@owasp-aghast/aghast 0.8.0-beta.0 → 0.8.0-beta.1

package/dist/index.js

@@ -65,58 +65,58 @@ async function createMockProvider() {
     await provider.initialize({});
     return provider;
 }
-const SCAN_HELP = `Usage: aghast scan <repo-path> --config-dir <path> [options]
-
-Run security checks against a repository.
-
-Arguments:
-  <repo-path>                Path to the repository to scan
-
-General options:
-  --config-dir <path>        Config directory containing checks-config.json,
-                             checks/ folder, and optionally runtime-config.json.
-                             Required unless AGHAST_CONFIG_DIR is set.
-  --output <path>            Output file path for results
-                             (default: <repo-path>/security_checks_results.<ext>)
-  --output-format json|sarif Output format (default: json)
-  --fail-on-check-failure    Exit with code 1 if any check FAILs or ERRORs
-  --debug                    Shorthand for --log-level debug
-  --log-level <level>        Console log level: error, warn, info, debug, trace
-                             (default: info)
-  --log-file <path>          Write all log output to a file (always at trace level
-                             unless overridden by --log-type)
-  --log-type <type>          Log file handler type (default: file).
-                             Available types: file
-  --model <model>            AI model override (e.g. claude-sonnet-4-20250514)
-  --agent-provider <name>    Agent provider name (default: claude-code)
-  --generic-prompt <file>    Generic prompt template filename in prompts/ dir
-  --diff-ref <ref>           Git ref to diff against (e.g. HEAD~1, main, SHA).
-                             Auto-activates diff filtering on every check whose
-                             discovery supports it, unless the check opts out
-                             via checkTarget.diffFilter: false.
-  --diff-file <path>         Path to pre-generated unified diff file
-                             (alternative to --diff-ref)
-  --budget-limit-cost <usd>  Abort the scan when accumulated cost exceeds this
-                             USD value. Warns at 80%, aborts at 100%
-  --budget-limit-tokens <n>  Abort the scan when accumulated tokens exceed n.
-                             Warns at 80%, aborts at 100%
-
-Environment variables:
-  ANTHROPIC_API_KEY           API key for Claude (required for AI-based checks)
-  AGHAST_CONFIG_DIR           Default config directory (CLI --config-dir takes precedence)
-  AGHAST_AI_MODEL             AI model override (CLI --model takes precedence)
-  AGHAST_GENERIC_PROMPT       Generic prompt template filename (CLI --generic-prompt takes precedence)
-  AGHAST_DEBUG                Set to "true" to enable debug output (same as --debug)
-  AGHAST_LOG_LEVEL            Console log level (CLI --log-level takes precedence)
-  AGHAST_LOG_FILE             Log file path (CLI --log-file takes precedence)
-  AGHAST_LOG_TYPE             Log file handler type (CLI --log-type takes precedence)
-  AGHAST_DIFF_REF             Git ref to diff against (CLI --diff-ref takes precedence)
-
-Examples:
-  aghast scan ./my-repo --config-dir ./my-checks
-  aghast scan ./my-repo --config-dir ./my-checks --output results.sarif --output-format sarif
-  aghast scan ./my-repo --config-dir ./my-checks --fail-on-check-failure --debug
-  aghast scan ./my-repo --config-dir ./my-checks --log-file scan.log --log-level warn
+const SCAN_HELP = `Usage: aghast scan <repo-path> --config-dir <path> [options]
+
+Run security checks against a repository.
+
+Arguments:
+  <repo-path>                Path to the repository to scan
+
+General options:
+  --config-dir <path>        Config directory containing checks-config.json,
+                             checks/ folder, and optionally runtime-config.json.
+                             Required unless AGHAST_CONFIG_DIR is set.
+  --output <path>            Output file path for results
+                             (default: <repo-path>/security_checks_results.<ext>)
+  --output-format json|sarif Output format (default: json)
+  --fail-on-check-failure    Exit with code 1 if any check FAILs or ERRORs
+  --debug                    Shorthand for --log-level debug
+  --log-level <level>        Console log level: error, warn, info, debug, trace
+                             (default: info)
+  --log-file <path>          Write all log output to a file (always at trace level
+                             unless overridden by --log-type)
+  --log-type <type>          Log file handler type (default: file).
+                             Available types: file
+  --model <model>            AI model override (e.g. claude-sonnet-4-20250514)
+  --agent-provider <name>    Agent provider name (default: claude-code)
+  --generic-prompt <file>    Generic prompt template filename in prompts/ dir
+  --diff-ref <ref>           Git ref to diff against (e.g. HEAD~1, main, SHA).
+                             Auto-activates diff filtering on every check whose
+                             discovery supports it, unless the check opts out
+                             via checkTarget.diffFilter: false.
+  --diff-file <path>         Path to pre-generated unified diff file
+                             (alternative to --diff-ref)
+  --budget-limit-cost <usd>  Abort the scan when accumulated cost exceeds this
+                             USD value. Warns at 80%, aborts at 100%
+  --budget-limit-tokens <n>  Abort the scan when accumulated tokens exceed n.
+                             Warns at 80%, aborts at 100%
+
+Environment variables:
+  ANTHROPIC_API_KEY           API key for Claude (required for AI-based checks)
+  AGHAST_CONFIG_DIR           Default config directory (CLI --config-dir takes precedence)
+  AGHAST_AI_MODEL             AI model override (CLI --model takes precedence)
+  AGHAST_GENERIC_PROMPT       Generic prompt template filename (CLI --generic-prompt takes precedence)
+  AGHAST_DEBUG                Set to "true" to enable debug output (same as --debug)
+  AGHAST_LOG_LEVEL            Console log level (CLI --log-level takes precedence)
+  AGHAST_LOG_FILE             Log file path (CLI --log-file takes precedence)
+  AGHAST_LOG_TYPE             Log file handler type (CLI --log-type takes precedence)
+  AGHAST_DIFF_REF             Git ref to diff against (CLI --diff-ref takes precedence)
+
+Examples:
+  aghast scan ./my-repo --config-dir ./my-checks
+  aghast scan ./my-repo --config-dir ./my-checks --output results.sarif --output-format sarif
+  aghast scan ./my-repo --config-dir ./my-checks --fail-on-check-failure --debug
+  aghast scan ./my-repo --config-dir ./my-checks --log-file scan.log --log-level warn
   aghast scan ./my-repo --config-dir ./my-checks --model claude-sonnet-4-20250514`;
 function parseArgs(args) {
     if (args.length < 1 || args[0] === '--help' || args[0] === '-h') {

