@mitre/hdf-converters 2.13.0 → 3.0.1

package/lib/src/veracode-mapper.js

@@ -1,491 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.VeracodeMapper = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const CweNistMapping_1 = require("./mappings/CweNistMapping");
-const global_1 = require("./utils/global");
-const STATIC_FLAWS = 'staticflaws.flaw';
-const SEVERITY = 'detailedreport.severity';
-const FILE_PATH_VALUE = 'file_paths.file_path.@_.value';
-const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping();
-const DEFAULT_NIST_TAG = ['SI-2', 'RA-5'];
-const IMPACT_MAPPING = new Map([
-    ['5', 0.9],
-    ['4', 0.7],
-    ['3', 0.5],
-    ['2', 0.3],
-    ['1', 0.1],
-    ['0', 0.0]
-]);
-function impactMapping(severity) {
-    return IMPACT_MAPPING.get(severity.toString()) || 0.1;
-}
-function nistTag(input) {
-    const cwes = [];
-    let cwe = _.get(input, 'cwe');
-    if (!Array.isArray(cwe)) {
-        cwe = [cwe];
-    }
-    cwes.push(...cwe.map((value) => _.get(value, '@_.cweid')));
-    return CWE_NIST_MAPPING.nistFilter(cwes, DEFAULT_NIST_TAG);
-}
-function formatRecommendations(input) {
-    const text = [];
-    if (_.has(input, 'recommendations.para')) {
-        if (_.has(input, 'recommendations.para.@_.text')) {
-            text.push(`${_.get(input, 'recommendations.para.@_.text')}`);
-        }
-        else {
-            text.push(..._.get(input, `recommendations.para`).map((value) => _.get(value, '@_.text')));
-        }
-    }
-    if (_.has(input, 'recommendations.para.bulletitem')) {
-        if (Array.isArray(_.get(input, `recommendations.para.bulletitem`))) {
-            text.push(..._.get(input, `recommendations.para.bulletitem`).map((value) => _.get(value, '@_.text')));
-        }
-    }
-    return text.join('\n');
-}
-function formatDesc(input) {
-    const text = [];
-    if (_.has(input, 'desc.para')) {
-        if (_.has(input, 'desc.para.@_.text')) {
-            text.push(`${_.get(input, 'desc.para.@_.text')}`);
-        }
-        else {
-            text.push(..._.get(input, `desc.para`).map((value) => _.get(value, '@_.text')));
-        }
-    }
-    return text.join('\n');
-}
-function formatCweData(input) {
-    const text = [];
-    const categories = [
-        'pcrirelated',
-        'owasp',
-        'owasp2013',
-        'sans',
-        'certc',
-        'certccp',
-        'certjava',
-        'owaspmobile'
-    ];
-    if (_.has(input, 'cwe')) {
-        let cweInput = _.get(input, 'cwe');
-        if (!Array.isArray(cweInput)) {
-            cweInput = [cweInput];
-        }
-        text.push(...cweInput.map((cweinfo) => {
-            let cwe = `CWE-${_.get(cweinfo, '@_.cweid')}: `;
-            cwe += `${_.get(cweinfo, '@_.cwename')}`;
-            cwe += categories
-                .map((value) => {
-                if (_.has(cweinfo, `@_.${value}`)) {
-                    const val = _.get(cweinfo, `@_.${value}`);
-                    return `${value}: ${val}\n`;
-                }
-                else {
-                    return '';
-                }
-            })
-                .join('');
-            return cwe;
-        }));
-    }
-    return text.join('\n');
-}
-function formatCweDesc(input) {
-    const text = [];
-    if (_.has(input, 'cwe')) {
-        let cwe = _.get(input, 'cwe');
-        if (!Array.isArray(cwe)) {
-            cwe = [cwe];
-        }
-        text.push(...cwe.map((value) => `CWE-${_.get(value, '@_.cweid')}: ${_.get(value, '@_.cwename')} Description: ${_.get(value, 'description.text.@_.text')}; `));
-    }
-    return text.join('\n');
-}
-function getFlaws(input) {
-    const flawArr = [];
-    if (!Array.isArray(input)) {
-        input = [input];
-    }
-    for (const value of input) {
-        // change name
-        let staticFlaw = _.get(value, STATIC_FLAWS);
-        if (!Array.isArray(staticFlaw)) {
-            staticFlaw = [staticFlaw];
-        }
-        flawArr.push(...staticFlaw);
-    }
-    return flawArr;
-}
-function formatCodeDesc(input) {
-    let flawDesc = '';
-    const categories = [
-        ['Line Number', 'line'],
-        ['Affect Policy Compliance', 'affects_policy_compliance'],
-        ['Remediation Effort', 'remediationeffort'],
-        ['Exploit level', 'exploitLevel'],
-        ['Issue ID', 'issueid'],
-        ['Module', 'module'],
-        ['Type', 'type'],
-        ['CWE ID', 'cweid'],
-        ['Date First Occurence', 'date_first_occurence'],
-        ['CIA Impact', 'cia_impact'],
-        ['Description', 'description'],
-        ['Source File', 'sourcefile'],
-        ['Scope', 'scope'],
-        ['CIA Impact', 'cia_impact'],
-        ['PCI Related', 'pcirelated'],
-        ['Function Prototype', 'functionprototype'],
-        ['Function Relative Location', 'functionrelativelocation']
-    ];
-    if (_.has(input, '@_.sourcefilepath')) {
-        flawDesc = `Sourcefile Path: ${_.get(input, '@_.sourcefilepath')}\n`;
-        flawDesc += categories
-            .map(([title, name]) => {
-            if (_.has(input, `@_.${name}`)) {
-                const nameVal = _.get(input, `@_.${name}`);
-                return `${title}: ${nameVal}\n`;
-            }
-            else {
-                return '';
-            }
-        })
-            .join('');
-    }
-    return flawDesc;
-}
-function formatSCACodeDesc(input) {
-    let flawDesc = '';
-    const categories = [
-        'sha1',
-        'file_name',
-        'max_cvss_score',
-        'version',
-        'library',
-        'library_id',
-        'vendor',
-        'description',
-        'added_date',
-        'component_affects_policy_compliance'
-    ];
-    if (_.has(input, '@_.component_id')) {
-        flawDesc = `component_id: ${_.get(input, '@_.component_id')}\n`;
-        flawDesc += _.compact(categories.map((value) => {
-            if (_.has(input, `@_.${value}`)) {
-                const val = _.get(input, `@_.${value}`);
-                return `${value}: ${val}`;
-            }
-            else {
-                return '';
-            }
-        })).join('\n');
-        if (_.has(input, FILE_PATH_VALUE)) {
-            flawDesc += `\nfile_path: ${_.get(input, FILE_PATH_VALUE)}\n`;
-        }
-    }
-    return flawDesc;
-}
-function formatSourceLocation(input) {
-    const flawArr = [];
-    if (!Array.isArray(input)) {
-        input = [input];
-    }
-    for (const value of input) {
-        if (!Array.isArray(_.get(value, STATIC_FLAWS))) {
-            flawArr.push(_.get(value, STATIC_FLAWS));
-        }
-        else {
-            flawArr.push(..._.get(value, STATIC_FLAWS));
-        }
-    }
-    return flawArr.map((value) => _.get(value, '@_.sourcefile')).join('\n');
-}
-function componentListCreate(input) {
-    const componentList = [];
-    let component = _.get(input, 'component');
-    if (!Array.isArray(component)) {
-        component = [component];
-    }
-    for (const value of component) {
-        if (_.get(value, '@_.vulnerabilities') !== '0') {
