audit-tools 0.28.0

package/dist/audit/extractors/graph.js

@@ -0,0 +1,472 @@
+import { readFile } from "node:fs/promises";
+import { isAbsolute, relative, resolve } from "node:path";
+import { posix } from "node:path";
+import { buildDispositionMap, isAuditExcludedStatus } from "./disposition.js";
+import { extractChromeExtensionManifestEdges, extractHtmlResourceEdges, } from "./browserExtension.js";
+import { extractCargoWorkspaceMemberEdges, extractGoWorkspaceModuleEdges, extractMavenModuleEdges, extractPackageEntrypointEdges, extractPackageScriptEdges, extractPyprojectTestpathLinks, extractTypescriptProjectReferenceEdges, extractWorkspacePackageEdges, extractYamlPathReferenceEdges, isCargoManifestPath, isGoWorkspaceManifestPath, isMavenPomPath, isPyprojectPath, } from "./graphManifestEdges/index.js";
+import { graphEdge, graphLookupKey, isPytestConftestPath, normalizeGraphPath, resolveCandidate, resolveReferenceLiteral, resolveSpecifier, SOURCE_EXTENSIONS, STRING_LITERAL_PATTERN, } from "./graphPathUtils.js";
+import { extractPythonImportEdges } from "./graphPythonImports.js";
+import { isTestPath, normalizeExtractorPath } from "./pathPatterns.js";
+import { extractConventionalRouteEvidence, extractFrameworkRouteEvidence, extractRegisteredRouteEvidence, fallbackRouteEdge, uniqueSortedRoutes, } from "./graphRoutes.js";
+import { extractBoundedSuiteEdges, extractJsonSchemaReferenceEdges, extractSchemaContractTestEdges, } from "./graphSuites.js";
+import { extractTestSourceEdges } from "./graphTestSources.js";
+const MAX_GRAPH_SOURCE_BYTES = 512 * 1024;
+const SOURCE_LANGUAGES = new Set([
+    "typescript",
+    "javascript",
+    "json",
+    "html",
+    "yaml",
+    "python",
+    "go",
+    "rust",
+    "java",
+    "csharp",
+]);
+const IMPORT_PATTERNS = [
+    {
+        pattern: /\bimport\s+(?:type\s+)?(?:[^"'()]*?\s+from\s+)?["']([^"']+)["']/g,
+        kind: "esm",
+    },
+    {
+        pattern: /\bexport\s+(?:type\s+)?[^"']*?\s+from\s+["']([^"']+)["']/g,
+        kind: "re-export",
+    },
+    {
+        pattern: /\bimport\s*\(\s*["']([^"']+)["']\s*\)/g,
+        kind: "dynamic-import",
+    },
+    {
+        pattern: /\brequire\s*\(\s*["']([^"']+)["']\s*\)/g,
+        kind: "commonjs",
+    },
+];
+const IMPORT_EDGE_CONFIDENCE = 0.95;
+const REFERENCE_EDGE_CONFIDENCE = 0.72;
+const RELATIVE_REFERENCE_EDGE_CONFIDENCE = 0.82;
+const CONFTEST_LINK_CONFIDENCE = 0.85;
+const ANALYZER_OWNERSHIP_EDGE_CONFIDENCE = 0.84;
+const CONTAINER_EDGE_CONFIDENCE = 0.25;
+const AUTH_SESSION_EDGE_CONFIDENCE = 0.55;
+/** Named graph edge-kind keys (was a scatter of inline string literals). */
+const EDGE_KIND = {
+    heuristicContainer: "heuristic-container-edge",
+    heuristicAuthSession: "heuristic-auth-session-link",
+    conftestLink: "conftest-link",
+    analyzerOwnershipRootLink: "analyzer-ownership-root-link",
+    relativeStringReference: "relative-string-reference",
+    repoPathReference: "repo-path-reference",
+};
+function shouldReadForGraph(file) {
+    const normalized = normalizeGraphPath(file.path);
+    return (file.size_bytes <= MAX_GRAPH_SOURCE_BYTES &&
+        (SOURCE_LANGUAGES.has(file.language) ||
+            SOURCE_EXTENSIONS.some((extension) => normalized.endsWith(extension)) ||
+            isGoWorkspaceManifestPath(normalized) ||
+            isCargoManifestPath(normalized) ||
+            isMavenPomPath(normalized) ||
+            isPyprojectPath(normalized)));
+}
+export function buildPathLookup(repoManifest, dispositionMap) {
+    return new Map(repoManifest.files
+        .filter((file) => {
+        const status = dispositionMap.get(file.path);
+        return !(file.excluded || (status && isAuditExcludedStatus(status)));
+    })
+        .map((file) => [graphLookupKey(file.path), file.path]));
+}
+function edgeSignature(edge) {
+    return `${edge.from}\0${edge.to}\0${edge.kind ?? ""}`;
+}
+function clampConfidence(value, fallback) {
+    return typeof value === "number" && Number.isFinite(value)
+        ? Math.min(1, Math.max(0, value))
+        : fallback;
+}
+function uniqueSortedEdges(edges) {
+    const deduped = new Map();
+    for (const edge of edges) {
+        if (edge.from === edge.to)
+            continue;
+        deduped.set(edgeSignature(edge), edge);
+    }
+    return [...deduped.values()].sort((a, b) => a.from.localeCompare(b.from) ||
+        a.to.localeCompare(b.to) ||
+        (a.kind ?? "").localeCompare(b.kind ?? ""));
+}
+function normalizeOwnershipRoot(root) {
+    const normalized = normalizeGraphPath(root.trim()).replace(/\/+$/, "");
+    if (normalized.length === 0 ||
+        normalized === "." ||
+        normalized === ".." ||
