@skillsmith/core 0.11.7 → 0.12.0

package/dist/src/security/scanner/SecurityScanner.archive.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Security Scanner — password-protected archive evasion detector
+ * @module @skillsmith/core/security/scanner/SecurityScanner.archive
+ *
+ * SMI-6033 Wave 2 (Gap 3): zero zip/archive/password logic existed anywhere
+ * in the scanner before this file. Two sub-signals, single finding type
+ * (`archive_evasion`), two-tier severity within that one type:
+ *
+ * - CLI invocation syntax (`unzip -P`, `unrar x -p<pw>`, `7z x -p<pw>`,
+ *   `zip -P <pw> ... -e`) — precise, low-FP.
+ * - Prose co-occurrence (an archive noun + a password noun within a bounded
+ *   ±2-line window) — the FP-prone fuzzy case, kept as a SEPARATE code path
+ *   from the CLI-syntax case so its confidence/severity can stay capped
+ *   independently.
+ *
+ * Per the plan's §9 provenance-conditioned quarantine policy: a signal may
+ * quarantine alone only when a provenance condition specific to THIS skill's
+ * own content removes the legitimate interpretations. For archive passwords
+ * that condition is "inline literal password AND correlated with a fetch
+ * destination in the same content" — every legitimate counter-example
+ * (licensed SDK, commercial font/media pack, encrypted export, vendor
+ * support bundle) delivers the password out-of-band; shipping it inline next
+ * to the fetched archive nullifies the encryption's only non-evasion
+ * purpose. Every other shape (out-of-band `$VAR`/placeholder password,
+ * uncorrelated CLI usage, or prose-only mention) stays medium (advisory,
+ * co-signal-eligible) — never split into a second finding type, per the
+ * plan's explicit instruction; severity alone carries the two-tier design,
+ * mirroring how scanChmodFetchCompound's own compound signal uses ONE type
+ * (privilege_escalation) with severity (not weight) doing the tiering.
+ */
+import type { SecurityFinding } from './types.js';
+import type { LineContext } from './SecurityScanner.helpers.js';
+export declare function scanArchiveEvasion(content: string, lineContexts?: LineContext[]): SecurityFinding[];
+//# sourceMappingURL=SecurityScanner.archive.d.ts.map

package/dist/src/security/scanner/SecurityScanner.archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityScanner.archive.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AA2J/D,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,WAAW,EAAE,GAC3B,eAAe,EAAE,CAyDnB"}

package/dist/src/security/scanner/SecurityScanner.archive.js

@@ -0,0 +1,218 @@
+/**
+ * Security Scanner — password-protected archive evasion detector
+ * @module @skillsmith/core/security/scanner/SecurityScanner.archive
+ *
+ * SMI-6033 Wave 2 (Gap 3): zero zip/archive/password logic existed anywhere
+ * in the scanner before this file. Two sub-signals, single finding type
+ * (`archive_evasion`), two-tier severity within that one type:
+ *
+ * - CLI invocation syntax (`unzip -P`, `unrar x -p<pw>`, `7z x -p<pw>`,
+ *   `zip -P <pw> ... -e`) — precise, low-FP.
+ * - Prose co-occurrence (an archive noun + a password noun within a bounded
+ *   ±2-line window) — the FP-prone fuzzy case, kept as a SEPARATE code path
+ *   from the CLI-syntax case so its confidence/severity can stay capped
+ *   independently.
+ *
+ * Per the plan's §9 provenance-conditioned quarantine policy: a signal may
+ * quarantine alone only when a provenance condition specific to THIS skill's
+ * own content removes the legitimate interpretations. For archive passwords
+ * that condition is "inline literal password AND correlated with a fetch
+ * destination in the same content" — every legitimate counter-example
+ * (licensed SDK, commercial font/media pack, encrypted export, vendor
+ * support bundle) delivers the password out-of-band; shipping it inline next
+ * to the fetched archive nullifies the encryption's only non-evasion
+ * purpose. Every other shape (out-of-band `$VAR`/placeholder password,
+ * uncorrelated CLI usage, or prose-only mention) stays medium (advisory,
+ * co-signal-eligible) — never split into a second finding type, per the
+ * plan's explicit instruction; severity alone carries the two-tier design,
+ * mirroring how scanChmodFetchCompound's own compound signal uses ONE type
+ * (privilege_escalation) with severity (not weight) doing the tiering.
+ */
+import { analyzeMarkdownContext, isDocumentationContext, isWithinInlineCode, } from './SecurityScanner.helpers.js';
+import { safeRegexTest, safeRegexCheck } from './regex-utils.js';
+import { looksLikePlaceholderSecret } from './SecurityScanner.pii.js';
+import { FETCH_COMMAND_PATTERN, correlationTargetBasename, isCorrelatedWithFetchDestination, } from './SecurityScanner.fetch-correlation.js';
+// ============================================================================
+// Sub-signal A: CLI invocation syntax
+// ============================================================================
+/**
+ * Bounded per-tool invocation captures (mirrors CHMOD_TARGET's
+ * capture-then-inspect style rather than one large combined alternation —
+ * simpler to reason about and to keep ReDoS-safe). The password itself is
+ * extracted from the captured (bounded-length) segment via a lightweight
+ * follow-up regex, per tool syntax:
+ *   - unzip: `-P <password>` (space-separated; real unzip CLI syntax).
+ *   - unrar/7z: `-p<password>` (ATTACHED, no space — real unrar/7z CLI
+ *     syntax; a bare `-p` with nothing attached means "prompt
+ *     interactively," i.e. no inline password at all, so it is correctly
+ *     NOT matched by the one-or-more `\S+` capture below).
+ *   - zip: `-P <password>` (space-separated) AND the `-e` encrypt flag
+ *     present somewhere on the same bounded segment (zip's `-P` only makes
+ *     sense alongside `-e`).
