@oculum/scanner 1.0.11 → 1.0.13

package/dist/postprocess/suppression/inline-parser.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Inline Suppression Comment Parser
+ * Parses oculum-ignore comments from source code
+ */
+import type { InlineSuppression } from './types';
+import type { VulnerabilityCategory } from '../../shared/types';
+/**
+ * Parse all inline suppressions from file content
+ *
+ * Returns a map of line numbers to their effective suppressions.
+ * A line can be suppressed by:
+ * 1. A same-line comment (oculum-ignore)
+ * 2. A next-line comment on the previous line (oculum-ignore-next-line)
+ * 3. Being within a block suppression (oculum-ignore-block ... oculum-ignore-block-end)
+ */
+export declare function parseInlineSuppressions(content: string): Map<number, InlineSuppression>;
+/**
+ * Check if a specific line is suppressed
+ */
+export declare function isLineSuppressed(suppressions: Map<number, InlineSuppression>, lineNumber: number, category?: VulnerabilityCategory): InlineSuppression | null;
+/**
+ * Extract all unique suppression reasons from a file
+ * Useful for auditing suppressed findings
+ */
+export declare function extractSuppressionReasons(content: string): Array<{
+    reason: string;
+    ruleId?: VulnerabilityCategory;
+    lineNumber: number;
+    type: InlineSuppression['type'];
+}>;
+/**
+ * Generate a suppression comment for a given line
+ */
+export declare function generateSuppressionComment(reason: string, options?: {
+    type?: 'next-line' | 'same-line';
+    ruleId?: VulnerabilityCategory;
+    commentStyle?: '//' | '#' | '--';
+}): string;
+//# sourceMappingURL=inline-parser.d.ts.map

package/dist/postprocess/suppression/inline-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-parser.d.ts","sourceRoot":"","sources":["../../../src/postprocess/suppression/inline-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAChD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAkH/D;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CA+DvF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAC5C,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,qBAAqB,GAC/B,iBAAiB,GAAG,IAAI,CAa1B;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;IAChE,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,qBAAqB,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;CAChC,CAAC,CAyBD;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,WAAW,GAAG,WAAW,CAAA;IAChC,MAAM,CAAC,EAAE,qBAAqB,CAAA;IAC9B,YAAY,CAAC,EAAE,IAAI,GAAG,GAAG,GAAG,IAAI,CAAA;CAC5B,GACL,MAAM,CAUR"}

package/dist/postprocess/suppression/inline-parser.js

@@ -0,0 +1,218 @@
+"use strict";
+/**
+ * Inline Suppression Comment Parser
+ * Parses oculum-ignore comments from source code
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseInlineSuppressions = parseInlineSuppressions;
+exports.isLineSuppressed = isLineSuppressed;
+exports.extractSuppressionReasons = extractSuppressionReasons;
+exports.generateSuppressionComment = generateSuppressionComment;
+/**
+ * Valid suppression comment patterns:
+ *
+ * Single-line suppressions:
+ *   // oculum-ignore-next-line: reason here
+ *   // oculum-ignore-next-line [rule-id]: reason here
+ *   code // oculum-ignore: reason here
+ *   code // oculum-ignore [rule-id]: reason here
+ *
+ * Block suppressions:
+ *   /* oculum-ignore-block: reason here * /
+ *   ... code ...
+ *   /* oculum-ignore-block-end * /
+ *
+ * Also supports:
+ *   # oculum-ignore-next-line: reason (Python, Ruby, YAML, etc.)
