@openrewrite/recipes-nodejs 0.36.0-20251211-172625 → 0.36.0-20251212-170419

package/dist/security/dependency-vulnerability-check.js

@@ -0,0 +1,639 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DependencyVulnerabilityCheck = void 0;
+const rewrite_1 = require("@openrewrite/rewrite");
+const json_1 = require("@openrewrite/rewrite/json");
+const rewrite_2 = require("@openrewrite/rewrite");
+const text_1 = require("@openrewrite/rewrite/text");
+const yaml_1 = require("@openrewrite/rewrite/yaml");
+const javascript_1 = require("@openrewrite/rewrite/javascript");
+const semver = __importStar(require("semver"));
+const path = __importStar(require("path"));
+const vulnerability_1 = require("./vulnerability");
+class VulnerabilityReportRow {
+    constructor(sourcePath, cve, packageName, version, fixedVersion, lastAffectedVersion, upgradeable, summary, severity, depth, cwes, isDirect, dependencyPath) {
+        this.sourcePath = sourcePath;
+        this.cve = cve;
+        this.packageName = packageName;
+        this.version = version;
+        this.fixedVersion = fixedVersion;
+        this.lastAffectedVersion = lastAffectedVersion;
+        this.upgradeable = upgradeable;
+        this.summary = summary;
+        this.severity = severity;
+        this.depth = depth;
+        this.cwes = cwes;
+        this.isDirect = isDirect;
+        this.dependencyPath = dependencyPath;
+    }
+}
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "Source Path",
+        description: "Path to the package.json file where the vulnerability was found"
+    })
+], VulnerabilityReportRow.prototype, "sourcePath", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "CVE",
+        description: "The CVE identifier of the vulnerability"
+    })
+], VulnerabilityReportRow.prototype, "cve", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "Package",
+        description: "The name of the vulnerable package"
+    })
+], VulnerabilityReportRow.prototype, "packageName", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "Version",
+        description: "The resolved version of the package"
+    })
+], VulnerabilityReportRow.prototype, "version", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "Fixed Version",
+        description: "The version that fixes the vulnerability"
+    })
+], VulnerabilityReportRow.prototype, "fixedVersion", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "Last Affected",
+        description: "The last version affected by the vulnerability"
+    })
+], VulnerabilityReportRow.prototype, "lastAffectedVersion", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "Upgradeable",
+        description: "Whether the vulnerability can be fixed with a version upgrade within the maximum delta"
+    })
+], VulnerabilityReportRow.prototype, "upgradeable", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "Summary",
+        description: "Brief description of the vulnerability"
+    })
+], VulnerabilityReportRow.prototype, "summary", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "Severity",
+        description: "Severity level of the vulnerability"
+    })
+], VulnerabilityReportRow.prototype, "severity", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "Depth",
+        description: "Depth in the dependency tree (0 = direct, 1+ = transitive)"
+    })
+], VulnerabilityReportRow.prototype, "depth", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "CWEs",
+        description: "CWE identifiers associated with this vulnerability"
+    })
+], VulnerabilityReportRow.prototype, "cwes", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "Is Direct",
+        description: "Whether this is a direct dependency"
+    })
+], VulnerabilityReportRow.prototype, "isDirect", void 0);
+__decorate([
+    (0, rewrite_1.Column)({
+        displayName: "Dependency Path",
+        description: "Path showing how the vulnerable dependency is brought in (e.g., 'dependencies > lodash@4.0.0 > vulnerable-pkg@1.0.0')"
+    })
+], VulnerabilityReportRow.prototype, "dependencyPath", void 0);
+class DependencyVulnerabilityCheck extends rewrite_1.ScanningRecipe {
+    constructor() {
+        super(...arguments);
+        this.name = "org.openrewrite.node.dependency-vulnerability-check";
+        this.displayName = "Find and fix vulnerable npm dependencies";
+        this.description = "This software composition analysis (SCA) tool detects and upgrades dependencies with publicly " +
+            "disclosed vulnerabilities. This recipe both generates a report of vulnerable dependencies and " +
+            "upgrades to newer versions with fixes. This recipe by default only upgrades to the latest **patch** version. " +
+            "If a minor or major upgrade is required to reach the fixed version, this can be controlled using the `maximumUpgradeDelta` option. " +
+            "Vulnerability information comes from the GitHub Security Advisory Database.";
+        this.vulnerabilityReport = new rewrite_1.DataTable("org.openrewrite.nodejs.table.VulnerabilityReport", "Vulnerability Report", "Lists all vulnerabilities found in project dependencies.", VulnerabilityReportRow);
+    }
+    initialValue(_ctx) {
+        return Object.assign(Object.assign({}, (0, javascript_1.createDependencyRecipeAccumulator)()), { db: vulnerability_1.VulnerabilityDatabase.load(), vulnerableByProject: new Map(), fixesByProject: new Map() });
+    }
