@mitre/hdf-converters 2.13.0 → 3.0.1

package/lib/src/converters-from-hdf/asff/transformers.js

@@ -1,513 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getRunTime = getRunTime;
-exports.createProfileInfoFinding = createProfileInfoFinding;
-exports.statusCount = statusCount;
-exports.createDescription = createDescription;
-exports.createAssumeRolePolicyDocument = createAssumeRolePolicyDocument;
-exports.cleanText = cleanText;
-exports.getAllLayers = getAllLayers;
-exports.createNote = createNote;
-exports.createCode = createCode;
-exports.setupId = setupId;
-exports.setupProductARN = setupProductARN;
-exports.setupAwsAcct = setupAwsAcct;
-exports.setupCreated = setupCreated;
-exports.setupRegion = setupRegion;
-exports.setupUpdated = setupUpdated;
-exports.setupGeneratorId = setupGeneratorId;
-exports.setupTitle = setupTitle;
-exports.setupDescr = setupDescr;
-exports.setupSevLabel = setupSevLabel;
-exports.setupSevOriginal = setupSevOriginal;
-exports.setupFindingType = setupFindingType;
-exports.getFixForControl = getFixForControl;
-exports.setupRemRec = setupRemRec;
-exports.setupProdFieldCheck = setupProdFieldCheck;
-exports.setupResourcesID = setupResourcesID;
-exports.setupResourcesID2 = setupResourcesID2;
-exports.setupDetailsAssume = setupDetailsAssume;
-exports.setupControlStatus = setupControlStatus;
-const crypto_1 = require("crypto");
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const moment_1 = __importDefault(require("moment"));
-const package_json_1 = require("../../../package.json");
-const global_1 = require("../../utils/global");
-const reverse_asff_mapper_1 = require("./reverse-asff-mapper");
-function getRunTime(hdf) {
-    let time = new Date().toISOString();
-    hdf.profiles.forEach((profile) => {
-        if (profile.controls[0] &&
-            profile.controls[0].results.length &&
-            profile.controls[0].results[0].start_time) {
-            try {
-                time = new Date(profile.controls[0].results[0].start_time).toISOString();
-            }
-            catch {
-                time = new Date().toISOString();
-            }
-        }
-    });
-    return time;
-}
-/** Trivial overlay filter that just takes the version of the control that has results from amongst all identical ids */
-function filter_overlays(controls) {
-    const idHash = {};
-    controls.forEach((c) => {
-        const id = c.hdf.wraps.id;
-        const old = idHash[id];
-        // If old, gotta check if our new status list is "better than" old
-        if (old) {
-            const newSignificant = c.hdf.status_list && c.hdf.status_list.length > 0;
-            if (newSignificant) {
-                // Overwrite
-                idHash[id] = c;
-            }
-        }
-        else {
-            // First time seeing this id
-            idHash[id] = c;
-        }
-    });
-    // Return the set of keys
-    return Array.from(Object.values(idHash));
-}
-function createProfileInfoFinding(hdf, options) {
-    const runTime = getRunTime(hdf);
-    const inspecJSJson = (0, inspecjs_1.convertFile)(JSON.stringify(hdf));
-    const contextualizedEvaluation = (0, inspecjs_1.contextualizeEvaluation)(inspecJSJson['1_0_ExecJson']);
-    const counts = statusCount(contextualizedEvaluation);
-    const updatedAt = new Date();
-    updatedAt.setMilliseconds(updatedAt.getMilliseconds() +
-        (contextualizedEvaluation.contains[0].contains.length || 0));
-    const profileInfo = {
-        SchemaVersion: '2018-10-08',
-        Id: `${options.target}/${hdf.profiles[0].name}`,
-        ProductArn: `arn:aws:securityhub:${options.region}:${options.awsAccountId}:product/${options.awsAccountId}/default`,
-        GeneratorId: `arn:aws:securityhub:us-east-2:${options.awsAccountId}:ruleset/set/${hdf.profiles[0].name}`,
-        AwsAccountId: options.awsAccountId,
-        CreatedAt: runTime,
-        UpdatedAt: updatedAt,
-        Title: `${options.target} | ${hdf.profiles[0].name} | ${(0, moment_1.default)().format('YYYY-MM-DD hh:mm:ss [GMT]ZZ')}`,
-        Description: createDescription(counts),
-        Severity: {
-            Label: 'INFORMATIONAL'
-        },
-        FindingProviderFields: {
-            Severity: {
-                Label: 'INFORMATIONAL'
-            },
-            Types: createProfileInfoFindingFields(hdf, options)
-        },
-        Resources: [
-            {
-                Type: 'AwsAccount',
-                Id: `AWS::::Account:${options.awsAccountId}`,
-                Partition: 'aws',
-                Region: options.region
-            }
-        ]
-    };
-    // need the intermediate caste to tell typescript that this cast is intentional
-    return profileInfo;
-}
-function statusCount(evaluation) {
-    let controls = [];
-    // Get all controls
-    evaluation.contains.forEach((p) => controls.push(...p.contains));
-    controls = filter_overlays(controls);
-    const statusCounts = {
-        Passed: 0,
-        PassedTests: 0,
-        PassingTestsFailedControl: 0,
-        Failed: 0,
-        FailedTests: 0,
-        NotApplicable: 0,
-        NotReviewed: 0
-    };
-    controls.forEach((control) => {
-        if (control.hdf.status === 'Passed') {
-            statusCounts.Passed += 1;
-            statusCounts.PassedTests += (control.hdf.segments || []).length;
-        }
-        else if (control.hdf.status === 'Failed') {
-            statusCounts.PassingTestsFailedControl += (control.hdf.segments || []).filter((s) => s.status === 'passed').length;
-            statusCounts.FailedTests += (control.hdf.segments || []).filter((s) => s.status === 'failed').length;
-            statusCounts.Failed += 1;
-        }
-        else if (control.hdf.status === 'Not Applicable') {
-            statusCounts.NotApplicable += 1;
-        }
-        else if (control.hdf.status === 'Not Reviewed') {
-            statusCounts.NotReviewed += 1;
-        }
-    });
-    return statusCounts;
-}
-function createDescription(counts) {
-    return `Result Set Status Summary -- Passed: ${counts.Passed} (${counts.PassedTests} individual checks passed) --- Failed: ${counts.Failed} (${counts.PassingTestsFailedControl} individual checks failed out of ${counts.PassingTestsFailedControl + counts.FailedTests} total checks) --- Not Applicable: ${counts.NotApplicable} (System exception or absent component) --- Not Reviewed: ${counts.NotReviewed} (Can only be tested manually at this time)`;
-}
-function createAssumeRolePolicyDocument(layersOfControl, segment) {
-    const segmentOverview = createNote(segment);
-    const code = layersOfControl.map((layer) => createCode(layer)).join('\n\n');
-    return `${code}\n\n${segmentOverview}`;
-}
-// Gets rid of extra spacing + newlines as these aren't shown in Security Hub
-function cleanText(text) {
-    if (text) {
-        return text.replace(/  +/g, ' ');
-    }
-    else {
-        return undefined;
-    }
-}
-// Gets all layers of a control across overlaid profiles given the ID
-function getAllLayers(hdf, knownControl) {
-    if (hdf.profiles.length === 1) {
-        return [
-            {
-                ...knownControl,
-                profileInfo: {
-                    ..._.omit(hdf.profiles[0], 'controls')
-                }
-            }
-        ];
-    }
-    else {
-        const foundControls = [];
-        // For each control in each profile
-        hdf.profiles.forEach((profile) => {
-            profile.controls.forEach((control) => {
-                if (control.id === knownControl.id) {
