@streamblur/mcp 1.0.0 → 1.1.1

package/dist/src/index.js

@@ -3,6 +3,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
+const node_child_process_1 = require("node:child_process");
+const node_os_1 = require("node:os");
 const index_js_1 = require("@modelcontextprotocol/sdk/server/index.js");
 const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
 const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
@@ -142,7 +144,7 @@ function scanDirectory(dirPath, maxFiles = 500) {
     return results;
 }
 // ─── Server Setup ──────────────────────────────────────────────────────────
-const server = new index_js_1.Server({ name: "streamblur-mcp", version: "1.0.0" }, { capabilities: { tools: {} } });
+const server = new index_js_1.Server({ name: "streamblur-mcp", version: "1.1.0" }, { capabilities: { tools: {} } });
 server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => {
     const proActive = await isPro();
     const tools = [
@@ -198,6 +200,70 @@ server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => {
                 required: ["path"],
                 additionalProperties: false
             }
+        },
+        {
+            name: "scan_repo",
+            description: proActive
+                ? "Clones a GitHub repository to a temp directory, scans all source files for exposed secrets, returns findings with file paths and line numbers, then deletes the temp clone. Pro feature."
+                : "Clones a GitHub repo and scans all files for leaked secrets. Pro feature - set STREAMBLUR_LICENSE_KEY to unlock.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    repo_url: { type: "string", description: "GitHub repo URL (e.g. https://github.com/owner/repo)" },
+                    max_files: { type: "number", description: "Max files to scan (default 300)" }
+                },
+                required: ["repo_url"],
+                additionalProperties: false
+            }
+        },
+        {
+            name: "audit_env_file",
+            description: "Reads a .env file and returns a full security report: detected secrets, formatting issues, placeholder values, and rotation recommendations. File is not modified.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    path: { type: "string", description: "Path to .env file" }
+                },
+                required: ["path"],
+                additionalProperties: false
+            }
+        },
+        {
+            name: "check_gitignore",
+            description: "Checks a project directory .gitignore to verify that .env files, key files, and secret directories are properly excluded. Returns a security gap report.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    path: { type: "string", description: "Project root directory path" }
+                },
+                required: ["path"],
+                additionalProperties: false
+            }
+        },
+        {
+            name: "explain_detection",
+            description: "Given a detected secret type (e.g. stripe_secret_live, aws_access_key), explains what it is, the blast radius if leaked, and exactly where to go to revoke and rotate it immediately.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    type: { type: "string", description: "Secret type string from a scan result (e.g. openai_api_key)" }
+                },
+                required: ["type"],
+                additionalProperties: false
+            }
+        },
+        {
+            name: "generate_env_template",
+            description: "Generates a safe .env.example template with placeholder values and security comments for common project types.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    project_type: { type: "string", description: "Project type: nextjs, rails, django, express, nuxt, sveltekit" },
+                    services: { type: "array", items: { type: "string" }, description: "Additional services: stripe, openai, anthropic, supabase, firebase, aws, sendgrid, twilio" }
+                },
+                required: ["project_type"],
+                additionalProperties: false
+            }
         }
     ];
     return { tools };
@@ -280,6 +346,196 @@ server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
                 throw new types_js_1.McpError(types_js_1.ErrorCode.InternalError, `Could not scan directory: ${msg}`);
             }
         }
+        case "scan_repo": {
+            const proActive = await isPro();
+            if (!proActive) {
+                return {
+                    content: [{
+                            type: "text",
+                            text: "scan_repo is a StreamBlur Pro feature.\n\nSet STREAMBLUR_LICENSE_KEY to your Pro email or license key.\nGet Pro at https://streamblur.com/pricing - $2.99 one-time."
+                        }]
+                };
+            }
+            const repoUrl = args.repo_url;
+            if (typeof repoUrl !== "string" || !repoUrl.startsWith("http")) {
+                throw new types_js_1.McpError(types_js_1.ErrorCode.InvalidParams, "'repo_url' must be a valid GitHub URL");
+            }
+            const maxFiles = typeof args.max_files === "number" ? args.max_files : 300;
+            const tmpDir = (0, node_path_1.join)((0, node_os_1.tmpdir)(), "streamblur-scan-" + Date.now());
+            try {
+                (0, node_fs_1.mkdirSync)(tmpDir, { recursive: true });
+                (0, node_child_process_1.execSync)(`git clone --depth 1 "${repoUrl}" "${tmpDir}"`, { timeout: 60000, stdio: "pipe" });
+                const results = scanDirectory(tmpDir, maxFiles);
+                if (results.length === 0) {
+                    return { content: [{ type: "text", text: `No secrets detected in ${repoUrl}` }] };
+                }
+                const summary = results.map(r => `${r.file.replace(tmpDir + "/", "")}\n${r.detections.map((d) => `  Line ${d.line}:${d.column} - ${d.type}`).join("\n")}`).join("\n\n");
+                return {
+                    content: [{
+                            type: "text",
+                            text: `Found secrets in ${results.length} file(s) in ${repoUrl}:\n\n${summary}`
+                        }]
+                };
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                throw new types_js_1.McpError(types_js_1.ErrorCode.InternalError, `Repo scan failed: ${msg}`);
+            }
+            finally {
+                try {
+                    (0, node_fs_1.rmSync)(tmpDir, { recursive: true, force: true });
+                }
+                catch { /* cleanup */ }
+            }
+        }
+        case "audit_env_file": {
+            const filePath = args.path;
+            if (typeof filePath !== "string") {
+                throw new types_js_1.McpError(types_js_1.ErrorCode.InvalidParams, "'path' must be a string");
+            }
+            try {
+                const content = (0, node_fs_1.readFileSync)(filePath, "utf8");
+                const lines = content.split("\n");
+                const issues = [];
+                const secrets = [];
+                const placeholders = [];
+                for (let i = 0; i < lines.length; i++) {
+                    const line = lines[i].trim();
+                    if (!line || line.startsWith("#"))
+                        continue;
+                    const eqIdx = line.indexOf("=");
+                    if (eqIdx === -1) {
+                        issues.push(`Line ${i + 1}: Missing = sign: ${line}`);
+                        continue;
+                    }
+                    const key = line.slice(0, eqIdx).trim();
+                    const val = line.slice(eqIdx + 1).trim();
+                    if (/\s/.test(key))
+                        issues.push(`Line ${i + 1}: Key has spaces: ${key}`);
+                    if (val === "" || val === '""' || val === "''")
+                        issues.push(`Line ${i + 1}: Empty value for ${key}`);
+                    if (/^(your[_-]|xxx|placeholder|changeme|todo|replace|insert|example)/i.test(val.replace(/['"]/g, ""))) {
+                        placeholders.push(`Line ${i + 1}: ${key} has placeholder value`);
+                    }
+                    const detected = (0, redact_1.scanText)(line);
+                    if (detected.length > 0) {
+                        secrets.push(`Line ${i + 1}: ${key} - detected as ${detected.map((d) => d.type).join(", ")}`);
+                    }
+                }
+                let report = `Env File Audit: ${filePath}\n${"=".repeat(40)}\n`;
+                report += `Lines: ${lines.length} | Variables: ${lines.filter(l => l.includes("=") && !l.startsWith("#")).length}\n\n`;
+                if (secrets.length > 0)
+                    report += `SECRETS DETECTED (${secrets.length}):\n${secrets.join("\n")}\n\n`;
+                if (issues.length > 0)
+                    report += `FORMAT ISSUES (${issues.length}):\n${issues.join("\n")}\n\n`;
+                if (placeholders.length > 0)
+                    report += `PLACEHOLDERS (${placeholders.length}):\n${placeholders.join("\n")}\n\n`;
+                if (secrets.length === 0 && issues.length === 0)
+                    report += `No issues found. File looks clean.\n`;
+                report += `\nReminder: ensure this file is in .gitignore and never committed to version control.`;
+                return { content: [{ type: "text", text: report }] };
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                throw new types_js_1.McpError(types_js_1.ErrorCode.InternalError, `Could not read file: ${msg}`);
+            }
+        }
+        case "check_gitignore": {
+            const dirPath = args.path;
+            if (typeof dirPath !== "string") {
+                throw new types_js_1.McpError(types_js_1.ErrorCode.InvalidParams, "'path' must be a string");
+            }
+            const gitignorePath = (0, node_path_1.join)(dirPath, ".gitignore");
+            const mustIgnore = [".env", ".env.local", ".env.production", ".env.*.local", "*.pem", "*.key", ".secret"];
