autoremediator 0.21.2 → 0.22.0

package/dist/api/diet/unused.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unused.js","sourceRoot":"","sources":["../../../src/api/diet/unused.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+CAA+C,CAAC;AAqBlF,MAAM,CAAC,MAAM,QAAQ,GAAiC;IACpD,cAAc;IACd,iBAAiB;IACjB,sBAAsB;CACvB,CAAC;AAEF,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM;IACN,SAAS;IACT,aAAa;IACb,UAAU;IACV,UAAU;IACV,MAAM;IACN,SAAS;IACT,QAAQ;IACR,cAAc;IACd,SAAS;IACT,YAAY;IACZ,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;IAClB,sBAAsB;IACtB,qBAAqB;IACrB,oBAAoB;IACpB,kBAAkB;IAClB,WAAW;IACX,aAAa;IACb,MAAM;IACN,SAAS;IACT,OAAO;IACP,eAAe;CAChB,CAAC,CAAC;AAEH,sGAAsG;AACtG,MAAM,UAAU,kBAAkB,CAAC,QAAkB;IACnD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QACjD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,WAAW,CAAC,QAAkB;IAC5C,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QAClE,wBAAwB,IAAI,EAAE;QAC9B,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,IAAY,EACZ,MAAc;IAEd,IAAI,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACnE,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,QAAQ,CAAC,QAAkB,EAAE,WAAmB;IAC9D,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC;IACnF,OAAO,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,KAAK,MAAM,MAAM,IAAI;gBACnB,gBAAgB;gBAChB,gBAAgB;gBAChB,eAAe;gBACf,eAAe;gBACf,SAAS;gBACT,SAAS;gBACT,mBAAmB;aACpB,EAAE,CAAC;gBACF,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC/C,oFAAoF;YACpF,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;YACpC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,KAAK,MAAM,MAAM,IAAI,CAAC,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,CAAC;gBACxF,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,MAAM,IAAI;YACnB,gBAAgB;YAChB,gBAAgB;YAChB,eAAe;YACf,eAAe;YACf,kBAAkB;YAClB,mBAAmB;YACnB,mBAAmB;SACpB,EAAE,CAAC;YACF,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC;QAC5B,KAAK,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,YAAY,GAChB,mRAAmR,CAAC;AAUtR,MAAM,UAAU,WAAW,CAAC,MAAmC;IAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,KAAK,CAAC;YACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,qGAAqG;AACrG,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1E,CAAC;AAsBD,MAAM,WAAW,GACf,uGAAuG,CAAC;AAE1G;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAwB;IAC3D,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAE3C,MAAM,QAAQ,GAAkE,EAAE,CAAC;IACnF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,mBAAmB,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,IAAI,EAAE,CAAC;KACvC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,QAAQ,CAAC,GAAG,CACV,CAAC,KAAK,EAAE,EAAE,CACR;QACE,KAAK,CAAC,IAAI;QACV,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;KAC7D,CACb,CACF,CAAC;IACF,MAAM,qBAAqB,GACzB,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAExF,2FAA2F;IAC3F,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoD,CAAC;IAC3E,KAAK,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,IAAI,SAAS,EAAE,CAAC;QACvD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1E,MAAM,QAAQ,GAAG,iBAAiB,EAAE,oBAAoB,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,KAAK,IAAI,CAAC;YACpF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,MAAM,OAAO,GAA8D,EAAE,CAAC;IAC9E,MAAM,WAAW,GAA2D,EAAE,CAAC;IAE/E,MAAM,QAAQ,GAAG,CACf,KAAgC,EAChC,MAAc,EACd,QAAmB,EACD,EAAE,CAAC,CAAC;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,cAAc,EAAE,iBAAiB;QACjC,MAAM;QACN,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;QACvB,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QAED,qGAAqG;QACrG,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CACT,QAAQ,CACN,KAAK,EACL,8EAA8E,CAC/E,CACF,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACpC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,iFAAiF;QACjF,IAAI,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CACT,QAAQ,CACN,KAAK,EACL,gFAAgF,CACjF,CACF,CAAC;YACF,SAAS;QACX,CAAC;QAED,iFAAiF;QACjF,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,yCAAyC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACtF,SAAS;QACX,CAAC;QAED,iCAAiC;QACjC,MAAM,iBAAiB,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CACT,QAAQ,CAAC,KAAK,EAAE,gBAAgB,WAAW,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC,CAAC,CACtF,CAAC;YACF,SAAS;QACX,CAAC;QAED,+FAA+F;QAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CACT,QAAQ,CACN,KAAK,EACL,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,uBAAuB,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9I,CACF,CAAC;YACF,SAAS;QACX,CAAC;QAED,sEAAsE;QACtE,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CACT,QAAQ,CACN,KAAK,EACL,0FAA0F,CAC3F,CACF,CAAC;YACF,SAAS;QACX,CAAC;QAED,qFAAqF;QACrF,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CACT,QAAQ,CACN,KAAK,EACL,wFAAwF,EACxF,OAAO,CACR,CACF,CAAC;YACF,SAAS;QACX,CAAC;QAED,sFAAsF;QACtF,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CACtC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAChC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAC9B,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAC3D,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,iCAAiC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACtF,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,6DAA6D,CAAC,CAAC,CAAC;YAC5F,SAAS;QACX,CAAC;QAED,mCAAmC;QACnC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,sBAAsB,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CACV,qFAAqF,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CACV,uBAAuB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wGAAwG,CACtN,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CACV,qHAAqH,CACtH,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CACV,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,4EAA4E,CAC7G,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CACV,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,uDAAuD,CACrF,CAAC;QACJ,CAAC;QACD,MAAM,iBAAiB,GACrB,KAAK,CAAC,WAAW,GAAG,CAAC;YACrB,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,cAAc,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,iBAAiB;YAC7E,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;SAChE,CAAC,CAAC;IACL,CAAC;IAED,yFAAyF;IACzF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAU,CAAC,CAAC,CAAC;IAC/F,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;YAC5B,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAC1B,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9E,IAAI,UAAU,IAAI,WAAW,KAAK,iBAAiB,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,IAAI;gBACP,cAAc,EAAE,iBAAiB;gBACjC,MAAM,EAAE,yBAAyB,MAAM,2BAA2B;aACnE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,IAAI;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,yBAAyB,MAAM,0BAA0B;aAClE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,WAAW,KAAK,iBAAiB,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,IAAI;gBACP,cAAc,EAAE,iBAAiB;gBACjC,MAAM,EAAE,yBAAyB,MAAM,mCAAmC;aAC3E,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,IAAI;gBACP,cAAc,EAAE,iBAAiB;gBACjC,MAAM,EAAE,yBAAyB,MAAM,+GAA+G;aACvJ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;AACjD,CAAC"}