+ */
+const UNZIP_INVOCATION = /\bunzip\b[^\n]{0,200}/i;
+const UNRAR_INVOCATION = /\bunrar\s+x\b[^\n]{0,200}/i;
+const SEVENZIP_INVOCATION = /\b7z\s+x\b[^\n]{0,200}/i;
+const ZIP_INVOCATION = /\bzip\b[^\n]{0,200}/i;
+const UNZIP_PASSWORD_ARG = /-P\s+(\S{1,200})/;
+const UNRAR_SEVENZIP_PASSWORD_ARG = /-p(\S{1,200})/i;
+const ZIP_PASSWORD_ARG = /-P\s+(\S{1,200})/;
+const ZIP_ENCRYPT_FLAG = /(?:^|\s)-e(?:\s|$)/;
+/** First archive-extension-bearing token on the line — the CLI's target file. */
+const ARCHIVE_FILENAME = /(\S+\.(?:zip|rar|7z|tar\.gz|tgz))\b/i;
+function findArchiveCliPassword(line) {
+    const unzip = safeRegexTest(UNZIP_INVOCATION, line);
+    if (unzip) {
+        const pw = safeRegexTest(UNZIP_PASSWORD_ARG, unzip[0]);
+        if (pw)
+            return { tool: 'unzip', password: pw[1], index: unzip.index ?? 0 };
+    }
+    const unrar = safeRegexTest(UNRAR_INVOCATION, line);
+    if (unrar) {
+        const pw = safeRegexTest(UNRAR_SEVENZIP_PASSWORD_ARG, unrar[0]);
+        if (pw)
+            return { tool: 'unrar', password: pw[1], index: unrar.index ?? 0 };
+    }
+    const sevenZip = safeRegexTest(SEVENZIP_INVOCATION, line);
+    if (sevenZip) {
+        const pw = safeRegexTest(UNRAR_SEVENZIP_PASSWORD_ARG, sevenZip[0]);
+        if (pw)
+            return { tool: '7z', password: pw[1], index: sevenZip.index ?? 0 };
+    }
+    const zip = safeRegexTest(ZIP_INVOCATION, line);
+    if (zip) {
+        const pw = safeRegexTest(ZIP_PASSWORD_ARG, zip[0]);
+        if (pw && safeRegexCheck(ZIP_ENCRYPT_FLAG, zip[0])) {
+            return { tool: 'zip', password: pw[1], index: zip.index ?? 0 };
+        }
+    }
+    return null;
+}
+/**
+ * SMI-6033 Wave 3: returns the FULL captured path (quotes stripped), not a
+ * bare basename — the shared correlation utility is now directory-aware and
+ * must not be handed a path-stripped target.
+ */
+function extractArchiveTargetPath(line) {
+    const m = safeRegexTest(ARCHIVE_FILENAME, line);
+    if (!m)
+        return '';
+    return m[1].replace(/['"]/g, '');
+}
+/** `$VAR` / `${VAR}` bare shell-variable reference — an out-of-band password. */
+const SHELL_VAR_REF = /^\$\{?[A-Za-z_][A-Za-z0-9_]*\}?$/;
+/**
+ * Is `password` an inline LITERAL secret (not a shell-variable reference,
+ * not a placeholder/low-entropy example value)? Reuses the same
+ * looksLikePlaceholderSecret gate the sensitive_path/PII detectors use — the
+ * value has no `key:`/`key=` prefix to strip here (it's a bare CLI
+ * argument), which looksLikePlaceholderSecret's internal extraction already
+ * tolerates (no `:`/`=` present means the whole string passes through
+ * unchanged).
+ *
+ * SMI-6033 Wave 4 bugfix (found during Wave 4's own verification, fixed here
+ * since PR #2371/Wave 3 — the file this bug shipped in — was still open):
+ * `\S{1,200}` in UNZIP_PASSWORD_ARG/ZIP_PASSWORD_ARG/UNRAR_SEVENZIP_PASSWORD_ARG
+ * captures the CLI argument RAW, quotes included, so a perfectly ordinary,
+ * shell-safe out-of-band reference like `unzip -P "$TOOLKIT_PASSWORD" x.zip`
+ * arrived here as `"$TOOLKIT_PASSWORD"` (with literal quote characters) —
+ * `SHELL_VAR_REF` never matched (it anchors on a bare `$`, not a leading
+ * quote), so this fell through to `looksLikePlaceholderSecret`, which also
+ * doesn't recognize it, and the whole thing was misclassified as an inline
+ * LITERAL secret. Combined with a correlated fetch target, that reached
+ * standalone-`critical` on a completely benign shell idiom — a real
+ * quarantine-level false positive, confirmed empirically. Strip surrounding
+ * quotes first (mirrors `extractArchiveTargetPath`'s own
+ * `.replace(/['"]/g, '')` treatment of the same class of CLI capture) so
+ * `SHELL_VAR_REF` sees the actual `$VAR` shape underneath.
+ */
+function isInlineLiteralPassword(password) {
+    if (!password)
+        return false;
+    const unquoted = password.replace(/^['"]|['"]$/g, '');
+    if (safeRegexCheck(SHELL_VAR_REF, unquoted))
+        return false;
+    return !looksLikePlaceholderSecret(unquoted);
+}
+// ============================================================================
+// Sub-signal B: prose co-occurrence (fuzzy, medium-only)
+// ============================================================================
+const ARCHIVE_NOUN = /\b(?:zip|rar|7z|tar\.gz|tgz|archive)\b/i;
+const PASSWORD_NOUN = /\bpassword\b|\bpasscode\b|\bpassphrase\b/i;
+/**
+ * Line numbers (1-indexed) where an archive noun co-occurs with a password
+ * noun within a bounded ±2-line window (same line or 2 lines either side).
+ */
+function findArchivePasswordProseLines(lines) {
+    const flagged = new Set();
+    lines.forEach((line, index) => {
+        if (!safeRegexCheck(ARCHIVE_NOUN, line))
+            return;
+        const start = Math.max(0, index - 2);
+        const end = Math.min(lines.length - 1, index + 2);
+        for (let i = start; i <= end; i++) {
+            if (safeRegexCheck(PASSWORD_NOUN, lines[i])) {
+                flagged.add(index + 1);
+                break;
+            }
+        }
+    });
+    return Array.from(flagged);
+}
+// ============================================================================
+// Detector
+// ============================================================================
+export function scanArchiveEvasion(content, lineContexts) {
+    const findings = [];
+    const lines = content.split('\n');
+    const contexts = lineContexts ?? analyzeMarkdownContext(content);
+    const fetchLines = lines.filter((l) => safeRegexTest(FETCH_COMMAND_PATTERN, l) !== null);
+    const emittedLines = new Set();
+    // Sub-signal A: CLI invocation syntax.
