@monoes/monomindcli 1.15.4 → 1.15.6

package/dist/src/mcp-tools/quality/security-compliance/detect-secrets.js

@@ -0,0 +1,383 @@
+/**
+ * detect-secrets.ts - Secret detection MCP tool handler
+ *
+ * Detects secrets, API keys, passwords, and other sensitive data in code
+ * using pattern matching and entropy analysis.
+ */
+import { z } from 'zod';
+import { readFileSync, statSync, existsSync, readdirSync } from 'node:fs';
+import { join, extname, relative } from 'node:path';
+// Input schema for detect-secrets tool
+export const DetectSecretsInputSchema = z.object({
+    targetPath: z.string().describe('Path to scan for secrets'),
+    secretTypes: z
+        .array(z.enum([
+        'api-key',
+        'password',
+        'private-key',
+        'token',
+        'connection-string',
+        'certificate',
+        'aws-key',
+        'aws-secret',
+        'gcp-key',
+        'azure-key',
+        'generic',
+    ]))
+        .default(['api-key', 'password', 'private-key', 'token', 'aws-key', 'aws-secret'])
+        .describe('Types of secrets to detect'),
+    excludePatterns: z
+        .array(z.string())
+        .default(['*.test.ts', '*.spec.ts', 'node_modules', '.git'])
+        .describe('File patterns to exclude'),
+    includeEntropy: z.boolean().default(true).describe('Use entropy analysis for detection'),
+    entropyThreshold: z.number().min(0).max(8).default(4.5).describe('Entropy threshold (higher = stricter)'),
+    verifySecrets: z.boolean().default(false).describe('Attempt to verify if secrets are active'),
+    scanHistory: z.boolean().default(false).describe('Scan git history for secrets'),
+});
+// Secret patterns
+const SECRET_PATTERNS = {
+    'api-key': {
+        pattern: /(?:api[_-]?key|apikey)\s*[:=]\s*['"][a-zA-Z0-9_\-]{16,}['"]/gi,
+        severity: 'high',
+        description: 'API key detected',
+    },
+    'aws-key': {
+        pattern: /(?:AKIA|ABIA|ACCA|ASIA)[0-9A-Z]{16}/g,
+        severity: 'critical',
+        description: 'AWS access key detected',
+    },
+    'aws-secret': {
+        pattern: /(?:aws[_-]?secret|secret[_-]?access)\s*[:=]\s*['"][a-zA-Z0-9/+=]{40}['"]/gi,
+        severity: 'critical',
+        description: 'AWS secret key detected',
+    },
+    'private-key': {
+        pattern: /-----BEGIN (?:RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/g,
+        severity: 'critical',
+        description: 'Private key detected',
+    },
+    password: {
+        pattern: /(?:password|passwd|pwd)\s*[:=]\s*['"][^'"]{4,}['"]/gi,
+        severity: 'high',
+        description: 'Hardcoded password detected',
+    },
+    token: {
+        pattern: /(?:bearer|token|auth|jwt)\s*[:=]\s*['"][a-zA-Z0-9_\-.]{20,}['"]/gi,
+        severity: 'high',
+        description: 'Authentication token detected',
+    },
+    'connection-string': {
+        pattern: /(?:mongodb|postgres|mysql|redis):\/\/[^'"\\s]+:[^'"\\s]+@/gi,
+        severity: 'critical',
+        description: 'Database connection string with credentials',
+    },
+    'gcp-key': {
+        pattern: /"type":\s*"service_account"/g,
+        severity: 'critical',
+        description: 'GCP service account key detected',
+    },
+    'azure-key': {
+        pattern: /(?:azure|microsoft)[_-]?(?:key|secret|token)\s*[:=]\s*['"][a-zA-Z0-9_\-]{32,}['"]/gi,
+        severity: 'critical',
+        description: 'Azure credential detected',
+    },
+    generic: {
+        pattern: /(?:secret|credential|key)\s*[:=]\s*['"][a-zA-Z0-9_\-]{12,}['"]/gi,
+        severity: 'medium',
+        description: 'Potential secret detected',
+    },
+};
+/**
+ * MCP Tool Handler for detect-secrets
+ */
+export async function handler(input, context) {
+    const startTime = Date.now();
+    try {
+        // Validate input
+        const validatedInput = DetectSecretsInputSchema.parse(input);
+        // Scan for secrets
+        const { findings, scanStats } = await scanForSecrets(validatedInput.targetPath, validatedInput.secretTypes, validatedInput.excludePatterns, validatedInput.includeEntropy, validatedInput.entropyThreshold);
+        // Calculate summary