+ *   -- oculum-ignore-next-line: reason (SQL)
+ */
+// Regex patterns for parsing comments
+const PATTERNS = {
+    // // oculum-ignore-next-line: reason
+    // // oculum-ignore-next-line [rule-id]: reason
+    nextLine: /(?:\/\/|#|--)\s*oculum-ignore-next-line(?:\s*\[([^\]]+)\])?\s*:\s*(.+)/i,
+    // code // oculum-ignore: reason
+    // code // oculum-ignore [rule-id]: reason
+    sameLine: /(?:\/\/|#|--)\s*oculum-ignore(?:\s*\[([^\]]+)\])?\s*:\s*(.+)/i,
+    // /* oculum-ignore-block: reason */
+    // /* oculum-ignore-block [rule-id]: reason */
+    blockStart: /\/\*\s*oculum-ignore-block(?:\s*\[([^\]]+)\])?\s*:\s*([^*]+)\*\//i,
+    // /* oculum-ignore-block-end */
+    blockEnd: /\/\*\s*oculum-ignore-block-end\s*\*\//i,
+};
+/**
+ * Parse a single line for suppression comments
+ */
+function parseLineForSuppression(line, lineNumber) {
+    // Check for next-line suppression (must be the only thing on the line, aside from whitespace)
+    const trimmed = line.trim();
+    // Next-line pattern (comment at start of line)
+    if (trimmed.startsWith('//') ||
+        trimmed.startsWith('#') ||
+        trimmed.startsWith('--')) {
+        const nextLineMatch = trimmed.match(PATTERNS.nextLine);
+        if (nextLineMatch) {
+            return {
+                lineNumber,
+                type: 'next-line',
+                ruleId: nextLineMatch[1],
+                reason: nextLineMatch[2].trim(),
+                commentText: trimmed,
+            };
+        }
+    }
+    // Same-line pattern (comment at end of line with code before)
+    // Only check if there's actual code before the comment
+    const sameLineMatch = line.match(PATTERNS.sameLine);
+    if (sameLineMatch) {
+        // Find where the comment starts
+        const commentIndex = line.search(/(?:\/\/|#|--)\s*oculum-ignore/i);
+        const beforeComment = line.substring(0, commentIndex).trim();
+        // Only treat as same-line if there's code before the comment
+        // (not just whitespace or if it's at the start)
+        if (beforeComment.length > 0) {
+            return {
+                lineNumber,
+                type: 'same-line',
+                ruleId: sameLineMatch[1],
+                reason: sameLineMatch[2].trim(),
+                commentText: line.substring(commentIndex).trim(),
+            };
+        }
+    }
+    // Block start pattern
+    const blockStartMatch = line.match(PATTERNS.blockStart);
+    if (blockStartMatch) {
+        return {
+            lineNumber,
+            type: 'block-start',
+            ruleId: blockStartMatch[1],
+            reason: blockStartMatch[2].trim(),
+            commentText: blockStartMatch[0],
+        };
+    }
+    // Block end pattern
+    const blockEndMatch = line.match(PATTERNS.blockEnd);
+    if (blockEndMatch) {
+        return {
+            lineNumber,
+            type: 'block-end',
+            reason: '', // Block end has no reason
+            commentText: blockEndMatch[0],
+        };
+    }
+    return null;
+}
+/**
+ * Parse all inline suppressions from file content
+ *
+ * Returns a map of line numbers to their effective suppressions.
+ * A line can be suppressed by:
+ * 1. A same-line comment (oculum-ignore)
+ * 2. A next-line comment on the previous line (oculum-ignore-next-line)
+ * 3. Being within a block suppression (oculum-ignore-block ... oculum-ignore-block-end)
+ */
+function parseInlineSuppressions(content) {
+    const lines = content.split('\n');
+    const suppressions = new Map();
+    // Track block suppression state
+    let currentBlock = null;
+    for (let i = 0; i < lines.length; i++) {
+        const lineNumber = i + 1; // 1-indexed
+        const line = lines[i];
+        const suppression = parseLineForSuppression(line, lineNumber);
+        if (suppression) {
+            switch (suppression.type) {
+                case 'next-line':
+                    // Apply to the next line
+                    if (i + 1 < lines.length) {
+                        suppressions.set(lineNumber + 1, {
+                            ...suppression,
+                            lineNumber: lineNumber + 1,
+                        });
+                    }
+                    break;
+                case 'same-line':
+                    // Apply to this line
+                    suppressions.set(lineNumber, suppression);
+                    break;
+                case 'block-start':
+                    // Start tracking block suppression
+                    currentBlock = {
+                        startLine: lineNumber,
+                        reason: suppression.reason,
+                        ruleId: suppression.ruleId,
+                    };
+                    break;
+                case 'block-end':
+                    // End block suppression
+                    currentBlock = null;