+            const shouldIgnore = [".env.development", ".env.staging", "secrets/", "credentials/"];
+            try {
+                if (!(0, node_fs_1.existsSync)(gitignorePath)) {
+                    return {
+                        content: [{
+                                type: "text",
+                                text: `No .gitignore found in ${dirPath}.\n\nCRITICAL: Create a .gitignore immediately and add:\n${mustIgnore.join("\n")}`
+                            }]
+                    };
+                }
+                const content = (0, node_fs_1.readFileSync)(gitignorePath, "utf8");
+                const missing = mustIgnore.filter(p => !content.includes(p));
+                const suggested = shouldIgnore.filter(p => !content.includes(p));
+                let report = `.gitignore Audit: ${gitignorePath}\n${"=".repeat(40)}\n`;
+                if (missing.length === 0) {
+                    report += `All critical patterns are covered.\n`;
+                }
+                else {
+                    report += `CRITICAL - Missing patterns (add these NOW):\n${missing.map(p => `  ${p}`).join("\n")}\n\n`;
+                }
+                if (suggested.length > 0) {
+                    report += `Recommended additions:\n${suggested.map(p => `  ${p}`).join("\n")}\n`;
+                }
+                return { content: [{ type: "text", text: report }] };
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                throw new types_js_1.McpError(types_js_1.ErrorCode.InternalError, `Could not check gitignore: ${msg}`);
+            }
+        }
+        case "explain_detection": {
+            const detectionType = args.type;
+            if (typeof detectionType !== "string") {
+                throw new types_js_1.McpError(types_js_1.ErrorCode.InvalidParams, "'type' must be a string");
+            }
+            const explanations = {
+                openai_api_key: { name: "OpenAI API Key", risk: "HIGH - Full API access. Attacker can run unlimited GPT-4 requests at your expense. Costs can hit thousands of dollars within hours.", action: "1. Go to platform.openai.com/api-keys\n2. Delete the exposed key immediately\n3. Create a new key\n4. Update all services using the old key", url: "https://platform.openai.com/api-keys" },
+                anthropic_api_key: { name: "Anthropic API Key", risk: "HIGH - Full Claude API access. Unauthorized usage billed to your account.", action: "1. Go to console.anthropic.com/settings/keys\n2. Delete the exposed key\n3. Generate a new key\n4. Update environment variables", url: "https://console.anthropic.com/settings/keys" },
+                stripe_secret_live: { name: "Stripe Live Secret Key", risk: "CRITICAL - Full access to your Stripe account. Attacker can create charges, issue refunds, access customer data, and drain your balance.", action: "1. Go to dashboard.stripe.com/apikeys\n2. Roll (rotate) the key immediately\n3. Update all integrations", url: "https://dashboard.stripe.com/apikeys" },
+                aws_access_key: { name: "AWS Access Key ID", risk: "CRITICAL - Combined with secret key, gives full AWS account access. Can spin up infrastructure, access S3 data, and incur massive costs.", action: "1. Go to AWS IAM console\n2. Deactivate the key immediately\n3. Create new credentials\n4. Check CloudTrail for unauthorized activity", url: "https://console.aws.amazon.com/iam/home#/security_credentials" },
+                github_pat: { name: "GitHub Personal Access Token", risk: "HIGH - Can access private repos, commit code, read secrets in Actions, and depending on scope, full org access.", action: "1. Go to github.com/settings/tokens\n2. Delete the exposed token immediately\n3. Audit recent activity on affected repos", url: "https://github.com/settings/tokens" },
+                discord_bot_token: { name: "Discord Bot Token", risk: "MEDIUM-HIGH - Full control of the bot. Can read all messages the bot has access to, send messages as the bot, manage channels.", action: "1. Go to discord.com/developers/applications\n2. Select your app > Bot > Reset Token\n3. Update your deployment with the new token", url: "https://discord.com/developers/applications" },
+                stripe_secret_test: { name: "Stripe Test Secret Key", risk: "LOW - Test mode only, no real money. Best practice to rotate anyway.", action: "1. Go to dashboard.stripe.com/apikeys\n2. Roll the test key", url: "https://dashboard.stripe.com/apikeys" },
+                google_api_key: { name: "Google API Key", risk: "MEDIUM-HIGH - Depending on enabled APIs, can incur costs or expose data.", action: "1. Go to console.cloud.google.com/apis/credentials\n2. Delete or restrict the key\n3. Create a new restricted key", url: "https://console.cloud.google.com/apis/credentials" },
+                huggingface_token: { name: "Hugging Face Token", risk: "MEDIUM - Access to models, datasets, and spaces under your account.", action: "1. Go to huggingface.co/settings/tokens\n2. Delete the exposed token\n3. Create a new one", url: "https://huggingface.co/settings/tokens" },
+                supabase_service_role_key: { name: "Supabase Service Role Key", risk: "CRITICAL - Bypasses Row Level Security entirely. Full read/write access to all database tables.", action: "1. Go to supabase.com/dashboard > Project Settings > API\n2. Rotate the service role key\n3. Update all server-side integrations", url: "https://supabase.com/dashboard" },
+            };
+            const info = explanations[detectionType];
+            if (!info) {
+                return {
+                    content: [{
+                            type: "text",
+                            text: `Detection type: ${detectionType}\n\nNo specific guidance available for this type yet.\n\nGeneral advice:\n- Treat it as potentially sensitive\n- Search your provider dashboard for API keys or tokens section\n- Revoke/rotate the value immediately\n- Check logs for unauthorized usage\n- Update all services using the old value`
+                        }]
+                };
+            }
+            return {
+                content: [{
+                        type: "text",
+                        text: `${info.name}\n${"=".repeat(info.name.length)}\n\nRisk: ${info.risk}\n\nImmediate action:\n${info.action}\n\nDashboard: ${info.url}`
+                    }]
+            };
+        }
+        case "generate_env_template": {
+            const projectType = (args.project_type || "nextjs").toLowerCase();
+            const services = Array.isArray(args.services) ? args.services : [];
+            const templates = {
+                nextjs: `# Next.js Environment Variables\n# Copy to .env.local - NEVER commit .env.local to git\n\n# App\nNEXT_PUBLIC_APP_URL=http://localhost:3000\nNEXT_PUBLIC_APP_NAME=your-app-name\n\n# Database\nDATABASE_URL=postgresql://user:password@localhost:5432/dbname`,
+                express: `# Express Environment Variables\n# Copy to .env - NEVER commit .env to git\n\nNODE_ENV=development\nPORT=3000\n\n# Database\nDATABASE_URL=postgresql://user:password@localhost:5432/dbname\n\n# Session\nSESSION_SECRET=replace-with-random-32-char-string`,
+                django: `# Django Environment Variables\n# Copy to .env - NEVER commit .env to git\n\nDJANGO_SECRET_KEY=replace-with-50-char-random-string\nDEBUG=True\nALLOWED_HOSTS=localhost,127.0.0.1\n\n# Database\nDATABASE_URL=postgresql://user:password@localhost:5432/dbname`,
+                rails: `# Rails Environment Variables\n# Copy to .env - NEVER commit .env to git\n\nRAILS_ENV=development\nSECRET_KEY_BASE=replace-with-rails-credentials-output\n\n# Database\nDATABASE_URL=postgresql://user:password@localhost:5432/dbname`,
+                nuxt: `# Nuxt Environment Variables\n# Copy to .env - NEVER commit .env to git\n\nNUXT_PUBLIC_SITE_URL=http://localhost:3000\nNUXT_SECRET_KEY=replace-with-random-32-char-string`,
+                sveltekit: `# SvelteKit Environment Variables\n# Copy to .env - NEVER commit .env to git\n\nPUBLIC_APP_URL=http://localhost:5173\nPRIVATE_SECRET_KEY=replace-with-random-32-char-string`,
+            };
+            const serviceAdditions = {
+                stripe: `\n# Stripe\nSTRIPE_SECRET_KEY=sk_test_replace-with-your-stripe-test-key\nSTRIPE_PUBLISHABLE_KEY=pk_test_replace-with-your-stripe-publishable-key\nSTRIPE_WEBHOOK_SECRET=whsec_replace-with-your-webhook-secret`,
+                openai: `\n# OpenAI\nOPENAI_API_KEY=sk-proj-replace-with-your-openai-key`,
+                anthropic: `\n# Anthropic\nANTHROPIC_API_KEY=sk-ant-replace-with-your-anthropic-key`,
+                supabase: `\n# Supabase\nNEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co\nNEXT_PUBLIC_SUPABASE_ANON_KEY=eyJ-replace-with-anon-key\nSUPABASE_SERVICE_ROLE_KEY=eyJ-replace-with-service-role-key-KEEP-SECRET`,
+                firebase: `\n# Firebase\nFIREBASE_PROJECT_ID=your-project-id\nFIREBASE_CLIENT_EMAIL=firebase-adminsdk@your-project.iam.gserviceaccount.com\nFIREBASE_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\\nreplace\\n-----END PRIVATE KEY-----\\n"`,
+                aws: `\n# AWS\nAWS_ACCESS_KEY_ID=AKIA-replace-with-your-key\nAWS_SECRET_ACCESS_KEY=replace-with-your-secret\nAWS_REGION=us-east-1`,
+                sendgrid: `\n# SendGrid\nSENDGRID_API_KEY=SG.replace-with-your-sendgrid-key`,
+                twilio: `\n# Twilio\nTWILIO_ACCOUNT_SID=AC-replace-with-your-account-sid\nTWILIO_AUTH_TOKEN=replace-with-your-auth-token`,
+            };
+            const base = templates[projectType] || templates["nextjs"];
+            const additions = services.map((s) => serviceAdditions[s] || "").join("");
+            const result = base + additions + "\n\n# Add this file to .gitignore:\n# echo '.env.local' >> .gitignore";
+            return { content: [{ type: "text", text: result }] };
+        }
         default:
             throw new types_js_1.McpError(types_js_1.ErrorCode.MethodNotFound, `Unknown tool: ${request.params.name}`);
     }