+        const summary = calculateSummary(findings);
+        // Group by type
+        const byType = groupByType(findings);
+        // Generate recommendations
+        const recommendations = generateRecommendations(findings, byType);
+        // Build result
+        const result = {
+            success: true,
+            summary,
+            findings,
+            byType,
+            recommendations,
+            metadata: {
+                scannedAt: new Date().toISOString(),
+                durationMs: Date.now() - startTime,
+                filesScanned: scanStats.filesScanned,
+                linesScanned: scanStats.linesScanned,
+                patternsUsed: validatedInput.secretTypes.length,
+                entropyEnabled: validatedInput.includeEntropy,
+            },
+        };
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(result, null, 2),
+                },
+            ],
+        };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        success: false,
+                        error: errorMessage,
+                        findings: [],
+                        metadata: {
+                            scannedAt: new Date().toISOString(),
+                            durationMs: Date.now() - startTime,
+                        },
+                    }, null, 2),
+                },
+            ],
+        };
+    }
+}
+const SCANNABLE_EXTENSIONS = new Set([
+    '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
+    '.json', '.yaml', '.yml', '.env', '.toml', '.ini',
+    '.sh', '.bash', '.zsh', '.py', '.rb', '.go',
+]);
+function collectFiles(targetPath, excludePatterns) {
+    if (!existsSync(targetPath))
+        return [];
+    const stat = statSync(targetPath);
+    if (stat.isFile())
+        return [targetPath];
+    const results = [];
+    function walk(dir) {
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const fullPath = join(dir, entry);
+            const relPath = relative(targetPath, fullPath);
+            if (excludePatterns.some((p) => relPath.includes(p.replace('*.', '')) || entry === p))
+                continue;
+            let entryStat;
+            try {
+                entryStat = statSync(fullPath);
+            }
+            catch {
+                continue;
+            }
+            if (entryStat.isDirectory()) {
+                walk(fullPath);
+            }
+            else if (SCANNABLE_EXTENSIONS.has(extname(entry).toLowerCase())) {
+                results.push(fullPath);
+            }
+        }
+    }
+    walk(targetPath);
+    return results;
+}
+function shannonEntropy(value) {
+    const freq = {};
+    for (const ch of value) {
+        freq[ch] = (freq[ch] ?? 0) + 1;
+    }
+    let entropy = 0;
+    for (const count of Object.values(freq)) {
+        const p = count / value.length;
+        entropy -= p * Math.log2(p);
+    }
+    return entropy;
+}
+function maskValue(raw) {
+    if (raw.length <= 8)
+        return '****';
+    return raw.slice(0, 4) + '*'.repeat(Math.max(4, Math.min(raw.length - 8, 20))) + raw.slice(-4);
+}
+async function scanForSecrets(targetPath, secretTypes, excludePatterns, includeEntropy, entropyThreshold) {
+    const findings = [];
+    const files = collectFiles(targetPath, excludePatterns);
+    let totalLines = 0;
+    let findingIndex = 0;
+    const activePatterns = secretTypes
+        .map((t) => ({ type: t, ...(SECRET_PATTERNS[t] ?? SECRET_PATTERNS.generic) }));
+    for (const filePath of files) {
+        let content;
+        try {
+            content = readFileSync(filePath, 'utf8');
+        }
+        catch {
+            continue;
+        }
+        const lines = content.split('\n');
+        totalLines += lines.length;
+        for (let lineIdx = 0; lineIdx < lines.length; lineIdx++) {
+            const line = lines[lineIdx];
+            for (const patternInfo of activePatterns) {
+                let match;
+                const regex = new RegExp(patternInfo.pattern.source, patternInfo.pattern.flags);
+                while ((match = regex.exec(line)) !== null) {
