: Array<T & ILookupPath>): Array<T>;
-    handlePath(file: Record<string, unknown>, path: string | string[]): unknown;
-    hasPath(file: Record<string, unknown>, path: string | string[]): boolean;
-}
-//# sourceMappingURL=base-converter.d.ts.map

package/lib/src/base-converter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"base-converter.d.ts","sourceRoot":"","sources":["../../src/base-converter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAIlC,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC;IACtC,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,EAAE,CAAC;IAC9D,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC;IACvD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAAI;KAAE,CAAC,IAAI,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAEhF,MAAM,MAAM,eAAe,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI;KACrD,CAAC,IAAI,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAC9D,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GACxB,CAAC,CAAC,CAAC,CAAC,SAAS,QAAQ,GACnB,CAAC,CAAC,CAAC,CAAC,GACJ,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,GACjB,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAC5B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;CACjB,CAAC;AACF,MAAM,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,IAAI;KAC9B,CAAC,IAAI,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAC9D,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GACrB,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,GACjB,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GACzB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;CACvB,CAAC;AAIF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAW,GAAG,MAAM,CAGvE;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC,CAgB9E;AAED,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,EAAE,CAQ/C;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,CAAC,QAAQ,EAAE,OAAO,KAAK,MAAM,CAQ/B;AAsDD,qBAAa,aAAa,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC;IACR,QAAQ,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5D,eAAe,EAAE,OAAO,CAAC;gBAEb,IAAI,EAAE,CAAC,EAAE,eAAe,UAAQ;IAK5C,WAAW,CACT,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,GACzD,IAAI;IAIP,KAAK,IAAI,QAAQ,CAAC,SAAS;IAe3B,SAAS,CAAC,CAAC,SAAS,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EACnC,GAAG,EAAE,CAAC,EACN,EAAE,EAAE,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,GAChC;SAAE,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC;KAAC;IAKtB,eAAe,CAAC,CAAC,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,CAAC,GACR,YAAY,CAAC,CAAC,EAAE,WAAW,CAAC;IAmB/B,QAAQ,CAAC,CAAC,EACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GACd,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,WAAW,CAAC;IA8E9C,WAAW,CAAC,CAAC,EACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,WAAW,CAAC,GACxB,KAAK,CAAC,CAAC,CAAC;IAoFX,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO;IAkB3E,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO;CAgBzE"}