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAEA,qCAA8D;AAC9D,yCAA0C;AAC1C,wEAAmE;AACnE,wEAAiF;AACjF,iEAK4C;AAC5C,qCAAgD;AAEhD,8EAA8E;AAE9E,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;AAC7D,IAAI,YAAY,GAAmB,IAAI,CAAC,CAAC,yBAAyB;AAElE,KAAK,UAAU,eAAe,CAAC,KAAa;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qDAAqD,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YAC/B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAyB,CAAC;QACrD,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,KAAK;IAClB,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,YAAY,GAAG,KAAK,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,8DAA8D;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,4DAA4D,EAAE;gBACpF,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;gBACjD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA0C,CAAC;gBACtE,YAAY,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,8EAA8E;AAE9E,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;IACtE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;IACtE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI;IAC/D,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CACpD,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ;IACjE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM;CAC/D,CAAC,CAAC;AAOH,SAAS,aAAa,CAAC,OAAe,EAAE,QAAQ,GAAG,GAAG;IACpD,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,SAAS,IAAI,CAAC,OAAe;QAC3B,IAAI,SAAS,IAAI,QAAQ;YAAE,OAAO;QAElC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,IAAA,qBAAW,EAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,SAAS,IAAI,QAAQ;gBAAE,MAAM;YACjC,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAE3C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAChD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS;oBAAE,SAAS;gBAE3D,IAAI,IAAI,GAAG,CAAC,CAAC;gBACb,IAAI,CAAC;oBAAC,IAAI,GAAG,IAAA,kBAAQ,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC3D,IAAI,IAAI,GAAG,MAAO;oBAAE,SAAS,CAAC,qBAAqB;gBAEnD,SAAS,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAC/C,MAAM,UAAU,GAAG,IAAA,iBAAQ,EAAC,OAAO,CAAC,CAAC;oBACrC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAClC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;4BAChC,IAAI,KAAK,GAAG,CAAC,CAAC;4BACd,IAAI,OAAO,GAAG,CAAC,CAAC;4BAChB,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;4BAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gCACzB,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;oCACnC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;oCACtB,MAAM;gCACR,CAAC;gCACD,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;gCACzB,OAAO,EAAE,CAAC;4BACZ,CAAC;4BACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;wBACtD,CAAC,CAAC,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,CAAC;IACd,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAE9E,MAAM,MAAM,GAAG,IAAI,iBAAM,CACvB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,EAC5C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;AAEF,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,IAAI,EAAE;IAC1D,MAAM,SAAS,GAAG,MAAM,KAAK,EAAE,CAAC;IAEhC,MAAM,KAAK,GAAG;QACZ;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,2GAA2G;YACxH,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;iBACxD;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD;YACE,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,qHAAqH;YAClI,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;iBACtD;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,SAAS;gBACpB,CAAC,CAAC,sHAAsH;gBACxH,CAAC,CAAC,wLAAwL;YAC5L,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;iBAC3E;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,SAAS;gBACpB,CAAC,CAAC,mLAAmL;gBACrL,CAAC,CAAC,+LAA+L;YACnM,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;oBAC/D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;iBAC9E;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;KACF,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,iBAAiB,CAAC,gCAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IAE5C,QAAQ,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAE5B,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAA,mBAAU,EAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjE,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,UAAU,GAAG,IAAA,iBAAQ,EAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC1C,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,GAAG,EAAE,CAAC,CAAC,GAAG;aACX,CAAC,CAAC,CAAC;YACJ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACpF,CAAC;QAED,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,SAAS,GAAG,MAAM,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,+MAA+M;yBACtN,CAAC;iBACH,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC3C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAA,mBAAU,EAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACpE,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,wBAAwB,GAAG,EAAE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,SAAS,GAAG,MAAM,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,kNAAkN;yBACzN,CAAC;iBACH,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC,EAAE,CAAC;gBACtF,CAAC;gBACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC9B,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7F,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,uBAAuB,OAAO,CAAC,MAAM,gBAAgB,OAAO,EAAE;yBACrE,CAAC;iBACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,6BAA6B,GAAG,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAED;YACE,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,cAAc,EAAE,iBAAiB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAEA,qCAA6F;AAC7F,yCAA0C;AAC1C,2DAA8C;AAC9C,qCAAiC;AACjC,wEAAmE;AACnE,wEAAiF;AACjF,iEAK4C;AAC5C,qCAAgD;AAEhD,8EAA8E;AAE9E,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;AAC7D,IAAI,YAAY,GAAmB,IAAI,CAAC,CAAC,yBAAyB;AAElE,KAAK,UAAU,eAAe,CAAC,KAAa;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qDAAqD,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YAC/B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAyB,CAAC;QACrD,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,KAAK;IAClB,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,YAAY,GAAG,KAAK,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,8DAA8D;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,4DAA4D,EAAE;gBACpF,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;gBACjD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA0C,CAAC;gBACtE,YAAY,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,8EAA8E;AAE9E,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;IACtE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;IACtE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI;IAC/D,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CACpD,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ;IACjE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM;CAC/D,CAAC,CAAC;AAOH,SAAS,aAAa,CAAC,OAAe,EAAE,QAAQ,GAAG,GAAG;IACpD,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,SAAS,IAAI,CAAC,OAAe;QAC3B,IAAI,SAAS,IAAI,QAAQ;YAAE,OAAO;QAElC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,IAAA,qBAAW,EAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,SAAS,IAAI,QAAQ;gBAAE,MAAM;YACjC,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAE3C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAChD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS;oBAAE,SAAS;gBAE3D,IAAI,IAAI,GAAG,CAAC,CAAC;gBACb,IAAI,CAAC;oBAAC,IAAI,GAAG,IAAA,kBAAQ,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC3D,IAAI,IAAI,GAAG,MAAO;oBAAE,SAAS,CAAC,qBAAqB;gBAEnD,SAAS,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAC/C,MAAM,UAAU,GAAG,IAAA,iBAAQ,EAAC,OAAO,CAAC,CAAC;oBACrC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAClC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;4BAChC,IAAI,KAAK,GAAG,CAAC,CAAC;4BACd,IAAI,OAAO,GAAG,CAAC,CAAC;4BAChB,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;4BAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gCACzB,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;oCACnC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;oCACtB,MAAM;gCACR,CAAC;gCACD,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;gCACzB,OAAO,EAAE,CAAC;4BACZ,CAAC;4BACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;wBACtD,CAAC,CAAC,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,CAAC;IACd,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAE9E,MAAM,MAAM,GAAG,IAAI,iBAAM,CACvB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,EAC5C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;AAEF,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,IAAI,EAAE;IAC1D,MAAM,SAAS,GAAG,MAAM,KAAK,EAAE,CAAC;IAEhC,MAAM,KAAK,GAAG;QACZ;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,2GAA2G;YACxH,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;iBACxD;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD;YACE,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,qHAAqH;YAClI,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;iBACtD;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,SAAS;gBACpB,CAAC,CAAC,sHAAsH;gBACxH,CAAC,CAAC,wLAAwL;YAC5L,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;iBAC3E;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,SAAS;gBACpB,CAAC,CAAC,mLAAmL;gBACrL,CAAC,CAAC,+LAA+L;YACnM,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;oBAC/D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;iBAC9E;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD;YACE,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,SAAS;gBACpB,CAAC,CAAC,0LAA0L;gBAC5L,CAAC,CAAC,kHAAkH;YACtH,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sDAAsD,EAAE;oBACjG,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;iBAC9E;gBACD,QAAQ,EAAE,CAAC,UAAU,CAAC;gBACtB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,oKAAoK;YACjL,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;iBAC3D;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,0JAA0J;YACvK,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;iBACrE;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,uLAAuL;YACpM,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6DAA6D,EAAE;iBACrG;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;SACF;QACD;YACE,IAAI,EAAE,uBAAuB;YAC7B,WAAW,EAAE,gHAAgH;YAC7H,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+DAA+D,EAAE;oBAC9G,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,2FAA2F,EAAE;iBACjK;gBACD,QAAQ,EAAE,CAAC,cAAc,CAAC;gBAC1B,oBAAoB,EAAE,KAAK;aAC5B;SACF;KACF,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,iBAAiB,CAAC,gCAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IAE5C,QAAQ,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAE5B,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAA,mBAAU,EAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjE,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,UAAU,GAAG,IAAA,iBAAQ,EAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC1C,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,GAAG,EAAE,CAAC,CAAC,GAAG;aACX,CAAC,CAAC,CAAC;YACJ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACpF,CAAC;QAED,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,SAAS,GAAG,MAAM,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,+MAA+M;yBACtN,CAAC;iBACH,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC3C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAA,mBAAU,EAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACpE,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,wBAAwB,GAAG,EAAE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,SAAS,GAAG,MAAM,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,kNAAkN;yBACzN,CAAC;iBACH,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC,EAAE,CAAC;gBACtF,CAAC;gBACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC9B,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7F,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,uBAAuB,OAAO,CAAC,MAAM,gBAAgB,OAAO,EAAE;yBACrE,CAAC;iBACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,6BAA6B,GAAG,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,qKAAqK;yBAC5K,CAAC;iBACH,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;YAC3E,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC;gBACH,IAAA,mBAAS,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,IAAA,6BAAQ,EAAC,wBAAwB,OAAO,MAAM,MAAM,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC5F,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;gBACpF,CAAC;gBACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC9B,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAiD,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,oBAAoB,OAAO,CAAC,MAAM,eAAe,OAAO,QAAQ,OAAO,EAAE;yBAChF,CAAC;iBACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,qBAAqB,GAAG,EAAE,CAAC,CAAC;YAC1E,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBAAC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,MAAM,YAAY,GAAa,EAAE,CAAC;gBAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAC,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBACpF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;oBACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBACzC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAC,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;oBACvE,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI;wBAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAC,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;oBACnG,IAAI,mEAAmE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;wBACvG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAC,CAAC,KAAK,GAAG,wBAAwB,CAAC,CAAC;oBACjE,CAAC;oBACD,MAAM,QAAQ,GAAG,IAAA,iBAAQ,EAAC,IAAI,CAAC,CAAC;oBAChC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACxB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAC,CAAC,KAAK,GAAG,kBAAkB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAChH,CAAC;gBACH,CAAC;gBAED,IAAI,MAAM,GAAG,mBAAmB,QAAQ,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;gBAChE,MAAM,IAAI,UAAU,KAAK,CAAC,MAAM,iBAAiB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC;gBACvH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,qBAAqB,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBACrG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,kBAAkB,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC/F,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,iBAAiB,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBAChH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,sCAAsC,CAAC;gBAClG,MAAM,IAAI,uFAAuF,CAAC;gBAElG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YACvD,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,wBAAwB,GAAG,EAAE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,aAAa,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YAC1G,MAAM,YAAY,GAAG,CAAC,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YAEtF,IAAI,CAAC;gBACH,IAAI,CAAC,IAAA,oBAAU,EAAC,aAAa,CAAC,EAAE,CAAC;oBAC/B,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,0BAA0B,OAAO,4DAA4D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;6BAC3H,CAAC;qBACH,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7D,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjE,IAAI,MAAM,GAAG,qBAAqB,aAAa,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;gBACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,sCAAsC,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,iDAAiD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBACzG,CAAC;gBACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,2BAA2B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACnF,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YACvD,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,8BAA8B,GAAG,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC;YAChC,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,YAAY,GAAgF;gBAChG,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,qIAAqI,EAAE,MAAM,EAAE,6IAA6I,EAAE,GAAG,EAAE,sCAAsC,EAAE;gBAC3X,iBAAiB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,2EAA2E,EAAE,MAAM,EAAE,iIAAiI,EAAE,GAAG,EAAE,6CAA6C,EAAE;gBAClU,kBAAkB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,0IAA0I,EAAE,MAAM,EAAE,yGAAyG,EAAE,GAAG,EAAE,sCAAsC,EAAE;gBACxW,cAAc,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,0IAA0I,EAAE,MAAM,EAAE,uIAAuI,EAAE,GAAG,EAAE,+DAA+D,EAAE;gBACtZ,UAAU,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,iHAAiH,EAAE,MAAM,EAAE,0HAA0H,EAAE,GAAG,EAAE,oCAAoC,EAAE;gBAC5V,iBAAiB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,gIAAgI,EAAE,MAAM,EAAE,oIAAoI,EAAE,GAAG,EAAE,6CAA6C,EAAE;gBAC1X,kBAAkB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,sEAAsE,EAAE,MAAM,EAAE,6DAA6D,EAAE,GAAG,EAAE,sCAAsC,EAAE;gBACxP,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,0EAA0E,EAAE,MAAM,EAAE,mHAAmH,EAAE,GAAG,EAAE,mDAAmD,EAAE;gBACnT,iBAAiB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,qEAAqE,EAAE,MAAM,EAAE,2FAA2F,EAAE,GAAG,EAAE,wCAAwC,EAAE;gBAClR,yBAAyB,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,iGAAiG,EAAE,MAAM,EAAE,kIAAkI,EAAE,GAAG,EAAE,gCAAgC,EAAE;aAC7V,CAAC;YAEF,MAAM,IAAI,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,mBAAmB,aAAa,uSAAuS;yBAC9U,CAAC;iBACH,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,IAAI,0BAA0B,IAAI,CAAC,MAAM,kBAAkB,IAAI,CAAC,GAAG,EAAE;qBAC3I,CAAC;aACH,CAAC;QACJ,CAAC;QAED,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,YAAsB,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;YAE/E,MAAM,SAAS,GAA2B;gBACxC,MAAM,EAAE,6PAA6P;gBACrQ,OAAO,EAAE,4PAA4P;gBACrQ,MAAM,EAAE,+PAA+P;gBACvQ,KAAK,EAAE,uOAAuO;gBAC9O,IAAI,EAAE,2KAA2K;gBACjL,SAAS,EAAE,6KAA6K;aACzL,CAAC;YAEF,MAAM,gBAAgB,GAA2B;gBAC/C,MAAM,EAAE,gNAAgN;gBACxN,MAAM,EAAE,iEAAiE;gBACzE,SAAS,EAAE,yEAAyE;gBACpF,QAAQ,EAAE,2MAA2M;gBACrN,QAAQ,EAAE,8NAA8N;gBACxO,GAAG,EAAE,6HAA6H;gBAClI,QAAQ,EAAE,kEAAkE;gBAC5E,MAAM,EAAE,iHAAiH;aAC1H,CAAC;YAEF,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClF,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,uEAAuE,CAAC;YAE1G,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACvD,CAAC;QAED;YACE,MAAM,IAAI,mBAAQ,CAAC,oBAAS,CAAC,cAAc,EAAE,iBAAiB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/patterns.js

