@npm-safe/core-dsh 1.0.5

package/dist/scanner/rule-config.js

@@ -0,0 +1,103 @@
+/**
+ * Per-rule configuration: enable/disable, severity overrides, and free-form
+ * options. Configuration is persisted as JSON (default
+ * `~/.npm-safe/rules.json`) and can be managed at runtime through the
+ * {@link RuleConfigManager}.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+/** Default location of the rules configuration file. */
+export function getDefaultRulesConfigPath() {
+    return path.join(os.homedir(), '.npm-safe', 'rules.json');
+}
+/**
+ * Loads, mutates, and persists per-rule configuration. Thread-safe per
+ * instance; concurrent instances may race on the file, which is acceptable
+ * for a single-user desktop tool.
+ */
+export class RuleConfigManager {
+    filePath;
+    config;
+    /**
+     * @param filePath - Path to the JSON config file.
+     */
+    constructor(filePath) {
+        this.filePath = filePath ?? getDefaultRulesConfigPath();
+        this.config = this.load();
+    }
+    /** Load (or initialize) the config file. */
+    load() {
+        try {
+            const raw = fs.readFileSync(this.filePath, 'utf8');
+            const parsed = JSON.parse(raw);
+            return { rules: parsed.rules ?? {} };
+        }
+        catch {
+            return { rules: {} };
+        }
+    }
+    /** Persist the current configuration to disk. */
+    save() {
+        try {
+            fs.mkdirSync(path.dirname(this.filePath), { recursive: true });
+            fs.writeFileSync(this.filePath, JSON.stringify(this.config, null, 2));
+        }
+        catch {
+            // Best-effort persistence; in-memory config remains valid.
+        }
+    }
+    /** Get the configuration for a single rule, or `undefined` if unset. */
+    getRule(ruleId) {
+        return this.config.rules[ruleId];
+    }
+    /** Whether a rule is enabled, honoring config overrides. */
+    isEnabled(ruleId, defaultEnabled) {
+        const rule = this.config.rules[ruleId];
+        return rule?.enabled ?? defaultEnabled;
+    }
+    /** Severity override for a rule, or `undefined` if not overridden. */
+    getSeverityOverride(ruleId) {
+        return this.config.rules[ruleId]?.severity;
+    }
+    /** Options for a rule, or `{}` if none are configured. */
+    getOptions(ruleId) {
+        return this.config.rules[ruleId]?.options ?? {};
+    }
+    /** Enable or disable a rule (persisted). */
+    setEnabled(ruleId, enabled) {
+        const rules = this.mutableRules();
+        const existing = rules[ruleId] ?? {};
+        rules[ruleId] = { ...existing, enabled };
+        this.save();
+    }
+    /** Override a rule's severity (persisted). `undefined` clears the override. */
+    setSeverity(ruleId, severity) {
+        const rules = this.mutableRules();
+        const existing = rules[ruleId] ?? {};
+        if (severity === undefined) {
+            const { severity: _removed, ...rest } = existing;
+            rules[ruleId] = rest;
+        }
+        else {
+            rules[ruleId] = { ...existing, severity };
+        }
+        this.save();
+    }
+    /** Set a rule's options (persisted). */
+    setOptions(ruleId, options) {
+        const rules = this.mutableRules();
+        const existing = rules[ruleId] ?? {};
+        rules[ruleId] = { ...existing, options };
+        this.save();
+    }
+    /** All configured rule ids. */
+    getConfiguredRuleIds() {
+        return Object.keys(this.config.rules);
+    }
+    /** Mutable view of the rules map for writing. */
+    mutableRules() {
+        return this.config.rules;
+    }
+}
+//# sourceMappingURL=rule-config.js.map

package/dist/scanner/rule-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-config.js","sourceRoot":"","sources":["../../src/scanner/rule-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAuB7B,wDAAwD;AACxD,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IACX,QAAQ,CAAS;IAC1B,MAAM,CAAiB;IAE/B;;OAEG;IACH,YAAY,QAAiB;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,yBAAyB,EAAE,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,4CAA4C;IACpC,IAAI;QACV,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,iDAAiD;IACzC,IAAI;QACV,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,4DAA4D;IAC5D,SAAS,CAAC,MAAc,EAAE,cAAuB;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO,IAAI,EAAE,OAAO,IAAI,cAAc,CAAC;IACzC,CAAC;IAED,sEAAsE;IACtE,mBAAmB,CAAC,MAAc;QAChC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAC7C,CAAC;IAED,0DAA0D;IAC1D,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IAClD,CAAC;IAED,4CAA4C;IAC5C,UAAU,CAAC,MAAc,EAAE,OAAgB;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,+EAA+E;IAC/E,WAAW,CAAC,MAAc,EAAE,QAA8B;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;YACjD,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,wCAAwC;IACxC,UAAU,CAAC,MAAc,EAAE,OAAoB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,+BAA+B;IAC/B,oBAAoB;QAClB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,iDAAiD;IACzC,YAAY;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAmC,CAAC;IACzD,CAAC;CACF"}