package/dist/api/evidence-pack/attest.d.ts

@@ -0,0 +1,43 @@
+import type { RunRecord, RunStore } from "../../runs/run-store.js";
+export declare const STATEMENT_TYPE = "https://in-toto.io/Statement/v1";
+/** Identifiers for the two predicates; type URIs name a schema, they are not fetched. */
+export declare const RUN_PREDICATE_TYPE = "https://github.com/Rawlings/autoremediator/attestations/run-ledger/v1";
+export declare const PACK_PREDICATE_TYPE = "https://github.com/Rawlings/autoremediator/attestations/evidence-pack/v1";
+export interface Subject {
+    name: string;
+    digest: {
+        sha256: string;
+    };
+}
+export interface Statement {
+    _type: typeof STATEMENT_TYPE;
+    subject: Subject[];
+    predicateType: string;
+    predicate: Record<string, unknown>;
+}
+/** The project's manifests, lockfiles, patch files and tsconfig files as they are now, by sha256. */
+export declare function projectSubjects(cwd: string): Subject[];
+export type RunStatement = {
+    ok: true;
+    statement: Statement;
+    ledgerHead: string;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * An in-toto statement about one recorded run: the subjects are the project's manifests and
+ * lockfiles as they are now; the predicate is the run's plan, what happened to each item, the
+ * verifier's results, and the head of the hash-chained ledger. A run whose ledger does not verify
+ * is refused, because an attestation of a tampered record would vouch for nothing.
+ */
+export declare function buildRunStatement(input: {
+    store: RunStore;
+    run: RunRecord;
+    subjects: Subject[];
+    /** The project's current `filesSha256`, to say whether the project still matches where the run ended. */
+    currentFilesSha256?: string;
+    toolVersion: string;
+    now: Date;
+}): RunStatement;
+//# sourceMappingURL=attest.d.ts.map

package/dist/api/evidence-pack/attest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attest.d.ts","sourceRoot":"","sources":["../../../src/api/evidence-pack/attest.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnE,eAAO,MAAM,cAAc,oCAAoC,CAAC;AAChE,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,0EAC0C,CAAC;AAC1E,eAAO,MAAM,mBAAmB,6EAC4C,CAAC;AAE7E,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5B;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,OAAO,cAAc,CAAC;IAC7B,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,qGAAqG;AACrG,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,EAAE,CAWtD;AAID,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,EAAE,SAAS,CAAC;IACf,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,yGAAyG;IACzG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,IAAI,CAAC;CACX,GAAG,YAAY,CAsHf"}

