autoremediator 0.21.2 → 0.22.0

package/dist/remediation/radar/code-diff.js

@@ -0,0 +1,512 @@
+/**
+ * Code signals between two published versions of a package: what a fix for an injection, traversal,
+ * prototype-pollution or ReDoS bug tends to add (a guard, a containment check, a length limit, a
+ * sanitizer, a regular expression without nested quantifiers) or remove (an `eval`, a shell, an
+ * `innerHTML` write). Found by walking the syntax tree of every file present in both versions, so
+ * reformatting and comments do not count. A signal is something the new version has and the old one
+ * did not (or the reverse for removed sinks), keyed by the normalised source text of the node.
+ *
+ * HEURISTIC. A guard can be added for a reason that has nothing to do with security. Each signal is
+ * evidence for a human to read, never a statement that a vulnerability existed.
+ */
+import { parseSource, walk } from "../impact/ast.js";
+import { evidenceLine, sanitizeEvidence } from "./sanitize.js";
+import { RADAR_POINTS } from "./types.js";
+const MAX_FILE_BYTES = 1_500_000;
+const MAX_FILES = 400;
+const MAX_KEY = 160;
+const SKIPPED_PATH = /(?:^|\/)(?:tests?|__tests__|specs?|examples?|benchmarks?|bench|fixtures?|docs?|coverage)\/|\.(?:test|spec)\.[cm]?[jt]sx?$|\.d\.[cm]?ts$|\.min\./i;
+function lineStarts(code) {
+    const starts = [0];
+    for (let index = 0; index < code.length; index++) {
+        if (code[index] === "\n")
+            starts.push(index + 1);
+    }
+    return starts;
+}
+function lineOf(starts, offset) {
+    let low = 0;
+    let high = starts.length - 1;
+    while (low < high) {
+        const middle = Math.ceil((low + high) / 2);
+        if ((starts[middle] ?? 0) <= offset)
+            low = middle;
+        else
+            high = middle - 1;
+    }
+    return low + 1;
+}
+/** The `name` of an identifier-like node, or "" when it has none. */
+const nameOf = (node) => typeof node?.name === "string" ? node.name : "";
+const str = (node) => typeof node?.value === "string"
+    ? node.value
+    : undefined;
+function asNode(value) {
+    return typeof value === "object" && value !== null && typeof value.type === "string"
+        ? value
+        : undefined;
+}
+/** `a.b.c` as text for simple member chains, else undefined. */
+function dotted(node) {
+    if (!node)
+        return undefined;
+    if (node.type === "Identifier")
+        return String(node.name);
+    if (node.type === "ThisExpression")
+        return "this";
+    if (node.type === "MemberExpression" && node.computed !== true) {
+        const object = dotted(asNode(node.object));
+        const property = asNode(node.property);
+        return object !== undefined && property ? `${object}.${String(property.name)}` : undefined;
+    }
+    return undefined;
+}
+function calleeName(call) {
+    const callee = asNode(call.callee);
+    if (!callee)
+        return undefined;
+    if (callee.type === "Identifier")
+        return String(callee.name);
+    if (callee.type === "MemberExpression" && callee.computed !== true) {
+        return nameOf(asNode(callee.property));
+    }
+    return undefined;
+}
+// ---------------------------------------------------------------------------------------------
+// Regular expressions
+// ---------------------------------------------------------------------------------------------
+/**
+ * Whether a regular expression has a shape known to backtrack catastrophically or quadratically:
+ * a quantified group that itself contains a quantifier, two adjacent identical quantified atoms
+ * (`\s*\s*`), or an unanchored `\s+$` / `\s*$`. Conservative: it names shapes, it does not prove
+ * a bound.
+ */
+export function isRedosProne(source) {
+    if (/(\\[sdwSDW]|\.|\[[^\]]*\])[*+]\??\1[*+]/.test(source))
+        return true;
+    if (!source.startsWith("^") && /(?:\\s|\[ \\t\]|\[\\s\])[*+]\$$/.test(source))
+        return true;
+    const groups = [];
+    for (let index = 0; index < source.length; index++) {
+        const char = source[index];
+        if (char === "\\") {
+            index++;
+        }
+        else if (char === "[") {
+            // Skip a character class; `]` first is literal.