-            componentList.push(value);
-        }
-    }
-    return componentList;
-}
-function componentTransform(input) {
-    const componentList = componentListCreate(input);
-    const vulns = componentList
-        .map((component) => {
-        let vulnerability = _.get(component, 'vulnerabilities.vulnerability');
-        if (!Array.isArray(vulnerability)) {
-            vulnerability = [vulnerability];
-        }
-        vulnerability = vulnerability.map((vuln) => ({
-            ...vuln,
-            components: [component]
-        }));
-        return vulnerability;
-    })
-        .flat()
-        .reduce((acc, cur) => {
-        const cveId = _.get(cur, '@_.cve_id');
-        const index = acc.findIndex((vuln) => cveId === _.get(vuln, '@_.cve_id'));
-        if (index === -1) {
-            return [...acc, cur];
-        }
-        else {
-            _.get(acc[index], 'components').push(..._.get(cur, 'components'));
-            return acc;
-        }
-    }, []);
-    return vulns;
-}
-function controlMappingCve() {
-    return {
-        id: { path: '@_.cve_id' },
-        title: { path: '@_.cve_id' },
-        desc: { path: '@_.cve_summary' },
-        impact: { path: '@_.severity', transformer: impactMapping },
-        refs: [],
-        tags: {
-            cwe: { path: '@_.cwe_id' },
-            nist: {
-                path: '@_.cwe_id',
-                transformer: (value) => {
-                    if (!Array.isArray(value)) {
-                        value = [value];
-                    }
-                    return CWE_NIST_MAPPING.nistFilter(value.map((val) => val.substring(4)), DEFAULT_NIST_TAG);
-                }
-            }
-        },
-        source_location: {
-            ref: {
-                transformer: (vuln) => _.get(vuln, 'components')
-                    .map((comp) => _.get(comp, FILE_PATH_VALUE))
-                    .join('\n')
-            }
-        },
-        results: [
-            {
-                path: 'components',
-                status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                code_desc: { transformer: formatSCACodeDesc },
-                start_time: { path: '$.detailedreport.@_.first_build_submitted_date' }
-            }
-        ]
-    };
-}
-function controlMappingCwe(severity) {
-    return {
-        id: { path: '@_.categoryid' },
-        title: { path: '@_.categoryname' },
-        desc: { transformer: formatDesc },
-        descriptions: [
-            {
-                data: { transformer: formatRecommendations },
-                label: 'fix'
-            }
-        ],
-        impact: impactMapping(severity),
-        refs: [],
-        tags: {
-            cweid: { transformer: formatCweData },
-            cweDescription: { transformer: formatCweDesc },
-            cci: {
-                transformer: (data) => (0, global_1.getCCIsForNISTTags)(nistTag(data))
-            },
-            nist: { transformer: nistTag }
-        },
-        source_location: {
-            ref: {
-                path: 'cwe',
-                transformer: formatSourceLocation
-            }
-        },
-        results: [
-            {
-                path: 'cwe',
-                pathTransform: getFlaws,
-                status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                code_desc: { transformer: formatCodeDesc },
-                start_time: { path: '$.detailedreport.@_.first_build_submitted_date' },
-                message: {
-                    path: 'exploitability_adjustments.exploitability_adjustment.note'
-                }
-            }
-        ]
-    };
-}
-function componentPass(component) {
-    const vulnList = [];
-    _.set(component, 'control_ids', vulnList);
-    if (_.get(component, 'vulnerabilities') !== '') {
-        if (!Array.isArray(_.get(component, 'vulnerabilities.vulnerability'))) {
-            vulnList.push(_.get(component, 'vulnerabilities.vulnerability.@_.cve_id'));
-            _.set(component, 'control_ids', vulnList);
-        }
-        else {
-            vulnList.push(..._.get(component, 'vulnerabilities.vulnerability').map((vuln) => _.get(vuln, '@_.cve_id')));
-            _.set(component, 'control_ids', vulnList);
-        }
-    }
-    return _.omit(component, 'vulnerabilities');
-}
-class VeracodeMapper extends base_converter_1.BaseConverter {
-    originalData;
-    defaultMapping(withRaw = false) {
-        return {
-            platform: {
-                name: 'Heimdall Tools',
-                release: package_json_1.version
-            },
-            passthrough: {
-                components: {
-                    path: 'detailedreport.software_composition_analysis.vulnerable_components',
-                    transformer: (value) => {
-                        if (_.get(value, 'component')) {
-                            return _.get(value, 'component').map((component) => componentPass(component));
-                        }
-                        else {
-                            return '';
-                        }
-                    }
-                },
-                auxiliary_data: [
-                    {
-                        name: 'veracode',
-                        data: {
-                            transformer: (value) => _.omit(value, SEVERITY, 'detailedreport.software_composition_analysis')
-                        }
-                    }
-                ],
-                ...(withRaw && { raw: this.originalData })
-            },
-            version: package_json_1.version,
-            statistics: {},
-            profiles: [
-                {
-                    name: { path: 'detailedreport.@_.policy_name' },
-                    version: { path: 'detailedreport.@_.policy_version' },
-                    title: {
-                        path: 'detailedreport.static-analysis.modules.module.@_.name'
-                    },
-                    supports: [],
-                    attributes: [],
-                    groups: [],
-                    status: 'loaded',
-                    controls: [
-                        ..._.range(0, 6).map((value) => ({
-                            path: `detailedreport.severity[${value}].category`,
-                            ...controlMappingCwe(5 - value)
-                        })),
-                        {
-                            path: 'detailedreport.software_composition_analysis.vulnerable_components',
-                            /* The original formal of vulnerable_components is the following:
-              
-                            [
-                              {
-                                component_data (including file path)
-                                vulnerabliities{
-                                  vulnerability[
-                                    cve_data
-                                  ]
-                                }
-                              }
-                              ...
