@reneturcios/tracewatch 0.0.0-stage → 0.1.0

package/dist/watch.js

@@ -0,0 +1,401 @@
+/**
+ * Watch mode: poll a target and scan new content on arrival, recording
+ * time-to-detect for every detection.
+ *
+ * Local mode watches a directory: new or changed text files are scanned
+ * with injectcheck the poll they appear in, and a git HEAD move triggers
+ * a full ingest plus diff, with alerts for new/changed findings and ref
+ * events. GitHub mode watches an owner/repo slug through the ghapi
+ * helper: new issues and PRs are scanned on arrival, and a HEAD move is
+ * recorded (and scanned too, when a local clone path is supplied).
+ *
+ * State checkpoints to watch-state.json after every cycle, so a restart
+ * resumes from the last poll instead of re-alerting history. Polling is
+ * conservative (default 60 s, two API calls per GitHub cycle) and every
+ * detection records TTD = detected-at minus the content's own creation
+ * timestamp. Nothing here guesses: an API answer that cannot be parsed
+ * is logged as a watch note and retried next cycle, never faked.
+ */
+import { createHash } from "node:crypto";
+import { appendFileSync, existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { basename, extname, join, relative, resolve } from "node:path";
+import { tmpdir } from "node:os";
+import { diffScans } from "./diff.js";
+import { commitTime, headSha } from "./git.js";
+import { GHAPI, } from "./blame.js";
+import { ingestPath, recordScan, runCapture, runInjectcheckFile, toolVersion } from "./ingest.js";
+import { makeFindingId, makeIdentity } from "./util.js";
+const SKIP_DIRS = new Set([".git", "node_modules", "dist", ".tracewatch", "coverage", ".next", "target"]);
+const TEXT_EXTS = new Set([".md", ".markdown", ".txt", ".rst", ".mdx", ".adoc"]);
+export function snapshotTree(root) {
+    const out = {};
+    const walk = (dir) => {
+        let entries;
+        try {
+            entries = readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            const full = join(dir, e.name);
+            if (e.isDirectory()) {
+                if (!SKIP_DIRS.has(e.name))
+                    walk(full);
+            }
+            else if (e.isFile()) {
+                try {
+                    const st = statSync(full);
+                    const mark = { mtimeMs: st.mtimeMs, size: st.size, birthtimeMs: st.birthtimeMs };
+                    if (st.size <= 2 * 1024 * 1024) {
+                        mark.hash = createHash("sha1").update(readFileSync(full)).digest("hex");
+                    }
+                    out[relative(root, full).split("\\").join("/")] = mark;
+                }
+                catch {
+                    // Vanished mid-walk: next poll sees the settled state.
+                }
+            }
+        }
+    };
+    walk(root);
+    return out;
+}
+export const defaultDeps = {
+    scanFile: (p) => runInjectcheckFile(p),
+    ingest: (store, path, opts) => ingestPath(store, path, { name: opts.name, source: "watch" }),
+    ghGet: async (path) => {
+        if (!existsSync(GHAPI))
+            return null;
+        const res = await runCapture("python3", [GHAPI, "GET", path], 30000);
+        return res.code === 0 && res.stdout.includes("HTTP 200") ? res.stdout : null;
+    },
+    now: () => new Date(),
+};
+function loadState(store) {
+    return store.readWatchState() ?? { repos: {} };
+}
+function saveState(store, state) {
+    store.writeWatchState(state);
+}
+async function recordTextScan(ctx, repo, adapted, extra) {
+    const version = ctx.deps.version ? await ctx.deps.version("injectcheck") : await toolVersion("injectcheck");
+    const result = recordScan(ctx.store, repo, "watch", [adapted], {
+        injectcheck: { version, verdict: adapted.verdict, counts: adapted.counts, status: "ok" },
+    }, extra);
+    return { scanId: result.record.scanId, observations: result.observations };
+}
+async function diffAlerts(ctx, repo, at) {
+    const alerts = [];
+    try {
+        const diff = diffScans(ctx.store, repo);
+        for (const f of diff.added) {
+            alerts.push({ at, repo, kind: "new-finding", findingId: f.findingId, message: `NEW ${f.tool} ${f.rule} (${f.severity}) in ${f.file}: ${f.detail}` });
+        }
+        for (const c of diff.changed) {
+            alerts.push({ at, repo, kind: "changed-finding", findingId: c.after.findingId, message: `CHANGED ${c.after.tool} ${c.after.rule} in ${c.after.file}: ${c.changes.join("; ")}` });
+        }
+        for (const ev of diff.refEvents) {
+            alerts.push({
+                at,
+                repo,
+                kind: "ref-event",
+                findingId: diff.changed.find((c) => c.identity === ev.identity)?.after.findingId,
+                message: `${ev.kind.toUpperCase()} ${ev.action} in ${ev.file}: ref ${ev.oldRef} -> ${ev.newRef} (${ev.oldClassification} -> ${ev.newClassification})`,
+            });
+        }
+    }
+    catch {
+        // Fewer than two scans: nothing to diff yet.
