@sikkuumiii/defuse 0.0.0-stage → 0.5.0

package/dist/src/report/human.js

@@ -0,0 +1,575 @@
+/**
+ * HUMAN-READABLE REPORT
+ *
+ * Design brief: someone should be able to skim this in a terminal and know
+ * three things without reading carefully -
+ *   1. where the problem is,
+ *   2. how bad it would be,
+ *   3. HOW SURE WE ARE.
+ *
+ * Point 3 is the one other tools bury. It gets its own column here, on every
+ * single line, and it gets a summary block that states the count of unverified
+ * findings in plain words. If this report ever looks more confident than the
+ * engine is, the report is wrong.
+ */
+import { SEVERITY_ORDER } from '../core/finding.js';
+import { scoreAnalysis } from '../core/score.js';
+import { RUNTIME_VERSION_RULE } from '../platform/runtime-version.js';
+import { DEPENDENCY_RULE } from '../platform/dependency-rule.js';
+import { getRule } from '../rules/registry.js';
+import { color, g, wrapText } from './colors.js';
+const WIDTH = 92;
+const SEVERITY_STYLE = {
+    critical: (t) => color.bold(color.red(t)),
+    high: (t) => color.red(t),
+    medium: (t) => color.yellow(t),
+    low: (t) => color.blue(t),
+    info: (t) => color.gray(t),
+};
+function severityLabel(severity) {
+    return SEVERITY_STYLE[severity](severity.toUpperCase().padEnd(8));
+}
+function heading(title) {
+    const line = g('rule').repeat(Math.max(0, WIDTH - title.length - 3));
+    return color.dim(`\n${g('rule')}${g('rule')} ${color.bold(title)} ${line}`);
+}
+/** Directory names that mean "these findings are probably meant to be here". */
+const FIXTURE_DIRECTORY = /(^|[/\\])(tests?|fixtures?|specs?|__tests__|testdata|examples?)([/\\]|$)/i;
+export function renderHuman(result, options = {}) {
+    const out = [];
+    const min = options.minSeverity ? SEVERITY_ORDER[options.minSeverity] : -1;
+    const shown = result.findings.filter((f) => SEVERITY_ORDER[f.severity] >= min);
+    const hiddenBySeverity = result.findings.length - shown.length;
+    /* ---------------- header ---------------- */
+    out.push('');
+    out.push(`${color.bold('Defuse')} ${color.dim(`v${result.coverage.engine.version}`)}  ` +
+        color.bgYellow(color.bold(` ${result.coverage.engine.analysisLabel} `)));
+    out.push(color.dim(`  target: ${result.target}`));
+    /* ---------------- gauges ----------------
+     * Same module the browser calls, so the terminal cannot show a different
+     * number from the web page for the same scan. Rendered as bars rather than
+     * dials for obvious reasons, but the READING is identical.               */
+    const score = scoreAnalysis(result, result.stats.filesFound);
+    const full = options.full ?? false;
+    const present = Object.keys(result.byLanguage).sort();
+    out.push(heading('Summary'));
+    if (!score.examinedNothing) {
+        /*
+         * Plain sentences first. The gauges below are exact but a tester read
+         * "82%/100%" next to "64%" next to "mean of 2 measured ratios" and could
+         * not say what any of them meant. These lines use the same counts and say
+         * them in words; --full keeps the arithmetic.
+         */
+        const flowCount = result.findings.filter((f) => f.confidence === 'flow-verified').length;
+        const guessCount = result.findings.length - flowCount;
+        out.push(`  ${color.red('proven  ')}  ${color.bold(String(flowCount))}  ` +
+            color.dim('attacker input was traced into a dangerous call - every step is printed'));
+        out.push(`  ${color.yellow('possible')}  ${color.bold(String(guessCount))}  ` +
+            color.dim('risky-looking code, but the input was not traced - check these by hand'));
+        out.push(`  ${'read'.padEnd(8)}  ${result.stats.filesParsed} of ` +
+            `${result.stats.filesFound || result.stats.filesParsed} file(s)`);
+        for (const id of present) {
+            const cells = result.coverage.matrix.filter((c) => c.language === id);
+            const count = (s) => cells.filter((c) => c.status === s).length;
+            const deep = result.coverage.taint.find((t) => t.language === id)?.implemented ?? false;
+            out.push(`  ${'checked'.padEnd(8)}  ${id}: ${count('implemented')} of ${cells.length} bug types fully, ` +
+                `${count('partial')} partly, ${count('not-implemented')} not at all` +
+                color.dim(deep ? ' - with data-flow tracing' : ' - pattern matching only, no data-flow tracing'));
+        }
+    }
+    if (full && !score.examinedNothing)
+        out.push(heading('Readings'));
+    if (score.examinedNothing) {
+        // Printed INSTEAD of the dials, not above them. Zeroes shown next to this
+        // warning would still be read as zeroes.
+        out.push(`  ${color.yellow(color.bold('NO READING.'))} ` +
+            color.dim(wrapText('The files parsed, but not one statement, call or assignment reached a ' +
+                'rule - there was no code here to analyse. Every number below would be ' +
+                'the absence of a result, not a result, so they are withheld. Check you ' +
+                'pointed the scan at the right path.', WIDTH - 4, '  ')));
+    }
+    else if (full) {
+        for (const reading of score.gauges) {
+            const filled = Math.round((reading.value / reading.max) * 28);
+            const bar = `${g('dotFull').repeat(filled)}${g('dotEmpty').repeat(28 - filled)}`;
+            const tone = reading.id === 'verified-exposure'
+                ? color.red
+                : reading.id === 'unverified-surface'
+                    ? color.yellow
+                    : color.green;
+            out.push(`  ${reading.label.padEnd(20)} ${tone(bar)} ` +
+                `${color.bold(String(reading.value) + reading.unit)}${color.dim(`/${reading.max}${reading.unit}`)}` +
+                (reading.capped ? color.yellow(`  PINNED - real total ${reading.rawTotal}`) : ''));
+            out.push(color.dim(`  ${' '.repeat(20)} ${reading.working.join('  ' + g('middot') + '  ')}`));
+        }
+    }
+    if (full && !score.examinedNothing) {
+        out.push('');
+        out.push(color.dim(`  ${wrapText('These three are never added together. Severity and confidence are ' +
+            'different questions, and a single blended risk number cannot answer ' +
+            'either one. Coverage tells you how much weight the other two carry.', WIDTH - 4, '  ')}`));
+    }
+    /*
+     * SOURCES RECOGNISED - printed whatever the number, and loudest at zero.