+    lines.forEach((line, index) => {
+        const lineNumber = index + 1;
+        const cli = findArchiveCliPassword(line);
+        if (!cli)
+            return;
+        const ctx = contexts[index];
+        const inInlineCode = ctx?.isInlineCode && isWithinInlineCode(line, cli.index);
+        const inDocContext = ctx ? isDocumentationContext(ctx) || inInlineCode : false;
+        const inlineLiteral = isInlineLiteralPassword(cli.password);
+        const targetPath = extractArchiveTargetPath(line);
+        const correlated = correlationTargetBasename(targetPath).length >= 3 &&
+            isCorrelatedWithFetchDestination(targetPath, fetchLines);
+        const critical = !inDocContext && inlineLiteral && correlated;
+        findings.push({
+            type: 'archive_evasion',
+            severity: inDocContext ? 'low' : critical ? 'critical' : 'medium',
+            message: `Password-protected archive CLI usage (${cli.tool}): "${line.trim().slice(0, 100)}"`,
+            location: line.trim().slice(0, 100),
+            lineNumber,
+            category: 'archive_evasion',
+            inDocumentationContext: inDocContext,
+            confidence: inDocContext ? 'low' : 'high',
+        });
+        emittedLines.add(lineNumber);
+    });
+    // Sub-signal B: prose co-occurrence — the fuzzy, FP-prone case. NEVER
+    // critical (no provenance condition can apply to a bare noun pairing), and
+    // capped at 'medium' confidence to reflect the heuristic's own uncertainty.
+    for (const lineNumber of findArchivePasswordProseLines(lines)) {
+        if (emittedLines.has(lineNumber))
+            continue; // CLI-syntax already emitted for this line
+        const ctx = contexts[lineNumber - 1];
+        const inDocContext = ctx ? isDocumentationContext(ctx) : false;
+        findings.push({
+            type: 'archive_evasion',
+            severity: inDocContext ? 'low' : 'medium',
+            message: `Archive and password mentioned in close proximity: "${lines[lineNumber - 1].trim().slice(0, 100)}"`,
+            location: lines[lineNumber - 1].trim().slice(0, 100),
+            lineNumber,
+            category: 'archive_evasion',
+            inDocumentationContext: inDocContext,
+            confidence: inDocContext ? 'low' : 'medium',
+        });
+    }
+    return findings;
+}
+//# sourceMappingURL=SecurityScanner.archive.js.map

package/dist/src/security/scanner/SecurityScanner.archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityScanner.archive.js","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,wCAAwC,CAAA;AAE/C,+EAA+E;AAC/E,sCAAsC;AACtC,+EAA+E;AAE/E;;;;;;;;;;;;;;GAcG;AACH,MAAM,gBAAgB,GAAG,wBAAwB,CAAA;AACjD,MAAM,gBAAgB,GAAG,4BAA4B,CAAA;AACrD,MAAM,mBAAmB,GAAG,yBAAyB,CAAA;AACrD,MAAM,cAAc,GAAG,sBAAsB,CAAA;AAE7C,MAAM,kBAAkB,GAAG,kBAAkB,CAAA;AAC7C,MAAM,2BAA2B,GAAG,gBAAgB,CAAA;AACpD,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAC3C,MAAM,gBAAgB,GAAG,oBAAoB,CAAA;AAE7C,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,sCAAsC,CAAA;AAQ/D,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;IACnD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,EAAE,GAAG,aAAa,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACtD,IAAI,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAA;IAC5E,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;IACnD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,EAAE,GAAG,aAAa,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/D,IAAI,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAA;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAA;IACzD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,aAAa,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAClE,IAAI,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,EAAE,CAAA;IAC5E,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,EAAE,GAAG,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAClD,IAAI,EAAE,IAAI,cAAc,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,CAAA;QAChE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,CAAC,GAAG,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACjB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;AAClC,CAAC;AAED,iFAAiF;AACjF,MAAM,aAAa,GAAG,kCAAkC,CAAA;AAExD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;IACrD,IAAI,cAAc,CAAC,aAAa,EAAE,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAA;IACzD,OAAO,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAA;AAC9C,CAAC;AAED,+EAA+E;AAC/E,yDAAyD;AACzD,+EAA+E;AAE/E,MAAM,YAAY,GAAG,yCAAyC,CAAA;AAC9D,MAAM,aAAa,GAAG,2CAA2C,CAAA;AAEjE;;;GAGG;AACH,SAAS,6BAA6B,CAAC,KAAe;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC;YAAE,OAAM;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QACjD,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,IAAI,cAAc,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;gBACtB,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAC5B,CAAC;AAED,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,qBAAqB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IACxF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IAEtC,uCAAuC;IACvC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAA;QAC5B,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,CAAC,GAAG;YAAE,OAAM;QAEhB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC3B,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;QAC7E,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;QAE9E,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC3D,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;QACjD,MAAM,UAAU,GACd,yBAAyB,CAAC,UAAU,CAAC,CAAC,MAAM,IAAI,CAAC;YACjD,gCAAgC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;QAC1D,MAAM,QAAQ,GAAG,CAAC,YAAY,IAAI,aAAa,IAAI,UAAU,CAAA;QAE7D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YACjE,OAAO,EAAE,yCAAyC,GAAG,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;YAC7F,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACnC,UAAU;YACV,QAAQ,EAAE,iBAAiB;YAC3B,sBAAsB,EAAE,YAAY;YACpC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;SAC1C,CAAC,CAAA;QACF,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,sEAAsE;IACtE,2EAA2E;IAC3E,4EAA4E;IAC5E,KAAK,MAAM,UAAU,IAAI,6BAA6B,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAQ,CAAC,2CAA2C;QACtF,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC,CAAA;QACpC,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAC9D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YACzC,OAAO,EAAE,uDAAuD,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;YAC7G,QAAQ,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACpD,UAAU;YACV,QAAQ,EAAE,iBAAiB;YAC3B,sBAAsB,EAAE,YAAY;YACpC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;SAC5C,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/src/security/scanner/SecurityScanner.compound.d.ts