+    getMinimumSeverity() {
+        return this.minimumSeverity ? (0, vulnerability_1.parseSeverity)(this.minimumSeverity) : vulnerability_1.Severity.LOW;
+    }
+    getMaximumUpgradeDelta() {
+        return this.maximumUpgradeDelta || 'patch';
+    }
+    isReportOnly() {
+        return this.getMaximumUpgradeDelta() === 'none';
+    }
+    matchesCvePattern(vulnerability) {
+        if (!this.cvePattern) {
+            return true;
+        }
+        try {
+            const regex = new RegExp(this.cvePattern);
+            return regex.test(vulnerability.cve);
+        }
+        catch (_a) {
+            return true;
+        }
+    }
+    isVersionAffected(version, vulnerability) {
+        try {
+            const v = semver.parse(version);
+            if (!v)
+                return false;
+            if (vulnerability.introducedVersion && vulnerability.introducedVersion !== '0') {
+                const introduced = semver.parse(vulnerability.introducedVersion);
+                if (introduced && semver.lt(v, introduced)) {
+                    return false;
+                }
+            }
+            if (vulnerability.fixedVersion) {
+                const fixed = semver.parse(vulnerability.fixedVersion);
+                if (fixed && semver.gte(v, fixed)) {
+                    return false;
+                }
+                return true;
+            }
+            if (vulnerability.lastAffectedVersion) {
+                const lastAffected = semver.parse(vulnerability.lastAffectedVersion);
+                if (lastAffected && semver.gt(v, lastAffected)) {
+                    return false;
+                }
+                return true;
+            }
+            return true;
+        }
+        catch (_a) {
+            return false;
+        }
+    }
+    isUpgradeableWithinDelta(currentVersion, vulnerability) {
+        if (this.isReportOnly()) {
+            return false;
+        }
+        try {
+            const current = semver.parse(currentVersion);
+            if (!current)
+                return false;
+            const delta = this.getMaximumUpgradeDelta();
+            if (vulnerability.fixedVersion) {
+                const fixed = semver.parse(vulnerability.fixedVersion);
+                if (!fixed)
+                    return false;
+                switch (delta) {
+                    case 'patch':
+                        return current.major === fixed.major && current.minor === fixed.minor;
+                    case 'minor':
+                        return current.major === fixed.major;
+                    case 'major':
+                        return true;
+                    case 'none':
+                        return false;
+                }
+            }
+            if (vulnerability.lastAffectedVersion) {
+                const lastAffected = semver.parse(vulnerability.lastAffectedVersion);
+                if (!lastAffected)
+                    return false;
+                switch (delta) {
+                    case 'patch':
+                        return current.major === lastAffected.major &&
+                            current.minor === lastAffected.minor;
+                    case 'minor':
+                        return current.major === lastAffected.major;
+                    case 'major':
+                        return true;
+                    case 'none':
+                        return false;
+                }
+            }
+            return false;
+        }
+        catch (_a) {
+            return false;
+        }
+    }
+    getUpgradeVersion(vulnerability) {
+        if (vulnerability.fixedVersion) {
+            return vulnerability.fixedVersion;
+        }
+        return undefined;
+    }
+    renderPath(scope, path) {
+        const parts = [];
+        if (scope) {
+            parts.push(scope);
+        }
+        for (const seg of path) {
+            parts.push(`${seg.name}@${seg.version}`);
+        }
+        return parts.join(' > ');
+    }
+    findVulnerabilities(resolved, db, depth, isDirect, scope, path, visited, results) {
+        const key = `${resolved.name}@${resolved.version}`;
+        if (visited.has(key))
+            return;
+        visited.add(key);
+        const currentPath = [...path, { name: resolved.name, version: resolved.version }];
+        const vulns = db.getVulnerabilities(resolved.name);
+        for (const vuln of vulns) {
+            if ((0, vulnerability_1.severityOrdinal)(vuln.severity) < (0, vulnerability_1.severityOrdinal)(this.getMinimumSeverity())) {
+                continue;
+            }
+            if (!this.matchesCvePattern(vuln)) {
+                continue;
+            }
+            if (this.isVersionAffected(resolved.version, vuln)) {
+                results.push({
+                    resolved,
+                    vulnerability: vuln,
+                    depth,
+                    isDirect,
+                    scope,
+                    path: currentPath
+                });
+            }
+        }
+        if (this.overrideTransitive) {
+            const transitives = [
+                ...(resolved.dependencies || []),
+                ...(resolved.devDependencies || []),
+                ...(resolved.peerDependencies || []),
+                ...(resolved.optionalDependencies || [])
+            ];
+            for (const dep of transitives) {