+     *
+     * A scan that found no sources cannot produce a traced finding no matter how
+     * good the tracer is, and "0 flow-verified" reads like a clean bill until you
+     * know that. Elasticsearch's 3,999 Java files produced exactly this shape.
+     */
+    out.push('');
+    if (score.sourcesFound === 0 && result.stats.filesParsed >= 25) {
+        out.push(color.yellow(`  No attacker-controlled sources were recognised in ${result.stats.filesParsed} files.`));
+        out.push(color.dim(`    Every flow-verified finding starts at a source, so none could be produced here.`));
+        out.push(color.dim(`    Either this code takes no external input, or it uses a framework we do not`));
+        out.push(color.dim(`    model - sources are per-framework, and only the ones listed in the coverage`));
+        out.push(color.dim(`    section are recognised. Read "0 proven" as "could not begin".`));
+    }
+    else {
+        out.push(color.dim(`  ${score.sourcesFound} attacker-controlled source(s) recognised - every traced finding starts at one of these.`));
+    }
+    if (score.blindSpots.length > 0) {
+        out.push('');
+        out.push(color.dim(`  Where this scan stopped early:`));
+        for (const spot of score.blindSpots) {
+            out.push(color.dim(`    ${g('middot')} ${spot.count} ${spot.label}`));
+        }
+    }
+    /* ---------------- findings ---------------- */
+    if (shown.length === 0) {
+        out.push(heading('Findings'));
+        out.push(`  ${color.green('No findings from the rules that ran.')}`);
+        out.push(color.dim(`  ${wrapText('This is NOT a clean bill of health. It means the checks listed under ' +
+            '"What this scan did not check" were not triggered. Read that section.', WIDTH - 4, '  ')}`));
+    }
+    else {
+        out.push(heading(`Findings (${shown.length})`));
+        let lastFile = '';
+        for (const finding of shown) {
+            if (finding.location.file !== lastFile) {
+                lastFile = finding.location.file;
+                out.push(`\n  ${color.underline(color.cyan(lastFile))}`);
+            }
+            out.push(renderFinding(finding, full));
+        }
+    }
+    /* ---------------- the honesty block ----------------
+     * The short report states both counts, with their meanings, in the summary
+     * at the top; this block is the long form. */
+    if (full) {
+        out.push(heading('Confidence'));
+        const signature = result.findings.filter((f) => f.confidence === 'signature-based').length;
+        const flow = result.findings.filter((f) => f.confidence === 'flow-verified').length;
+        out.push(`  ${color.yellow('signature-based')}  ${String(signature).padStart(4)}  ` +
+            color.dim('pattern matched in the syntax tree; data flow NOT traced'));
+        out.push(`  ${color.green('flow-verified')}    ${String(flow).padStart(4)}  ` +
+            color.dim('attacker data traced into the sink; every hop shown above'));
+        out.push('');
+        out.push(`  ${wrapText(result.findings.length === 0
+            ? score.examinedNothing
+                ? 'Both counts are zero because nothing was analysed, not because nothing ' +
+                    'was found. A file that parses but contains no code produces exactly this ' +
+                    'output, and it means the scan had no subject - not that the subject is clean.'
+                : `Nothing matched, out of ${result.stats.shapesExamined} code shape(s) actually ` +
+                    'examined. That is a real result rather than an empty one - but it covers only ' +
+                    'the rules that ran, listed under "What this scan did not check".'
+            : flow > 0
+                ? `${flow} finding(s) were confirmed by following the data itself - each one prints the ` +
+                    'full path so you can check it. The signature-based ones are pattern matches the ' +
+                    'tracer could NOT confirm: it does not resolve imports, so a value arriving from ' +
+                    'another file ends the trace, and a real bug can easily sit in that group. ' +
+                    'Unconfirmed is not the same as harmless.'
+                : 'Every finding above is an unverified pattern match. The data-flow engine ran but ' +
+                    'could not confirm any of them - most often because the value arrives from another ' +
+                    'file, or from a source the dictionaries do not recognise. Treat them as leads.', WIDTH - 4, '  ')}`);
+        /* ---------------- analysis depth, by language ----------------
+         * Stated POSITIVELY, and only for languages actually in this scan.
+         *
+         * Two testers in a row wrote fixtures asserting "Go is signature-only, so a
+         * flow-verified Go finding would be an overclaim" - and both were reading a
+         * scope note that had been true months earlier. Nothing in the output
+         * contradicted them, because the report only ever listed languages where
+         * taint is MISSING. With every language implemented that list is empty, so the
+         * report said nothing at all and left the reader's stale belief standing.
+         *
+         * A capability you only mention in the negative is one nobody can confirm.
