@next-secure-check/rules 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SetraTheXX
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,13 @@
+# @next-secure-check/rules
+
+Built-in deterministic security rules for `next-secure-check`.
+
+This is an internal workspace package published for the `next-secure-check` CLI. Rules cover common Next.js security checks across secrets, injection, XSS, auth, config, headers, upload, and validation categories. Most users should install the CLI package instead:
+
+```bash
+npx next-secure-check scan .
+```
+
+See the main repository for rule documentation:
+
+https://github.com/SetraTheXX/next-secure-check

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+import type { Rule } from "@next-secure-check/core";
+export { builtInSecurityRules } from "./security-rules.js";
+export declare const builtInRules: Rule[];
+export declare function getBuiltInRules(): Rule[];
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAGpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,eAAO,MAAM,YAAY,EAAE,IAAI,EAAyB,CAAC;AAEzD,wBAAgB,eAAe,IAAI,IAAI,EAAE,CAExC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+import { builtInSecurityRules } from "./security-rules.js";
+export { builtInSecurityRules } from "./security-rules.js";
+export const builtInRules = builtInSecurityRules;
+export function getBuiltInRules() {
+    return [...builtInRules];
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,CAAC,MAAM,YAAY,GAAW,oBAAoB,CAAC;AAEzD,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;AAC3B,CAAC"}

package/dist/rule-utils.d.ts

@@ -0,0 +1,26 @@
+import type { Confidence, Finding, Rule, ScanContext, SourceFile } from "@next-secure-check/core";
+export type FindingInput = {
+    rule: Pick<Rule, "id" | "title" | "severity" | "category"> & {
+        confidence?: Confidence;
+    };
+    file: Pick<SourceFile, "path" | "content" | "lines">;
+    line?: number;
+    column?: number;
+    evidence?: string;
+    description: string;
+    recommendation: string;
+    confidence?: Confidence;
+    references?: string[];
+};
+export declare function createFinding(input: FindingInput): Finding;
+export declare function findMatches(file: SourceFile, pattern: RegExp): Array<{
+    line: number;
+    column: number;
+    evidence: string;
+    sourceLine: string;
+}>;
+export declare function hasDependency(context: ScanContext, packageNames: string[]): boolean;
+export declare function projectContains(context: ScanContext, pattern: RegExp): boolean;
+export declare function codeFiles(context: ScanContext): SourceFile[];
+export declare function configFiles(context: ScanContext): SourceFile[];
+//# sourceMappingURL=rule-utils.d.ts.map

package/dist/rule-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-utils.d.ts","sourceRoot":"","sources":["../src/rule-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAElG,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC,GAAG;QAAE,UAAU,CAAC,EAAE,UAAU,CAAA;KAAE,CAAC;IACzF,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAgB1D;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,GACd,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB/E;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAOnF;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAK9E;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,EAAE,CAE5D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,EAAE,CAE9D"}

package/dist/rule-utils.js

@@ -0,0 +1,58 @@
+export function createFinding(input) {
+    return {
+        id: `${input.rule.id}:${input.file.path}:${input.line ?? 0}:${input.column ?? 0}`,
+        ruleId: input.rule.id,
+        title: input.rule.title,
+        severity: input.rule.severity,
+        confidence: input.confidence ?? input.rule.confidence ?? "MEDIUM",
+        category: input.rule.category,
+        filePath: input.file.path,
+        line: input.line,
+        column: input.column,
+        evidence: input.evidence,
+        description: input.description,
+        recommendation: input.recommendation,
+        references: input.references
+    };
+}
+export function findMatches(file, pattern) {
+    const matches = [];
+    const matcher = new RegExp(pattern.source, pattern.flags.includes("g") ? pattern.flags : `${pattern.flags}g`);
+    file.lines.forEach((lineContent, lineIndex) => {
+        matcher.lastIndex = 0;
+        let match;
+        while ((match = matcher.exec(lineContent)) !== null) {
+            matches.push({
+                line: lineIndex + 1,
+                column: match.index + 1,
+                evidence: lineContent.trim(),
+                sourceLine: lineContent
+            });
+            if (match[0].length === 0) {
+                matcher.lastIndex += 1;
+            }
+        }
+    });
+    pattern.lastIndex = 0;
+    return matches;
+}
+export function hasDependency(context, packageNames) {
+    const dependencies = {
+        ...(context.packageJson?.dependencies ?? {}),
+        ...(context.packageJson?.devDependencies ?? {})
+    };
+    return packageNames.some((packageName) => packageName in dependencies);
+}
+export function projectContains(context, pattern) {
+    return context.files.some((file) => {
+        pattern.lastIndex = 0;
+        return pattern.test(file.content);
+    });
+}
+export function codeFiles(context) {
+    return context.files.filter((file) => /\.(ts|tsx|js|jsx)$/.test(file.path));
+}
+export function configFiles(context) {
+    return context.files.filter((file) => /(^|\/)(next\.config\.(js|mjs|ts)|middleware\.(js|ts))$/.test(file.path));
+}
+//# sourceMappingURL=rule-utils.js.map

package/dist/rule-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-utils.js","sourceRoot":"","sources":["../src/rule-utils.ts"],"names":[],"mappings":"AAcA,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,OAAO;QACL,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE;QACjF,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;QACrB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK;QACvB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ;QACjE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;QACzB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAgB,EAChB,OAAe;IAEf,MAAM,OAAO,GAAkF,EAAE,CAAC;IAClG,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;IAE9G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE;QAC5C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAEtB,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,SAAS,GAAG,CAAC;gBACnB,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;gBACvB,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE;gBAC5B,UAAU,EAAE,WAAW;aACxB,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IAEtB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAoB,EAAE,YAAsB;IACxE,MAAM,YAAY,GAAG;QACnB,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,IAAI,EAAE,CAAC;QAC5C,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,eAAe,IAAI,EAAE,CAAC;KAChD,CAAC;IAEF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAoB,EAAE,OAAe;IACnE,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAoB;IAC5C,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC9C,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClH,CAAC"}