package/dist/new-check.js

@@ -267,25 +267,25 @@ async function checkFileExists(path) {
 function generateSemgrepRule(checkId, language) {
     const langInfo = SUPPORTED_LANGUAGES[language];
     const semgrepLang = langInfo ? langInfo.semgrepId : 'javascript';
-    return `rules:
-  - id: ${checkId}
-    pattern: |
-      # TODO: Replace with your Semgrep pattern
-      ...
-    message: >
-      TODO: Describe the issue this rule detects.
-    languages: [${semgrepLang}]
-    severity: WARNING
+    return `rules:
+  - id: ${checkId}
+    pattern: |
+      # TODO: Replace with your Semgrep pattern
+      ...
+    message: >
+      TODO: Describe the issue this rule detects.
+    languages: [${semgrepLang}]
+    severity: WARNING
 `;
 }
 function generateSemgrepTestFile(checkId, language) {
     const langInfo = SUPPORTED_LANGUAGES[language];
     const comment = langInfo ? langInfo.commentPrefix : '#';
-    return `${comment} ruleid: ${checkId}
-${comment} TODO: Add code that SHOULD be matched by the rule
-
-${comment} ok: ${checkId}
-${comment} TODO: Add code that should NOT be matched by the rule
+    return `${comment} ruleid: ${checkId}
+${comment} TODO: Add code that SHOULD be matched by the rule
+
+${comment} ok: ${checkId}
+${comment} TODO: Add code that should NOT be matched by the rule
 `;
 }
 // --- File Generation ---
@@ -299,16 +299,16 @@ function generateMarkdown(inputs) {
     if (inputs.flagCondition) {
         resultLines += `\n- **FLAG**: ${inputs.flagCondition}`;
     }
-    return `### ${inputs.name}
-
-#### Overview
-${inputs.checkOverview}
-
-#### What to Check
-${itemLines}
-
-#### Result
-${resultLines}
+    return `### ${inputs.name}
+
+#### Overview
+${inputs.checkOverview}
+
+#### What to Check
+${itemLines}
+
+#### Result
+${resultLines}
 `;
 }
 function generateCheckDefinition(inputs) {
@@ -369,58 +369,58 @@ function generateRegistryEntry(inputs) {
     };
 }
 // --- Main ---
-const NEW_CHECK_HELP = `Usage: aghast new-check --config-dir <path> [options]
-
-Scaffold a new security check. Runs interactively by default, prompting for any
-values not provided via flags. If the config directory does not exist, it will be
-created with an empty checks-config.json.
-
-Options:
-  --config-dir <path>        Config directory containing checks-config.json and
-                             checks/ folder. Created if it does not exist.
-                             Required unless AGHAST_CONFIG_DIR is set.
-  --id <id>                  Check ID (will be prefixed with "aghast-" if needed)
-  --name <name>              Human-readable check name (e.g. "XSS Prevention")
-  --severity <level>         Severity: critical, high, medium, low, informational
-  --confidence <level>       Confidence: high, medium, low
-  --model <model>            AI model override for this check (e.g. claude-sonnet-4-6)
-  --repositories <urls>      Comma-separated repository URLs (empty = all repos)
-  --check-overview <text>    Description of what this check does
-  --check-items <items>      Comma-separated list of things to check
-  --pass-condition <text>    Condition for a PASS result
-  --fail-condition <text>    Condition for a FAIL result
-  --flag-condition <text>    Condition for a FLAG result (optional)
-  --check-type <type>        Check type (default: targeted). See 'Check types' below
-  --discovery <name>         Discovery mechanism for targeted/static checks. See below
-  --semgrep-rules <paths>    Comma-separated Semgrep rule file paths (for semgrep discovery)
-  --sarif-file <path>        SARIF file path in check definition, relative to repo (for sarif discovery)
-  --analysis-mode <mode>     Analysis mode for targeted checks (default: custom). See below
-  --max-targets <n>          Maximum number of targets to analyze
-  --language <lang>          Language for Semgrep template: python, javascript, typescript
-  -h, --help                 Show this help message
-
-Environment variables:
-  AGHAST_CONFIG_DIR           Default config directory (CLI --config-dir takes precedence)
-
-Check types:
-  repository  AI analyzes the whole repository
-  targeted    Discovery finds specific targets, AI analyzes each one