@@ -12,7 +12,7 @@ exports.credentialPatterns = [
     { type: "aws_access_key", regex: /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g },
     { type: "aws_secret_key", regex: /\b(?:AWS_SECRET_ACCESS_KEY|aws_secret_access_key)\s*[:=]\s*['\"]?[A-Za-z0-9\/+=]{40}['\"]?/g },
     { type: "aws_secret_key_raw", regex: /\b[A-Za-z0-9\/+=]{40}\b/g },
-    { type: "google_api_key", regex: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+    { type: "google_api_key", regex: /\bAIza[0-9A-Za-z_-]{30,40}\b/g },
     { type: "stripe_secret_live", regex: /\bsk_live_[A-Za-z0-9]{16,120}\b/g },
     { type: "stripe_publishable_live", regex: /\bpk_live_[A-Za-z0-9]{16,120}\b/g },
     { type: "stripe_secret_test", regex: /\bsk_test_[A-Za-z0-9]{16,120}\b/g },
@@ -24,7 +24,7 @@ exports.credentialPatterns = [
     { type: "slack_bot_token", regex: /\bxoxb-[0-9A-Za-z-]{20,120}\b/g },
     { type: "slack_user_token", regex: /\bxoxp-[0-9A-Za-z-]{20,120}\b/g },
     { type: "slack_session_token", regex: /\bxoxs-[0-9A-Za-z-]{20,120}\b/g },
-    { type: "discord_bot_token", regex: /\b[A-Za-z\d_-]{24}\.[A-Za-z\d_-]{6}\.[A-Za-z\d_-]{27}\b/g },
+    { type: "discord_bot_token", regex: /\b[A-Za-z\d_-]{23,28}\.[A-Za-z\d_-]{6}\.[A-Za-z\d_-]{27,38}\b/g },
     { type: "jwt_token", regex: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g },
     { type: "postgres_url", regex: /\bpostgres(?:ql)?:\/\/[^\s'"`]+:[^\s'"`]+@[^\s'"`]+\b/g },
     { type: "mysql_url", regex: /\bmysql:\/\/[^\s'"`]+:[^\s'"`]+@[^\s'"`]+\b/g },
@@ -37,7 +37,7 @@ exports.credentialPatterns = [
     { type: "openssh_private_key", regex: /-----BEGIN OPENSSH PRIVATE KEY-----[\s\S]+?-----END OPENSSH PRIVATE KEY-----/g },
     { type: "dsa_private_key", regex: /-----BEGIN DSA PRIVATE KEY-----[\s\S]+?-----END DSA PRIVATE KEY-----/g },
     { type: "authorization_bearer", regex: /Authorization\s*:\s*Bearer\s+[A-Za-z0-9._-]{12,}/gi },
-    { type: "firebase_web_api_key", regex: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+    { type: "firebase_web_api_key", regex: /\bAIza[0-9A-Za-z_-]{30,40}\b/g },
     { type: "firebase_db_url", regex: /\bhttps:\/\/[a-z0-9-]+\.firebaseio\.com\b/gi },
     { type: "firebase_service_account", regex: /"type"\s*:\s*"service_account"[\s\S]*?"private_key"\s*:\s*"-----BEGIN PRIVATE KEY-----[\s\S]*?-----END PRIVATE KEY-----\\n"/g },
     { type: "netlify_token", regex: /\bnfp_[A-Za-z0-9]{20,120}\b/g },
@@ -68,6 +68,26 @@ exports.credentialPatterns = [
     { type: "oauth_refresh_token", regex: /\b1\/\/[A-Za-z0-9_-]{20,}\b/g },
     { type: "mailgun_api_key", regex: /\bkey-[A-Za-z0-9]{32}\b/g },
     { type: "shopify_access_token", regex: /\bshpat_[A-Za-z0-9]{20,120}\b/g },
-    { type: "gitlab_token", regex: /\bglpat-[A-Za-z0-9_-]{20,120}\b/g }
+    { type: "gitlab_token", regex: /\bglpat-[A-Za-z0-9_-]{20,120}\b/g },
+    // AI/ML platforms
+    { type: "huggingface_token", regex: /\bhf_[A-Za-z0-9]{20,120}\b/g },
+    { type: "replicate_token", regex: /\br8_[A-Za-z0-9]{20,120}\b/g },
+    { type: "together_ai_key", regex: /\b(?:TOGETHER_API_KEY|together_api_key)\s*[:=]\s*['"\\]?[A-Za-z0-9]{32,120}['"\\]?/g },
+    { type: "groq_api_key", regex: /\bgsk_[A-Za-z0-9]{20,120}\b/g },
+    { type: "cohere_api_key", regex: /\b(?:COHERE_API_KEY|co-[A-Za-z0-9]{32,120})\b/g },
+    { type: "elevenlabs_api_key", regex: /\b(?:ELEVENLABS_API_KEY|XI_API_KEY)\s*[:=]\s*['"\\]?[A-Za-z0-9]{32,120}['"\\]?/g },
+    { type: "pinecone_api_key", regex: /\b(?:PINECONE_API_KEY)\s*[:=]\s*['"\\]?[A-Za-z0-9-]{20,120}['"\\]?/g },
+    // Database/infra platforms
+    { type: "supabase_service_role_key", regex: /\b(?:SUPABASE_SERVICE_ROLE_KEY|supabase_service_role_key)\s*[:=]\s*['"\\]?eyJ[A-Za-z0-9_-]{50,}['"\\]?/g },
+    { type: "planetscale_token", regex: /\bpscale_tkn_[A-Za-z0-9]{20,120}\b/g },
+    { type: "railway_token", regex: /\b(?:RAILWAY_TOKEN|RAILWAY_API_KEY)\s*[:=]\s*['"\\]?[A-Za-z0-9-]{20,120}['"\\]?/g },
+    // Dev tools
+    { type: "resend_api_key", regex: /\bre_[A-Za-z0-9]{20,120}\b/g },
+    { type: "linear_api_key", regex: /\blin_api_[A-Za-z0-9]{20,120}\b/g },
+    { type: "notion_api_key", regex: /\bsecret_[A-Za-z0-9]{40,120}\b/g },
+    { type: "airtable_api_key", regex: /\bpat[A-Za-z0-9]{14}\.[A-Za-z0-9]{64}\b/g },
+    { type: "doppler_token", regex: /\bdp\.pt\.[A-Za-z0-9]{40,120}\b/g },
+    { type: "pulumi_access_token", regex: /\bpul-[A-Za-z0-9]{40,120}\b/g },
+    { type: "cursor_session_token", regex: /\b(?:CURSOR_SESSION_TOKEN|cursor_session)\s*[:=]\s*['"\\]?[A-Za-z0-9._-]{20,120}['"\\]?/g }
 ];
 //# sourceMappingURL=patterns.js.map

