@oculum/scanner 1.0.12 → 1.0.13

package/dist/model/taint-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-tracker.js","sourceRoot":"","sources":["../../src/model/taint-tracker.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAqNH,wCAiHC;AAlUD,+DAAuD;AAEvD,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,kBAA2B;IAClE,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,SAAS,GAAG,kBAAkB,CAAA;IAClC,IAAI,QAAQ,GAAkB,IAAI,CAAA;IAClC,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QAClB,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEnD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,GAAG,KAAK,CAAA;YACf,SAAQ;QACV,CAAC;QAED,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,OAAO,GAAG,IAAI,CAAA;YACd,SAAQ;QACV,CAAC;QAED,6BAA6B;QAC7B,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC/B,SAAS,GAAG,KAAK,CAAA;gBACjB,CAAC,EAAE,CAAA,CAAC,SAAS;YACf,CAAC;YACD,SAAQ;QACV,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC5C,MAAK,CAAC,0BAA0B;QAClC,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC5C,SAAS,GAAG,IAAI,CAAA;YAChB,CAAC,EAAE,CAAA,CAAC,SAAS;YACb,SAAQ;QACV,CAAC;QAED,yBAAyB;QACzB,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1D,QAAQ,GAAG,EAAE,CAAA;YACb,SAAQ;QACV,CAAC;QAED,IAAI,QAAQ,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YAChC,QAAQ,GAAG,IAAI,CAAA;YACf,SAAQ;QACV,CAAC;QAED,4CAA4C;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,EAAE,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAA;YACvB,IAAI,EAAE,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAA;QACzB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;AAC7B,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,6EAA6E;AAC7E,SAAS,0BAA0B,CACjC,IAAY,EACZ,WAAyC;IAEzC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;QACrC,gFAAgF;QAChF,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;QACxC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACnD,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAE3B,6CAA6C;IAC7C,IAAI,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,OAAO,aAAa,CAAA;IACtB,CAAC;IAED,4BAA4B;IAC5B,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,oCAAoC;IACpC,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,OAAO,kBAAkB,CAAA;IAC3B,CAAC;IAED,2CAA2C;IAC3C,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,OAAO,eAAe,CAAA;IACxB,CAAC;IAED,gEAAgE;IAChE,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7E,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,mCAAmC;IACnC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,+CAA+C;IAC/C,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,eAAe,CAAA;IACxB,CAAC;IAED,uEAAuE;IACvE,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,cAAc,CAAA;IACvB,CAAC;IAED,0CAA0C;IAC1C,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChF,OAAO,mBAAmB,CAAA;IAC5B,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,IAAY;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAE3B,sCAAsC;IACtC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC7E,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACzC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACjC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACxD,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAA;IAC7C,CAAC;IAED,0CAA0C;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC3E,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAA;IAC7F,CAAC;IAED,kDAAkD;IAClD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClE,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;IACzB,CAAC;IAED,4CAA4C;IAC5C,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACtD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3B,CAAC;IAED,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAA;IACpD,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,CAAA;IAC7C,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAC5B,OAAe,EACf,SAAiB,EACjB,OAA0B,EAC1B,UAA2B;IAE3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAA;IACtD,MAAM,cAAc,GAAsB,EAAE,CAAA;IAE5C,oCAAoC;IACpC,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAA,CAAC,wCAAwC;IAEpF,uCAAuC;IACvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAoB;YAC1B,IAAI,EAAE,MAAM,CAAC,QAAQ;YACrB,SAAS,EAAE,MAAM,CAAC,IAAI;YACtB,MAAM;YACN,WAAW,EAAE,mBAAmB;YAChC,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,CAAC;SACd,CAAA;QACD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QACpC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACzB,CAAC;IAED,qBAAqB;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAA;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAE3B,gCAAgC;QAChC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,SAAQ;QACV,CAAC;QAED,qBAAqB;QACrB,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAA;QAC/D,kBAAkB,GAAG,WAAW,CAAC,SAAS,CAAA;QAE1C,4EAA4E;QAC5E,IAAI,WAAW,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC,KAAK,CAAA;YAC/C,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC7C,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;oBACzB,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;oBAC3B,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;QAExD,0CAA0C;QAC1C,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAQ;QAE1C,0FAA0F;QAC1F,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,CAAC,KAAK;YAAE,SAAQ;QAEpB,0EAA0E;QAC1E,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAEvC,0EAA0E;QAC1E,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,iEAAiE;YACjE,gCAAgC;YAChC,MAAM,WAAW,GAAG,IAAA,qCAAe,EAAC,IAAI,EAAE,UAAU,CAAC,CAAA;YACrD,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAE,CAAA;gBAChD,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAA;gBACzB,QAAQ,CAAC,WAAW,GAAG,UAAU,CAAA;gBACjC,QAAQ,CAAC,kBAAkB,GAAG,WAAW,CAAC,MAAM,CAAA;YAClD,CAAC;YACD,SAAQ;QACV,CAAC;QAED,0BAA0B;QAC1B,MAAM,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAA;QAC1E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAEzC,wCAAwC;QACxC,MAAM,WAAW,GAAG,IAAA,qCAAe,EAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QAErD,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAoB;gBAC1B,IAAI,EAAE,OAAO;gBACb,SAAS,EAAE,UAAU;gBACrB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;gBAC7B,WAAW,EAAE,eAAe;gBAC5B,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBAC3D,kBAAkB,EAAE,WAAW,CAAC,MAAM;gBACtC,UAAU,EAAE,UAAU;aACvB,CAAA;YAED,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YAC5B,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAEvB,oCAAoC;YACpC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAA;AACvB,CAAC"}

package/dist/model/taint-types.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Taint Analysis Types
+ *
+ * All interfaces for intra-file taint tracking: source discovery,
+ * taint propagation, sanitiser detection, and sink matching.
+ */
+export type UserInputSourceType = 'http_body' | 'http_query' | 'http_params' | 'http_headers' | 'url_search_params' | 'form_data' | 'file_upload' | 'websocket_message' | 'cli_args' | 'env_var' | 'database_result' | 'external_api';
+export interface UserInputSource {
+    line: number;
+    expression: string;
+    variable: string;
+    sourceType: UserInputSourceType;
+    frameworkSource?: string;
+    confidence: 'high' | 'medium' | 'low';
+}
+export type TaintPropagationType = 'direct_assignment' | 'destructure' | 'spread' | 'function_arg' | 'template_literal' | 'string_concat' | 'array_push' | 'object_spread' | 'method_chain' | 'ternary';
+export interface TaintedVariable {
+    name: string;
+    taintedAt: number;
+    source: UserInputSource;
+    propagation: TaintPropagationType;
+    sanitised: boolean;
+    sanitisedAt?: number;
+    sanitisationMethod?: string;
+    scopeDepth: number;
+}
+export type SinkType = 'sql_query' | 'eval' | 'exec' | 'inner_html' | 'http_request' | 'redirect' | 'file_write' | 'path_access' | 'template_render' | 'command_exec' | 'regex_constructor' | 'dynamic_import' | 'deserialization';
+export interface TaintSink {
+    line: number;
+    expression: string;
+    sinkType: SinkType;
+}
+export interface TaintPath {
+    source: UserInputSource;
+    chain: TaintedVariable[];
+    sink: TaintSink;
+    sanitised: boolean;
+    confidence: 'high' | 'medium' | 'low';
+}
+export type SanitiserTarget = 'html' | 'sql' | 'command' | 'url' | 'regex' | 'path' | 'all';
+export interface SanitiserInfo {
+    name: string;
+    line: number;
+    sanitises: SanitiserTarget;
+    detection: 'known_library' | 'name_heuristic' | 'type_annotation';
+    library?: string;
+}
+export interface FileTaintAnalysis {
+    filePath: string;
+    sources: UserInputSource[];
+    taintedVariables: TaintedVariable[];
+    taintPaths: TaintPath[];
+    sanitisers: SanitiserInfo[];
+}
+import type { ProjectContext } from './project-context';
+import type { RouteMap } from './route-discovery/types';
+import type { ModuleGraph } from './module-graph';
+import type { CrossFileTaintPath } from './cross-file-taint';
+import type { FunctionProfileMap } from './function-classifier';
+import type { FileFrameworkAnalysis } from './framework-models/types';
+/**
+ * Unified output from all Context Engine phases.
