@salesforce/uibundle-sourcemap-validator-engine 11.35.0

package/dist/validators/missing-sourcemap.js

@@ -0,0 +1,92 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+import { promises as fs } from "node:fs";
+import * as path from "node:path";
+import { containsDangerousApi, DANGEROUS_API_PATTERNS } from "./classification.js";
+export const MISSING_SOURCEMAP_RULE = "missing-sourcemap";
+export async function validateMissingSourcemaps(distPath) {
+    let distStat;
+    try {
+        distStat = await fs.stat(distPath);
+    }
+    catch {
+        return { findings: [], skipped: { reason: `dist path not found: ${distPath}` } };
+    }
+    if (!distStat.isDirectory()) {
+        return { findings: [], skipped: { reason: `dist path is not a directory: ${distPath}` } };
+    }
+    const jsFiles = await collectJsFiles(distPath);
+    const findings = [];
+    for (const jsFile of jsFiles) {
+        if (await hasSourcemap(jsFile))
+            continue;
+        // Base finding — no sourcemap
+        findings.push({
+            ruleName: MISSING_SOURCEMAP_RULE,
+            message: `No sourcemap found for ${path.relative(distPath, jsFile)}. Expected a co-located .js.map or a //# sourceMappingURL comment.`,
+            file: jsFile,
+            startLine: 1,
+            startColumn: 1,
+        });
+        // Orphan-JS dangerous-API scan (ported from lib.rs::contains_dangerous_apis).
+        // Rust bumps missing-map findings to a hard fail when the orphan file contains
+        // exfil/backdoor API patterns; we surface it as a distinct, more severe
+        // finding under the same rule.
+        let content;
+        try {
+            content = await fs.readFile(jsFile, "utf8");
+        }
+        catch {
+            continue;
+        }
+        if (containsDangerousApi(content)) {
+            const hits = DANGEROUS_API_PATTERNS.filter((p) => content.includes(p));
+            findings.push({
+                ruleName: MISSING_SOURCEMAP_RULE,
+                message: `Orphan JS file (no sourcemap) contains dangerous API pattern(s): ${hits.join(", ")}. This looks like unmapped/injected code rather than a bundler runtime.`,
+                file: jsFile,
+                startLine: 1,
+                startColumn: 1,
+            });
+        }
+    }
+    return { findings };
+}
+async function collectJsFiles(root) {
+    const out = [];
+    async function walk(dir) {
+        const entries = await fs.readdir(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            const full = path.join(dir, entry.name);
+            if (entry.isDirectory()) {
+                await walk(full);
+            }
+            else if (entry.isFile() && entry.name.endsWith(".js")) {
+                out.push(full);
+            }
+        }
+    }
+    await walk(root);
+    return out;
+}
+async function hasSourcemap(jsFile) {
+    const colocated = `${jsFile}.map`;
+    try {
+        await fs.access(colocated);
+        return true;
+    }
+    catch {
+        // fall through to inline check
+    }
+    try {
+        const contents = await fs.readFile(jsFile, "utf8");
+        return /^[/\s]*[#@]\s*sourceMappingURL\s*=/m.test(contents);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=missing-sourcemap.js.map

package/dist/validators/missing-sourcemap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"missing-sourcemap.js","sourceRoot":"","sources":["../../src/validators/missing-sourcemap.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAGnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,QAAgB;IAC/D,IAAI,QAA6C,CAAC;IAClD,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,wBAAwB,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,iCAAiC,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC3F,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,MAAM,YAAY,CAAC,MAAM,CAAC;YAAE,SAAS;QAEzC,8BAA8B;QAC9B,QAAQ,CAAC,IAAI,CAAC;YACb,QAAQ,EAAE,sBAAsB;YAChC,OAAO,EAAE,0BAA0B,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,oEAAoE;YACtI,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,CAAC;SACd,CAAC,CAAC;QAEH,8EAA8E;QAC9E,+EAA+E;QAC/E,wEAAwE;QACxE,+BAA+B;QAC/B,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACR,SAAS;QACV,CAAC;QACD,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,sBAAsB;gBAChC,OAAO,EAAE,oEAAoE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,yEAAyE;gBACrK,IAAI,EAAE,MAAM;gBACZ,SAAS,EAAE,CAAC;gBACZ,WAAW,EAAE,CAAC;aACd,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,UAAU,IAAI,CAAC,GAAW;QAC9B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACF,CAAC;IACF,CAAC;IACD,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,SAAS,GAAG,GAAG,MAAM,MAAM,CAAC;IAClC,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,+BAA+B;IAChC,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,qCAAqC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC"}