@@ -10,4 +10,5 @@
 import type { SecurityFinding } from './types.js';
 import type { LineContext } from './SecurityScanner.helpers.js';
 export declare function scanChmodFetchCompound(content: string, alreadyFlaggedLines: ReadonlySet<number>, lineContexts?: LineContext[]): SecurityFinding[];
+export declare function scanGatekeeperBypass(content: string, lineContexts?: LineContext[], isHighTrustAuthor?: boolean): SecurityFinding[];
 //# sourceMappingURL=SecurityScanner.compound.d.ts.map

package/dist/src/security/scanner/SecurityScanner.compound.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SecurityScanner.compound.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.compound.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAiE/D,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,EACxC,YAAY,CAAC,EAAE,WAAW,EAAE,GAC3B,eAAe,EAAE,CAyDnB"}
+{"version":3,"file":"SecurityScanner.compound.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.compound.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AA4C/D,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,EACxC,YAAY,CAAC,EAAE,WAAW,EAAE,GAC3B,eAAe,EAAE,CAwDnB;AA8ED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,WAAW,EAAE,EAC5B,iBAAiB,UAAQ,GACxB,eAAe,EAAE,CAwCnB"}

package/dist/src/security/scanner/SecurityScanner.compound.js

@@ -10,6 +10,7 @@
  */
 import { analyzeMarkdownContext, isDocumentationContext, isWithinInlineCode, } from './SecurityScanner.helpers.js';
 import { safeRegexTest } from './regex-utils.js';
+import { FETCH_COMMAND_PATTERN, correlationTargetBasename, isCorrelatedWithFetchDestination, } from './SecurityScanner.fetch-correlation.js';
 /**
  * SMI-5424 PR2: owner-permission chmod is a COMPOUND signal, not standalone —
  * `chmod 755 ./bin/cli` / `chmod +x build.sh` previously false-fired
@@ -34,49 +35,19 @@ import { safeRegexTest } from './regex-utils.js';
 // that bare `chmod +x foo` (no u/g/o/a prefix — the most common make-executable form
 // in install scripts and malicious droppers) still matches.
 const OWNER_PERM_CHMOD = /\bchmod\s+(?:-[A-Za-z]+\s+)?(?:[0-7]{3,4}|[ugoa]*(?:[+\-=][rwxXstugo]+(?:,[ugoa]*[+\-=][rwxXstugo]*)*)+)/i;
-// FIX-1: actual fetch COMMANDS only — bare prose tokens (`# downloaded`, `See https://…`,
-// `npx tool init`) false-fired next to a chmod. curl/wget/git-clone, and npx only with a URL.
-const CHMOD_FETCH_CONTEXT = /\b(?:curl|wget)\b|\bgit\s+clone\b|\bnpx\b[^\n]{0,80}https?:\/\//i;
 // FIX-2: capture the chmod target path so a fetch command anywhere correlates by basename.
 // SMI-5433: prefix widened to match the same extended forms as OWNER_PERM_CHMOD; capture
 // group (\S+) (the target path) is unchanged.
 const CHMOD_TARGET = /\bchmod\s+(?:-[A-Za-z]+\s+)?(?:[0-7]{3,4}|[ugoa]*(?:[+\-=][rwxXstugo]+(?:,[ugoa]*[+\-=][rwxXstugo]*)*)+)\s+(\S+)/i;
-function escapeRegExp(s) {
-    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-// SMI-5431: the IMPLICIT download destination of a fetch command — the file written with
-// NO explicit -o/-O/--output<space>/> redirect: `wget <url>` (no -O/-o) → URL last segment;
-// `git clone <url>` → repo dir (minus `.git`); `curl --output=<file>` (equals form, missed by
-// the explicit regex). A bare `curl <url>` GET writes to STDOUT → '' (never correlates). ReDoS-safe.
-function implicitDownloadBasename(line) {
-    const lastSegment = (urlAfterScheme) => {
-        const noFrag = urlAfterScheme.split(/[?#]/)[0];
-        const slash = noFrag.indexOf('/'); // first slash = end of host
-        if (slash < 0)
-            return ''; // host only -> wget writes index.html
-        const path = noFrag.slice(slash + 1).replace(/\/+$/, '');
-        return path === '' ? '' : (path.split('/').pop() ?? '');
-    };
-    const wget = line.match(/\bwget\b(?![^\n]{0,200}\s-[oO]\b)[^\n]{0,200}?https?:\/\/(\S{1,400})/i);
-    if (wget)
-        return lastSegment(wget[1]);
-    const clone = line.match(/\bgit\s+clone\b[^\n]{0,200}?https?:\/\/(\S{1,400})/i);
-    if (clone)
-        return lastSegment(clone[1]).replace(/\.git$/i, '');
-    const curlEq = line.match(/\bcurl\b[^\n]{0,200}?--output=['"]?(\S{1,400})/i);
-    if (curlEq)
-        return curlEq[1].replace(/['"]/g, '').split('/').pop() ?? '';
-    return '';
-}
 export function scanChmodFetchCompound(content, alreadyFlaggedLines, lineContexts) {
     const findings = [];
     const lines = content.split('\n');
     const contexts = lineContexts ?? analyzeMarkdownContext(content);
     // FIX-2: lines carrying a fetch command, for distance-independent correlation.
     // H-6 (SMI-5433): route through safeRegexTest so the 10,000-char cap applies uniformly
-    // to the per-line filter too (CHMOD_FETCH_CONTEXT is provably linear, so this is
+    // to the per-line filter too (FETCH_COMMAND_PATTERN is provably linear, so this is
     // defense-in-depth consistency, not a ReDoS fix).
-    const fetchLines = lines.filter((l) => safeRegexTest(CHMOD_FETCH_CONTEXT, l) !== null);
+    const fetchLines = lines.filter((l) => safeRegexTest(FETCH_COMMAND_PATTERN, l) !== null);
     lines.forEach((line, index) => {
         const lineNumber = index + 1;
         // World-writable / setuid already emitted critical for this line — skip.