+                if (dep.resolved) {
+                    this.findVulnerabilities(dep.resolved, db, depth + 1, false, scope, currentPath, visited, results);
+                }
+            }
+        }
+    }
+    computeFixes(vulnerabilities) {
+        if (this.isReportOnly()) {
+            return [];
+        }
+        const byPackage = new Map();
+        for (const vuln of vulnerabilities) {
+            const existing = byPackage.get(vuln.resolved.name) || [];
+            existing.push(vuln);
+            byPackage.set(vuln.resolved.name, existing);
+        }
+        const fixes = [];
+        for (const [packageName, vulns] of byPackage) {
+            let highestFixVersion;
+            const cves = [];
+            let isTransitive = true;
+            let scope;
+            for (const vuln of vulns) {
+                if (!this.isUpgradeableWithinDelta(vuln.resolved.version, vuln.vulnerability)) {
+                    continue;
+                }
+                const fixVersion = this.getUpgradeVersion(vuln.vulnerability);
+                if (fixVersion) {
+                    if (!highestFixVersion || semver.gt(fixVersion, highestFixVersion)) {
+                        highestFixVersion = fixVersion;
+                    }
+                }
+                cves.push(vuln.vulnerability.cve);
+                if (vuln.isDirect) {
+                    isTransitive = false;
+                    scope = vuln.scope;
+                }
+            }
+            if (highestFixVersion && cves.length > 0) {
+                fixes.push({
+                    packageName,
+                    newVersion: highestFixVersion,
+                    isTransitive,
+                    cves,
+                    scope
+                });
+            }
+        }
+        return fixes;
+    }
+    scanner(acc) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const recipe = this;
+            return new class extends json_1.JsonVisitor {
+                visitDocument(doc, _ctx) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        var _a;
+                        if (!doc.sourcePath.endsWith('package.json')) {
+                            return doc;
+                        }
+                        const marker = (0, javascript_1.findNodeResolutionResult)(doc);
+                        if (!marker) {
+                            return doc;
+                        }
+                        const vulnerabilities = [];
+                        const visited = new Set();
+                        const scopesToCheck = recipe.scope
+                            ? [recipe.scope]
+                            : ['dependencies', 'devDependencies', 'peerDependencies', 'optionalDependencies'];
+                        for (const scope of scopesToCheck) {
+                            const deps = marker[scope] || [];
+                            for (const dep of deps) {
+                                if (dep.resolved) {
+                                    recipe.findVulnerabilities(dep.resolved, acc.db, 0, true, scope, [], visited, vulnerabilities);
+                                }
+                            }
+                        }
+                        if (vulnerabilities.length > 0) {
+                            acc.vulnerableByProject.set(doc.sourcePath, vulnerabilities);
+                            const fixes = recipe.computeFixes(vulnerabilities);
+                            if (fixes.length > 0) {
+                                acc.fixesByProject.set(doc.sourcePath, fixes);
+                                const projectDir = path.dirname(path.resolve(doc.sourcePath));
+                                const pm = (_a = marker.packageManager) !== null && _a !== void 0 ? _a : "Npm";
+                                acc.projectsToUpdate.set(doc.sourcePath, {
+                                    projectDir,
+                                    packageJsonPath: doc.sourcePath,
+                                    originalPackageJson: yield this.printDocument(doc),
+                                    packageManager: pm
+                                });
+                            }
+                        }
+                        return doc;
+                    });
+                }
+                printDocument(doc) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        return rewrite_2.TreePrinters.print(doc);
+                    });
+                }
+            };
+        });
+    }
+    getRecipeList() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return [];
+        });
+    }
+    editorWithData(acc) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const recipe = this;
+            const YAML_LOCK_FILES = ['pnpm-lock.yaml', 'yarn.lock'];
+            return new class extends rewrite_1.TreeVisitor {
+                accept(tree, ctx) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        if ((0, json_1.isJson)(tree) && tree.kind === json_1.Json.Kind.Document) {
+                            return this.handleJsonDocument(tree, ctx);
+                        }
+                        if ((0, yaml_1.isYaml)(tree) && (0, yaml_1.isDocuments)(tree)) {
+                            const basename = path.basename(tree.sourcePath);
+                            if (YAML_LOCK_FILES.includes(basename)) {
+                                return this.handleYamlLockFile(tree, ctx);