package/dist/api/evidence-pack/attest.js

@@ -0,0 +1,140 @@
+import { readFileSync } from "node:fs";
+import { join, relative, sep } from "node:path";
+import { discoverProjectFiles } from "../../platform/rollback.js";
+import { sha256 } from "../../runs/hash.js";
+export const STATEMENT_TYPE = "https://in-toto.io/Statement/v1";
+/** Identifiers for the two predicates; type URIs name a schema, they are not fetched. */
+export const RUN_PREDICATE_TYPE = "https://github.com/Rawlings/autoremediator/attestations/run-ledger/v1";
+export const PACK_PREDICATE_TYPE = "https://github.com/Rawlings/autoremediator/attestations/evidence-pack/v1";
+/** The project's manifests, lockfiles, patch files and tsconfig files as they are now, by sha256. */
+export function projectSubjects(cwd) {
+    return discoverProjectFiles(cwd)
+        .map((file) => relative(cwd, file).split(sep).join("/"))
+        .toSorted()
+        .flatMap((name) => {
+        try {
+            return [{ name, digest: { sha256: sha256(readFileSync(join(cwd, name))) } }];
+        }
+        catch {
+            return [];
+        }
+    });
+}
+/**
+ * An in-toto statement about one recorded run: the subjects are the project's manifests and
+ * lockfiles as they are now; the predicate is the run's plan, what happened to each item, the
+ * verifier's results, and the head of the hash-chained ledger. A run whose ledger does not verify
+ * is refused, because an attestation of a tampered record would vouch for nothing.
+ */
+export function buildRunStatement(input) {
+    const { store, run } = input;
+    const ledger = store.ledger(run.runId);
+    const check = ledger.verify();
+    if (!check.ok) {
+        return {
+            ok: false,
+            reason: `ledger failed verification at event ${check.seq}: ${check.reason}`,
+        };
+    }
+    if (input.subjects.length === 0) {
+        return { ok: false, reason: "no manifest or lockfile was found to attest to" };
+    }
+    const events = ledger.read();
+    const head = events.at(-1);
+    const outcomes = new Map();
+    for (const event of events) {
+        const itemId = typeof event.data["itemId"] === "string" ? event.data["itemId"] : undefined;
+        if (!itemId)
+            continue;
+        if (event.type === "item.done") {
+            outcomes.set(itemId, {
+                outcome: event.data["status"] === "applied" ? "applied" : "failed",
+                verified: event.data["verified"] === true,
+            });
+        }
+        else if (event.type === "item.rejected") {
+            outcomes.set(itemId, {
+                outcome: "rejected",
+                ...(typeof event.data["failedCheck"] === "string"
+                    ? { failedCheck: event.data["failedCheck"] }
+                    : {}),
+            });
+        }
+        else if (event.type === "item.error") {
+            outcomes.set(itemId, { outcome: "failed" });
+        }
+    }
+    const plan = store.readPlan(run.runId);
+    let verification;
+    let verificationSha256;
+    if (store.hasFile(run.runId, "verification.json")) {
+        const raw = readFileSync(join(store.runDir(run.runId), "verification.json"), "utf8");
+        verificationSha256 = sha256(raw);
+        const parsed = JSON.parse(raw);
+        verification = {
+            passed: parsed.passed === true,
+            ...(parsed.failedCheck ? { failedCheck: parsed.failedCheck } : {}),
+            checks: (parsed.checks ?? []).map((entry) => ({ name: entry.name, status: entry.status })),
+            sha256: verificationSha256,
+        };
+    }
+    const ledgerFile = join(store.runDir(run.runId), "steps.jsonl");
+    const predicate = {
+        generator: { name: "autoremediator", version: input.toolVersion },
+        attestedAt: input.now.toISOString(),
+        run: {
+            runId: run.runId,
+            status: run.status,
+            createdAt: run.createdAt,
+            updatedAt: run.updatedAt,
+            ...(run.source ? { source: run.source } : {}),
+            cveIds: run.cveIds,
+            ...(run.planId ? { planId: run.planId } : {}),
+            base: run.base,
+            ...(run.after ? { after: run.after } : {}),
+            ...(input.currentFilesSha256 && (run.after ?? run.base)
+                ? { projectMatchesRunEnd: input.currentFilesSha256 === (run.after ?? run.base).filesSha256 }
+                : {}),
+        },
+        items: (plan?.items ?? []).map((item) => {
+            const seen = outcomes.get(item.itemId);
+            return {
+                itemId: item.itemId,
+                cveId: item.cveId,
+                packageName: item.packageName,
+                fromVersion: item.fromVersion,
+                toVersion: item.toVersion,
+                strategy: item.strategy,
+                rollback: item.rollback,
+                outcome: seen?.outcome ?? "not-attempted",
+                verified: seen?.verified,
+                failedCheck: seen?.failedCheck,
+            };
+        }),
+        skipped: (plan?.skipped ?? []).map((skip) => ({
+            cveId: skip.cveId,
+            packageName: skip.packageName,
+            fromVersion: skip.fromVersion,
+            reason: skip.reason,
+        })),
+        verification: verification ?? null,
+        ledger: {
+            file: `.autoremediator/runs/${run.runId}/steps.jsonl`,
+            sha256: sha256(readFileSync(ledgerFile)),
+            events: events.length,
+            chainVerified: true,
+            headHash: head?.hash ?? null,
+        },
+    };
+    return {
+        ok: true,
+        ledgerHead: head?.hash ?? "",
+        statement: {
+            _type: STATEMENT_TYPE,
+            subject: input.subjects,
+            predicateType: RUN_PREDICATE_TYPE,
+            predicate,
+        },
+    };
+}
+//# sourceMappingURL=attest.js.map