-                            ]
-              
-                            these need to be switched to be:
-                            [
-                              {
-                                cve_data
-                                filepaths
-                                components [
-                                  {component_data}
-                                ]
-                              }
-                            ]
-                            this is because in heimdall, in general each control should be the error itself, with tests
-                            being specific failure instances having the cve, being listed as the control since it is an issue
-                            and the component, where the issue happened as being a test is a better aproximation of this.
-                            format.
-                            */
-                            pathTransform: componentTransform,
-                            ...controlMappingCve()
-                        }
-                    ],
-                    sha256: ''
-                }
-            ]
-        };
-    }
-    constructor(xml, withRaw = false) {
-        // the default textNodeName that we're using ('text') clobbers any attributes that also are named 'text' of which there are many in this format
-        // the attribute group names are necessary since there are many times that attributes and inner tags share the same name within a tag (ex. 'vulnerabilities' the attribute is a count whereas as an inner tag it is an array detailing the vulnerabilities) where it seems that the attribute clobbers the inner tag
-        const parsedXML = (0, base_converter_1.parseXml)(xml, {
-            attributesGroupName: '@_',
-            textNodeName: 'text_'
-        });
-        if (_.has(parsedXML, 'summaryreport')) {
-            throw new Error('Current mapper does not accept summary reports');
-        }
-        const arrayedControls = _.get(parsedXML, SEVERITY).map((control) => {
-            if (Array.isArray(control.category)) {
-                return { level: control.level, category: control.category };
-            }
-            else if (!control.category) {
-                return { level: control.level };
-            }
-            else {
-                return { level: control.level, category: [control.category] };
-            }
-        });
-        _.set(parsedXML, SEVERITY, arrayedControls);
-        super(parsedXML);
-        this.originalData = xml;
-        this.setMappings(this.defaultMapping(withRaw));
-    }
-}
-exports.VeracodeMapper = VeracodeMapper;
-//# sourceMappingURL=veracode-mapper.js.map

package/lib/src/veracode-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"veracode-mapper.js","sourceRoot":"","sources":["../../src/veracode-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,8DAAyD;AACzD,2CAAkD;AAClD,MAAM,YAAY,GAAG,kBAAkB,CAAC;AACxC,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AAC3C,MAAM,eAAe,GAAG,+BAA+B,CAAC;AACxD,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAC9C,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1C,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;IACV,CAAC,GAAG,EAAE,GAAG,CAAC;CACX,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,QAAyB;IAC9C,OAAO,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,GAAG,CAAC;AACxD,CAAC;AAED,SAAS,OAAO,CAAC,KAA8B;IAC7C,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,CACP,GAAI,GAAiC,CAAC,GAAG,CACvC,CAAC,KAA8B,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAC7D,CACF,CAAC;IACF,OAAO,gBAAgB,CAAC,UAAU,CAAC,IAAgB,EAAE,gBAAgB,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA8B;IAC3D,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,8BAA8B,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,8BAA8B,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CACP,GACE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,sBAAsB,CACpC,CAAC,GAAG,CACH,CAAC,KAA8B,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAW,CACtE,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,iCAAiC,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,IAAI,CACP,GACE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,iCAAiC,CAI/C,CAAC,GAAG,CACH,CAAC,KAA8B,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAW,CACtE,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,KAA8B;IAChD,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CACP,GAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAA+B,CAAC,GAAG,CAC7D,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CACnC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B;IACnD,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,MAAM,UAAU,GAAG;QACjB,aAAa;QACb,OAAO;QACP,WAAW;QACX,MAAM;QACN,OAAO;QACP,SAAS;QACT,UAAU;QACV,aAAa;KACd,CAAC;IACF,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,QAAQ,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,IAAI,CACP,GAAI,QAAsC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YACzD,IAAI,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC;YAChD,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;YACzC,GAAG,IAAI,UAAU;iBACd,GAAG,CAAC,CAAC,KAAa,EAAE,EAAE;gBACrB,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,EAAE,CAAC,EAAE,CAAC;oBAClC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC;oBAC1C,OAAO,GAAG,KAAK,KAAK,GAAG,IAAI,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