package/dist/scanner/rule-loader.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Plugin rule discovery: loads third-party {@link ScanRule}s from a directory
+ * of ES module files. Each `.mjs` (or `.js`) file may export a single rule,
+ * an array of rules, or a factory function returning either.
+ */
+import { ScanRule } from './types.js';
+/** Default directory scanned for third-party rule plugins. */
+export declare function getDefaultRulesDir(): string;
+/** A rule exported by a plugin module, or a factory producing one. */
+export type RuleModuleExport = ScanRule | ScanRule[] | (() => ScanRule | ScanRule[]);
+/** Result of loading one plugin file. */
+export interface LoadedRuleFile {
+    /** Absolute path of the loaded file. */
+    readonly filePath: string;
+    /** Rules exported by the file. */
+    readonly rules: ScanRule[];
+}
+/**
+ * Load all rule plugin files from a directory.
+ *
+ * Files are read in lexical order so rule order is deterministic. Invalid
+ * files are skipped — a broken plugin must not take down the whole scan.
+ *
+ * @param dir - Directory to scan for `*.mjs` / `*.js` rule files.
+ * @returns Per-file load results for every successfully loaded file.
+ */
+export declare function loadRulesFromDirectory(dir?: string): Promise<LoadedRuleFile[]>;
+//# sourceMappingURL=rule-loader.d.ts.map

package/dist/scanner/rule-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-loader.d.ts","sourceRoot":"","sources":["../../src/scanner/rule-loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,8DAA8D;AAC9D,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,sEAAsE;AACtE,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,QAAQ,EAAE,GACV,CAAC,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC,CAAC;AAElC,yCAAyC;AACzC,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kCAAkC;IAClC,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;CAC5B;AAiBD;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,cAAc,EAAE,CAAC,CA8B3B"}

package/dist/scanner/rule-loader.js

@@ -0,0 +1,67 @@
+/**
+ * Plugin rule discovery: loads third-party {@link ScanRule}s from a directory
+ * of ES module files. Each `.mjs` (or `.js`) file may export a single rule,
+ * an array of rules, or a factory function returning either.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+/** Default directory scanned for third-party rule plugins. */
+export function getDefaultRulesDir() {
+    return path.join(os.homedir(), '.npm-safe', 'rules');
+}
+/** Normalize a module export into an array of rules. */
+function toRules(exported) {
+    if (exported === undefined)
+        return [];
+    const resolved = typeof exported === 'function' ? exported() : exported;
+    if (Array.isArray(resolved)) {
+        return resolved.filter((r) => r !== null && typeof r === 'object' && 'id' in r);
+    }
+    if (resolved !== null && typeof resolved === 'object' && 'id' in resolved) {
+        return [resolved];
+    }
+    return [];
+}
+/**
+ * Load all rule plugin files from a directory.
+ *
+ * Files are read in lexical order so rule order is deterministic. Invalid
+ * files are skipped — a broken plugin must not take down the whole scan.
+ *
+ * @param dir - Directory to scan for `*.mjs` / `*.js` rule files.
+ * @returns Per-file load results for every successfully loaded file.
+ */
+export async function loadRulesFromDirectory(dir) {
+    const target = dir ?? getDefaultRulesDir();
+    let entries;
+    try {
+        entries = fs
+            .readdirSync(target)
+            .filter((f) => f.endsWith('.mjs') || f.endsWith('.js'))
+            .sort();
+    }
+    catch {
+        return []; // Directory does not exist — nothing to load.
+    }
+    const results = [];
+    for (const entry of entries) {
+        const filePath = path.join(target, entry);
+        try {
+            const mod = (await import(
+            /* webpackIgnore: true */ pathToFileURL(filePath).href));
+            // Prefer a named `rule` / `rules` export, fall back to `default`.
+            const candidate = mod.rule ?? mod.rules ?? mod.default;
+            const rules = toRules(candidate);
+            if (rules.length > 0) {
+                results.push({ filePath, rules });
+            }
+        }
+        catch {
+            // Skip unparseable plugin files silently.
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=rule-loader.js.map