package/dist/src/patterns.js.map

@@ -1 +1 @@
-{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../src/patterns.ts"],"names":[],"mappings":";;;AAKa,QAAA,kBAAkB,GAAwB;IACrD,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,qCAAqC,EAAE;IAC3E,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IACvE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,6BAA6B,EAAE;IAEhE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,kCAAkC,EAAE;IACjE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACnE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACnE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAEnE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IACnE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,6FAA6F,EAAE;IAChI,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,0BAA0B,EAAE;IAEjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,4BAA4B,EAAE;IAE/D,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,kCAAkC,EAAE;IACzE,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,kCAAkC,EAAE;IAC9E,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,kCAAkC,EAAE;IACzE,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,kCAAkC,EAAE;IAE7E,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,sBAAsB,EAAE;IACrD,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,sBAAsB,EAAE;IACzD,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,iFAAiF,EAAE;IAEvH,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IAErE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IACpE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IACrE,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IAExE,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,0DAA0D,EAAE;IAEhG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,oEAAoE,EAAE;IAElG,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,wDAAwD,EAAE;IACzF,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,8CAA8C,EAAE;IAC5E,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,0DAA0D,EAAE;IAC1F,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,oDAAoD,EAAE;IAElF,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,gDAAgD,EAAE;IAExF,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,uEAAuE,EAAE;IAC3G,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,qEAAqE,EAAE;IACxG,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,+DAA+D,EAAE;IACvG,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,+EAA+E,EAAE;IACvH,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,uEAAuE,EAAE;IAE3G,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,oDAAoD,EAAE;IAE7F,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,4BAA4B,EAAE;IACrE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,6CAA6C,EAAE;IACjF,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,8HAA8H,EAAE;IAE3K,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAChE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,kFAAkF,EAAE;IACnH,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,sCAAsC,EAAE;IAErE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,8CAA8C,EAAE;IAC9E,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,kDAAkD,EAAE;IACzF,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,qDAAqD,EAAE;IAC/F,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,gDAAgD,EAAE;IACrF,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,iDAAiD,EAAE;IACpF,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,mDAAmD,EAAE;IACxF,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,+CAA+C,EAAE;IAChF,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,kDAAkD,EAAE;IACtF,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,gDAAgD,EAAE;IACrF,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,6CAA6C,EAAE;IAC/E,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,oDAAoD,EAAE;IAC7F,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,wDAAwD,EAAE;IAC5F,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,0DAA0D,EAAE;IAC7F,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,2DAA2D,EAAE;IACrG,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,sEAAsE,EAAE;IACpH,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,2DAA2D,EAAE;IACrG,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,gHAAgH,EAAE;IAEpJ,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,mHAAmH,EAAE;IAChK,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC5D,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC5E,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,wHAAwH,EAAE;IAC9J,EAAE,IAAI,EAAE,8BAA8B,EAAE,KAAK,EAAE,yCAAyC,EAAE;IAC1F,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACtE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,0BAA0B,EAAE;IAC9D,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IACzE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,kCAAkC,EAAE;CACpE,CAAC"}
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../src/patterns.ts"],"names":[],"mappings":";;;AAKa,QAAA,kBAAkB,GAAwB;IACrD,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,qCAAqC,EAAE;IAC3E,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IACvE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,6BAA6B,EAAE;IAEhE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,kCAAkC,EAAE;IACjE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACnE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACnE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAEnE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IACnE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,6FAA6F,EAAE;IAChI,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,0BAA0B,EAAE;IAEjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,+BAA+B,EAAE;IAElE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,kCAAkC,EAAE;IACzE,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,kCAAkC,EAAE;IAC9E,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,kCAAkC,EAAE;IACzE,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,kCAAkC,EAAE;IAE7E,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,sBAAsB,EAAE;IACrD,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,sBAAsB,EAAE;IACzD,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,iFAAiF,EAAE;IAEvH,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IAErE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IACpE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IACrE,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IAExE,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,gEAAgE,EAAE;IAEtG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,oEAAoE,EAAE;IAElG,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,wDAAwD,EAAE;IACzF,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,8CAA8C,EAAE;IAC5E,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,0DAA0D,EAAE;IAC1F,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,oDAAoD,EAAE;IAElF,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,gDAAgD,EAAE;IAExF,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,uEAAuE,EAAE;IAC3G,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,qEAAqE,EAAE;IACxG,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,+DAA+D,EAAE;IACvG,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,+EAA+E,EAAE;IACvH,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,uEAAuE,EAAE;IAE3G,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,oDAAoD,EAAE;IAE7F,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,+BAA+B,EAAE;IACxE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,6CAA6C,EAAE;IACjF,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,8HAA8H,EAAE;IAE3K,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAChE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,kFAAkF,EAAE;IACnH,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,sCAAsC,EAAE;IAErE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,8CAA8C,EAAE;IAC9E,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,kDAAkD,EAAE;IACzF,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,qDAAqD,EAAE;IAC/F,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,gDAAgD,EAAE;IACrF,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,iDAAiD,EAAE;IACpF,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,mDAAmD,EAAE;IACxF,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,+CAA+C,EAAE;IAChF,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,kDAAkD,EAAE;IACtF,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,gDAAgD,EAAE;IACrF,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,6CAA6C,EAAE;IAC/E,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,oDAAoD,EAAE;IAC7F,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,wDAAwD,EAAE;IAC5F,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,0DAA0D,EAAE;IAC7F,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,2DAA2D,EAAE;IACrG,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,sEAAsE,EAAE;IACpH,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,2DAA2D,EAAE;IACrG,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,gHAAgH,EAAE;IAEpJ,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,mHAAmH,EAAE;IAChK,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC5D,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC5E,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,wHAAwH,EAAE;IAC9J,EAAE,IAAI,EAAE,8BAA8B,EAAE,KAAK,EAAE,yCAAyC,EAAE;IAC1F,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACtE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,0BAA0B,EAAE;IAC9D,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,gCAAgC,EAAE;IACzE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,kCAAkC,EAAE;IAEnE,kBAAkB;IAClB,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,6BAA6B,EAAE;IACnE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,6BAA6B,EAAE;IACjE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,qFAAqF,EAAE;IACzH,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC/D,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,gDAAgD,EAAE;IACnF,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,iFAAiF,EAAE;IACxH,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,qEAAqE,EAAE;IAE1G,2BAA2B;IAC3B,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,yGAAyG,EAAE;IACvJ,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,qCAAqC,EAAE;IAC3E,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,kFAAkF,EAAE;IAEpH,YAAY;IACZ,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,6BAA6B,EAAE;IAChE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,kCAAkC,EAAE;IACrE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,iCAAiC,EAAE;IACpE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,0CAA0C,EAAE;IAC/E,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,kCAAkC,EAAE;IACpE,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACtE,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,0FAA0F,EAAE;CACpI,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@streamblur/mcp",
-  "version": "1.0.0",
-  "description": "StreamBlur MCP server - redact API keys, tokens, and secrets from text and files. Pro features: file & directory scanning.",
+  "version": "1.1.1",
+  "description": "StreamBlur MCP server - redact API keys and secrets from text and files. 9 tools, 77+ secret patterns. Pro: file, directory and repo scanning.",
   "main": "dist/src/index.js",
   "bin": {
     "streamblur-mcp": "dist/src/index.js"