+            index++;
+            if (source[index] === "^")
+                index++;
+            if (source[index] === "]")
+                index++;
+            while (index < source.length && source[index] !== "]") {
+                if (source[index] === "\\")
+                    index++;
+                index++;
+            }
+        }
+        else if (char === "(") {
+            groups.push({ quantified: false });
+        }
+        else if (char === "+" ||
+            char === "*" ||
+            (char === "{" && /^\{\d+,\d*\}/.test(source.slice(index)))) {
+            const top = groups.at(-1);
+            if (top)
+                top.quantified = true;
+        }
+        else if (char === ")") {
+            const closed = groups.pop();
+            const next = source.slice(index + 1);
+            if (closed?.quantified && /^(?:[+*]|\{\d+,\d*\})/.test(next))
+                return true;
+            // The inner quantifier counts for the enclosing group too.
+            const parent = groups.at(-1);
+            if (closed?.quantified && parent)
+                parent.quantified = true;
+        }
+    }
+    return false;
+}
+function regexSource(node) {
+    const regex = node.regex;
+    if (regex?.pattern !== undefined)
+        return regex.pattern;
+    return undefined;
+}
+// ---------------------------------------------------------------------------------------------
+// Patterns
+// ---------------------------------------------------------------------------------------------
+const PROTO_NAMES = new Set(["__proto__", "constructor", "prototype"]);
+const SANITIZER_NAME = /^(?:sanitiz|escape|encodeURI|purif|stripTags|stripHtml|htmlEscape)/i;
+const VALIDATOR_NAME = /^(?:validate|isValid|assert[A-Z_]|isSafe|isPlainObject|checkPath|checkUrl|checkInput|ensure[A-Z])/;
+const LIMIT_NAME = /^(?:MAX|LIMIT)_[A-Z_]*(?:LENGTH|SIZE|DEPTH|BYTES|LEN|COUNT)$|^MAX_?[A-Z_]*(?:LENGTH|SIZE|DEPTH|BYTES|LEN)$/;
+const REJECTION_MESSAGE = /\binvalid\b|\billegal\b|\bforbidden\b|not allowed|\bunsafe\b|\bdisallowed\b|too (?:long|large|deep|big)|\bexceeds?\b|not permitted|\bunsupported\b.*\b(?:option|variable)\b/i;
+const SINK_MODULES = new Set(["child_process", "node:child_process", "vm", "node:vm"]);
+const SINK_MEMBERS = new Set(["innerHTML", "outerHTML", "dangerouslySetInnerHTML"]);
+function normalised(context, node) {
+    return context.code.slice(node.start, node.end).replaceAll(/\s+/g, " ").slice(0, MAX_KEY);
+}
+function snippetAt(context, line) {
+    const start = context.starts[line - 1] ?? 0;
+    const end = context.starts[line] ?? context.code.length;
+    return context.code.slice(start, end).trim();
+}
+function stringArgument(call, index) {
+    const args = call.arguments;
+    return str(args?.[index]);
+}
+function lengthMember(node) {
+    return (node?.type === "MemberExpression" &&
+        node.computed !== true &&
+        asNode(node.property)?.name === "length");
+}
+/** Every pattern occurrence in a parsed file. */
+function collect(program, context) {
+    const findings = [];
+    const add = (signal, node, key = normalised(context, node)) => {
+        const line = lineOf(context.starts, node.start);
+        findings.push({ signal, key, line, snippet: snippetAt(context, line) });
+    };
+    // `throw new Error(INVALID_VARIABLE_TEXT)`: the message is a string constant declared in the file.