package/dist/api/evidence-pack/attest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attest.js","sourceRoot":"","sources":["../../../src/api/evidence-pack/attest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,MAAM,CAAC,MAAM,cAAc,GAAG,iCAAiC,CAAC;AAChE,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAC7B,uEAAuE,CAAC;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAC9B,0EAA0E,CAAC;AAc7E,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,oBAAoB,CAAC,GAAG,CAAC;SAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACvD,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAChB,IAAI,CAAC;YACH,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAQjC;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uCAAuC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,EAAE;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;IACJ,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE;gBACnB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBAClE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI;aAC1C,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC1C,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE;gBACnB,OAAO,EAAE,UAAU;gBACnB,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,QAAQ;oBAC/C,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACvC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,YAAqB,CAAC;IAC1B,IAAI,kBAAsC,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;QACrF,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAI5B,CAAC;QACF,YAAY,GAAG;YACb,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,IAAI;YAC9B,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1F,MAAM,EAAE,kBAAkB;SAC3B,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG;QAChB,SAAS,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE;QACjE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;QACnC,GAAG,EAAE;YACH,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC;gBACrD,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;gBAC5F,CAAC,CAAC,EAAE,CAAC;SACR;QACD,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,eAAe;gBACzC,QAAQ,EAAE,IAAI,EAAE,QAAQ;gBACxB,WAAW,EAAE,IAAI,EAAE,WAAW;aAC/B,CAAC;QACJ,CAAC,CAAC;QACF,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5C,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,YAAY,EAAE,YAAY,IAAI,IAAI;QAClC,MAAM,EAAE;YACN,IAAI,EAAE,wBAAwB,GAAG,CAAC,KAAK,cAAc;YACrD,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI;SAC7B;KACF,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,IAAI;QACR,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE;QAC5B,SAAS,EAAE;YACT,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,KAAK,CAAC,QAAQ;YACvB,aAAa,EAAE,kBAAkB;YACjC,SAAS;SACV;KACF,CAAC;AACJ,CAAC"}

package/dist/api/evidence-pack/components.d.ts

@@ -0,0 +1,49 @@
+/** `pkg:npm/%40scope/name@1.2.3`: the Package URL of an npm package (purl spec, type `npm`). */
+export declare function npmPurl(name: string, version: string): string;
+/** CycloneDX models `@scope/name` as group `@scope` and name `name`. */
+export declare function splitName(name: string): {
+    group?: string;
+    name: string;
+};
+export interface CycloneDxHash {
+    alg: "SHA-1" | "SHA-256" | "SHA-384" | "SHA-512";
+    content: string;
+}
+/**
+ * Turn a Subresource Integrity string from a lockfile (`sha512-<base64>`, possibly several
+ * separated by spaces) into the strongest CycloneDX hash it holds. Anything that does not decode to
+ * a digest of the right length is dropped rather than guessed at.
+ */
+export declare function hashFromIntegrity(integrity: string): CycloneDxHash | undefined;
+export type CycloneDxLicenseChoice = {
+    license: {
+        id: string;
+    };
+} | {
+    license: {
+        name: string;
+    };
+} | {
+    expression: string;
+};
+/**
+ * The CycloneDX `licenses` entry for a license string from a lockfile or `package.json`. A single
+ * known SPDX id becomes `id`; an expression whose every operand is known becomes `expression`;
+ * everything else (including `SEE LICENSE IN ...`) is kept verbatim as a `name`.
+ */
+export declare function licenseChoice(raw: string): CycloneDxLicenseChoice | undefined;
+/** What a lockfile (or the installed copy) says about one locked package, keyed by `name@version`. */
+export interface LockedPackageFacts {
+    integrity?: string;
+    license?: string;
+}
+/** `name@version` key of a package fact. */
+export declare const factKey: (name: string, version: string) => string;
+/**
+ * Integrity digests (and, for npm lockfiles, licenses) the lockfile records, by `name@version`.
+ * Read from the lockfile text alone; a lockfile that cannot be read yields nothing.
+ */
+export declare function readLockFacts(lockfile: string, content: string): Map<string, LockedPackageFacts>;
+/** The `license` an installed copy declares, when `node_modules` has it. */
+export declare function installedLicense(cwd: string, name: string, version: string): string | undefined;
+//# sourceMappingURL=components.d.ts.map