+         * The short report says it per language on the summary's "checked" lines. */
+        if (present.length > 0) {
+            out.push(heading('Analysis depth in this scan'));
+            for (const id of present) {
+                const cell = result.coverage.taint.find((t) => t.language === id);
+                const deep = cell?.implemented ?? false;
+                out.push(`  ${id.padEnd(12)} ${deep
+                    ? color.green('signature + data flow')
+                    : color.yellow('signature only - no flow verification in this language')}  ${color.dim(`${result.byLanguage[id]} file(s)`)}`);
+            }
+            out.push('');
+            out.push(color.dim(`  ${wrapText('A flow-verified finding can only come from a language on the "signature + data ' +
+                'flow" line. Where it says signature only, zero verified findings means the ' +
+                'tracer never ran there - not that the code is clean.', WIDTH - 4, '  ')}`));
+        }
+        /* ---------------- OWASP coverage, all ten ----------------
+         * Printed in full, both states, because the previous version printed only
+         * the missing ones - and a list of seven gaps invites the reader to assume
+         * the other three are handled. None of them is. See the note in coverage.ts. */
+        const owasp = result.coverage.owaspCoverage;
+        const none = owasp.filter((c) => c.state === 'none');
+        out.push(heading(`OWASP Top 10 (2025) - ${none.length} of 10 have no rule at all`));
+        out.push(color.dim(`  ${wrapText('No category here is comprehensively covered - the three with rules are checked ' +
+            'in part only, and what they leave out is named. Silence in a category with no ' +
+            'rule is not a result: code full of those bugs looks exactly like code without.', WIDTH - 4, '  ')}`));
+        out.push('');
+        for (const category of owasp) {
+            const mark = category.state === 'partial' ? color.yellow('PARTIAL') : color.red('NO RULE');
+            out.push(`  ${mark}  ${color.bold(category.id)} ${category.title}`);
+            if (category.weCheck) {
+                out.push(color.dim(`           we check   ${category.weCheck} (${category.rules.join(', ')})`));
+            }
+            out.push(color.dim(`           ${category.state === 'partial' ? 'in scope  ' : 'e.g.      '}${wrapText(category.examples, WIDTH - 22, '                     ')}`));
+            if (category.note) {
+                out.push(color.dim(`           why       ${wrapText(category.note, WIDTH - 22, '                     ')}`));
+            }
+        }
+    }
+    /* ---------------- coverage / gaps ----------------
+     * The short form still names every gap - by count, in plain words - so a
+     * quiet scan can never read as a clean one. It only leaves out the list. */
+    if (full || options.showCoverageMatrix) {
+        out.push(renderCoverage(result.coverage, options.showCoverageMatrix ?? false));
+    }
+    else {
+        const owaspNone = result.coverage.owaspCoverage.filter((c) => c.state === 'none').length;
+        const here = result.coverage.gaps.filter((c) => present.includes(c.language));
+        const partly = here.filter((c) => c.status === 'partial').length;
+        const notAtAll = here.length - partly;
+        out.push(heading('What this scan did NOT check'));
+        out.push(`  ${wrapText(`OWASP Top 10: ${owaspNone} of 10 categories have no rule at all, and the other ` +
+            `${10 - owaspNone} are checked only in part.` +
+            (present.length > 0
+                ? ` For the language(s) in this scan, ${notAtAll} rule/language pair(s) are not ` +
+                    `checked and ${partly} only partly.`
+                : '') +
+            ` The engine has ${result.coverage.engine.notImplemented.length} known limits. ` +
+            'No findings means these rules found nothing - not that the code is safe.', WIDTH - 4, '  ')}`);
+    }
+    /* ---------------- scan health ---------------- */
+    out.push(heading('Scan'));
+    const bySeverity = countBySeverity(result.findings);
+    if (options.target) {
+        out.push(`  target ${color.bold(options.target)}`);
+        if (FIXTURE_DIRECTORY.test(options.target)) {
+            out.push(color.dim('  NOTE: that path looks like a test, fixture or example folder. Files there are' +
+                '\n        often deliberately vulnerable, so findings in them are expected rather' +
+                "\n        than actionable. If you meant to skip them, the flag is attached with an" +
+                '\n        equals sign and needs a path of its own:  scan . --exclude=tests' +
+                '\n        (via npm, put it after a bare --:  npm run scan -- . --exclude=tests)'));
+        }
+    }
+    out.push(`  files parsed ${color.bold(String(result.stats.filesParsed))}` +
+        `   code shapes examined ${color.bold(String(result.stats.shapesExamined))}` +
+        `   time ${color.bold(`${result.stats.durationMs}ms`)}`);
+    if (result.crossFile.enabled) {
+        out.push(color.dim(`  cross-file: ${result.crossFile.importEdges} import edge(s) resolved ${g('middot')} ` +
+            `${result.crossFile.resolved} call(s) followed into another file ${g('middot')} ` +
+            `${result.crossFile.ambiguous} declined as ambiguous` +
+            (result.crossFile.importsUnresolved > 0
+                ? ` ${g('middot')} ${result.crossFile.importsUnresolved} import(s) pointed outside the scan`
+                : '')));
+        /*
+         * "NOTHING FOUND" AND "NOWHERE TO LOOK" ARE DIFFERENT ANSWERS.
+         *
+         * Someone scanned juice-shop's server.ts on its own - one file, 117 import
+         * statements, every one of them pointing at a route file that was not in
+         * the scan. The tool parsed it, examined 834 shapes, found 8 sources, and
+         * reported nothing, which is CORRECT: server.ts is wiring, and the bugs are
+         * in the files it imports. Scanning that repository's routes/ directory
+         * finds seven, two flow-verified.
+         *
+         * The evidence was already in the report - `importEdges 0` - and it said
+         * nothing about what that meant. A beginner read an empty findings list as
+         * a clean bill of health, then as a broken tool. Both readings were the
+         * report's fault, not theirs.
+         *
+         * This project prints what `--exclude` skipped for exactly this reason. An
+         * import that led nowhere is the same kind of hole: a place the analysis
+         * did not go, which the reader cannot see from the findings list.
+         */
+        if (result.crossFile.importEdges === 0 && result.crossFile.importsUnresolved >= 3) {
+            out.push('');
+            out.push(color.yellow(`  ${g('warn')} SCOPE WARNING: every one of the ${result.crossFile.importsUnresolved} ` +
+                `local import(s) in this scan pointed at a file that was not included.`));
+            out.push(color.yellow('     Nothing could be traced across a module boundary, so a quiet result here means'));
+            out.push(color.yellow('     "not looked at", not "not vulnerable". Point the scan at the project directory'));
+            out.push(color.yellow('     rather than a single file if you meant to analyse the whole thing.'));
+        }
+    }
+    else {
+        out.push(color.yellow(`  cross-file analysis OFF (${result.crossFile.reason})`));
+    }
+    /**
+     * Say when the scan traded time for memory.