package/dist/security-rules.d.ts

@@ -0,0 +1,23 @@
+import type { Rule } from "@next-secure-check/core";
+export declare const envFileCommittedRule: Rule;
+export declare const hardcodedSecretRule: Rule;
+export declare const weakJwtSecretRule: Rule;
+export declare const noEvalRule: Rule;
+export declare const dangerouslySetInnerHtmlRule: Rule;
+export declare const insecureCorsWildcardRule: Rule;
+export declare const loginWithoutRateLimitRule: Rule;
+export declare const registerWithoutRateLimitRule: Rule;
+export declare const passwordWithoutHashingRule: Rule;
+export declare const rawSqlConcatRule: Rule;
+export declare const missingSecurityHeadersRule: Rule;
+export declare const nextPublicSecretRule: Rule;
+export declare const noNewFunctionRule: Rule;
+export declare const commandExecRule: Rule;
+export declare const missingFileTypeValidationRule: Rule;
+export declare const missingFileSizeLimitRule: Rule;
+export declare const apiRouteWithoutValidationRule: Rule;
+export declare const adminRouteWithoutAuthRule: Rule;
+export declare const productionBrowserSourceMapsRule: Rule;
+export declare const nextPoweredByHeaderRule: Rule;
+export declare const builtInSecurityRules: Rule[];
+//# sourceMappingURL=security-rules.d.ts.map

package/dist/security-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rules.d.ts","sourceRoot":"","sources":["../src/security-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAGpD,eAAO,MAAM,oBAAoB,EAAE,IAmBlC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,IAuDjC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,IAgC/B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,IAuBxB,CAAC;AAEF,eAAO,MAAM,2BAA2B,EAAE,IA2BzC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,IAuBtC,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,IAqBvC,CAAC;AAEF,eAAO,MAAM,4BAA4B,EAAE,IAsB1C,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,IAsBxC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,IAyB9B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,IA+BxC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,IAyBlC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,IAuB/B,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,IA8B7B,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,IAyB3C,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,IAwBtC,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,IAyB3C,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,IAsBvC,CAAC;AAEF,eAAO,MAAM,+BAA+B,EAAE,IAyB7C,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,IAiCrC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,IAAI,EAqBtC,CAAC"}

package/dist/security-rules.js

@@ -0,0 +1,611 @@
+import { codeFiles, configFiles, createFinding, findMatches, hasDependency, projectContains } from "./rule-utils.js";
+export const envFileCommittedRule = {
+    id: "secrets/env-file-committed",
+    title: "Environment file committed",
+    severity: "HIGH",
+    category: "secrets",
+    confidence: "HIGH",
+    scan(context) {
+        return context.files
+            .filter((file) => isCommittedEnvFileName(file.path.split("/").at(-1) ?? ""))
+            .map((file) => createFinding({
+            rule: envFileCommittedRule,
+            file,
+            description: "Environment files may contain secrets and should not be committed.",
+            recommendation: "Remove committed environment files, rotate exposed secrets, and keep only .env.example templates in git.",
+            evidence: file.path
+        }));
+    }
+};
+export const hardcodedSecretRule = {
+    id: "secrets/hardcoded-secret",
+    title: "Possible hardcoded secret detected",
+    severity: "HIGH",
+    category: "secrets",
+    confidence: "MEDIUM",
+    scan(context) {
+        const findings = [];
+        const secretAssignmentPattern = /\b(api[_-]?key|secret|token|password|private[_-]?key|stripe[_-]?key|github[_-]?token|jwt[_-]?secret)\b\s*[:=]\s*["'`]([^"'`]{8,})["'`]/i;
+        const knownSecretPattern = /(sk_live_[A-Za-z0-9_]+|ghp_[A-Za-z0-9_]+|xox[baprs]-[A-Za-z0-9-]+)/i;
+        for (const file of codeFiles(context)) {
+            for (const match of findMatches(file, secretAssignmentPattern)) {
+                knownSecretPattern.lastIndex = 0;
+                if (knownSecretPattern.test(match.evidence)) {
+                    continue;
+                }
+                const literalValue = extractAssignedStringLiteral(match.evidence);
+                if (literalValue && isLowSignalSecretSample(literalValue)) {
+                    continue;
+                }
+                findings.push(createFinding({
+                    rule: hardcodedSecretRule,
+                    file,
+                    line: match.line,
+                    column: match.column,
+                    evidence: match.evidence,
+                    description: "A secret-like variable appears to contain a literal value.",
+                    recommendation: "Move secrets to server-side environment variables and rotate any value that may have been exposed."
+                }));
+            }
+            for (const match of findMatches(file, knownSecretPattern)) {
+                findings.push(createFinding({
+                    rule: hardcodedSecretRule,
+                    file,
+                    line: match.line,
+                    column: match.column,
+                    evidence: match.evidence,
+                    description: "A string matches a known live secret token pattern.",
+                    recommendation: "Remove the token from source control and rotate it immediately.",
+                    confidence: "HIGH"
+                }));
+            }
+        }
+        return findings;
+    }
+};
+export const weakJwtSecretRule = {
+    id: "secrets/weak-jwt-secret",
+    title: "Weak JWT secret detected",
+    severity: "HIGH",
+    category: "secrets",
+    confidence: "HIGH",
+    scan(context) {
+        const findings = [];
+        const weakValues = new Set(["secret", "changeme", "change-me", "default", "password", "test", "dev", "development"]);
+        const pattern = /\bJWT_SECRET\b\s*[:=]\s*["'`]?([^"'`\s,;]{1,64})["'`]?/i;
+        for (const file of context.files) {
+            for (const match of findMatches(file, pattern)) {
+                const value = match.evidence.split(/[:=]/).at(-1)?.replace(/["'`,;]/g, "").trim().toLowerCase() ?? "";
+                if (value.length < 32 || weakValues.has(value)) {
+                    findings.push(createFinding({
+                        rule: weakJwtSecretRule,
+                        file,
+                        line: match.line,
+                        column: match.column,
+                        evidence: match.evidence,
+                        description: "JWT secrets should be long, random, and unique per environment.",
+                        recommendation: "Use a high-entropy secret of at least 32 bytes and rotate weak/default values."