package/dist/api/evidence-pack/components.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.d.ts","sourceRoot":"","sources":["../../../src/api/evidence-pack/components.ts"],"names":[],"mappings":"AAQA,gGAAgG;AAChG,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAS7D;AAED,wEAAwE;AACxE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAGxE;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB;AAgBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAa9E;AAqCD,MAAM,MAAM,sBAAsB,GAC9B;IAAE,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC3B;IAAE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC7B;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3B;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS,CAa7E;AAED,sGAAsG;AACtG,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,4CAA4C;AAC5C,eAAO,MAAM,OAAO,SAAU,MAAM,WAAW,MAAM,KAAG,MAA8B,CAAC;AAiHvF;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAYhG;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAa/F"}

package/dist/api/evidence-pack/components.js

@@ -0,0 +1,278 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import YAML from "yaml";
+import { stripJsonc } from "../../scanner/lock-graph/bun.js";
+import { isRecord } from "../../scanner/lock-graph/types.js";
+/** `pkg:npm/%40scope/name@1.2.3`: the Package URL of an npm package (purl spec, type `npm`). */
+export function npmPurl(name, version) {
+    const encoded = name.startsWith("@")
+        ? `%40${name
+            .slice(1)
+            .split("/")
+            .map((part) => encodeURIComponent(part))
+            .join("/")}`
+        : encodeURIComponent(name);
+    return `pkg:npm/${encoded}@${encodeURIComponent(version)}`;
+}
+/** CycloneDX models `@scope/name` as group `@scope` and name `name`. */
+export function splitName(name) {
+    const slash = name.startsWith("@") ? name.indexOf("/") : -1;
+    return slash === -1 ? { name } : { group: name.slice(0, slash), name: name.slice(slash + 1) };
+}
+const SRI_ALGORITHMS = {
+    sha1: "SHA-1",
+    sha256: "SHA-256",
+    sha384: "SHA-384",
+    sha512: "SHA-512",
+};
+const HEX_LENGTH = {
+    "SHA-1": 40,
+    "SHA-256": 64,
+    "SHA-384": 96,
+    "SHA-512": 128,
+};
+const STRENGTH = ["SHA-1", "SHA-256", "SHA-384", "SHA-512"];
+/**
+ * Turn a Subresource Integrity string from a lockfile (`sha512-<base64>`, possibly several
+ * separated by spaces) into the strongest CycloneDX hash it holds. Anything that does not decode to
+ * a digest of the right length is dropped rather than guessed at.
+ */
+export function hashFromIntegrity(integrity) {
+    let best;
+    for (const token of integrity.trim().split(/\s+/)) {
+        const dash = token.indexOf("-");
+        const alg = dash > 0 ? SRI_ALGORITHMS[token.slice(0, dash).toLowerCase()] : undefined;
+        if (!alg)
+            continue;
+        const content = Buffer.from(token.slice(dash + 1).split("?")[0] ?? "", "base64").toString("hex");
+        if (content.length !== HEX_LENGTH[alg])
+            continue;
+        if (!best || STRENGTH.indexOf(alg) > STRENGTH.indexOf(best.alg))
+            best = { alg, content };
+    }
+    return best;
+}
+/** SPDX identifiers common in npm; anything else is reported by name, never as an invented id. */
+const SPDX_IDS = [
+    "0BSD",
+    "AGPL-3.0-only",
+    "AGPL-3.0-or-later",
+    "Apache-2.0",
+    "Artistic-2.0",
+    "BlueOak-1.0.0",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "BSL-1.0",
+    "CC-BY-3.0",
+    "CC-BY-4.0",
+    "CC0-1.0",
+    "EPL-2.0",
+    "GPL-2.0-only",
+    "GPL-2.0-or-later",
+    "GPL-3.0-only",
+    "GPL-3.0-or-later",
+    "ISC",
+    "LGPL-2.1-only",
+    "LGPL-2.1-or-later",
+    "LGPL-3.0-only",
+    "LGPL-3.0-or-later",
+    "MIT",
+    "MIT-0",
+    "MPL-2.0",
+    "OFL-1.1",
+    "Python-2.0",
+    "Unlicense",
+    "WTFPL",
+    "Zlib",
+];
+const SPDX_BY_LOWER = new Map(SPDX_IDS.map((id) => [id.toLowerCase(), id]));
+/**
+ * The CycloneDX `licenses` entry for a license string from a lockfile or `package.json`. A single
+ * known SPDX id becomes `id`; an expression whose every operand is known becomes `expression`;
+ * everything else (including `SEE LICENSE IN ...`) is kept verbatim as a `name`.
+ */
+export function licenseChoice(raw) {
+    const text = raw.trim();
+    if (text === "")
+        return undefined;
+    const single = SPDX_BY_LOWER.get(text.toLowerCase());
+    if (single)
+        return { license: { id: single } };
+    if (/\s(?:OR|AND|WITH)\s/.test(text)) {
+        const operands = text.replaceAll(/[()]/g, " ").split(/\s+(?:OR|AND|WITH)\s+|\s+/);
+        const known = operands
+            .filter((operand) => operand !== "" && !["OR", "AND", "WITH"].includes(operand))
+            .every((operand) => SPDX_BY_LOWER.has(operand.toLowerCase().replace(/\+$/, "")));
+        if (known)
+            return { expression: text };
+    }
+    return { license: { name: text } };
+}
+/** `name@version` key of a package fact. */
+export const factKey = (name, version) => `${name}@${version}`;
+function pnpmKey(key) {
+    const bare = key.startsWith("/") ? key.slice(1) : key;
+    const paren = bare.indexOf("(");
+    const core = paren === -1 ? bare : bare.slice(0, paren);
+    const at = core.lastIndexOf("@");
+    if (at > 0)
+        return { name: core.slice(0, at), version: core.slice(at + 1) };
+    // lockfile v5: `name/version[_peers]`
+    const segments = core.split("/");
+    const nameLength = core.startsWith("@") ? 2 : 1;
+    const version = segments[nameLength]?.split("_")[0];
+    return version ? { name: segments.slice(0, nameLength).join("/"), version } : undefined;
+}
+function npmName(path) {
+    const marker = "node_modules/";
+    const at = path.lastIndexOf(marker);
+    return at === -1 ? undefined : path.slice(at + marker.length);
+}