+ * Single container consumed by both scoring and AI validation.
+ */
+export interface ContextEngineResult {
+    projectContext: ProjectContext;
+    fileTaintAnalyses: Map<string, FileTaintAnalysis>;
+    routeMap?: RouteMap;
+    moduleGraph?: ModuleGraph;
+    crossFileTaintPaths?: CrossFileTaintPath[];
+    functionProfiles?: FunctionProfileMap;
+    frameworkAnalyses?: Map<string, FileFrameworkAnalysis>;
+}
+//# sourceMappingURL=taint-types.d.ts.map

package/dist/model/taint-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-types.d.ts","sourceRoot":"","sources":["../../src/model/taint-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,MAAM,mBAAmB,GAC3B,WAAW,GACX,YAAY,GACZ,aAAa,GACb,cAAc,GACd,mBAAmB,GACnB,WAAW,GACX,aAAa,GACb,mBAAmB,GACnB,UAAU,GACV,SAAS,GACT,iBAAiB,GACjB,cAAc,CAAA;AAElB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,mBAAmB,CAAA;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;CACtC;AAMD,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB,aAAa,GACb,QAAQ,GACR,cAAc,GACd,kBAAkB,GAClB,eAAe,GACf,YAAY,GACZ,eAAe,GACf,cAAc,GACd,SAAS,CAAA;AAEb,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,eAAe,CAAA;IACvB,WAAW,EAAE,oBAAoB,CAAA;IACjC,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;CACnB;AAMD,MAAM,MAAM,QAAQ,GAChB,WAAW,GACX,MAAM,GACN,MAAM,GACN,YAAY,GACZ,cAAc,GACd,UAAU,GACV,YAAY,GACZ,aAAa,GACb,iBAAiB,GACjB,cAAc,GACd,mBAAmB,GACnB,gBAAgB,GAChB,iBAAiB,CAAA;AAErB,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,QAAQ,CAAA;CACnB;AAMD,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,eAAe,CAAA;IACvB,KAAK,EAAE,eAAe,EAAE,CAAA;IACxB,IAAI,EAAE,SAAS,CAAA;IACf,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;CACtC;AAMD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAA;AAE3F,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,eAAe,CAAA;IAC1B,SAAS,EAAE,eAAe,GAAG,gBAAgB,GAAG,iBAAiB,CAAA;IACjE,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAMD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B,gBAAgB,EAAE,eAAe,EAAE,CAAA;IACnC,UAAU,EAAE,SAAS,EAAE,CAAA;IACvB,UAAU,EAAE,aAAa,EAAE,CAAA;CAC5B;AAMD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,KAAK,EAAE,WAAW,EAAoB,MAAM,gBAAgB,CAAA;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAErE;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,cAAc,CAAA;IAC9B,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IACjD,QAAQ,CAAC,EAAE,QAAQ,CAAA;IAEnB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAA;IAC1C,gBAAgB,CAAC,EAAE,kBAAkB,CAAA;IACrC,iBAAiB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;CACvD"}

package/dist/model/taint-types.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Taint Analysis Types
+ *
+ * All interfaces for intra-file taint tracking: source discovery,
+ * taint propagation, sanitiser detection, and sink matching.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=taint-types.js.map

package/dist/model/taint-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint-types.js","sourceRoot":"","sources":["../../src/model/taint-types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/model/trpc-analyzer.d.ts

@@ -0,0 +1,78 @@
+/**
+ * tRPC Router Analyzer
+ * Analyzes tRPC router definitions to understand which procedures are protected
+ * by middleware (e.g., adminProcedure, protectedProcedure).
+ *
+ * This helps prevent false positives when frontend code calls protected tRPC
+ * procedures - the backend already handles authorization.