+    const constants = new Map();
+    walk(program, (node) => {
+        if (node.type === "VariableDeclarator") {
+            const id = asNode(node.id);
+            const text = str(asNode(node.init));
+            if (id?.type === "Identifier" && text !== undefined)
+                constants.set(String(id.name), text);
+        }
+        return true;
+    });
+    walk(program, (node) => {
+        switch (node.type) {
+            case "BinaryExpression": {
+                const operator = String(node.operator);
+                const left = asNode(node.left);
+                const right = asNode(node.right);
+                if (["===", "==", "!==", "!="].includes(operator)) {
+                    const literal = str(left) ?? str(right);
+                    if (literal !== undefined && PROTO_NAMES.has(literal))
+                        add("prototype-guard-added", node);
+                }
+                if ([">", ">=", "<", "<="].includes(operator)) {
+                    const other = lengthMember(left) ? right : lengthMember(right) ? left : undefined;
+                    if (other) {
+                        const limitIdentifier = other.type === "Identifier" && LIMIT_NAME.test(String(other.name));
+                        const limitNumber = other.type === "Literal" && typeof other.value === "number" && other.value >= 64;
+                        if (limitIdentifier || limitNumber)
+                            add("length-limit-added", node);
+                    }
+                }
+                break;
+            }
+            case "SwitchCase": {
+                const literal = str(asNode(node.test));
+                if (literal !== undefined && PROTO_NAMES.has(literal) && literal !== "prototype") {
+                    add("prototype-guard-added", node, `case ${literal}`);
+                }
+                break;
+            }
+            case "VariableDeclarator": {
+                const id = asNode(node.id);
+                if (id?.type === "Identifier" && LIMIT_NAME.test(String(id.name))) {
+                    add("length-limit-added", node, `limit ${String(id.name)}`);
+                }
+                if (id?.type === "Identifier" && SANITIZER_NAME.test(String(id.name))) {
+                    add("sanitizer-added", node, `define ${String(id.name)}`);
+                }
+                break;
+            }
+            case "FunctionDeclaration": {
+                const name = nameOf(asNode(node.id));
+                if (SANITIZER_NAME.test(name))
+                    add("sanitizer-added", node, `define ${name}`);
+                else if (VALIDATOR_NAME.test(name))
+                    add("validator-added", node, `define ${name}`);
+                break;
+            }
+            case "ThrowStatement": {
+                const thrown = asNode(node.argument);
+                if (thrown?.type === "NewExpression") {
+                    const message = asNode(thrown.arguments?.[0]);
+                    const text = str(message) ??
+                        (message?.type === "Identifier" ? constants.get(nameOf(message)) : undefined) ??
+                        (message?.type === "TemplateLiteral"
+                            ? message.quasis
+                                ?.map((quasi) => quasi.value?.cooked ?? "")
+                                .join(" ")
+                            : undefined);
+                    if (text !== undefined && REJECTION_MESSAGE.test(text)) {
+                        add("invalid-input-rejected", node, `throw ${text.slice(0, 100)}`);
+                    }
+                }
+                break;
+            }
+            case "NewExpression":
+            case "CallExpression": {
+                const name = calleeName(node);
+                const callee = asNode(node.callee);
+                const chain = dotted(callee);
+                if (node.type === "NewExpression" &&
+                    callee?.type === "Identifier" &&
+                    callee.name === "RegExp") {
+                    const pattern = stringArgument(node, 0);
+                    if (pattern !== undefined)
+                        add(isRedosProne(pattern) ? "redos-regex-replaced" : "regex-changed", node, `regex /${pattern}/`);
+                }
+                if (name !== undefined) {
+                    if (SANITIZER_NAME.test(name))
+                        add("sanitizer-added", node, `call ${name}`);
+                    else if (VALIDATOR_NAME.test(name))
+                        add("validator-added", node, `call ${name}`);
+                    if (name === "timingSafeEqual")
+                        add("timing-safe-compare-added", node, "timingSafeEqual");
+                    if (name === "hasOwn" || (name === "call" && chain?.endsWith("hasOwnProperty.call"))) {
+                        add("own-property-check-added", node, `own ${chain ?? name}`);
+                    }
+                    if (name === "create" && chain === "Object.create") {
+                        const first = node.arguments?.[0];
+                        if (first?.type === "Literal" && first.value === null)
+                            add("null-prototype-object-added", node);
+                    }
+                    if (["includes", "indexOf", "startsWith", "endsWith"].includes(name)) {
+                        const needle = stringArgument(node, 0);
+                        if (needle?.includes(".."))