package/dist/validators/path-leakage.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+import type { ValidatorResult } from "./types.js";
+export declare const PATH_LEAKAGE_RULE = "path-leakage";
+export declare function validatePathLeakage(distPath: string): Promise<ValidatorResult>;
+//# sourceMappingURL=path-leakage.d.ts.map

package/dist/validators/path-leakage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-leakage.d.ts","sourceRoot":"","sources":["../../src/validators/path-leakage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,YAAY,CAAC;AAEpE,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAOhD,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAmBpF"}

package/dist/validators/path-leakage.js

@@ -0,0 +1,38 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+import { collectSourceMaps } from "./sourcemap-io.js";
+export const PATH_LEAKAGE_RULE = "path-leakage";
+const ABSOLUTE_UNIX_HOME = /^\/(?:Users|home|root)\//;
+const ABSOLUTE_WIN_DRIVE = /^[A-Za-z]:[\\/]/;
+const WIN_UNC = /^\\\\/;
+const FILE_URL = /^file:\/\//i;
+export async function validatePathLeakage(distPath) {
+    const maps = await collectSourceMaps(distPath);
+    const findings = [];
+    for (const { path: mapPath, map } of maps) {
+        for (const source of map.sources) {
+            if (!source)
+                continue;
+            if (isLeaking(source)) {
+                findings.push({
+                    ruleName: PATH_LEAKAGE_RULE,
+                    message: `Sourcemap references an absolute local path: "${source}". Sources should be relative to protect developer environment details.`,
+                    file: mapPath,
+                    startLine: 1,
+                    startColumn: 1,
+                });
+            }
+        }
+    }
+    return { findings };
+}
+function isLeaking(source) {
+    return (ABSOLUTE_UNIX_HOME.test(source) ||
+        ABSOLUTE_WIN_DRIVE.test(source) ||
+        WIN_UNC.test(source) ||
+        FILE_URL.test(source));
+}
+//# sourceMappingURL=path-leakage.js.map

package/dist/validators/path-leakage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-leakage.js","sourceRoot":"","sources":["../../src/validators/path-leakage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEhD,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AACtD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAC7C,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,QAAQ,GAAG,aAAa,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACzD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;QAC3C,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACb,QAAQ,EAAE,iBAAiB;oBAC3B,OAAO,EAAE,iDAAiD,MAAM,yEAAyE;oBACzI,IAAI,EAAE,OAAO;oBACb,SAAS,EAAE,CAAC;oBACZ,WAAW,EAAE,CAAC;iBACd,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAChC,OAAO,CACN,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CACrB,CAAC;AACH,CAAC"}

package/dist/validators/source-content-verification.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+import type { ValidatorResult } from "./types.js";
+export declare const SOURCE_CONTENT_VERIFICATION_RULE = "source-content-verification";
+export interface SourceContentOptions {
+    sourcePath: string;
+    distPath: string;
+}
+export declare function validateSourceContent(options: SourceContentOptions): Promise<ValidatorResult>;
+//# sourceMappingURL=source-content-verification.d.ts.map

package/dist/validators/source-content-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-content-verification.d.ts","sourceRoot":"","sources":["../../src/validators/source-content-verification.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgBH,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,YAAY,CAAC;AAKpE,eAAO,MAAM,gCAAgC,gCAAgC,CAAC;AAoE9E,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,oBAAoB,GAC3B,OAAO,CAAC,eAAe,CAAC,CAoE1B"}

package/dist/validators/source-content-verification.js

@@ -0,0 +1,465 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+import { promises as fs } from "node:fs";
+import * as path from "node:path";
+import { parse } from "@babel/parser";
+import _traverse from "@babel/traverse";
+import { TraceMap, originalPositionFor } from "@jridgewell/trace-mapping";
+import { containsDangerousPattern, isAsset, isDependency, isVirtualSource, normalizeSourcePath, } from "./classification.js";
+import { walk } from "./sourcemap-io.js";
+// @babel/traverse ships its callable as a default export; ESM/CJS interop puts it under `.default`.