-                    foundControls.push({
-                        ...control,
-                        profileInfo: { ..._.omit(profile, 'controls') }
-                    });
-                }
-            });
-        });
-        return foundControls;
-    }
-}
-// Creates Note field containing control status
-function createNote(segment) {
-    if (segment.message) {
-        return `Test Description: ${segment.code_desc} --- Test Result: ${segment.message}`;
-    }
-    else if (segment.skip_message) {
-        return `Test Description: ${segment.code_desc} --- Skip Message: ${segment.skip_message}`;
-    }
-    else {
-        return `Test Description: ${segment.code_desc}`;
-    }
-}
-function cleanObjectValues(value) {
-    if (Array.isArray(value)) {
-        return value.length < 0;
-    }
-    return !Boolean(value);
-}
-function createCode(control) {
-    const noCodeValue = (_.get(control, 'profileInfo.depends') || [])
-        .length > 0
-        ? ''
-        : JSON.stringify(_.omitBy(_.omit(control, ['results', 'profileInfo']), cleanObjectValues));
-    if (!control.code && noCodeValue === '') {
-        return '';
-    }
-    return `=========================================================\n# Profile name: ${control.profileInfo?.name}\n=========================================================\n\n${control.code ? control.code?.replace(/\\\"/g, '"') : noCodeValue}`;
-}
-function setupId(control, context) {
-    const target = context?.ioptions.target;
-    const name = context?.data.profiles[0].name;
-    return `${target}/${name}/${control.id}/finding/${(0, crypto_1.createHash)('sha256')
-        .update(control.id + control.result.code_desc)
-        .digest('hex')}`;
-}
-function setupProductARN(_val, context) {
-    return `arn:aws:securityhub:${context?.ioptions.region}:${context?.ioptions.awsAccountId}:product/${context?.ioptions.awsAccountId}/default`;
-}
-function setupAwsAcct(_val, context) {
-    return context?.ioptions.awsAccountId;
-}
-function setupCreated(control) {
-    try {
-        return (new Date(control.result.start_time).toISOString() ||
-            new Date().toISOString());
-    }
-    catch {
-        return new Date().toISOString();
-    }
-}
-function setupRegion(_val, context) {
-    return context?.ioptions.region;
-}
-function setupUpdated(_control, context) {
-    // Add one millisecond to the time by control index so the order is correct in security hub
-    const time = new Date();
-    time.setMilliseconds(time.getMilliseconds() + (context?.index || 0));
-    return time.toISOString();
-}
-function setupGeneratorId(control, context) {
-    return `arn:aws:securityhub:${context?.ioptions.region}:${context?.ioptions.awsAccountId}:ruleset/set/${context?.data.profiles[0].name}/rule/${control.id}`;
-}
-function setupTitle(control) {
-    const nistTags = control.tags.nist ? `[${control.tags.nist.join(', ')}]` : '';
-    return _.truncate(`${control.id} | ${nistTags} | ${cleanText(control.title)}`, { length: 256 });
-}
-function setupDescr(control) {
-    // Check text can either be a description or a tag
-    const checkText = (0, global_1.getDescription)(control.descriptions || [], 'check') ||
-        control.tags.check ||
-        'Check not available';
-    const currentVal = _.truncate(cleanText(`${control.desc} -- Check Text: ${checkText}`), { length: 1024, omission: '[SEE FULL TEXT IN AssumeRolePolicyDocument]' });
-    const caveat = (0, global_1.getDescription)(control.descriptions || [], 'caveat');
-    if (caveat) {
-        return _.truncate(`Caveat: ${cleanText(caveat)} --- Description: ${currentVal}`, { length: 1024, omission: '' });
-    }
-    return currentVal;
-}
-function setupSevLabel(control, context) {
-    return context?.impactMapping.get(control.impact) || 'INFORMATIONAL';
-}
-function setupSevOriginal(control) {
-    return `${control.impact}`;
-}
-function createControlMetadata(control) {
-    const types = [
-        `Control/ID/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(control.id)}`,
-        `Control/Impact/${control.impact}`
-    ];
-    if (control.title) {
-        types.push(`Control/Title/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(control.title)}`);
-    }
-    if (control.desc) {
-        types.push(`Control/Desc/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(control.desc)}`);
-    }
-    if (control.waiver_data && Object.keys(control.waiver_data).length > 0) {
-        types.push(`Control/Waiver_Data/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(JSON.stringify(control.waiver_data))}`);
-    }
-    if (control.attestation_data) {
-        types.push(`Control/Attestation_Data/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(JSON.stringify(control.attestation_data))}`);
-    }
-    if (control.refs && control.refs.length > 0) {
-        types.push(`Control/Refs/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(JSON.stringify(control.refs))}`);
-    }
-    if (control.source_location &&
-        Object.keys(control.source_location).length > 0) {
-        types.push(`Control/Source_Location/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(JSON.stringify(control.source_location))}`);
-    }
-    return types;
-}
-function getFilename(options) {
-    const slashSplit = options?.input.split('\\')[options?.input.split('\\').length - 1];
-    return slashSplit?.split('/')[slashSplit.split('/').length - 1] ?? '';
-}
-function createProfileInfoFindingFields(hdf, options) {
-    const typesArr = [
-        `MITRE/SAF/${package_json_1.version}-hdf2asff`,
-        `File/Input/${getFilename(options)}`
-    ];
-    const executionTargets = ['platform', 'statistics', 'version'];
-    executionTargets.forEach((target) => {
-        const value = _.get(hdf, target);
-        if (_.isString(value) && value.trim()) {
-            typesArr.push(`Execution/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(target)}/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(value)}`);
-        }
-        else {
-            typesArr.push(`Execution/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(target)}/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(JSON.stringify(value))}`);
-        }
-    });
-    hdf.profiles.forEach((profile) => {
-        const targets = [
-            'version',
-            'sha256',
-            'maintainer',
-            'summary',
-            'license',
-            'copyright',
-            'copyright_email',
-            'name',
-            'title',
-            'depends',
-            'supports',
-            'attributes',
-            'description',
-            'inspec_version',
-            'parent_profile',
-            'skip_message',
-            'status',
-            'status_message'
-        ];
-        targets.forEach((target) => {
-            const value = _.get(profile, target);
-            if (typeof value === 'string' && value) {
-                typesArr.push(`${(0, reverse_asff_mapper_1.escapeForwardSlashes)(profile.name)}/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(target)}/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(value)}`);
-            }
-            else if (typeof value === 'object') {
-                typesArr.push(`${(0, reverse_asff_mapper_1.escapeForwardSlashes)(profile.name)}/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(target)}/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(JSON.stringify(value))}`);
-            }
-        });
-    });
-    const passthrough = _.get(hdf, 'passthrough');