+    }
+    return alerts;
+}
+/** One local poll cycle. Returns the alerts emitted this cycle. */
+export async function pollLocalOnce(ctx, repo, targetPath) {
+    const { store, deps } = ctx;
+    const abs = resolve(targetPath);
+    const state = loadState(store);
+    const entry = state.repos[repo] ?? { target: abs };
+    const alerts = [];
+    const now = deps.now();
+    const at = now.toISOString();
+    const snap = snapshotTree(abs);
+    const head = await headSha(abs);
+    if (!entry.snapshot) {
+        // Baseline: record state, and take a baseline scan if none exists.
+        entry.snapshot = snap;
+        entry.lastHead = head;
+        state.repos[repo] = entry;
+        saveState(store, state);
+        if (store.scans(repo).length === 0) {
+            await deps.ingest(store, abs, { name: repo, source: "watch" });
+        }
+        return alerts;
+    }
+    const prev = entry.snapshot;
+    const changedFiles = [];
+    for (const [rel, mark] of Object.entries(snap)) {
+        const before = prev[rel];
+        if (!before)
+            changedFiles.push({ rel, mark, added: true });
+        else if (before.hash !== mark.hash || (before.hash === undefined && (before.mtimeMs !== mark.mtimeMs || before.size !== mark.size))) {
+            changedFiles.push({ rel, mark, added: false });
+        }
+    }
+    for (const { rel, mark, added } of changedFiles) {
+        if (!TEXT_EXTS.has(extname(rel).toLowerCase()))
+            continue;
+        const adapted = await deps.scanFile(join(abs, rel));
+        if (!adapted || adapted.findings.length === 0)
+            continue;
+        const { scanId, observations } = await recordTextScan(ctx, repo, adapted, { path: abs });
+        const createdMs = added && mark.birthtimeMs > 0 ? mark.birthtimeMs : mark.mtimeMs;
+        const detection = {
+            at,
+            repo,
+            kind: "file",
+            sourceRef: rel,
+            createdAt: new Date(createdMs).toISOString(),
+            timeToDetectMs: Math.max(0, now.getTime() - createdMs),
+            scanId,
+            findingIds: observations.map((o) => o.findingId),
+        };
+        store.appendDetection(detection);
+        const alert = {
+            at,
+            repo,
+            kind: "detection",
+            message: `DETECTION file ${rel}: ${observations.length} injectcheck finding(s), time-to-detect ${detection.timeToDetectMs} ms`,
+            detection,
+        };
+        alerts.push(alert);
+        ctx.emit(alert);
+    }
+    if (head && entry.lastHead && head !== entry.lastHead) {
+        const result = await deps.ingest(store, abs, { name: repo, source: "watch" });
+        const createdAt = (await commitTime(abs, "HEAD")) ?? at;
+        const diffAlertsList = await diffAlerts(ctx, repo, at);
+        const detection = {
+            at,
+            repo,
+            kind: "tree",
+            sourceRef: head,
+            createdAt,
+            timeToDetectMs: Math.max(0, now.getTime() - Date.parse(createdAt)),
+            scanId: result.record.scanId,
+            findingIds: diffAlertsList.map((a) => a.findingId).filter((x) => Boolean(x)),
+        };
+        store.appendDetection(detection);
+        for (const a of diffAlertsList) {
+            alerts.push(a);
+            ctx.emit(a);
+        }
+        const detAlert = {
+            at,
+            repo,
+            kind: "detection",
+            message: `DETECTION tree ${head.slice(0, 12)}: re-scanned, ${diffAlertsList.length} change alert(s), time-to-detect ${detection.timeToDetectMs} ms`,
+            detection,
+        };
+        alerts.push(detAlert);
+        ctx.emit(detAlert);
+    }
+    entry.snapshot = snap;
+    entry.lastHead = head;
+    state.repos[repo] = entry;
+    saveState(store, state);
+    return alerts;
+}
+/** One GitHub poll cycle (issues/PRs + HEAD). Returns alerts emitted. */
+export async function pollGithubOnce(ctx, slug, opts = {}) {
+    const { store, deps } = ctx;
+    const alerts = [];
+    const now = deps.now();
+    const at = now.toISOString();
+    const state = loadState(store);
+    const entry = state.repos[slug] ?? { target: slug, issuesSeen: {} };
+    entry.issuesSeen ??= {};
+    const firstContact = Object.keys(entry.issuesSeen).length === 0 && !entry.lastHead;
+    // HEAD move.