+ */
+import type { ScanFile } from '../shared/types';
+export interface TRPCMiddleware {
+    /** Name of the middleware/procedure base */
+    name: string;
+    /** Type of protection */
+    type: 'admin' | 'authenticated' | 'public' | 'unknown';
+    /** File where defined */
+    definedIn?: string;
+    /** Line number where defined */
+    lineNumber?: number;
+}
+export interface TRPCProcedure {
+    /** Procedure name (e.g., 'getUsers', 'createPost') */
+    name: string;
+    /** Router this procedure belongs to */
+    router: string;
+    /** Whether this procedure has auth middleware */
+    hasAuthMiddleware: boolean;
+    /** Type of middleware protection */
+    middlewareType?: 'admin' | 'authenticated' | 'public';
+    /** File where defined */
+    definedIn?: string;
+}
+export interface TRPCRouter {
+    /** Router name (e.g., 'admin', 'user', 'post') */
+    name: string;
+    /** File where router is defined */
+    file: string;
+    /** Procedures in this router */
+    procedures: string[];
+    /** Default middleware for this router (if any) */
+    defaultMiddleware?: string;
+    /** Whether all procedures in this router are protected */
+    isProtected: boolean;
+}
+export interface TRPCRouterContext {
+    /** All detected routers */
+    routers: Map<string, TRPCRouter>;
+    /** All detected procedures with their protection status */
+    procedures: Map<string, TRPCProcedure>;
+    /** All detected middleware definitions */
+    middlewares: Map<string, TRPCMiddleware>;
+    /** Whether tRPC is detected in the project */
+    hasTRPC: boolean;
+}
+/**
+ * Analyze tRPC routers across all files
+ */
+export declare function analyzeTRPCRouters(files: ScanFile[]): TRPCRouterContext;
+/**
+ * Check if a tRPC procedure is protected by middleware
+ */
+export declare function isProcedureProtected(context: TRPCRouterContext, routerName: string, procedureName?: string): boolean;
+/**
+ * Parse a tRPC client call to extract router and procedure names
+ * e.g., trpc.admin.getUsers.useQuery() -> { router: 'admin', procedure: 'getUsers' }
+ */
+export declare function parseTRPCCall(lineContent: string): {
+    router: string;
+    procedure: string;
+} | null;
+/**
+ * Check if a line contains a tRPC client call
+ */
+export declare function isTRPCClientCall(lineContent: string): boolean;
+/**
+ * Get a summary of tRPC context for logging
+ */
+export declare function getTRPCSummary(context: TRPCRouterContext): string;
+//# sourceMappingURL=trpc-analyzer.d.ts.map

package/dist/model/trpc-analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trpc-analyzer.d.ts","sourceRoot":"","sources":["../../src/model/trpc-analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE/C,MAAM,WAAW,cAAc;IAC7B,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,IAAI,EAAE,OAAO,GAAG,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAA;IACtD,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAA;IACZ,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,iBAAiB,EAAE,OAAO,CAAA;IAC1B,oCAAoC;IACpC,cAAc,CAAC,EAAE,OAAO,GAAG,eAAe,GAAG,QAAQ,CAAA;IACrD,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAA;IACZ,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,gCAAgC;IAChC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,kDAAkD;IAClD,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,0DAA0D;IAC1D,WAAW,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAChC,2DAA2D;IAC3D,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IACtC,0CAA0C;IAC1C,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACxC,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAA;CACjB;AA0LD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAgDvE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAqBT;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmB/F;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAQ7D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAcjE"}

package/dist/model/trpc-analyzer.js

@@ -0,0 +1,297 @@
+"use strict";
+/**
+ * tRPC Router Analyzer
+ * Analyzes tRPC router definitions to understand which procedures are protected
+ * by middleware (e.g., adminProcedure, protectedProcedure).