package/src/index.ts

@@ -1,7 +1,9 @@
 #!/usr/bin/env node
 
-import { readFileSync, readdirSync, statSync } from "node:fs";
+import { readFileSync, readdirSync, statSync, mkdirSync, rmSync, existsSync } from "node:fs";
 import { join, extname } from "node:path";
+import { execSync } from "node:child_process";
+import { tmpdir } from "node:os";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import {
@@ -150,7 +152,7 @@ function scanDirectory(dirPath: string, maxFiles = 500): DirectoryScanResult[] {
 // ─── Server Setup ──────────────────────────────────────────────────────────
 
 const server = new Server(
-  { name: "streamblur-mcp", version: "1.0.0" },
+  { name: "streamblur-mcp", version: "1.1.0" },
   { capabilities: { tools: {} } }
 );
 
@@ -210,6 +212,70 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
         required: ["path"],
         additionalProperties: false
       }
+    },
+    {
+      name: "scan_repo",
+      description: proActive
+        ? "Clones a GitHub repository to a temp directory, scans all source files for exposed secrets, returns findings with file paths and line numbers, then deletes the temp clone. Pro feature."
+        : "Clones a GitHub repo and scans all files for leaked secrets. Pro feature - set STREAMBLUR_LICENSE_KEY to unlock.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          repo_url: { type: "string", description: "GitHub repo URL (e.g. https://github.com/owner/repo)" },
+          max_files: { type: "number", description: "Max files to scan (default 300)" }
+        },
+        required: ["repo_url"],
+        additionalProperties: false
+      }
+    },
+    {
+      name: "audit_env_file",
+      description: "Reads a .env file and returns a full security report: detected secrets, formatting issues, placeholder values, and rotation recommendations. File is not modified.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          path: { type: "string", description: "Path to .env file" }
+        },
+        required: ["path"],
+        additionalProperties: false
+      }
+    },
+    {
+      name: "check_gitignore",
+      description: "Checks a project directory .gitignore to verify that .env files, key files, and secret directories are properly excluded. Returns a security gap report.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          path: { type: "string", description: "Project root directory path" }
+        },
+        required: ["path"],
+        additionalProperties: false
+      }
+    },
+    {
+      name: "explain_detection",
+      description: "Given a detected secret type (e.g. stripe_secret_live, aws_access_key), explains what it is, the blast radius if leaked, and exactly where to go to revoke and rotate it immediately.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          type: { type: "string", description: "Secret type string from a scan result (e.g. openai_api_key)" }
+        },
+        required: ["type"],
+        additionalProperties: false
+      }
+    },
+    {
+      name: "generate_env_template",
+      description: "Generates a safe .env.example template with placeholder values and security comments for common project types.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          project_type: { type: "string", description: "Project type: nextjs, rails, django, express, nuxt, sveltekit" },
+          services: { type: "array", items: { type: "string" }, description: "Additional services: stripe, openai, anthropic, supabase, firebase, aws, sendgrid, twilio" }
+        },
+        required: ["project_type"],
+        additionalProperties: false
+      }
     }
   ];
 
@@ -300,6 +366,194 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
       }
     }
 
