autoremediator 0.21.2 → 0.22.0

package/dist/remediation/impact/dts-surface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dts-surface.js","sourceRoot":"","sources":["../../../src/remediation/impact/dts-surface.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAgB,MAAM,UAAU,CAAC;AAoEvF,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI;SACR,UAAU,CAAC,mBAAmB,EAAE,EAAE,CAAC;SACnC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC;SACvB,UAAU,CAAC,eAAe,EAAE,KAAK,CAAC;SAClC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,IAAgC;IAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,UAAmB;IACvD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC;IACxC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,GAAY,EAAE,KAAa;IACxD,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAA+B,CAAC;QACrD,OAAO;YACL,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE;YAC7E,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC;SAC/C,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI;YAC/B,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC;SAC/C,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,IAA2B,CAAC;QAC7C,OAAO;YACL,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE;YACrE,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,KAAK;SACZ,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM,KAAK,EAAE;QACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI;QAC/B,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,EAAW;IAC5C,MAAM,MAAM,GAAG,CAAE,EAAE,CAAC,MAAgC,IAAI,EAAE,CAAC;SACxD,MAAM,CAAC,CAAC,KAAK,EAAoB,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SAClD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;SAC1E,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,cAAqC,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,MAAM;SACrB,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CACR,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7H;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;QACL,MAAM;QACN,OAAO;QACP,UAAU;QACV,IAAI,EAAE,GAAG,UAAU,IAAI,EAAE,IAAI,SAAS,QAAQ,OAAO,IAAI,SAAS,EAAE;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB,EAAE,MAAiB;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/C,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;QACzD,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,QAAiB;IAChD,OAAO,QAAQ,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAiB,EAAE,IAAe;IACnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3B,MAAM,aAAa,GAAG,GAAG,CAAC,aAA0C,CAAC;QACrE,IAAI,aAAa,KAAK,SAAS;YAAE,SAAS;QAC1C,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,oBAAoB,CAAC;YAC1B,KAAK,8BAA8B,CAAC;YACpC,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,GAA0B,CAAC;gBAC3C,IAAI,GAAG,EAAE,IAAI,KAAK,mBAAmB;oBAAE,MAAM;gBAC7C,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;gBACtD,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM;gBAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC;gBACrC,SAAS,CAAC,MAAM,EAAE;oBAChB,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC;oBAC9B,IAAI;oBACJ,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI;oBAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI;oBAC/B,UAAU,EAAE,EAAE;oBACd,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS;iBAC5D,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,kBAAkB,CAAC;YACxB,KAAK,4BAA4B,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,GAAG,CAAC,GAA0B,CAAC;gBAC3C,IAAI,GAAG,EAAE,IAAI,KAAK,mBAAmB;oBAAE,MAAM;gBAC7C,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,GAAG,CAAC,KAA4B,CAAC;gBAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK;oBAAE,MAAM;gBACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC;gBACrC,MAAM,UAAU,GAAG,GAAG,CAAC,IAAc,CAAC;gBACtC,MAAM,IAAI,GACR,UAAU,KAAK,aAAa;oBAC1B,CAAC,CAAC,aAAa;oBACf,CAAC,CAAC,UAAU,KAAK,KAAK;wBACpB,CAAC,CAAC,QAAQ;wBACV,CAAC,CAAC,UAAU,KAAK,KAAK;4BACpB,CAAC,CAAC,QAAQ;4BACV,CAAC,CAAC,QAAQ,CAAC;gBACnB,SAAS,CAAC,MAAM,EAAE;oBAChB,GAAG,EACD,IAAI,KAAK,aAAa;wBACpB,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,SAAS,CACP,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ;4BACpC,CAAC,CAAC,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE;4BAChD,CAAC,CAAC,IAAI,EACR,QAAQ,CACT;oBACP,IAAI,EAAE,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;oBACnD,MAAM,EAAE,QAAQ;oBAChB,IAAI;oBACJ,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI;oBAC/B,QAAQ,EAAE,KAAK;oBACf,UAAU,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;iBACvC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,mBAAmB,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;gBAC1D,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM;gBAC9B,SAAS,CAAC,MAAM,EAAE;oBAChB,GAAG,EAAE,IAAI;oBACT,IAAI;oBACJ,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI;oBAC/B,QAAQ,EAAE,KAAK;oBACf,UAAU,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;iBACrC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,4BAA4B,EAAE,CAAC;gBAClC,SAAS,CAAC,MAAM,EAAE;oBAChB,GAAG,EAAE,QAAQ;oBACb,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,KAAK;oBACf,UAAU,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;iBACrC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,iCAAiC,EAAE,CAAC;gBACvC,SAAS,CAAC,MAAM,EAAE;oBAChB,GAAG,EAAE,OAAO;oBACZ,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,KAAK;oBACf,UAAU,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;iBACrC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,kBAAkB,EAAE,CAAC;gBACxB,SAAS,CAAC,MAAM,EAAE;oBAChB,GAAG,EAAE,SAAS;oBACd,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI;oBAC3B,IAAI,EAAE,OAAO;oBACb,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,IAAI;oBAC/B,UAAU,EAAE,EAAE;oBACd,IAAI,EAAE,GAAG,CAAE,GAAG,CAAC,UAAoC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,EAAE;iBACrM,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,SAAS,CAAC;gBACR,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAgB;IACjD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB,EAAE,QAAmB;IACvD,+EAA+E;IAC/E,MAAM,QAAQ,GAAiB;QAC7B,OAAO;QACP,UAAU;QACV,MAAM;QACN,UAAU;QACV,WAAW;QACX,MAAM;QACN,WAAW;QACX,QAAQ;QACR,OAAO;KACR,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IACjG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/C,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;QAC5C,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;IAC9B,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC;IACpC,IAAI,QAAQ,CAAC,QAAQ;QAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5F,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,KAAK;gBAAE,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;;gBAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,SAAS,gBAAgB,CAAC,IAAY,EAAE,MAAiB,EAAE,IAAa;IACtE,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAK,IAAI,CAAC,KAA+B,IAAI,EAAE;YAC5D,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,QAA+B,CAAC,CAAC;QAC5D,IAAI,IAAI;YAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACzC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAG,IAAI,CAAC,OAAiC,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAyB;IACzC,IAAI,IAAI,EAAE,IAAI,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,IAAI,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAA2B,CAAC,CAAC;QACxD,MAAM,KAAK,GAAI,IAAI,CAAC,KAAuC,EAAE,IAAI,CAAC;QAClE,OAAO,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,WAAoB;IAC/D,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;QACzB,KAAK,mBAAmB,CAAC;QACzB,KAAK,qBAAqB,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAyB,CAAC;YACjD,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY;gBAAE,OAAO,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;YACxD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;QACD,KAAK,kBAAkB,CAAC;QACxB,KAAK,4BAA4B,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,WAAW,CAAC,EAAyB,CAAC;YACjD,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY;gBAAE,OAAO,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,UAAiC,CAAC,CAAC;YAC5E,WAAW,CACT,IAAI,EACJ,MAAM,EACJ,WAAW,CAAC,IAA4B,EAAE,IAA8B,IAAI,EAAE,CACjF,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;QACD,KAAK,wBAAwB,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAyB,CAAC;YACjD,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY;gBAAE,OAAO,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,CAAE,WAAW,CAAC,OAAiC,IAAI,EAAE,CAAC;iBACnE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;iBACpC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,WAAW,CACT,IAAI,EACJ,MAAM,EACJ,WAAW,CAAC,IAA4B,EAAE,IAA8B,IAAI,EAAE,CACjF,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;QACD,KAAK,wBAAwB,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAyB,CAAC;YACjD,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY;gBAAE,OAAO,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,cAAqC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,cAAqC,CAAC,IAAI,SAAS,EAAE,CAAC;YACtK,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;QACD,KAAK,mBAAmB,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,WAAW,CAAC,EAAyB,CAAC;YACjD,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY;gBAAE,OAAO,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,OAAO,GACT,WAAW,CAAC,IAA4B,EAAE,OAAiC;gBAC5E,WAAW,CAAC,OAAiC;gBAC9C,EAAE,CAAC;YACL,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnC,IAAI,IAAI,KAAK,SAAS;oBAAE,SAAS;gBACjC,SAAS,CAAC,MAAM,EAAE;oBAChB,GAAG,EAAE,IAAI;oBACT,IAAI;oBACJ,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,KAAK;oBACf,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,EAAE;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,WAAkC,CAAC,IAAI,MAAM;iBACvE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;QACD,KAAK,qBAAqB,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAgB,EAAE,CAAC;YAC/B,KAAK,MAAM,UAAU,IAAK,WAAW,CAAC,YAAsC,IAAI,EAAE,EAAE,CAAC;gBACnF,MAAM,EAAE,GAAG,UAAU,CAAC,EAAyB,CAAC;gBAChD,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY;oBAAE,SAAS;gBACxC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;gBACxD,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;gBACnE,MAAM,UAAU,GAAI,EAAE,CAAC,cAAsC,EAAE,cAElD,CAAC;gBACd,IAAI,UAAU;oBAAE,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,qBAAqB,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAyB,CAAC;YACjD,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY;gBAAE,OAAO,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;YACzD,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAI,WAAW,CAAC,IAA4B,EAAE,IAA6B,CAAC;YACtF,KAAK,MAAM,SAAS,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;gBACnC,MAAM,KAAK,GACT,SAAS,CAAC,IAAI,KAAK,wBAAwB;oBACzC,CAAC,CAAE,SAAS,CAAC,WAAmC;oBAChD,CAAC,CAAC,SAAS,CAAC;gBAChB,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,KAAK,MAAM,MAAM,IAAI,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;oBACxD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC7C,IAAI,KAAK;wBAAE,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;;wBAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAC5C,SAAS,CAAC,MAAM,EAAE;wBAChB,GAAG,EAAE,MAAM,CAAC,IAAI;wBAChB,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;wBACxD,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,KAAK;wBACf,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,IAAI,EACF,MAAM,CAAC,IAAI,KAAK,UAAU;4BACxB,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC;qBAC5E,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;QACD,SAAS,CAAC;YACR,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAcD,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,IAAI,GAAgB,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAEtF,MAAM,OAAO,GAAG,CAAC,OAAoB,EAAE,QAAiB,EAAQ,EAAE;QAChE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,QAAQ;gBAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;;gBACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,QAAQ;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,SAAS,IAAK,OAAO,CAAC,IAA8B,IAAI,EAAE,EAAE,CAAC;QACtE,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;YACvB,KAAK,wBAAwB,EAAE,CAAC;gBAC9B,MAAM,WAAW,GAAG,SAAS,CAAC,WAA6B,CAAC;gBAC5D,MAAM,MAAM,GAAI,SAAS,CAAC,MAAoC,EAAE,KAAK,CAAC;gBACtE,IAAI,WAAW,EAAE,CAAC;oBAChB,OAAO,CAAC,qBAAqB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC1D,CAAC;qBAAM,IAAI,MAAM,EAAE,CAAC;oBAClB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;wBAClB,MAAM;wBACN,GAAG,EAAE,KAAK;wBACV,KAAK,EAAE,CAAE,SAAS,CAAC,UAAoC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;4BACjF,QAAQ,EAAE,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE;4BAC9C,QAAQ,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE;yBAC5C,CAAC,CAAC;qBACJ,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,KAAK,MAAM,SAAS,IAAK,SAAS,CAAC,UAAoC,IAAI,EAAE,EAAE,CAAC;wBAC9E,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACtD,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;wBAChD,IAAI,QAAQ,IAAI,KAAK;4BAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,sBAAsB,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAI,SAAS,CAAC,MAAyC,EAAE,KAAK,CAAC;gBAC3E,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAoD,CAAC;gBAChF,IAAI,MAAM;oBACR,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;wBAClB,MAAM;wBACN,GAAG,EAAE,CAAC,QAAQ;wBACd,SAAS,EAAE,QAAQ,EAAE,IAAI,IAAI,QAAQ,EAAE,KAAK;qBAC7C,CAAC,CAAC;gBACL,MAAM;YACR,CAAC;YACD,KAAK,0BAA0B,EAAE,CAAC;gBAChC,MAAM,WAAW,GAAG,SAAS,CAAC,WAAkC,CAAC;gBACjE,IAAI,CAAC,WAAW;oBAAE,MAAM;gBACxB,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzD,CAAC;qBAAM,CAAC;oBACN,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;oBACzD,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;wBACf,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,SAAS,CAAC;wBAC5B,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,oBAAoB,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,SAAS,CAAC,UAAiC,CAAC;gBAC/D,IAAI,UAAU,EAAE,IAAI,KAAK,YAAY;oBAAE,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBACvF,MAAM;YACR,CAAC;YACD,SAAS,CAAC;gBACR,OAAO,CAAC,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;gBACvD,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,QAAgC,EAAE,IAAY;IAChE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,IAAI;QAAE,OAAO,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oGAAoG;AACpG,SAAS,cAAc,CAAC,QAAgC,EAAE,MAAiB,EAAE,KAAa;IACxF,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO;IACtB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzD,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;YAAE,SAAS;QAC3C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;gBACjC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;AAC9B,CAAC;AAED,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,KAAmB,EAAE,SAAiB;IACtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,IAAY,EAA2B,EAAE;QACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1C,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAsB,EAAE;QACzE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,IAAI,OAAO,EAAE,GAAG,IAAI,QAAQ,EAAE,GAAG,IAAI,QAAQ,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC,IAAI,CAClF,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CACxC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,KAAkB,EAA0B,EAAE;QAC9F,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,aAAa,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC;QACrE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEhB,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,MAAM;gBACR,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACnB,GAAG,MAAM;oBACT,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;oBAClC,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;iBACjC,CAAC,CAAC;QACP,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,KAAK,CAAC,IAAI,CACR,mBAAmB,QAAQ,CAAC,MAAM,QAAQ,IAAI,0CAA0C,CACzF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YAC5D,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACjB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,aAAa;oBACxC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;wBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1E,CAAC;iBAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAC1B,KAAK,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACpD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAC3C,IAAI,MAAM;wBAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC/D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;oBAC3C,SAAS,CAAC,SAAS,EAAE;wBACnB,GAAG,EAAE,IAAI;wBACT,IAAI;wBACJ,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;wBACxD,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,KAAK;wBACf,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;qBACjC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACxD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE;oBACpB,GAAG,MAAM;oBACT,IAAI,EAAE,SAAS;oBACf,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;oBAClC,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;iBACjC,CAAC,CAAC;gBACH,4FAA4F;gBAC5F,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;oBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAgB;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,EAAE;YAAE,SAAS;QAChD,IAAI,OAAO,KAAK,IAAI;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;;YAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,KAAmB,EAAE,SAAiB;IACrE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC7C,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,2FAA2F;QAC3F,MAAM,IAAI,GAAG,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QAChE,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,KAAK,UAAU;YACzB,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO;gBACxB,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;oBACzB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,OAAO,CAAC;QAClB,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACnJ,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAC3C,SAAS,CAAC,MAAM,EAAE;gBAChB,GAAG,EAAE,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpF,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;gBACxD,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,MAAM,CAAC,MAAM;oBACvB,CAAC,CAAC;wBACE;4BACE,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;yBACjE;qBACF;oBACH,CAAC,CAAC,EAAE;aACP,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,SAAS;QACT,OAAO;QACP,KAAK,EAAE,CAAC,4EAA4E,CAAC;KACtF,CAAC;AACJ,CAAC"}