+        normalized.startsWith("../") ||
+        normalized.startsWith("/") ||
+        isAbsolute(normalized)) {
+        return undefined;
+    }
+    return normalized;
+}
+function extractAnalyzerOwnershipEdges(externalAnalyzerResults, pathLookup) {
+    const roots = Array.isArray(externalAnalyzerResults?.ownership_roots)
+        ? externalAnalyzerResults.ownership_roots
+        : [];
+    const edges = [];
+    for (const rootHint of roots) {
+        if (!rootHint ||
+            typeof rootHint.root !== "string" ||
+            !Array.isArray(rootHint.paths)) {
+            continue;
+        }
+        const root = normalizeOwnershipRoot(rootHint.root);
+        if (!root) {
+            continue;
+        }
+        const normalizedRoot = root.toLowerCase();
+        const confidence = clampConfidence(rootHint.confidence, ANALYZER_OWNERSHIP_EDGE_CONFIDENCE);
+        const ownershipKind = typeof rootHint.kind === "string" && rootHint.kind.trim().length > 0
+            ? rootHint.kind.trim()
+            : undefined;
+        const providedReason = typeof rootHint.reason === "string" && rootHint.reason.trim().length > 0
+            ? rootHint.reason.trim()
+            : undefined;
+        for (const rawPath of rootHint.paths) {
+            if (typeof rawPath !== "string" || rawPath.trim().length === 0) {
+                continue;
+            }
+            const target = resolveCandidate(rawPath, pathLookup);
+            if (!target) {
+                continue;
+            }
+            const normalizedTarget = normalizeGraphPath(target).toLowerCase();
+            if (normalizedTarget !== normalizedRoot &&
+                !normalizedTarget.startsWith(`${normalizedRoot}/`)) {
+                continue;
+            }
+            edges.push(graphEdge({
+                from: root,
+                to: target,
+                kind: EDGE_KIND.analyzerOwnershipRootLink,
+                direction: "undirected",
+                confidence,
+                reason: providedReason ??
+                    (ownershipKind
+                        ? `${externalAnalyzerResults?.tool ?? "analyzer"} reports ${ownershipKind} ownership root '${root}' contains '${target}'.`
+                        : `${externalAnalyzerResults?.tool ?? "analyzer"} reports ownership root '${root}' contains '${target}'.`),
+            }));
+        }
+    }
+    return edges;
+}
+function extractImportEdges(fromPath, content, pathLookup) {
+    const edges = [];
+    for (const { pattern, kind } of IMPORT_PATTERNS) {
+        pattern.lastIndex = 0;
+        for (const match of content.matchAll(pattern)) {
+            const specifier = match[1];
+            if (!specifier)
+                continue;
+            const target = resolveSpecifier(fromPath, specifier, pathLookup);
+            if (target) {
+                edges.push(graphEdge({
+                    from: fromPath,
+                    to: target,
+                    kind,
+                    confidence: IMPORT_EDGE_CONFIDENCE,
+                    reason: `Resolved ${kind} specifier '${specifier}'.`,
+                }));
+            }
+        }
+    }
+    return edges;
+}
+function importSpecifierRanges(content) {
+    const ranges = [];
+    for (const { pattern } of IMPORT_PATTERNS) {
+        pattern.lastIndex = 0;
+        for (const match of content.matchAll(pattern)) {
+            const specifier = match[1];
+            if (!specifier)
+                continue;
+            const fullMatch = match[0];
+            const doubleQuotedOffset = fullMatch.lastIndexOf(`"${specifier}"`);
+            const singleQuotedOffset = fullMatch.lastIndexOf(`'${specifier}'`);
+            const quotedOffset = doubleQuotedOffset >= 0 ? doubleQuotedOffset : singleQuotedOffset;
+            if (quotedOffset < 0)
+                continue;
+            const start = (match.index ?? 0) + quotedOffset + 1;
+            ranges.push({ start, end: start + specifier.length });
+        }
+    }
+    return ranges;
+}
+function isImportSpecifierRange(start, end, ranges) {
+    return ranges.some((range) => range.start === start && range.end === end);
+}
+function extractReferenceEdges(fromPath, content, pathLookup) {
+    const edges = [];
+    const importRanges = importSpecifierRanges(content);
+    STRING_LITERAL_PATTERN.lastIndex = 0;
+    for (const match of content.matchAll(STRING_LITERAL_PATTERN)) {
+        const literal = match[1];
+        if (!literal)
+            continue;
+        const literalStart = (match.index ?? 0) + 1;
+        if (isImportSpecifierRange(literalStart, literalStart + literal.length, importRanges)) {