;iBACD,IAAI,CAAC,EAAE,CAAC,CAAC;YACZ,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B;IACnD,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,CACP,GAAI,GAAiC,CAAC,GAAG,CACvC,CAAC,KAA8B,EAAE,EAAE,CACjC,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CACvC,KAAK,EACL,YAAY,CACb,iBAAiB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,0BAA0B,CAAC,IAAI,CACjE,CACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAkC,EAAE,CAAC;QACvD,cAAc;QACd,IAAI,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAEb,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,UAAU,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,SAAS,cAAc,CAAC,KAAgC;IACtD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,UAAU,GAAG;QACjB,CAAC,aAAa,EAAE,MAAM,CAAC;QACvB,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;QACzD,CAAC,oBAAoB,EAAE,mBAAmB,CAAC;QAC3C,CAAC,eAAe,EAAE,cAAc,CAAC;QACjC,CAAC,UAAU,EAAE,SAAS,CAAC;QACvB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpB,CAAC,MAAM,EAAE,MAAM,CAAC;QAChB,CAAC,QAAQ,EAAE,OAAO,CAAC;QACnB,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;QAChD,CAAC,YAAY,EAAE,YAAY,CAAC;QAC5B,CAAC,aAAa,EAAE,aAAa,CAAC;QAC9B,CAAC,aAAa,EAAE,YAAY,CAAC;QAC7B,CAAC,OAAO,EAAE,OAAO,CAAC;QAClB,CAAC,YAAY,EAAE,YAAY,CAAC;QAC5B,CAAC,aAAa,EAAE,YAAY,CAAC;QAC7B,CAAC,oBAAoB,EAAE,mBAAmB,CAAC;QAC3C,CAAC,4BAA4B,EAAE,0BAA0B,CAAC;KAC3D,CAAC;IACF,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACtC,QAAQ,GAAG,oBAAoB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,IAAI,CAAC;QACrE,QAAQ,IAAI,UAAU;aACnB,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE;YACrB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;gBAC3C,OAAO,GAAG,KAAK,KAAK,OAAO,IAAI,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC;aACD,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA8B;IACvD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,UAAU,GAAG;QACjB,MAAM;QACN,WAAW;QACX,gBAAgB;QAChB,SAAS;QACT,SAAS;QACT,YAAY;QACZ,QAAQ;QACR,aAAa;QACb,YAAY;QACZ,qCAAqC;KACtC,CAAC;IACF,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpC,QAAQ,GAAG,iBAAiB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAChE,QAAQ,IAAI,CAAC,CAAC,OAAO,CACnB,UAAU,CAAC,GAAG,CAAC,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,EAAE,CAAC,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC;gBACxC,OAAO,GAAG,KAAK,KAAK,GAAG,EAAE,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;YAClC,QAAQ,IAAI,gBAAgB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAgC;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAW,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,GAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAc,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,aAAa,GAA8B,EAAE,CAAC;IACpD,IAAI,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAEX,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,SAAS,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,SAAsC,EAAE,CAAC;QAC3D,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,oBAAoB,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/C,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,aAAa,GAA8B,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE5E,MAAM,KAAK,GAA8B,aAAa;SACnD,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACjB,IAAI,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,+BAA+B,CAEvC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,aAAa,GAAG,CAAC,aAAa,CAAC,CAAC;QAClC,CAAC;QACD,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,GAAG,IAAI;YACP,UAAU,EAAE,CAAC,SAAS,CAAC;SACxB,CAAC,CAAC,CAAC;QACJ,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC;SACD,IAAI,EAAE;SACN,MAAM,CAAC,CAAC,GAA8B,EAAE,GAA4B,EAAE,EAAE;QACvE,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAC1E,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACL,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,YAAY,CAA+B,CAAC,IAAI,CACjE,GAAI,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAA+B,CAC3D,CAAC;YACF,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IACT,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB;IAIxB,OAAO;QACL,EAAE,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC;QACvB,KAAK,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC;QAC1B,IAAI,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;QAC9B,MAAM,EAAE,EAAC,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAC;QACzD,IAAI,EAAE,EAAE;QACR,IAAI,EAAE;YACJ,GAAG,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC;YACxB,IAAI,EAAE;gBACJ,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,CAAC,KAAwB,EAAE,EAAE;oBACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC1B,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;oBAClB,CAAC;oBAED,OAAO,gBAAgB,CAAC,UAAU,CAChC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAC5C,gBAAgB,CACjB,CAAC;gBACJ,CAAC;aACF;SACF;QACD,eAAe,EAAE;YACf,GAAG,EAAE;gBACH,WAAW,EAAE,CAAC,IAA6B,EAAE,EAAE,CAC5C,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAA+B;qBACrD,GAAG,CAAC,CAAC,IAA6B,EAAE,EAAE,CACrC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAC7B;qBACA,IAAI,CAAC,IAAI,CAAC;aAChB;SACF;QACD,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;gBAC3C,SAAS,EAAE,EAAC,WAAW,EAAE,iBAAiB,EAAC;gBAC3C,UAAU,EAAE,EAAC,IAAI,EAAE,gDAAgD,EAAC;aACrE;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAgB;IAEhB,OAAO;QACL,EAAE,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;QAC3B,KAAK,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