+                    }));
+                }
+            }
+        }
+        return findings;
+    }
+};
+export const noEvalRule = {
+    id: "injection/no-eval",
+    title: "eval() usage detected",
+    severity: "HIGH",
+    category: "injection",
+    confidence: "HIGH",
+    scan(context) {
+        return codeFiles(context).flatMap((file) => findMatches(file, /\beval\s*\(/)
+            .filter((match) => !isInsideQuotedLiteral(match.evidence, match.column))
+            .map((match) => createFinding({
+            rule: noEvalRule,
+            file,
+            line: match.line,
+            column: match.column,
+            evidence: match.evidence,
+            description: "eval() can execute untrusted code and may lead to code injection.",
+            recommendation: "Replace eval() with explicit parsing or a safe interpreter for the expected input."
+        })));
+    }
+};
+export const dangerouslySetInnerHtmlRule = {
+    id: "xss/dangerously-set-inner-html",
+    title: "dangerouslySetInnerHTML usage detected",
+    severity: "LOW",
+    category: "xss",
+    confidence: "HIGH",
+    scan(context) {
+        return codeFiles(context).flatMap((file) => findMatches(file, /dangerouslySetInnerHTML/)
+            .filter((match) => !isInsideQuotedLiteral(match.evidence, match.column))
+            .filter((match) => !isRegexLiteralLine(match.evidence))
+            .map((match) => createFinding({
+            rule: {
+                ...dangerouslySetInnerHtmlRule,
+                severity: getDangerouslySetInnerHtmlSeverity(match.sourceLine)
+            },
+            file,
+            line: match.line,
+            column: match.column,
+            evidence: match.evidence,
+            description: "Rendering raw HTML can introduce XSS if the content is user-controlled.",
+            recommendation: "Avoid raw HTML rendering or sanitize trusted markup with a proven sanitizer."
+        })));
+    }
+};
+export const insecureCorsWildcardRule = {
+    id: "config/insecure-cors-wildcard",
+    title: "Wildcard CORS origin detected",
+    severity: "MEDIUM",
+    category: "config",
+    confidence: "HIGH",
+    scan(context) {
+        const pattern = /(Access-Control-Allow-Origin["']?\s*[:,]\s*["']\*["']|origin\s*:\s*["']\*["'])/i;
+        return codeFiles(context).flatMap((file) => findMatches(file, pattern).map((match) => createFinding({
+            rule: insecureCorsWildcardRule,
+            file,
+            line: match.line,
+            column: match.column,
+            evidence: match.evidence,
+            description: "Wildcard CORS allows any origin to access the endpoint.",
+            recommendation: "Restrict CORS origins to trusted domains and avoid credentials with wildcard origins."
+        })));
+    }
+};
+export const loginWithoutRateLimitRule = {
+    id: "auth/login-without-rate-limit",
+    title: "Login endpoint may be missing rate limiting",
+    severity: "HIGH",
+    category: "auth",
+    confidence: "MEDIUM",
+    scan(context) {
+        const rateLimitPattern = /(rateLimit|rate-limit|ratelimit|limiter|upstash|slowDown|throttle)/i;
+        return codeFiles(context)
+            .filter((file) => /(login|signin|sign-in|auth)/i.test(file.path))
+            .filter((file) => !rateLimitPattern.test(file.content) && !projectContains(context, rateLimitPattern))
+            .map((file) => createFinding({
+            rule: loginWithoutRateLimitRule,
+            file,
+            description: "Authentication endpoints are common brute-force targets and should be rate limited.",
+            recommendation: "Add per-IP and per-account rate limiting to login/auth endpoints."
+        }));
+    }
+};
+export const registerWithoutRateLimitRule = {
+    id: "auth/register-without-rate-limit",
+    title: "Register endpoint may be missing rate limiting",
+    severity: "HIGH",
+    category: "auth",
+    confidence: "MEDIUM",
+    scan(context) {
+        const rateLimitPattern = /(rateLimit|rate-limit|ratelimit|limiter|upstash|slowDown|throttle)/i;
+        return codeFiles(context)
+            .filter((file) => /(register|signup|sign-up|create-account)/i.test(file.path))
+            .filter((file) => !rateLimitPattern.test(file.content) && !projectContains(context, rateLimitPattern))
+            .map((file) => createFinding({
+            rule: registerWithoutRateLimitRule,
+            file,
+            description: "Registration endpoints can be abused for spam accounts, brute force, or resource exhaustion and should be rate limited.",
+            recommendation: "Add per-IP and abuse-aware rate limiting to registration/signup endpoints."
+        }));
+    }
+};
+export const passwordWithoutHashingRule = {
+    id: "auth/password-without-hashing-library",
+    title: "Password handling without bcrypt or argon2 detected",
+    severity: "MEDIUM",
+    category: "auth",
+    confidence: "MEDIUM",
+    scan(context) {
+        if (hasDependency(context, ["bcrypt", "bcryptjs", "argon2"])) {
+            return [];
+        }
+        return codeFiles(context)
+            .filter((file) => hasPasswordHandlingContext(file.path, file.content))
+            .map((file) => createFinding({
+            rule: passwordWithoutHashingRule,
+            file,
+            description: "Password-related code exists, but bcrypt/argon2 dependency usage was not detected.",
+            recommendation: "Hash passwords with argon2 or bcrypt and avoid storing or comparing plaintext passwords."
+        }));
+    }
+};
+export const rawSqlConcatRule = {
+    id: "injection/raw-sql-concat",
+    title: "Possible raw SQL string interpolation detected",
+    severity: "HIGH",
+    category: "injection",
+    confidence: "MEDIUM",
+    scan(context) {
+        const pattern = /`[^`]*(SELECT|INSERT|UPDATE|DELETE)[^`]*\$\{[^}]+}[^`]*`|["'][^"']*(SELECT|INSERT|UPDATE|DELETE)[^"']*["']\s*\+/i;
+        return codeFiles(context).flatMap((file) => findMatches(file, pattern)
+            .filter((match) => !isLowRiskSqlStringContext(match.sourceLine, match.column))
+            .map((match) => createFinding({
+            rule: rawSqlConcatRule,
+            file,
+            line: match.line,
+            column: match.column,
+            evidence: match.evidence,
+            description: "SQL built with string interpolation or concatenation can lead to SQL injection.",
+            recommendation: "Use parameterized queries, prepared statements, or a safe ORM query builder."