+const traverse = _traverse.default ?? _traverse;
+export const SOURCE_CONTENT_VERIFICATION_RULE = "source-content-verification";
+// Ported from uibundle-sourcemap-validator/src/ast_validator.rs
+const COVERAGE_THRESHOLD_LARGE = 95;
+const COVERAGE_THRESHOLD_SMALL = 70;
+const SMALL_FILE_NODE_COUNT = 500;
+const TYPE_MISMATCH_THRESHOLD = 0.2;
+const AST_MATCH_TOLERANCE_BYTES = 5;
+// Ported from uibundle-sourcemap-validator/src/lib.rs::validate_sourcemap
+const VIRTUAL_SOURCE_RATIO_THRESHOLD_PCT = 20;
+const PARSER_OPTIONS = {
+    sourceType: "unambiguous",
+    allowReturnOutsideFunction: true,
+    allowImportExportEverywhere: true,
+    errorRecovery: true,
+    plugins: ["jsx", "typescript", "decorators-legacy"],
+};
+/** Ported set of node types the Rust ast_validator emits into SignificantNode. */
+const SIGNIFICANT_NODE_TYPES = new Set([
+    "FunctionDeclaration",
+    "FunctionExpression",
+    "ArrowFunctionExpression",
+    "ClassDeclaration",
+    "ClassExpression",
+    "ClassMethod",
+    "ClassProperty",
+    "JSXElement",
+    "JSXFragment",
+    "CallExpression",
+    "NewExpression",
+    "MemberExpression",
+    "OptionalMemberExpression",
+    "AssignmentExpression",
+    "VariableDeclaration",
+    "ImportDeclaration",
+    "ExportNamedDeclaration",
+    "ExportDefaultDeclaration",
+    "ExportAllDeclaration",
+    "ReturnStatement",
+    "ThrowStatement",
+    "AwaitExpression",
+    "YieldExpression",
+]);
+/** Normalize Babel node types so parity with Rust's flattened labels holds
+ *  (Rust emits `ExportDeclaration` for all three export forms). */
+function normalizeNodeType(t) {
+    if (t === "ExportNamedDeclaration" ||
+        t === "ExportDefaultDeclaration" ||
+        t === "ExportAllDeclaration") {
+        return "ExportDeclaration";
+    }
+    return t;
+}
+export async function validateSourceContent(options) {
+    let sourceStat, distStat;
+    try {
+        sourceStat = await fs.stat(options.sourcePath);
+    }
+    catch {
+        return { findings: [], skipped: { reason: `source path not found: ${options.sourcePath}` } };
+    }
+    try {
+        distStat = await fs.stat(options.distPath);
+    }
+    catch {
+        return { findings: [], skipped: { reason: `dist path not found: ${options.distPath}` } };
+    }
+    if (!sourceStat.isDirectory() || !distStat.isDirectory()) {
+        return { findings: [], skipped: { reason: "source and dist must both be directories" } };
+    }
+    const sourceIndex = await indexSourceFiles(options.sourcePath);
+    const findings = [];
+    const sourcePathBase = path.basename(options.sourcePath);
+    await walk(options.distPath, async (jsPath) => {
+        if (!jsPath.endsWith(".js"))
+            return;
+        const mapPath = `${jsPath}.map`;
+        let mapRaw;
+        try {
+            mapRaw = await fs.readFile(mapPath, "utf8");
+        }
+        catch {
+            return; // missing-sourcemap rule handles this
+        }
+        let rawMap;
+        try {
+            rawMap = JSON.parse(mapRaw);
+        }
+        catch (err) {
+            findings.push({
+                ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+                message: `Sourcemap is not valid JSON: ${err.message}`,
+                file: mapPath,
+            });
+            return;
+        }
+        let tracer;
+        try {
+            tracer = new TraceMap(mapRaw);
+        }
+        catch (err) {
+            findings.push({
+                ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+                message: `Sourcemap could not be loaded for AST verification: ${err.message}`,
+                file: mapPath,
+            });
+            return;
+        }
+        // --- Layer 1: byte-equal sourcesContent check + virtual-source ratio gate ---
+        await runByteEqualAndRatioChecks(rawMap, mapPath, sourceIndex, sourcePathBase, findings);
+        // --- Layer 1 (AST): coverage + type-mismatch + dangerous-unmapped-snippets ---
+        let compiledJs;
+        try {
+            compiledJs = await fs.readFile(jsPath, "utf8");
+        }
+        catch {
+            return;
+        }
+        await runAstChecks(jsPath, mapPath, compiledJs, tracer, sourceIndex, sourcePathBase, findings);
+    });
+    return { findings };
+}
+async function runByteEqualAndRatioChecks(map, mapPath, sourceIndex, sourcePathBase, findings) {
+    const sources = map.sources ?? [];
+    if (sources.length === 0)
+        return;
+    let virtualCount = 0;
+    let total = 0;
+    for (let i = 0; i < sources.length; i++) {
+        const raw = sources[i];
+        if (raw == null)
+            continue;
+        total++;
+        const normalized = normalizeSourcePath(raw);
+        if (isVirtualSource(normalized)) {
+            virtualCount++;
+            continue;
+        }
+        if (isDependency(normalized) || isAsset(normalized)) {
+            continue;
+        }
+        const submitted = lookupSubmitted(sourceIndex, normalized, sourcePathBase);
+        const embedded = map.sourcesContent?.[i] ?? null;
+        if (submitted == null) {
+            findings.push({
+                ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+                message: `Sourcemap references source "${raw}" (normalized "${normalized}") which is not present in the submitted source tree.`,
+                file: mapPath,
+            });