package/dist/remediation/impact/fix-diff.d.ts

@@ -0,0 +1,84 @@
+import { PackageIndex } from "./package-index.js";
+import type { PackageSource } from "./types.js";
+export interface AdvisoryHints {
+    /** Advisory summary and details, as free text. */
+    text?: string;
+    /** CWE identifiers (`CWE-1333` or `1333`). */
+    cwes?: string[];
+}
+export type CandidateBasis = "direct" | "removed-in-fix" | "via-internal-function" | "via-internal-module";
+export interface VulnerableSymbolCandidate {
+    /** Name to look for in project code (for a default export of a deep file, the file's name). */
+    symbol: string;
+    /** The export it is, `default` and `module.exports` included. */
+    exportName: string;
+    /** Import specifier that reaches it, e.g. `lodash` or `lodash/template`. */
+    specifier: string;
+    /** Other specifiers that reach the same definition. */
+    alsoImportableAs?: string[];
+    /** Defining file in the fixed version (the vulnerable version for a removed export). */
+    file: string;
+    kind: "function" | "class" | "value" | "module";
+    basis: CandidateBasis;
+    /** Changed internal functions or modules this export depends on (not for `direct`). */
+    via: string[];
+    score: number;
+    /** Why it ranks where it does, one entry per contribution to the score. */
+    reasons: string[];
+    /** Identifiers and literals added by the fix and removed by it, most informative first. */
+    addedTokens: string[];
+    removedTokens: string[];
+}
+export interface ChangedInternal {
+    file: string;
+    name: string;
+    change: "changed" | "added" | "removed";
+}
+export interface FixDiff {
+    packageName: string;
+    fromVersion: string;
+    toVersion: string;
+    /** Always true: the result is a heuristic, not a determination. */
+    heuristic: true;
+    candidates: VulnerableSymbolCandidate[];
+    totalCandidates: number;
+    /** Exports present only in the fixed version. */
+    addedExports: string[];
+    /** Files whose normalised content differs (formatting and comments ignored). */
+    changedFiles: Array<{
+        file: string;
+        change: "modified" | "added" | "removed";
+    }>;
+    /** Named internal definitions that changed and could not be tied to an export. */
+    changedInternals: ChangedInternal[];
+    /** What this analysis could not see, so a reader can judge a weak result. */
+    limitations: string[];
+}
+export interface FindOptions {
+    hints?: AdvisoryHints;
+    /** Largest number of candidates returned (default 25). */
+    limit?: number;
+}
+interface PublicModule {
+    specifier: string;
+    file: string;
+}
+/** Modules a consumer can import, keyed by specifier. */
+export declare function publicModules(index: PackageIndex): PublicModule[];
+/** CWE id -> predicate over a token (identifier or literal) that suggests the fix touches that class. */
+interface CweHint {
+    ids: readonly number[];
+    label: string;
+    matches(token: string): boolean;
+}
+/**
+ * Small static table of vocabulary typical of fixes for common weakness classes. It only decides
+ * how a candidate is ranked, and every use is reported in `reasons`.
+ */
+export declare const CWE_HINTS: readonly CweHint[];
+/** Parse `CWE-123`, `cwe 123` and bare numbers. */
+export declare function parseCweIds(values: readonly string[] | undefined, text: string | undefined): number[];
+/** Compare two versions of a package and rank the exports the fix changed. */
+export declare function findVulnerableSymbols(vulnerable: PackageSource, fixed: PackageSource, options?: FindOptions): FixDiff;
+export {};
+//# sourceMappingURL=fix-diff.d.ts.map

package/dist/remediation/impact/fix-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-diff.d.ts","sourceRoot":"","sources":["../../../src/remediation/impact/fix-diff.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,YAAY,EAAqC,MAAM,oBAAoB,CAAC;AACrF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,aAAa;IAC5B,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,gBAAgB,GAChB,uBAAuB,GACvB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,yBAAyB;IACxC,+FAA+F;IAC/F,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,wFAAwF;IACxF,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IAChD,KAAK,EAAE,cAAc,CAAC;IACtB,uFAAuF;IACvF,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2FAA2F;IAC3F,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,OAAO;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,yBAAyB,EAAE,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gFAAgF;IAChF,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;IAChF,kFAAkF;IAClF,gBAAgB,EAAE,eAAe,EAAE,CAAC;IACpC,6EAA6E;IAC7E,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAQD,UAAU,YAAY;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,yDAAyD;AACzD,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY,EAAE,CAyBjE;AAkBD,yGAAyG;AACzG,UAAU,OAAO;IACf,GAAG,EAAE,SAAS,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAID;;;GAGG;AACH,eAAO,MAAM,SAAS,EAAE,SAAS,OAAO,EA0DvC,CAAC;AAEF,mDAAmD;AACnD,wBAAgB,WAAW,CACzB,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EACrC,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,EAAE,CAUV;AAmJD,8EAA8E;AAC9E,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,aAAa,EACzB,KAAK,EAAE,aAAa,EACpB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAiRT"}

package/dist/remediation/impact/fix-diff.js

@@ -0,0 +1,493 @@
+/**
+ * Fix-diff vulnerable symbols.