@@ -88,20 +59,21 @@ export function scanChmodFetchCompound(content, alreadyFlaggedLines, lineContext
         // Bounded ±1-line window for the download-then-chmod adjacency.
         const window = [lines[index - 1] ?? '', line, lines[index + 1] ?? ''].join('\n');
         // H-6 (SMI-5433): route through safeRegexTest for the 10,000-char cap.
-        const adjacentFetch = safeRegexTest(CHMOD_FETCH_CONTEXT, window) !== null;
-        // FIX-2 + SMI-5431: correlate the chmod target basename (≥3 chars) against a fetch
+        const adjacentFetch = safeRegexTest(FETCH_COMMAND_PATTERN, window) !== null;
+        // FIX-2 + SMI-5431: correlate the chmod target (final segment ≥3 chars) against a fetch
         // command's DOWNLOAD DESTINATION anywhere — explicit (-o/-O/--output<space>/>, with an
         // optional leading path) via regex, OR implicit (wget/git-clone/curl --output=) via
         // exact-token equality. Anchored on the destination, NOT basename-anywhere, so a URL
         // path / query / header value (governance FP class) and a bare curl GET do not correlate.
+        // SMI-6033 Wave 3: the FULL captured path is handed to the shared utility (it used to be
+        // reduced to a bare basename here, discarding the directory the utility now compares).
         let correlated = false;
         // H-6 (SMI-5433): route through safeRegexTest for the 10,000-char cap.
         const tm = safeRegexTest(CHMOD_TARGET, line);
         if (tm) {
-            const base = tm[1].replace(/['"]/g, '').split('/').pop() ?? '';
-            if (base.length >= 3) {
-                const re = new RegExp(`(?:-o|-O|--output|>>?)\\s*['"]?(?:[^\\s'"]*/)?${escapeRegExp(base)}(?:[\\s'"?]|$)`);
-                correlated = fetchLines.some((l) => re.test(l) || implicitDownloadBasename(l) === base);
+            const targetPath = tm[1].replace(/['"]/g, '');
+            if (correlationTargetBasename(targetPath).length >= 3) {
+                correlated = isCorrelatedWithFetchDestination(targetPath, fetchLines);
             }
         }
         if (!adjacentFetch && !correlated)
@@ -124,4 +96,111 @@ export function scanChmodFetchCompound(content, alreadyFlaggedLines, lineContext
     });
     return findings;
 }
+/**
+ * SMI-6033 Wave 2/3 (Gap 5, tiered per the plan's "Product decision:
+ * Gatekeeper-bypass carve-out", resolved 2026-08-14): xattr Gatekeeper-bypass
+ * detector.
+ *
+ * `xattr -c <file>` (clear ALL extended attributes) or
+ * `xattr -d com.apple.quarantine <file>` (delete just the quarantine
+ * attribute — with or without a combined `-r` recursive flag) strips
+ * macOS's "downloaded from the internet" Gatekeeper warning from an
+ * unsigned binary.
+ *
+ * NOT unconditionally standalone-critical: `critical` requires the xattr
+ * target's path to be correlated with a fetch destination elsewhere in
+ * the content (the shared `isCorrelatedWithFetchDestination` utility, same
+ * as `scanChmodFetchCompound` above and `scanArchiveEvasion`'s inline-literal
+ * form) — the "download a payload, strip its quarantine bit" attack shape.
+ * Uncorrelated usage (e.g. a general macOS-troubleshooting doc mentioning
+ * `xattr -c` with no fetched file in scope) stays `medium`, regardless of
+ * `isHighTrustAuthor`.
+ *
+ * `isHighTrustAuthor` (default `false`) is the trust-tier carve-out: when the
+ * correlated (would-be-critical) form fires AND the caller has verified the
+ * skill's author is high-trust, severity downgrades to `medium` instead of
+ * `critical` — a downgrade, not a full exemption, since even a high-trust
+ * account can be compromised (a `medium` finding still counts toward the
+ * two-distinct-medium-signal escalation rule). This parameter must be sourced
+ * from a VERIFIED author signal — the indexer's own resolved GitHub repo
+ * owner, never a self-declared `SKILL.md` frontmatter field, which is
+ * trivially spoofable. `skill_validate`'s offline call site has no such
+ * verified signal (a network call to check it would break the tool's
+ * deliberately-offline design, per Gap 7) and so must never pass this
+ * parameter — it stays defaulted `false`, keeping correlated xattr
+ * always-critical there, full stop. Checksum/signature-verification prose
+ * near the command does NOT downgrade a non-high-trust correlated form: it's
+ * attacker-authored text and proves nothing about the artifact's safety, so
+ * no such logic exists here.
+ *
+ * Two bounded, ReDoS-safe TRIGGER patterns rather than one combined
+ * alternation (mirrors CHMOD_TARGET's capture-then-inspect style):
+ * XATTR_CLEAR_ALL matches any `-c`-bearing flag cluster within 40 chars of
+ * `xattr` (`-c`, `-cr`, `-rc`, ...); XATTR_DELETE_QUARANTINE matches a
+ * `-d`-bearing flag cluster immediately followed by the literal
+ * `com.apple.quarantine` attribute name (covers both a combined `-dr`/`-rd`
+ * cluster and two separate `-r -d com.apple.quarantine` tokens, since the
+ * attribute name always immediately follows whichever token carries `-d`).
+ * Reading or writing a DIFFERENT attribute (`-l`, `-p <name>`, `-w <name>
+ * <value>`) is not a bypass and does not match either pattern. A second,
+ * TARGET-capturing sibling of each pattern (below) exists ONLY to extract the
+ * xattr'd file's basename for the correlation check — it never changes
+ * whether a line trips the detector.