+ *
+ * This helps prevent false positives when frontend code calls protected tRPC
+ * procedures - the backend already handles authorization.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyzeTRPCRouters = analyzeTRPCRouters;
+exports.isProcedureProtected = isProcedureProtected;
+exports.parseTRPCCall = parseTRPCCall;
+exports.isTRPCClientCall = isTRPCClientCall;
+exports.getTRPCSummary = getTRPCSummary;
+/**
+ * Patterns that indicate admin-level middleware
+ */
+const ADMIN_MIDDLEWARE_PATTERNS = [
+    /adminProcedure/i,
+    /adminMiddleware/i,
+    /requireAdmin/i,
+    /isAdmin\s*:\s*true/i,
+    /role\s*===?\s*['"]admin['"]/i,
+    /\.admin\s*\(/i,
+    /adminRouter/i,
+    /superAdminProcedure/i,
+];
+/**
+ * Patterns that indicate authenticated middleware
+ */
+const AUTH_MIDDLEWARE_PATTERNS = [
+    /protectedProcedure/i,
+    /authenticatedProcedure/i,
+    /requireAuth/i,
+    /isAuthenticated/i,
+    /privateProcedure/i,
+    /authedProcedure/i,
+    /userProcedure/i,
+    /loggedInProcedure/i,
+];
+/**
+ * Patterns that indicate public/unprotected procedures
+ */
+const PUBLIC_MIDDLEWARE_PATTERNS = [
+    /publicProcedure/i,
+    /guestProcedure/i,
+    /unauthenticatedProcedure/i,
+    /openProcedure/i,
+];
+/**
+ * Detect tRPC usage in files
+ */
+function detectTRPCUsage(content) {
+    const trpcPatterns = [
+        /@trpc\/server/i,
+        /@trpc\/client/i,
+        /@trpc\/react-query/i,
+        /@trpc\/next/i,
+        /createTRPCRouter/i,
+        /initTRPC/i,
+        /trpc\.router/i,
+        /t\.router\s*\(/i,
+        /t\.procedure/i,
+    ];
+    return trpcPatterns.some(p => p.test(content));
+}
+/**
+ * Extract middleware definitions from a file
+ */
+function extractMiddlewares(content, filePath) {
+    const middlewares = [];
+    const lines = content.split('\n');
+    // Look for procedure definitions with middleware
+    const procedureDefPatterns = [
+        /export\s+const\s+(\w+Procedure)\s*=\s*t\.procedure\.use/i,
+        /const\s+(\w+Procedure)\s*=\s*t\.procedure\.use/i,
+        /(\w+Procedure)\s*=\s*publicProcedure\.use/i,
+        /export\s+const\s+(\w+Procedure)\s*=/i,
+    ];
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of procedureDefPatterns) {
+            const match = line.match(pattern);
+            if (match) {
+                const name = match[1];
+                let type = 'unknown';
+                // Determine type based on name and context
+                if (ADMIN_MIDDLEWARE_PATTERNS.some(p => p.test(name) || p.test(line))) {
+                    type = 'admin';
+                }
+                else if (AUTH_MIDDLEWARE_PATTERNS.some(p => p.test(name) || p.test(line))) {
+                    type = 'authenticated';
+                }
+                else if (PUBLIC_MIDDLEWARE_PATTERNS.some(p => p.test(name) || p.test(line))) {
+                    type = 'public';
+                }
+                middlewares.push({
+                    name,
+                    type,
+                    definedIn: filePath,
+                    lineNumber: i + 1,
+                });
+            }
+        }
+    }
+    return middlewares;
+}
+/**
+ * Extract router definitions from a file
+ */
+function extractRouters(content, filePath, middlewares) {
+    const routers = [];
+    const lines = content.split('\n');
+    // Pattern to find router definitions
+    const routerDefPatterns = [
+        /export\s+const\s+(\w+Router)\s*=\s*(?:createTRPCRouter|t\.router)\s*\(\s*\{/i,
+        /const\s+(\w+Router)\s*=\s*(?:createTRPCRouter|t\.router)\s*\(\s*\{/i,
+        /(\w+):\s*(?:createTRPCRouter|t\.router)\s*\(\s*\{/i,
+    ];
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of routerDefPatterns) {
+            const match = line.match(pattern);
+            if (match) {
+                const name = match[1].replace(/Router$/i, '').toLowerCase();
+                // Look ahead to find procedures in this router
+                const procedures = [];