+                    const rawValue = match[0];
+                    const entropy = shannonEntropy(rawValue);
+                    if (includeEntropy && entropy < entropyThreshold)
+                        continue;
+                    findings.push({
+                        id: `SEC-${patternInfo.type}-${findingIndex++}`,
+                        type: patternInfo.type,
+                        severity: patternInfo.severity,
+                        location: {
+                            file: filePath,
+                            line: lineIdx + 1,
+                            column: match.index + 1,
+                            context: line.trim().slice(0, 120),
+                            masked: maskValue(rawValue),
+                        },
+                        pattern: patternInfo.description,
+                        entropy: Math.round(entropy * 100) / 100,
+                        verified: null,
+                        active: null,
+                        exposureRisk: getExposureRisk(patternInfo.severity),
+                        remediation: getRemediation(patternInfo.type),
+                    });
+                }
+            }
+        }
+    }
+    findings.sort((a, b) => {
+        const severityOrder = { critical: 0, high: 1, medium: 2, low: 3 };
+        return severityOrder[a.severity] - severityOrder[b.severity];
+    });
+    return { findings, scanStats: { filesScanned: files.length, linesScanned: totalLines } };
+}
+function getExposureRisk(severity) {
+    const risks = {
+        critical: 'High risk - immediate unauthorized access possible',
+        high: 'Significant risk - sensitive data exposure likely',
+        medium: 'Moderate risk - potential security issue',
+        low: 'Low risk - minor exposure concern',
+    };
+    return risks[severity] || 'Unknown risk level';
+}
+function getRemediation(type) {
+    const remediations = {
+        'api-key': 'Move API key to environment variable or secrets manager',
+        'aws-key': 'Rotate AWS credentials immediately and use IAM roles',
+        'aws-secret': 'Rotate AWS credentials and use AWS Secrets Manager',
+        'private-key': 'Remove private key from code, store in secure vault',
+        password: 'Use environment variables or secrets manager',
+        token: 'Use secure token storage, implement token rotation',
+        'connection-string': 'Use environment variables for connection strings',
+        'gcp-key': 'Use workload identity instead of service account keys',
+        'azure-key': 'Use Azure Key Vault for credential management',
+        generic: 'Review and move to secure configuration',
+    };
+    return remediations[type] || 'Remove secret from code and use secure storage';
+}
+function calculateSummary(findings) {
+    const counts = { critical: 0, high: 0, medium: 0, low: 0 };
+    for (const finding of findings) {
+        counts[finding.severity]++;
+    }
+    const files = new Set(findings.map((f) => f.location.file));
+    const verifiedCount = findings.filter((f) => f.verified).length;
+    // Calculate risk score
+    const riskScore = Math.max(0, 100 - (counts.critical * 25 + counts.high * 15 + counts.medium * 5 + counts.low * 2));
+    return {
+        totalFindings: findings.length,
+        criticalCount: counts.critical,
+        highCount: counts.high,
+        mediumCount: counts.medium,
+        lowCount: counts.low,
+        verifiedCount,
+        filesAffected: files.size,
+        riskScore,
+    };
+}
+function groupByType(findings) {
+    const groups = new Map();
+    for (const finding of findings) {
+        if (!groups.has(finding.type)) {
+            groups.set(finding.type, []);
+        }
+        groups.get(finding.type).push(finding);
+    }
+    return Array.from(groups.entries()).map(([type, typeFindings]) => ({
+        type,
+        count: typeFindings.length,
+        severity: typeFindings[0].severity,
+        files: [...new Set(typeFindings.map((f) => f.location.file))],
+    }));
+}
+function generateRecommendations(findings, byType) {
+    const recommendations = [];