+            continue;
+        }
+        const target = resolveReferenceLiteral(fromPath, literal, pathLookup);
+        if (target) {
+            const relativeReference = literal.startsWith(".");
+            edges.push({
+                from: fromPath,
+                to: target,
+                kind: relativeReference
+                    ? EDGE_KIND.relativeStringReference
+                    : EDGE_KIND.repoPathReference,
+                direction: "directed",
+                confidence: relativeReference
+                    ? RELATIVE_REFERENCE_EDGE_CONFIDENCE
+                    : REFERENCE_EDGE_CONFIDENCE,
+                reason: relativeReference
+                    ? `Resolved relative string literal '${literal}'.`
+                    : `Resolved repository path string literal '${literal}'.`,
+            });
+        }
+    }
+    return edges;
+}
+function extractPytestConftestLinks(pathLookup) {
+    const allPaths = [...new Set(pathLookup.values())];
+    const conftestPaths = allPaths.filter((p) => isPytestConftestPath(p));
+    if (conftestPaths.length === 0)
+        return [];
+    const edges = [];
+    for (const conftestPath of conftestPaths) {
+        const conftestDir = posix.dirname(normalizeGraphPath(conftestPath));
+        if (!isTestPath(normalizeExtractorPath(conftestDir)))
+            continue;
+        const scopePrefix = `${conftestDir}/`;
+        for (const targetPath of allPaths) {
+            if (targetPath === conftestPath)
+                continue;
+            const normalizedTarget = normalizeGraphPath(targetPath);
+            if (!normalizedTarget.startsWith(scopePrefix))
+                continue;
+            if (!normalizedTarget.endsWith(".py"))
+                continue;
+            if (isPytestConftestPath(normalizedTarget))
+                continue;
+            edges.push(graphEdge({
+                from: conftestPath,
+                to: targetPath,
+                kind: EDGE_KIND.conftestLink,
+                confidence: CONFTEST_LINK_CONFIDENCE,
+                reason: `Pytest conftest '${conftestPath}' applies to all Python files in its scope directory.`,
+            }));
+        }
+    }
+    return edges;
+}
+export async function buildGraphBundleFromFs(repoManifest, root, disposition, options = {}) {
+    const rootPath = resolve(root);
+    const dispositionMap = buildDispositionMap(disposition);
+    const fileContents = {};
+    const skippedFiles = [];
+    await Promise.all(repoManifest.files.map(async (file) => {
+        const status = dispositionMap.get(file.path);
+        if ((status && isAuditExcludedStatus(status)) ||
+            file.excluded ||
+            !shouldReadForGraph(file)) {
+            return;
+        }
+        const absolutePath = resolve(rootPath, file.path);
+        const relativeToRoot = relative(rootPath, absolutePath);
+        if (relativeToRoot.startsWith("..") || isAbsolute(relativeToRoot)) {
+            return;
+        }
+        try {
+            fileContents[file.path] = await readFile(absolutePath, "utf8");
+        }
+        catch (e) {
+            // Best-effort graph extraction should not block structure planning,
+            // but record the skip so a coverage gap is observable to operators.
+            skippedFiles.push({ path: file.path, error: e.code ?? String(e) });
+        }
+    }));
+    if (skippedFiles.length > 0) {
+        process.stderr.write("[audit-code] graph: skipped " +
+            skippedFiles.length +
+            " unreadable file(s): " +
+            skippedFiles.map((s) => s.path + " (" + s.error + ")").join(", ") +
+            "\n");
+    }
+    return buildGraphBundle(repoManifest, disposition, { ...options, fileContents });
+}
+/**
+ * Heuristic "container" edge: a file two-or-more directories deep is linked to
+ * its top-two-segment module root, suggesting shared module ownership.
+ */
+function extractHeuristicContainerEdges(filePath) {
+    const normalizedPath = normalizeGraphPath(filePath);
+    const parts = normalizedPath.split("/");
+    if (parts.length <= 2)
+        return [];
+    return [
+        graphEdge({
+            from: normalizedPath,
+            to: `${parts[0]}/${parts[1]}`,
+            kind: EDGE_KIND.heuristicContainer,
+            direction: "undirected",
+            confidence: CONTAINER_EDGE_CONFIDENCE,
+            reason: "Path hierarchy suggests shared module ownership.",
+        }),
+    ];
+}
+/**
+ * Heuristic security edge: an auth-named (non-session) file is linked to every
+ * session-named file by naming convention, flagging likely auth↔session coupling.