+                            add("traversal-check-added", node);
+                        else if (name === "startsWith")
+                            add("path-containment-added", node, "startsWith");
+                    }
+                    if (chain !== undefined &&
+                        /^(?:path\.)?(?:resolve|normalize|relative|isAbsolute)$|^fs\.realpath(?:Sync)?$/.test(chain)) {
+                        add("path-containment-added", node, `path ${chain}`);
+                    }
+                }
+                // Sinks: counted so that their disappearance can be seen.
+                if ((node.type === "CallExpression" &&
+                    callee?.type === "Identifier" &&
+                    (callee.name === "eval" || callee.name === "Function")) ||
+                    (node.type === "NewExpression" &&
+                        callee?.type === "Identifier" &&
+                        callee.name === "Function") ||
+                    chain === "document.write" ||
+                    (chain?.startsWith("vm.run") ?? false)) {
+                    add("dangerous-sink-removed", node);
+                }
+                if (name === "require") {
+                    const module = stringArgument(node, 0);
+                    if (module !== undefined && SINK_MODULES.has(module))
+                        add("dangerous-sink-removed", node);
+                }
+                break;
+            }
+            case "ImportDeclaration": {
+                const source = str(asNode(node.source));
+                if (source !== undefined && SINK_MODULES.has(source))
+                    add("dangerous-sink-removed", node);
+                break;
+            }
+            case "Literal": {
+                const source = regexSource(node);
+                if (source !== undefined) {
+                    add(isRedosProne(source) ? "redos-regex-replaced" : "regex-changed", node, `regex /${source}/`);
+                }
+                break;
+            }
+            case "AssignmentExpression": {
+                const target = asNode(node.left);
+                if (target?.type === "MemberExpression" &&
+                    target.computed !== true &&
+                    SINK_MEMBERS.has(String(asNode(target.property)?.name))) {
+                    add("dangerous-sink-removed", node);
+                }
+                break;
+            }
+            default: {
+                break;
+            }
+        }
+        return true;
+    });
+    return findings;
+}
+function parseFindings(file, code) {
+    const program = parseSource(file, code);
+    if (!program)
+        return undefined;
+    return collect(program, { code, starts: lineStarts(code) });
+}
+function multiset(findings) {
+    const counts = new Map();
+    for (const finding of findings) {
+        const id = `${finding.signal}\u0000${finding.key}`;
+        counts.set(id, (counts.get(id) ?? 0) + 1);
+    }
+    return counts;
+}
+const REMOVAL_SIGNALS = new Set([
+    "dangerous-sink-removed",
+    "redos-regex-replaced",
+    "regex-changed",
+]);
+const ADDITION_SIGNALS = new Set([
+    "prototype-guard-added",
+    "traversal-check-added",
+    "path-containment-added",
+    "timing-safe-compare-added",
+    "sanitizer-added",
+    "invalid-input-rejected",
+    "own-property-check-added",
+    "null-prototype-object-added",
+    "length-limit-added",
+    "validator-added",
+]);
+/**
+ * Compare two versions' files and return what changed in security-relevant ways. `release` labels
+ * the flags (a version, or a span when several releases were diffed at once).