+     *
+     * A scan that spills gives exactly the same answers, just more slowly - the
+     * findings are checked to be byte-identical under a budget small enough to
+     * evict almost everything. But "slow" with no explanation is the kind of
+     * thing a user blames the tool for and never mentions, so the report says
+     * which of the two things happened and what to change.
+     */
+    if (result.treeMemory.reparses > 0) {
+        out.push(color.dim(`  memory: project larger than the ${(result.treeMemory.budgetBytes / 1048576).toFixed(0)}MB ` +
+            `tree budget, so ${result.treeMemory.reparses} file(s) were parsed more than once. ` +
+            `Same answers, slower scan - raise DEFUSE_TREE_BUDGET_MB to trade memory back for speed.`));
+    }
+    // Cleared lines whose receipt rests on a function Defuse does not model.
+    const onTrust = result.verifiedClean.filter((c) => (c.assumes?.length ?? 0) > 0).length;
+    if (result.stats.flowsVerified > 0 ||
+        result.stats.signaturesRetracted > 0 ||
+        result.stats.signaturesProvedConstant > 0 ||
+        result.stats.regionsProvedUnreachable > 0 ||
+        result.stats.collectionReadsResolved > 0 ||
+        result.stats.tracesStoppedAtNewData > 0) {
+        out.push(color.dim(`  data flow: ${result.stats.flowsVerified} verified ${g('middot')} ` +
+            `${result.stats.signaturesUpgraded} guess(es) superseded by a proof ${g('middot')} ` +
+            `${result.stats.signaturesRetracted} withdrawn as provably sanitised` +
+            (onTrust > 0
+                ? ` ${g('middot')} ${onTrust} cleared line(s) rest on a function Defuse does not model, taken to hand back ` +
+                    `what it was given (listed in --json under verifiedClean[].assumes)`
+                : '') +
+            (result.stats.signaturesProvedConstant > 0
+                ? ` ${g('middot')} ${result.stats.signaturesProvedConstant} withdrawn as provably ` +
+                    `constant (listed in --json under verifiedClean, with the reason)`
+                : '') +
+            (result.stats.regionsProvedUnreachable > 0
+                ? ` ${g('middot')} ${result.stats.regionsProvedUnreachable} branch(es) or case(s) not ` +
+                    `followed because a fixed condition means they cannot run (listed in --json under ` +
+                    `unreachableCodeSkipped)`
+                : '') +
+            (result.stats.collectionReadsResolved > 0
+                ? ` ${g('middot')} ${result.stats.collectionReadsResolved} collection read(s) answered by key or position ` +
+                    `(listed in --json under collectionReadsResolved)`
+                : '') +
+            (result.stats.tracesStoppedAtNewData > 0
+                ? ` ${g('middot')} ${result.stats.tracesStoppedAtNewData} trace(s) ended at a database or file read, ` +
+                    `which returns stored data rather than its input - not cleared, just not followed ` +
+                    `(listed in --json under tracesStoppedAtNewData)`
+                : '')));
+    }
+    const languageSummary = Object.entries(result.byLanguage)
+        .map(([lang, count]) => `${lang} ${count}`)
+        .join('  ');
+    if (languageSummary)
+        out.push(color.dim(`  languages: ${languageSummary}`));
+    /*
+     * Which PHP the project declares. Printed even when every declaration is
+     * fine, because "no runtime finding" means something only if the reader can
+     * see what was read - and printed as a note when nothing could be read.
+     */
+    const runtime = result.runtimeVersions;
+    if (runtime && (runtime.declared.length > 0 || runtime.notes.length > 0)) {
+        const shown = runtime.declared.slice(0, 5).map((d) => `${d.file}:${d.line} ${d.status}`);
+        const more = runtime.declared.length > shown.length ? ` ${g('middot')} ${runtime.declared.length - shown.length} more in --json` : '';
+        out.push(color.dim(`  php runtime (facts from php.net, checked ${runtime.factsChecked}): ` +
+            (shown.length > 0 ? shown.join(` ${g('middot')} `) + more : 'no version declared')));
+        for (const note of runtime.notes)
+            out.push(color.dim(`  note: ${note}`));
+    }
+    const deps = result.dependencies;
+    out.push(color.dim(deps
+        ? `  dependencies (osv.dev, ${deps.checkedAt.slice(0, 10)}): ${deps.checked} package versions from ` +
+            `${deps.read.length} lockfile(s)` +
+            (deps.notRead.length ? ` ${g('middot')} not read: ${deps.notRead.join(', ')}` : '') +
+            (deps.read.some((r) => r.skipped.length) ? ` ${g('middot')} skipped entries in --json` : '')
+        : '  dependencies: library versions not checked - add --deps (sends names and versions to osv.dev)'));
+    // Build the list FIRST, then decide what to print. The earlier version tried
+    // to do both in one expression:
+    //
+    //     '  findings: ' + list.join('  ') || '  findings: none'
+    //
+    // `+` binds tighter than `||`, so JavaScript read that as
+    // ('  findings: ' + '') || '  findings: none'. The left side is the non-empty
+    // string '  findings: ', which is truthy, so the fallback never ran and a
+    // clean scan printed a bare "findings:" with nothing after it.