;QAChC,IAAI,EAAE,EAAC,WAAW,EAAE,UAAU,EAAC;QAC/B,YAAY,EAAE;YACZ;gBACE,IAAI,EAAE,EAAC,WAAW,EAAE,qBAAqB,EAAC;gBAC1C,KAAK,EAAE,KAAK;aACb;SACF;QACD,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC;QAC/B,IAAI,EAAE,EAAE;QACR,IAAI,EAAE;YACJ,KAAK,EAAE,EAAC,WAAW,EAAE,aAAa,EAAC;YACnC,cAAc,EAAE,EAAC,WAAW,EAAE,aAAa,EAAC;YAC5C,GAAG,EAAE;gBACH,WAAW,EAAE,CAAC,IAA6B,EAAE,EAAE,CAC7C,IAAA,2BAAkB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;aACpC;YACD,IAAI,EAAE,EAAC,WAAW,EAAE,OAAO,EAAC;SAC7B;QACD,eAAe,EAAE;YACf,GAAG,EAAE;gBACH,IAAI,EAAE,KAAK;gBACX,WAAW,EAAE,oBAAoB;aAClC;SACF;QACD,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,KAAK;gBACX,aAAa,EAAE,QAAQ;gBACvB,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;gBAC3C,SAAS,EAAE,EAAC,WAAW,EAAE,cAAc,EAAC;gBACxC,UAAU,EAAE,EAAC,IAAI,EAAE,gDAAgD,EAAC;gBACpE,OAAO,EAAE;oBACP,IAAI,EAAE,2DAA2D;iBAClE;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,SAAkC;IACvD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC,EAAE,CAAC;YACtE,QAAQ,CAAC,IAAI,CACX,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,yCAAyC,CAAW,CACtE,CAAC;YACF,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CACX,GACE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,+BAA+B,CAIjD,CAAC,GAAG,CACH,CAAC,IAA6B,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAW,CACtE,CACF,CAAC;YACF,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAC9C,CAAC;AAED,MAAa,cAAe,SAAQ,8BAAa;IAC/C,YAAY,CAAU;IACtB,cAAc,CACZ,OAAO,GAAG,KAAK;QAEf,OAAO;YACL,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;aAC9B;YACD,WAAW,EAAE;gBACX,UAAU,EAAE;oBACV,IAAI,EAAE,oEAAoE;oBAC1E,WAAW,EAAE,CAAC,KAA8B,EAAE,EAAE;wBAC9C,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAA8B,EAAE,CAAC;4BAC3D,OACE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CACzB,CAAC,GAAG,CAAC,CAAC,SAAkC,EAAE,EAAE,CAC3C,aAAa,CAAC,SAAS,CAAC,CACzB,CAAC;wBACJ,CAAC;6BAAM,CAAC;4BACN,OAAO,EAAE,CAAC;wBACZ,CAAC;oBACH,CAAC;iBACF;gBACD,cAAc,EAAE;oBACd;wBACE,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,KAA8B,EAAE,EAAE,CAC9C,CAAC,CAAC,IAAI,CACJ,KAAK,EACL,QAAQ,EACR,8CAA8C,CAC/C;yBACJ;qBACF;iBACF;gBACD,GAAG,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAC,CAAC;aACzC;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,EAAC,IAAI,EAAE,+BAA+B,EAAC;oBAC7C,OAAO,EAAE,EAAC,IAAI,EAAE,kCAAkC,EAAC;oBACnD,KAAK,EAAE;wBACL,IAAI,EAAE,uDAAuD;qBAC9D;oBACD,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;4BAC/B,IAAI,EAAE,2BAA2B,KAAK,YAAY;4BAClD,GAAG,iBAAiB,CAAC,CAAC,GAAG,KAAK,CAAC;yBAChC,CAAC,CAAC;wBACH;4BACE,IAAI,EAAE,oEAAoE;4BAC1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BA4BE;4BACF,aAAa,EAAE,kBAAkB;4BACjC,GAAG,iBAAiB,EAAE;yBACvB;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;SACF,CAAC;IACJ,CAAC;IACD,YAAY,GAAW,EAAE,OAAO,GAAG,KAAK;QACtC,+IAA+I;QAC/I,oTAAoT;QACpT,MAAM,SAAS,GAAG,IAAA,yBAAQ,EAAC,GAAG,EAAE;YAC9B,mBAAmB,EAAE,IAAI;YACzB,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,eAAe,GAAI,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAQ,CAAC,GAAG,CAC5D,CAAC,OAA2C,EAAE,EAAE;YAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,OAAO,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAC,CAAC;YAC5D,CAAC;iBAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC7B,OAAO,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAC,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CACF,CAAC;QACF,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC5C,KAAK,CAAC,SAAS,CAAC,CAAC;QACjB,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;CACF;AA5HD,wCA4HC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  ILookupPath,\n  MappedTransform,\n  parseXml\n} from './base-converter';\nimport {CweNistMapping} from './mappings/CweNistMapping';\nimport {getCCIsForNISTTags} from './utils/global';\nconst STATIC_FLAWS = 'staticflaws.flaw';\nconst SEVERITY = 'detailedreport.severity';\nconst FILE_PATH_VALUE = 'file_paths.file_path.@_.value';\nconst CWE_NIST_MAPPING = new CweNistMapping();\nconst DEFAULT_NIST_TAG = ['SI-2', 'RA-5'];\nconst IMPACT_MAPPING: Map<string, number> = new Map([\n  ['5', 0.9],\n  ['4', 0.7],\n  ['3', 0.5],\n  ['2', 0.3],\n  ['1', 0.1],\n  ['0', 0.0]\n]);\n\nfunction impactMapping(severity: number | string): number {\n  return IMPACT_MAPPING.get(severity.toString()) || 0.1;\n}\n\nfunction nistTag(input: Record<string, unknown>): string[] {\n  const cwes = [];\n  let cwe = _.get(input, 'cwe');\n  if (!Array.isArray(cwe)) {\n    cwe = [cwe];\n  }\n  cwes.push(\n    ...(cwe as Record<string, unknown>[]).map(\n      (value: Record<string, unknown>) => _.get(value, '@_.cweid')\n    )\n  );\n  return CWE_NIST_MAPPING.nistFilter(cwes as string[], DEFAULT_NIST_TAG);\n}\n\nfunction formatRecommendations(input: Record<string, unknown>): string {\n  const text: string[] = [];\n  if (_.has(input, 'recommendations.para')) {\n    if (_.has(input, 'recommendations.para.@_.text')) {\n      text.push(`${_.get(input, 'recommendations.para.@_.text')}`);\n    } else {\n      text.push(\n        ...(\n          _.get(input, `recommendations.para`) as Record<string, unknown>[]\n        ).map(\n          (value: Record<string, unknown>) => _.get(value, '@_.text') as string\n        )\n      );\n    }\n  }\n  if (_.has(input, 'recommendations.para.bulletitem')) {\n    if (Array.isArray(_.get(input, `recommendations.para.bulletitem`))) {\n      text.push(\n        ...