+function fromNpm(content, facts) {
+    const data = JSON.parse(content);
+    if (!isRecord(data))
+        return;
+    const record = (name, entry) => {
+        const version = entry["version"];
+        if (typeof version !== "string")
+            return;
+        const found = facts.get(factKey(name, version)) ?? {};
+        if (typeof entry["integrity"] === "string")
+            found.integrity ??= entry["integrity"];
+        if (typeof entry["license"] === "string")
+            found.license ??= entry["license"];
+        facts.set(factKey(name, version), found);
+    };
+    if (isRecord(data["packages"])) {
+        for (const [path, entry] of Object.entries(data["packages"])) {
+            if (!isRecord(entry) || entry["link"] === true)
+                continue;
+            const name = typeof entry["name"] === "string" ? entry["name"] : npmName(path);
+            if (name)
+                record(name, entry);
+        }
+    }
+    else if (isRecord(data["dependencies"])) {
+        const walk = (tree) => {
+            for (const [name, entry] of Object.entries(tree)) {
+                if (!isRecord(entry))
+                    continue;
+                record(name, entry);
+                if (isRecord(entry["dependencies"]))
+                    walk(entry["dependencies"]);
+            }
+        };
+        walk(data["dependencies"]);
+    }
+}
+function fromPnpm(content, facts) {
+    const data = YAML.parse(content);
+    if (!isRecord(data) || !isRecord(data["packages"]))
+        return;
+    for (const [key, entry] of Object.entries(data["packages"])) {
+        if (!isRecord(entry))
+            continue;
+        const parsed = pnpmKey(key);
+        const resolution = entry["resolution"];
+        if (!parsed || !isRecord(resolution) || typeof resolution["integrity"] !== "string")
+            continue;
+        const name = typeof entry["name"] === "string" ? entry["name"] : parsed.name;
+        const version = typeof entry["version"] === "string" ? entry["version"] : parsed.version;
+        facts.set(factKey(name, version), { integrity: resolution["integrity"] });
+    }
+}
+/** Yarn classic only: berry's `checksum` is not a Subresource Integrity digest and is not used. */
+function fromYarn(content, facts) {
+    let names = [];
+    let version;
+    const flush = (integrity) => {
+        if (!version)
+            return;
+        for (const name of names)
+            facts.set(factKey(name, version), { integrity });
+    };
+    for (const raw of content.split(/\r?\n/)) {
+        if (raw.trim() === "" || raw.startsWith("#"))
+            continue;
+        if (!raw.startsWith(" ")) {
+            names = raw
+                .replace(/:$/, "")
+                .replaceAll('"', "")
+                .split(",")
+                .map((descriptor) => descriptor.trim())
+                .flatMap((descriptor) => {
+                const at = descriptor.indexOf("@", 1);
+                return at > 0 ? [descriptor.slice(0, at)] : [];
+            });
+            version = undefined;
+            continue;
+        }
+        const line = raw.trim();
+        const versionMatch = /^version:?\s+"?([^"\s]+)"?$/.exec(line);
+        if (versionMatch?.[1])
+            version = versionMatch[1];
+        const integrityMatch = /^integrity\s+(\S+)$/.exec(line);
+        if (integrityMatch?.[1])
+            flush(integrityMatch[1]);
+    }
+}
+function fromBun(content, facts) {
+    const data = JSON.parse(stripJsonc(content));
+    if (!isRecord(data) || !isRecord(data["packages"]))
+        return;
+    for (const entry of Object.values(data["packages"])) {
+        if (!Array.isArray(entry) || typeof entry[0] !== "string")
+            continue;
+        const ident = entry[0];
+        const at = ident.indexOf("@", 1);
+        if (at <= 0 || ident.includes("@workspace:"))
+            continue;
+        const spec = ident.slice(at + 1);
+        const version = spec.startsWith("npm:") ? spec.slice(spec.lastIndexOf("@") + 1) : spec;
+        const integrity = entry.find((part, index) => index >= 3 && typeof part === "string" && /^sha\d+-/.test(part));
+        if (typeof integrity === "string")
+            facts.set(factKey(ident.slice(0, at), version), { integrity });
+    }
+}
+/**
+ * Integrity digests (and, for npm lockfiles, licenses) the lockfile records, by `name@version`.
+ * Read from the lockfile text alone; a lockfile that cannot be read yields nothing.
+ */
+export function readLockFacts(lockfile, content) {
+    const facts = new Map();
+    try {
+        if (lockfile === "package-lock.json" || lockfile === "npm-shrinkwrap.json")
+            fromNpm(content, facts);
+        else if (lockfile === "pnpm-lock.yaml")
+            fromPnpm(content, facts);
+        else if (lockfile === "yarn.lock")
+            fromYarn(content, facts);
+        else if (lockfile === "bun.lock")
+            fromBun(content, facts);
+    }
+    catch {
+        // An unreadable lockfile is already reported by the lock-graph reader; facts are optional.
+    }
+    return facts;
+}
+/** The `license` an installed copy declares, when `node_modules` has it. */
+export function installedLicense(cwd, name, version) {
+    const file = join(cwd, "node_modules", ...name.split("/"), "package.json");
+    if (!existsSync(file))
+        return undefined;
+    try {
+        const manifest = JSON.parse(readFileSync(file, "utf8"));
+        if (!isRecord(manifest) || manifest["version"] !== version)
+            return undefined;
+        const license = manifest["license"];
+        if (typeof license === "string")
+            return license;
+        if (isRecord(license) && typeof license["type"] === "string")
+            return license["type"];
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=components.js.map