+    let priority = 1;
+    // Critical secrets first
+    const criticalFindings = findings.filter((f) => f.severity === 'critical');
+    if (criticalFindings.length > 0) {
+        recommendations.push({
+            priority: priority++,
+            action: 'Immediately rotate all critical credentials (AWS keys, private keys)',
+            affectedSecrets: criticalFindings.map((f) => f.id),
+            effort: 'high',
+            automatable: false,
+        });
+    }
+    // Active secrets
+    const activeFindings = findings.filter((f) => f.active);
+    if (activeFindings.length > 0) {
+        recommendations.push({
+            priority: priority++,
+            action: 'Revoke active secrets and regenerate with proper storage',
+            affectedSecrets: activeFindings.map((f) => f.id),
+            effort: 'medium',
+            automatable: false,
+        });
+    }
+    // General recommendations
+    recommendations.push({
+        priority: priority++,
+        action: 'Implement pre-commit hooks to prevent future secret commits',
+        affectedSecrets: findings.map((f) => f.id),
+        effort: 'low',
+        automatable: true,
+    }, {
+        priority: priority++,
+        action: 'Set up secrets management solution (HashiCorp Vault, AWS Secrets Manager)',
+        affectedSecrets: findings.map((f) => f.id),
+        effort: 'medium',
+        automatable: true,
+    }, {
+        priority: priority++,
+        action: 'Audit git history for exposed secrets using git-secrets or truffleHog',
+        affectedSecrets: [],
+        effort: 'low',
+        automatable: true,
+    });
+    return recommendations;
+}
+// Export tool definition for MCP registration
+export const toolDefinition = {
+    name: 'aqe/detect-secrets',
+    description: 'Detect secrets, API keys, and sensitive data in code',
+    category: 'security-compliance',
+    version: '3.2.3',
+    inputSchema: DetectSecretsInputSchema,
+    handler,
+};
+export default toolDefinition;
+//# sourceMappingURL=detect-secrets.js.map

package/dist/src/mcp-tools/quality/security-compliance/detect-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-secrets.js","sourceRoot":"","sources":["../../../../../src/mcp-tools/quality/security-compliance/detect-secrets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEpD,uCAAuC;AACvC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAC3D,WAAW,EAAE,CAAC;SACX,KAAK,CACJ,CAAC,CAAC,IAAI,CAAC;QACL,SAAS;QACT,UAAU;QACV,aAAa;QACb,OAAO;QACP,mBAAmB;QACnB,aAAa;QACb,SAAS;QACT,YAAY;QACZ,SAAS;QACT,WAAW;QACX,SAAS;KACV,CAAC,CACH;SACA,OAAO,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;SACjF,QAAQ,CAAC,4BAA4B,CAAC;IACzC,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;SAC3D,QAAQ,CAAC,0BAA0B,CAAC;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACxF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACzG,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC7F,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CACjF,CAAC,CAAC;AA2EH,kBAAkB;AAClB,MAAM,eAAe,GAA+G;IAClI,SAAS,EAAE;QACT,OAAO,EAAE,+DAA+D;QACxE,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,kBAAkB;KAChC;IACD,SAAS,EAAE;QACT,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,yBAAyB;KACvC;IACD,YAAY,EAAE;QACZ,OAAO,EAAE,4EAA4E;QACrF,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,yBAAyB;KACvC;IACD,aAAa,EAAE;QACb,OAAO,EAAE,yDAAyD;QAClE,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,sBAAsB;KACpC;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,sDAAsD;QAC/D,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,6BAA6B;KAC3C;IACD,KAAK,EAAE;QACL,OAAO,EAAE,mEAAmE;QAC5E,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,+BAA+B;KAC7C;IACD,mBAAmB,EAAE;QACnB,OAAO,EAAE,6DAA6D;QACtE,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,6CAA6C;KAC3D;IACD,SAAS,EAAE;QACT,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,kCAAkC;KAChD;IACD,WAAW,EAAE;QACX,OAAO,EAAE,qFAAqF;QAC9F,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,2BAA2B;KACzC;IACD,OAAO,EAAE;QACP,OAAO,EAAE,kEAAkE;QAC3E,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