+                    break;
+            }
+        }
+        // If we're in a block suppression, add suppression for this line
+        // (unless it's the block start/end line itself)
+        if (currentBlock && suppression?.type !== 'block-start' && suppression?.type !== 'block-end') {
+            // Don't override explicit same-line suppressions
+            if (!suppressions.has(lineNumber)) {
+                suppressions.set(lineNumber, {
+                    lineNumber,
+                    type: 'block-start', // Mark as from block
+                    reason: currentBlock.reason,
+                    ruleId: currentBlock.ruleId,
+                    commentText: `Block suppression from line ${currentBlock.startLine}`,
+                });
+            }
+        }
+    }
+    return suppressions;
+}
+/**
+ * Check if a specific line is suppressed
+ */
+function isLineSuppressed(suppressions, lineNumber, category) {
+    const suppression = suppressions.get(lineNumber);
+    if (!suppression) {
+        return null;
+    }
+    // If suppression specifies a rule and category doesn't match, not suppressed
+    if (suppression.ruleId && category && suppression.ruleId !== category) {
+        return null;
+    }
+    return suppression;
+}
+/**
+ * Extract all unique suppression reasons from a file
+ * Useful for auditing suppressed findings
+ */
+function extractSuppressionReasons(content) {
+    const suppressions = parseInlineSuppressions(content);
+    const seen = new Set();
+    const results = [];
+    for (const [lineNumber, suppression] of suppressions) {
+        // Only include unique comment sources (not duplicates from block propagation)
+        const key = `${suppression.commentText}`;
+        if (!seen.has(key) && suppression.type !== 'block-end') {
+            seen.add(key);
+            results.push({
+                reason: suppression.reason,
+                ruleId: suppression.ruleId,
+                lineNumber,
+                type: suppression.type,
+            });
+        }
+    }
+    return results;
+}
+/**
+ * Generate a suppression comment for a given line
+ */
+function generateSuppressionComment(reason, options = {}) {
+    const { type = 'next-line', ruleId, commentStyle = '//' } = options;
+    const ruleSpec = ruleId ? ` [${ruleId}]` : '';
+    if (type === 'next-line') {
+        return `${commentStyle} oculum-ignore-next-line${ruleSpec}: ${reason}`;
+    }
+    return `${commentStyle} oculum-ignore${ruleSpec}: ${reason}`;
+}
+//# sourceMappingURL=inline-parser.js.map

package/dist/postprocess/suppression/inline-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-parser.js","sourceRoot":"","sources":["../../../src/postprocess/suppression/inline-parser.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AA8HH,0DA+DC;AAKD,4CAiBC;AAMD,8DA8BC;AAKD,gEAiBC;AAxQD;;;;;;;;;;;;;;;;;GAiBG;AAEH,sCAAsC;AACtC,MAAM,QAAQ,GAAG;IACf,qCAAqC;IACrC,+CAA+C;IAC/C,QAAQ,EAAE,yEAAyE;IAEnF,gCAAgC;IAChC,0CAA0C;IAC1C,QAAQ,EAAE,+DAA+D;IAEzE,oCAAoC;IACpC,8CAA8C;IAC9C,UAAU,EAAE,mEAAmE;IAE/E,gCAAgC;IAChC,QAAQ,EAAE,wCAAwC;CACnD,CAAA;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,IAAY,EACZ,UAAkB;IAElB,8FAA8F;IAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAE3B,+CAA+C;IAC/C,IACE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QACxB,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACtD,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO;gBACL,UAAU;gBACV,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAsC;gBAC7D,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC/B,WAAW,EAAE,OAAO;aACrB,CAAA;QACH,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,uDAAuD;IACvD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACnD,IAAI,aAAa,EAAE,CAAC;QAClB,gCAAgC;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAA;QAClE,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,IAAI,EAAE,CAAA;QAE5D,6DAA6D;QAC7D,gDAAgD;QAChD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,UAAU;gBACV,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAsC;gBAC7D,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC/B,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;aACjD,CAAA;QACH,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IACvD,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO;YACL,UAAU;YACV,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,eAAe,CAAC,CAAC,CAAsC;YAC/D,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YACjC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;SAChC,CAAA;IACH,CAAC;IAED,oBAAoB;IACpB,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACnD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,UAAU;YACV,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,EAAE,EAAE,0BAA0B;YACtC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;SAC9B,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,uBAAuB,CAAC,OAAe;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAA;IAEzD,gCAAgC;IAChC,IAAI,YAAY,GAAiF,IAAI,CAAA;IAErG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAA,CAAC,YAAY;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAErB,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QAE7D,IAAI,WAAW,EAAE,CAAC;YAChB,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;gBACzB,KAAK,WAAW;oBACd,yBAAyB;oBACzB,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;wBACzB,YAAY,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,EAAE;4BAC/B,GAAG,WAAW;4BACd,UAAU,EAAE,UAAU,GAAG,CAAC;yBAC3B,CAAC,CAAA;oBACJ,CAAC;oBACD,MAAK;gBAEP,KAAK,WAAW;oBACd,qBAAqB;oBACrB,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;oBACzC,MAAK;gBAEP,KAAK,aAAa;oBAChB,mCAAmC;oBACnC,YAAY,GAAG;wBACb,SAAS,EAAE,UAAU;wBACrB,MAAM,EAAE,WAAW,CAAC,MAAM;wBAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;qBAC3B,CAAA;oBACD,MAAK;gBAEP,KAAK,WAAW;oBACd,wBAAwB;oBACxB,YAAY,GAAG,IAAI,CAAA;oBACnB,MAAK;YACT,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,gDAAgD;QAChD,IAAI,YAAY,IAAI,WAAW,EAAE,IAAI,KAAK,aAAa,IAAI,WAAW,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;YAC7F,iDAAiD;YACjD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE;oBAC3B,UAAU;oBACV,IAAI,EAAE,aAAa,EAAE,qBAAqB;oBAC1C,MAAM,EAAE,YAAY,CAAC,MAAM;oBAC3B,MAAM,EAAE,YAAY,CAAC,MAAM;oBAC3B,WAAW,EAAE,+BAA+B,YAAY,CAAC,SAAS,EAAE;iBACrE,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAA;AACrB,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAC9B,YAA4C,EAC5C,UAAkB,EAClB,QAAgC;IAEhC,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAEhD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,6EAA6E;IAC7E,IAAI,WAAW,CAAC,MAAM,IAAI,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,WAAW,CAAA;AACpB,CAAC;AAED;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,OAAe;IAMvD,MAAM,YAAY,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,OAAO,GAKR,EAAE,CAAA;IAEP,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,YAAY,EAAE,CAAC;QACrD,8EAA8E;QAC9E,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC,WAAW,EAAE,CAAA;QACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACvD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,UAAU;gBACV,IAAI,EAAE,WAAW,CAAC,IAAI;aACvB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,0BAA0B,CACxC,MAAc,EACd,UAII,EAAE;IAEN,MAAM,EAAE,IAAI,GAAG,WAAW,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;IAEnE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAE7C,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,OAAO,GAAG,YAAY,2BAA2B,QAAQ,KAAK,MAAM,EAAE,CAAA;IACxE,CAAC;IAED,OAAO,GAAG,YAAY,iBAAiB,QAAQ,KAAK,MAAM,EAAE,CAAA;AAC9D,CAAC"}

package/dist/postprocess/suppression/manager.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Suppression Manager
+ * Central class for managing all suppression logic
+ */
+import type { Vulnerability, ScanFile } from '../../shared/types';
+import type { SuppressionConfig, SuppressionMatch, SuppressionResult, RuleSuppression, FindingSuppression } from './types';
+/**
+ * Options for SuppressionManager
+ */
+export interface SuppressionManagerOptions {
+    /** Path to the project root (for finding config files) */
+    projectPath: string;
+    /** Optional pre-loaded config (skips file loading) */
+    config?: SuppressionConfig;
+    /** Whether to include expired suppressions (for auditing) */
+    includeExpired?: boolean;
+}
+/**
+ * SuppressionManager handles all suppression logic
+ *
+ * Priority order for suppressions:
+ * 1. Inline comment suppressions (highest priority)
+ * 2. Config file finding suppressions (by hash)
+ * 3. Config file rule suppressions (by category)
+ */
+export declare class SuppressionManager {
+    private config;
+    private configPath;
+    private configErrors;
+    private includeExpired;
+    private projectPath;
+    private inlineSuppressionCache;
+    constructor(options: SuppressionManagerOptions);
+    /**
+     * Get configuration errors (if any)
+     */
+    getConfigErrors(): string[];
+    /**
+     * Get the path to the config file (if found)
+     */
+    getConfigPath(): string | undefined;
+    /**
+     * Check if a file path should be ignored entirely
+     */
+    isPathIgnored(filePath: string): boolean;
+    /**
+     * Parse inline suppressions for a file
+     */
+    private getInlineSuppressions;
+    /**
+     * Check if a finding is suppressed
+     *
+     * Priority:
+     * 1. Inline comment (highest)
+     * 2. Config finding suppression (by hash)
+     * 3. Config rule suppression (by category)
+     */
+    isFindingSuppressed(finding: Vulnerability, fileContent?: string): SuppressionMatch;
+    /**
+     * Apply suppressions to a list of findings
+     */
+    applySuppressions(findings: Vulnerability[], files: ScanFile[]): SuppressionResult;
+    /**
+     * Get all suppressions from config