-    if (_.isString(passthrough) && passthrough.trim()) {
-        typesArr.push(`Execution/passthrough/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(passthrough)}`);
-    }
-    else if (passthrough !== undefined) {
-        typesArr.push(`Execution/passthrough/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(JSON.stringify(passthrough))}`);
-    }
-    return typesArr;
-}
-function createSegmentInfo(segment) {
-    const typesArr = [];
-    const targets = [
-        'backtrace',
-        'exception',
-        'code_desc',
-        'message',
-        'resource',
-        'run_time',
-        'start_time',
-        'skip_message',
-        'status'
-    ];
-    targets.forEach((target) => {
-        if (_.has(segment, target) && _.get(segment, target) !== undefined) {
-            if (_.get(segment, target) === '') {
-                typesArr.push(`Segment/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(target)}/''`);
-            }
-            else {
-                typesArr.push(`Segment/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(target)}/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(_.get(segment, target))}`);
-            }
-        }
-    });
-    return typesArr;
-}
-function createTagInfo(control) {
-    const typesArr = [];
-    for (const tag in control.tags) {
-        typesArr.push(`Tags/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(tag)}/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(JSON.stringify(control.tags[tag]))}`);
-    }
-    return typesArr;
-}
-function createDescriptionInfo(control) {
-    const typesArr = [];
-    if (Array.isArray(control.descriptions)) {
-        control.descriptions?.forEach((description) => {
-            if (description.data && cleanText(description.data)) {
-                typesArr.push(`Descriptions/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(description.label)}/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(cleanText(description.data))}`);
-            }
-        });
-    }
-    else {
-        Object.entries(control.descriptions || {}).forEach(([key, value]) => {
-            if (value && cleanText(value)) {
-                typesArr.push(`Descriptions/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(key)}/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(cleanText(value))}`);
-            }
-        });
-    }
-    return typesArr;
-}
-function setupFindingType(control, context) {
-    // typesArr needs to be ordered so that attributes that are likely to be bloated and/or contain less necessary information end up at the bottom so that they don't expand and push more attributes outside of the list which is capped at 50 items
-    const typesArr = [
-        `MITRE/SAF/${package_json_1.version}-hdf2asff`,
-        `File/Input/${getFilename(context?.ioptions)}`
-    ];
-    // Add control metadata to the Finding Provider Fields
-    typesArr.push(...createControlMetadata(control));
-    // Add segment/result information to Finding Provider Fields
-    typesArr.push(...createSegmentInfo(control.result));
-    // Add Tags to Finding Provider Fields
-    typesArr.push(...createTagInfo(control));
-    // nist tag, then subdescriptions, then remaining tags
-    const nistTagIndex = typesArr.findIndex((typeString) => typeString.startsWith('Tags/nist/'));
-    const tagsIndex = typesArr.findIndex((typeString) => typeString.startsWith('Tags/'));
-    if (nistTagIndex !== -1) {
-        typesArr.splice(tagsIndex, 0, typesArr.splice(nistTagIndex, 1)[0]);
-    }
-    typesArr.splice(tagsIndex === -1 ? typesArr.length : tagsIndex + 1, 0, 
-    // Add Descriptions to FindingProviderFields
-    ...createDescriptionInfo(control));
-    // description, then code, then code_desc
-    const desc = typesArr.splice(typesArr.findIndex((typeString) => typeString.startsWith('Control/Desc/')), 1)[0];
-    const code = `Control/Code/${(0, reverse_asff_mapper_1.escapeForwardSlashes)(control.layersOfControl
-        .map((layer) => createCode(layer))
-        .join('\n\n'))}`;
-    const codeDesc = typesArr.splice(typesArr.findIndex((typeString) => typeString.startsWith('Segment/code_desc/')), 1)[0];
-    typesArr.push(..._.compact([desc, code, codeDesc])); // [][0] can return undefined so use compact to deal with them
-    return typesArr;
-}
-function getFixForControl(control) {
-    return ((0, global_1.getDescription)(control.descriptions || [], 'fix') ||
-        control.tags.fix ||
-        'Fix not available');
-}
-function setupRemRec(control) {
-    return _.truncate(cleanText(`${createNote(control.result)} --- Fix: ${getFixForControl(control)}`), { length: 512, omission: '... [SEE FULL TEXT IN AssumeRolePolicyDocument]' });
-}
-function setupProdFieldCheck(control) {
-    const checkText = (0, global_1.getDescription)(control.descriptions || [], 'check') ||
-        control.tags.check ||
-        'Check not available';
-    return _.truncate(checkText, { length: 2048, omission: '' });
-}
-function setupResourcesID(_val, context) {
-    return `AWS::::Account:${context?.ioptions.awsAccountId}`;
-}
-function setupResourcesID2(control) {
-    return `${control.id} Validation Code`;
-}
-function setupDetailsAssume(control) {
-    return createAssumeRolePolicyDocument(control.layersOfControl, control.result);
-}
-function setupControlStatus(control) {
-    if (control.results.some((result) => 'backtrace' in result)) {
-        return 'NOT_AVAILABLE';
-    }
-    const status = control.result.status === 'skipped'
-        ? 'WARNING'
-        : control.result.status === 'passed';
-    if (typeof status === 'boolean') {
-        return status ? 'PASSED' : 'FAILED';
-    }
-    return status;
-}
-//# sourceMappingURL=transformers.js.map

package/lib/src/converters-from-hdf/asff/transformers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"transformers.js","sourceRoot":"","sources":["../../../../src/converters-from-hdf/asff/transformers.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,gCAkBC;AA2BD,4DAgDC;AAED,kCAiCC;AAED,8CAYC;AAED,wEAOC;AAGD,8BAMC;AAGD,oCA4BC;AAGD,gCAQC;AASD,gCAqBC;AAED,0BAUC;AAED,0CAKC;AAED,oCAKC;AAED,oCASC;AAED,kCAKC;AACD,oCAQC;AAED,4CAKC;AAED,gCAMC;AAED,gCAqBC;AAED,sCAKC;AAED,4CAEC;AAmMD,4CAwDC;AAED,4CAMC;AAED,kCAOC;AAED,kDAOC;AAED,4CAKC;AAED,8CAEC;AAED,gDAKC;AAED,gDAYC;AAjqBD,mCAAkC;AAClC,uCAMkB;AAClB,0CAA4B;AAC5B,oDAA4B;AAC5B,wDAAsE;AACtE,+CAAkD;AAElD,+DAI+B;AAa/B,SAAgB,UAAU,CAAC,GAAuB;IAChD,IAAI,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/B,IACE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;YAClC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,EACzC,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,IAAI,CACb,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAC1C,CAAC,WAAW,EAAE,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wHAAwH;AACxH,SAAS,eAAe,CACtB,QAAiC;IAEjC,MAAM,MAAM,GAA2C,EAAE,CAAC;IAC1D,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAsC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1D,kEAAkE;QAClE,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;YACzE,IAAI,cAAc,EAAE,CAAC;gBACnB,YAAY;gBACZ,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,4BAA4B;YAC5B,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,wBAAwB,CACtC,GAAuB,EACvB,OAAiB;IAEjB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,IAAA,sBAAW,EAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,MAAM,wBAAwB,GAAG,IAAA,kCAAuB,EACtD,YAAY,CAAC,cAAc,CAAQ,CACpC,CAAC;IACF,MAAM,MAAM,GAAG,WAAW,CAAC,wBAAwB