,2BAA2B;KACzC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,KAAyB,EACzB,OAAoB;IAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,iBAAiB;QACjB,MAAM,cAAc,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE7D,mBAAmB;QACnB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAClD,cAAc,CAAC,UAAU,EACzB,cAAc,CAAC,WAAW,EAC1B,cAAc,CAAC,eAAe,EAC9B,cAAc,CAAC,cAAc,EAC7B,cAAc,CAAC,gBAAgB,CAChC,CAAC;QAEF,oBAAoB;QACpB,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE3C,gBAAgB;QAChB,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAErC,2BAA2B;QAC3B,MAAM,eAAe,GAAG,uBAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAElE,eAAe;QACf,MAAM,MAAM,GAAwB;YAClC,OAAO,EAAE,IAAI;YACb,OAAO;YACP,QAAQ;YACR,MAAM;YACN,eAAe;YACf,QAAQ,EAAE;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,YAAY,EAAE,cAAc,CAAC,WAAW,CAAC,MAAM;gBAC/C,cAAc,EAAE,cAAc,CAAC,cAAc;aAC9C;SACF,CAAC;QAEF,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;iBACtC;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC9E,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,YAAY;wBACnB,QAAQ,EAAE,EAAE;wBACZ,QAAQ,EAAE;4BACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;4BACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;yBACnC;qBACF,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IACjD,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;CAC5C,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,UAAkB,EAAE,eAAyB;IACjE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,SAAS,IAAI,CAAC,GAAW;QACvB,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC/C,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,SAAS;YAChG,IAAI,SAAsC,CAAC;YAC3C,IAAI,CAAC;gBACH,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC5B,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAClE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,CAAC;IACjB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACnC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,UAAkB,EAClB,WAAqB,EACrB,eAAyB,EACzB,cAAuB,EACvB,gBAAwB;IAExB,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACxD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,MAAM,cAAc,GAAG,WAAW;SAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAEjF,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;QAE3B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,KAAK,MAAM,WAAW,IAAI,cAAc,EAAE,CAAC;gBACzC,IAAI,KAA6B,CAAC;gBAClC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAChF,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC1B,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;oBACzC,IAAI,cAAc,IAAI,OAAO,GAAG,gBAAgB;wBAAE,SAAS;oBAE3D,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,OAAO,WAAW,CAAC,IAAI,IAAI,YAAY,EAAE,EAAE;wBAC/C,IAAI,EAAE,WAAW,CAAC,IAAI;wBACtB,QAAQ,EAAE,WAAW,CAAC,QAAQ;wBAC9B,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,OAAO,GAAG,CAAC;4BACjB,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;4BACvB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;4BAClC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC;yBAC5B;wBACD,OAAO,EAAE,WAAW,CAAC,WAAW;wBAChC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,GAAG;wBACxC,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE,IAAI;wBACZ,YAAY,EAAE,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC;wBACnD,WAAW,EAAE,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC;qBAC9C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAClE,OAAO,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,CAAC;AAC3F,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,KAAK,GAA2B;QACpC,QAAQ,EAAE,oDAAoD;QAC9D,IAAI,EAAE,mDAAmD;QACzD,MAAM,EAAE,0CAA0C;QAClD,GAAG,EAAE,mCAAmC;KACzC,CAAC;IACF,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,oBAAoB,CAAC;AACjD,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,YAAY,GAA2B;QAC3C,SAAS,EAAE,yDAAyD;QACpE,SAAS,EAAE,sDAAsD;QACjE,YAAY,EAAE,oDAAoD;QAClE,aAAa,EAAE,qDAAqD;QACpE,QAAQ,EAAE,8CAA8C;QACxD,KAAK,EAAE,oDAAoD;QAC3D,mBAAmB,EAAE,kDAAkD;QACvE,SAAS,EAAE,uDAAuD;QAClE,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,yCAAyC;KACnD,CAAC;IACF,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,