-  static      Discovery finds targets, mapped directly to issues (no AI)
-
-Discovery mechanisms:
-  semgrep     Semgrep rules find targets (targeted or static)
-  openant     OpenAnt code analysis finds units (targeted only)
-  sarif       External SARIF file provides findings (targeted only)
-
-Analysis modes (targeted checks only):
-  custom                      Use a custom instructions markdown file (default)
-  false-positive-validation   AI validates each finding as true/false positive (semgrep, sarif)
-  general-vuln-discovery      AI scans each target for general security vulnerabilities (all)
-
-Examples:
-  aghast new-check --config-dir ./my-checks
-  aghast new-check --config-dir ./my-checks --id xss --name "XSS Prevention"
-  aghast new-check --config-dir ./my-checks --check-type targeted --discovery semgrep --language typescript
+const NEW_CHECK_HELP = `Usage: aghast new-check --config-dir <path> [options]
+
+Scaffold a new security check. Runs interactively by default, prompting for any
+values not provided via flags. If the config directory does not exist, it will be
+created with an empty checks-config.json.
+
+Options:
+  --config-dir <path>        Config directory containing checks-config.json and
+                             checks/ folder. Created if it does not exist.
+                             Required unless AGHAST_CONFIG_DIR is set.
+  --id <id>                  Check ID (will be prefixed with "aghast-" if needed)
+  --name <name>              Human-readable check name (e.g. "XSS Prevention")
+  --severity <level>         Severity: critical, high, medium, low, informational
+  --confidence <level>       Confidence: high, medium, low
+  --model <model>            AI model override for this check (e.g. claude-sonnet-4-6)
+  --repositories <urls>      Comma-separated repository URLs (empty = all repos)
+  --check-overview <text>    Description of what this check does
+  --check-items <items>      Comma-separated list of things to check
+  --pass-condition <text>    Condition for a PASS result
+  --fail-condition <text>    Condition for a FAIL result
+  --flag-condition <text>    Condition for a FLAG result (optional)
+  --check-type <type>        Check type (default: targeted). See 'Check types' below
+  --discovery <name>         Discovery mechanism for targeted/static checks. See below
+  --semgrep-rules <paths>    Comma-separated Semgrep rule file paths (for semgrep discovery)
+  --sarif-file <path>        SARIF file path in check definition, relative to repo (for sarif discovery)
+  --analysis-mode <mode>     Analysis mode for targeted checks (default: custom). See below
+  --max-targets <n>          Maximum number of targets to analyze
+  --language <lang>          Language for Semgrep template: python, javascript, typescript
+  -h, --help                 Show this help message
+
+Environment variables:
+  AGHAST_CONFIG_DIR           Default config directory (CLI --config-dir takes precedence)
+
+Check types:
+  repository  AI analyzes the whole repository
+  targeted    Discovery finds specific targets, AI analyzes each one
+  static      Discovery finds targets, mapped directly to issues (no AI)
+
+Discovery mechanisms:
+  semgrep     Semgrep rules find targets (targeted or static)
+  openant     OpenAnt code analysis finds units (targeted only)
+  sarif       External SARIF file provides findings (targeted only)
+
+Analysis modes (targeted checks only):
+  custom                      Use a custom instructions markdown file (default)
+  false-positive-validation   AI validates each finding as true/false positive (semgrep, sarif)
+  general-vuln-discovery      AI scans each target for general security vulnerabilities (all)
+
+Examples:
+  aghast new-check --config-dir ./my-checks
+  aghast new-check --config-dir ./my-checks --id xss --name "XSS Prevention"
+  aghast new-check --config-dir ./my-checks --check-type targeted --discovery semgrep --language typescript
   aghast new-check --config-dir ./my-checks --check-type targeted --discovery sarif --sarif-file ./sast-results.sarif`;
 export async function runNewCheck(args) {
     if (args.includes('--help') || args.includes('-h')) {