+        })));
+    }
+};
+export const missingSecurityHeadersRule = {
+    id: "headers/missing-security-headers",
+    title: "Security headers were not detected",
+    severity: "LOW",
+    category: "headers",
+    confidence: "LOW",
+    scan(context) {
+        if (context.project.framework !== "nextjs") {
+            return [];
+        }
+        const configuredHeaders = getConfiguredSecurityHeaders(configFiles(context).map((file) => file.content).join("\n"));
+        if (configuredHeaders.missing.length === 0) {
+            return [];
+        }
+        const anchorFile = context.files.find((file) => file.path === "package.json") ?? context.files[0];
+        if (!anchorFile) {
+            return [];
+        }
+        return [
+            createFinding({
+                rule: missingSecurityHeadersRule,
+                file: anchorFile,
+                description: `Missing common security header configuration: ${configuredHeaders.missing.join(", ")}.`,
+                recommendation: "Configure Content-Security-Policy, frame protection, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy."
+            })
+        ];
+    }
+};
+export const nextPublicSecretRule = {
+    id: "secrets/next-public-secret",
+    title: "NEXT_PUBLIC secret-like variable detected",
+    severity: "HIGH",
+    category: "secrets",
+    confidence: "MEDIUM",
+    scan(context) {
+        const pattern = /NEXT_PUBLIC_(?:[A-Z0-9_]*)(?:SECRET|TOKEN|PASSWORD|PRIVATE_KEY|API_KEY|JWT|STRIPE_SECRET)(?:[A-Z0-9_]*)\s*[:=]/i;
+        return context.files.flatMap((file) => findMatches(file, pattern).map((match) => createFinding({
+            rule: nextPublicSecretRule,
+            file,
+            line: match.line,
+            column: match.column,
+            evidence: match.evidence,
+            description: "NEXT_PUBLIC environment variables may be exposed to the browser in Next.js. Secret-like names should not use the NEXT_PUBLIC prefix.",
+            recommendation: "Move secret values to server-only environment variables and remove the NEXT_PUBLIC prefix unless the value is intentionally public."
+        })));
+    }
+};
+export const noNewFunctionRule = {
+    id: "injection/no-new-function",
+    title: "new Function() usage detected",
+    severity: "HIGH",
+    category: "injection",
+    confidence: "HIGH",
+    scan(context) {
+        return codeFiles(context).flatMap((file) => findMatches(file, /\bnew\s+Function\s*\(/)
+            .filter((match) => !isInsideQuotedLiteral(match.evidence, match.column))
+            .map((match) => createFinding({
+            rule: noNewFunctionRule,
+            file,
+            line: match.line,
+            column: match.column,
+            evidence: match.evidence,
+            description: "new Function() can execute dynamically generated code and may lead to code injection if input is untrusted.",
+            recommendation: "Avoid dynamic code execution. Replace new Function() with explicit logic or a safe parser for the expected input."
+        })));
+    }
+};
+export const commandExecRule = {
+    id: "injection/command-exec",
+    title: "Shell command execution detected",
+    severity: "HIGH",
+    category: "injection",
+    confidence: "MEDIUM",
+    scan(context) {
+        const commandCallPattern = /\b(exec|execSync|spawn|spawnSync)\s*\(/;
+        const childProcessImportPattern = /\bfrom\s+["'](?:node:)?child_process["']|require\(\s*["'](?:node:)?child_process["']\s*\)/;
+        return codeFiles(context).flatMap((file) => [
+            ...findMatches(file, commandCallPattern)
+                .filter((match) => !isMethodCall(match.sourceLine, match.column))
+                .filter((match) => !isInsideQuotedLiteral(match.sourceLine, match.column)),
+            ...findMatches(file, childProcessImportPattern)
+        ].map((match) => createFinding({
+            rule: commandExecRule,
+            file,
+            line: match.line,
+            column: match.column,
+            evidence: match.evidence,
+            description: "Shell command execution can lead to command injection if user input reaches the command or arguments.",
+            recommendation: "Avoid shell execution for user-controlled input. Use safe APIs, strict allowlists, and argument arrays when command execution is required."
+        })));
+    }
+};
+export const missingFileTypeValidationRule = {
+    id: "upload/missing-file-type-validation",
+    title: "Upload endpoint may be missing file type validation",
+    severity: "MEDIUM",
+    category: "upload",
+    confidence: "MEDIUM",
+    scan(context) {
+        const pathSignals = /\b(upload|avatar|media|file|image)\b/i;
+        const contentSignals = /\b(formData|File|Blob|multer|formidable|busboy)\b/i;
+        const validationSignals = /\b(mimetype|fileType|allowedTypes|allowedMimeTypes)\b|\.type\b|\.mime\b|content-type|includes\(|startsWith\(["']image\//i;
+        return codeFiles(context)
+            .filter((file) => pathSignals.test(file.path) && contentSignals.test(file.content))
+            .filter((file) => !validationSignals.test(file.content))
+            .map((file) => createFinding({
+            rule: missingFileTypeValidationRule,
+            file,
+            description: "Upload endpoints should validate file types before accepting user-controlled files.",
+            recommendation: "Validate MIME type and file extension with an allowlist before storing or processing uploaded files."
+        }));
+    }
+};
+export const missingFileSizeLimitRule = {
+    id: "upload/missing-file-size-limit",
+    title: "Upload endpoint may be missing file size limit",
+    severity: "MEDIUM",
+    category: "upload",
+    confidence: "MEDIUM",
+    scan(context) {
+        const pathSignals = /\b(upload|avatar|media|file|image)\b/i;
+        const contentSignals = /\b(formData|File|Blob|multer|formidable|busboy)\b/i;
+        const sizeLimitSignals = /\b(maxSize|maxFileSize|fileSize|MAX_FILE_SIZE)\b|limit\s*[:=]|\.limit\b|\.size\s*[><=]/i;
+        return codeFiles(context)
+            .filter((file) => pathSignals.test(file.path) && contentSignals.test(file.content))
+            .filter((file) => !sizeLimitSignals.test(file.content))
+            .map((file) => createFinding({
+            rule: missingFileSizeLimitRule,
+            file,
+            description: "Upload endpoints should enforce file size limits to reduce abuse and resource exhaustion risk.",
+            recommendation: "Add a strict maximum file size and reject files that exceed it before storage or further processing."