gDAAgD,CAAC;AAChF,CAAC;AAGD,SAAS,gBAAgB,CAAC,QAAyB;IACjD,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAE3D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAEhE,uBAAuB;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAEpH,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,aAAa,EAAE,MAAM,CAAC,QAAQ;QAC9B,SAAS,EAAE,MAAM,CAAC,IAAI;QACtB,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,QAAQ,EAAE,MAAM,CAAC,GAAG;QACpB,aAAa;QACb,aAAa,EAAE,KAAK,CAAC,IAAI;QACzB,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,QAAyB;IAC5C,MAAM,MAAM,GAAiC,IAAI,GAAG,EAAE,CAAC;IAEvD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI;QACJ,KAAK,EAAE,YAAY,CAAC,MAAM;QAC1B,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ;QAClC,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;KAC9D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAyB,EACzB,MAAqB;IAErB,MAAM,eAAe,GAA2B,EAAE,CAAC;IACnD,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,yBAAyB;IACzB,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IAC3E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,eAAe,CAAC,IAAI,CAAC;YACnB,QAAQ,EAAE,QAAQ,EAAE;YACpB,MAAM,EAAE,sEAAsE;YAC9E,eAAe,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB;IACjB,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,eAAe,CAAC,IAAI,CAAC;YACnB,QAAQ,EAAE,QAAQ,EAAE;YACpB,MAAM,EAAE,0DAA0D;YAClE,eAAe,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IAED,0BAA0B;IAC1B,eAAe,CAAC,IAAI,CAClB;QACE,QAAQ,EAAE,QAAQ,EAAE;QACpB,MAAM,EAAE,6DAA6D;QACrE,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,IAAI;KAClB,EACD;QACE,QAAQ,EAAE,QAAQ,EAAE;QACpB,MAAM,EAAE,2EAA2E;QACnF,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,IAAI;KAClB,EACD;QACE,QAAQ,EAAE,QAAQ,EAAE;QACpB,MAAM,EAAE,uEAAuE;QAC/E,eAAe,EAAE,EAAE;QACnB,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,IAAI;KAClB,CACF,CAAC;IAEF,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,sDAAsD;IACnE,QAAQ,EAAE,qBAAqB;IAC/B,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,wBAAwB;IACrC,OAAO;CACR,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/dist/src/mcp-tools/quality/security-compliance/security-scan.d.ts

@@ -0,0 +1,171 @@
+/**
+ * security-scan.ts - SAST/DAST security scanning MCP tool handler
+ *
+ * Performs static (SAST) and dynamic (DAST) security analysis to identify
+ * vulnerabilities, security weaknesses, and compliance issues.
+ */
+import { z } from 'zod';
+export declare const SecurityScanInputSchema: z.ZodObject<{
+    targetPath: z.ZodString;
+    scanType: z.ZodDefault<z.ZodEnum<{
+        both: "both";
+        sast: "sast";
+        dast: "dast";
+    }>>;
+    compliance: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        "owasp-top-10": "owasp-top-10";
+        "sans-25": "sans-25";
+        "pci-dss": "pci-dss";
+        hipaa: "hipaa";
+        gdpr: "gdpr";
+        soc2: "soc2";
+    }>>>;
+    severity: z.ZodDefault<z.ZodEnum<{
+        critical: "critical";
+        high: "high";
+        all: "all";
+        medium: "medium";
+    }>>;
+    includeRemediation: z.ZodDefault<z.ZodBoolean>;
+    scanDepth: z.ZodDefault<z.ZodEnum<{
+        standard: "standard";
+        deep: "deep";
+        quick: "quick";
+    }>>;
+    excludePatterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    targetUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type SecurityScanInput = z.infer<typeof SecurityScanInputSchema>;
+export interface SecurityScanOutput {
+    success: boolean;
+    summary: ScanSummary;
+    findings: SecurityFinding[];
+    complianceResults: ComplianceResult[];
+    metrics: SecurityMetrics;
+    recommendations: SecurityRecommendation[];
+    metadata: ScanMetadata;
+}
+export interface ScanSummary {
+    totalFindings: number;
+    criticalCount: number;
+    highCount: number;
+    mediumCount: number;
+    lowCount: number;
+    infoCount: number;
+    passedChecks: number;
+    failedChecks: number;
+    riskScore: number;
+    grade: 'A' | 'B' | 'C' | 'D' | 'F';
+}
+export interface SecurityFinding {
+    id: string;
+    title: string;
+    description: string;