+            continue;
+        }
+        if (embedded == null) {
+            findings.push({
+                ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+                message: `Sourcemap source "${normalized}" is missing inline sourcesContent — required for byte-equal verification against the submitted source.`,
+                file: mapPath,
+            });
+            continue;
+        }
+        if (embedded.trim() !== submitted.trim()) {
+            findings.push({
+                ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+                message: `Sourcemap sourcesContent for "${normalized}" differs from the submitted source file (byte-equal check).`,
+                file: mapPath,
+            });
+        }
+    }
+    if (total > 0) {
+        const virtualPct = (virtualCount / total) * 100;
+        if (virtualPct > VIRTUAL_SOURCE_RATIO_THRESHOLD_PCT) {
+            findings.push({
+                ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+                message: `Excessive virtual sources: ${virtualPct.toFixed(0)}% of ${total} sources are virtual (webpack/vite/unknown). Threshold is ${VIRTUAL_SOURCE_RATIO_THRESHOLD_PCT}%; potential Layer-1 bypass attempt.`,
+                file: mapPath,
+            });
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Layer 1 — AST-based coverage + type mismatch + dangerous snippets
+// ---------------------------------------------------------------------------
+async function runAstChecks(jsPath, mapPath, compiledJs, tracer, sourceIndex, sourcePathBase, findings) {
+    let significantNodes;
+    try {
+        significantNodes = collectSignificantNodes(compiledJs);
+    }
+    catch (err) {
+        findings.push({
+            ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+            message: `Compiled JS failed to parse for AST verification: ${err.message}`,
+            file: jsPath,
+        });
+        return;
+    }
+    if (significantNodes.length === 0)
+        return;
+    // Cache: normalized source path -> significant nodes AST + line offsets
+    const sourceAstCache = new Map();
+    let mappedCount = 0;
+    let typeMismatchCount = 0;
+    const unmapped = [];
+    const typeMismatches = [];
+    const orphanSources = new Set();
+    for (const node of significantNodes) {
+        // Babel columns are 0-based; TraceMap wants (line: 1-based, column: 0-based)
+        const orig = originalPositionFor(tracer, { line: node.line, column: node.column });
+        if (orig.source == null || orig.line == null) {
+            unmapped.push(node);
+            continue;
+        }
+        mappedCount++;
+        const normalized = normalizeSourcePath(orig.source);
+        // Dependencies and static assets aren't part of the submitted source tree —
+        // Rust filters them at the top-level Layer-1 gate, so mirror that here to
+        // avoid flagging every third-party file as "orphan".
+        if (isDependency(normalized) || isAsset(normalized))
+            continue;
+        const submittedContent = lookupSubmitted(sourceIndex, normalized, sourcePathBase);
+        if (submittedContent == null) {
+            orphanSources.add(normalized);
+            continue;
+        }
+        // Parse source and compare node type
+        const sourceAst = getSourceAst(normalized, submittedContent, sourceAstCache);
+        if (!sourceAst)
+            continue;
+        const srcByteOffset = lineColToByteOffset(sourceAst.lineOffsets, orig.line, orig.column ?? 0);
+        const srcNode = findNodeAtOffset(sourceAst.nodes, srcByteOffset);
+        if (srcNode && !nodeTypesCompatible(node.type, srcNode.type)) {
+            typeMismatchCount++;
+            if (typeMismatches.length < 5) {
+                typeMismatches.push(`${node.type} at ${node.line}:${node.column} → ${srcNode.type} at ${normalized}:${orig.line}:${orig.column ?? 0}`);
+            }
+        }
+    }
+    const total = significantNodes.length;
+    const coverage = (mappedCount / total) * 100;
+    const threshold = total >= SMALL_FILE_NODE_COUNT ? COVERAGE_THRESHOLD_LARGE : COVERAGE_THRESHOLD_SMALL;
+    const typeMismatchRatio = mappedCount > 0 ? typeMismatchCount / mappedCount : 0;
+    // Coverage finding
+    if (coverage < threshold) {
+        findings.push({
+            ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+            message: `Sourcemap coverage ${coverage.toFixed(1)}% is below threshold ${threshold}% (${mappedCount}/${total} significant AST nodes mapped). Compiled JS may include code not present in submitted source.`,
+            file: jsPath,
+        });
+        for (const node of unmapped.slice(0, 5)) {
+            findings.push({
+                ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+                message: `Unmapped ${node.type} at ${node.line}:${node.column} — "${truncate(node.snippet, 80)}"`,
+                file: jsPath,
+                startLine: node.line,
+                startColumn: node.column,
+            });
+        }
+    }
+    // Type-mismatch finding
+    if (typeMismatchRatio >= TYPE_MISMATCH_THRESHOLD) {
+        findings.push({
+            ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+            message: `AST type-mismatch ratio ${(typeMismatchRatio * 100).toFixed(1)}% meets or exceeds ${TYPE_MISMATCH_THRESHOLD * 100}% threshold (${typeMismatchCount}/${mappedCount} mapped nodes have incompatible source AST types). Mappings may be fabricated.`,