+                            }
+                        }
+                        if ((0, text_1.isPlainText)(tree)) {
+                            const basename = path.basename(tree.sourcePath);
+                            if (basename === 'yarn.lock') {
+                                return this.handlePlainTextLockFile(tree, ctx);
+                            }
+                        }
+                        return tree;
+                    });
+                }
+                handleJsonDocument(doc, ctx) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        const sourcePath = doc.sourcePath;
+                        if (sourcePath.endsWith('package.json')) {
+                            return this.handlePackageJson(doc, ctx);
+                        }
+                        const updatedLockContent = (0, javascript_1.getUpdatedLockFileContent)(sourcePath, acc);
+                        if (updatedLockContent) {
+                            return yield new json_1.JsonParser({}).parseOne({
+                                text: updatedLockContent,
+                                sourcePath: doc.sourcePath
+                            });
+                        }
+                        return doc;
+                    });
+                }
+                handleYamlLockFile(docs, _ctx) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        const sourcePath = docs.sourcePath;
+                        const updatedLockContent = (0, javascript_1.getUpdatedLockFileContent)(sourcePath, acc);
+                        if (updatedLockContent) {
+                            return yield new yaml_1.YamlParser({}).parseOne({
+                                text: updatedLockContent,
+                                sourcePath: docs.sourcePath
+                            });
+                        }
+                        return docs;
+                    });
+                }
+                handlePlainTextLockFile(text, _ctx) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        const sourcePath = text.sourcePath;
+                        const updatedLockContent = (0, javascript_1.getUpdatedLockFileContent)(sourcePath, acc);
+                        if (updatedLockContent) {
+                            const parsed = yield new text_1.PlainTextParser({}).parseOne({
+                                text: updatedLockContent,
+                                sourcePath: text.sourcePath
+                            });
+                            return parsed;
+                        }
+                        return text;
+                    });
+                }
+                handlePackageJson(doc, ctx) {
+                    return __awaiter(this, void 0, void 0, function* () {
+                        const vulnerabilities = acc.vulnerableByProject.get(doc.sourcePath);
+                        if (!vulnerabilities || vulnerabilities.length === 0) {
+                            return doc;
+                        }
+                        for (const vuln of vulnerabilities) {
+                            const upgradeable = recipe.isUpgradeableWithinDelta(vuln.resolved.version, vuln.vulnerability);
+                            recipe.vulnerabilityReport.insertRow(ctx, new VulnerabilityReportRow(doc.sourcePath, vuln.vulnerability.cve, vuln.resolved.name, vuln.resolved.version, vuln.vulnerability.fixedVersion || '', vuln.vulnerability.lastAffectedVersion || '', upgradeable, vuln.vulnerability.summary, vuln.vulnerability.severity, vuln.depth, vuln.vulnerability.cwes, vuln.isDirect, recipe.renderPath(vuln.scope, vuln.path)));
+                        }
+                        if (recipe.isReportOnly()) {
+                            return doc;
+                        }
+                        const fixes = acc.fixesByProject.get(doc.sourcePath);
+                        const updateInfo = acc.projectsToUpdate.get(doc.sourcePath);
+                        if (!fixes || fixes.length === 0 || !updateInfo) {
+                            return doc;
+                        }
+                        const failureMessage = yield (0, javascript_1.runInstallIfNeeded)(doc.sourcePath, acc, () => recipe.runPackageManagerInstall(acc, updateInfo, fixes));
+                        if (failureMessage) {
+                            return (0, rewrite_1.markupWarn)(doc, `Failed to fix vulnerabilities in ${doc.sourcePath}`, failureMessage);
+                        }
+                        let result = doc;
+                        for (const fix of fixes) {
+                            if (!fix.isTransitive && fix.scope) {
+                                const visitor = new UpdateVersionVisitor(fix.packageName, fix.newVersion, fix.scope);
+                                result = (yield visitor.visit(result, undefined));
+                            }
+                        }
+                        return (0, javascript_1.updateNodeResolutionMarker)(result, updateInfo, acc);
+                    });
+                }
+            };
+        });
+    }
+    runPackageManagerInstall(acc, updateInfo, fixes) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const modifiedPackageJson = this.createModifiedPackageJson(updateInfo.originalPackageJson, fixes);
+            const result = yield (0, javascript_1.runInstallInTempDir)(updateInfo.projectDir, updateInfo.packageManager, modifiedPackageJson);