+                let isProtected = false;
+                let defaultMiddleware;
+                // Check if router name suggests admin protection
+                if (/admin/i.test(name)) {
+                    isProtected = true;
+                    defaultMiddleware = 'adminProcedure';
+                }
+                // Scan the router body for procedures
+                let braceDepth = 0;
+                let inRouter = false;
+                for (let j = i; j < Math.min(i + 100, lines.length); j++) {
+                    const routerLine = lines[j];
+                    if (routerLine.includes('{')) {
+                        braceDepth += (routerLine.match(/\{/g) || []).length;
+                        inRouter = true;
+                    }
+                    if (routerLine.includes('}')) {
+                        braceDepth -= (routerLine.match(/\}/g) || []).length;
+                    }
+                    if (inRouter && braceDepth === 0)
+                        break;
+                    // Look for procedure definitions
+                    const procMatch = routerLine.match(/(\w+)\s*:\s*(\w+Procedure)\./i);
+                    if (procMatch) {
+                        procedures.push(procMatch[1]);
+                        const middlewareName = procMatch[2];
+                        const middleware = middlewares.get(middlewareName);
+                        if (middleware && (middleware.type === 'admin' || middleware.type === 'authenticated')) {
+                            isProtected = true;
+                        }
+                    }
+                    // Check for admin/protected procedure usage
+                    if (ADMIN_MIDDLEWARE_PATTERNS.some(p => p.test(routerLine))) {
+                        isProtected = true;
+                    }
+                    else if (AUTH_MIDDLEWARE_PATTERNS.some(p => p.test(routerLine))) {
+                        isProtected = true;
+                    }
+                }
+                routers.push({
+                    name,
+                    file: filePath,
+                    procedures,
+                    defaultMiddleware,
+                    isProtected,
+                });
+            }
+        }
+    }
+    return routers;
+}
+/**
+ * Analyze tRPC routers across all files
+ */
+function analyzeTRPCRouters(files) {
+    const context = {
+        routers: new Map(),
+        procedures: new Map(),
+        middlewares: new Map(),
+        hasTRPC: false,
+    };
+    // First pass: detect if tRPC is used
+    for (const file of files) {
+        if (detectTRPCUsage(file.content)) {
+            context.hasTRPC = true;
+            break;
+        }
+    }
+    if (!context.hasTRPC) {
+        return context;
+    }
+    // Second pass: extract middlewares
+    for (const file of files) {
+        const middlewares = extractMiddlewares(file.content, file.path);
+        for (const middleware of middlewares) {
+            context.middlewares.set(middleware.name, middleware);
+        }
+    }
+    // Third pass: extract routers
+    for (const file of files) {
+        const routers = extractRouters(file.content, file.path, context.middlewares);
+        for (const router of routers) {
+            context.routers.set(router.name, router);
+            // Add procedures to the procedures map
+            for (const procName of router.procedures) {
+                context.procedures.set(`${router.name}.${procName}`, {
+                    name: procName,
+                    router: router.name,
+                    hasAuthMiddleware: router.isProtected,
+                    middlewareType: router.isProtected ? 'authenticated' : 'public',
+                    definedIn: router.file,
+                });
+            }
+        }
+    }
+    return context;
+}
+/**
+ * Check if a tRPC procedure is protected by middleware
+ */
+function isProcedureProtected(context, routerName, procedureName) {
+    // Check if the router itself is protected