+    const severityLine = ['critical', 'high', 'medium', 'low', 'info']
+        .filter((s) => bySeverity[s] > 0)
+        .map((s) => SEVERITY_STYLE[s](`${bySeverity[s]} ${s}`))
+        .join('  ');
+    out.push(`  findings: ${severityLine || color.green('none')}`);
+    if (hiddenBySeverity > 0) {
+        out.push(color.dim(`  ${hiddenBySeverity} finding(s) below the --min-severity threshold were hidden ` +
+            `(they are still present in --json output)`));
+    }
+    if (result.parseProblems.length > 0) {
+        out.push(color.yellow(`  ${result.parseProblems.length} file(s) had parse errors — findings in them may be incomplete:`));
+        for (const problem of result.parseProblems.slice(0, 5)) {
+            const first = problem.issues[0];
+            out.push(color.dim(`    ${problem.file}${first ? `:${first.line}` : ''} ${first?.text ?? ''}`));
+        }
+        if (result.parseProblems.length > 5) {
+            out.push(color.dim(`    ${g('ellipsis')} and ${result.parseProblems.length - 5} more`));
+        }
+    }
+    if (result.suppressions.length > 0) {
+        out.push(color.dim(`  ${result.suppressions.length} finding(s) suppressed by defuse:ignore comments` +
+            (options.showSuppressed ? ':' : ' (use --show-suppressed to list them)')));
+        if (options.showSuppressed) {
+            for (const s of result.suppressions) {
+                out.push(color.dim(`    ${s.file}:${s.line}  ${s.ruleId}  — ${s.comment}`));
+            }
+        }
+    }
+    if (result.excluded.fileCount > 0 || result.excluded.patterns.length > 0) {
+        // An exclusion the user asked for is still a blind spot. Print it next to
+        // the results rather than letting a smaller number look like better news.
+        const directories = result.excluded.directories;
+        out.push(color.dim(`  --exclude (${result.excluded.patterns.join(', ')}) skipped ` +
+            `${result.excluded.fileCount} file(s)` +
+            (directories.length > 0
+                ? ` and ${directories.length} whole director(ies): ${directories.slice(0, 6).join(', ')}` +
+                    (directories.length > 6 ? ` ${g('ellipsis')} +${directories.length - 6} more` : '')
+                : '') +
+            ' - not scanned, not counted'));
+    }
+    if (result.oversizedFiles.length > 0) {
+        out.push(color.dim(`  ${result.oversizedFiles.length} file(s) skipped for size (>2MB)`));
+    }
+    if (!full) {
+        out.push('');
+        out.push(color.dim('  Short report. --full adds the reasoning and limits on each finding, the OWASP table\n' +
+            '  and every gap by name; --report=report.html writes all of it to one file.'));
+    }
+    out.push('');
+    return out.join('\n');
+}
+/* Small helpers kept below the main function so the flow above reads in order. */
+function countBySeverity(findings) {
+    const counts = { critical: 0, high: 0, medium: 0, low: 0, info: 0 };
+    for (const finding of findings)
+        counts[finding.severity]++;
+    return counts;
+}
+function renderFinding(finding, full) {
+    const rule = getRule(finding.ruleId) ?? [RUNTIME_VERSION_RULE, DEPENDENCY_RULE].find((r) => r.id === finding.ruleId);
+    const indent = '                 ';
+    const lines = [];
+    // Pad BEFORE colouring: ANSI escape codes are invisible but count towards
+    // String.length, so padding a coloured string misaligns every column.
+    const position = color.dim(`${finding.location.startLine}:${finding.location.startColumn}`.padEnd(12));
+    const confidenceTag = finding.confidence === 'signature-based'
+        ? color.yellow('[signature-based]')
+        : color.green('[flow-verified]');
+    lines.push(`  ${severityLabel(finding.severity)} ${position} ${color.bold(finding.message)}`);
+    lines.push(`           ${color.dim(finding.ruleId)} ${color.dim(g('middot'))} ${color.dim(finding.cwe)} ` +
+        `${color.dim(g('middot'))} ${color.dim(finding.owasp)} ${confidenceTag}`);
+    lines.push(`           ${color.dim('code')}  ${color.gray(finding.location.snippet)}`);
+    if (full) {
+        lines.push(`           ${color.dim('node')}  ${color.gray(finding.location.astNodePath)}`);
+    }
+    if (rule)
+        lines.push(`           ${color.cyan('what')}  ${wrapText(rule.summary, WIDTH - 18, indent)}`);
+    // A pattern match has no path to show, so its reasoning IS the evidence and
+    // stays in the short report; a traced finding's evidence is the path itself.
+    if (full || !finding.flowPath) {
+        lines.push(`           ${color.cyan('why')}   ${wrapText(finding.reasoning, WIDTH - 18, indent)}`);
+    }
+    if (finding.flowPath)
+        lines.push(renderFlowPath(finding.flowPath));
+    if (rule)
+        lines.push(`           ${color.green('fix')}   ${wrapText(rule.fix, WIDTH - 18, indent)}`);
+    if (full) {
+        lines.push(`           ${color.yellow('gap')}   ${color.dim(wrapText(finding.limitations, WIDTH - 18, indent))}`);
+    }
+    else if (!finding.flowPath) {
+        lines.push(`           ${color.yellow('note')}  ${color.dim('not traced - this may be a false positive; --full says what was not checked')}`);
+    }
+    return lines.join('\n');
+}
+/**
+ * The receipt. A flow-verified finding is only worth more than a guess if you
+ * can CHECK it, so every hop is printed with its own line number: where the
+ * data came from, everything that happened to it, and where it ended up.
+ * If any hop looks wrong to you, the finding is wrong - and that is the point.
+ */
+function renderFlowPath(path) {
+    const style = {
+        source: (t) => color.magenta(t),
+        propagation: (t) => color.dim(t),
+        sanitizer: (t) => color.green(t),
+        sink: (t) => color.red(t),
+    };
+    const lines = [`           ${color.magenta('flow')}  ${color.dim(`traced source ${g('arrow')} sink:`)}`];
+    // `a + b + c` is two concatenation hops on one line, and printing the same
+    // sentence twice read as a glitch. Same line, kind and words -> one row, xN.
+    // Display only: --json, SARIF and the HTML report keep every hop.