+ *
+ * Compare a vulnerable version of a package with the version that fixes it and list the exports
+ * whose implementation changed. This is a HEURISTIC: a vulnerability fix changes the vulnerable
+ * code, but a changed export is not proof it was the vulnerable one (refactors, helper changes and
+ * unrelated fixes shipped in the same release show up too). Candidates are ranked, and when an
+ * advisory text or CWE ids are given, by how closely the change matches them. Nothing here is
+ * looked up or invented: every reason comes from the two versions' code or the text provided.
+ */
+import { basename } from "node:path";
+import { PackageIndex, specifierFor } from "./package-index.js";
+const DEFAULT_LIMIT = 25;
+const MAX_DEEP_FILES = 1500;
+const MAX_VIA_DEPTH = 4;
+const SKIPPED_DIRECTORIES = /(^|\/)(test|tests|__tests__|spec|specs|fixtures|examples?|docs?|benchmarks?|scripts)\//;
+/** Modules a consumer can import, keyed by specifier. */
+export function publicModules(index) {
+    const manifestName = index.source.manifest.name;
+    const name = typeof manifestName === "string" ? manifestName : index.source.name;
+    const modules = new Map();
+    for (const entry of index.entries) {
+        if (entry.file)
+            modules.set(specifierFor(name, entry.subpath), {
+                specifier: specifierFor(name, entry.subpath),
+                file: entry.file,
+            });
+    }
+    const hasExportsMap = index.source.manifest.exports !== undefined && index.source.manifest.exports !== null;
+    if (!hasExportsMap) {
+        const covered = new Set([...modules.values()].map((module) => module.file));
+        let count = 0;
+        for (const file of index.source.files.keys()) {
+            if (covered.has(file) || /\.d\.[cm]?ts$/.test(file) || SKIPPED_DIRECTORIES.test(file))
+                continue;
+            if (++count > MAX_DEEP_FILES)
+                break;
+            const stripped = file.replace(/\.[cm]?[jt]sx?$/, "");
+            modules.set(`${name}/${stripped}`, { specifier: `${name}/${stripped}`, file });
+        }
+    }
+    return [...modules.values()].toSorted((a, b) => a.specifier.localeCompare(b.specifier));
+}
+function tokenDelta(oldTokens, newTokens) {
+    return {
+        added: [...newTokens].filter((token) => !oldTokens.has(token)).toSorted(),
+        removed: [...oldTokens].filter((token) => !newTokens.has(token)).toSorted(),
+    };
+}
+const REGEX_LITERAL = /^\/.+\/[a-z]*$/s;
+/**
+ * Small static table of vocabulary typical of fixes for common weakness classes. It only decides
+ * how a candidate is ranked, and every use is reported in `reasons`.
+ */
+export const CWE_HINTS = [
+    {
+        ids: [1333, 185, 186, 400, 405, 770, 407],
+        label: "regular expression or size limit",
+        matches: (token) => REGEX_LITERAL.test(token) || /^(regexp|limit|max\w*|timeout|length)$/i.test(token),
+    },
+    {
+        ids: [77, 78, 88, 74],
+        label: "command construction or escaping",
+        matches: (token) => /^(exec|execsync|spawn|spawnsync|shell|escape\w*|quote\w*|sanitize\w*)$/i.test(token),
+    },
+    {
+        ids: [22, 23, 36, 73, 59],
+        label: "path handling",
+        matches: (token) => /^(resolve|normalize|relative|isabsolute|basename|sep)$/i.test(token) ||
+            token === ".." ||
+            token.includes("../"),
+    },
+    {
+        ids: [1321, 915, 471],
+        label: "prototype or own-property handling",
+        matches: (token) => /^(__proto__|constructor|prototype|hasownproperty|issafekey\w*)$/i.test(token),
+    },
+    {
+        ids: [79, 80, 116, 83],
+        label: "output escaping",
+        matches: (token) => /^(escape\w*|sanitize\w*|encode\w*|htmlentities)$/i.test(token) ||
+            /^&(amp|lt|gt|quot);?$/.test(token),
+    },
+    {
+        ids: [94, 95, 96, 917, 1336],
+        label: "dynamic code or identifier validation",
+        matches: (token) => /^(eval|function|runinnewcontext|runinthiscontext)$/i.test(token) ||
+            /(forbidden|unsafe|illegal|invalid)/i.test(token),
+    },
+    {
+        ids: [20, 1284, 129, 190, 191],
+        label: "input validation",
+        matches: (token) => /^(typeof|isfinite|isnan|isinteger|validate\w*|assert\w*|typeerror|rangeerror)$/i.test(token),
+    },
+    {
+        ids: [601, 918, 441],
+        label: "URL or host validation",
+        matches: (token) => /^(url|hostname|host|origin|protocol|localhost)$/i.test(token),
+    },
+    {
+        ids: [347, 295, 297, 327, 328, 330, 338],
+        label: "signature or cryptography",