+ */
+const XATTR_CLEAR_ALL = /\bxattr\b[^\n]{0,40}-[a-zA-Z]*c[a-zA-Z]*\b/i;
+const XATTR_DELETE_QUARANTINE = /\bxattr\b[^\n]{0,40}-[a-zA-Z]*d[a-zA-Z]*\s+['"]?com\.apple\.quarantine\b/i;
+const XATTR_CLEAR_ALL_TARGET = /\bxattr\b[^\n]{0,40}-[a-zA-Z]*c[a-zA-Z]*\b\s+['"]?(\S+)/i;
+const XATTR_DELETE_QUARANTINE_TARGET = /\bxattr\b[^\n]{0,40}-[a-zA-Z]*d[a-zA-Z]*\s+['"]?com\.apple\.quarantine\b['"]?\s+['"]?(\S+)/i;
+/**
+ * The FILE target of an xattr Gatekeeper-bypass command (real xattr CLI
+ * syntax is `xattr [-flags] [attr_name] target...`, so the target always
+ * comes right after whichever trigger variant matched) — used only for the
+ * fetch-correlation trust-tier check. Extraction failure (no trailing token)
+ * simply yields '' (never correlates); it does not affect whether the line
+ * trips the underlying detector. SMI-6033 Wave 3: returns the FULL path
+ * (quotes stripped), not a bare basename — the shared correlation utility is
+ * now directory-aware and must not be handed a path-stripped target.
+ */
+function extractXattrTargetPath(line) {
+    const m = safeRegexTest(XATTR_CLEAR_ALL_TARGET, line) ??
+        safeRegexTest(XATTR_DELETE_QUARANTINE_TARGET, line);
+    if (!m)
+        return '';
+    return m[1].replace(/['"]/g, '');
+}
+export function scanGatekeeperBypass(content, lineContexts, isHighTrustAuthor = false) {
+    const findings = [];
+    const lines = content.split('\n');
+    const contexts = lineContexts ?? analyzeMarkdownContext(content);
+    // Fetch-carrying lines, for the correlation precondition (mirrors
+    // scanChmodFetchCompound/scanArchiveEvasion's own fetchLines computation).
+    const fetchLines = lines.filter((l) => safeRegexTest(FETCH_COMMAND_PATTERN, l) !== null);
+    lines.forEach((line, index) => {
+        const match = safeRegexTest(XATTR_CLEAR_ALL, line) ?? safeRegexTest(XATTR_DELETE_QUARANTINE, line);
+        if (!match)
+            return;
+        const ctx = contexts[index];
+        const inInlineCode = ctx?.isInlineCode && isWithinInlineCode(line, match.index ?? 0);
+        const inDocContext = ctx ? isDocumentationContext(ctx) || inInlineCode : false;
+        const targetPath = extractXattrTargetPath(line);
+        const correlated = correlationTargetBasename(targetPath).length >= 3 &&
+            isCorrelatedWithFetchDestination(targetPath, fetchLines);
+        // Product decision (2026-08-14): correlated form is standalone-critical
+        // UNLESS the caller has verified the author is high-trust (indexer path
+        // only — see this function's header). Uncorrelated usage never reaches
+        // 'critical' regardless of trust tier.
+        const critical = !inDocContext && correlated && !isHighTrustAuthor;
+        findings.push({
+            type: 'gatekeeper_bypass',
+            severity: inDocContext ? 'low' : critical ? 'critical' : 'medium',
+            message: `xattr command strips the macOS Gatekeeper quarantine attribute: "${match[0].trim().slice(0, 100)}"`,
+            location: line.trim().slice(0, 100),
+            lineNumber: index + 1,
+            category: 'gatekeeper_bypass',
+            inDocumentationContext: inDocContext,
+            confidence: inDocContext ? 'low' : 'high',
+        });
+    });
+    return findings;
+}
 //# sourceMappingURL=SecurityScanner.compound.js.map

package/dist/src/security/scanner/SecurityScanner.compound.js.map

@@ -1 +1 @@
-{"version":3,"file":"SecurityScanner.compound.js","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.compound.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF;;;;;;;;GAQG;AAIH,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAEhD;;;;;;;;;;;;;;GAcG;AACH,0FAA0F;AAC1F,wFAAwF;AACxF,uFAAuF;AACvF,oFAAoF;AACpF,8EAA8E;AAC9E,sFAAsF;AACtF,qFAAqF;AACrF,4DAA4D;AAC5D,MAAM,gBAAgB,GACpB,2GAA2G,CAAA;AAC7G,0FAA0F;AAC1F,8FAA8F;AAC9F,MAAM,mBAAmB,GAAG,kEAAkE,CAAA;AAC9F,2FAA2F;AAC3F,yFAAyF;AACzF,8CAA8C;AAC9C,MAAM,YAAY,GAChB,mHAAmH,CAAA;AACrH,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACjD,CAAC;AACD,yFAAyF;AACzF,4FAA4F;AAC5F,8FAA8F;AAC9F,qGAAqG;AACrG,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,WAAW,GAAG,CAAC,cAAsB,EAAU,EAAE;QACrD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA,CAAC,4BAA4B;QAC9D,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,EAAE,CAAA,CAAC,sCAAsC;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACxD,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAA;IAChG,IAAI,IAAI;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAA;IAC/E,IAAI,KAAK;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAA;IAC5E,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;IACxE,OAAO,EAAE,CAAA;AACX,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,mBAAwC,EACxC,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAChE,+EAA+E;IAC/E,uFAAuF;IACvF,iFAAiF;IACjF,kDAAkD;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,mBAAmB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IAEtF,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAA;QAC5B,yEAAyE;QACzE,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAM;QAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;QACnD,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,gEAAgE;QAChE,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChF,uEAAuE;QACvE,MAAM,aAAa,GAAG,aAAa,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,IAAI,CAAA;QACzE,mFAAmF;QACnF,uFAAuF;QACvF,oFAAoF;QACpF,qFAAqF;QACrF,0FAA0F;QAC1F,IAAI,UAAU,GAAG,KAAK,CAAA;QACtB,uEAAuE;QACvE,MAAM,EAAE,GAAG,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;QAC5C,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;YAC9D,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,iDAAiD,YAAY,CAAC,IAAI,CAAC,gBAAgB,CACpF,CAAA;gBACD,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,wBAAwB,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;YACzF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU;YAAE,OAAM,CAAC,uCAAuC;QAEjF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC3B,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;QACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;QAC9E,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,sBAAsB;YAC5B,6DAA6D;YAC7D,yEAAyE;YACzE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;YACvC,OAAO,EAAE,wEAAwE,KAAK,CAAC,CAAC,CAAC,GAAG;YAC5F,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACnC,UAAU;YACV,QAAQ,EAAE,sBAAsB;YAChC,sBAAsB,EAAE,YAAY;YACpC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;SAC1C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC"}