+     */
+    getAllSuppressions(): {
+        rules: RuleSuppression[];
+        findings: FindingSuppression[];
+    };
+    /**
+     * Get ignore patterns from config
+     */
+    getIgnorePatterns(): string[];
+    /**
+     * Check if suppression system is active (has any suppressions)
+     */
+    hasSuppressions(): boolean;
+    /**
+     * Get summary of suppression configuration
+     */
+    getSummary(): {
+        configPath: string | undefined;
+        ruleCount: number;
+        findingCount: number;
+        ignorePatternCount: number;
+        hasErrors: boolean;
+    };
+    /**
+     * Clear the inline suppression cache
+     * (useful if files have been modified)
+     */
+    clearCache(): void;
+}
+//# sourceMappingURL=manager.d.ts.map

package/dist/postprocess/suppression/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/postprocess/suppression/manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EAGjB,eAAe,EACf,kBAAkB,EACnB,MAAM,SAAS,CAAA;AAKhB;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAA;IACnB,sDAAsD;IACtD,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,6DAA6D;IAC7D,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED;;;;;;;GAOG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,UAAU,CAAoB;IACtC,OAAO,CAAC,YAAY,CAAU;IAC9B,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,WAAW,CAAQ;IAG3B,OAAO,CAAC,sBAAsB,CAAyD;gBAE3E,OAAO,EAAE,yBAAyB;IAgB9C;;OAEG;IACH,eAAe,IAAI,MAAM,EAAE;IAI3B;;OAEG;IACH,aAAa,IAAI,MAAM,GAAG,SAAS;IAInC;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAYxC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAgB7B;;;;;;;OAOG;IACH,mBAAmB,CACjB,OAAO,EAAE,aAAa,EACtB,WAAW,CAAC,EAAE,MAAM,GACnB,gBAAgB;IAmHnB;;OAEG;IACH,iBAAiB,CACf,QAAQ,EAAE,aAAa,EAAE,EACzB,KAAK,EAAE,QAAQ,EAAE,GAChB,iBAAiB;IA2EpB;;OAEG;IACH,kBAAkB,IAAI;QACpB,KAAK,EAAE,eAAe,EAAE,CAAA;QACxB,QAAQ,EAAE,kBAAkB,EAAE,CAAA;KAC/B;IAOD;;OAEG;IACH,iBAAiB,IAAI,MAAM,EAAE;IAI7B;;OAEG;IACH,eAAe,IAAI,OAAO;IAQ1B;;OAEG;IACH,UAAU,IAAI;QACZ,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;QAC9B,SAAS,EAAE,MAAM,CAAA;QACjB,YAAY,EAAE,MAAM,CAAA;QACpB,kBAAkB,EAAE,MAAM,CAAA;QAC1B,SAAS,EAAE,OAAO,CAAA;KACnB;IAUD;;;OAGG;IACH,UAAU,IAAI,IAAI;CAGnB"}

package/dist/postprocess/suppression/manager.js

@@ -0,0 +1,292 @@
+"use strict";
+/**
+ * Suppression Manager
+ * Central class for managing all suppression logic
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SuppressionManager = void 0;
+const minimatch_1 = require("minimatch");
+const config_loader_1 = require("./config-loader");
+const inline_parser_1 = require("./inline-parser");
+const hash_1 = require("./hash");
+/**
+ * SuppressionManager handles all suppression logic
+ *
+ * Priority order for suppressions:
+ * 1. Inline comment suppressions (highest priority)
+ * 2. Config file finding suppressions (by hash)
+ * 3. Config file rule suppressions (by category)
+ */
+class SuppressionManager {
+    constructor(options) {
+        // Cache for inline suppressions by file path
+        this.inlineSuppressionCache = new Map();
+        this.projectPath = options.projectPath;
+        this.includeExpired = options.includeExpired ?? false;
+        if (options.config) {
+            this.config = options.config;
+            this.configPath = undefined;
+            this.configErrors = [];
+        }
+        else {
+            const result = (0, config_loader_1.loadSuppressionConfig)(options.projectPath);
+            this.config = result.config;
+            this.configPath = result.configPath;
+            this.configErrors = result.errors;
+        }
+    }
+    /**
+     * Get configuration errors (if any)
+     */
+    getConfigErrors() {
+        return this.configErrors;
+    }
+    /**
+     * Get the path to the config file (if found)
+     */
+    getConfigPath() {
+        return this.configPath;
+    }
+    /**
+     * Check if a file path should be ignored entirely
+     */
+    isPathIgnored(filePath) {
+        if (!this.config.ignore || this.config.ignore.length === 0) {
+            return false;
+        }
+        const normalizedPath = (0, hash_1.normalizePathForHash)(filePath);
+        return this.config.ignore.some(pattern => (0, minimatch_1.minimatch)(normalizedPath, pattern, { dot: true }));
+    }
+    /**
+     * Parse inline suppressions for a file
+     */
+    getInlineSuppressions(filePath, content) {
+        // Check cache first
+        const cached = this.inlineSuppressionCache.get(filePath);
+        if (cached) {
+            return cached;
+        }
+        // Parse and cache
+        const suppressions = (0, inline_parser_1.parseInlineSuppressions)(content);
+        this.inlineSuppressionCache.set(filePath, suppressions);
+        return suppressions;
+    }
+    /**
+     * Check if a finding is suppressed
+     *
+     * Priority:
+     * 1. Inline comment (highest)