+        }));
+    }
+};
+export const apiRouteWithoutValidationRule = {
+    id: "validation/api-route-without-validation",
+    title: "API route may be missing input validation",
+    severity: "MEDIUM",
+    category: "validation",
+    confidence: "MEDIUM",
+    scan(context) {
+        const pathSignals = /\b(app\/api|pages\/api)\b/i;
+        const contentSignals = /(\breq\.body\b|\breq\.query\b|\breq\.json\(|request\.json\(|request\.formData\(|searchParams|nextUrl\.searchParams)/i;
+        const validationSignals = /\b(zod|yup|joi|safeParse|parse\(|validate|validator|schema)\b|typeof\s+[\w.]+\s*[!=]={1,2}\s*["'](?:string|number|boolean|object)["']|Array\.isArray\(/i;
+        return codeFiles(context)
+            .filter((file) => pathSignals.test(file.path))
+            .filter((file) => contentSignals.test(file.content))
+            .filter((file) => !validationSignals.test(file.content))
+            .map((file) => createFinding({
+            rule: apiRouteWithoutValidationRule,
+            file,
+            description: "API routes that consume user input should validate the input before using it.",
+            recommendation: "Add input validation with a schema library such as Zod, Yup, Joi, or a clear custom validation layer."
+        }));
+    }
+};
+export const adminRouteWithoutAuthRule = {
+    id: "auth/admin-route-without-auth",
+    title: "Admin route may be missing auth protection",
+    severity: "HIGH",
+    category: "auth",
+    confidence: "MEDIUM",
+    scan(context) {
+        const pathSignals = /\b(admin|dashboard|manage)\b/i;
+        const authSignals = /\b(auth\(|getServerSession|currentUser|clerk|requireAuth|middleware|session|jwt\.verify|verifyToken|isAdmin|role)\b/i;
+        return codeFiles(context)
+            .filter((file) => pathSignals.test(file.path))
+            .filter((file) => !authSignals.test(file.content))
+            .map((file) => createFinding({
+            rule: adminRouteWithoutAuthRule,
+            file,
+            description: "Admin routes should include authentication and authorization checks.",
+            recommendation: "Protect admin routes with authentication and role/permission checks before returning sensitive data."
+        }));
+    }
+};
+export const productionBrowserSourceMapsRule = {
+    id: "config/production-browser-source-maps",
+    title: "Production browser source maps may be enabled",
+    severity: "LOW",
+    category: "config",
+    confidence: "HIGH",
+    scan(context) {
+        const nextConfigFiles = configFiles(context).filter((file) => /next\.config\.(js|mjs|cjs|ts)$/.test(file.path));
+        const findings = [];
+        for (const file of nextConfigFiles) {
+            if (/productionBrowserSourceMaps\s*[:=]\s*true/i.test(file.content)) {
+                findings.push(createFinding({
+                    rule: productionBrowserSourceMapsRule,
+                    file,
+                    description: "Production browser source maps can expose source code structure and make client-side code easier to inspect.",
+                    recommendation: "Disable productionBrowserSourceMaps unless you intentionally need public production source maps."
+                }));
+            }
+        }
+        return findings;
+    }
+};
+export const nextPoweredByHeaderRule = {
+    id: "config/next-powered-by-header",
+    title: "X-Powered-By header may be enabled",
+    severity: "INFO",
+    category: "config",
+    confidence: "MEDIUM",
+    scan(context) {
+        if (context.project.framework !== "nextjs") {
+            return [];
+        }
+        const nextConfigFiles = configFiles(context).filter((file) => /next\.config\.(js|mjs|cjs|ts)$/.test(file.path));
+        if (nextConfigFiles.length === 0) {
+            return [];
+        }
+        const findings = [];
+        for (const file of nextConfigFiles) {
+            if (!/poweredByHeader\s*:\s*false/i.test(file.content)) {
+                findings.push(createFinding({
+                    rule: nextPoweredByHeaderRule,
+                    file,
+                    description: "The default X-Powered-By header can reveal framework information. Hiding it is a small hardening step.",
+                    recommendation: "Set poweredByHeader: false in next.config.js to reduce framework fingerprinting."
+                }));
+            }
+        }
+        return findings;
+    }
+};
+export const builtInSecurityRules = [
+    envFileCommittedRule,
+    hardcodedSecretRule,
+    weakJwtSecretRule,
+    noEvalRule,
+    noNewFunctionRule,
+    commandExecRule,
+    dangerouslySetInnerHtmlRule,
+    insecureCorsWildcardRule,
+    loginWithoutRateLimitRule,
+    passwordWithoutHashingRule,
+    rawSqlConcatRule,
+    missingSecurityHeadersRule,
+    nextPublicSecretRule,
+    registerWithoutRateLimitRule,
+    missingFileTypeValidationRule,
+    missingFileSizeLimitRule,
+    apiRouteWithoutValidationRule,
+    adminRouteWithoutAuthRule,
+    productionBrowserSourceMapsRule,
+    nextPoweredByHeaderRule
+];
+function isInsideQuotedLiteral(line, column) {
+    const beforeMatch = line.slice(0, Math.max(0, column - 1));
+    let quote;
+    let escaped = false;
+    for (const char of beforeMatch) {
+        if (escaped) {
+            escaped = false;
+            continue;
+        }
+        if (char === "\\") {
+            escaped = true;
+            continue;
+        }
+        if (quote) {
+            if (char === quote) {
+                quote = undefined;
+            }
+            continue;
+        }
+        if (char === "'" || char === "\"" || char === "`") {
+            quote = char;
+        }
+    }
+    return quote !== undefined;
+}
+function isMethodCall(line, column) {
+    const beforeMatch = line.slice(0, Math.max(0, column - 1));
+    return /\.\s*$/.test(beforeMatch);