+            (0, javascript_1.storeInstallResult)(result, acc, updateInfo, modifiedPackageJson);
+        });
+    }
+    createModifiedPackageJson(originalContent, fixes) {
+        const packageJson = JSON.parse(originalContent);
+        for (const fix of fixes) {
+            if (!fix.isTransitive && fix.scope) {
+                if (packageJson[fix.scope] && packageJson[fix.scope][fix.packageName]) {
+                    packageJson[fix.scope][fix.packageName] = fix.newVersion;
+                }
+            }
+        }
+        return JSON.stringify(packageJson, null, 2);
+    }
+}
+exports.DependencyVulnerabilityCheck = DependencyVulnerabilityCheck;
+__decorate([
+    (0, rewrite_1.Option)({
+        displayName: "Scope",
+        description: "Match dependencies with the specified scope. Default includes all scopes. " +
+            "Use 'dependencies' for production dependencies, 'devDependencies' for development only, etc.",
+        required: false,
+        example: "dependencies",
+        valid: ["dependencies", "devDependencies", "peerDependencies", "optionalDependencies"]
+    })
+], DependencyVulnerabilityCheck.prototype, "scope", void 0);
+__decorate([
+    (0, rewrite_1.Option)({
+        displayName: "Override transitives",
+        description: "When enabled, transitive dependencies with vulnerabilities will have their versions overridden " +
+            "using npm overrides, yarn resolutions, or pnpm overrides. " +
+            "By default only direct dependencies have their version numbers upgraded.",
+        required: false,
+        example: "true"
+    })
+], DependencyVulnerabilityCheck.prototype, "overrideTransitive", void 0);
+__decorate([
+    (0, rewrite_1.Option)({
+        displayName: "Maximum upgrade delta",
+        description: "The maximum difference to allow when upgrading a dependency version. " +
+            "Use 'none' to only report vulnerabilities without making any changes. " +
+            "Patch version upgrades are the default and safest option. " +
+            "Minor version upgrades can introduce new features but typically no breaking changes. " +
+            "Major version upgrades may require code changes.",
+        required: false,
+        example: "patch",
+        valid: ["none", "patch", "minor", "major"]
+    })
+], DependencyVulnerabilityCheck.prototype, "maximumUpgradeDelta", void 0);
+__decorate([
+    (0, rewrite_1.Option)({
+        displayName: "Minimum severity",
+        description: "Only fix vulnerabilities with a severity level equal to or higher than the specified minimum. " +
+            "Vulnerabilities are classified as LOW, MODERATE, HIGH, or CRITICAL based on their potential impact. " +
+            "Default is LOW, which includes all severity levels.",
+        required: false,
+        example: "MODERATE",
+        valid: ["LOW", "MODERATE", "HIGH", "CRITICAL"]
+    })
+], DependencyVulnerabilityCheck.prototype, "minimumSeverity", void 0);
+__decorate([
+    (0, rewrite_1.Option)({
+        displayName: "CVE pattern",
+        description: "Only fix vulnerabilities matching this regular expression pattern. " +
+            "This allows filtering to specific CVEs or CVE ranges. " +
+            "For example, 'CVE-2023-.*' will only check for CVEs from 2023. " +
+            "If not specified, all CVEs will be checked.",
+        required: false,
+        example: "CVE-2023-.*"
+    })
+], DependencyVulnerabilityCheck.prototype, "cvePattern", void 0);
+class UpdateVersionVisitor extends json_1.JsonVisitor {
+    constructor(packageName, newVersion, targetScope) {
+        super();
+        this.inTargetScope = false;
+        this.packageName = packageName;
+        this.newVersion = newVersion;
+        this.targetScope = targetScope;
+    }
+    visitMember(member, p) {
+        const _super = Object.create(null, {
+            visitMember: { get: () => super.visitMember }
+        });
+        return __awaiter(this, void 0, void 0, function* () {
+            const keyName = (0, json_1.getMemberKeyName)(member);
+            if (keyName === this.targetScope) {
+                this.inTargetScope = true;
+                const result = yield _super.visitMember.call(this, member, p);
+                this.inTargetScope = false;
+                return result;
+            }
+            if (this.inTargetScope && keyName === this.packageName) {
+                return this.updateVersion(member);
+            }
+            return _super.visitMember.call(this, member, p);
+        });
+    }
+    updateVersion(member) {
+        const value = member.value;
+        if (!(0, json_1.isLiteral)(value)) {
+            return member;
+        }
+        const newLiteral = Object.assign(Object.assign({}, value), { source: `"${this.newVersion}"`, value: this.newVersion });
+        return Object.assign(Object.assign({}, member), { value: newLiteral });
+    }
+}
+//# sourceMappingURL=dependency-vulnerability-check.js.map