+ */
+function extractHeuristicAuthSessionEdges(filePath, repoManifest, dispositionMap) {
+    const normalized = filePath.toLowerCase();
+    if (!(normalized.includes("auth") && normalized.includes("session") === false)) {
+        return [];
+    }
+    const edges = [];
+    for (const other of repoManifest.files) {
+        if (other.path === filePath)
+            continue;
+        const otherStatus = dispositionMap.get(other.path);
+        if (otherStatus && isAuditExcludedStatus(otherStatus))
+            continue;
+        if (other.path.toLowerCase().includes("session")) {
+            edges.push(graphEdge({
+                from: filePath,
+                to: other.path,
+                kind: EDGE_KIND.heuristicAuthSession,
+                confidence: AUTH_SESSION_EDGE_CONFIDENCE,
+                reason: "Security-sensitive auth path appears coupled to a session path by naming convention.",
+            }));
+        }
+    }
+    return edges;
+}
+/**
+ * Run every content-driven edge extractor over one file's source, appending its
+ * import / call / reference / route edges into the accumulator. Mirrors the
+ * original inline body exactly (including push order) so the deduped/sorted
+ * result is byte-identical.
+ */
+function extractContentEdgesForFile(filePath, content, pathLookup, acc, fileRoutes) {
+    acc.imports.push(...extractImportEdges(filePath, content, pathLookup));
+    acc.imports.push(...extractPythonImportEdges(filePath, content, pathLookup));
+    acc.references.push(...extractReferenceEdges(filePath, content, pathLookup));
+    acc.references.push(...extractJsonSchemaReferenceEdges(filePath, content, pathLookup));
+    acc.references.push(...extractPackageEntrypointEdges(filePath, content, pathLookup));
+    acc.references.push(...extractChromeExtensionManifestEdges(filePath, content, pathLookup));
+    acc.references.push(...extractHtmlResourceEdges(filePath, content, pathLookup));
+    acc.references.push(...extractPackageScriptEdges(filePath, content, pathLookup));
+    acc.references.push(...extractWorkspacePackageEdges(filePath, content, pathLookup));
+    acc.references.push(...extractTypescriptProjectReferenceEdges(filePath, content, pathLookup));
+    acc.references.push(...extractGoWorkspaceModuleEdges(filePath, content, pathLookup));
+    acc.references.push(...extractCargoWorkspaceMemberEdges(filePath, content, pathLookup));
+    acc.references.push(...extractMavenModuleEdges(filePath, content, pathLookup));
+    acc.references.push(...extractPyprojectTestpathLinks(filePath, content, pathLookup));
+    acc.references.push(...extractYamlPathReferenceEdges(filePath, content, pathLookup));
+    acc.references.push(...extractSchemaContractTestEdges(filePath, content, pathLookup));
+    const registeredRoutes = extractRegisteredRouteEvidence(filePath, content, pathLookup);
+    acc.calls.push(...registeredRoutes.calls);
+    fileRoutes.push(...registeredRoutes.routes);
+    const frameworkRoutes = extractFrameworkRouteEvidence(filePath, content, pathLookup);
+    acc.calls.push(...frameworkRoutes.calls);
+    fileRoutes.push(...frameworkRoutes.routes);
+}
+/**
+ * Emit the OBS-003 graph-extraction metric. No RunLogger is in scope in this
+ * leaf extractor, so it uses the established structured-stderr summary
+ * (FINDING-012 pattern): node count, total edge count, and the number of
+ * non-empty graph types.
+ */
+function logGraphExtractionMetric(graphs) {
+    const edgeCount = graphs.imports.length +
+        graphs.calls.length +
+        graphs.references.length +
+        graphs.routes.length +
+        graphs.heuristics.length;
+    const nodes = new Set();
+    for (const edge of [
+        ...graphs.imports,
+        ...graphs.calls,
+        ...graphs.references,
+        ...graphs.heuristics,
+    ]) {
+        nodes.add(edge.from);
+        nodes.add(edge.to);
+    }
+    for (const route of graphs.routes) {
+        nodes.add(route.path);
+        nodes.add(route.handler);
+    }
+    const graphTypeCount = [
+        graphs.imports,
+        graphs.calls,
+        graphs.references,
+        graphs.routes,
+        graphs.heuristics,
+    ].filter((edges) => edges.length > 0).length;
+    process.stderr.write(`[audit-code] graph: built bundle — ${nodes.size} nodes, ${edgeCount} edges across ${graphTypeCount} graph type(s)\n`);
+}
+/**
+ * Append cross-file (repo-wide) reference edges that can only be resolved after
+ * the per-file pass is complete: analyzer ownership roots, pytest conftest links,
+ * and bounded suite links. These are separated from the per-file loop so each
+ * concern is named and testable in isolation.