+    const commitsOut = await deps.ghGet(`/repos/${slug}/commits?per_page=1`);
+    const headShaRemote = commitsOut?.match(/"sha":\s*"([0-9a-f]{40})"/)?.[1] ?? null;
+    const headDate = commitsOut?.match(/"date":\s*"([^"]+)"/)?.[1] ?? null;
+    if (headShaRemote && entry.lastHead && headShaRemote !== entry.lastHead) {
+        const detection = {
+            at,
+            repo: slug,
+            kind: "tree",
+            sourceRef: headShaRemote,
+            createdAt: headDate ?? at,
+            timeToDetectMs: Math.max(0, now.getTime() - Date.parse(headDate ?? at)),
+            findingIds: [],
+        };
+        if (opts.path) {
+            const result = await deps.ingest(store, opts.path, { name: slug, source: "watch" });
+            detection.scanId = result.record.scanId;
+            const list = await diffAlerts(ctx, slug, at);
+            detection.findingIds = list.map((a) => a.findingId).filter((x) => Boolean(x));
+            for (const a of list) {
+                alerts.push(a);
+                ctx.emit(a);
+            }
+        }
+        store.appendDetection(detection);
+        const alert = {
+            at,
+            repo: slug,
+            kind: "detection",
+            message: `DETECTION tree ${headShaRemote.slice(0, 12)} on ${slug}: time-to-detect ${detection.timeToDetectMs} ms${opts.path ? "" : " (no local clone supplied, tree recorded but not scanned)"}`,
+            detection,
+        };
+        alerts.push(alert);
+        ctx.emit(alert);
+    }
+    if (headShaRemote)
+        entry.lastHead = headShaRemote;
+    // Issues and PRs.
+    const issuesOut = await deps.ghGet(`/repos/${slug}/issues?state=all&per_page=10&sort=created&direction=desc`);
+    let issues = null;
+    if (issuesOut) {
+        const body = issuesOut.slice(issuesOut.indexOf("\n") + 1);
+        try {
+            const arr = JSON.parse(body);
+            if (Array.isArray(arr)) {
+                issues = arr.map((i) => ({
+                    number: Number(i.number),
+                    title: String(i.title ?? ""),
+                    body: String(i.body ?? ""),
+                    created_at: String(i.created_at ?? ""),
+                    html_url: String(i.html_url ?? ""),
+                    isPr: "pull_request" in i,
+                }));
+            }
+        }
+        catch {
+            issues = null;
+        }
+    }
+    if (issues === null) {
+        if (!entry.issueNoteAt || Date.parse(at) - Date.parse(entry.issueNoteAt) > 3600000) {
+            const note = {
+                at,
+                repo: slug,
+                kind: "watch-note",
+                message: "issue poll skipped this cycle: the API helper response could not be parsed in full (long responses are truncated by the helper); will retry next cycle. The CI event-driven pattern in the README is the recommended production path for issue scanning.",
+            };
+            alerts.push(note);
+            ctx.emit(note);
+            entry.issueNoteAt = at;
+        }
+    }
+    else {
+        const fresh = issues
+            .filter((i) => i.number > 0 && !(String(i.number) in (entry.issuesSeen ?? {})))
+            .sort((a, b) => a.number - b.number);
+        const baseline = firstContact;
+        for (const issue of fresh) {
+            entry.issuesSeen[String(issue.number)] = issue.created_at;
+            if (baseline)
+                continue; // First contact: record history silently, do not scan the backlog.