package/dist/security/dependency-vulnerability-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-vulnerability-check.js","sourceRoot":"","sources":["../../src/security/dependency-vulnerability-check.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,kDAAwI;AACxI,oDAA6G;AAC7G,kDAAkD;AAClD,oDAAkF;AAClF,oDAAgF;AAChF,gEAYyC;AACzC,+CAAiC;AACjC,2CAA6B;AAC7B,mDAA+G;AAW/G,MAAM,sBAAsB;IA+ExB,YACI,UAAkB,EAClB,GAAW,EACX,WAAmB,EACnB,OAAe,EACf,YAAoB,EACpB,mBAA2B,EAC3B,WAAoB,EACpB,OAAe,EACf,QAAgB,EAChB,KAAa,EACb,IAAY,EACZ,QAAiB,EACjB,cAAsB;QAEtB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACzC,CAAC;CACJ;AAvGG;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,iEAAiE;KACjF,CAAC;0DACkB;AAMpB;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,yCAAyC;KACzD,CAAC;mDACW;AAMb;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,oCAAoC;KACpD,CAAC;2DACmB;AAMrB;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,qCAAqC;KACrD,CAAC;uDACe;AAMjB;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,0CAA0C;KAC1D,CAAC;4DACoB;AAMtB;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,eAAe;QAC5B,WAAW,EAAE,gDAAgD;KAChE,CAAC;mEAC2B;AAM7B;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,wFAAwF;KACxG,CAAC;2DACoB;AAMtB;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,wCAAwC;KACxD,CAAC;uDACe;AAMjB;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,qCAAqC;KACrD,CAAC;wDACgB;AAMlB;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,4DAA4D;KAC5E,CAAC;qDACa;AAMf;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,oDAAoD;KACpE,CAAC;oDACY;AAMd;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,qCAAqC;KACrD,CAAC;wDACiB;AAMnB;IAJC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,uHAAuH;KACvI,CAAC;8DACsB;AAmH5B,MAAa,4BAA6B,SAAQ,wBAA2B;IAA7E;;QACa,SAAI,GAAG,qDAAqD,CAAC;QAC7D,gBAAW,GAAG,0CAA0C,CAAC;QACzD,gBAAW,GAAG,gGAAgG;YACnH,gGAAgG;YAChG,+GAA+G;YAC/G,qIAAqI;YACrI,6EAA6E,CAAC;QAEjE,wBAAmB,GAAG,IAAI,mBAAS,CAChD,kDAAkD,EAClD,sBAAsB,EACtB,0DAA0D,EAC1D,sBAAsB,CACzB,CAAC;IAwnBN,CAAC;IA/jBG,YAAY,CAAC,IAAsB;QAC/B,uCAEO,IAAA,8CAAiC,GAAqB,KAEzD,EAAE,EAAE,qCAAqB,CAAC,IAAI,EAAE,EAChC,mBAAmB,EAAE,IAAI,GAAG,EAAE,EAC9B,cAAc,EAAE,IAAI,GAAG,EAAE,IAC3B;IACN,CAAC;IAEO,kBAAkB;QACtB,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAA,6BAAa,EAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,wBAAQ,CAAC,GAAG,CAAC;IACrF,CAAC;IAEO,sBAAsB;QAC1B,OAAO,IAAI,CAAC,mBAAmB,IAAI,OAAO,CAAC;IAC/C,CAAC;IAEO,YAAY;QAChB,OAAO,IAAI,CAAC,sBAAsB,EAAE,KAAK,MAAM,CAAC;IACpD,CAAC;IAKO,iBAAiB,CAAC,aAA4B;QAClD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC;QAAC,WAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAKO,iBAAiB,CAAC,OAAe,EAAE,aAA4B;QACnE,IAAI,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAGrB,IAAI,aAAa,CAAC,iBAAiB,IAAI,aAAa,CAAC,iBAAiB,KAAK,GAAG,EAAE,CAAC;gBAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;gBACjE,IAAI,UAAU,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;oBACzC,OAAO,KAAK,CAAC;gBACjB,CAAC;YACL,CAAC;YAGD,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;gBACvD,IAAI,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;oBAChC,OAAO,KAAK,CAAC;gBACjB,CAAC;gBACD,OAAO,IAAI,CAAC;YAChB,CAAC;YAGD,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAC;gBACpC,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;gBACrE,IAAI,YAAY,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;oBAC7C,OAAO,KAAK,CAAC;gBACjB,CAAC;gBACD,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,WAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAKO,wBAAwB,CAAC,cAAsB,EAAE,aAA4B;QACjF,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAE3B,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAG5C,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;gBACvD,IAAI,CAAC,KAAK;oBAAE,OAAO,KAAK,CAAC;gBAEzB,QAAQ,KAAK,EAAE,CAAC;oBACZ,KAAK,OAAO;wBACR,OAAO,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;oBAC1E,KAAK,OAAO;wBACR,OAAO,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;oBACzC,KAAK,OAAO;wBACR,OAAO,IAAI,CAAC;oBAChB,KAAK,MAAM;wBACP,OAAO,KAAK,CAAC;gBACrB,CAAC;YACL,CAAC;YAID,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAC;gBACpC,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;gBACrE,IAAI,CAAC,YAAY;oBAAE,OAAO,KAAK,CAAC;gBAEhC,QAAQ,KAAK,EAAE,CAAC;oBACZ,KAAK,OAAO;wBACR,OAAO,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK;4BACpC,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK,CAAC;oBAChD,KAAK,OAAO;wBACR,OAAO,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK,CAAC;oBAChD,KAAK,OAAO;wBACR,OAAO,IAAI,CAAC;oBAChB,KAAK,MAAM;wBACP,OAAO,KAAK,CAAC;gBACrB,CAAC;YACL,CAAC;YAED,OAAO,KAAK,CAAC;QACjB,CAAC;QAAC,WAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAKO,iBAAiB,CAAC,aAA4B;QAClD,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC;YAC7B,OAAO,aAAa,CAAC,YAAY,CAAC;QACtC,CAAC;QAID,OAAO,SAAS,CAAC;IACrB,CAAC;IAMO,UAAU,CAAC,KAAkC,EAAE,IAAmB;QACtE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,KAAK,EAAE,CAAC;YACR,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAKO,mBAAmB,CACvB,QAA4B,EAC5B,EAAyB,EACzB,KAAa,EACb,QAAiB,EACjB,KAAkC,EAClC,IAAmB,EACnB,OAAoB,EACpB,OAA+B;QAE/B,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAGjB,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAGlF,MAAM,KAAK,GAAG,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAEvB,IAAI,IAAA,+BAAe,EAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAA,+BAAe,EAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,EAAE,CAAC;gBAC9E,SAAS;YACb,CAAC;YAGD,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,SAAS;YACb,CAAC;YAGD,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC;oBACT,QAAQ;oBACR,aAAa,EAAE,IAAI;oBACnB,KAAK;oBACL,QAAQ;oBACR,KAAK;oBACL,IAAI,EAAE,WAAW;iBACpB,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAGD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAG;gBAChB,