package/dist/stats.js

@@ -10,25 +10,25 @@ import 'dotenv/config';
 import { ERROR_CODES, formatError } from './error-codes.js';
 import { queryScanHistory } from './scan-history.js';
 import { formatCostSourceLabel } from './cost-calculator.js';
-const STATS_HELP = `Usage: aghast stats [options]
-
-Print a cost summary from the scan history (~/.aghast/history.json).
-
-Options:
-  --repo <substring>     Filter to scans whose repository path or URL contains
-                         the substring. Matches loosely — "alpha" matches both
-                         "/repos/alpha" and "/repos/alpha2".
-  --model <substring>    Filter to scans that used a model containing the
-                         substring (loose match).
-  --since <iso-time>     Only include scans started at or after this timestamp
-  --until <iso-time>     Only include scans started at or before this timestamp
-  --json                 Output raw JSON instead of a formatted table
-  --history-file <path>  Override the history file path (default: ~/.aghast/history.json)
-  --help                 Show this help message
-
-Examples:
-  aghast stats
-  aghast stats --repo my-org/my-repo --since 2026-01-01
+const STATS_HELP = `Usage: aghast stats [options]
+
+Print a cost summary from the scan history (~/.aghast/history.json).
+
+Options:
+  --repo <substring>     Filter to scans whose repository path or URL contains
+                         the substring. Matches loosely — "alpha" matches both
+                         "/repos/alpha" and "/repos/alpha2".
+  --model <substring>    Filter to scans that used a model containing the
+                         substring (loose match).
+  --since <iso-time>     Only include scans started at or after this timestamp
+  --until <iso-time>     Only include scans started at or before this timestamp
+  --json                 Output raw JSON instead of a formatted table
+  --history-file <path>  Override the history file path (default: ~/.aghast/history.json)
+  --help                 Show this help message
+
+Examples:
+  aghast stats
+  aghast stats --repo my-org/my-repo --since 2026-01-01
   aghast stats --model claude-sonnet --json`;
 function parseStatsArgs(args) {
     if (args.includes('--help') || args.includes('-h')) {