package/dist/api/evidence-pack/components.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.js","sourceRoot":"","sources":["../../../src/api/evidence-pack/components.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAE7D,gGAAgG;AAChG,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAe;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAClC,CAAC,CAAC,MAAM,IAAI;aACP,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;aACvC,IAAI,CAAC,GAAG,CAAC,EAAE;QAChB,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,WAAW,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AAOD,MAAM,cAAc,GAAyC;IAC3D,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;CAClB,CAAC;AACF,MAAM,UAAU,GAAyC;IACvD,OAAO,EAAE,EAAE;IACX,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,GAAG;CACf,CAAC;AACF,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAErE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,IAA+B,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CACvF,KAAK,CACN,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACjD,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC3F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kGAAkG;AAClG,MAAM,QAAQ,GAAG;IACf,MAAM;IACN,eAAe;IACf,mBAAmB;IACnB,YAAY;IACZ,cAAc;IACd,eAAe;IACf,cAAc;IACd,cAAc;IACd,SAAS;IACT,WAAW;IACX,WAAW;IACX,SAAS;IACT,SAAS;IACT,cAAc;IACd,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,KAAK;IACL,eAAe;IACf,mBAAmB;IACnB,eAAe;IACf,mBAAmB;IACnB,KAAK;IACL,OAAO;IACP,SAAS;IACT,SAAS;IACT,YAAY;IACZ,WAAW;IACX,OAAO;IACP,MAAM;CACP,CAAC;AACF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAO5E;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,IAAI,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;IAC/C,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,QAAQ;aACnB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAC/E,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,KAAK;YAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AACrC,CAAC;AAQD,4CAA4C;AAC5C,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,OAAe,EAAU,EAAE,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;AAEvF,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IAC5E,sCAAsC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1F,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,MAAM,GAAG,eAAe,CAAC;IAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,KAAsC;IACtE,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IAC5B,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAA8B,EAAQ,EAAE;QACpE,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO;QACxC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ;YAAE,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,WAAW,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;YAAE,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7E,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI;gBAAE,SAAS;YACzD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/E,IAAI,IAAI;gBAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,IAA6B,EAAQ,EAAE;YACnD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC/B,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACpB,IAAI,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oBAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,KAAsC;IACvE,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO;IAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,UAAU,CAAC,WAAW,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC9F,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7E,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACzF,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,SAAS,QAAQ,CAAC,OAAe,EAAE,KAAsC;IACvE,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,OAA2B,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAQ,EAAE;QACxC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACvD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,GAAG,GAAG;iBACR,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;iBACjB,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;iBACnB,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;iBACtC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;gBACtB,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACtC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,CAAC,CAAC,CAAC;YACL,OAAO,GAAG,SAAS,CAAC;YACpB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,YAAY,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,cAAc,EAAE,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,KAAsC;IACtE,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO;IAC3D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,SAAS;QACpE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,SAAS;QACvD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAC1B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CACjF,CAAC;QACF,IAAI,OAAO,SAAS,KAAK,QAAQ;YAC/B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,OAAe;IAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,IAAI,CAAC;QACH,IAAI,QAAQ,KAAK,mBAAmB,IAAI,QAAQ,KAAK,qBAAqB;YACxE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;aACrB,IAAI,QAAQ,KAAK,gBAAgB;YAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;aAC5D,IAAI,QAAQ,KAAK,WAAW;YAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;aACvD,IAAI,QAAQ,KAAK,UAAU;YAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,2FAA2F;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAY,EAAE,OAAe;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;QAChD,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;QACrF,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/api/evidence-pack/cra.d.ts