+     * 2. Config finding suppression (by hash)
+     * 3. Config rule suppression (by category)
+     */
+    isFindingSuppressed(finding, fileContent) {
+        const hash = (0, hash_1.computeFindingHash)(finding);
+        const normalizedPath = (0, hash_1.normalizePathForHash)(finding.filePath);
+        // 1. Check inline suppressions (if file content provided)
+        if (fileContent) {
+            const inlineSuppressions = this.getInlineSuppressions(finding.filePath, fileContent);
+            const inlineSuppression = (0, inline_parser_1.isLineSuppressed)(inlineSuppressions, finding.lineNumber, finding.category);
+            if (inlineSuppression) {
+                return {
+                    suppressed: true,
+                    match: {
+                        type: 'inline',
+                        reason: inlineSuppression.reason,
+                    },
+                    hash,
+                };
+            }
+        }
+        // 2. Check config finding suppressions (by hash)
+        const findingSuppressions = this.config.suppressions?.findings || [];
+        const findingSuppression = findingSuppressions.find(s => s.hash === hash);
+        if (findingSuppression) {
+            const expired = (0, config_loader_1.isExpired)(findingSuppression.expires);
+            if (expired && !this.includeExpired) {
+                // Expired - not suppressed
+                return {
+                    suppressed: false,
+                    match: {
+                        type: 'config-finding',
+                        reason: findingSuppression.reason,
+                        expires: findingSuppression.expires,
+                        expired: true,
+                    },
+                    hash,
+                };
+            }
+            return {
+                suppressed: true,
+                match: {
+                    type: 'config-finding',
+                    reason: findingSuppression.reason,
+                    expires: findingSuppression.expires,
+                    expired,
+                },
+                hash,
+            };
+        }
+        // 3. Check config rule suppressions (by category)
+        const ruleSuppressions = this.config.suppressions?.rules || [];
+        const ruleSuppression = ruleSuppressions.find(s => {
+            // Must match category
+            if (s.category !== finding.category) {
+                return false;
+            }
+            // If paths specified, must match one of them
+            if (s.paths && s.paths.length > 0) {
+                const matchesPath = s.paths.some(pattern => (0, minimatch_1.minimatch)(normalizedPath, pattern, { dot: true }));
+                if (!matchesPath) {
+                    return false;
+                }
+            }
+            return true;
+        });
+        if (ruleSuppression) {
+            const expired = (0, config_loader_1.isExpired)(ruleSuppression.expires);
+            if (expired && !this.includeExpired) {
+                // Expired - not suppressed
+                return {
+                    suppressed: false,
+                    match: {
+                        type: 'config-rule',
+                        reason: ruleSuppression.reason,
+                        expires: ruleSuppression.expires,
+                        expired: true,
+                    },
+                    hash,
+                };
+            }
+            return {
+                suppressed: true,
+                match: {
+                    type: 'config-rule',
+                    reason: ruleSuppression.reason,
+                    expires: ruleSuppression.expires,
+                    expired,
+                },
+                hash,
+            };
+        }
+        // Not suppressed
+        return {
+            suppressed: false,
+            hash,
+        };
+    }
+    /**
+     * Apply suppressions to a list of findings
+     */
+    applySuppressions(findings, files) {
+        // Build file content lookup
+        const fileContentMap = new Map();
+        for (const file of files) {
+            fileContentMap.set((0, hash_1.normalizePathForHash)(file.path), file.content);
+        }
+        const passed = [];
+        const suppressed = [];
+        let expiredCount = 0;
+        const stats = {
+            total: findings.length,
+            inlineSuppressed: 0,
+            configFindingSuppressed: 0,
+            configRuleSuppressed: 0,
+            expired: 0,
+        };
+        for (const finding of findings) {
+            // Get file content for inline suppression checking
+            const normalizedPath = (0, hash_1.normalizePathForHash)(finding.filePath);
+            const fileContent = fileContentMap.get(normalizedPath);
+            const result = this.isFindingSuppressed(finding, fileContent);