+{"version":3,"file":"SecurityScanner.compound.js","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.compound.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF;;;;;;;;GAQG;AAIH,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,wCAAwC,CAAA;AAE/C;;;;;;;;;;;;;;GAcG;AACH,0FAA0F;AAC1F,wFAAwF;AACxF,uFAAuF;AACvF,oFAAoF;AACpF,8EAA8E;AAC9E,sFAAsF;AACtF,qFAAqF;AACrF,4DAA4D;AAC5D,MAAM,gBAAgB,GACpB,2GAA2G,CAAA;AAC7G,2FAA2F;AAC3F,yFAAyF;AACzF,8CAA8C;AAC9C,MAAM,YAAY,GAChB,mHAAmH,CAAA;AAErH,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,mBAAwC,EACxC,YAA4B;IAE5B,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAChE,+EAA+E;IAC/E,uFAAuF;IACvF,mFAAmF;IACnF,kDAAkD;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,qBAAqB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IAExF,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAA;QAC5B,yEAAyE;QACzE,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAM;QAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;QACnD,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,gEAAgE;QAChE,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChF,uEAAuE;QACvE,MAAM,aAAa,GAAG,aAAa,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,IAAI,CAAA;QAC3E,wFAAwF;QACxF,uFAAuF;QACvF,oFAAoF;QACpF,qFAAqF;QACrF,0FAA0F;QAC1F,yFAAyF;QACzF,uFAAuF;QACvF,IAAI,UAAU,GAAG,KAAK,CAAA;QACtB,uEAAuE;QACvE,MAAM,EAAE,GAAG,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;QAC5C,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YAC7C,IAAI,yBAAyB,CAAC,UAAU,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACtD,UAAU,GAAG,gCAAgC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;YACvE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU;YAAE,OAAM,CAAC,uCAAuC;QAEjF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC3B,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;QACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;QAC9E,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,sBAAsB;YAC5B,6DAA6D;YAC7D,yEAAyE;YACzE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;YACvC,OAAO,EAAE,wEAAwE,KAAK,CAAC,CAAC,CAAC,GAAG;YAC5F,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACnC,UAAU;YACV,QAAQ,EAAE,sBAAsB;YAChC,sBAAsB,EAAE,YAAY;YACpC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;SAC1C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,eAAe,GAAG,6CAA6C,CAAA;AACrE,MAAM,uBAAuB,GAC3B,2EAA2E,CAAA;AAC7E,MAAM,sBAAsB,GAAG,0DAA0D,CAAA;AACzF,MAAM,8BAA8B,GAClC,6FAA6F,CAAA;AAE/F;;;;;;;;;GASG;AACH,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,CAAC,GACL,aAAa,CAAC,sBAAsB,EAAE,IAAI,CAAC;QAC3C,aAAa,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAA;IACrD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACjB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,YAA4B,EAC5B,iBAAiB,GAAG,KAAK;IAEzB,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,YAAY,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAChE,kEAAkE;IAClE,2EAA2E;IAC3E,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,qBAAqB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IAExF,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,KAAK,GACT,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,aAAa,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAA;QACtF,IAAI,CAAC,KAAK;YAAE,OAAM;QAElB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC3B,MAAM,YAAY,GAAG,GAAG,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAA;QACpF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAA;QAE9E,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,UAAU,GACd,yBAAyB,CAAC,UAAU,CAAC,CAAC,MAAM,IAAI,CAAC;YACjD,gCAAgC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;QAC1D,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,uCAAuC;QACvC,MAAM,QAAQ,GAAG,CAAC,YAAY,IAAI,UAAU,IAAI,CAAC,iBAAiB,CAAA;QAElE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YACjE,OAAO,EAAE,oEAAoE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;YAC7G,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACnC,UAAU,EAAE,KAAK,GAAG,CAAC;YACrB,QAAQ,EAAE,mBAAmB;YAC7B,sBAAsB,EAAE,YAAY;YACpC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;SAC1C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/src/security/scanner/SecurityScanner.d.ts

@@ -5,10 +5,12 @@
  */
 import type { ScanReport, ScannerOptions } from './types.js';
 import type { LineContext } from './SecurityScanner.helpers.js';
-import { analyzeMarkdownContext, isDocumentationContext, isWithinInlineCode, calculateRiskScore } from './SecurityScanner.helpers.js';
+import { analyzeMarkdownContext, isDocumentationContext, isWithinInlineCode } from './SecurityScanner.helpers.js';
+import { extractUrls } from './SecurityScanner.urls.js';
+import { calculateRiskScore } from './SecurityScanner.risk-score.js';
 import { scanSsrfPatterns } from './SecurityScanner.ssrf.js';
 import { toMinimalRefs, toSARIF, toGitHubAnnotations, toSummary } from './SecurityScanner.formatters.js';
-export { LineContext, analyzeMarkdownContext, isDocumentationContext, isWithinInlineCode, calculateRiskScore, };
+export { LineContext, analyzeMarkdownContext, isDocumentationContext, isWithinInlineCode, calculateRiskScore, extractUrls, };
 export { scanSsrfPatterns };
 export { toMinimalRefs, toSARIF, toGitHubAnnotations, toSummary };
 export declare class SecurityScanner {
@@ -17,7 +19,6 @@ export declare class SecurityScanner {
     private maxContentLength;
     private riskThreshold;
     constructor(options?: ScannerOptions);
-    private extractUrls;
     private isAllowedDomain;
     private scanUrls;
     private scanJailbreakPatterns;
@@ -25,7 +26,43 @@ export declare class SecurityScanner {
     private scanAIDefenceVulnerabilities;
     /** @deprecated Use standalone calculateRiskScore function for new code */
     calculateRiskScore: typeof calculateRiskScore;
-    scan(skillId: string, content: string): ScanReport;
+    /**
+     * Run every content-scanning detector against `content` and return the
+     * combined findings. Factored out of `scan()` (SMI-6033 Wave 2, Gap 2) so
+     * the encoded-payload detector's recursive rescan of DECODED content can
+     * reuse the exact same detector suite instead of a parallel, narrower
+     * reimplementation.