+    case "scan_repo": {
+      const proActive = await isPro();
+      if (!proActive) {
+        return {
+          content: [{
+            type: "text",
+            text: "scan_repo is a StreamBlur Pro feature.\n\nSet STREAMBLUR_LICENSE_KEY to your Pro email or license key.\nGet Pro at https://streamblur.com/pricing - $2.99 one-time."
+          }]
+        };
+      }
+      const repoUrl = args.repo_url;
+      if (typeof repoUrl !== "string" || !repoUrl.startsWith("http")) {
+        throw new McpError(ErrorCode.InvalidParams, "'repo_url' must be a valid GitHub URL");
+      }
+      const maxFiles = typeof args.max_files === "number" ? args.max_files : 300;
+      const tmpDir = join(tmpdir(), "streamblur-scan-" + Date.now());
+      try {
+        mkdirSync(tmpDir, { recursive: true });
+        execSync(`git clone --depth 1 "${repoUrl}" "${tmpDir}"`, { timeout: 60000, stdio: "pipe" });
+        const results = scanDirectory(tmpDir, maxFiles);
+        if (results.length === 0) {
+          return { content: [{ type: "text", text: `No secrets detected in ${repoUrl}` }] };
+        }
+        const summary = results.map(r =>
+          `${r.file.replace(tmpDir + "/", "")}\n${r.detections.map((d: { line: number; column: number; type: string }) => `  Line ${d.line}:${d.column} - ${d.type}`).join("\n")}`
+        ).join("\n\n");
+        return {
+          content: [{
+            type: "text",
+            text: `Found secrets in ${results.length} file(s) in ${repoUrl}:\n\n${summary}`
+          }]
+        };
+      } catch (err: unknown) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new McpError(ErrorCode.InternalError, `Repo scan failed: ${msg}`);
+      } finally {
+        try { rmSync(tmpDir, { recursive: true, force: true }); } catch { /* cleanup */ }
+      }
+    }
+
+    case "audit_env_file": {
+      const filePath = args.path;
+      if (typeof filePath !== "string") {
+        throw new McpError(ErrorCode.InvalidParams, "'path' must be a string");
+      }
+      try {
+        const content = readFileSync(filePath, "utf8");
+        const lines = content.split("\n");
+        const issues: string[] = [];
+        const secrets: string[] = [];
+        const placeholders: string[] = [];
+
+        for (let i = 0; i < lines.length; i++) {
+          const line = lines[i].trim();
+          if (!line || line.startsWith("#")) continue;
+          const eqIdx = line.indexOf("=");
+          if (eqIdx === -1) { issues.push(`Line ${i+1}: Missing = sign: ${line}`); continue; }
+          const key = line.slice(0, eqIdx).trim();
+          const val = line.slice(eqIdx + 1).trim();
+          if (/\s/.test(key)) issues.push(`Line ${i+1}: Key has spaces: ${key}`);
+          if (val === "" || val === '""' || val === "''") issues.push(`Line ${i+1}: Empty value for ${key}`);
+          if (/^(your[_-]|xxx|placeholder|changeme|todo|replace|insert|example)/i.test(val.replace(/['"]/g, ""))) {
+            placeholders.push(`Line ${i+1}: ${key} has placeholder value`);
+          }
+          const detected = scanText(line);
+          if (detected.length > 0) {
+            secrets.push(`Line ${i+1}: ${key} - detected as ${detected.map((d: { type: string }) => d.type).join(", ")}`);
+          }
+        }
+
+        let report = `Env File Audit: ${filePath}\n${"=".repeat(40)}\n`;
+        report += `Lines: ${lines.length} | Variables: ${lines.filter(l => l.includes("=") && !l.startsWith("#")).length}\n\n`;
+        if (secrets.length > 0) report += `SECRETS DETECTED (${secrets.length}):\n${secrets.join("\n")}\n\n`;
+        if (issues.length > 0) report += `FORMAT ISSUES (${issues.length}):\n${issues.join("\n")}\n\n`;
+        if (placeholders.length > 0) report += `PLACEHOLDERS (${placeholders.length}):\n${placeholders.join("\n")}\n\n`;
+        if (secrets.length === 0 && issues.length === 0) report += `No issues found. File looks clean.\n`;
+        report += `\nReminder: ensure this file is in .gitignore and never committed to version control.`;
+
+        return { content: [{ type: "text", text: report }] };
+      } catch (err: unknown) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new McpError(ErrorCode.InternalError, `Could not read file: ${msg}`);
+      }
+    }
+
+    case "check_gitignore": {
+      const dirPath = args.path;
+      if (typeof dirPath !== "string") {
+        throw new McpError(ErrorCode.InvalidParams, "'path' must be a string");
+      }
+      const gitignorePath = join(dirPath, ".gitignore");
+      const mustIgnore = [".env", ".env.local", ".env.production", ".env.*.local", "*.pem", "*.key", ".secret"];
+      const shouldIgnore = [".env.development", ".env.staging", "secrets/", "credentials/"];
+
+      try {
+        if (!existsSync(gitignorePath)) {
+          return {
+            content: [{
+              type: "text",
+              text: `No .gitignore found in ${dirPath}.\n\nCRITICAL: Create a .gitignore immediately and add:\n${mustIgnore.join("\n")}`
+            }]
+          };
+        }
+        const content = readFileSync(gitignorePath, "utf8");
+        const missing = mustIgnore.filter(p => !content.includes(p));
+        const suggested = shouldIgnore.filter(p => !content.includes(p));
+        let report = `.gitignore Audit: ${gitignorePath}\n${"=".repeat(40)}\n`;
+        if (missing.length === 0) {
+          report += `All critical patterns are covered.\n`;
+        } else {
+          report += `CRITICAL - Missing patterns (add these NOW):\n${missing.map(p => `  ${p}`).join("\n")}\n\n`;
+        }
+        if (suggested.length > 0) {
+          report += `Recommended additions:\n${suggested.map(p => `  ${p}`).join("\n")}\n`;
+        }
+        return { content: [{ type: "text", text: report }] };
+      } catch (err: unknown) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new McpError(ErrorCode.InternalError, `Could not check gitignore: ${msg}`);
+      }
+    }
+
+    case "explain_detection": {
+      const detectionType = args.type;
+      if (typeof detectionType !== "string") {
+        throw new McpError(ErrorCode.InvalidParams, "'type' must be a string");
+      }
+      const explanations: Record<string, { name: string; risk: string; action: string; url: string }> = {
+        openai_api_key: { name: "OpenAI API Key", risk: "HIGH - Full API access. Attacker can run unlimited GPT-4 requests at your expense. Costs can hit thousands of dollars within hours.", action: "1. Go to platform.openai.com/api-keys\n2. Delete the exposed key immediately\n3. Create a new key\n4. Update all services using the old key", url: "https://platform.openai.com/api-keys" },
+        anthropic_api_key: { name: "Anthropic API Key", risk: "HIGH - Full Claude API access. Unauthorized usage billed to your account.", action: "1. Go to console.anthropic.com/settings/keys\n2. Delete the exposed key\n3. Generate a new key\n4. Update environment variables", url: "https://console.anthropic.com/settings/keys" },
+        stripe_secret_live: { name: "Stripe Live Secret Key", risk: "CRITICAL - Full access to your Stripe account. Attacker can create charges, issue refunds, access customer data, and drain your balance.", action: "1. Go to dashboard.stripe.com/apikeys\n2. Roll (rotate) the key immediately\n3. Update all integrations", url: "https://dashboard.stripe.com/apikeys" },
+        aws_access_key: { name: "AWS Access Key ID", risk: "CRITICAL - Combined with secret key, gives full AWS account access. Can spin up infrastructure, access S3 data, and incur massive costs.", action: "1. Go to AWS IAM console\n2. Deactivate the key immediately\n3. Create new credentials\n4. Check CloudTrail for unauthorized activity", url: "https://console.aws.amazon.com/iam/home#/security_credentials" },
+        github_pat: { name: "GitHub Personal Access Token", risk: "HIGH - Can access private repos, commit code, read secrets in Actions, and depending on scope, full org access.", action: "1. Go to github.com/settings/tokens\n2. Delete the exposed token immediately\n3. Audit recent activity on affected repos", url: "https://github.com/settings/tokens" },
+        discord_bot_token: { name: "Discord Bot Token", risk: "MEDIUM-HIGH - Full control of the bot. Can read all messages the bot has access to, send messages as the bot, manage channels.", action: "1. Go to discord.com/developers/applications\n2. Select your app > Bot > Reset Token\n3. Update your deployment with the new token", url: "https://discord.com/developers/applications" },
+        stripe_secret_test: { name: "Stripe Test Secret Key", risk: "LOW - Test mode only, no real money. Best practice to rotate anyway.", action: "1. Go to dashboard.stripe.com/apikeys\n2. Roll the test key", url: "https://dashboard.stripe.com/apikeys" },
+        google_api_key: { name: "Google API Key", risk: "MEDIUM-HIGH - Depending on enabled APIs, can incur costs or expose data.", action: "1. Go to console.cloud.google.com/apis/credentials\n2. Delete or restrict the key\n3. Create a new restricted key", url: "https://console.cloud.google.com/apis/credentials" },
+        huggingface_token: { name: "Hugging Face Token", risk: "MEDIUM - Access to models, datasets, and spaces under your account.", action: "1. Go to huggingface.co/settings/tokens\n2. Delete the exposed token\n3. Create a new one", url: "https://huggingface.co/settings/tokens" },
+        supabase_service_role_key: { name: "Supabase Service Role Key", risk: "CRITICAL - Bypasses Row Level Security entirely. Full read/write access to all database tables.", action: "1. Go to supabase.com/dashboard > Project Settings > API\n2. Rotate the service role key\n3. Update all server-side integrations", url: "https://supabase.com/dashboard" },
+      };
+
+      const info = explanations[detectionType];
+      if (!info) {
+        return {
+          content: [{
+            type: "text",
+            text: `Detection type: ${detectionType}\n\nNo specific guidance available for this type yet.\n\nGeneral advice:\n- Treat it as potentially sensitive\n- Search your provider dashboard for API keys or tokens section\n- Revoke/rotate the value immediately\n- Check logs for unauthorized usage\n- Update all services using the old value`
+          }]
+        };
+      }
+      return {
+        content: [{
+          type: "text",
+          text: `${info.name}\n${"=".repeat(info.name.length)}\n\nRisk: ${info.risk}\n\nImmediate action:\n${info.action}\n\nDashboard: ${info.url}`
+        }]
+      };
+    }
+
+    case "generate_env_template": {
+      const projectType = (args.project_type as string || "nextjs").toLowerCase();
+      const services = Array.isArray(args.services) ? args.services as string[] : [];
+
+      const templates: Record<string, string> = {
+        nextjs: `# Next.js Environment Variables\n# Copy to .env.local - NEVER commit .env.local to git\n\n# App\nNEXT_PUBLIC_APP_URL=http://localhost:3000\nNEXT_PUBLIC_APP_NAME=your-app-name\n\n# Database\nDATABASE_URL=postgresql://user:password@localhost:5432/dbname`,
+        express: `# Express Environment Variables\n# Copy to .env - NEVER commit .env to git\n\nNODE_ENV=development\nPORT=3000\n\n# Database\nDATABASE_URL=postgresql://user:password@localhost:5432/dbname\n\n# Session\nSESSION_SECRET=replace-with-random-32-char-string`,
+        django: `# Django Environment Variables\n# Copy to .env - NEVER commit .env to git\n\nDJANGO_SECRET_KEY=replace-with-50-char-random-string\nDEBUG=True\nALLOWED_HOSTS=localhost,127.0.0.1\n\n# Database\nDATABASE_URL=postgresql://user:password@localhost:5432/dbname`,
+        rails: `# Rails Environment Variables\n# Copy to .env - NEVER commit .env to git\n\nRAILS_ENV=development\nSECRET_KEY_BASE=replace-with-rails-credentials-output\n\n# Database\nDATABASE_URL=postgresql://user:password@localhost:5432/dbname`,
+        nuxt: `# Nuxt Environment Variables\n# Copy to .env - NEVER commit .env to git\n\nNUXT_PUBLIC_SITE_URL=http://localhost:3000\nNUXT_SECRET_KEY=replace-with-random-32-char-string`,
+        sveltekit: `# SvelteKit Environment Variables\n# Copy to .env - NEVER commit .env to git\n\nPUBLIC_APP_URL=http://localhost:5173\nPRIVATE_SECRET_KEY=replace-with-random-32-char-string`,
+      };
+
+      const serviceAdditions: Record<string, string> = {
+        stripe: `\n# Stripe\nSTRIPE_SECRET_KEY=sk_test_replace-with-your-stripe-test-key\nSTRIPE_PUBLISHABLE_KEY=pk_test_replace-with-your-stripe-publishable-key\nSTRIPE_WEBHOOK_SECRET=whsec_replace-with-your-webhook-secret`,
+        openai: `\n# OpenAI\nOPENAI_API_KEY=sk-proj-replace-with-your-openai-key`,
+        anthropic: `\n# Anthropic\nANTHROPIC_API_KEY=sk-ant-replace-with-your-anthropic-key`,
+        supabase: `\n# Supabase\nNEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co\nNEXT_PUBLIC_SUPABASE_ANON_KEY=eyJ-replace-with-anon-key\nSUPABASE_SERVICE_ROLE_KEY=eyJ-replace-with-service-role-key-KEEP-SECRET`,
+        firebase: `\n# Firebase\nFIREBASE_PROJECT_ID=your-project-id\nFIREBASE_CLIENT_EMAIL=firebase-adminsdk@your-project.iam.gserviceaccount.com\nFIREBASE_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\\nreplace\\n-----END PRIVATE KEY-----\\n"`,
+        aws: `\n# AWS\nAWS_ACCESS_KEY_ID=AKIA-replace-with-your-key\nAWS_SECRET_ACCESS_KEY=replace-with-your-secret\nAWS_REGION=us-east-1`,
+        sendgrid: `\n# SendGrid\nSENDGRID_API_KEY=SG.replace-with-your-sendgrid-key`,
+        twilio: `\n# Twilio\nTWILIO_ACCOUNT_SID=AC-replace-with-your-account-sid\nTWILIO_AUTH_TOKEN=replace-with-your-auth-token`,
+      };
+
+      const base = templates[projectType] || templates["nextjs"];
+      const additions = services.map((s: string) => serviceAdditions[s] || "").join("");
+      const result = base + additions + "\n\n# Add this file to .gitignore:\n# echo '.env.local' >> .gitignore";
+
+      return { content: [{ type: "text", text: result }] };
+    }
+
     default:
       throw new McpError(ErrorCode.MethodNotFound, `Unknown tool: ${request.params.name}`);
   }