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC7B,SAAS,CAAC,eAAe,CACvB,SAAS,CAAC,eAAe,EAAE;QACzB,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,CAC9D,CAAC;IACF,MAAM,WAAW,GAA4B;QAC3C,aAAa,EAAE,YAAY;QAC3B,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QAC/C,UAAU,EAAE,uBAAuB,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,YAAY,YAAY,OAAO,CAAC,YAAY,UAAU;QACnH,WAAW,EAAE,iCAAiC,OAAO,CAAC,YAAY,gBAAgB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QACxG,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO;QAClB,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,IAAA,gBAAM,GAAE,CAAC,MAAM,CACrE,6BAA6B,CAC9B,EAAE;QACH,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;QACtC,QAAQ,EAAE;YACR,KAAK,EAAE,eAAe;SACvB;QACD,qBAAqB,EAAE;YACrB,QAAQ,EAAE;gBACR,KAAK,EAAE,eAAe;aACvB;YACD,KAAK,EAAE,8BAA8B,CAAC,GAAG,EAAE,OAAO,CAAC;SACpD;QACD,SAAS,EAAE;YACT;gBACE,IAAI,EAAE,YAAY;gBAClB,EAAE,EAAE,kBAAkB,OAAO,CAAC,YAAY,EAAE;gBAC5C,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB;SACF;KACF,CAAC;IAEF,+EAA+E;IAC/E,OAAO,WAAsC,CAAC;AAChD,CAAC;AAED,SAAgB,WAAW,CAAC,UAAoC;IAC9D,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,mBAAmB;IACnB,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,YAAY,GAAW;QAC3B,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,CAAC;QACd,yBAAyB,EAAE,CAAC;QAC5B,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,CAAC;KACf,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC;YACzB,YAAY,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAClE,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3C,YAAY,CAAC,yBAAyB,IAAI,CACxC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAC3B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;YAC9C,YAAY,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAC7D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAC7B,CAAC,MAAM,CAAC;YACT,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACnD,YAAY,CAAC,aAAa,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACjD,YAAY,CAAC,WAAW,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAgB,iBAAiB,CAAC,MAAc;IAC9C,OAAO,wCAAwC,MAAM,CAAC,MAAM,KAC1D,MAAM,CAAC,WACT,0CAA0C,MAAM,CAAC,MAAM,KACrD,MAAM,CAAC,yBACT,oCACE,MAAM,CAAC,yBAAyB,GAAG,MAAM,CAAC,WAC5C,sCACE,MAAM,CAAC,aACT,6DACE,MAAM,CAAC,WACT,6CAA6C,CAAC;AAChD,CAAC;AAED,SAAgB,8BAA8B,CAC5C,eAAmC,EACnC,OAA+B;IAE/B,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5E,OAAO,GAAG,IAAI,OAAO,eAAe,EAAE,CAAC;AACzC,CAAC;AAED,6EAA6E;AAC7E,SAAgB,SAAS,CAAC,IAAoB;IAC5C,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,SAAgB,YAAY,CAC1B,GAAuB,EACvB,YAA8B;IAE9B,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL;gBACE,GAAG,YAAY;gBACf,WAAW,EAAE;oBACX,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;iBACvC;aACF;SACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAmD,EAAE,CAAC;QACzE,mCAAmC;QACnC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBACnC,IAAI,OAAO,CAAC,EAAE,KAAK,YAAY,CAAC,EAAE,EAAE,CAAC;oBACnC,aAAa,CAAC,IAAI,CAAC;wBACjB,GAAG,OAAO;wBACV,WAAW,EAAE,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAC;qBAC9C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,SAAgB,UAAU,CAAC,OAA+B;IACxD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,qBAAqB,OAAO,CAAC,SAAS,qBAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IACtF,CAAC;SAAM,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAChC,OAAO,qBAAqB,OAAO,CAAC,SAAS,sBAAsB,OAAO,CAAC,YAAY,EAAE,CAAC;IAC5F,CAAC;SAAM,CAAC;QACN,OAAO,qBAAqB,OAAO,CAAC,SAAS,EAAE,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAI,KAAQ;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAgB,UAAU,CACxB,OAAmE;IAEnE,MAAM,WAAW,GACd,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,IAAI,EAAE,CAA+B;SACzE,MAAM,GAAG,CAAC;QACX,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,IAAI,CAAC,SAAS,CACZ,CAAC,CAAC,MAAM,CACN,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,EAC3C,iBAAiB,CAClB,CACF,CAAC;IACR,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACxC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,8EACL,OAAO,CAAC,WAAW,EAAE,IACvB,kEACE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,WACvD,EAAE,CAAC;AACL,CAAC;AAED,SAAgB,OAAO,CACrB,OAAyB,EACzB,OAA6B;IAE7B,MAAM,MAAM,GAAG,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5C,OAAO,GAAG,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC,EAAE,YAAY,IAAA,mBAAU,EAAC,QAAQ,CAAC;SACnE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;SAC7C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,SAAgB,eAAe,CAC7B,IAAsB,EACtB,OAA6B;IAE7B,OAAO,uBAAuB,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,OAAO,EAAE,QAAQ,CAAC,YAAY,YAAY,OAAO,EAAE,QAAQ,CAAC,YAAY,UAAU,CAAC;AAC/I,CAAC;AAED,SAAgB,YAAY,CAC1B,IAAsB,EACtB,OAA6B;IAE7B,OAAO,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC;AACxC,CAAC;AAED,SAAgB,YAAY,CAAC,OAAyB;IACpD,IAAI,CAAC;QACH,OAAO,CACL,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;YACjD,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,SAAgB,WAAW,CACzB,IAAsB,EACtB,OAA6B;IAE7B,OAAO,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC;AAClC,CAAC;AACD,SAAgB,YAAY,CAC1B,QAA0B,EAC1B,OAA6B;IAE7B,2FAA2F;IAC3F,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAgB,gBAAgB,CAC9B,OAAyB,EACzB,OAA6B;IAE7B,OAAO,uBAAuB,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,OAAO,EAAE,QAAQ,CAAC,YAAY,gBAAgB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,OAAO,CAAC,EAAE,EAAE,CAAC;AAC9J,CAAC;AAED,SAAgB,UAAU,CAAC,OAAyB;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,OAAO,CAAC,CAAC,QAAQ,CACf,GAAG,OAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAC3D,EAAC,MAAM,EAAE,GAAG,EAAC,CACd,CAAC;AACJ,CAAC;AAED,SAAgB,UAAU,CAAC,OAAyB;IAClD,kDAAkD;IAClD,MAAM,SAAS,GACb,IAAA,uBAAc,EAAC,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,OAAO,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,KAAgB;QAC9B,qBAAqB,CAAC;IAExB,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,CAC3B,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,mBAAmB,SAAS,EAAE,CAAC,EACxD,EAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,6CAA6C,EAAC,CACxE,CAAC;IAEF,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IAEpE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,CAAC,QAAQ,CACf,WAAW,SAAS,CAAC,MAAM,CAAC,qBAAqB,UAAU,EAAE,EAC7D,EAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAC,CAC7B,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAgB,aAAa,CAC3B,OAAyB,EACzB,OAA6B;IAE7B,OAAO,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC;AACvE,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAAyB;IACxD,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAyB;IACtD,MAAM,KAAK,GAAG;QACZ,cAAc,IAAA,0CAAoB,EAAC,OAAO,CAAC,EAAE,CAAC,EAAE;QAChD,kBAAkB,OAAO,CAAC,MAAM,EAAE;KACnC,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAA,0CAAoB,EAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAA,0CAAoB,EAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,KAAK,CAAC,IAAI,CACR,uBAAuB,IAAA,0CAAoB,EACzC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CACpC,EAAE,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,4BAA4B,IAAA,0CAAoB,EAC9C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CACzC,EAAE,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CACR,gBAAgB,IAAA,0CAAoB,EAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CACrE,CAAC;IACJ,CAAC;IACD,IACE,OAAO,CAAC,eAAe;QACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAC/C,CAAC;QACD,KAAK,CAAC,IAAI,CACR,2BAA2B,IAAA,0CAAoB,EAC7C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CACxC,EAAE,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,OAAkB;IACrC,MAAM,UAAU,GACd,