+    severity: 'critical' | 'high' | 'medium' | 'low' | 'info';
+    category: string;
+    cweId?: string;
+    cvss?: number;
+    location: FindingLocation;
+    evidence: string;
+    remediation?: RemediationGuidance;
+    compliance: string[];
+    falsePositiveLikelihood: 'low' | 'medium' | 'high';
+}
+export interface FindingLocation {
+    file: string;
+    startLine: number;
+    endLine: number;
+    column?: number;
+    codeSnippet?: string;
+}
+export interface RemediationGuidance {
+    description: string;
+    steps: string[];
+    codeExample?: string;
+    effort: 'low' | 'medium' | 'high';
+    priority: number;
+}
+export interface ComplianceResult {
+    framework: string;
+    status: 'compliant' | 'partial' | 'non-compliant';
+    score: number;
+    passedRules: number;
+    failedRules: number;
+    findings: string[];
+}
+export interface SecurityMetrics {
+    vulnerabilityDensity: number;
+    avgSeverity: number;
+    owaspCoverage: number;
+    fixRate: number;
+    mttr: string;
+}
+export interface SecurityRecommendation {
+    priority: number;
+    category: string;
+    title: string;
+    description: string;
+    impact: 'low' | 'medium' | 'high';
+    effort: 'low' | 'medium' | 'high';
+    affectedFindings: string[];
+}
+export interface ScanMetadata {
+    scannedAt: string;
+    durationMs: number;
+    scanType: string;
+    filesScanned: number;
+    linesScanned: number;
+    rulesExecuted: number;
+    engineVersion: string;
+}
+export interface ToolContext {
+    get<T>(key: string): T | undefined;
+}
+/**
+ * MCP Tool Handler for security-scan
+ */
+export declare function handler(input: SecurityScanInput, context: ToolContext): Promise<{
+    content: Array<{
+        type: 'text';
+        text: string;
+    }>;
+}>;
+export declare const toolDefinition: {
+    name: string;
+    description: string;
+    category: string;
+    version: string;
+    inputSchema: z.ZodObject<{
+        targetPath: z.ZodString;
+        scanType: z.ZodDefault<z.ZodEnum<{
+            both: "both";
+            sast: "sast";
+            dast: "dast";
+        }>>;
+        compliance: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            "owasp-top-10": "owasp-top-10";
+            "sans-25": "sans-25";
+            "pci-dss": "pci-dss";
+            hipaa: "hipaa";
+            gdpr: "gdpr";
+            soc2: "soc2";
+        }>>>;
+        severity: z.ZodDefault<z.ZodEnum<{
+            critical: "critical";
+            high: "high";
+            all: "all";
+            medium: "medium";
+        }>>;
+        includeRemediation: z.ZodDefault<z.ZodBoolean>;
+        scanDepth: z.ZodDefault<z.ZodEnum<{
+            standard: "standard";
+            deep: "deep";
+            quick: "quick";
+        }>>;
+        excludePatterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        targetUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    handler: typeof handler;
+};
+export default toolDefinition;
+//# sourceMappingURL=security-scan.d.ts.map

package/dist/src/mcp-tools/quality/security-compliance/security-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scan.d.ts","sourceRoot":"","sources":["../../../../../src/mcp-tools/quality/security-compliance/security-scan.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwBlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAGxE,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;IACtC,OAAO,EAAE,eAAe,CAAC;IACzB,eAAe,EAAE,sBAAsB,EAAE,CAAC;IAC1C,QAAQ,EAAE,YAAY,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,uBAAuB,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACpD;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,eAAe,CAAC;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClC,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClC,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAGD,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC;CACpC;AAED;;GAEG;AACH,wBAAsB,OAAO,CAC3B,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CA2G7D;AAyYD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAO1B,CAAC;AAEF,eAAe,cAAc,CAAC"}