+ */
+export function codeDiffFlags(versions, release) {
+    const hits = [];
+    let filesCompared = 0;
+    let filesChanged = 0;
+    let filesSkipped = 0;
+    const paths = [...versions.after.keys()]
+        .filter((path) => versions.before.has(path) && !SKIPPED_PATH.test(path))
+        .toSorted();
+    for (const path of paths) {
+        const before = versions.before.get(path) ?? "";
+        const after = versions.after.get(path) ?? "";
+        filesCompared++;
+        if (before === after)
+            continue;
+        if (filesChanged >= MAX_FILES ||
+            before.length > MAX_FILE_BYTES ||
+            after.length > MAX_FILE_BYTES) {
+            filesSkipped++;
+            continue;
+        }
+        filesChanged++;
+        const was = parseFindings(path, before);
+        const now = parseFindings(path, after);
+        if (!was || !now) {
+            filesSkipped++;
+            continue;
+        }
+        const wasCounts = multiset(was);
+        const nowCounts = multiset(now);
+        const addedRegexes = now.filter((finding) => (finding.signal === "regex-changed" || finding.signal === "redos-regex-replaced") &&
+            (nowCounts.get(`${finding.signal}\u0000${finding.key}`) ?? 0) >
+                (wasCounts.get(`${finding.signal}\u0000${finding.key}`) ?? 0));
+        const safeReplacement = addedRegexes.find((finding) => finding.signal === "regex-changed");
+        const spent = new Map();
+        for (const finding of now) {
+            if (!ADDITION_SIGNALS.has(finding.signal))
+                continue;
+            const id = `${finding.signal}\u0000${finding.key}`;
+            const used = (spent.get(id) ?? 0) + 1;
+            spent.set(id, used);
+            if (used > (wasCounts.get(id) ?? 0)) {
+                hits.push({
+                    signal: finding.signal,
+                    file: path,
+                    line: finding.line,
+                    snippet: finding.snippet,
+                    key: finding.key,
+                });
+            }
+        }
+        // Removals are read from the old version: report the line it had there.
+        const removedSpent = new Map();
+        for (const finding of was) {
+            if (!REMOVAL_SIGNALS.has(finding.signal))
+                continue;
+            const id = `${finding.signal}\u0000${finding.key}`;
+            const used = (removedSpent.get(id) ?? 0) + 1;
+            removedSpent.set(id, used);
+            if (used <= (nowCounts.get(id) ?? 0))
+                continue;
+            if (finding.signal === "redos-regex-replaced") {
+                hits.push({
+                    signal: safeReplacement ? "redos-regex-replaced" : "redos-regex-removed",
+                    file: path,
+                    line: finding.line,
+                    snippet: `${finding.key}${safeReplacement ? ` -> ${safeReplacement.key}` : " (removed)"}`,
+                    key: finding.key,
+                });
+            }
+            else if (finding.signal === "regex-changed") {
+                hits.push({
+                    signal: "regex-changed",
+                    file: path,
+                    line: finding.line,
+                    snippet: finding.key,
+                    key: finding.key,
+                });
+            }
+            else {
+                hits.push({
+                    signal: finding.signal,
+                    file: path,
+                    line: finding.line,
+                    snippet: finding.snippet,
+                    key: finding.key,
+                });
+            }
+        }
+    }
+    // Path containment needs both halves in one file: a resolve/relative and a prefix check.
+    const containment = hits.filter((hit) => hit.signal === "path-containment-added");
+    const filesWithBoth = new Set(containment
+        .filter((hit) => hit.key === "startsWith")
+        .map((hit) => hit.file)
+        .filter((file) => containment.some((other) => other.file === file && other.key !== "startsWith")));
+    const kept = hits.filter((hit) => hit.signal !== "path-containment-added" || filesWithBoth.has(hit.file));
+    const bySignal = new Map();
+    for (const hit of kept)
+        bySignal.set(hit.signal, [...(bySignal.get(hit.signal) ?? []), hit]);
+    const flags = [];
+    for (const [signal, group] of bySignal) {
+        const first = group[0];
+        if (!first)
+            continue;
+        flags.push({
+            category: "code",
+            signal,
+            release,
+            points: RADAR_POINTS.code[signal],
+            location: sanitizeEvidence(`${first.file}:${first.line}`, 160),
+            evidence: evidenceLine(`${first.file}:${first.line}`, first.snippet),
+            occurrences: group.length,
+        });
+    }
+    return {
+        flags: flags.toSorted((a, b) => b.points - a.points || a.signal.localeCompare(b.signal)),
+        filesCompared,
+        filesChanged,
+        filesSkipped,
+    };
+}
+const meaningfulLines = (text) => text
+    .split(/\r?\n/)
+    .map((line) => line.trim())