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,OAAO,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,8BAA8B,CACrC,GAAuB,EACvB,OAAiB;IAEjB,MAAM,QAAQ,GAAG;QACf,aAAa,sBAAoB,WAAW;QAC5C,cAAc,WAAW,CAAC,OAAO,CAAC,EAAE;KACrC,CAAC;IACF,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAC/D,gBAAgB,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CACX,aAAa,IAAA,0CAAoB,EAAC,MAAM,CAAC,IAAI,IAAA,0CAAoB,EAC/D,KAAK,CACN,EAAE,CACJ,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CACX,aAAa,IAAA,0CAAoB,EAAC,MAAM,CAAC,IAAI,IAAA,0CAAoB,EAC/D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CACtB,EAAE,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAG;YACd,SAAS;YACT,QAAQ;YACR,YAAY;YACZ,SAAS;YACT,SAAS;YACT,WAAW;YACX,iBAAiB;YACjB,MAAM;YACN,OAAO;YACP,SAAS;YACT,UAAU;YACV,YAAY;YACZ,aAAa;YACb,gBAAgB;YAChB,gBAAgB;YAChB,cAAc;YACd,QAAQ;YACR,gBAAgB;SACjB,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;gBACvC,QAAQ,CAAC,IAAI,CACX,GAAG,IAAA,0CAAoB,EAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAA,0CAAoB,EAC3D,MAAM,CACP,IAAI,IAAA,0CAAoB,EAAC,KAAK,CAAC,EAAE,CACnC,CAAC;YACJ,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CACX,GAAG,IAAA,0CAAoB,EAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAA,0CAAoB,EAC3D,MAAM,CACP,IAAI,IAAA,0CAAoB,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CACnD,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAK,WAAsB,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9D,QAAQ,CAAC,IAAI,CAAC,yBAAyB,IAAA,0CAAoB,EAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;SAAM,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CACX,yBAAyB,IAAA,0CAAoB,EAC3C,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAC5B,EAAE,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA+B;IACxD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG;QACd,WAAW;QACX,WAAW;QACX,WAAW;QACX,SAAS;QACT,UAAU;QACV,UAAU;QACV,YAAY;QACZ,cAAc;QACd,QAAQ;KACT,CAAC;IACF,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QACzB,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;YACnE,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;gBAClC,QAAQ,CAAC,IAAI,CAAC,WAAW,IAAA,0CAAoB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CACX,WAAW,IAAA,0CAAoB,EAAC,MAAM,CAAC,IAAI,IAAA,0CAAoB,EAC7D,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CACvB,EAAE,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,OAAwC;IAC7D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CACX,QAAQ,IAAA,0CAAoB,EAAC,GAAG,CAAC,IAAI,IAAA,0CAAoB,EACvD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAClC,EAAE,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAyB;IACtD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;YAC5C,IAAI,WAAW,CAAC,IAAI,IAAI,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpD,QAAQ,CAAC,IAAI,CACX,gBAAgB,IAAA,0CAAoB,EAClC,WAAW,CAAC,KAAK,CAClB,IAAI,IAAA,0CAAoB,EAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,CACzD,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YAClE,IAAI,KAAK,IAAI,SAAS,CAAC,KAAe,CAAC,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CACX,gBAAgB,IAAA,0CAAoB,EAAC,GAAG,CAAC,IAAI,IAAA,0CAAoB,EAC/D,SAAS,CAAC,KAAe,CAAC,CAC3B,EAAE,CACJ,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,gBAAgB,CAC9B,OAAyB,EACzB,OAA6B;IAE7B,kPAAkP;IAClP,MAAM,QAAQ,GAAG;QACf,aAAa,sBAAoB,WAAW;QAC5C,cAAc,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;KAC/C,CAAC;IAEF,sDAAsD;IACtD,QAAQ,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,sCAAsC;IACtC,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAEzC,sDAAsD;IACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,EAAE,CACrD,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,CACpC,CAAC;IACF,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,EAAE,CAClD,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAC/B,CAAC;IACF,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;QACxB,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,QAAQ,CAAC,MAAM,CACb,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,EAClD,CAAC;IACD,4CAA4C;IAC5C,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAClC,CAAC;IAEF,yCAAyC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAC1B,QAAQ,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,EAC1E,CAAC,CACF,CAAC,CAAC,CAAC,CAAC;IACL,MAAM,IAAI,GAAG,gBAAgB,IAAA,0CAAoB,EAC/C,OAAO,CAAC,eAAe;SACpB,GAAG,CACF,CAAC,KAAiE,EAAE,EAAE,CACpE,UAAU,CAAC,KAAK,CAAC,CACpB;SACA,IAAI,CAAC,MAAM,CAAC,CAChB,EAAE,CAAC;IACJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,QAAQ,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,EAAE,CAChC,UAAU,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAC5C,EACD,CAAC,CACF,CAAC,CAAC,CAAC,CAAC;IACL,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,8DAA8D;IAEnH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAAyB;IACxD,OAAO,CACL,IAAA,uBAAc,EAAC,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,KAAK,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,GAAG;QAChB,mBAAmB,CACpB,CAAC;AACJ,CAAC;AAED,SAAgB,WAAW,CAAC,OAAyB;IACnD,OAAO,CAAC,CAAC,QAAQ,CACf,SAAS,CACP,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,gBAAgB,CAAC,OAAO,CAAC,EAAE,CACtE,EACD,EAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,iDAAiD,EAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CAAC,OAAyB;IAC3D,MAAM,SAAS,GACb,IAAA,uBAAc,EAAC,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,OAAO,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,KAAgB;QAC9B,qBAAqB,CAAC;IAExB,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAgB,gBAAgB,CAC9B,IAAsB,EACtB,OAA6B;IAE7B,OAAO,kBAAkB,OAAO,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;AAC5D,CAAC;AAED,SAAgB,iBAAiB,CAAC,OAAyB;IACzD,OAAO,GAAG,OAAO,CAAC,EAAE,kBAAkB,CAAC;AACzC,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAAyB;IAC1D,OAAO,8BAA8B,CACnC,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,MAAM,CACf,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAAyB;IAC1D,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,IAAI,MAAM,CAAC,EAAE,CAAC;QAC5D,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import {createHash} from 'crypto';\nimport {\n  ContextualizedControl,\n  ContextualizedEvaluation,\n  contextualizeEvaluation,\n  convertFile,\n  ExecJSON\n} from 'inspecjs';\nimport * as _ from 'lodash';\nimport moment from 'moment';\nimport {version as HeimdallToolsVersion} from '../../../package.json';\nimport {getDescription} from '../../utils/global';\nimport {IFindingASFF, IOptions} from './asff-types';\nimport {\n  escapeForwardSlashes,\n  FromHdfToAsffMapper,\n  SegmentedControl\n} from './reverse-asff-mapper';\n\n//FromHdfToAsff mapper transformers\ntype Counts = {\n  Passed: number;\n  PassedTests: number;\n  Failed: number;\n  FailedTests: number;\n  PassingTestsFailedControl: number;\n  NotApplicable: number;\n  NotReviewed: number;\n};\n\nexport function getRunTime(hdf: ExecJSON.Execution): string {\n  let time = new Date().toISOString();\n  hdf.profiles.forEach((profile) => {\n    if (\n      profile.controls[0] &&\n      profile.controls[0].results.length &&\n      profile.controls[0].results[0].start_time\n    ) {\n      try {\n        time = new Date(\n          profile.controls[0].results[0].start_time\n        ).toISOString();\n      } catch {\n        time = new Date().toISOString();\n      }\n    }\n  });\n  return time;\n}\n\n/** Trivial overlay filter that just takes the version of the control that has results from amongst all identical ids */\nfunction filter_overlays(\n  controls: ContextualizedControl[]\n): ContextualizedControl[] {\n  const idHash: {[key: string]: ContextualizedControl} = {};\n  controls.forEach((c) => {\n    const id = c.hdf.wraps.id;\n    const old: ContextualizedControl | undefined = idHash[id];\n    // If old, gotta check if our new status list is \"better than\" old\n    if (old) {\n      const newSignificant = c.hdf.status_list && c.hdf.status_list.length > 0;\n      if (newSignificant) {\n        // Overwrite\n        idHash[id] = c;\n      }\n    } else {\n      // First time seeing this id\n      idHash[id] = c;\n    }\n  });\n\n  // Return the set of keys\n  return Array.from(Object.values(idHash));\n}\n\nexport function createProfileInfoFinding(\n  hdf: ExecJSON.Execution,\n  options: IOptions\n): IFindingASFF {\n  const runTime = getRunTime(hdf);\n  const inspecJSJson = convertFile(JSON.stringify(hdf));\n  const contextualizedEvaluation = contextualizeEvaluation(\n    inspecJSJson['1_0_ExecJson'] as any\n  );\n  const counts = statusCount(contextualizedEvaluation);\n  const updatedAt = new Date();\n  updatedAt.setMilliseconds(\n    updatedAt.getMilliseconds() +\n      (contextualizedEvaluation.contains[0].contains.length || 0)\n  );\n  const profileInfo: Record<string, unknown> = {\n    SchemaVersion: '2018-10-08',\n    Id: `${options.target}/${hdf.profiles[0].name}`,\n    ProductArn: `arn:aws:securityhub:${options.region}:${options.awsAccountId}:product/${options.awsAccountId}/default`,\n    GeneratorId: `arn:aws:securityhub:us-east-2:${options.awsAccountId}:ruleset/set/${hdf.profiles[0].name}`,\n    AwsAccountId: options.awsAccountId,\n    CreatedAt: runTime,\n    UpdatedAt: updatedAt,\n    Title: `${options.target} | ${hdf.profiles[0].name} | ${moment().format(\n      'YYYY-MM-DD hh:mm:ss [GMT]ZZ'\n    )}`,\n    Description: createDescription(counts),\n    Severity: {\n      Label: 'INFORMATIONAL'\n    },\n    FindingProviderFields: {\n      Severity: {\n        Label: 'INFORMATIONAL'\n      },\n      Types: createProfileInfoFindingFields(hdf, options)\n    },\n    Resources: [\n      {\n        Type: 'AwsAccount',\n        Id: `AWS::::Account:${options.awsAccountId}`,\n        Partition: 'aws',\n        Region: options.region\n      }\n    ]\n  };\n\n  // need the intermediate caste to tell typescript that this cast is intentional\n  return profileInfo as unknown as IFindingASFF;\n}\n\nexport function statusCount(evaluation: ContextualizedEvaluation): Counts {\n  let controls: ContextualizedControl[] = [];\n  // Get all controls\n  evaluation.contains.forEach((p) => controls.push(...p.contains));\n  controls = filter_overlays(controls);\n  const statusCounts: Counts = {\n    Passed: 0,\n    PassedTests: 0,\n    PassingTestsFailedControl: 0,\n    Failed: 0,\n    FailedTests: 0,\n    NotApplicable: 0,\n    NotReviewed: 0\n  };\n  controls.forEach((control) => {\n    if (control.hdf.status === 'Passed') {\n      statusCounts.Passed += 1;\n      statusCounts.PassedTests += (control.hdf.segments || []).length;\n    } else if (control.hdf.status === 'Failed') {\n      statusCounts.PassingTestsFailedControl += (\n        control.hdf.segments || []\n      ).filter((s) => s.status === 'passed').length;\n      statusCounts.FailedTests += (control.hdf.segments || []).filter(\n        (s) => s.status === 'failed'\n      ).length;\n      statusCounts.Failed += 1;\n    } else if (control.hdf.status === 'Not Applicable') {\n      statusCounts.NotApplicable += 1;\n    } else if (control.hdf.status === 'Not Reviewed') {\n      statusCounts.NotReviewed += 1;\n    }\n  });\n  return statusCounts;\n}\n\nexport function createDescription(counts: Counts): string {\n  return `Result Set Status Summary -- Passed: ${counts.Passed} (${\n    counts.PassedTests\n  } individual checks passed) --- Failed: ${counts.Failed} (${\n    counts.PassingTestsFailedControl\n  } individual checks failed out of ${\n    counts.PassingTestsFailedControl + counts.FailedTests\n  } total checks) --- Not Applicable: ${\n    counts.NotApplicable\n  } (System exception or absent component) --- Not Reviewed: ${\n    counts.NotReviewed\n  } (Can only be tested manually at this time)`;\n}\n\nexport function createAssumeRolePolicyDocument(\n  layersOfControl: ExecJSON.Control[],\n  segment: ExecJSON.ControlResult\n): string {\n  const segmentOverview = createNote(segment);\n  const code = layersOfControl.map((layer) => createCode(layer)).join('\\n\\n');\n  return `${code}\\n\\n${segmentOverview}`;\n}\n\n// Gets rid of extra spacing + newlines as these aren't shown in Security Hub\nexport function cleanText(text?: string | null): string | undefined {\n  if (text) {\n    return text.replace(/  +/g, ' ');\n  } else {\n    return undefined;\n  }\n}\n\n// Gets all layers of a control across overlaid profiles given the ID\nexport function getAllLayers(\n  hdf: ExecJSON.Execution,\n  knownControl: ExecJSON.Control\n): (ExecJSON.Control & Record<string, unknown>)[] {\n  if (hdf.profiles.length === 1) {\n    return [\n      {\n        ...knownControl,\n        profileInfo: {\n          ..._.omit(hdf.profiles[0], 'controls')\n        }\n      }\n    ];\n  } else {\n    const foundControls: (ExecJSON.Control & Record<string, unknown>)[] = [];\n    // For each control in each profile\n    hdf.profiles.forEach((profile) => {\n      profile.controls.forEach((control) => {\n        if (control.id === knownControl.id) {\n          foundControls.push({\n            ...control,\n            profileInfo: {..._.omit(profile, 'controls')}\n          });\n        }\n      });\n    });\n    return foundControls;\n  }\n}\n\n// Creates Note field containing control status\nexport function createNote(segment: ExecJSON.ControlResult) {\n  if (segment.message) {\n    return `Test Description: ${segment.code_desc} --- Test Result: ${segment.message}`;\n  } else if (segment.skip_message) {\n    return `Test Description: ${segment.code_desc} --- Skip Message: ${segment.skip_message}`;\n  } else {\n    return `Test Description: ${segment.code_desc}`;\n  }\n}\n\nfunction cleanObjectValues<T>(value: T): boolean {\n  if (Array.isArray(value)) {\n    return value.length < 0;\n  }\n  return !Boolean(value);\n}\n\nexport function createCode(\n  control: ExecJSON.Control & {profileInfo?: Record<string, unknown>}\n) {\n  const noCodeValue =\n    ((_.get(control, 'profileInfo.depends') || []) as Record<string, unknown>[])\n      .length > 0\n      ? ''\n      : JSON.stringify(\n          _.omitBy(\n            _.omit(control, ['results', 'profileInfo']),\n            cleanObjectValues\n          )\n        );\n  if (!control.code && noCodeValue === '') {\n    return '';\n  }\n  return `=========================================================\\n# Profile name: ${\n    control.profileInfo?.name\n  }\\n=========================================================\\n\\n${\n    control.code ? control.code?.replace(/\\\\\\\"/g, '\"') : noCodeValue\n  }`;\n}\n\nexport function setupId(\n  control: SegmentedControl,\n  context?: FromHdfToAsffMapper\n) {\n  const target = context?.ioptions.target;\n  const name = context?.data.profiles[0].name;\n\n  return `${target}/${name}/${control.id}/finding/${createHash('sha256')\n    .update(control.id + control.result.code_desc)\n    .digest('hex')}`;\n}\n\nexport function setupProductARN(\n  _val: SegmentedControl,\n  context?: FromHdfToAsffMapper\n) {\n  return `arn:aws:securityhub:${context?.ioptions.region}:${context?.ioptions.awsAccountId}:product/${context?.ioptions.awsAccountId}/default`;\n}\n\nexport function setupAwsAcct(\n  _val: SegmentedControl,\n  context?: FromHdfToAsffMapper\n) {\n  return context?.ioptions.awsAccountId;\n}\n\nexport function setupCreated(control: SegmentedControl) {\n  try {\n    return (\n      new Date(control.result.start_time).toISOString() ||\n      new Date().toISOString()\n    );\n  } catch {\n    return new Date().toISOString();\n  }\n}\n\nexport function setupRegion(\n  _val: SegmentedControl,\n  context?: FromHdfToAsffMapper\n) {\n  return context?.ioptions.region;\n}\nexport function setupUpdated(\n  _control: SegmentedControl,\n  context?: FromHdfToAsffMapper\n) {\n  // Add one millisecond to the time by control index so the order is correct in security hub\n  const time = new Date();\n  time.setMilliseconds(time.getMilliseconds() + (context?.index || 0));\n  return time.toISOString();\n}\n\nexport function setupGeneratorId(\n  control: SegmentedControl,\n  context?: FromHdfToAsffMapper\n) {\n  return `arn:aws:securityhub:${context?.ioptions.region}:${context?.ioptions.awsAccountId}:ruleset/set/${context?.data.profiles[0].name}/rule/${control.id}`;\n}\n\nexport function setupTitle(control: SegmentedControl) {\n  const nistTags = control.tags.nist ? `[${control.tags.nist.join(', ')}]` : '';\n  return _.truncate(\n    `${control.id} | ${nistTags} | ${cleanText(control.title)}`,\n    {length: 256}\n  );\n}\n\nexport function setupDescr(control: SegmentedControl) {\n  // Check text can either be a description or a tag\n  const checkText: string =\n    getDescription(control.descriptions || [], 'check') ||\n    (control.tags.check as string) ||\n    'Check not available';\n\n  const currentVal = _.truncate(\n    cleanText(`${control.desc} -- Check Text: ${checkText}`),\n    {length: 1024, omission: '[SEE FULL TEXT IN AssumeRolePolicyDocument]'}\n  );\n\n  const caveat = getDescription(control.descriptions || [], 'caveat');\n\n  if (caveat) {\n    return _.truncate(\n      `Caveat: ${cleanText(caveat)} --- Description: ${currentVal}`,\n      {length: 1024, omission: ''}\n    );\n  }\n  return currentVal;\n}\n\nexport function setupSevLabel(\n  control: SegmentedControl,\n  context?: FromHdfToAsffMapper\n) {\n  return context?.impactMapping.get(control.impact) || 'INFORMATIONAL';\n}\n\nexport function setupSevOriginal(control: SegmentedControl) {\n  return `${control.impact}`;\n}\n\nfunction createControlMetadata(control: SegmentedControl) {\n  const types = [\n    `Control/ID/${escapeForwardSlashes(control.id)}`,\n    `Control/Impact/${control.impact}`\n  ];\n  if (control.title) {\n    types.push(`Control/Title/${escapeForwardSlashes(control.title)}`);\n  }\n  if (control.desc) {\n    types.push(`Control/Desc/${escapeForwardSlashes(control.desc)}`);\n  }\n  if (control.waiver_data && Object.keys(control.waiver_data).length > 0) {\n    types.push(\n      `Control/Waiver_Data/${escapeForwardSlashes(\n        JSON.stringify(control.waiver_data)\n      )}`\n    );\n  }\n  if (control.attestation_data) {\n    types.push(\n      `Control/Attestation_Data/${escapeForwardSlashes(\n        JSON.stringify(control.attestation_data)\n      )}`\n    );\n  }\n  if (control.refs && control.refs.length > 0) {\n    types.push(\n      `Control/Refs/${escapeForwardSlashes(JSON.stringify(control.refs))}`\n    );\n  }\n  if (\n    control.source_location &&\n    Object.keys(control.source_location).length > 0\n  ) {\n    types.push(\n      `Control/Source_Location/${escapeForwardSlashes(\n        JSON.stringify(control.source_location)\n      )}`\n    );\n  }\n  return types;\n}\n\nfunction getFilename(options?: IOptions): string {\n  const slashSplit =\n    options?.input.split('\\\\')[options?.input.split('\\\\').length - 1];\n  return slashSplit?.split('/')[slashSplit.split('/').length - 1] ?? '';\n}\n\nfunction createProfileInfoFindingFields(\n  hdf: ExecJSON.Execution,\n  options: IOptions\n): string[] {\n  const typesArr = [\n    `MITRE/SAF/${HeimdallToolsVersion}-hdf2asff`,\n    `File/Input/${getFilename(options)}`\n  ];\n  const executionTargets = ['platform', 'statistics', 'version'];\n  executionTargets.forEach((target) => {\n    const value = _.get(hdf, target);\n    if (_.isString(value) && value.trim()) {\n      typesArr.push(\n        `Execution/${escapeForwardSlashes(target)}/${escapeForwardSlashes(\n          value\n        )}`\n      );\n    } else {\n      typesArr.push(\n        `Execution/${escapeForwardSlashes(target)}/${escapeForwardSlashes(\n          JSON.stringify(value)\n        )}`\n      );\n    }\n  });\n  hdf.profiles.forEach((profile) => {\n    const targets = [\n      'version',\n      'sha256',\n      'maintainer',\n      'summary',\n      'license',\n      'copyright',\n      'copyright_email',\n      'name',\n      'title',\n      'depends',\n      'supports',\n      'attributes',\n      'description',\n      'inspec_version',\n      'parent_profile',\n      'skip_message',\n      'status',\n      'status_message'\n    ];\n    targets.forEach((target) => {\n      const value = _.get(profile, target);\n      if (typeof value === 'string' && value) {\n        typesArr.push(\n          `${escapeForwardSlashes(profile.name)}/${escapeForwardSlashes(\n            target\n          )}/${escapeForwardSlashes(value)}`\n        );\n      } else if (typeof value === 'object') {\n        typesArr.push(\n          `${escapeForwardSlashes(profile.name)}/${escapeForwardSlashes(\n            target\n          )}/${escapeForwardSlashes(JSON.stringify(value))}`\n        );\n      }\n    });\n  });\n  const passthrough = _.get(hdf, 'passthrough');\n  if (_.isString(passthrough) && (passthrough as string).trim()) {\n    typesArr.push(`Execution/passthrough/${escapeForwardSlashes(passthrough)}`);\n  } else if (passthrough !== undefined) {\n    typesArr.push(\n      `Execution/passthrough/${escapeForwardSlashes(\n        JSON.stringify(passthrough)\n      )}`\n    );\n  }\n  return typesArr;\n}\n\nfunction createSegmentInfo(segment: ExecJSON.ControlResult): string[] {\n  const typesArr: string[] = [];\n  const targets = [\n    'backtrace',\n    'exception',\n    'code_desc',\n    'message',\n    'resource',\n    'run_time',\n    'start_time',\n    'skip_message',\n    'status'\n  ];\n  targets.forEach((target) => {\n    if (_.has(segment, target) && _.get(segment, target) !== undefined) {\n      if (_.get(segment, target) === '') {\n        typesArr.push(`Segment/${escapeForwardSlashes(target)}/''`);\n      } else {\n        typesArr.push(\n          `Segment/${escapeForwardSlashes(target)}/${escapeForwardSlashes(\n            _.get(segment, target)\n          )}`\n        );\n      }\n    }\n  });\n  return typesArr;\n}\n\nfunction createTagInfo(control: {tags: Record<string, unknown>}): string[] {\n  const typesArr: string[] = [];\n  for (const tag in control.tags) {\n    typesArr.push(\n      `Tags/${escapeForwardSlashes(tag)}/${escapeForwardSlashes(\n        JSON.stringify(control.tags[tag])\n      )}`\n    );\n  }\n  return typesArr;\n}\n\nfunction createDescriptionInfo(control: ExecJSON.Control): string[] {\n  const typesArr: string[] = [];\n  if (Array.isArray(control.descriptions)) {\n    control.descriptions?.forEach((description) => {\n      if (description.data && cleanText(description.data)) {\n        typesArr.push(\n          `Descriptions/${escapeForwardSlashes(\n            description.label\n          )}/${escapeForwardSlashes(cleanText(description.data))}`\n        );\n      }\n    });\n  } else {\n    Object.entries(control.descriptions || {}).forEach(([key, value]) => {\n      if (value && cleanText(value as