+    const rows = [];
+    for (const step of path) {
+        const last = rows[rows.length - 1];
+        if (last &&
+            last.step.kind === step.kind &&
+            last.step.location.startLine === step.location.startLine &&
+            last.step.description === step.description) {
+            last.times++;
+        }
+        else {
+            rows.push({ step, times: 1 });
+        }
+    }
+    rows.forEach(({ step, times }, index) => {
+        const marker = index === 0 ? g('cornerTop') : index === rows.length - 1 ? g('cornerBottom') : g('vertical');
+        const where = `${step.location.startLine}`.padStart(4);
+        const kind = style[step.kind](step.kind.padEnd(11));
+        lines.push(`                 ${color.dim(marker)} ${color.dim(`L${where}`)} ${kind} ` +
+            wrapText(step.description + (times > 1 ? ` (x${times})` : ''), WIDTH - 36, '                            '));
+    });
+    return lines.join('\n');
+}
+function renderCoverage(coverage, showMatrix) {
+    const out = [];
+    out.push(heading('What this scan did NOT check'));
+    out.push(color.dim('  Engine limits:'));
+    for (const item of coverage.engine.notImplemented) {
+        out.push(`    ${color.red(g('cross'))} ${item}`);
+    }
+    const missingTaint = coverage.taint.filter((t) => !t.implemented);
+    if (missingTaint.length > 0) {
+        out.push('');
+        out.push(color.dim('  Languages with NO data-flow verification (signature matching only):'));
+        for (const cell of missingTaint) {
+            out.push(`    ${color.red(g('cross'))} ${cell.language.padEnd(12)} ${wrapText(cell.note, WIDTH - 20, '        ')}`);
+        }
+    }
+    const partial = coverage.gaps.filter((c) => c.status === 'partial');
+    const missing = coverage.gaps.filter((c) => c.status === 'not-implemented');
+    if (partial.length > 0) {
+        out.push('');
+        out.push(color.dim(`  Rules with partial language coverage (${partial.length}):`));
+        for (const cell of partial) {
+            out.push(`    ${color.yellow(g('dotHalf'))} ${color.bold(cell.ruleId)}/${cell.language}: ` +
+                wrapText(cell.note, WIDTH - 12, '        '));
+        }
+    }
+    if (missing.length > 0) {
+        out.push('');
+        out.push(color.dim(`  Rule/language combinations not implemented at all (${missing.length}): ` +
+            missing.map((c) => `${c.ruleId}/${c.language}`).join(', ')));
+    }
+    if (coverage.unscannedExtensions.length > 0) {
+        out.push('');
+        out.push(color.dim(`  File types present but not scanned: ${coverage.unscannedExtensions.join(', ')}`));
+    }
+    out.push('');
+    out.push(color.dim(`  Coverage: ${coverage.counts.implemented} implemented ${g('middot')} ` +
+        `${coverage.counts.partial} partial ${g('middot')} ${coverage.counts.notImplemented} ` +
+        `not implemented (of ${coverage.counts.rules} rules x ${coverage.counts.languages} languages)`));
+    if (showMatrix) {
+        out.push('');
+        for (const cell of coverage.matrix) {
+            const mark = cell.status === 'implemented'
+                ? color.green(g('dotFull'))
+                : cell.status === 'partial'
+                    ? color.yellow(g('dotHalf'))
+                    : color.gray(g('dotEmpty'));
+            out.push(`    ${mark} ${cell.ruleId.padEnd(20)} ${cell.language.padEnd(12)} ${color.dim(cell.status)}`);
+        }
+    }
+    return out.join('\n');
+}
+//# sourceMappingURL=human.js.map

package/dist/src/report/human.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"human.js","sourceRoot":"","sources":["../../../src/report/human.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,cAAc,EAA8C,MAAM,oBAAoB,CAAC;AAEhG,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,KAAK,GAAG,EAAE,CAAC;AAEjB,MAAM,cAAc,GAA+C;IACjE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9B,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;CAC3B,CAAC;AAEF,SAAS,aAAa,CAAC,QAAkB;IACvC,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAC9E,CAAC;AA8BD,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,2EAA2E,CAAC;AAEtG,MAAM,UAAU,WAAW,CAAC,MAAkB,EAAE,UAA8B,EAAE;IAC9E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAC/E,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAE/D,8CAA8C;IAC9C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,GAAG,CAAC,IAAI,CACN,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI;QAC5E,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,CAC1E,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAElD;;;gFAG4E;IAC5E,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3B;;;;;WAKG;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC,MAAM,CAAC;QACzF,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;QACtD,GAAG,CAAC,IAAI,CACN,KAAK,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI;YAC9D,KAAK,CAAC,GAAG,CAAC,yEAAyE,CAAC,CACvF,CAAC;QACF,GAAG,CAAC,IAAI,CACN,KAAK,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI;YAClE,KAAK,CAAC,GAAG,CAAC,wEAAwE,CAAC,CACtF,CAAC;QACF,GAAG,CAAC,IAAI,CACN,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM;YACtD,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,UAAU,CACnE,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YACxE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,EAAE,WAAW,IAAI,KAAK,CAAC;YACxF,GAAG,CAAC,IAAI,CACN,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,CAAC,aAAa,CAAC,OAAO,KAAK,CAAC,MAAM,oBAAoB;gBAC7F,GAAG,KAAK,CAAC,SAAS,CAAC,YAAY,KAAK,CAAC,iBAAiB,CAAC,aAAa;gBACpE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,gDAAgD,CAAC,CACnG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,eAAe;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,0EAA0E;QAC1E,yCAAyC;QACzC,GAAG,CAAC,IAAI,CACN,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG;YAC7C,KAAK,CAAC,GAAG,CACP,QAAQ,CACN,wEAAwE;gBACtE,wEAAwE;gBACxE,yEAAyE;gBACzE,qCAAqC,EACvC,KAAK,GAAG,CAAC,EACT,IAAI,CACL,CACF,CACJ,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,EAAE,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,GACR,OAAO,CAAC,EAAE,KAAK,mBAAmB;gBAChC,CAAC,CAAC,KAAK,CAAC,GAAG;gBACX,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,oBAAoB;oBACnC,CAAC,CAAC,KAAK,CAAC,MAAM;oBACd,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;YACpB,GAAG,CAAC,IAAI,CACR,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG;gBAC3C,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;gBACnG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAClF,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