+        matches: (token) => /^(verify|signature|algorithms?|alg|random\w*|createhash|timingsafeequal)$/i.test(token),
+    },
+];
+/** Parse `CWE-123`, `cwe 123` and bare numbers. */
+export function parseCweIds(values, text) {
+    const ids = new Set();
+    for (const value of values ?? []) {
+        const match = /(\d+)/.exec(value);
+        if (match?.[1])
+            ids.add(Number.parseInt(match[1], 10));
+    }
+    for (const match of (text ?? "").matchAll(/CWE[-\s:]*(\d{1,5})/gi)) {
+        if (match[1])
+            ids.add(Number.parseInt(match[1], 10));
+    }
+    return [...ids].toSorted((a, b) => a - b);
+}
+const STOP_WORDS = new Set([
+    "default",
+    "module",
+    "exports",
+    "function",
+    "string",
+    "object",
+    "value",
+    "values",
+    "error",
+    "version",
+    "package",
+    "before",
+    "after",
+    "which",
+    "where",
+    "when",
+    "this",
+    "that",
+    "with",
+    "from",
+    "into",
+    "have",
+    "does",
+    "allows",
+    "allow",
+    "attacker",
+    "attackers",
+    "remote",
+    "arbitrary",
+    "vulnerable",
+    "vulnerability",
+    "affected",
+    "fixed",
+    "issue",
+    "input",
+    "could",
+    "would",
+    "should",
+    "using",
+    "used",
+    "uses",
+    "cause",
+    "causes",
+]);
+function wordsOf(text) {
+    return new Set([...text.toLowerCase().matchAll(/[a-z_$][\w$]*/g)].map((match) => match[0]));
+}
+function scoreCandidate(candidate, depth, hints, hintWords, cweIds) {
+    const reasons = [];
+    let score = 0;
+    const add = (points, reason) => {
+        score += points;
+        reasons.push(`${points >= 0 ? "+" : ""}${points} ${reason}`);
+    };
+    switch (candidate.basis) {
+        case "direct": {
+            if (candidate.kind === "value")
+                add(40, "an exported value (not a function) changed");
+            else
+                add(100, "the export's own implementation changed");
+            break;
+        }
+        case "removed-in-fix": {
+            add(55, "the export was removed in the fixed version");
+            break;
+        }
+        case "via-internal-function": {
+            add(Math.max(15, 40 - 8 * (depth - 1)), `depends on changed internal function ${candidate.via.join(", ")} (${depth} call hop${depth === 1 ? "" : "s"} away)`);
+            break;
+        }
+        case "via-internal-module": {
+            add(20, `its module imports changed module ${candidate.via.join(", ")}`);
+            break;
+        }
+    }
+    const size = candidate.addedTokens.length + candidate.removedTokens.length;
+    if (candidate.basis === "direct" && size > 0) {
+        const bonus = Math.max(0, 10 - Math.floor(Math.log2(1 + size)));
+        if (bonus > 0)
+            add(bonus, `small change (${size} identifiers or literals differ)`);
+    }
+    if (hints?.text) {
+        const plain = candidate.symbol;
+        if (plain.length >= 3 &&
+            !STOP_WORDS.has(plain.toLowerCase()) &&
+            new RegExp(String.raw `(?<![\w$])${plain.replaceAll(/[$]/g, String.raw `\$`)}(?![\w$])`).test(hints.text)) {
+            add(60, `\`${plain}\` is named in the advisory text`);
+        }
+        const overlap = candidate.addedTokens
+            .filter((token) => /^[A-Za-z_$][\w$]{3,}$/.test(token) &&
+            !STOP_WORDS.has(token.toLowerCase()) &&
+            hintWords.has(token.toLowerCase()))
+            .slice(0, 3);
+        if (overlap.length > 0)
+            add(10 * overlap.length, `fix adds ${overlap.map((token) => `\`${token}\``).join(", ")}, which the advisory text mentions`);
+    }
+    if (cweIds.length > 0) {
+        const matchedLabels = [];
+        const matchedTokens = new Set();
+        for (const hint of CWE_HINTS) {
+            if (!hint.ids.some((id) => cweIds.includes(id)))
+                continue;
+            const matches = candidate.addedTokens.filter((token) => hint.matches(token));
+            if (matches.length > 0) {
+                matchedLabels.push(hint.label);
+                for (const token of matches.slice(0, 3))
+                    matchedTokens.add(token);
+            }
+        }
+        if (matchedTokens.size > 0) {
+            add(Math.min(48, 12 * matchedTokens.size), `fix adds ${[...matchedTokens].map((token) => `\`${token}\``).join(", ")}, typical of ${matchedLabels.join(" and ")} (CWE ${cweIds.join(", ")})`);
+        }
+    }
+    return { score, reasons };
+}
+function topTokens(tokens) {
+    // Longer, identifier-like tokens first: they say more than punctuation-sized literals.