package/package.json

@@ -1,61 +1,61 @@
-{
-  "name": "@owasp-aghast/aghast",
-  "version": "0.8.0-beta.0",
-  "description": "AI Guided Hybrid Application Static Testing",
-  "type": "module",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/owasp-aghast/aghast.git"
-  },
-  "bin": {
-    "aghast": "dist/cli.js"
-  },
-  "files": [
-    "dist/",
-    "config/",
-    "assets/"
-  ],
-  "scripts": {
-    "prepare": "tsc",
-    "build": "tsc",
-    "test": "node --import tsx --test tests/*.test.ts",
-    "test:coverage": "node --experimental-test-coverage --import tsx --test tests/*.test.ts",
-    "test:ci": "node --import tsx --test --test-reporter=spec --test-reporter-destination=stdout --test-reporter=junit --test-reporter-destination=test-results.xml tests/*.test.ts",
-    "test:semgrep": "node --import tsx --test tests/semgrep-integration.itest.ts",
-    "test:openant": "node --import tsx --test tests/openant-integration.itest.ts",
-    "test:opencode": "node --import tsx --test --test-force-exit tests/opencode-integration.itest.ts",
-    "lint": "eslint src/ tests/",
-    "lint:fix": "eslint --fix src/ tests/",
-    "scan": "tsx src/cli.ts scan",
-    "new-check": "tsx src/cli.ts new-check",
-    "build-config": "tsx src/cli.ts build-config"
-  },
-  "keywords": [],
-  "author": "",
-  "license": "AGPL-3.0-or-later",
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "packageManager": "npm@10.9.2",
-  "devDependencies": {
-    "@eslint/js": "^10.0.1",
-    "@types/node": "^25.5.0",
-    "@types/picomatch": "^4.0.2",
-    "eslint": "^10.0.3",
-    "fast-check": "^4.6.0",
-    "tsx": "^4.21.0",
-    "typescript": "~6.0.2",
-    "typescript-eslint": "^8.57.1"
-  },
-  "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.3.144",
-    "@opencode-ai/sdk": "^1.4.6",
-    "dotenv": "^17.3.1",
-    "picocolors": "^1.1.1",
-    "picomatch": "^4.0.4"
-  },
-  "overrides": {
-    "minimatch@<10.2.3": ">=10.2.3",
-    "@anthropic-ai/sdk@<0.91.1": ">=0.91.1"
-  }
-}
+{
+  "name": "@owasp-aghast/aghast",
+  "version": "0.8.0-beta.1",
+  "description": "AI Guided Hybrid Application Static Testing",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/owasp-aghast/aghast.git"
+  },
+  "bin": {
+    "aghast": "dist/cli.js"
+  },
+  "files": [
+    "dist/",
+    "config/",
+    "assets/"
+  ],
+  "scripts": {
+    "prepare": "tsc",
+    "build": "tsc",
+    "test": "node --import tsx --test tests/*.test.ts",
+    "test:coverage": "node --experimental-test-coverage --import tsx --test tests/*.test.ts",
+    "test:ci": "node --import tsx --test --test-reporter=spec --test-reporter-destination=stdout --test-reporter=junit --test-reporter-destination=test-results.xml tests/*.test.ts",
+    "test:semgrep": "node --import tsx --test tests/semgrep-integration.itest.ts",
+    "test:openant": "node --import tsx --test tests/openant-integration.itest.ts",
+    "test:opencode": "node --import tsx --test --test-force-exit tests/opencode-integration.itest.ts",
+    "lint": "eslint src/ tests/",
+    "lint:fix": "eslint --fix src/ tests/",
+    "scan": "tsx src/cli.ts scan",
+    "new-check": "tsx src/cli.ts new-check",
+    "build-config": "tsx src/cli.ts build-config"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "AGPL-3.0-or-later",
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "packageManager": "npm@10.9.2",
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^25.5.0",
+    "@types/picomatch": "^4.0.2",
+    "eslint": "^10.0.3",
+    "fast-check": "^4.6.0",
+    "tsx": "^4.21.0",
+    "typescript": "~6.0.2",
+    "typescript-eslint": "^8.57.1"
+  },
+  "dependencies": {
+    "@anthropic-ai/claude-agent-sdk": "^0.3.144",
+    "@opencode-ai/sdk": "^1.4.6",
+    "dotenv": "^17.3.1",
+    "picocolors": "^1.1.1",
+    "picomatch": "^4.0.4"
+  },
+  "overrides": {
+    "minimatch@<10.2.3": ">=10.2.3",
+    "@anthropic-ai/sdk@<0.91.1": ">=0.91.1"
+  }
+}