(\n          _.get(input, `recommendations.para.bulletitem`) as Record<\n            string,\n            unknown\n          >[]\n        ).map(\n          (value: Record<string, unknown>) => _.get(value, '@_.text') as string\n        )\n      );\n    }\n  }\n  return text.join('\\n');\n}\n\nfunction formatDesc(input: Record<string, unknown>): string {\n  const text = [];\n  if (_.has(input, 'desc.para')) {\n    if (_.has(input, 'desc.para.@_.text')) {\n      text.push(`${_.get(input, 'desc.para.@_.text')}`);\n    } else {\n      text.push(\n        ...(_.get(input, `desc.para`) as Record<string, unknown>[]).map(\n          (value) => _.get(value, '@_.text')\n        )\n      );\n    }\n  }\n  return text.join('\\n');\n}\n\nfunction formatCweData(input: Record<string, unknown>): string {\n  const text = [];\n  const categories = [\n    'pcrirelated',\n    'owasp',\n    'owasp2013',\n    'sans',\n    'certc',\n    'certccp',\n    'certjava',\n    'owaspmobile'\n  ];\n  if (_.has(input, 'cwe')) {\n    let cweInput = _.get(input, 'cwe');\n    if (!Array.isArray(cweInput)) {\n      cweInput = [cweInput];\n    }\n    text.push(\n      ...(cweInput as Record<string, unknown>[]).map((cweinfo) => {\n        let cwe = `CWE-${_.get(cweinfo, '@_.cweid')}: `;\n        cwe += `${_.get(cweinfo, '@_.cwename')}`;\n        cwe += categories\n          .map((value: string) => {\n            if (_.has(cweinfo, `@_.${value}`)) {\n              const val = _.get(cweinfo, `@_.${value}`);\n              return `${value}: ${val}\\n`;\n            } else {\n              return '';\n            }\n          })\n          .join('');\n        return cwe;\n      })\n    );\n  }\n  return text.join('\\n');\n}\n\nfunction formatCweDesc(input: Record<string, unknown>): string {\n  const text = [];\n  if (_.has(input, 'cwe')) {\n    let cwe = _.get(input, 'cwe');\n    if (!Array.isArray(cwe)) {\n      cwe = [cwe];\n    }\n    text.push(\n      ...(cwe as Record<string, unknown>[]).map(\n        (value: Record<string, unknown>) =>\n          `CWE-${_.get(value, '@_.cweid')}: ${_.get(\n            value,\n            '@_.cwename'\n          )} Description: ${_.get(value, 'description.text.@_.text')}; `\n      )\n    );\n  }\n  return text.join('\\n');\n}\n\nfunction getFlaws(input: unknown): Record<string, unknown>[] {\n  const flawArr: Record<string, unknown>[] = [];\n  if (!Array.isArray(input)) {\n    input = [input];\n  }\n  for (const value of input as Record<string, unknown>[]) {\n    // change name\n    let staticFlaw = _.get(value, STATIC_FLAWS) as\n      | Record<string, unknown>\n      | Record<string, unknown>[];\n    if (!Array.isArray(staticFlaw)) {\n      staticFlaw = [staticFlaw];\n    }\n    flawArr.push(...staticFlaw);\n  }\n  return flawArr;\n}\nfunction formatCodeDesc(input: Record<string, unknown>[]): string {\n  let flawDesc = '';\n  const categories = [\n    ['Line Number', 'line'],\n    ['Affect Policy Compliance', 'affects_policy_compliance'],\n    ['Remediation Effort', 'remediationeffort'],\n    ['Exploit level', 'exploitLevel'],\n    ['Issue ID', 'issueid'],\n    ['Module', 'module'],\n    ['Type', 'type'],\n    ['CWE ID', 'cweid'],\n    ['Date First Occurence', 'date_first_occurence'],\n    ['CIA Impact', 'cia_impact'],\n    ['Description', 'description'],\n    ['Source File', 'sourcefile'],\n    ['Scope', 'scope'],\n    ['CIA Impact', 'cia_impact'],\n    ['PCI Related', 'pcirelated'],\n    ['Function Prototype', 'functionprototype'],\n    ['Function Relative Location', 'functionrelativelocation']\n  ];\n  if (_.has(input, '@_.sourcefilepath')) {\n    flawDesc = `Sourcefile Path: ${_.get(input, '@_.sourcefilepath')}\\n`;\n    flawDesc += categories\n      .map(([title, name]) => {\n        if (_.has(input, `@_.${name}`)) {\n          const nameVal = _.get(input, `@_.${name}`);\n          return `${title}: ${nameVal}\\n`;\n        } else {\n          return '';\n        }\n      })\n      .join('');\n  }\n  return flawDesc;\n}\n\nfunction formatSCACodeDesc(input: Record<string, unknown>): string {\n  let flawDesc = '';\n  const categories = [\n    'sha1',\n    'file_name',\n    'max_cvss_score',\n    'version',\n    'library',\n    'library_id',\n    'vendor',\n    'description',\n    'added_date',\n    'component_affects_policy_compliance'\n  ];\n  if (_.has(input, '@_.component_id')) {\n    flawDesc = `component_id: ${_.get(input, '@_.component_id')}\\n`;\n    flawDesc += _.compact(\n      categories.map((value: string) => {\n        if (_.has(input, `@_.${value}`)) {\n          const val = _.get(input, `@_.${value}`);\n          return `${value}: ${val}`;\n        } else {\n          return '';\n        }\n      })\n    ).join('\\n');\n    if (_.has(input, FILE_PATH_VALUE)) {\n      flawDesc += `\\nfile_path: ${_.get(input, FILE_PATH_VALUE)}\\n`;\n    }\n  }\n  return flawDesc;\n}\n\nfunction formatSourceLocation(input: Record<string, unknown>[]): string {\n  const flawArr: string[] = [];\n  if (!Array.isArray(input)) {\n    input = [input];\n  }\n  for (const value of input) {\n    if (!Array.isArray(_.get(value, STATIC_FLAWS))) {\n      flawArr.push(_.get(value, STATIC_FLAWS) as string);\n    } else {\n      flawArr.push(...