+    return tokens.toSorted((a, b) => b.length - a.length || a.localeCompare(b)).slice(0, 12);
+}
+/** Compare two versions of a package and rank the exports the fix changed. */
+export function findVulnerableSymbols(vulnerable, fixed, options = {}) {
+    const oldIndex = new PackageIndex(vulnerable);
+    const newIndex = new PackageIndex(fixed);
+    const hints = options.hints;
+    const hintWords = wordsOf(hints?.text ?? "");
+    const cweIds = parseCweIds(hints?.cwes, hints?.text);
+    const limitations = [
+        "Heuristic: a changed export is a candidate, not proof it was the vulnerable one.",
+        "Static analysis of JavaScript source only; dynamically built exports, native addons and WebAssembly are not seen.",
+    ];
+    const changedLocalsCache = new Map();
+    const changedLocalsOf = (oldFile, newFile) => {
+        const key = `${oldFile ?? ""}|${newFile ?? ""}`;
+        const cached = changedLocalsCache.get(key);
+        if (cached)
+            return cached;
+        const result = new Map();
+        const oldLocals = (oldFile ? oldIndex.module(oldFile) : undefined)?.locals ?? new Map();
+        const newLocals = (newFile ? newIndex.module(newFile) : undefined)?.locals ?? new Map();
+        for (const [name, def] of newLocals) {
+            const previous = oldLocals.get(name);
+            if (!previous)
+                result.set(name, { change: "added", newDef: def });
+            else if (previous.fingerprint !== def.fingerprint)
+                result.set(name, { change: "changed", oldDef: previous, newDef: def });
+        }
+        for (const [name, def] of oldLocals) {
+            if (!newLocals.has(name))
+                result.set(name, { change: "removed", oldDef: def });
+        }
+        changedLocalsCache.set(key, result);
+        return result;
+    };
+    const oldModules = new Map(publicModules(oldIndex).map((module) => [module.specifier, module]));
+    const newModules = new Map(publicModules(newIndex).map((module) => [module.specifier, module]));
+    const specifiers = [...new Set([...oldModules.keys(), ...newModules.keys()])].toSorted();
+    const candidates = [];
+    const addedExports = [];
+    const seenInternals = new Set();
+    const explainedInternals = new Set();
+    let weakDiscovery = false;
+    for (const specifier of specifiers) {
+        const oldModule = oldModules.get(specifier);
+        const newModule = newModules.get(specifier);
+        const oldExports = oldModule
+            ? oldIndex.exportsOf(oldModule.file)
+            : new Map();
+        const newExports = newModule
+            ? newIndex.exportsOf(newModule.file)
+            : new Map();
+        if (newModule && newIndex.module(newModule.file)?.discovery === "namespace-assignments")
+            weakDiscovery = true;
+        const symbolFor = (exportName, file) => (exportName === "default" || exportName === "module.exports") && specifier.includes("/")
+            ? basename(file).replace(/\.[cm]?[jt]sx?$/, "")
+            : exportName;
+        for (const exportName of [
+            ...new Set([...oldExports.keys(), ...newExports.keys()]),
+        ].toSorted()) {
+            const before = oldExports.get(exportName);
+            const after = newExports.get(exportName);
+            if (!after) {
+                if (!before)
+                    continue;
+                const base = {
+                    symbol: symbolFor(exportName, before.definedIn),
+                    exportName,
+                    specifier,
+                    file: before.definedIn,
+                    kind: before.kind,
+                    basis: "removed-in-fix",
+                    via: [],
+                    addedTokens: [],
+                    removedTokens: topTokens([...before.tokens]),
+                };
+                const { score, reasons } = scoreCandidate(base, 0, hints, hintWords, cweIds);
+                candidates.push({ ...base, score, reasons });
+                continue;
+            }
+            if (!before) {
+                addedExports.push(`${specifier}${exportName === "default" || exportName === "module.exports" ? "" : `#${exportName}`}`);
+                continue;
+            }
+            const localChanges = changedLocalsOf(before.definedIn, after.definedIn);
+            let basis;
+            let depth = 0;
+            const via = [];
+            let delta = { added: [], removed: [] };
+            if (before.fingerprint !== after.fingerprint) {
+                if (after.kind === "module") {
+                    // `exports.x = require("./x")`: it is the required module that changed.
+                    basis = "via-internal-module";
+                    via.push(after.moduleRef ?? after.definedIn);
+                }
+                else {
+                    basis = "direct";
+                    delta = tokenDelta(before.tokens, after.tokens);
+                    if (after.local)
+                        explainedInternals.add(`${after.definedIn}#${after.local}`);
+                    const changedTokens = [...delta.added, ...delta.removed];
+                    // A bumped version constant is not a fix.
+                    if (changedTokens.length > 0 &&
+                        changedTokens.every((token) => /^\d+\.\d+\.\d+/.test(token)))
+                        continue;
+                }
+            }
+            else {
+                // Breadth-first through the definitions this export refers to, in its own module.