+     *
+     * `skipEncodedPayload` is the STRUCTURAL depth-1 recursion guarantee: the
+     * recursive callback passed to `scanEncodedPayload` below always calls this
+     * method with `skipEncodedPayload: true`, so a base64 blob discovered
+     * INSIDE already-decoded content can never itself be decoded — the inner
+     * call cannot reach `scanEncodedPayload` again no matter what the decoded
+     * text contains. This disables ONLY the encoded-payload detector on the
+     * inner call, not the rest of the suite — a decoded `curl|bash` still
+     * trips `code_execution`, decoded secrets still trip `sensitive_path`, etc.
+     */
+    private runDetectors;
+    /**
+     * SMI-6033 Wave 3 (Gap 5): `isHighTrustAuthor` (default `false`) is the
+     * Gatekeeper-bypass trust-tier carve-out — see `scanGatekeeperBypass`'s own
+     * header (`SecurityScanner.compound.ts`) for the full policy. No in-repo
+     * caller of this method currently has a verified author signal to pass
+     * here (the indexer scans via the edge twin, not this core class); the
+     * parameter exists so a future verified-author caller can opt in, and so
+     * every existing call site (skill_validate, skill_rescan,
+     * bundled-sibling-scan, skill-installation.*) defaults closed by
+     * construction, not by convention.
+     *
+     * SMI-6033 Wave 2 (Gap 8) fix (2026-08-17): `isMarkdown` defaults `true`,
+     * preserving byte-identical behavior for every existing caller. Pass
+     * `false` when `content` is a real source file, not markdown — see
+     * `analyzeMarkdownContext`'s own header (SecurityScanner.helpers.ts) for
+     * why the markdown-only indented-code-block heuristic must never apply to
+     * non-markdown content. `bundled-sibling-scan.ts`'s
+     * `collectExecutableCodeFiles` candidates are the first real caller.
+     */
+    scan(skillId: string, content: string, isHighTrustAuthor?: boolean, isMarkdown?: boolean): ScanReport;
     quickCheck(content: string): boolean;
     addAllowedDomain(domain: string): void;
     addBlockedPattern(pattern: RegExp): void;

package/dist/src/security/scanner/SecurityScanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SecurityScanner.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAmB,UAAU,EAAE,cAAc,EAAqB,MAAM,YAAY,CAAA;AAUhG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAEnB,MAAM,8BAA8B,CAAA;AAGrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AA0B5D,OAAO,EACL,aAAa,EACb,OAAO,EACP,mBAAmB,EACnB,SAAS,EACV,MAAM,iCAAiC,CAAA;AAGxC,OAAO,EACL,WAAW,EACX,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,GACnB,CAAA;AACD,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAC3B,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAA;AAEjE,qBAAa,eAAe;IAC1B,OAAO,CAAC,cAAc,CAAa;IACnC,OAAO,CAAC,eAAe,CAAU;IACjC,OAAO,CAAC,gBAAgB,CAAQ;IAChC,OAAO,CAAC,aAAa,CAAQ;gBAEjB,OAAO,GAAE,cAAmB;IAOxC,OAAO,CAAC,WAAW;IAenB,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,QAAQ;IAmBhB,OAAO,CAAC,qBAAqB;IAkB7B,OAAO,CAAC,sBAAsB;IA6D9B,OAAO,CAAC,4BAA4B;IAkBpC,0EAA0E;IAC1E,kBAAkB,4BAAqB;IAEvC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU;IA2FlD,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAOpC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAItC,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKxC,MAAM,CAAC,aAAa,uBAAgB;IACpC,MAAM,CAAC,OAAO,iBAAU;IACxB,MAAM,CAAC,mBAAmB,6BAAsB;IAChD,MAAM,CAAC,SAAS,mBAAY;CAC7B;AAED,eAAe,eAAe,CAAA"}
+{"version":3,"file":"SecurityScanner.d.ts","sourceRoot":"","sources":["../../../../src/security/scanner/SecurityScanner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAmB,UAAU,EAAE,cAAc,EAAqB,MAAM,YAAY,CAAA;AAUhG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAEnB,MAAM,8BAA8B,CAAA;AAErC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAEvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AAGpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAsC5D,OAAO,EACL,aAAa,EACb,OAAO,EACP,mBAAmB,EACnB,SAAS,EACV,MAAM,iCAAiC,CAAA;AAGxC,OAAO,EACL,WAAW,EACX,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,GACZ,CAAA;AACD,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAC3B,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAA;AAEjE,qBAAa,eAAe;IAC1B,OAAO,CAAC,cAAc,CAAa;IACnC,OAAO,CAAC,eAAe,CAAU;IACjC,OAAO,CAAC,gBAAgB,CAAQ;IAChC,OAAO,CAAC,aAAa,CAAQ;gBAEjB,OAAO,GAAE,cAAmB;IAOxC,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,QAAQ;IAmBhB,OAAO,CAAC,qBAAqB;IAkB7B,OAAO,CAAC,sBAAsB;IA6D9B,OAAO,CAAC,4BAA4B;IAkBpC,0EAA0E;IAC1E,kBAAkB,4BAAqB;IAEvC;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,YAAY;IAwGpB;;;;;;;;;;;;;;;;;;OAkBG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,UAAQ,EAAE,UAAU,UAAO,GAAG,UAAU;IA+ChG,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAOpC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAItC,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKxC,MAAM,CAAC,aAAa,uBAAgB;IACpC,MAAM,CAAC,OAAO,iBAAU;IACxB,MAAM,CAAC,mBAAmB,6BAAsB;IAChD,MAAM,CAAC,SAAS,mBAAY;CAC7B;AAED,eAAe,eAAe,CAAA"}