CACR,KAAK,CAAC,GAAG,CACP,KAAK,QAAQ,CACX,oEAAoE;YAClE,sEAAsE;YACtE,qEAAqE,EACvE,KAAK,GAAG,CAAC,EACT,IAAI,CACL,EAAE,CACJ,CACA,CAAC;IACJ,CAAC;IACD;;;;;;OAMG;IACH,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC/D,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,MAAM,CACV,uDAAuD,MAAM,CAAC,KAAK,CAAC,WAAW,SAAS,CACzF,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,qFAAqF,CACtF,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,gFAAgF,CACjF,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,iFAAiF,CAClF,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC,CAAC;IAC3F,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,KAAK,KAAK,CAAC,YAAY,0FAA0F,CAClH,CACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;QACrE,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,KAAK,QAAQ,CACX,uEAAuE;YACrE,uEAAuE,EACzE,KAAK,GAAG,CAAC,EACT,IAAI,CACL,EAAE,CACJ,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACjC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED;;kDAE8C;IAC9C,IAAI,IAAI,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,iBAAiB,CAAC,CAAC,MAAM,CAAC;QAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC,MAAM,CAAC;QACpF,GAAG,CAAC,IAAI,CACN,KAAK,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YACxE,KAAK,CAAC,GAAG,CAAC,0DAA0D,CAAC,CACxE,CAAC;QACF,GAAG,CAAC,IAAI,CACN,KAAK,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YAClE,KAAK,CAAC,GAAG,CAAC,2DAA2D,CAAC,CACzE,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CACN,KAAK,QAAQ,CACX,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,KAAK,CAAC,eAAe;gBACrB,CAAC,CAAC,yEAAyE;oBACzE,2EAA2E;oBAC3E,+EAA+E;gBACjF,CAAC,CAAC,2BAA2B,MAAM,CAAC,KAAK,CAAC,cAAc,0BAA0B;oBAChF,gFAAgF;oBAChF,kEAAkE;YACtE,CAAC,CAAC,IAAI,GAAG,CAAC;gBACV,CAAC,CAAC,GAAG,IAAI,gFAAgF;oBACrF,kFAAkF;oBAClF,kFAAkF;oBAClF,4EAA4E;oBAC5E,0CAA0C;gBAC9C,CAAC,CAAC,mFAAmF;oBACjF,oFAAoF;oBACpF,gFAAgF,EACtF,KAAK,GAAG,CAAC,EACT,IAAI,CACL,EAAE,CACJ,CAAC;QAEF;;;;;;;;;;;qFAW6E;QAC7E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACjD,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;gBAClE,MAAM,IAAI,GAAG,IAAI,EAAE,WAAW,IAAI,KAAK,CAAC;gBACxC,GAAG,CAAC,IAAI,CACN,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAChB,IAAI;oBACF,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC;oBACtC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,wDAAwD,CAC3E,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CACrD,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACb,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,KAAK,QAAQ,CACX,iFAAiF;gBAC/E,6EAA6E;gBAC7E,sDAAsD,EACxD,KAAK,GAAG,CAAC,EACT,IAAI,CACL,EAAE,CACJ,CACF,CAAC;QACJ,CAAC;QAED;;;wFAGgF;QAChF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,IAAI,CAAC,MAAM,4BAA4B,CAAC,CAAC,CAAC;QACpF,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,KAAK,QAAQ,CACX,iFAAiF;YAC/E,gFAAgF;YAChF,gFAAgF,EAClF,KAAK,GAAG,CAAC,EACT,IAAI,CACL,EAAE,CACJ,CACF,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,GACR,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChF,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YACpE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAClG,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,GAAG,EAAE,EAAE,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC;YACnK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,EAAE,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9G,CAAC;QACH,CAAC;IACD,CAAC;IAED;;gFAE4E;IAC5E,IAAI,IAAI,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,kBAAkB,IAAI,KAAK,CAAC,CAAC,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QACzF,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAClD,GAAG,CAAC,IAAI,CACN,KAAK,QAAQ,CACX,iBAAiB,SAAS,uDAAuD;YAC/E,GAAG,EAAE,GAAG,SAAS,4BAA4B;YAC7C,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBACjB,CAAC,CAAC,sCAAsC,QAAQ,iCAAiC;oBAC/E,eAAe,MAAM,eAAe;gBACtC,CAAC,CAAC,EAAE,CAAC;YACP,mBAAmB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,iBAAiB;YAChF,0EAA0E,EAC5E,KAAK,GAAG,CAAC,EACT,IAAI,CACL,EAAE,CACJ,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1B,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,iFAAiF;gBAC/E,kFAAkF;gBAClF,oFAAoF;gBACpF,4EAA4E;gBAC5E,iFAAiF,CACpF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CACN,kBAAkB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE;QAC9D,2BAA2B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE;QAC5E,WAAW,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE,CAC1D,CAAC;IACF,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC7B,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,iBAAiB,MAAM,CAAC,SAAS,CAAC,WAAW,4BAA4B,CAAC,CAAC,QAAQ,CAAC,GAAG;YACrF,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,uCAAuC,CAAC,CAAC,QAAQ,CAAC,GAAG;YACjF,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,wBAAwB;YACrD,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,GAAG,CAAC;gBACrC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,iBAAiB,qCAAqC;gBAC5F,CAAC,CAAC,EAAE,CAAC,CACV,CACF,CAAC;QACF;;;;;;;;;;;;;;;;;;WAkBG;QACH,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,iBAAiB,IAAI,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACb,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,MAAM,CACV,KAAK,CAAC,CAAC,MAAM,CAAC,oCAAoC,MAAM,CAAC,SAAS,CAAC,iBAAiB,GAAG;gBACrF,uEAAuE,CAC1E,CACF,CAAC;YACF,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,MAAM,CACV,qFAAqF,CACtF,CACF,CAAC;YACF,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,MAAM,CACV,qFAAqF,CACtF,CACF,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,yEAAyE,CAAC,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,8BAA8B,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;;OAQG;IACH,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,qCAAqC,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;YAC5F,mBAAmB,MAAM,CAAC,UAAU,CAAC,QAAQ,uCAAuC;YACpF,yFAAyF,CAC5F,CACF,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IACxF,IACE,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,mBAAmB,GAAG,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,sBAAsB,GAAG,CAAC,EACvC,CAAC;QACD,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,gBAAgB,MAAM,CAAC,KAAK,CAAC,aAAa,aAAa,CAAC,CAAC,QAAQ,CAAC,GAAG;YACnE,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,oCAAoC,CAAC,CAAC,QAAQ,CAAC,GAAG;YACpF,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,kCAAkC;YACrE,CAAC,OAAO,GAAG,CAAC;gBACV,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,OAAO,gFAAgF;oBAC1G,oEAAoE;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,CAAC;gBACxC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