+}
+function isRegexLiteralLine(line) {
+    return /\/[^/\n]*dangerouslySetInnerHTML[^/\n]*\/[a-z]*/.test(line);
+}
+function getDangerouslySetInnerHtmlSeverity(line) {
+    const htmlValue = /__html\s*:\s*([^}\n]+)/.exec(line)?.[1]?.trim();
+    if (!htmlValue) {
+        return "LOW";
+    }
+    if (isStaticHtmlLiteral(htmlValue)) {
+        return "LOW";
+    }
+    if (/(userInput|html|content|body|params|searchParams|query|req|request|props|children|markdown)/i.test(htmlValue)) {
+        return "MEDIUM";
+    }
+    return "LOW";
+}
+function isStaticHtmlLiteral(value) {
+    const trimmed = value.replace(/[,;]+$/, "").trim();
+    if (/^["'][\s\S]*["']$/.test(trimmed)) {
+        return true;
+    }
+    return /^`[\s\S]*`$/.test(trimmed) && !trimmed.includes("${");
+}
+function isLowRiskSqlStringContext(line, column) {
+    const beforeMatch = line.slice(0, Math.max(0, column - 1));
+    return /(?:^|[^\w$.])(?:console\.(?:log|debug|info|warn|error)|logger\.(?:debug|info)|throw\s+new\s+Error)\s*\(\s*$/.test(beforeMatch);
+}
+function isCommittedEnvFileName(fileName) {
+    return /^\.env(?:\.(?:local|production|production\.local|development|development\.local|test|test\.local|staging|staging\.local))?$/.test(fileName);
+}
+function getConfiguredSecurityHeaders(content) {
+    const requiredHeaders = [
+        {
+            name: "Content-Security-Policy",
+            detected: /Content-Security-Policy/i.test(content)
+        },
+        {
+            name: "frame protection",
+            detected: /X-Frame-Options/i.test(content) || /frame-ancestors/i.test(content)
+        },
+        {
+            name: "X-Content-Type-Options",
+            detected: /X-Content-Type-Options/i.test(content)
+        },
+        {
+            name: "Referrer-Policy",
+            detected: /Referrer-Policy/i.test(content)
+        },
+        {
+            name: "Permissions-Policy",
+            detected: /Permissions-Policy/i.test(content)
+        }
+    ];
+    return {
+        missing: requiredHeaders.filter((header) => !header.detected).map((header) => header.name)
+    };
+}
+function extractAssignedStringLiteral(line) {
+    const match = /[:=]\s*["'`]([^"'`]*)["'`]/.exec(line);
+    return match?.[1];
+}
+function isLowSignalSecretSample(value) {
+    const normalized = value.trim().toLowerCase();
+    const sampleWords = ["password", "changeme", "change-me", "example", "demo", "dummy", "placeholder", "test"];
+    if (sampleWords.includes(normalized)) {
+        return true;
+    }
+    if (/^(?:test|demo|dummy|example|placeholder)[-_]?\d*$/i.test(normalized)) {
+        return true;
+    }
+    if (/^\d+$/.test(normalized)) {
+        return true;
+    }
+    if (normalized.length < 16 && countCharacterClasses(normalized) <= 2) {
+        return true;
+    }
+    return false;
+}
+function countCharacterClasses(value) {
+    return [
+        /[a-z]/.test(value),
+        /[A-Z]/.test(value),
+        /\d/.test(value),
+        /[^A-Za-z0-9]/.test(value)
+    ].filter(Boolean).length;
+}
+function hasPasswordHandlingContext(filePath, content) {
+    if (!/\bpassword\b/i.test(content)) {
+        return false;
+    }
+    const pathSignals = /\b(login|signin|sign-in|register|signup|sign-up|auth|account|user|credentials?)\b/i;
+    if (pathSignals.test(filePath)) {
+        return true;
+    }
+    const contentSignals = /(\b(body|req\.body|credentials?|user|account)\.password\b|\bpassword\b\s*[:=]\s*(body|req|credentials?|user|account)\b)/i;
+    return contentSignals.test(content);
+}
+//# sourceMappingURL=security-rules.js.map

package/dist/security-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-rules.js","sourceRoot":"","sources":["../src/security-rules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAErH,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,EAAE,EAAE,4BAA4B;IAChC,KAAK,EAAE,4BAA4B;IACnC,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,SAAS;IACnB,UAAU,EAAE,MAAM;IAClB,IAAI,CAAC,OAAO;QACV,OAAO,OAAO,CAAC,KAAK;aACjB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aAC3E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,aAAa,CAAC;YACZ,IAAI,EAAE,oBAAoB;YAC1B,IAAI;YACJ,WAAW,EAAE,oEAAoE;YACjF,cAAc,EAAE,0GAA0G;YAC1H,QAAQ,EAAE,IAAI,CAAC,IAAI;SACpB,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAS;IACvC,EAAE,EAAE,0BAA0B;IAC9B,KAAK,EAAE,oCAAoC;IAC3C,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,SAAS;IACnB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,MAAM,uBAAuB,GAC3B,yIAAyI,CAAC;QAC5I,MAAM,kBAAkB,GAAG,qEAAqE,CAAC;QAEjG,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,CAAC;gBAC/D,kBAAkB,CAAC,SAAS,GAAG,CAAC,CAAC;gBACjC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5C,SAAS;gBACX,CAAC;gBAED,MAAM,YAAY,GAAG,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAClE,IAAI,YAAY,IAAI,uBAAuB,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC1D,SAAS;gBACX,CAAC;gBAED,QAAQ,CAAC,IAAI,CACX,aAAa,CAAC;oBACZ,IAAI,EAAE,mBAAmB;oBACzB,IAAI;oBACJ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,WAAW,EAAE,4DAA4D;oBACzE,cAAc,EAAE,oGAAoG;iBACrH,CAAC,CACH,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,CAAC;gBAC1D,QAAQ,CAAC,IAAI,CACX,aAAa,CAAC;oBACZ,IAAI,EAAE,mBAAmB;oBACzB,IAAI;oBACJ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,WAAW,EAAE,qDAAqD;oBAClE,cAAc,EAAE,iEAAiE;oBACjF,UAAU,EAAE,MAAM;iBACnB,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAS;IACrC,EAAE,EAAE,yBAAyB;IAC7B,KAAK,EAAE,0BAA0B;IACjC,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,SAAS;IACnB,UAAU,EAAE,MAAM;IAClB,IAAI,CAAC,OAAO;QACV,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;QACrH,MAAM,OAAO,GAAG,yDAAyD,CAAC;QAE1E,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;gBACtG,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC/C,QAAQ,CAAC,IAAI,CACX,aAAa,CAAC;wBACZ,IAAI,EAAE,iBAAiB;wBACvB,IAAI;wBACJ,