+ */
+function accumulateCrossFileEdges(acc, pathLookup, options) {
+    acc.references.push(...extractAnalyzerOwnershipEdges(options.externalAnalyzerResults, pathLookup));
+    acc.references.push(...extractPytestConftestLinks(pathLookup));
+    acc.references.push(...extractBoundedSuiteEdges(pathLookup, options.fileContents ?? {}, acc.references));
+}
+export function buildGraphBundle(repoManifest, disposition, options = {}) {
+    const acc = {
+        imports: [],
+        calls: [],
+        references: [],
+        routes: [],
+        heuristics: [],
+    };
+    const dispositionMap = buildDispositionMap(disposition);
+    const pathLookup = buildPathLookup(repoManifest, dispositionMap);
+    for (const file of repoManifest.files) {
+        const status = dispositionMap.get(file.path);
+        if (file.excluded || (status && isAuditExcludedStatus(status))) {
+            continue;
+        }
+        acc.heuristics.push(...extractHeuristicContainerEdges(file.path));
+        acc.heuristics.push(...extractHeuristicAuthSessionEdges(file.path, repoManifest, dispositionMap));
+        const content = options.fileContents?.[file.path];
+        const fileRoutes = [];
+        if (content) {
+            extractContentEdgesForFile(file.path, content, pathLookup, acc, fileRoutes);
+        }
+        fileRoutes.push(...extractConventionalRouteEvidence(file.path, content));
+        if (fileRoutes.length === 0) {
+            const fallbackRoute = fallbackRouteEdge(file.path);
+            if (fallbackRoute) {
+                fileRoutes.push(fallbackRoute);
+            }
+        }
+        acc.routes.push(...fileRoutes);
+        acc.references.push(...extractTestSourceEdges(file.path, pathLookup));
+    }
+    accumulateCrossFileEdges(acc, pathLookup, options);
+    const graphs = {
+        imports: uniqueSortedEdges(acc.imports),
+        calls: uniqueSortedEdges(acc.calls),
+        references: uniqueSortedEdges(acc.references),
+        routes: uniqueSortedRoutes(acc.routes),
+        heuristics: uniqueSortedEdges(acc.heuristics),
+    };
+    logGraphExtractionMetric(graphs);
+    return { graphs };
+}
+//# sourceMappingURL=graph.js.map

package/dist/audit/extractors/graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.js","sourceRoot":"","sources":["../../../src/audit/extractors/graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAIlC,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,mCAAmC,EACnC,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,6BAA6B,EAC7B,sCAAsC,EACtC,4BAA4B,EAC5B,6BAA6B,EAC7B,mBAAmB,EACnB,yBAAyB,EACzB,cAAc,EACd,eAAe,GAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,SAAS,EACT,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,8BAA8B,EAC9B,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAO/D,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC1C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,YAAY;IACZ,YAAY;IACZ,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,MAAM;IACN,MAAM;IACN,QAAQ;CACT,CAAC,CAAC;AACH,MAAM,eAAe,GAA6C;IAChE;QACE,OAAO,EAAE,kEAAkE;QAC3E,IAAI,EAAE,KAAK;KACZ;IACD;QACE,OAAO,EAAE,2DAA2D;QACpE,IAAI,EAAE,WAAW;KAClB;IACD;QACE,OAAO,EAAE,wCAAwC;QACjD,IAAI,EAAE,gBAAgB;KACvB;IACD;QACE,OAAO,EAAE,yCAAyC;QAClD,IAAI,EAAE,UAAU;KACjB;CACF,CAAC;AACF,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,MAAM,kCAAkC,GAAG,IAAI,CAAC;AAChD,MAAM,wBAAwB,GAAG,IAAI,CAAC;AACtC,MAAM,kCAAkC,GAAG,IAAI,CAAC;AAChD,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAE1C,4EAA4E;AAC5E,MAAM,SAAS,GAAG;IAChB,kBAAkB,EAAE,0BAA0B;IAC9C,oBAAoB,EAAE,6BAA6B;IACnD,YAAY,EAAE,eAAe;IAC7B,yBAAyB,EAAE,8BAA8B;IACzD,uBAAuB,EAAE,2BAA2B;IACpD,iBAAiB,EAAE,qBAAqB;CAChC,CAAC;AAEX,SAAS,kBAAkB,CAAC,IAAmC;IAC7D,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,CACL,IAAI,CAAC,UAAU,IAAI,sBAAsB;QACzC,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAClC,iBAAiB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACrE,yBAAyB,CAAC,UAAU,CAAC;YACrC,mBAAmB,CAAC,UAAU,CAAC;YAC/B,cAAc,CAAC,UAAU,CAAC;YAC1B,eAAe,CAAC,UAAU,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,YAA0B,EAC1B,cAAuE;IAEvE,OAAO,IAAI,GAAG,CACZ,YAAY,CAAC,KAAK;SACf,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAe;IACpC,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,QAAgB;IACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAkB;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE;YAAE,SAAS;QACpC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvE,IACE,UAAU,CAAC,MAAM,KAAK,CAAC;QACvB,UAAU,KAAK,GAAG;QAClB,UAAU,KAAK,IAAI;QACnB,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,UAAU,CAAC,UAAU,CAAC,EACtB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,6BAA6B,CACpC,uBAA4D,EAC5D,UAA+B;IAE/B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,uBAAuB,EAAE,eAAe,CAAC;QACnE,CAAC,CAAC,uBAAuB,CAAC,eAAe;QACzC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,IACE,CAAC,QAAQ;YACT,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACjC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC9B,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,eAAe,CAChC,QAAQ,CAAC,UAAU,EACnB,kCAAkC,CACnC,CAAC;QACF,MAAM,aAAa,GACjB,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAClE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;YACtB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,cAAc,GAClB,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACtE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;YACxB,CAAC,CAAC,SAAS,CAAC;QAEhB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/D,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YACD,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YAClE,IACE,gBAAgB,KAAK,cAAc;gBACnC,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,EAClD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;gBACR,IAAI,EAAE,IAAI;gBACV,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,SAAS,CAAC,yBAAyB;gBACzC,SAAS,EAAE,YAAY;gBACvB,UAAU;gBACV,MAAM,EACJ,cAAc;oBACd,CAAC,aAAa;wBACZ,CAAC,CAAC,GAAG,uBAAuB,EAAE,IAAI,IAAI,UAAU,YAAY,aAAa,oBAAoB,IAAI,eAAe,MAAM,IAAI;wBAC1H,CAAC,CAAC,GAAG,uBAAuB,EAAE,IAAI,IAAI,UAAU,4BAA4B,IAAI,eAAe,MAAM,IAAI,CAAC;aAC/G,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAgB,EAChB,OAAe,EACf,UAA+B;IAE/B,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,eAAe,EAAE,CAAC;QAChD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACjE,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,QAAQ;oBACd,EAAE,EAAE,MAAM;oBACV,IAAI;oBACJ,UAAU,EAAE,sBAAsB;oBAClC,MAAM,EAAE,YAAY,IAAI,eAAe,SAAS,IAAI;iBACrD,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAe;IAEf,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,eAAe,EAAE,CAAC;QAC1C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,kBAAkB,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC;YACnE,MAAM,kBAAkB,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC;YACnE,MAAM,YAAY,GAChB,kBAAkB,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC;YACpE,IAAI,YAAY,GAAG,CAAC;gBAAE,SAAS;YAC/B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,YAAY,GAAG,CAAC,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAa,EACb,GAAW,EACX,MAA6C;IAE7C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAgB,EAChB,OAAe,EACf,UAA+B;IAE/B,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACpD,sBAAsB,CAAC,SAAS,GAAG,CAAC,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5C,IACE,sBAAsB,CACpB,YAAY,EACZ,YAAY,GAAG,OAAO,CAAC,MAAM,EAC7B,YAAY,CACb,EACD,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACtE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,iBAAiB;oBACrB,CAAC,CAAC,SAAS,CAAC,uBAAuB;oBACnC,CAAC,CAAC,SAAS,CAAC,iBAAiB;gBAC/B,SAAS,EAAE,UAAU;gBACrB,UAAU,EAAE,iBAAiB;oBAC3B,CAAC,CAAC,kCAAkC;oBACpC,CAAC,CAAC,yBAAyB;gBAC7B,MAAM,EAAE,iBAAiB;oBACvB,CAAC,CAAC,qCAAqC,OAAO,IAAI;oBAClD,CAAC,CAAC,4CAA4C,OAAO,IAAI;aAC5D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CACjC,UAA+B;IAE/B,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE1C,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;YAAE,SAAS;QAE/D,MAAM,WAAW,GAAG,GAAG,WAAW,GAAG,CAAC;QAEtC,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;YAClC,IAAI,UAAU,KAAK,YAAY;gBAAE,SAAS;YAC1C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACxD,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,SAAS;YACxD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAChD,IAAI,oBAAoB,CAAC,gBAAgB,CAAC;gBAAE,SAAS;YAErD,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;gBACR,IAAI,EAAE,YAAY;gBAClB,EAAE,EAAE,UAAU;gBACd,IAAI,EAAE,SAAS,CAAC,YAAY;gBAC5B,UAAU,EAAE,wBAAwB;gBACpC,MAAM,EAAE,oBAAoB,YAAY,uDAAuD;aAChG,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAA0B,EAC1B,IAAY,EACZ,WAA6B,EAC7B,UAAoE,EAAE;IAEtE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,cAAc,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,MAAM,YAAY,GAAsC,EAAE,CAAC;IAE3D,MAAM,OAAO,CAAC,GAAG,CACf,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IACE,CAAC,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ;YACb,CAAC,kBAAkB,CAAC,IAAI,CAAC,EACzB,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACxD,IAAI,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAClE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,oEAAoE;YACpE,oEAAoE;YACpE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAG,CAA2B,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B;YAC5B,YAAY,CAAC,MAAM;YACnB,uBAAuB;YACvB,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACjE,IAAI,CACP,CAAC;IACJ,CAAC;IAED,OAAO,gBAAgB,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,SAAS,8BAA8B,CAAC,QAAgB;IACtD,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO;QACL,SAAS,CAAC;YACR,IAAI,EAAE,cAAc;YACpB,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE;YAC7B,IAAI,EAAE,SAAS,CAAC,kBAAkB;YAClC,SAAS,EAAE,YAAY;YACvB,UAAU,EAAE,yBAAyB;YACrC,MAAM,EAAE,kDAAkD;SAC3D,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,gCAAgC,CACvC,QAAgB,EAChB,YAA0B,EAC1B,cAAuE;IAEvE,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACtC,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,WAAW,IAAI,qBAAqB,CAAC,WAAW,CAAC;YAAE,SAAS;QAChE,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;gBACR,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,KAAK,CAAC,IAAI;gBACd,IAAI,EAAE,SAAS,CAAC,oBAAoB;gBACpC,UAAU,EAAE,4BAA4B;gBACxC,MAAM,EACJ,sFAAsF;aACzF,