string)) {\n        typesArr.push(\n          `Descriptions/${escapeForwardSlashes(key)}/${escapeForwardSlashes(\n            cleanText(value as string)\n          )}`\n        );\n      }\n    });\n  }\n\n  return typesArr;\n}\n\nexport function setupFindingType(\n  control: SegmentedControl,\n  context?: FromHdfToAsffMapper\n) {\n  // typesArr needs to be ordered so that attributes that are likely to be bloated and/or contain less necessary information end up at the bottom so that they don't expand and push more attributes outside of the list which is capped at 50 items\n  const typesArr = [\n    `MITRE/SAF/${HeimdallToolsVersion}-hdf2asff`,\n    `File/Input/${getFilename(context?.ioptions)}`\n  ];\n\n  // Add control metadata to the Finding Provider Fields\n  typesArr.push(...createControlMetadata(control));\n  // Add segment/result information to Finding Provider Fields\n  typesArr.push(...createSegmentInfo(control.result));\n  // Add Tags to Finding Provider Fields\n  typesArr.push(...createTagInfo(control));\n\n  // nist tag, then subdescriptions, then remaining tags\n  const nistTagIndex = typesArr.findIndex((typeString) =>\n    typeString.startsWith('Tags/nist/')\n  );\n  const tagsIndex = typesArr.findIndex((typeString) =>\n    typeString.startsWith('Tags/')\n  );\n  if (nistTagIndex !== -1) {\n    typesArr.splice(tagsIndex, 0, typesArr.splice(nistTagIndex, 1)[0]);\n  }\n  typesArr.splice(\n    tagsIndex === -1 ? typesArr.length : tagsIndex + 1,\n    0,\n    // Add Descriptions to FindingProviderFields\n    ...createDescriptionInfo(control)\n  );\n\n  // description, then code, then code_desc\n  const desc = typesArr.splice(\n    typesArr.findIndex((typeString) => typeString.startsWith('Control/Desc/')),\n    1\n  )[0];\n  const code = `Control/Code/${escapeForwardSlashes(\n    control.layersOfControl\n      .map(\n        (layer: ExecJSON.Control & {profileInfo?: Record<string, unknown>}) =>\n          createCode(layer)\n      )\n      .join('\\n\\n')\n  )}`;\n  const codeDesc = typesArr.splice(\n    typesArr.findIndex((typeString) =>\n      typeString.startsWith('Segment/code_desc/')\n    ),\n    1\n  )[0];\n  typesArr.push(..._.compact([desc, code, codeDesc])); // [][0] can return undefined so use compact to deal with them\n\n  return typesArr;\n}\n\nexport function getFixForControl(control: SegmentedControl) {\n  return (\n    getDescription(control.descriptions || [], 'fix') ||\n    control.tags.fix ||\n    'Fix not available'\n  );\n}\n\nexport function setupRemRec(control: SegmentedControl) {\n  return _.truncate(\n    cleanText(\n      `${createNote(control.result)} --- Fix: ${getFixForControl(control)}`\n    ),\n    {length: 512, omission: '... [SEE FULL TEXT IN AssumeRolePolicyDocument]'}\n  );\n}\n\nexport function setupProdFieldCheck(control: SegmentedControl) {\n  const checkText: string =\n    getDescription(control.descriptions || [], 'check') ||\n    (control.tags.check as string) ||\n    'Check not available';\n\n  return _.truncate(checkText, {length: 2048, omission: ''});\n}\n\nexport function setupResourcesID(\n  _val: SegmentedControl,\n  context?: FromHdfToAsffMapper\n) {\n  return `AWS::::Account:${context?.ioptions.awsAccountId}`;\n}\n\nexport function setupResourcesID2(control: SegmentedControl) {\n  return `${control.id} Validation Code`;\n}\n\nexport function setupDetailsAssume(control: SegmentedControl) {\n  return createAssumeRolePolicyDocument(\n    control.layersOfControl,\n    control.result\n  );\n}\n\nexport function setupControlStatus(control: SegmentedControl) {\n  if (control.results.some((result) => 'backtrace' in result)) {\n    return 'NOT_AVAILABLE';\n  }\n  const status: string | boolean =\n    control.result.status === 'skipped'\n      ? 'WARNING'\n      : control.result.status === 'passed';\n  if (typeof status === 'boolean') {\n    return status ? 'PASSED' : 'FAILED';\n  }\n  return status;\n}\n"]}

package/lib/src/converters-from-hdf/caat/reverse-caat-mapper.d.ts

@@ -1,32 +0,0 @@
-import * as XLSX from '@e965/xlsx';
-import { CanonizationConfig, ContextualizedControl, ContextualizedEvaluation, ExecJSON, HDFControl } from 'inspecjs';
-export type InputData = {
-    data: string | ExecJSON.Execution | ContextualizedEvaluation;
-    filename?: string;
-    controls?: ContextualizedControl[];
-};
-type Data = InputData & {
-    data: ContextualizedEvaluation;
-    filename: string;
-};
-export declare const CAATHeaders: readonly ["Control Number", "Finding Title", "Date Identified", "Finding ID", "Information System or Program Name", "Repeat Findings", "Repeat Finding Weakness ID", "Finding Description", "Weakness Description", "Control Weakness Type", "Source", "Assessment/Audit Company", "Test Method", "Test Objective", "Test Result Description", "Test Result", "Recommended Corrective Action(s)", "Effect on Business", "Likelihood", "Impact"];
-export type CAATRow = Partial<Record<(typeof CAATHeaders)[number], string | undefined>>;
-export declare class FromHDFToCAATMapper {
-    static readonly MaxCellSize = 32000;
-    static readonly MaxSheetNameLength = 31;
-    static readonly NistCanonizationConfig: CanonizationConfig;
-    static readonly FileSettings: XLSX.Properties;
-    static readonly SheetOptions: XLSX.JSON2SheetOpts;
-    static formatDate(date: Date, delimiter: string): string;
-    static fix(str?: string | null): string;
-    data: Data[];
-    constructor(data: InputData | InputData[]);
-    newCaveat(hdf: HDFControl): string;
-    newTestResultDescription(hdf: HDFControl): string;
-    newTestResult(hdf: HDFControl): string;
-    newImpact(hdf: HDFControl): string;
-    getRow(control: ContextualizedControl, filename: string): CAATRow[];
-    toCAAT(returnWorkBook?: boolean, options?: XLSX.WritingOptions): any;
-}
-export {};
-//# sourceMappingURL=reverse-caat-mapper.d.ts.map

package/lib/src/converters-from-hdf/caat/reverse-caat-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"reverse-caat-mapper.d.ts","sourceRoot":"","sources":["../../../../src/converters-from-hdf/caat/reverse-caat-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,YAAY,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EAExB,QAAQ,EACR,UAAU,EAEX,MAAM,UAAU,CAAC;AAIlB,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,SAAS,GAAG,wBAAwB,CAAC;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,qBAAqB,EAAE,CAAC;CACpC,CAAC;AAEF,KAAK,IAAI,GAAG,SAAS,GAAG;IAAC,IAAI,EAAE,wBAAwB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAC,CAAC;AAE3E,eAAO,MAAM,WAAW,ibAqBd,CAAC;AAEX,MAAM,MAAM,OAAO,GAAG,OAAO,CAC3B,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC,CACzD,CAAC;AAEF,qBAAa,mBAAmB;IAC9B,MAAM,CAAC,QAAQ,CAAC,WAAW,SAAS;IACpC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,MAAM;IAExC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,kBAAkB,CAKxD;IAEF,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAK3C;IAEF,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,cAAc,CAE/C;IAEF,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAWxD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM;IAMvC,IAAI,EAAE,IAAI,EAAE,CAAC;gBAGD,IAAI,EAAE,SAAS,GAAG,SAAS,EAAE;IA6BzC,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM;IAOlC,wBAAwB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM;IAiBjD,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM;IAItC,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM;IAQlC,MAAM,CAAC,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE;IAkDnE,MAAM,CACJ,cAAc,UAAQ,EACtB,OAAO,GAAE,IAAI,CAAC,cAAmD;CAkEpE"}