(_.get(value, STATIC_FLAWS) as string[]));\n    }\n  }\n  return flawArr.map((value) => _.get(value, '@_.sourcefile')).join('\\n');\n}\n\nfunction componentListCreate(input: unknown): Record<string, unknown>[] {\n  const componentList: Record<string, unknown>[] = [];\n  let component = _.get(input, 'component') as unknown as\n    | Record<string, unknown>\n    | Record<string, unknown>[];\n  if (!Array.isArray(component)) {\n    component = [component];\n  }\n  for (const value of component as Record<string, unknown>[]) {\n    if (_.get(value, '@_.vulnerabilities') !== '0') {\n      componentList.push(value);\n    }\n  }\n  return componentList;\n}\n\nfunction componentTransform(input: unknown): Record<string, unknown>[] {\n  const componentList: Record<string, unknown>[] = componentListCreate(input);\n\n  const vulns: Record<string, unknown>[] = componentList\n    .map((component) => {\n      let vulnerability = _.get(component, 'vulnerabilities.vulnerability') as\n        | Record<string, unknown>\n        | Record<string, unknown>[];\n      if (!Array.isArray(vulnerability)) {\n        vulnerability = [vulnerability];\n      }\n      vulnerability = vulnerability.map((vuln) => ({\n        ...vuln,\n        components: [component]\n      }));\n      return vulnerability;\n    })\n    .flat()\n    .reduce((acc: Record<string, unknown>[], cur: Record<string, unknown>) => {\n      const cveId = _.get(cur, '@_.cve_id');\n      const index = acc.findIndex((vuln) => cveId === _.get(vuln, '@_.cve_id'));\n      if (index === -1) {\n        return [...acc, cur];\n      } else {\n        (_.get(acc[index], 'components') as Record<string, unknown>[]).push(\n          ...(_.get(cur, 'components') as Record<string, unknown>[])\n        );\n        return acc;\n      }\n    }, []);\n  return vulns;\n}\n\nfunction controlMappingCve(): MappedTransform<\n  ExecJSON.Control & ILookupPath,\n  ILookupPath\n> {\n  return {\n    id: {path: '@_.cve_id'},\n    title: {path: '@_.cve_id'},\n    desc: {path: '@_.cve_summary'},\n    impact: {path: '@_.severity', transformer: impactMapping},\n    refs: [],\n    tags: {\n      cwe: {path: '@_.cwe_id'},\n      nist: {\n        path: '@_.cwe_id',\n        transformer: (value: string | string[]) => {\n          if (!Array.isArray(value)) {\n            value = [value];\n          }\n\n          return CWE_NIST_MAPPING.nistFilter(\n            value.map((val: string) => val.substring(4)),\n            DEFAULT_NIST_TAG\n          );\n        }\n      }\n    },\n    source_location: {\n      ref: {\n        transformer: (vuln: Record<string, unknown>) =>\n          (_.get(vuln, 'components') as Record<string, unknown>[])\n            .map((comp: Record<string, unknown>) =>\n              _.get(comp, FILE_PATH_VALUE)\n            )\n            .join('\\n')\n      }\n    },\n    results: [\n      {\n        path: 'components',\n        status: ExecJSON.ControlResultStatus.Failed,\n        code_desc: {transformer: formatSCACodeDesc},\n        start_time: {path: '$.detailedreport.@_.first_build_submitted_date'}\n      }\n    ]\n  };\n}\n\nfunction controlMappingCwe(\n  severity: number\n): MappedTransform<ExecJSON.Control & ILookupPath, ILookupPath> {\n  return {\n    id: {path: '@_.categoryid'},\n    title: {path: '@_.categoryname'},\n    desc: {transformer: formatDesc},\n    descriptions: [\n      {\n        data: {transformer: formatRecommendations},\n        label: 'fix'\n      }\n    ],\n    impact: impactMapping(severity),\n    refs: [],\n    tags: {\n      cweid: {transformer: formatCweData},\n      cweDescription: {transformer: formatCweDesc},\n      cci: {\n        transformer: (data: Record<string, unknown>) =>\n          getCCIsForNISTTags(nistTag(data))\n      },\n      nist: {transformer: nistTag}\n    },\n    source_location: {\n      ref: {\n        path: 'cwe',\n        transformer: formatSourceLocation\n      }\n    },\n    results: [\n      {\n        path: 'cwe',\n        pathTransform: getFlaws,\n        status: ExecJSON.ControlResultStatus.Failed,\n        code_desc: {transformer: formatCodeDesc},\n        start_time: {path: '$.detailedreport.@_.first_build_submitted_date'},\n        message: {\n          path: 'exploitability_adjustments.exploitability_adjustment.note'\n        }\n      }\n    ]\n  };\n}\n\nfunction componentPass(component: Record<string, unknown>) {\n  const vulnList: string[] = [];\n  _.set(component, 'control_ids', vulnList);\n  if (_.get(component, 'vulnerabilities') !== '') {\n    if (!Array.isArray(_.get(component, 'vulnerabilities.vulnerability'))) {\n      vulnList.push(\n        _.get(component, 'vulnerabilities.vulnerability.@_.cve_id') as string\n      );\n      _.set(component, 'control_ids', vulnList);\n    } else {\n      vulnList.push(\n        ...