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAWD;;;;;GAKG;AACH,SAAS,0BAA0B,CACjC,QAAgB,EAChB,OAAe,EACf,UAA+B,EAC/B,GAAyB,EACzB,UAAuB;IAEvB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7E,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7E,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,+BAA+B,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAClE,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,6BAA6B,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAChE,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,mCAAmC,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CACtE,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,wBAAwB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAC3D,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,yBAAyB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAC5D,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,4BAA4B,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAC/D,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,sCAAsC,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CACzE,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,6BAA6B,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAChE,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,gCAAgC,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CACnE,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAC1D,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,6BAA6B,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAChE,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,6BAA6B,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAChE,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,8BAA8B,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CACjE,CAAC;IACF,MAAM,gBAAgB,GAAG,8BAA8B,CACrD,QAAQ,EACR,OAAO,EACP,UAAU,CACX,CAAC;IACF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1C,UAAU,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,6BAA6B,CACnD,QAAQ,EACR,OAAO,EACP,UAAU,CACX,CAAC;IACF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAWD;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,MAAmB;IACnD,MAAM,SAAS,GACb,MAAM,CAAC,OAAO,CAAC,MAAM;QACrB,MAAM,CAAC,KAAK,CAAC,MAAM;QACnB,MAAM,CAAC,UAAU,CAAC,MAAM;QACxB,MAAM,CAAC,MAAM,CAAC,MAAM;QACpB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI;QACjB,GAAG,MAAM,CAAC,OAAO;QACjB,GAAG,MAAM,CAAC,KAAK;QACf,GAAG,MAAM,CAAC,UAAU;QACpB,GAAG,MAAM,CAAC,UAAU;KACrB,EAAE,CAAC;QACF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,cAAc,GAAG;QACrB,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,UAAU;KAClB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,KAAK,CAAC,IAAI,WAAW,SAAS,iBAAiB,cAAc,kBAAkB,CACtH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAC/B,GAAyB,EACzB,UAA+B,EAC/B,OAAgC;IAEhC,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,6BAA6B,CAC9B,OAAO,CAAC,uBAAuB,EAC/B,UAAU,CACX,CACF,CAAC;IACF,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,wBAAwB,CACzB,UAAU,EACV,OAAO,CAAC,YAAY,IAAI,EAAE,EAC1B,GAAG,CAAC,UAAU,CACf,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,YAA0B,EAC1B,WAA6B,EAC7B,UAAmC,EAAE;IAErC,MAAM,GAAG,GAAyB;QAChC,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,EAAE;QACd,MAAM,EAAE,EAAE;QACV,UAAU,EAAE,EAAE;KACf,CAAC;IACF,MAAM,cAAc,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,eAAe,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAEjE,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC/D,SAAS;QACX,CAAC;QAED,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,cAAc,CAAC,CAC7E,CAAC;QAEF,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,IAAI,OAAO,EAAE,CAAC;YACZ,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC9E,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACzE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,aAAa,EAAE,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;QAC/B,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,wBAAwB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;QACvC,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC;QACnC,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC7C,MAAM,EAAE,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC;QACtC,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;KAC9C,CAAC;IAEF,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAEjC,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC"}

package/dist/audit/extractors/graphManifestEdges/cargo.d.ts

@@ -0,0 +1,15 @@
+import type { GraphEdge } from "audit-tools/shared";
+import { WorkspacePattern } from "./workspace.js";
+/**
+ * Cargo `[workspace]` member/exclude globs. Parsed with a vetted TOML parser
+ * (`smol-toml`) rather than a line scanner, so every spelling of the table
+ * resolves to the same shape — `[workspace]` headers, the dotted
+ * `workspace.members = [...]`, and the inline `workspace = { members = [...] }`
+ * form all yield `workspace.members` — instead of silently dropping the dotted
+ * and inline forms (the dropped-edge bug). `exclude` entries are emitted as
+ * `!`-prefixed negation patterns. Malformed TOML degrades to `[]` (the graph
+ * builder never throws on a bad manifest).