+            if (result.suppressed) {
+                suppressed.push({
+                    vulnerability: {
+                        id: finding.id,
+                        filePath: finding.filePath,
+                        lineNumber: finding.lineNumber,
+                        category: finding.category,
+                        severity: finding.severity,
+                        title: finding.title,
+                    },
+                    suppression: {
+                        type: result.match.type,
+                        reason: result.match.reason,
+                        expires: result.match.expires,
+                        hash: result.hash,
+                    },
+                });
+                // Update stats
+                switch (result.match.type) {
+                    case 'inline':
+                        stats.inlineSuppressed++;
+                        break;
+                    case 'config-finding':
+                        stats.configFindingSuppressed++;
+                        break;
+                    case 'config-rule':
+                        stats.configRuleSuppressed++;
+                        break;
+                }
+            }
+            else {
+                passed.push(finding);
+                // Track expired suppressions
+                if (result.match?.expired) {
+                    expiredCount++;
+                    stats.expired++;
+                }
+            }
+        }
+        return {
+            findings: passed,
+            suppressed,
+            expiredSuppressions: expiredCount,
+            stats,
+        };
+    }
+    /**
+     * Get all suppressions from config
+     */
+    getAllSuppressions() {
+        return {
+            rules: this.config.suppressions?.rules || [],
+            findings: this.config.suppressions?.findings || [],
+        };
+    }
+    /**
+     * Get ignore patterns from config
+     */
+    getIgnorePatterns() {
+        return this.config.ignore || [];
+    }
+    /**
+     * Check if suppression system is active (has any suppressions)
+     */
+    hasSuppressions() {
+        const rules = this.config.suppressions?.rules || [];
+        const findings = this.config.suppressions?.findings || [];
+        const ignore = this.config.ignore || [];
+        return rules.length > 0 || findings.length > 0 || ignore.length > 0;
+    }
+    /**
+     * Get summary of suppression configuration
+     */
+    getSummary() {
+        return {
+            configPath: this.configPath,
+            ruleCount: this.config.suppressions?.rules?.length || 0,
+            findingCount: this.config.suppressions?.findings?.length || 0,
+            ignorePatternCount: this.config.ignore?.length || 0,
+            hasErrors: this.configErrors.length > 0,
+        };
+    }
+    /**
+     * Clear the inline suppression cache
+     * (useful if files have been modified)
+     */
+    clearCache() {
+        this.inlineSuppressionCache.clear();
+    }
+}
+exports.SuppressionManager = SuppressionManager;
+//# sourceMappingURL=manager.js.map

package/dist/postprocess/suppression/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../src/postprocess/suppression/manager.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,yCAAqC;AAWrC,mDAAkE;AAClE,mDAA2E;AAC3E,iCAAiE;AAcjE;;;;;;;GAOG;AACH,MAAa,kBAAkB;IAU7B,YAAY,OAAkC;QAH9C,6CAA6C;QACrC,2BAAsB,GAAgD,IAAI,GAAG,EAAE,CAAA;QAGrF,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QACtC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAA;QAErD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;YAC3B,IAAI,CAAC,YAAY,GAAG,EAAE,CAAA;QACxB,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,IAAA,qCAAqB,EAAC,OAAO,CAAC,WAAW,CAAC,CAAA;YACzD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC3B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;YACnC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAA;QACnC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAA;IAC1B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAA;IACxB,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,QAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAA;QACd,CAAC;QAED,MAAM,cAAc,GAAG,IAAA,2BAAoB,EAAC,QAAQ,CAAC,CAAA;QAErD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CACvC,IAAA,qBAAS,EAAC,cAAc,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAClD,CAAA;IACH,CAAC;IAED;;OAEG;IACK,qBAAqB,CAC3B,QAAgB,EAChB,OAAe;QAEf,oBAAoB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACxD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAA;QACf,CAAC;QAED,kBAAkB;QAClB,MAAM,YAAY,GAAG,IAAA,uCAAuB,EAAC,OAAO,CAAC,CAAA;QACrD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;QACvD,OAAO,YAAY,CAAA;IACrB,CAAC;IAED;;;;;;;OAOG;IACH,mBAAmB,CACjB,OAAsB,EACtB,WAAoB;QAEpB,MAAM,IAAI,GAAG,IAAA,yBAAkB,EAAC,OAAO,CAAC,CAAA;QACxC