+            const tmpDir = join(tmpdir(), `tracewatch-issue-${slug.replace("/", "-")}-${issue.number}`);
+            mkdirSync(tmpDir, { recursive: true });
+            const tmpFile = join(tmpDir, "body.md");
+            writeFileSync(tmpFile, issue.body, "utf8");
+            const adaptedRaw = await deps.scanFile(tmpFile);
+            if (!adaptedRaw || adaptedRaw.findings.length === 0)
+                continue;
+            const label = `${issue.isPr ? "pr" : "issue"} #${issue.number}`;
+            const adapted = {
+                ...adaptedRaw,
+                findings: adaptedRaw.findings.map((f) => {
+                    const location = label;
+                    const identity = makeIdentity("injectcheck", location, f.rule);
+                    return {
+                        ...f,
+                        file: label,
+                        identity,
+                        findingId: makeFindingId("injectcheck", f.rule, location, f.signature),
+                        data: { ...f.data, source: { kind: issue.isPr ? "pr" : "issue", ref: String(issue.number), url: issue.html_url } },
+                    };
+                }),
+            };
+            const { scanId, observations } = await recordTextScan(ctx, slug, adapted, { github: slug });
+            const detection = {
+                at,
+                repo: slug,
+                kind: issue.isPr ? "pr" : "issue",
+                sourceRef: label,
+                createdAt: issue.created_at || at,
+                timeToDetectMs: Math.max(0, now.getTime() - Date.parse(issue.created_at || at)),
+                scanId,
+                findingIds: observations.map((o) => o.findingId),
+            };
+            store.appendDetection(detection);
+            const alert = {
+                at,
+                repo: slug,
+                kind: "detection",
+                message: `DETECTION ${label} on ${slug}: ${observations.length} injectcheck finding(s), time-to-detect ${detection.timeToDetectMs} ms`,
+                detection,
+            };
+            alerts.push(alert);
+            ctx.emit(alert);
+        }
+    }
+    state.repos[slug] = entry;
+    saveState(store, state);
+    return alerts;
+}
+/** Run watch until stopped (SIGINT/SIGTERM), --once, or --max-minutes. */
+export async function watch(opts) {
+    const deps = opts.deps ?? defaultDeps;
+    const intervalSec = Math.max(1, opts.intervalSec ?? 60);
+    const isLocal = existsSync(opts.target) && statSync(opts.target).isDirectory();
+    const repo = opts.name ?? (isLocal ? basename(resolve(opts.target)) : opts.target);
+    const log = opts.stderr ?? ((l) => process.stderr.write(`${l}\n`));
+    let alertCount = 0;
+    const emit = (alert) => {
+        alertCount++;
+        opts.store.appendAlert(alert);
+        const line = JSON.stringify(alert);
+        process.stdout.write(`${line}\n`);
+        if (opts.alertsFile)
+            appendFileSync(opts.alertsFile, `${line}\n`, "utf8");
+    };
+    const ctx = { store: opts.store, deps, emit };
+    let stopped = false;
+    const onSignal = () => {
+        stopped = true;
+    };
+    process.on("SIGINT", onSignal);
+    process.on("SIGTERM", onSignal);
+    const deadline = opts.maxMinutes ? Date.now() + opts.maxMinutes * 60000 : null;
+    log(`tracewatch watch: ${isLocal ? "local" : "github"} target ${opts.target}, interval ${intervalSec}s${opts.once ? ", single cycle" : ""}`);
+    let cycles = 0;
+    try {
+        for (;;) {
+            if (isLocal)
+                await pollLocalOnce(ctx, repo, resolve(opts.target));
+            else
+                await pollGithubOnce(ctx, opts.target, { path: opts.path });
+            cycles++;
+            if (opts.once || stopped)
+                break;
+            if (deadline && Date.now() >= deadline)
+                break;
+            const until = Date.now() + intervalSec * 1000;
+            while (!stopped && Date.now() < until && (!deadline || Date.now() < deadline)) {
+                await new Promise((r) => setTimeout(r, Math.min(250, Math.max(1, until - Date.now()))));
+            }
+            if (stopped || (deadline && Date.now() >= deadline))
+                break;
+        }
+    }
+    finally {
+        process.off("SIGINT", onSignal);
+        process.off("SIGTERM", onSignal);
+    }
+    log(`tracewatch watch: stopped after ${cycles} cycle(s), ${alertCount} alert(s)`);
+    return { cycles, alerts: alertCount };
+}
+//# sourceMappingURL=watch.js.map