+            file: jsPath,
+        });
+        for (const mm of typeMismatches) {
+            findings.push({
+                ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+                message: `Type mismatch: ${mm}`,
+                file: jsPath,
+            });
+        }
+    }
+    // Dangerous-pattern check on unmapped snippets — exempt line 1 (bundler preamble)
+    const dangerousUnmapped = unmapped.filter((n) => n.line > 1 && containsDangerousPattern(n.snippet));
+    for (const n of dangerousUnmapped.slice(0, 10)) {
+        findings.push({
+            ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+            message: `Unmapped ${n.type} at ${n.line}:${n.column} contains a dangerous API pattern: "${truncate(n.snippet, 100)}"`,
+            file: jsPath,
+            startLine: n.line,
+            startColumn: n.column,
+        });
+    }
+    // Orphan-source aggregate finding
+    if (orphanSources.size > 0) {
+        findings.push({
+            ruleName: SOURCE_CONTENT_VERIFICATION_RULE,
+            message: `${orphanSources.size} mapped AST node source(s) not present in the submitted source tree: ${[...orphanSources].slice(0, 5).join(", ")}${orphanSources.size > 5 ? ", …" : ""}`,
+            file: jsPath,
+        });
+    }
+    void mapPath;
+}
+// ---------------------------------------------------------------------------
+// AST collection & source-side helpers
+// ---------------------------------------------------------------------------
+function collectSignificantNodes(code) {
+    const ast = parse(code, PARSER_OPTIONS);
+    const out = [];
+    traverse(ast, {
+        enter(nodePath) {
+            const node = nodePath.node;
+            if (!SIGNIFICANT_NODE_TYPES.has(node.type))
+                return;
+            if (!node.loc)
+                return;
+            const start = node.loc.start;
+            const byteOffset = node.start ?? 0;
+            const snippet = extractSnippet(code, byteOffset, 60);
+            out.push({
+                type: normalizeNodeType(node.type),
+                line: start.line,
+                column: start.column,
+                byteOffset,
+                snippet,
+            });
+        },
+    });
+    return out;
+}
+function getSourceAst(normalized, content, cache) {
+    if (cache.has(normalized))
+        return cache.get(normalized) ?? null;
+    try {
+        const nodes = collectSignificantNodes(content);
+        const lineOffsets = buildLineOffsets(content);
+        const val = { nodes, lineOffsets };
+        cache.set(normalized, val);
+        return val;
+    }
+    catch {
+        cache.set(normalized, null);
+        return null;
+    }
+}
+/** Build a `line -> byte offset of first char` index. 0-based line indexing. */
+function buildLineOffsets(text) {
+    const offsets = [0];
+    for (let i = 0; i < text.length; i++) {
+        if (text.charCodeAt(i) === 10 /* \n */)
+            offsets.push(i + 1);
+    }
+    return offsets;
+}
+/** Convert a 1-based line + 0-based column to a byte offset. Trace-mapping
+ *  reports 1-based lines like Babel; we normalize by subtracting 1 for the
+ *  lookup into the 0-based line offsets array. */
+function lineColToByteOffset(lineOffsets, line1, col0) {
+    const line = Math.max(0, line1 - 1);
+    if (line < lineOffsets.length)
+        return lineOffsets[line] + col0;
+    return (lineOffsets[lineOffsets.length - 1] ?? 0) + col0;
+}
+/** Ported from ast_validator.rs::find_node_at_offset — finds the significant
+ *  node whose byteOffset is closest to `byteOffset` within a 5-byte tolerance. */
+function findNodeAtOffset(nodes, byteOffset) {
+    const tol = AST_MATCH_TOLERANCE_BYTES;
+    let best = null;
+    let bestDist = Number.POSITIVE_INFINITY;
+    for (const n of nodes) {
+        const dist = Math.abs(n.byteOffset - byteOffset);
+        if (dist <= tol && dist < bestDist) {
+            bestDist = dist;
+            best = n;
+        }
+        if (n.byteOffset > byteOffset + tol)
+            break;
+    }
+    return best;
+}
+/** Ported from ast_validator.rs::node_types_compatible. Rust flattens the three
+ *  export forms into a single "ExportDeclaration" label, so declarations that
+ *  live inside `export …` become compatible with their bare form via that alias
+ *  (see normalizeNodeType). */
+function nodeTypesCompatible(generated, source) {
+    if (generated === source)
+        return true;
+    const funcs = new Set(["FunctionDeclaration", "FunctionExpression", "ArrowFunctionExpression"]);
+    if (funcs.has(generated) && funcs.has(source))
+        return true;
+    if ((generated === "CallExpression" || generated === "NewExpression") &&
+        (source === "CallExpression" || source === "NewExpression"))
+        return true;
+    if ((generated === "AssignmentExpression" && source === "VariableDeclaration") ||
+        (generated === "VariableDeclaration" && source === "AssignmentExpression"))
+        return true;
+    if ((generated === "MemberExpression" && source === "CallExpression") ||
+        (generated === "CallExpression" && source === "MemberExpression"))
+        return true;
+    // ExportDeclaration wraps a top-level declaration; the compiled side often
+    // exposes the inner declaration (function/class/var) while the source side
+    // reports the wrapper.