(\n          _.get(component, 'vulnerabilities.vulnerability') as Record<\n            string,\n            unknown\n          >[]\n        ).map(\n          (vuln: Record<string, unknown>) => _.get(vuln, '@_.cve_id') as string\n        )\n      );\n      _.set(component, 'control_ids', vulnList);\n    }\n  }\n  return _.omit(component, 'vulnerabilities');\n}\n\nexport class VeracodeMapper extends BaseConverter {\n  originalData: unknown;\n  defaultMapping(\n    withRaw = false\n  ): MappedTransform<ExecJSON.Execution & {passthrough: unknown}, ILookupPath> {\n    return {\n      platform: {\n        name: 'Heimdall Tools',\n        release: HeimdallToolsVersion\n      },\n      passthrough: {\n        components: {\n          path: 'detailedreport.software_composition_analysis.vulnerable_components',\n          transformer: (value: Record<string, unknown>) => {\n            if (_.get(value, 'component') as Record<string, unknown>[]) {\n              return (\n                _.get(value, 'component') as Record<string, unknown>[]\n              ).map((component: Record<string, unknown>) =>\n                componentPass(component)\n              );\n            } else {\n              return '';\n            }\n          }\n        },\n        auxiliary_data: [\n          {\n            name: 'veracode',\n            data: {\n              transformer: (value: Record<string, unknown>) =>\n                _.omit(\n                  value,\n                  SEVERITY,\n                  'detailedreport.software_composition_analysis'\n                )\n            }\n          }\n        ],\n        ...(withRaw && {raw: this.originalData})\n      },\n      version: HeimdallToolsVersion,\n      statistics: {},\n      profiles: [\n        {\n          name: {path: 'detailedreport.@_.policy_name'},\n          version: {path: 'detailedreport.@_.policy_version'},\n          title: {\n            path: 'detailedreport.static-analysis.modules.module.@_.name'\n          },\n          supports: [],\n          attributes: [],\n          groups: [],\n          status: 'loaded',\n          controls: [\n            ..._.range(0, 6).map((value) => ({\n              path: `detailedreport.severity[${value}].category`,\n              ...controlMappingCwe(5 - value)\n            })),\n            {\n              path: 'detailedreport.software_composition_analysis.vulnerable_components',\n              /* The original formal of vulnerable_components is the following:\n\n              [\n                {\n                  component_data (including file path)\n                  vulnerabliities{\n                    vulnerability[\n                      cve_data\n                    ]\n                  }\n                }\n                ...\n              ]\n\n              these need to be switched to be:\n              [\n                {\n                  cve_data\n                  filepaths\n                  components [\n                    {component_data}\n                  ]\n                }\n              ]\n              this is because in heimdall, in general each control should be the error itself, with tests\n              being specific failure instances having the cve, being listed as the control since it is an issue\n              and the component, where the issue happened as being a test is a better aproximation of this.\n              format.\n              */\n              pathTransform: componentTransform,\n              ...controlMappingCve()\n            }\n          ],\n          sha256: ''\n        }\n      ]\n    };\n  }\n  constructor(xml: string, withRaw = false) {\n    // the default textNodeName that we're using ('text') clobbers any attributes that also are named 'text' of which there are many in this format\n    // the attribute group names are necessary since there are many times that attributes and inner tags share the same name within a tag (ex. 'vulnerabilities' the attribute is a count whereas as an inner tag it is an array detailing the vulnerabilities) where it seems that the attribute clobbers the inner tag\n    const parsedXML = parseXml(xml, {\n      attributesGroupName: '@_',\n      textNodeName: 'text_'\n    });\n    if (_.has(parsedXML, 'summaryreport')) {\n      throw new Error('Current mapper does not accept summary reports');\n    }\n    const arrayedControls = (_.get(parsedXML, SEVERITY) as []).map(\n      (control: {category: unknown; level: string}) => {\n        if (Array.isArray(control.category)) {\n          return {level: control.level, category: control.category};\n        } else if (!control.category) {\n          return {level: control.level};\n        } else {\n          return {level: control.level, category: [control.category]};\n        }\n      }\n    );\n    _.set(parsedXML, SEVERITY, arrayedControls);\n    super(parsedXML);\n    this.originalData = xml;\n    this.setMappings(this.defaultMapping(withRaw));\n  }\n}\n"]}

package/lib/src/xccdf-results-mapper.d.ts

@@ -1,16 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class XCCDFResultsResults {
-    readonly scapXml: string;
-    readonly withRaw: boolean;
-    constructor(scapXml: string, withRaw?: boolean);
-    toHdf(): Promise<ExecJSON.Execution>;
-}
-export declare class XCCDFResultsMapper extends BaseConverter {
-    withRaw: boolean;
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(scapXml: string, withRaw?: boolean);
-}
-//# sourceMappingURL=xccdf-results-mapper.d.ts.map

package/lib/src/xccdf-results-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"xccdf-results-mapper.d.ts","sourceRoot":"","sources":["../../src/xccdf-results-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAyB,MAAM,UAAU,CAAC;AAG1D,OAAO,EACL,aAAa,EACb,WAAW,EAEX,eAAe,EAGhB,MAAM,kBAAkB,CAAC;AA2N1B,qBAAa,mBAAmB;IAClB,QAAQ,CAAC,OAAO,EAAE,MAAM;IAAE,QAAQ,CAAC,OAAO;gBAAjC,OAAO,EAAE,MAAM,EAAW,OAAO,UAAQ;IAExD,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;CAK3C;AAED,qBAAa,kBAAmB,SAAQ,aAAa;IACnD,OAAO,EAAE,OAAO,CAAC;IAEjB,QAAQ,EAAE,eAAe,CACvB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ,CAkYC;gBACU,OAAO,EAAE,MAAM,EAAE,OAAO,UAAQ;CAe7C"}