package/dist/watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.js","sourceRoot":"","sources":["../src/watch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,KAAK,GAAG,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAqB,MAAM,aAAa,CAAC;AAGrH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAqBxD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC1G,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEjF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAC1B,MAAM,IAAI,GAAa,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC3F,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;wBAC/B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC1E,CAAC;oBACD,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;gBACzD,CAAC;gBAAC,MAAM,CAAC;oBACP,uDAAuD;gBACzD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC;IACX,OAAO,GAAG,CAAC;AACb,CAAC;AAWD,MAAM,CAAC,MAAM,WAAW,GAAc;IACpC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5F,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QACrE,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,CAAC;IACD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;CACtB,CAAC;AAQF,SAAS,SAAS,CAAC,KAAY;IAC7B,OAAO,KAAK,CAAC,cAAc,EAAkB,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,KAAY,EAAE,KAAqB;IACpD,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,GAAiB,EACjB,IAAY,EACZ,OAAsB,EACtB,KAAyC;IAEzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;QAC7D,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;KACzF,EAAE,KAAK,CAAC,CAAC;IACV,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAiB,EAAE,IAAY,EAAE,EAAU;IACnE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvJ,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACnL,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE;gBACF,IAAI;gBACJ,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS;gBAChF,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,MAAM,OAAO,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,MAAM,OAAO,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,iBAAiB,OAAO,EAAE,CAAC,iBAAiB,GAAG;aACtJ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAiB,EACjB,IAAY,EACZ,UAAkB;IAElB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAmB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAEhC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,mEAAmE;QACnE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC1B,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC5B,MAAM,YAAY,GAAsD,EAAE,CAAC;IAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM;YAAE,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;aACtD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpI,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,YAAY,EAAE,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACxD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,KAAK,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAClF,MAAM,SAAS,GAAoB;YACjC,EAAE;YACF,IAAI;YACJ,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC5C,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC;YACtD,MAAM;YACN,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SACjD,CAAC;QACF,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,KAAK,GAAgB;YACzB,EAAE;YACF,IAAI;YACJ,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,kBAAkB,GAAG,KAAK,YAAY,CAAC,MAAM,2CAA2C,SAAS,CAAC,cAAc,KAAK;YAC9H,SAAS;SACV,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,SAAS,GAAoB;YACjC,EAAE;YACF,IAAI;YACJ,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,IAAI;YACf,SAAS;YACT,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAClE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;YAC5B,UAAU,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SAC1F,CAAC;QACF,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAgB;YAC5B,EAAE;YACF,IAAI;YACJ,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,kBAAkB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,cAAc,CAAC,MAAM,oCAAoC,SAAS,CAAC,cAAc,KAAK;YACnJ,SAAS;SACV,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC1B,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAiB,EACjB,IAAY,EACZ,OAA0B,EAAE;IAE5B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IAC5B,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAmB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACpF,KAAK,CAAC,UAAU,KAAK,EAAE,CAAC;IACxB,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;IAEnF,aAAa;IACb,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,qBAAqB,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,UAAU,EAAE,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAClF,MAAM,QAAQ,GAAG,UAAU,EAAE,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACvE,IAAI,aAAa,IAAI,KAAK,CAAC,QAAQ,IAAI,aAAa,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QACxE,MAAM,SAAS,GAAoB;YACjC,EAAE;YACF,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,aAAa;YACxB,SAAS,EAAE,QAAQ,IAAI,EAAE;YACzB,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YACvE,UAAU,EAAE,EAAE;SACf,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACpF,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAC7C,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,KAAK,GAAgB;YACzB,EAAE;YACF,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,kBAAkB,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,oBAAoB,SAAS,CAAC,cAAc,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,2DAA2D,EAAE;YAChM,SAAS;SACV,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,aAAa;QAAE,KAAK,CAAC,QAAQ,GAAG,aAAa,CAAC;IAElD,kBAAkB;IAClB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,2DAA2D,CAAC,CAAC;IAC9G,IAAI,MAAM,GAAqB,IAAI,CAAC;IACpC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA8B,CAAC;YAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACvB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;oBACxB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5B,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC1B,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;oBACtC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;oBAClC,IAAI,EAAE,cAAc,IAAI,CAAC;iBAC1B,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,OAAO,EAAE,CAAC;YACnF,MAAM,IAAI,GAAgB;gBACxB,EAAE;gBACF,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,0PAA0P;aACpQ,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM;aACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;aAC9E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,YAAY,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,CAAC,UAAqC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;YACtF,IAAI,QAAQ;gBAAE,SAAS,CAAC,mEAAmE;YAC3F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5F,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAC9D,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAChE,MAAM,OAAO,GAAkB;gBAC7B,GAAG,UAAU;gBACb,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACtC,MAAM,QAAQ,GAAG,KAAK,CAAC;oBACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC/D,OAAO;wBACL,GAAG,CAAC;wBACJ,IAAI,EAAE,KAAK;wBACX,QAAQ;wBACR,SAAS,EAAE,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC;wBACtE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE;qBACnH,CAAC;gBACJ,CAAC,CAAC;aACH,CAAC;YACF,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5F,MAAM,SAAS,GAAoB;gBACjC,EAAE;gBACF,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;gBACjC,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;gBACjC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;gBAC/E,MAAM;gBACN,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aACjD,CAAC;YACF,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YACjC,MAAM,KAAK,GAAgB;gBACzB,EAAE;gBACF,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,aAAa,KAAK,OAAO,IAAI,KAAK,YAAY,CAAC,MAAM,2CAA2C,SAAS,CAAC,cAAc,KAAK;gBACtI,SAAS;aACV,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC1B,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC;AAgBD,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAkB;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,IAAI,GAAG,CAAC,KAAkB,EAAQ,EAAE;QACxC,UAAU,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,UAAU;YAAE,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC,CAAC;IACF,MAAM,GAAG,GAAiB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAE5D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,GAAG,CAAC,qBAAqB,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,WAAW,IAAI,CAAC,MAAM,cAAc,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE7I,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,CAAC;QACH,SAAS,CAAC;YACR,IAAI,OAAO;gBAAE,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;;gBAC7D,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACjE,MAAM,EAAE,CAAC;YACT,IAAI,IAAI,CAAC,IAAI,IAAI,OAAO;gBAAE,MAAM;YAChC,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,IAAI,CAAC;YAC9C,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;gBAC9E,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;gBAAE,MAAM;QAC7D,CAAC;IACH,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,GAAG,CAAC,mCAAmC,MAAM,cAAc,UAAU,WAAW,CAAC,CAAC;IAClF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC"}

package/package.json

@@ -1,6 +1 @@
-{
-  "name": "@reneturcios/tracewatch",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{"bin":{"tracewatch":"dist/cli.js"},"dependencies":{"@modelcontextprotocol/sdk":"^1","zod":"^3"},"description":"Security Wave observability and root-cause tracker: scan history, diffs, provenance, and time-to-detect for hookcheck, actionpin, and injectcheck.","devDependencies":{"@types/node":"^20","tsx":"^4","typescript":"^5"},"engines":{"node":">=20"},"files":["dist","server.json"],"homepage":"https://github.com/CloudCorpRecords/tracewatch#readme","license":"MIT","mcpName":"io.github.CloudCorpRecords/tracewatch","name":"@reneturcios/tracewatch","private":false,"publishConfig":{"access":"public"},"repository":{"type":"git","url":"git+https://github.com/CloudCorpRecords/tracewatch.git"},"scripts":{"build":"tsc","dev":"tsx src/cli.ts","test":"tsx --test test/*.test.ts"},"type":"module","version":"0.1.0"}

package/server.json

@@ -0,0 +1 @@
+{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","description":"Observability, tracking, and root-cause for Security Wave scans and findings.","name":"io.github.CloudCorpRecords/tracewatch","packages":[{"identifier":"@reneturcios/tracewatch","packageArguments":[{"type":"positional","value":"mcp"}],"registryBaseUrl":"https://registry.npmjs.org","registryType":"npm","runtimeHint":"npx","transport":{"type":"stdio"},"version":"0.1.0"},{"identifier":"ghcr.io/cloudcorprecords/tracewatch:0.1.0","packageArguments":[{"type":"positional","value":"mcp"}],"registryType":"oci","runtimeArguments":[{"name":"--rm","type":"named"},{"name":"-i","type":"named"}],"runtimeHint":"docker","transport":{"type":"stdio"}}],"repository":{"source":"github","url":"https://github.com/CloudCorpRecords/tracewatch"},"version":"0.1.0"}