package/dist/mock-ai-provider.d.ts

@@ -1,21 +0,0 @@
-/**
- * Lightweight mock AI provider for CLI `AGHAST_MOCK_AI` mode.
- *
- * Returns a fixed raw response without calling any AI API.
- * This is shipped with the package (unlike the full test mock in tests/mocks/).
- */
-import type { AIProvider, AIResponse, ProviderConfig } from './types.js';
-export declare class MockAIProvider implements AIProvider {
-    private rawResponse;
-    constructor(options: {
-        rawResponse: string;
-    });
-    initialize(_config: ProviderConfig): Promise<void>;
-    executeCheck(_instructions: string, _repositoryPath: string, _logPrefix?: string, _options?: {
-        maxTurns?: number;
-    }): Promise<AIResponse>;
-    validateConfig(): Promise<boolean>;
-    setModel(_model: string): void;
-    enableDebug(): void;
-}
-//# sourceMappingURL=mock-ai-provider.d.ts.map

package/dist/mock-ai-provider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mock-ai-provider.d.ts","sourceRoot":"","sources":["../src/mock-ai-provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEzE,qBAAa,cAAe,YAAW,UAAU;IAC/C,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE;IAItC,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD,YAAY,CAChB,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,MAAM,EACvB,UAAU,CAAC,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/B,OAAO,CAAC,UAAU,CAAC;IAOhB,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC;IAIxC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI9B,WAAW,IAAI,IAAI;CAGpB"}

package/dist/mock-ai-provider.js

@@ -1,31 +0,0 @@
-/**
- * Lightweight mock AI provider for CLI `AGHAST_MOCK_AI` mode.
- *
- * Returns a fixed raw response without calling any AI API.
- * This is shipped with the package (unlike the full test mock in tests/mocks/).
- */
-export class MockAIProvider {
-    rawResponse;
-    constructor(options) {
-        this.rawResponse = options.rawResponse;
-    }
-    async initialize(_config) {
-        // No-op
-    }
-    async executeCheck(_instructions, _repositoryPath, _logPrefix, _options) {
-        return {
-            raw: this.rawResponse,
-            parsed: undefined,
-        };
-    }
-    async validateConfig() {
-        return true;
-    }
-    setModel(_model) {
-        // No-op for mock provider
-    }
-    enableDebug() {
-        // No-op
-    }
-}
-//# sourceMappingURL=mock-ai-provider.js.map

package/dist/mock-ai-provider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mock-ai-provider.js","sourceRoot":"","sources":["../src/mock-ai-provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,OAAO,cAAc;IACjB,WAAW,CAAS;IAE5B,YAAY,OAAgC;QAC1C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAuB;QACtC,QAAQ;IACV,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,aAAqB,EACrB,eAAuB,EACvB,UAAmB,EACnB,QAAgC;QAEhC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,MAAc;QACrB,0BAA0B;IAC5B,CAAC;IAED,WAAW;QACT,QAAQ;IACV,CAAC;CACF"}