+    .filter((line) => line !== "" && !line.startsWith("//") && !line.startsWith("*") && !line.startsWith("/*"));
+/** Added and removed non-blank lines between two files (multiset difference), for a model to read. */
+export function lineDiff(before, after) {
+    const counts = new Map();
+    for (const line of meaningfulLines(before))
+        counts.set(line, (counts.get(line) ?? 0) + 1);
+    const added = [];
+    for (const line of meaningfulLines(after)) {
+        const left = counts.get(line) ?? 0;
+        if (left > 0)
+            counts.set(line, left - 1);
+        else
+            added.push(line);
+    }
+    const removed = [];
+    for (const [line, count] of counts)
+        for (let index = 0; index < count; index++)
+            removed.push(line);
+    return { added, removed };
+}
+//# sourceMappingURL=code-diff.js.map

package/dist/remediation/radar/code-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-diff.js","sourceRoot":"","sources":["../../../src/remediation/radar/code-diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,WAAW,EAAE,IAAI,EAAgB,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAkB,MAAM,YAAY,CAAC;AAc1D,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,OAAO,GAAG,GAAG,CAAC;AAEpB,MAAM,YAAY,GAChB,kJAAkJ,CAAC;AAErJ,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,MAAyB,EAAE,MAAc;IACvD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,OAAO,GAAG,GAAG,IAAI,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM;YAAE,GAAG,GAAG,MAAM,CAAC;;YAC7C,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,GAAG,CAAC,CAAC;AACjB,CAAC;AAED,qEAAqE;AACrE,MAAM,MAAM,GAAG,CAAC,IAAyB,EAAU,EAAE,CACnD,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAElD,MAAM,GAAG,GAAG,CAAC,IAAa,EAAsB,EAAE,CAChD,OAAQ,IAA4B,EAAE,KAAK,KAAK,QAAQ;IACtD,CAAC,CAAG,IAAgB,CAAC,KAAgB;IACrC,CAAC,CAAC,SAAS,CAAC;AAEhB,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAQ,KAAiB,CAAC,IAAI,KAAK,QAAQ;QAC/F,CAAC,CAAE,KAAiB;QACpB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,gEAAgE;AAChE,SAAS,MAAM,CAAC,IAAyB;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,MAAM,CAAC;IAClD,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gGAAgG;AAChG,sBAAsB;AACtB,gGAAgG;AAEhG;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,yCAAyC,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3F,MAAM,MAAM,GAAmC,EAAE,CAAC;IAClD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,gDAAgD;YAChD,KAAK,EAAE,CAAC;YACR,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;YACnC,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBACtD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI;oBAAE,KAAK,EAAE,CAAC;gBACpC,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;aAAM,IACL,IAAI,KAAK,GAAG;YACZ,IAAI,KAAK,GAAG;YACZ,CAAC,IAAI,KAAK,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAC1D,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,GAAG;gBAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;QACjC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,MAAM,EAAE,UAAU,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1E,2DAA2D;YAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,MAAM,EAAE,UAAU,IAAI,MAAM;gBAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAyD,CAAC;IAC7E,IAAI,KAAK,EAAE,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACvD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gGAAgG;AAChG,WAAW;AACX,gGAAgG;AAEhG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AACvE,MAAM,cAAc,GAAG,qEAAqE,CAAC;AAC7F,MAAM,cAAc,GAClB,mGAAmG,CAAC;AACtG,MAAM,UAAU,GACd,4GAA4G,CAAC;AAC/G,MAAM,iBAAiB,GACrB,8KAA8K,CAAC;AACjL,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AACvF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,yBAAyB,CAAC,CAAC,CAAC;AAOpF,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAa;IACjD,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,SAAS,CAAC,OAAgB,EAAE,IAAY;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IACxD,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,IAAa,EAAE,KAAa;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAkC,CAAC;IACrD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,IAAyB;IAC7C,OAAO,CACL,IAAI,EAAE,IAAI,KAAK,kBAAkB;QACjC,IAAI,CAAC,QAAQ,KAAK,IAAI;QACtB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,QAAQ,CACzC,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,SAAS,OAAO,CAAC,OAAgB,EAAE,OAAgB;IACjD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,MAAkB,EAAE,IAAa,EAAE,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAQ,EAAE;QACvF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC;IAEF,mGAAmG;IACnG,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACrB,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACvC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACpC,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACrB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,kBAAkB,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAClD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;oBACxC,IAAI,OAAO,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;wBAAE,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;gBAC5F,CAAC;gBACD,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