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC;gBAChC,GAAG,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;gBACnC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC;gBACpC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,IAAI,EAAE,CAAC;aAC3C,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC5B,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACf,IAAI,CAAC,mBAAmB,CACpB,GAAG,CAAC,QAAQ,EACZ,EAAE,EACF,KAAK,GAAG,CAAC,EACT,KAAK,EACL,KAAK,EACL,WAAW,EACX,OAAO,EACP,OAAO,CACV,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAMO,YAAY,CAAC,eAAuC;QACxD,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,CAAC;QACd,CAAC;QAGD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,KAAK,GAAuB,EAAE,CAAC;QAErC,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;YAE3C,IAAI,iBAAqC,CAAC;YAC1C,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,IAAI,YAAY,GAAG,IAAI,CAAC;YACxB,IAAI,KAAkC,CAAC;YAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAEvB,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC5E,SAAS;gBACb,CAAC;gBAED,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC9D,IAAI,UAAU,EAAE,CAAC;oBACb,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,CAAC;wBACjE,iBAAiB,GAAG,UAAU,CAAC;oBACnC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBAElC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAChB,YAAY,GAAG,KAAK,CAAC;oBACrB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;gBACvB,CAAC;YACL,CAAC;YAED,IAAI,iBAAiB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,KAAK,CAAC,IAAI,CAAC;oBACP,WAAW;oBACX,UAAU,EAAE,iBAAiB;oBAC7B,YAAY;oBACZ,IAAI;oBACJ,KAAK;iBACR,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAEK,OAAO,CAAC,GAAgB;;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC;YAEpB,OAAO,IAAI,KAAM,SAAQ,kBAA6B;gBAClC,aAAa,CAAC,GAAkB,EAAE,IAAsB;;;wBAEpE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;4BAC3C,OAAO,GAAG,CAAC;wBACf,CAAC;wBAED,MAAM,MAAM,GAAG,IAAA,qCAAwB,EAAC,GAAG,CAAC,CAAC;wBAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;4BACV,OAAO,GAAG,CAAC;wBACf,CAAC;wBAED,MAAM,eAAe,GAA2B,EAAE,CAAC;wBACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;wBAGlC,MAAM,aAAa,GAAsB,MAAM,CAAC,KAAK;4BACjD,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;4BAChB,CAAC,CAAC,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;wBAEtF,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;4BAChC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;4BACjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gCACrB,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oCACf,MAAM,CAAC,mBAAmB,CACtB,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,EAAE,EACN,CAAC,EACD,IAAI,EACJ,KAAK,EACL,EAAE,EACF,OAAO,EACP,eAAe,CAClB,CAAC;gCACN,CAAC;4BACL,CAAC;wBACL,CAAC;wBAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC7B,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;4BAG7D,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;4BACnD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCACnB,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gCAG9C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;gCAC9D,MAAM,EAAE,GAAG,MAAA,MAAM,CAAC,cAAc,wCAAsB,CAAC;gCAEvD,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE;oCACrC,UAAU;oCACV,eAAe,EAAE,GAAG,CAAC,UAAU;oCAC/B,mBAAmB,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;oCAClD,cAAc,EAAE,EAAE;iCACrB,CAAC,CAAC;4BACP,CAAC;wBACL,CAAC;wBAED,OAAO,GAAG,CAAC;oBACf,CAAC;iBAAA;gBAEa,aAAa,CAAC,GAAkB;;wBAC1C,OAAO,sBAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACnC,CAAC;iBAAA;aACJ,CAAC;QACN,CAAC;KAAA;IAKK,aAAa;;YAGf,OAAO,EAAE,CAAC;QACd,CAAC;KAAA;IAEK,cAAc,CAAC,GAAgB;;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC;YAGpB,MAAM,eAAe,GAAG,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;YAGxD,OAAO,IAAI,KAAM,SAAQ,qBAAmC;gBACxC,MAAM,CAAC,IAAU,EAAE,GAAqB;;wBAEpD,IAAI,IAAA,aAAM,EAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;4BACnD,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAqB,EAAE,GAAG,CAAC,CAAC;wBAC/D,CAAC;wBAGD,IAAI,IAAA,aAAM,EAAC,IAAI,CAAC,IAAI,IAAA,kBAAW,EAAC,IAAI,CAAC,EAAE,CAAC;4BACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;4BAChD,IAAI,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gCACrC,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;4BAC9C,CAAC;wBACL,CAAC;wBAGD,IAAI,IAAA,kBAAW,EAAC,IAAI,CAAC,EAAE,CAAC;4BACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;4BAChD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;gCAC3B,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAiB,EAAE,GAAG,CAAC,CAAC;4BAChE,CAAC;wBACL,CAAC;wBAED,OAAO,IAAI,CAAC;oBAChB,CAAC;iBAAA;gBAEa,kBAAkB,CAAC,GAAkB,EAAE,GAAqB;;wBACtE,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;wBAGlC,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;4BACtC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;wBAC5C,CAAC;wBAGD,MAAM,kBAAkB,GAAG,IAAA,sCAAyB,EAAC,UAAU,EAAE,GAAG,CAAC,CAAC;wBACtE,IAAI,kBAAkB,EAAE,CAAC;4BACrB,OAAO,MAAM,IAAI,iBAAU,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;gCACrC,IAAI,EAAE,kBAAkB;gCACxB,UAAU,EAAE,GAAG,CAAC,UAAU;6BAC7B,CAAkB,CAAC;wBACxB,CAAC;wBAED,OAAO,GAAG,CAAC;oBACf,CAAC;iBAAA;gBAEa,kBAAkB,CAAC,IAAoB,EAAE,IAAsB;;wBACzE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;wBAGnC,MAAM,kBAAkB,GAAG,IAAA,sCAAyB,EAAC,UAAU,EAAE,GAAG,CAAC,CAAC;wBACtE,IAAI,kBAAkB,EAAE,CAAC;4BACrB,OAAO,MAAM,IAAI,iBAAU,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;gCACrC,IAAI,EAAE,kBAAkB;gCACxB,UAAU,EAAE,IAAI,CAAC,UAAU