package/src/patterns.ts

@@ -17,7 +17,7 @@ export const credentialPatterns: CredentialPattern[] = [
   { type: "aws_secret_key", regex: /\b(?:AWS_SECRET_ACCESS_KEY|aws_secret_access_key)\s*[:=]\s*['\"]?[A-Za-z0-9\/+=]{40}['\"]?/g },
   { type: "aws_secret_key_raw", regex: /\b[A-Za-z0-9\/+=]{40}\b/g },
 
-  { type: "google_api_key", regex: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+  { type: "google_api_key", regex: /\bAIza[0-9A-Za-z_-]{30,40}\b/g },
 
   { type: "stripe_secret_live", regex: /\bsk_live_[A-Za-z0-9]{16,120}\b/g },
   { type: "stripe_publishable_live", regex: /\bpk_live_[A-Za-z0-9]{16,120}\b/g },
@@ -34,7 +34,7 @@ export const credentialPatterns: CredentialPattern[] = [
   { type: "slack_user_token", regex: /\bxoxp-[0-9A-Za-z-]{20,120}\b/g },
   { type: "slack_session_token", regex: /\bxoxs-[0-9A-Za-z-]{20,120}\b/g },
 
-  { type: "discord_bot_token", regex: /\b[A-Za-z\d_-]{24}\.[A-Za-z\d_-]{6}\.[A-Za-z\d_-]{27}\b/g },
+  { type: "discord_bot_token", regex: /\b[A-Za-z\d_-]{23,28}\.[A-Za-z\d_-]{6}\.[A-Za-z\d_-]{27,38}\b/g },
 
   { type: "jwt_token", regex: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g },
 
@@ -53,7 +53,7 @@ export const credentialPatterns: CredentialPattern[] = [
 
   { type: "authorization_bearer", regex: /Authorization\s*:\s*Bearer\s+[A-Za-z0-9._-]{12,}/gi },
 
-  { type: "firebase_web_api_key", regex: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+  { type: "firebase_web_api_key", regex: /\bAIza[0-9A-Za-z_-]{30,40}\b/g },
   { type: "firebase_db_url", regex: /\bhttps:\/\/[a-z0-9-]+\.firebaseio\.com\b/gi },
   { type: "firebase_service_account", regex: /"type"\s*:\s*"service_account"[\s\S]*?"private_key"\s*:\s*"-----BEGIN PRIVATE KEY-----[\s\S]*?-----END PRIVATE KEY-----\\n"/g },
 
@@ -87,5 +87,28 @@ export const credentialPatterns: CredentialPattern[] = [
   { type: "oauth_refresh_token", regex: /\b1\/\/[A-Za-z0-9_-]{20,}\b/g },
   { type: "mailgun_api_key", regex: /\bkey-[A-Za-z0-9]{32}\b/g },
   { type: "shopify_access_token", regex: /\bshpat_[A-Za-z0-9]{20,120}\b/g },
-  { type: "gitlab_token", regex: /\bglpat-[A-Za-z0-9_-]{20,120}\b/g }
+  { type: "gitlab_token", regex: /\bglpat-[A-Za-z0-9_-]{20,120}\b/g },
+
+  // AI/ML platforms
+  { type: "huggingface_token", regex: /\bhf_[A-Za-z0-9]{20,120}\b/g },
+  { type: "replicate_token", regex: /\br8_[A-Za-z0-9]{20,120}\b/g },
+  { type: "together_ai_key", regex: /\b(?:TOGETHER_API_KEY|together_api_key)\s*[:=]\s*['"\\]?[A-Za-z0-9]{32,120}['"\\]?/g },
+  { type: "groq_api_key", regex: /\bgsk_[A-Za-z0-9]{20,120}\b/g },
+  { type: "cohere_api_key", regex: /\b(?:COHERE_API_KEY|co-[A-Za-z0-9]{32,120})\b/g },
+  { type: "elevenlabs_api_key", regex: /\b(?:ELEVENLABS_API_KEY|XI_API_KEY)\s*[:=]\s*['"\\]?[A-Za-z0-9]{32,120}['"\\]?/g },
+  { type: "pinecone_api_key", regex: /\b(?:PINECONE_API_KEY)\s*[:=]\s*['"\\]?[A-Za-z0-9-]{20,120}['"\\]?/g },
+
+  // Database/infra platforms
+  { type: "supabase_service_role_key", regex: /\b(?:SUPABASE_SERVICE_ROLE_KEY|supabase_service_role_key)\s*[:=]\s*['"\\]?eyJ[A-Za-z0-9_-]{50,}['"\\]?/g },
+  { type: "planetscale_token", regex: /\bpscale_tkn_[A-Za-z0-9]{20,120}\b/g },
+  { type: "railway_token", regex: /\b(?:RAILWAY_TOKEN|RAILWAY_API_KEY)\s*[:=]\s*['"\\]?[A-Za-z0-9-]{20,120}['"\\]?/g },
+
+  // Dev tools
+  { type: "resend_api_key", regex: /\bre_[A-Za-z0-9]{20,120}\b/g },
+  { type: "linear_api_key", regex: /\blin_api_[A-Za-z0-9]{20,120}\b/g },
+  { type: "notion_api_key", regex: /\bsecret_[A-Za-z0-9]{40,120}\b/g },
+  { type: "airtable_api_key", regex: /\bpat[A-Za-z0-9]{14}\.[A-Za-z0-9]{64}\b/g },
+  { type: "doppler_token", regex: /\bdp\.pt\.[A-Za-z0-9]{40,120}\b/g },
+  { type: "pulumi_access_token", regex: /\bpul-[A-Za-z0-9]{40,120}\b/g },
+  { type: "cursor_session_token", regex: /\b(?:CURSOR_SESSION_TOKEN|cursor_session)\s*[:=]\s*['"\\]?[A-Za-z0-9._-]{20,120}['"\\]?/g }
 ];