package/dist/scanner/rule-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-loader.js","sourceRoot":"","sources":["../../src/scanner/rule-loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAgBD,wDAAwD;AACxD,SAAS,OAAO,CAAC,QAAsC;IACrD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC,MAAM,CACpB,CAAC,CAAC,EAAiB,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,IAAI,IAAI,CAAC,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC1E,OAAO,CAAC,QAAoB,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAY;IAEZ,MAAM,MAAM,GAAG,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC3C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE;aACT,WAAW,CAAC,MAAM,CAAC;aACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;aACtD,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,8CAA8C;IAC3D,CAAC;IAED,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM;YACvB,yBAAyB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CACvD,CAA4B,CAAC;YAC9B,kEAAkE;YAClE,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC;YACvD,MAAM,KAAK,GAAG,OAAO,CAAC,SAA6B,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/scanner/static-rules.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Static analysis rule engine for npm package security scanning.
+ *
+ * Pure regex/string analysis — no network calls, no LLM. The engine registers
+ * a set of {@link ScanRule} implementations and aggregates their findings into
+ * a {@link StaticScanReport} with a numeric score and overall security level.
+ */
+import { FindingCategory, ScanRule, Severity, StaticScanReport } from './types.js';
+import { RuleConfigManager } from './rule-config.js';
+/** All built-in static analysis rules, in registration order. */
+export declare const BUILTIN_RULES: readonly ScanRule[];
+/** Ids of the built-in rules, used to label rule provenance. */
+export declare const BUILTIN_RULE_IDS: ReadonlySet<string>;
+/** A rule together with its effective (post-config) status. */
+export interface RuleDescriptor {
+    /** Stable unique identifier for the rule. */
+    readonly id: string;
+    /** Human-readable name of the rule. */
+    readonly name: string;
+    /** Description of what the rule detects. */
+    readonly description: string;
+    /** Effective severity (after config overrides). */
+    readonly severity: Severity;
+    /** Category assigned to findings produced by this rule. */
+    readonly category: FindingCategory;
+    /** Whether the rule is enabled (after config overrides). */
+    readonly enabled: boolean;
+    /** Whether the rule ships with the engine or was loaded from a plugin. */
+    readonly source: 'builtin' | 'plugin';
+}
+/**
+ * Static analysis engine that runs a set of {@link ScanRule}s against a
+ * package's README and package.json and aggregates the findings into a
+ * {@link StaticScanReport}.
+ */
+export declare class StaticAnalyzer {
+    private readonly rules;
+    private readonly config;
+    /**
+     * @param rules - Optional custom rule set. Defaults to all built-in rules.
+     * @param config - Optional per-rule configuration manager whose overrides
+     *   (enabled / severity) are applied at analysis time.
+     */
+    constructor(rules?: ScanRule[], config?: RuleConfigManager);
+    /**
+     * Register a rule at runtime. A rule with the same id replaces the existing
+     * one (keeping its position in the registration order).
+     *
+     * @param rule - The rule to register.
+     */
+    registerRule(rule: ScanRule): void;
+    /**
+     * Remove a rule by id.
+     *
+     * @param ruleId - Id of the rule to remove.
+     * @returns `true` if a rule was removed, `false` if no such rule exists.
+     */
+    unregisterRule(ruleId: string): boolean;
+    /**
+     * Describe every registered rule with its effective status.
+     *
+     * @returns Rule descriptors in registration order.
+     */
+    listRules(): RuleDescriptor[];
+    /**
+     * Run all enabled rules against the given README and package.json, aggregate
+     * the findings, and compute a numeric score plus overall security level.
+     *
+     * Scoring starts at 100 and subtracts a per-finding weight based on severity:
+     * critical=-25, high=-15, medium=-8, low=-3. The score is clamped to [0, 100].
+     *
+     * Overall level: score >= 80 → Safe, >= 50 → Suspicious, >= 20 → Dangerous,
+     * else Unknown.
+     *
+     * @param readme - README content as a string (may be empty).
+     * @param packageJson - Parsed package.json, if available.
+     * @returns The aggregated static scan report.
+     */
+    analyze(readme: string, packageJson?: Record<string, unknown>): StaticScanReport;
+    /**
+     * Map a numeric score to a {@link SecurityLevel}.
+     *
+     * @param score - Clamped score in [0, 100].
+     * @returns The corresponding security level.
+     */
+    private levelFromScore;
+}
+//# sourceMappingURL=static-rules.d.ts.map

package/dist/scanner/static-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-rules.d.ts","sourceRoot":"","sources":["../../src/scanner/static-rules.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,eAAe,EAEf,QAAQ,EAER,QAAQ,EACR,gBAAgB,EACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAynBrD,iEAAiE;AACjE,eAAO,MAAM,aAAa,EAAE,SAAS,QAAQ,EAW5C,CAAC;AAEF,gEAAgE;AAChE,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAEhD,CAAC;AAEF,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;CACvC;AAED;;;;GAIG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAElD;;;;OAIG;gBACS,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,EAAE,iBAAiB;IAO1D;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI;IAIlC;;;;;OAKG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIvC;;;;OAIG;IACH,SAAS,IAAI,cAAc,EAAE;IAkB7B;;;;;;;;;;;;;OAaG;IACH,OAAO,CACL,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,gBAAgB;IAuCnB;;;;;OAKG;IACH,OAAO,CAAC,cAAc;CAMvB"}