;oBAClF,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,eAAe,GACnB,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;wBACrE,MAAM,WAAW,GACf,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;wBACnF,IAAI,eAAe,IAAI,WAAW;4BAAE,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;oBACtE,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvC,IAAI,OAAO,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;oBACjF,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,QAAQ,OAAO,EAAE,CAAC,CAAC;gBACxD,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,oBAAoB,EAAE,CAAC;gBAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC3B,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAClE,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,SAAS,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBACD,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACtE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,UAAU,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC5D,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,qBAAqB,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;qBACzE,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;gBACnF,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrC,IAAI,MAAM,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;oBACrC,MAAM,OAAO,GAAG,MAAM,CAAE,MAAM,CAAC,SAAmC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzE,MAAM,IAAI,GACR,GAAG,CAAC,OAAO,CAAC;wBACZ,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBAC7E,CAAC,OAAO,EAAE,IAAI,KAAK,iBAAiB;4BAClC,CAAC,CAAE,OAAO,CAAC,MAAgC;gCACvC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAE,KAAK,CAAC,KAAyC,EAAE,MAAM,IAAI,EAAE,CAAC;iCAC/E,IAAI,CAAC,GAAG,CAAC;4BACd,CAAC,CAAC,SAAS,CAAC,CAAC;oBACjB,IAAI,IAAI,KAAK,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvD,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBACrE,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,eAAe,CAAC;YACrB,KAAK,gBAAgB,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC7B,IACE,IAAI,CAAC,IAAI,KAAK,eAAe;oBAC7B,MAAM,EAAE,IAAI,KAAK,YAAY;oBAC7B,MAAM,CAAC,IAAI,KAAK,QAAQ,EACxB,CAAC;oBACD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBACxC,IAAI,OAAO,KAAK,SAAS;wBACvB,GAAG,CACD,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,eAAe,EAChE,IAAI,EACJ,UAAU,OAAO,GAAG,CACrB,CAAC;gBACN,CAAC;gBACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;yBACvE,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;oBACjF,IAAI,IAAI,KAAK,iBAAiB;wBAAE,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC;oBAC1F,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC;wBACrF,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;oBAChE,CAAC;oBACD,IAAI,IAAI,KAAK,QAAQ,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;wBACnD,MAAM,KAAK,GAAI,IAAI,CAAC,SAAmC,EAAE,CAAC,CAAC,CAAC,CAAC;wBAC7D,IAAI,KAAK,EAAE,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;4BACnD,GAAG,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;oBAC7C,CAAC;oBACD,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;wBACvC,IAAI,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC;4BAAE,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;6BAC1D,IAAI,IAAI,KAAK,YAAY;4BAAE,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;oBACpF,CAAC;oBACD,IACE,KAAK,KAAK,SAAS;wBACnB,gFAAgF,CAAC,IAAI,CACnF,KAAK,CACN,EACD,CAAC;wBACD,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,QAAQ,KAAK,EAAE,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBACD,0DAA0D;gBAC1D,IACE,CAAC,IAAI,CAAC,IAAI,KAAK,gBAAgB;oBAC7B,MAAM,EAAE,IAAI,KAAK,YAAY;oBAC7B,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;oBACzD,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe;wBAC5B,MAAM,EAAE,IAAI,KAAK,YAAY;wBAC7B,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;oBAC7B,KAAK,KAAK,gBAAgB;oBAC1B,CAAC,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EACtC,CAAC;oBACD,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;gBACtC,CAAC;gBACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBACvC,IAAI,MAAM,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;wBAAE,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;gBAC5F,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,mBAAmB,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxC,IAAI,MAAM,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;gBAC1F,MAAM;YACR,CAAC;YACD,KAAK,SAAS,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,GAAG,CACD,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,eAAe,EAC/D,IAAI,EACJ,UAAU,MAAM,GAAG,CACpB,CAAC;gBACJ,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,sBAAsB,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjC,IACE,MAAM,EAAE,IAAI,KAAK,kBAAkB;oBACnC,MAAM,CAAC,QAAQ,KAAK,IAAI;oBACxB,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,EACvD,CAAC;oBACD,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM;YACR,CAAC;YACD,SAAS,CAAC;gBACR,MAAM;YACR,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AA2BD,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,QAAQ,CAAC,QAA4B;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,SAAS,OAAO,CAAC,GAAG,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAa;IAC1C,wBAAwB;IACxB,sBAAsB;IACtB,eAAe;CAChB,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAa;IAC3C,uBAAuB;IACvB,uBAAuB;IACvB,wBAAwB;IACxB,2BAA2B;IAC3B,iBAAiB;IACjB,wBAAwB;IACxB,0BAA0B;IAC1B,6BAA6B;IAC7B,oBAAoB;IACpB,iBAAiB;CAClB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAsB,EAAE,OAAe;IACnE,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SACrC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACvE,QAAQ,EAAE,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7C,aAAa,EAAE,CAAC;QAChB,IAAI,MAAM,KAAK,KAAK;YAAE,SAAS;QAC/B,IACE,YAAY,IAAI,SAAS;YACzB,MAAM,CAAC,MAAM,GAAG,cAAc;YAC9B,KAAK,CAAC,MAAM,GAAG,cAAc,EAC7B,CAAC;YACD,YAAY,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QACD,YAAY,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjB,YAAY,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEhC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAC7B,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,OAAO,CAAC,MAAM,KAAK,eAAe,IAAI,OAAO,CAAC,MAAM,KAAK,sBAAsB,CAAC;YACjF,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,SAAS,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC3D,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,SAAS,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAClE,CAAC;QACF,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC;QAE3F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxC,KAAK,MAAM,OAAO,IAAI,GAAG,EAAE,CAAC;YAC1B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,SAAS;YACpD,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,SAAS,OAAO,CAAC,GAAG,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACtC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACpB,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,wEAAwE;QACxE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,KAAK,MAAM,OAAO,IAAI,GAAG,EAAE,CAAC;YAC1B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,SAAS;YACnD,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,SAAS,OAAO,CAAC,GAAG,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC7C,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC3B,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBAAE,SAAS;YAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;gBAC9C,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB;oBACxE,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE;oBACzF,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC9C,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,eAAe;oBACvB,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,OAAO,CAAC,GAAG;oBACpB,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,yFAAyF;IACzF,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,wBAAwB,CAAC,CAAC;IAClF,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,WAAW;SACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,YAAY,CAAC;SACzC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;SACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACf,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,YAAY,CAAC,CAC/E,CACJ,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CACtB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,wBAAwB,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAChF,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAE7F,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,MAAM;YAChB,MAAM;YACN,OAAO;YACP,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,QAAQ,EAAE,gBAAgB,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC;YAC9D,QAAQ,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC;YACpE,WAAW,EAAE,KAAK,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxF,aAAa;QACb,YAAY;QACZ,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,IAAY,EAAY,EAAE,CACjD,IAAI;KACD,KAAK,CAAC,OAAO,CAAC;KACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;KAC1B,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAC3F,CAAC;AAEN,sGAAsG;AACtG,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,KAAa;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,IAAI,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;;YACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM;QAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC"}

package/dist/remediation/radar/metadata.d.ts

@@ -0,0 +1,14 @@
+import { type RadarFlag } from "./types.js";
+export interface PackumentVersion {
+    version: string;
+    /** Deprecation message from the registry; untrusted text. */
+    deprecated?: string;
+    /** Publish time, ISO 8601. */
+    publishedAt?: string;
+}
+/**
+ * Flags for the releases in `(from, to]`. `all` is every stable version of the package (the
+ * predecessor of the first release in range is `from` itself).
+ */
+export declare function metadataFlags(all: readonly PackumentVersion[], from: string, to: string): RadarFlag[];
+//# sourceMappingURL=metadata.d.ts.map

package/dist/remediation/radar/metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../../../src/remediation/radar/metadata.ts"],"names":[],"mappings":"AASA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAaD;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,SAAS,gBAAgB,EAAE,EAChC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,SAAS,EAAE,CA2Fb"}