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,WAAW,EAAE,iEAAiE;wBAC9E,cAAc,EAAE,gFAAgF;qBACjG,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAS;IAC9B,EAAE,EAAE,mBAAmB;IACvB,KAAK,EAAE,uBAAuB;IAC9B,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,MAAM;IAClB,IAAI,CAAC,OAAO;QACV,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC;aAC7B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;aACvE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,aAAa,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,mEAAmE;YAChF,cAAc,EAAE,oFAAoF;SACrG,CAAC,CACH,CACJ,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAS;IAC/C,EAAE,EAAE,gCAAgC;IACpC,KAAK,EAAE,wCAAwC;IAC/C,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,MAAM;IAClB,IAAI,CAAC,OAAO;QACV,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,WAAW,CAAC,IAAI,EAAE,yBAAyB,CAAC;aACzC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;aACvE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,aAAa,CAAC;YACZ,IAAI,EAAE;gBACJ,GAAG,2BAA2B;gBAC9B,QAAQ,EAAE,kCAAkC,CAAC,KAAK,CAAC,UAAU,CAAC;aAC/D;YACD,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,yEAAyE;YACtF,cAAc,EAAE,8EAA8E;SAC/F,CAAC,CACH,CACJ,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAS;IAC5C,EAAE,EAAE,+BAA+B;IACnC,KAAK,EAAE,+BAA+B;IACtC,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,IAAI,CAAC,OAAO;QACV,MAAM,OAAO,GAAG,iFAAiF,CAAC;QAElG,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,aAAa,CAAC;YACZ,IAAI,EAAE,wBAAwB;YAC9B,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,yDAAyD;YACtE,cAAc,EAAE,uFAAuF;SACxG,CAAC,CACH,CACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAS;IAC7C,EAAE,EAAE,+BAA+B;IACnC,KAAK,EAAE,6CAA6C;IACpD,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,MAAM,gBAAgB,GAAG,qEAAqE,CAAC;QAE/F,OAAO,SAAS,CAAC,OAAO,CAAC;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAChE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;aACrG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,aAAa,CAAC;YACZ,IAAI,EAAE,yBAAyB;YAC/B,IAAI;YACJ,WAAW,EAAE,qFAAqF;YAClG,cAAc,EAAE,mEAAmE;SACpF,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAS;IAChD,EAAE,EAAE,kCAAkC;IACtC,KAAK,EAAE,gDAAgD;IACvD,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,MAAM,gBAAgB,GAAG,qEAAqE,CAAC;QAE/F,OAAO,SAAS,CAAC,OAAO,CAAC;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC7E,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;aACrG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,aAAa,CAAC;YACZ,IAAI,EAAE,4BAA4B;YAClC,IAAI;YACJ,WAAW,EACT,yHAAyH;YAC3H,cAAc,EAAE,4EAA4E;SAC7F,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAS;IAC9C,EAAE,EAAE,uCAAuC;IAC3C,KAAK,EAAE,qDAAqD;IAC5D,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,SAAS,CAAC,OAAO,CAAC;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;aACrE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,aAAa,CAAC;YACZ,IAAI,EAAE,0BAA0B;YAChC,IAAI;YACJ,WAAW,EAAE,oFAAoF;YACjG,cAAc,EAAE,0FAA0F;SAC3G,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,EAAE,EAAE,0BAA0B;IAC9B,KAAK,EAAE,gDAAgD;IACvD,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,MAAM,OAAO,GAAG,kHAAkH,CAAC;QAEnI,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;aACvB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;aAC7E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,aAAa,CAAC;YACZ,IAAI,EAAE,gBAAgB;YACtB,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,iFAAiF;YAC9F,cAAc,EAAE,8EAA8E;SAC/F,CAAC,CACH,CACJ,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAS;IAC9C,EAAE,EAAE,kCAAkC;IACtC,KAAK,EAAE,oCAAoC;IAC3C,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,SAAS;IACnB,UAAU,EAAE,KAAK;IACjB,IAAI,CAAC,OAAO;QACV,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,iBAAiB,GAAG,4BAA4B,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpH,IAAI,iBAAiB,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClG,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO;YACL,aAAa,CAAC;gBACZ,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,iDAAiD,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACrG,cAAc,EACZ,uHAAuH;aAC1H,CAAC;SACH,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAS;IACxC,EAAE,EAAE,4BAA4B;IAChC,KAAK,EAAE,2CAA2C;IAClD,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,SAAS;IACnB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,MAAM,OAAO,GAAG,iHAAiH,CAAC;QAElI,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACpC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,aAAa,CAAC;YACZ,IAAI,EAAE,oBAAoB;YAC1B,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EACT,sIAAsI;YACxI,cAAc,EACZ,qIAAqI;SACxI,CAAC,CACH,CACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAS;IACrC,EAAE,EAAE,2BAA2B;IAC/B,KAAK,EAAE,+BAA+B;IACtC,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,MAAM;IAClB,IAAI,CAAC,OAAO;QACV,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,WAAW,CAAC,IAAI,EAAE,uBAAuB,CAAC;aACvC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;aACvE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,aAAa,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,6GAA6G;YAC1H,cAAc,EAAE,mHAAmH;SACpI,CAAC,CACH,CACJ,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAS;IACnC,EAAE,EAAE,wBAAwB;IAC5B,KAAK,EAAE,kCAAkC;IACzC,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;QACpE,MAAM,yBAAyB,GAC7B,2FAA2F,CAAC;QAE9F,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC;YACE,GAAG,WAAW,CAAC,IAAI,EAAE,kBAAkB,CAAC;iBACrC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;iBAChE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5E,GAAG,WAAW,CAAC,IAAI,EAAE,yBAAyB,CAAC;SAChD,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACd,aAAa,CAAC;YACZ,IAAI,EAAE,eAAe;YACrB,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,uGAAuG;YACpH,cAAc,EAAE,4IAA4I;SAC7J,CAAC,CACH,CACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAS;IACjD,EAAE,EAAE,qCAAqC;IACzC,KAAK,EAAE,qDAAqD;IAC5D,