+    const declarations = new Set([
+        "FunctionDeclaration",
+        "ClassDeclaration",
+        "VariableDeclaration",
+        "FunctionExpression",
+        "ArrowFunctionExpression",
+    ]);
+    if (generated === "ExportDeclaration" && declarations.has(source))
+        return true;
+    if (source === "ExportDeclaration" && declarations.has(generated))
+        return true;
+    return false;
+}
+function extractSnippet(text, byteOffset, maxLen) {
+    const start = byteOffset;
+    if (start >= text.length)
+        return "";
+    const end = Math.min(text.length, start + maxLen);
+    return text.slice(start, end).replace(/\n/g, " ").replace(/\r/g, "");
+}
+function truncate(s, n) {
+    return s.length <= n ? s : s.slice(0, n) + "…";
+}
+// ---------------------------------------------------------------------------
+// Source-file indexing (ported from lib.rs::index_source_files)
+// ---------------------------------------------------------------------------
+const INDEX_IGNORE_PREFIXES = ["node_modules", ".git", "dist"];
+/**
+ * Look up a normalized sourcemap path against the source-tree index.
+ * Sourcemap `sources[]` entries typically look like `../src/foo.ts`, which
+ * normalizes to `src/foo.ts`. The source index, however, is keyed by paths
+ * relative to `<bundleRoot>/src`, so the leading `src/` segment needs to be
+ * stripped before the lookup.
+ */
+function lookupSubmitted(index, normalized, sourcePathBase) {
+    const direct = index.get(normalized);
+    if (direct != null)
+        return direct;
+    const prefix = `${sourcePathBase}/`;
+    if (normalized.startsWith(prefix)) {
+        return index.get(normalized.slice(prefix.length));
+    }
+    return undefined;
+}
+async function indexSourceFiles(sourcePath) {
+    const index = new Map();
+    await walk(sourcePath, async (abs) => {
+        const rel = path.relative(sourcePath, abs);
+        if (INDEX_IGNORE_PREFIXES.some((prefix) => rel.startsWith(prefix)))
+            return;
+        try {
+            const content = await fs.readFile(abs, "utf8");
+            index.set(rel, content);
+        }
+        catch {
+            // binary or unreadable — skip
+        }
+    });
+    return index;
+}
+//# sourceMappingURL=source-content-verification.js.map

package/dist/validators/source-content-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-content-verification.js","sourceRoot":"","sources":["../../src/validators/source-content-verification.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,EAAsB,MAAM,eAAe,CAAC;AAC1D,OAAO,SAA4B,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EACN,wBAAwB,EACxB,OAAO,EACP,YAAY,EACZ,eAAe,EACf,mBAAmB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGzC,oGAAoG;AACpG,MAAM,QAAQ,GAAI,SAAuD,CAAC,OAAO,IAAI,SAAS,CAAC;AAE/F,MAAM,CAAC,MAAM,gCAAgC,GAAG,6BAA6B,CAAC;AAE9E,gEAAgE;AAChE,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC,0EAA0E;AAC1E,MAAM,kCAAkC,GAAG,EAAE,CAAC;AAE9C,MAAM,cAAc,GAAkB;IACrC,UAAU,EAAE,aAAa;IACzB,0BAA0B,EAAE,IAAI;IAChC,2BAA2B,EAAE,IAAI;IACjC,aAAa,EAAE,IAAI;IACnB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,mBAAmB,CAAC;CACnD,CAAC;AAEF,kFAAkF;AAClF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAS;IAC9C,qBAAqB;IACrB,oBAAoB;IACpB,yBAAyB;IACzB,kBAAkB;IAClB,iBAAiB;IACjB,aAAa;IACb,eAAe;IACf,YAAY;IACZ,aAAa;IACb,gBAAgB;IAChB,eAAe;IACf,kBAAkB;IAClB,0BAA0B;IAC1B,sBAAsB;IACtB,qBAAqB;IACrB,mBAAmB;IACnB,wBAAwB;IACxB,0BAA0B;IAC1B,sBAAsB;IACtB,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;CACjB,CAAC,CAAC;AAEH;mEACmE;AACnE,SAAS,iBAAiB,CAAC,CAAS;IACnC,IACC,CAAC,KAAK,wBAAwB;QAC9B,CAAC,KAAK,0BAA0B;QAChC,CAAC,KAAK,sBAAsB,EAC3B,CAAC;QACF,OAAO,mBAAmB,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,OAA6B;IAE7B,IAAI,UAAU,EAAE,QAAQ,CAAC;IACzB,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,0BAA0B,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,wBAAwB,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1D,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,0CAA0C,EAAE,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEzD,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QACpC,MAAM,OAAO,GAAG,GAAG,MAAM,MAAM,CAAC;QAChC,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,sCAAsC;QAC/C,CAAC;QAED,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,gCAAgC;gBAC1C,OAAO,EAAE,gCAAiC,GAAa,CAAC,OAAO,EAAE;gBACjE,IAAI,EAAE,OAAO;aACb,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,IAAI,MAAgB,CAAC;QACrB,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,gCAAgC;gBAC1C,OAAO,EAAE,uDAAwD,GAAa,CAAC,OAAO,EAAE;gBACxF,IAAI,EAAE,OAAO;aACb,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,+EAA+E;QAC/E,MAAM,0BAA0B,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAEzF,gFAAgF;QAChF,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACR,OAAO;QACR,CAAC;QACD,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrB,CAAC;AAaD,KAAK,UAAU,0BAA0B,CACxC,GAAiB,EACjB,OAAe,EACf,WAAwB,EACxB,cAAsB,EACtB,QAA4B;IAE5B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAClC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEjC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,GAAG,IAAI,IAAI;YAAE,SAAS;QAC1B,KAAK,EAAE,CAAC;QACR,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,YAAY,EAAE,CAAC;YACf,SAAS;QACV,CAAC;QACD,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACrD,SAAS;QACV,CAAC;QAED,MAAM,SAAS,GAAG,eAAe,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAEjD,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,gCAAgC;gBAC1C,OAAO,EAAE,gCAAgC,GAAG,kBAAkB,UAAU,uDAAuD;gBAC/H,IAAI,EAAE,OAAO;aACb,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QAED,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,gCAAgC;gBAC1C,OAAO,EAAE,qBAAqB,UAAU,yGAAyG;gBACjJ,IAAI,EAAE,OAAO;aACb,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,gCAAgC;gBAC1C,OAAO,EAAE,iCAAiC,UAAU,8DAA8D;gBAClH,IAAI,EAAE,OAAO;aACb,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC;QAChD,IAAI,UAAU,GAAG,kCAAkC,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,gCAAgC;gBAC1C,OAAO,EAAE,8BAA8B,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,6DAA6D,kCAAkC,sCAAsC;gBAC9M,IAAI,EAAE,OAAO;aACb,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,oEAAoE;AACpE,8EAA8E;AAE9E,KAAK,UAAU,YAAY,CAC1B,MAAc,EACd,OAAe,EACf,UAAkB,EAClB,MAAgB,EAChB,WAAwB,EACxB,cAAsB,EACtB,QAA4B;IAE5B,IAAI,gBAAmC,CAAC;IACxC,IAAI,CAAC;QACJ,gBAAgB,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,QAAQ,CAAC,IAAI,CAAC;YACb,QAAQ,EAAE,gCAAgC;YAC1C,OAAO,EAAE,qDAAsD,GAAa,CAAC,OAAO,EAAE;YACtF,IAAI,EAAE,MAAM;SACZ,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IACD,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE1C,wEAAwE;IACxE,MAAM,cAAc,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE3D,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACrC,6EAA6E;QAC7E,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,SAAS;QACV,CAAC;QACD,WAAW,EAAE,CAAC;QAEd,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEpD,4EAA4E;QAC5E,0EAA0E;QAC1E,qDAAqD;QACrD,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC;YAAE,SAAS;QAE9D,MAAM,gBAAgB,GAAG,eAAe,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAClF,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;YAC9B,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC9B,SAAS;QACV,CAAC;QAED,qCAAqC;QACrC,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,aAAa,GAAG,mBAAmB,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACjE,IAAI,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,iBAAiB,EAAE,CAAC;YACpB,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,cAAc,CAAC,IAAI,CAClB,GAAG,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,MAAM,OAAO,CAAC,IAAI,OAAO,UAAU,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CACjH,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC;IACtC,MAAM,QAAQ,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC;IAC7C,MAAM,SAAS,GACd,KAAK,IAAI,qBAAqB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,wBAAwB,CAAC;IACtF,MAAM,iBAAiB,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhF,mBAAmB;IACnB,IAAI,QAAQ,GAAG,SAAS,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC;YACb,QAAQ,EAAE,gCAAgC;YAC1C,OAAO,EAAE,sBAAsB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,SAAS,MAAM,WAAW,IAAI,KAAK,+FAA+F;YAC5M,IAAI,EAAE,MAAM;SACZ,CAAC,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,gCAAgC;gBAC1C,OAAO,EAAE,YAAY,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG;gBACjG,IAAI,EAAE,MAAM;gBACZ,SAAS,EAAE,IAAI,CAAC,IAAI;gBACpB,WAAW,EAAE,IAAI,CAAC,MAAM;aACxB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,wBAAwB;IACxB,IAAI,iBAAiB,IAAI,uBAAuB,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC;YACb,