;6BAC9B,CAAmB,CAAC;wBACzB,CAAC;wBAED,OAAO,IAAI,CAAC;oBAChB,CAAC;iBAAA;gBAEa,uBAAuB,CAAC,IAAe,EAAE,IAAsB;;wBACzE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;wBAGnC,MAAM,kBAAkB,GAAG,IAAA,sCAAyB,EAAC,UAAU,EAAE,GAAG,CAAC,CAAC;wBACtE,IAAI,kBAAkB,EAAE,CAAC;4BAErB,MAAM,MAAM,GAAG,MAAM,IAAI,sBAAe,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;gCAClD,IAAI,EAAE,kBAAkB;gCACxB,UAAU,EAAE,IAAI,CAAC,UAAU;6BAC9B,CAAC,CAAC;4BACH,OAAO,MAAmB,CAAC;wBAC/B,CAAC;wBAED,OAAO,IAAI,CAAC;oBAChB,CAAC;iBAAA;gBAEa,iBAAiB,CAAC,GAAkB,EAAE,GAAqB;;wBACrE,MAAM,eAAe,GAAG,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBACpE,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BACnD,OAAO,GAAG,CAAC;wBACf,CAAC;wBAGD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;4BACjC,MAAM,WAAW,GAAG,MAAM,CAAC,wBAAwB,CAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO,EACrB,IAAI,CAAC,aAAa,CACrB,CAAC;4BAEF,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,sBAAsB,CAChE,GAAG,CAAC,UAAU,EACd,IAAI,CAAC,aAAa,CAAC,GAAG,EACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAClB,IAAI,CAAC,QAAQ,CAAC,OAAO,EACrB,IAAI,CAAC,aAAa,CAAC,YAAY,IAAI,EAAE,EACrC,IAAI,CAAC,aAAa,CAAC,mBAAmB,IAAI,EAAE,EAC5C,WAAW,EACX,IAAI,CAAC,aAAa,CAAC,OAAO,EAC1B,IAAI,CAAC,aAAa,CAAC,QAAQ,EAC3B,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,aAAa,CAAC,IAAI,EACvB,IAAI,CAAC,QAAQ,EACb,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAC3C,CAAC,CAAC;wBACP,CAAC;wBAGD,IAAI,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;4BACxB,OAAO,GAAG,CAAC;wBACf,CAAC;wBAED,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBACrD,MAAM,UAAU,GAAG,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBAC5D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;4BAC9C,OAAO,GAAG,CAAC;wBACf,CAAC;wBAGD,MAAM,cAAc,GAAG,MAAM,IAAA,+BAAkB,EAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CACtE,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAC1D,CAAC;wBACF,IAAI,cAAc,EAAE,CAAC;4BACjB,OAAO,IAAA,oBAAU,EACb,GAAG,EACH,oCAAoC,GAAG,CAAC,UAAU,EAAE,EACpD,cAAc,CACjB,CAAC;wBACN,CAAC;wBAGD,IAAI,MAAM,GAAkB,GAAG,CAAC;wBAChC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;4BACtB,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gCACjC,MAAM,OAAO,GAAG,IAAI,oBAAoB,CACpC,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,KAAK,CACZ,CAAC;gCACF,MAAM,IAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAkB,CAAA,CAAC;4BACrE,CAAC;wBACL,CAAC;wBAGD,OAAO,IAAA,uCAA0B,EAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;oBAC/D,CAAC;iBAAA;aACJ,CAAC;QACN,CAAC;KAAA;IAMa,wBAAwB,CAClC,GAAgB,EAChB,UAA6B,EAC7B,KAAyB;;YAGzB,MAAM,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,CACtD,UAAU,CAAC,mBAAmB,EAC9B,KAAK,CACR,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAA,gCAAmB,EACpC,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,cAAc,EACzB,mBAAmB,CACtB,CAAC;YAEF,IAAA,+BAAkB,EAAC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;QACrE,CAAC;KAAA;IAKO,yBAAyB,CAC7B,eAAuB,EACvB,KAAyB;QAEzB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAEhD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACjC,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;oBACpE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC;gBAC7D,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,CAAC;CACJ;AAtoBD,oEAsoBC;AA9mBG;IARC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,4EAA4E;YACrF,8FAA8F;QAClG,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,sBAAsB,CAAC;KACzF,CAAC;2DACsB;AAUxB;IARC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE,iGAAiG;YAC1G,4DAA4D;YAC5D,0EAA0E;QAC9E,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,MAAM;KAClB,CAAC;wEAC2B;AAa7B;IAXC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,uBAAuB;QACpC,WAAW,EAAE,uEAAuE;YAChF,wEAAwE;YACxE,4DAA4D;YAC5D,uFAAuF;YACvF,kDAAkD;QACtD,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;KAC7C,CAAC;yEACiC;AAWnC;IATC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,kBAAkB;QAC/B,WAAW,EAAE,gGAAgG;YACzG,sGAAsG;YACtG,qDAAqD;QACzD,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC;KACjD,CAAC;qEACuB;AAWzB;IATC,IAAA,gBAAM,EAAC;QACJ,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,qEAAqE;YAC9E,wDAAwD;YACxD,iEAAiE;YACjE,6CAA6C;QACjD,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,aAAa;KACzB,CAAC;gEACkB;AAskBxB,MAAM,oBAAqB,SAAQ,kBAAiB;IAMhD,YAAY,WAAmB,EAAE,UAAkB,EAAE,WAA4B;QAC7E,KAAK,EAAE,CAAC;QAHJ,kBAAa,GAAG,KAAK,CAAC;QAI1B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACnC,CAAC;IAEe,WAAW,CAAC,MAAmB,EAAE,CAAO;;;;;YAEpD,MAAM,OAAO,GAAG,IAAA,uBAAgB,EAAC,MAAM,CAAC,CAAC;YAEzC,IAAI,OAAO,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBAE/B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,MAAM,MAAM,GAAG,MAAM,OAAM,WAAW,YAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAClD,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;gBAC3B,OAAO,MAAM,CAAC;YAClB,CAAC;YAGD,IAAI,IAAI,CAAC,aAAa,IAAI,OAAO,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBAErD,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;YAED,OAAO,OAAM,WAAW,YAAC,MAAM,EAAE,CAAC,EAAE;QACxC,CAAC;KAAA;IAEO,aAAa,CAAC,MAAmB;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAE3B,IAAI,CAAC,IAAA,gBAAS,EAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC;QAClB,CAAC;QAGD,MAAM,UAAU,mCACT,KAAK,KACR,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU,GAAG,EAC9B,KAAK,EAAE,IAAI,CAAC,UAAU,GACzB,CAAC;QAEF,uCACO,MAAM,KACT,KAAK,EAAE,UAAU,IACnB;IACN,CAAC;CACJ"}