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,MAAM,WAAW,GAAG,uCAAuC,CAAC;QAC5D,MAAM,cAAc,GAAG,oDAAoD,CAAC;QAC5E,MAAM,iBAAiB,GACrB,0HAA0H,CAAC;QAE7H,OAAO,SAAS,CAAC,OAAO,CAAC;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAClF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aACvD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,aAAa,CAAC;YACZ,IAAI,EAAE,6BAA6B;YACnC,IAAI;YACJ,WAAW,EAAE,qFAAqF;YAClG,cAAc,EACZ,sGAAsG;SACzG,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAS;IAC5C,EAAE,EAAE,gCAAgC;IACpC,KAAK,EAAE,gDAAgD;IACvD,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,MAAM,WAAW,GAAG,uCAAuC,CAAC;QAC5D,MAAM,cAAc,GAAG,oDAAoD,CAAC;QAC5E,MAAM,gBAAgB,GAAG,yFAAyF,CAAC;QAEnH,OAAO,SAAS,CAAC,OAAO,CAAC;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAClF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aACtD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,aAAa,CAAC;YACZ,IAAI,EAAE,wBAAwB;YAC9B,IAAI;YACJ,WAAW,EAAE,gGAAgG;YAC7G,cAAc,EACZ,sGAAsG;SACzG,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAS;IACjD,EAAE,EAAE,yCAAyC;IAC7C,KAAK,EAAE,2CAA2C;IAClD,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,YAAY;IACtB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,MAAM,WAAW,GAAG,4BAA4B,CAAC;QACjD,MAAM,cAAc,GAAG,sHAAsH,CAAC;QAC9I,MAAM,iBAAiB,GACrB,yJAAyJ,CAAC;QAE5J,OAAO,SAAS,CAAC,OAAO,CAAC;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC7C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aACnD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aACvD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,aAAa,CAAC;YACZ,IAAI,EAAE,6BAA6B;YACnC,IAAI;YACJ,WAAW,EAAE,+EAA+E;YAC5F,cAAc,EAAE,uGAAuG;SACxH,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAS;IAC7C,EAAE,EAAE,+BAA+B;IACnC,KAAK,EAAE,4CAA4C;IACnD,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,MAAM,WAAW,GAAG,+BAA+B,CAAC;QACpD,MAAM,WAAW,GAAG,sHAAsH,CAAC;QAE3I,OAAO,SAAS,CAAC,OAAO,CAAC;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC7C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aACjD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,aAAa,CAAC;YACZ,IAAI,EAAE,yBAAyB;YAC/B,IAAI;YACJ,WAAW,EAAE,sEAAsE;YACnF,cAAc,EAAE,sGAAsG;SACvH,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAS;IACnD,EAAE,EAAE,uCAAuC;IAC3C,KAAK,EAAE,+CAA+C;IACtD,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,IAAI,CAAC,OAAO;QACV,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChH,MAAM,QAAQ,GAAG,EAAE,CAAC;QAEpB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpE,QAAQ,CAAC,IAAI,CACX,aAAa,CAAC;oBACZ,IAAI,EAAE,+BAA+B;oBACrC,IAAI;oBACJ,WAAW,EAAE,8GAA8G;oBAC3H,cAAc,EAAE,kGAAkG;iBACnH,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,EAAE,EAAE,+BAA+B;IACnC,KAAK,EAAE,oCAAoC;IAC3C,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,QAAQ;IACpB,IAAI,CAAC,OAAO;QACV,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEhH,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,QAAQ,CAAC,IAAI,CACX,aAAa,CAAC;oBACZ,IAAI,EAAE,uBAAuB;oBAC7B,IAAI;oBACJ,WAAW,EAAE,wGAAwG;oBACrH,cAAc,EAAE,kFAAkF;iBACnG,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAW;IAC1C,oBAAoB;IACpB,mBAAmB;IACnB,iBAAiB;IACjB,UAAU;IACV,iBAAiB;IACjB,eAAe;IACf,2BAA2B;IAC3B,wBAAwB;IACxB,yBAAyB;IACzB,0BAA0B;IAC1B,gBAAgB;IAChB,0BAA0B;IAC1B,oBAAoB;IACpB,4BAA4B;IAC5B,6BAA6B;IAC7B,wBAAwB;IACxB,6BAA6B;IAC7B,yBAAyB;IACzB,+BAA+B;IAC/B,uBAAuB;CACxB,CAAC;AAEF,SAAS,qBAAqB,CAAC,IAAY,EAAE,MAAc;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,KAAmC,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,KAAK,GAAG,SAAS,CAAC;YACpB,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClD,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,KAAK,KAAK,SAAS,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,iDAAiD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,kCAAkC,CAAC,IAAY;IACtD,MAAM,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACnE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,8FAA8F,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY,EAAE,MAAc;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,6GAA6G,CAAC,IAAI,CACvH,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,OAAO,6HAA6H,CAAC,IAAI,CACvI,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAe;IACnD,MAAM,eAAe,GAAG;QACtB;YACE,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC;SACnD;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;SAC/E;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;SAClD;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;SAC3C;QACD;YACE,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;SAC9C;KACF,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;KAC3F,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAY;IAChD,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAE7G,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,oDAAoD,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,IAAI,qBAAqB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO;QACL,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAChB,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;KAC3B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAgB,EAAE,OAAe;IACnE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,oFAAoF,CAAC;IACzG,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAClB,0HAA0H,CAAC;IAC7H,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@next-secure-check/rules",
+  "version": "0.1.0",
+  "description": "Security rules for next-secure-check",
+  "keywords": [
+    "nextjs",
+    "security",
+    "scanner",
+    "static-analysis",
+    "sast"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/SetraTheXX/next-secure-check.git"
+  },
+  "license": "MIT",
+  "type": "module",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@next-secure-check/core": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "clean": "node -e \"fs.rmSync('dist',{recursive:true,force:true});fs.rmSync('.tsbuildinfo',{force:true})\""
+  }
+}