@@ -0,0 +1,54 @@
+import type { CveDetails } from "../../platform/types.js";
+import type { VexFinding } from "./findings.js";
+import type { ProductIdentity } from "./sbom.js";
+/** Article 14(2) of Regulation (EU) 2024/2847: early warning within 24 hours of awareness. */
+export declare const EARLY_WARNING_HOURS = 24;
+/** Article 14(2)(b): vulnerability notification within 72 hours of awareness. */
+export declare const NOTIFICATION_HOURS = 72;
+/** Article 14(2)(c): final report no later than 14 days after a corrective or mitigating measure is available. */
+export declare const FINAL_REPORT_DAYS = 14;
+/**
+ * Parse an ISO 8601 timestamp that states its time zone. A timestamp without `Z` or an offset is
+ * refused: a deadline computed from a guessed zone could be wrong by hours, and the deadlines are
+ * the point.
+ */
+export declare function parseAwareness(value: string, label?: string): Date;
+export interface CraDeadlines {
+    /** When the manufacturer became aware, as the caller stated it (UTC). */
+    awarenessAt: string;
+    /** Awareness plus 24 hours. */
+    earlyWarningDue: string;
+    /** Awareness plus 72 hours. */
+    notificationDue: string;
+    /** The corrective measure's availability plus 14 days; absent until that date is given. */
+    finalReportDue?: string;
+}
+/** The three Article 14(2) deadlines, in UTC. Pure arithmetic on instants; no calendar or zone rules. */
+export declare function craDeadlines(awareness: Date, correctiveMeasureAvailableAt?: Date): CraDeadlines;
+export interface CraDraft {
+    cveId: string;
+    /** File name inside the pack's `cra-reports/` directory. */
+    fileName: string;
+    markdown: string;
+    deadlines?: CraDeadlines;
+    /** Why this advisory has a draft: CISA KEV lists it and the product's lockfile is affected. */
+    status: VexFinding["status"];
+}
+/** A file name stem for an advisory id: letters, digits, dot, dash and underscore only. */
+export declare function safeFileStem(id: string): string;
+/**
+ * A markdown DRAFT of the three Article 14(2) reports for one actively exploited vulnerability,
+ * filled in from local data. Everything the data cannot supply is marked for the manufacturer, and
+ * nothing is submitted: reports go through the single reporting platform by hand.
+ */
+export declare function buildCraDraft(input: {
+    cveId: string;
+    details: CveDetails | null | undefined;
+    findings: VexFinding[];
+    product: ProductIdentity;
+    awareness?: Date;
+    correctiveMeasureAvailableAt?: Date;
+    generatedAt: Date;
+    toolVersion: string;
+}): CraDraft;
+//# sourceMappingURL=cra.d.ts.map

package/dist/api/evidence-pack/cra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cra.d.ts","sourceRoot":"","sources":["../../../src/api/evidence-pack/cra.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,8FAA8F;AAC9F,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,kHAAkH;AAClH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAKpC;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAgB,GAAG,IAAI,CA8BzE;AAED,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,2FAA2F;IAC3F,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,yGAAyG;AACzG,wBAAgB,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,4BAA4B,CAAC,EAAE,IAAI,GAAG,YAAY,CAa/F;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,+FAA+F;IAC/F,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;CAC9B;AAED,2FAA2F;AAC3F,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAG/C;AAiED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,CAAC;IACvC,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,OAAO,EAAE,eAAe,CAAC;IACzB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,4BAA4B,CAAC,EAAE,IAAI,CAAC;IACpC,WAAW,EAAE,IAAI,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,QAAQ,CAmIX"}