QAAQ,EAAE,gCAAgC;YAC1C,OAAO,EAAE,2BAA2B,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,uBAAuB,GAAG,GAAG,gBAAgB,iBAAiB,IAAI,WAAW,gFAAgF;YAC3P,IAAI,EAAE,MAAM;SACZ,CAAC,CAAC;QACH,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,gCAAgC;gBAC1C,OAAO,EAAE,kBAAkB,EAAE,EAAE;gBAC/B,IAAI,EAAE,MAAM;aACZ,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,kFAAkF;IAClF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,CACxD,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC;YACb,QAAQ,EAAE,gCAAgC;YAC1C,OAAO,EAAE,YAAY,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,uCAAuC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG;YACtH,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,CAAC,CAAC,IAAI;YACjB,WAAW,EAAE,CAAC,CAAC,MAAM;SACrB,CAAC,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACb,QAAQ,EAAE,gCAAgC;YAC1C,OAAO,EAAE,GAAG,aAAa,CAAC,IAAI,wEAAwE,CAAC,GAAG,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACvL,IAAI,EAAE,MAAM;SACZ,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,OAAO,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,uCAAuC;AACvC,8EAA8E;AAE9E,SAAS,uBAAuB,CAAC,IAAY;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACxC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE;QACb,KAAK,CAAC,QAAwB;YAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC3B,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO;YACnD,IAAI,CAAC,IAAI,CAAC,GAAG;gBAAE,OAAO;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU;gBACV,OAAO;aACP,CAAC,CAAC;QACJ,CAAC;KACD,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACZ,CAAC;AAQD,SAAS,YAAY,CACpB,UAAkB,EAClB,OAAe,EACf,KAAoC;IAEpC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAChE,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAc,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAC9C,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,gFAAgF;AAChF,SAAS,gBAAgB,CAAC,IAAY;IACrC,MAAM,OAAO,GAAa,CAAC,CAAC,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;kDAEkD;AAClD,SAAS,mBAAmB,CAAC,WAAqB,EAAE,KAAa,EAAE,IAAY;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,IAAI,GAAG,WAAW,CAAC,MAAM;QAAE,OAAO,WAAW,CAAC,IAAI,CAAE,GAAG,IAAI,CAAC;IAChE,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;AAC1D,CAAC;AAED;kFACkF;AAClF,SAAS,gBAAgB,CAAC,KAAwB,EAAE,UAAkB;IACrE,MAAM,GAAG,GAAG,yBAAyB,CAAC;IACtC,IAAI,IAAI,GAA2B,IAAI,CAAC;IACxC,IAAI,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,UAAU,CAAC,CAAC;QACjD,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;YACpC,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,GAAG,CAAC,CAAC;QACV,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,GAAG,UAAU,GAAG,GAAG;YAAE,MAAM;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;+BAG+B;AAC/B,SAAS,mBAAmB,CAAC,SAAiB,EAAE,MAAc;IAC7D,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAChG,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,IACC,CAAC,SAAS,KAAK,gBAAgB,IAAI,SAAS,KAAK,eAAe,CAAC;QACjE,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,eAAe,CAAC;QAE3D,OAAO,IAAI,CAAC;IACb,IACC,CAAC,SAAS,KAAK,sBAAsB,IAAI,MAAM,KAAK,qBAAqB,CAAC;QAC1E,CAAC,SAAS,KAAK,qBAAqB,IAAI,MAAM,KAAK,sBAAsB,CAAC;QAE1E,OAAO,IAAI,CAAC;IACb,IACC,CAAC,SAAS,KAAK,kBAAkB,IAAI,MAAM,KAAK,gBAAgB,CAAC;QACjE,CAAC,SAAS,KAAK,gBAAgB,IAAI,MAAM,KAAK,kBAAkB,CAAC;QAEjE,OAAO,IAAI,CAAC;IACb,2EAA2E;IAC3E,2EAA2E;IAC3E,uBAAuB;IACvB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;QAC5B,qBAAqB;QACrB,kBAAkB;QAClB,qBAAqB;QACrB,oBAAoB;QACpB,yBAAyB;KACzB,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,mBAAmB,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,IAAI,MAAM,KAAK,mBAAmB,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,UAAkB,EAAE,MAAc;IACvE,MAAM,KAAK,GAAG,UAAU,CAAC;IACzB,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACrC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,gEAAgE;AAChE,8EAA8E;AAE9E,MAAM,qBAAqB,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/D;;;;;;GAMG;AACH,SAAS,eAAe,CACvB,KAAkB,EAClB,UAAkB,EAClB,cAAsB;IAEtB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,MAAM,MAAM,GAAG,GAAG,cAAc,GAAG,CAAC;IACpC,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,KAAK,GAAgB,IAAI,GAAG,EAAE,CAAC;IACrC,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO;QAC3E,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;IACF,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACd,CAAC"}