+                const newMod = newIndex.module(after.definedIn);
+                const visited = new Set();
+                let frontier = [...after.refs].filter((ref) => newMod?.locals.has(ref));
+                for (let level = 1; level <= MAX_VIA_DEPTH && frontier.length > 0 && !basis; level++) {
+                    const next = [];
+                    const hits = [];
+                    for (const name of frontier.toSorted()) {
+                        if (visited.has(name))
+                            continue;
+                        visited.add(name);
+                        if (localChanges.has(name))
+                            hits.push(name);
+                        const def = newMod?.locals.get(name);
+                        if (def)
+                            for (const ref of def.refs)
+                                if (newMod?.locals.has(ref) && !visited.has(ref))
+                                    next.push(ref);
+                    }
+                    if (hits.length > 0) {
+                        basis = "via-internal-function";
+                        depth = level;
+                        via.push(...hits.slice(0, 3));
+                        for (const name of hits) {
+                            explainedInternals.add(`${after.definedIn}#${name}`);
+                            const change = localChanges.get(name);
+                            if (change) {
+                                const part = tokenDelta(change.oldDef?.tokens ?? new Set(), change.newDef?.tokens ?? new Set());
+                                delta = {
+                                    added: [...delta.added, ...part.added],
+                                    removed: [...delta.removed, ...part.removed],
+                                };
+                            }
+                        }
+                    }
+                    frontier = next;
+                }
+                if (!basis) {
+                    const newMod2 = newIndex.module(after.definedIn);
+                    const oldMod2 = oldIndex.module(before.definedIn);
+                    for (const relative of newMod2?.relativeImports ?? []) {
+                        const newTarget = newIndex.resolveRelative(after.definedIn, relative);
+                        const oldTarget = oldIndex.resolveRelative(before.definedIn, relative);
+                        if (!newTarget || !oldTarget)
+                            continue;
+                        if (oldIndex.module(oldTarget)?.fingerprint !== newIndex.module(newTarget)?.fingerprint &&
+                            oldMod2) {
+                            basis = "via-internal-module";
+                            via.push(newTarget);
+                            break;
+                        }
+                    }
+                }
+            }
+            if (!basis)
+                continue;
+            const base = {
+                symbol: symbolFor(exportName, after.definedIn),
+                exportName,
+                specifier,
+                file: after.definedIn,
+                kind: after.kind,
+                basis,
+                via,
+                addedTokens: topTokens([...new Set(delta.added)]),
+                removedTokens: topTokens([...new Set(delta.removed)]),
+            };
+            const { score, reasons } = scoreCandidate(base, depth, hints, hintWords, cweIds);
+            candidates.push({ ...base, score, reasons });
+        }
+    }
+    // One entry per definition: the same export reached through several specifiers (`lodash` and
+    // `lodash/index`) is listed once, under the shortest specifier.
+    const byDefinition = new Map();
+    for (const candidate of candidates.toSorted((a, b) => a.specifier.length - b.specifier.length || a.specifier.localeCompare(b.specifier))) {
+        const key = `${candidate.file}|${candidate.exportName}|${candidate.basis}`;
+        const existing = byDefinition.get(key);
+        if (existing) {
+            existing.alsoImportableAs = [...(existing.alsoImportableAs ?? []), candidate.specifier];
+            // A deep specifier names the file, which says more than `default` does.
+            if (existing.symbol === existing.exportName && candidate.symbol !== candidate.exportName) {
+                existing.symbol = candidate.symbol;
+            }
+        }
+        else {
+            byDefinition.set(key, { ...candidate });
+        }
+    }
+    const ranked = [...byDefinition.values()].toSorted((a, b) => b.score - a.score ||
+        a.specifier.localeCompare(b.specifier) ||
+        a.symbol.localeCompare(b.symbol));
+    // Changed definitions no export could be tied to (and files that differ at all).
+    const changedInternals = [];
+    const changedFiles = [];
+    const allFiles = [...new Set([...vulnerable.files.keys(), ...fixed.files.keys()])]
+        .filter((file) => !/\.d\.[cm]?ts$/.test(file))
+        .toSorted();
+    for (const file of allFiles) {
+        const inOld = vulnerable.files.has(file);
+        const inNew = fixed.files.has(file);
+        if (inOld && inNew) {
+            const oldMod = oldIndex.module(file);
+            const newMod = newIndex.module(file);
+            const differs = oldMod && newMod
+                ? oldMod.fingerprint !== newMod.fingerprint
+                : vulnerable.files.get(file) !== fixed.files.get(file);
+            if (!differs)
+                continue;
+            changedFiles.push({ file, change: "modified" });
+            for (const [name, change] of changedLocalsOf(file, file)) {
+                const key = `${file}#${name}`;
+                if (explainedInternals.has(key) || seenInternals.has(key))
+                    continue;
+                seenInternals.add(key);
+                changedInternals.push({ file, name, change: change.change });
+            }
+        }
+        else {
+            changedFiles.push({ file, change: inNew ? "added" : "removed" });
+        }
+    }
+    if (weakDiscovery) {
+        limitations.push("A bundle's exports were found by a namespace-assignment heuristic (`ns.name = fn`), so some exports may be missed or mis-attributed.");
+    }
+    if (!vulnerable.integrityVerified || !fixed.integrityVerified) {
+        limitations.push("At least one tarball had no registry digest to verify against.");
+    }
+    if (candidates.length === 0) {
+        limitations.push(changedFiles.length === 0
+            ? "The two versions' code is identical after normalising formatting and comments."
+            : "Code changed, but no export could be tied to the change; see changedInternals.");
+    }
+    const limit = Math.max(1, options.limit ?? DEFAULT_LIMIT);
+    return {
+        packageName: fixed.name,
+        fromVersion: vulnerable.version,
+        toVersion: fixed.version,
+        heuristic: true,
+        candidates: ranked.slice(0, limit),
+        totalCandidates: ranked.length,
+        addedExports: addedExports.toSorted().slice(0, 100),
+        changedFiles: changedFiles.slice(0, 200),
+        changedInternals: changedInternals.slice(0, 100),
+        limitations,
+    };
+}
+//# sourceMappingURL=fix-diff.js.map