+ */
+export declare function cargoWorkspacePatterns(content: string): WorkspacePattern[];
+export declare function extractCargoWorkspaceMemberEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
+//# sourceMappingURL=cargo.d.ts.map

package/dist/audit/extractors/graphManifestEdges/cargo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cargo.d.ts","sourceRoot":"","sources":["../../../../src/audit/extractors/graphManifestEdges/cargo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,gBAAgB,EAAmF,MAAM,gBAAgB,CAAC;AAKnI;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAa1E;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,SAAS,EAAE,CAoDb"}

package/dist/audit/extractors/graphManifestEdges/cargo.js

@@ -0,0 +1,74 @@
+import { graphEdge, isCargoManifestPath } from "../graphPathUtils.js";
+import { addWorkspacePattern, normalizeWorkspacePattern, workspacePatternMatchesManifest } from "./workspace.js";
+import { tomlTable, tomlStringArray } from "./toml.js";
+const CARGO_WORKSPACE_MEMBER_EDGE_CONFIDENCE = 0.87;
+/**
+ * Cargo `[workspace]` member/exclude globs. Parsed with a vetted TOML parser
+ * (`smol-toml`) rather than a line scanner, so every spelling of the table
+ * resolves to the same shape — `[workspace]` headers, the dotted
+ * `workspace.members = [...]`, and the inline `workspace = { members = [...] }`
+ * form all yield `workspace.members` — instead of silently dropping the dotted
+ * and inline forms (the dropped-edge bug). `exclude` entries are emitted as
+ * `!`-prefixed negation patterns. Malformed TOML degrades to `[]` (the graph
+ * builder never throws on a bad manifest).
+ */
+export function cargoWorkspacePatterns(content) {
+    const workspace = tomlTable(content, "workspace");
+    if (!workspace) {
+        return [];
+    }
+    const patterns = [];
+    for (const member of tomlStringArray(workspace.members)) {
+        addWorkspacePattern(patterns, member);
+    }
+    for (const excluded of tomlStringArray(workspace.exclude)) {
+        addWorkspacePattern(patterns, `!${excluded}`);
+    }
+    return patterns;
+}
+export function extractCargoWorkspaceMemberEdges(fromPath, content, pathLookup) {
+    if (!isCargoManifestPath(fromPath)) {
+        return [];
+    }
+    const rawPatterns = cargoWorkspacePatterns(content);
+    if (rawPatterns.length === 0) {
+        return [];
+    }
+    const positivePatterns = [];
+    const negativePatterns = [];
+    for (const { pattern, negated } of rawPatterns) {
+        const normalized = normalizeWorkspacePattern(fromPath, pattern);
+        if (!normalized) {
+            continue;
+        }
+        if (negated) {
+            negativePatterns.push(normalized);
+        }
+        else {
+            positivePatterns.push(normalized);
+        }
+    }
+    const edges = [];
+    for (const pattern of positivePatterns) {
+        for (const target of pathLookup.values()) {
+            if (target === fromPath || !isCargoManifestPath(target)) {
+                continue;
+            }
+            if (!workspacePatternMatchesManifest(pattern, target, "Cargo.toml")) {
+                continue;
+            }
+            if (negativePatterns.some((negativePattern) => workspacePatternMatchesManifest(negativePattern, target, "Cargo.toml"))) {
+                continue;
+            }
+            edges.push(graphEdge({
+                from: fromPath,
+                to: target,
+                kind: "cargo-workspace-member-link",
+                confidence: CARGO_WORKSPACE_MEMBER_EDGE_CONFIDENCE,
+                reason: `Cargo workspace pattern '${pattern}' includes member manifest '${target}'.`,
+            }));
+        }
+    }
+    return edges;
+}
+//# sourceMappingURL=cargo.js.map

package/dist/audit/extractors/graphManifestEdges/cargo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cargo.js","sourceRoot":"","sources":["../../../../src/audit/extractors/graphManifestEdges/cargo.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAoB,mBAAmB,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,MAAM,gBAAgB,CAAC;AACnI,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEvD,MAAM,sCAAsC,GAAG,IAAI,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,mBAAmB,CAAC,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,QAAgB,EAChB,OAAe,EACf,UAA+B;IAE/B,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,SAAS;YACX,CAAC;YACD,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;gBACpE,SAAS;YACX,CAAC;YACD,IACE,gBAAgB,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE,CACxC,+BAA+B,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,CAAC,CACvE,EACD,CAAC;gBACD,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;gBACR,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,6BAA6B;gBACnC,UAAU,EAAE,sCAAsC;gBAClD,MAAM,EAAE,4BAA4B,OAAO,+BAA+B,MAAM,IAAI;aACrF,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/audit/extractors/graphManifestEdges/go.d.ts

@@ -0,0 +1,6 @@
+import type { GraphEdge } from "audit-tools/shared";
+export declare const GO_WORKSPACE_MODULE_EDGE_CONFIDENCE = 0.87;
+export declare function stripGoLineComment(line: string): string;
+export declare function splitGoWorkspaceSpecifiers(value: string): string[];
+export declare function extractGoWorkspaceModuleEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
+//# sourceMappingURL=go.d.ts.map

package/dist/audit/extractors/graphManifestEdges/go.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"go.d.ts","sourceRoot":"","sources":["../../../../src/audit/extractors/graphManifestEdges/go.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAIpD,eAAO,MAAM,mCAAmC,OAAO,CAAC;AAQxD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiBvD;AAwBD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAyClE;AA4ED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,SAAS,EAAE,CA0Bb"}