,wBAAwB,yBAAyB;oBACjF,kEAAkE;gBACpE,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,CAAC;gBACxC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,wBAAwB,6BAA6B;oBACrF,mFAAmF;oBACnF,yBAAyB;gBAC3B,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,CAAC;gBACvC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,uBAAuB,kDAAkD;oBACzG,kDAAkD;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,GAAG,CAAC;gBACtC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,sBAAsB,8CAA8C;oBACpG,mFAAmF;oBACnF,iDAAiD;gBACnD,CAAC,CAAC,EAAE,CAAC,CACV,CACF,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;SAC1C,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,IAAI,eAAe;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,eAAe,EAAE,CAAC,CAAC,CAAC;IAC5E;;;;OAIG;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC;IACvC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;QACtI,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,8CAA8C,OAAO,CAAC,YAAY,KAAK;YACrE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CACrF,CACF,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;IACjC,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,IAAI;QACF,CAAC,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,OAAO,yBAAyB;YAChG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,cAAc;YACjC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,CAAC,CAAC,iGAAiG,CACtG,CACF,CAAC;IACF,6EAA6E;IAC7E,gCAAgC;IAChC,EAAE;IACF,6DAA6D;IAC7D,EAAE;IACF,0DAA0D;IAC1D,8EAA8E;IAC9E,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,YAAY,GAAI,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAW;SAC1E,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACtD,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,GAAG,CAAC,IAAI,CAAC,eAAe,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/D,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,KAAK,gBAAgB,6DAA6D;YAChF,2CAA2C,CAC9C,CACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,MAAM,CACV,KAAK,MAAM,CAAC,aAAa,CAAC,MAAM,iEAAiE,CAClG,CACF,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,QAAQ,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,KAAK,MAAM,CAAC,YAAY,CAAC,MAAM,kDAAkD;YAC/E,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAC3E,CACF,CAAC;QACF,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACpC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChD,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,gBAAgB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;YAC7D,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,UAAU;YACtC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBACrB,CAAC,CAAC,QAAQ,WAAW,CAAC,MAAM,yBAAyB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACvF,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,WAAW,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrF,CAAC,CAAC,EAAE,CAAC;YACP,6BAA6B,CAChC,CACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,cAAc,CAAC,MAAM,kCAAkC,CAAC,CAAC,CAAC;IAC3F,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,yFAAyF;YACvF,6EAA6E,CAChF,CACF,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,kFAAkF;AAElF,SAAS,eAAe,CAAC,QAA4B;IACnD,MAAM,MAAM,GAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC9F,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAE,IAAa;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrH,MAAM,MAAM,GAAG,mBAAmB,CAAC;IACnC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CACxB,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAC3E,CAAC;IACF,MAAM,aAAa,GACjB,OAAO,CAAC,UAAU,KAAK,iBAAiB;QACtC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC;QACnC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAErC,KAAK,CAAC,IAAI,CACR,KAAK,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAClF,CAAC;IACF,KAAK,CAAC,IAAI,CACR,cAAc,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG;QAC5F,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,aAAa,EAAE,CAC3E,CAAC;IACF,KAAK,CAAC,IAAI,CACR,cAAc,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAC3E,CAAC;IACF,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACxG,4EAA4E;IAC5E,6EAA6E;IAC7E,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACrG,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC;SAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,cAAc,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,6EAA6E,CAAC,EAAE,CAClI,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,IAAyB;IAC/C,MAAM,KAAK,GAAoD;QAC7D,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/B,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;KAC1B,CAAC;IACF,MAAM,KAAK,GAAa,CAAC,cAAc,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnH,2EAA2E;IAC3E,6EAA6E;IAC7E,kEAAkE;IAClE,MAAM,IAAI,GAAwC,EAAE,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnC,IACE,IAAI;YACJ,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,QAAQ,CAAC,SAAS;YACxD,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAC1C,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE;QACtC,MAAM,MAAM,GACV,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CACR,oBAAoB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,IAAI,GAAG;YACxE,QAAQ,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAC7G,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,QAAwB,EAAE,UAAmB;IACnE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC;IAElD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC,CAAC;QAC7F,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC;IAE5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,2CAA2C,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACnF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CACN,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI;gBAC/E,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,EAAE,UAAU,CAAC,CAC9C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,wDAAwD,OAAO,CAAC,MAAM,KAAK;YACzE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7D,CACF,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,yCAAyC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnF,CACF,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,GAAG,CACP,eAAe,QAAQ,CAAC,MAAM,CAAC,WAAW,gBAAgB,CAAC,CAAC,QAAQ,CAAC,GAAG;QACtE,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,cAAc,GAAG;QACtF,uBAAuB,QAAQ,CAAC,MAAM,CAAC,KAAK,YAAY,QAAQ,CAAC,MAAM,CAAC,SAAS,aAAa,CACjG,CACF,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,KAAK,aAAa;gBAC3B,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC3B,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;oBACzB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}