+    const router = context.routers.get(routerName.toLowerCase());
+    if (router?.isProtected) {
+        return true;
+    }
+    // Check specific procedure if provided
+    if (procedureName) {
+        const procedure = context.procedures.get(`${routerName.toLowerCase()}.${procedureName}`);
+        if (procedure?.hasAuthMiddleware) {
+            return true;
+        }
+    }
+    // Check if router name suggests admin protection
+    if (/admin/i.test(routerName)) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Parse a tRPC client call to extract router and procedure names
+ * e.g., trpc.admin.getUsers.useQuery() -> { router: 'admin', procedure: 'getUsers' }
+ */
+function parseTRPCCall(lineContent) {
+    // Pattern: trpc.routerName.procedureName
+    const patterns = [
+        /trpc\.(\w+)\.(\w+)\./i,
+        /api\.(\w+)\.(\w+)\./i,
+        /client\.(\w+)\.(\w+)\./i,
+    ];
+    for (const pattern of patterns) {
+        const match = lineContent.match(pattern);
+        if (match) {
+            return {
+                router: match[1],
+                procedure: match[2],
+            };
+        }
+    }
+    return null;
+}
+/**
+ * Check if a line contains a tRPC client call
+ */
+function isTRPCClientCall(lineContent) {
+    const patterns = [
+        /trpc\.\w+\.\w+\.(useQuery|useMutation|useInfiniteQuery)/i,
+        /api\.\w+\.\w+\.(useQuery|useMutation|useInfiniteQuery)/i,
+        /trpc\.\w+\.\w+\.query\(/i,
+        /trpc\.\w+\.\w+\.mutate\(/i,
+    ];
+    return patterns.some(p => p.test(lineContent));
+}
+/**
+ * Get a summary of tRPC context for logging
+ */
+function getTRPCSummary(context) {
+    if (!context.hasTRPC) {
+        return 'No tRPC detected';
+    }
+    const parts = [];
+    parts.push(`tRPC detected: ${context.routers.size} routers, ${context.procedures.size} procedures`);
+    const protectedRouters = Array.from(context.routers.values()).filter(r => r.isProtected);
+    if (protectedRouters.length > 0) {
+        parts.push(`Protected routers: ${protectedRouters.map(r => r.name).join(', ')}`);
+    }
+    return parts.join('; ');
+}
+//# sourceMappingURL=trpc-analyzer.js.map

package/dist/model/trpc-analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trpc-analyzer.js","sourceRoot":"","sources":["../../src/model/trpc-analyzer.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AA+OH,gDAgDC;AAKD,oDAyBC;AAMD,sCAmBC;AAKD,4CAQC;AAKD,wCAcC;AAlUD;;GAEG;AACH,MAAM,yBAAyB,GAAG;IAChC,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,qBAAqB;IACrB,8BAA8B;IAC9B,eAAe;IACf,cAAc;IACd,sBAAsB;CACvB,CAAA;AAED;;GAEG;AACH,MAAM,wBAAwB,GAAG;IAC/B,qBAAqB;IACrB,yBAAyB;IACzB,cAAc;IACd,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,oBAAoB;CACrB,CAAA;AAED;;GAEG;AACH,MAAM,0BAA0B,GAAG;IACjC,kBAAkB;IAClB,iBAAiB;IACjB,2BAA2B;IAC3B,gBAAgB;CACjB,CAAA;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,YAAY,GAAG;QACnB,gBAAgB;QAChB,gBAAgB;QAChB,qBAAqB;QACrB,cAAc;QACd,mBAAmB;QACnB,WAAW;QACX,eAAe;QACf,iBAAiB;QACjB,eAAe;KAChB,CAAA;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,OAAe,EAAE,QAAgB;IAC3D,MAAM,WAAW,GAAqB,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAEjC,iDAAiD;IACjD,MAAM,oBAAoB,GAAG;QAC3B,0DAA0D;QAC1D,iDAAiD;QACjD,4CAA4C;QAC5C,sCAAsC;KACvC,CAAA;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAErB,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACjC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;gBACrB,IAAI,IAAI,GAAqD,SAAS,CAAA;gBAEtE,2CAA2C;gBAC3C,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACtE,IAAI,GAAG,OAAO,CAAA;gBAChB,CAAC;qBAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC5E,IAAI,GAAG,eAAe,CAAA;gBACxB,CAAC;qBAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC9E,IAAI,GAAG,QAAQ,CAAA;gBACjB,CAAC;gBAED,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI;oBACJ,IAAI;oBACJ,SAAS,EAAE,QAAQ;oBACnB,UAAU,EAAE,CAAC,GAAG,CAAC;iBAClB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAA;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,QAAgB,EAAE,WAAwC;IACjG,MAAM,OAAO,GAAiB,EAAE,CAAA;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAEjC,qCAAqC;IACrC,MAAM,iBAAiB,GAAG;QACxB,8EAA8E;QAC9E,qEAAqE;QACrE,oDAAoD;KACrD,CAAA;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAErB,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACjC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;gBAE3D,+CAA+C;gBAC/C,MAAM,UAAU,GAAa,EAAE,CAAA;gBAC/B,IAAI,WAAW,GAAG,KAAK,CAAA;gBACvB,IAAI,iBAAqC,CAAA;gBAEzC,iDAAiD;gBACjD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,WAAW,GAAG,IAAI,CAAA;oBAClB,iBAAiB,GAAG,gBAAgB,CAAA;gBACtC,CAAC;gBAED,sCAAsC;gBACtC,IAAI,UAAU,GAAG,CAAC,CAAA;gBAClB,IAAI,QAAQ,GAAG,KAAK,CAAA;gBACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBACzD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;oBAE3B,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC7B,UAAU,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;wBACpD,QAAQ,GAAG,IAAI,CAAA;oBACjB,CAAC;oBACD,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC7B,UAAU,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;oBACtD,CAAC;oBAED,IAAI,QAAQ,IAAI,UAAU,KAAK,CAAC;wBAAE,MAAK;oBAEvC,iCAAiC;oBACjC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;oBACnE,IAAI,SAAS,EAAE,CAAC;wBACd,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;wBAC7B,MAAM,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;wBACnC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;wBAClD,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,eAAe,CAAC,EAAE,CAAC;4BACvF,WAAW,GAAG,IAAI,CAAA;wBACpB,CAAC;oBACH,CAAC;oBAED,4CAA4C;oBAC5C,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;wBAC5D,WAAW,GAAG,IAAI,CAAA;oBACpB,CAAC;yBAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;wBAClE,WAAW,GAAG,IAAI,CAAA;oBACpB,CAAC;gBACH,CAAC;gBAED,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,IAAI,EAAE,QAAQ;oBACd,UAAU;oBACV,iBAAiB;oBACjB,WAAW;iBACZ,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAAC,KAAiB;IAClD,MAAM,OAAO,GAAsB;QACjC,OAAO,EAAE,IAAI,GAAG,EAAE;QAClB,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,WAAW,EAAE,IAAI,GAAG,EAAE;QACtB,OAAO,EAAE,KAAK;KACf,CAAA;IAED,qCAAqC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAA;YACtB,MAAK;QACP,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,mCAAmC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QAC5E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAExC,uCAAuC;YACvC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACzC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,EAAE;oBACnD,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,iBAAiB,EAAE,MAAM,CAAC,WAAW;oBACrC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ;oBAC/D,SAAS,EAAE,MAAM,CAAC,IAAI;iBACvB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAClC,OAA0B,EAC1B,UAAkB,EAClB,aAAsB;IAEtB,0CAA0C;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;IAC5D,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;QACxB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,uCAAuC;IACvC,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,WAAW,EAAE,IAAI,aAAa,EAAE,CAAC,CAAA;QACxF,IAAI,SAAS,EAAE,iBAAiB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,WAAmB;IAC/C,yCAAyC;IACzC,MAAM,QAAQ,GAAG;QACf,uBAAuB;QACvB,sBAAsB;QACtB,yBAAyB;KAC1B,CAAA;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;gBAChB,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;aACpB,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,WAAmB;IAClD,MAAM,QAAQ,GAAG;QACf,0DAA0D;QAC1D,yDAAyD;QACzD,0BAA0B;QAC1B,2BAA2B;KAC5B,CAAA;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAA;AAChD,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,OAA0B;IACvD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,kBAAkB,CAAA;IAC3B,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,OAAO,CAAC,IAAI,aAAa,OAAO,CAAC,UAAU,CAAC,IAAI,aAAa,CAAC,CAAA;IAEnG,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IACxF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,sBAAsB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClF,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}