,MAAM,cAAc,GAAG,IAAA,2BAAoB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAE7D,0DAA0D;QAC1D,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;YACpF,MAAM,iBAAiB,GAAG,IAAA,gCAAgB,EACxC,kBAAkB,EAClB,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,QAAQ,CACjB,CAAA;YAED,IAAI,iBAAiB,EAAE,CAAC;gBACtB,OAAO;oBACL,UAAU,EAAE,IAAI;oBAChB,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,iBAAiB,CAAC,MAAM;qBACjC;oBACD,IAAI;iBACL,CAAA;YACH,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAA;QACpE,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;QAEzE,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,IAAA,yBAAS,EAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;YAErD,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpC,2BAA2B;gBAC3B,OAAO;oBACL,UAAU,EAAE,KAAK;oBACjB,KAAK,EAAE;wBACL,IAAI,EAAE,gBAAgB;wBACtB,MAAM,EAAE,kBAAkB,CAAC,MAAM;wBACjC,OAAO,EAAE,kBAAkB,CAAC,OAAO;wBACnC,OAAO,EAAE,IAAI;qBACd;oBACD,IAAI;iBACL,CAAA;YACH,CAAC;YAED,OAAO;gBACL,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,kBAAkB,CAAC,MAAM;oBACjC,OAAO,EAAE,kBAAkB,CAAC,OAAO;oBACnC,OAAO;iBACR;gBACD,IAAI;aACL,CAAA;QACH,CAAC;QAED,kDAAkD;QAClD,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAA;QAC9D,MAAM,eAAe,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YAChD,sBAAsB;YACtB,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAA;YACd,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CACzC,IAAA,qBAAS,EAAC,cAAc,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAClD,CAAA;gBACD,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO,KAAK,CAAA;gBACd,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;QAEF,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,IAAA,yBAAS,EAAC,eAAe,CAAC,OAAO,CAAC,CAAA;YAElD,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpC,2BAA2B;gBAC3B,OAAO;oBACL,UAAU,EAAE,KAAK;oBACjB,KAAK,EAAE;wBACL,IAAI,EAAE,aAAa;wBACnB,MAAM,EAAE,eAAe,CAAC,MAAM;wBAC9B,OAAO,EAAE,eAAe,CAAC,OAAO;wBAChC,OAAO,EAAE,IAAI;qBACd;oBACD,IAAI;iBACL,CAAA;YACH,CAAC;YAED,OAAO;gBACL,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,eAAe,CAAC,MAAM;oBAC9B,OAAO,EAAE,eAAe,CAAC,OAAO;oBAChC,OAAO;iBACR;gBACD,IAAI;aACL,CAAA;QACH,CAAC;QAED,iBAAiB;QACjB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,IAAI;SACL,CAAA;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,QAAyB,EACzB,KAAiB;QAEjB,4BAA4B;QAC5B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAA;QAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,cAAc,CAAC,GAAG,CAAC,IAAA,2BAAoB,EAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACnE,CAAC;QAED,MAAM,MAAM,GAAoB,EAAE,CAAA;QAClC,MAAM,UAAU,GAA8B,EAAE,CAAA;QAChD,IAAI,YAAY,GAAG,CAAC,CAAA;QAEpB,MAAM,KAAK,GAAG;YACZ,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,gBAAgB,EAAE,CAAC;YACnB,uBAAuB,EAAE,CAAC;YAC1B,oBAAoB,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC;SACX,CAAA;QAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,mDAAmD;YACnD,MAAM,cAAc,GAAG,IAAA,2BAAoB,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC7D,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;YAEtD,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YAE7D,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,UAAU,CAAC,IAAI,CAAC;oBACd,aAAa,EAAE;wBACb,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;qBACrB;oBACD,WAAW,EAAE;wBACX,IAAI,EAAE,MAAM,CAAC,KAAM,CAAC,IAAI;wBACxB,MAAM,EAAE,MAAM,CAAC,KAAM,CAAC,MAAM;wBAC5B,OAAO,EAAE,MAAM,CAAC,KAAM,CAAC,OAAO;wBAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;qBAClB;iBACF,CAAC,CAAA;gBAEF,eAAe;gBACf,QAAQ,MAAM,CAAC,KAAM,CAAC,IAAI,EAAE,CAAC;oBAC3B,KAAK,QAAQ;wBACX,KAAK,CAAC,gBAAgB,EAAE,CAAA;wBACxB,MAAK;oBACP,KAAK,gBAAgB;wBACnB,KAAK,CAAC,uBAAuB,EAAE,CAAA;wBAC/B,MAAK;oBACP,KAAK,aAAa;wBAChB,KAAK,CAAC,oBAAoB,EAAE,CAAA;wBAC5B,MAAK;gBACT,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBAEpB,6BAA6B;gBAC7B,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;oBAC1B,YAAY,EAAE,CAAA;oBACd,KAAK,CAAC,OAAO,EAAE,CAAA;gBACjB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,MAAM;YAChB,UAAU;YACV,mBAAmB,EAAE,YAAY;YACjC,KAAK;SACN,CAAA;IACH,CAAC;IAED;;OAEG;IACH,kBAAkB;QAIhB,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;YAC5C,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE;SACnD,CAAA;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAA;IACjC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAA;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAA;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAA;QAEvC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IACrE,CAAC;IAED;;OAEG;IACH,UAAU;QAOR,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC;YACvD,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;YAC7D,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;YACnD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;SACxC,CAAA;IACH,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAA;IACrC,CAAC;CACF;AAlVD,gDAkVC"}