codehere 0.1.1

package/dist/infrastructure/providers/provider-config-loader.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Provider Layer: Provider Config Loader
+ * Loads user-facing provider configuration from JSON files
+ *
+ * Phase 4G: User-facing provider config files
+ */
+import type { OperationProviderConfig } from './model-config.types.js';
+/**
+ * User-facing provider configuration
+ * Simple JSON schema for provider selection
+ */
+export interface ProviderConfig {
+    /** Default provider ID for all operations */
+    default?: string;
+    /** Operation-specific provider selection */
+    operations?: {
+        chat?: string;
+        embedding?: string;
+        rerank?: string;
+    };
+}
+/**
+ * Load provider configuration from file
+ *
+ * @param options - Optional configuration
+ * @param options.cwd - Working directory (defaults to process.cwd())
+ * @returns ProviderConfig if file exists and is valid, undefined otherwise
+ */
+export declare function loadProviderConfig(options?: {
+    cwd?: string;
+}): ProviderConfig | undefined;
+/**
+ * Convert ProviderConfig to OperationProviderConfig
+ * Used to pass config to OperationProviderResolver
+ */
+export declare function configToOperationConfig(config: ProviderConfig): OperationProviderConfig;
+//# sourceMappingURL=provider-config-loader.d.ts.map

package/dist/infrastructure/providers/provider-config-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-config-loader.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/providers/provider-config-loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAEvE;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4CAA4C;IAC5C,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,cAAc,GAAG,SAAS,CAuCzF;AAoDD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc,GAAG,uBAAuB,CAsBvF"}

package/dist/infrastructure/providers/provider-config-loader.js

@@ -0,0 +1,120 @@
+/**
+ * Provider Layer: Provider Config Loader
+ * Loads user-facing provider configuration from JSON files
+ *
+ * Phase 4G: User-facing provider config files
+ */
+import { existsSync, readFileSync } from 'fs';
+import { join, resolve } from 'path';
+import { findCodebaseRoot } from '../../domain/services/codebase-detector.js';
+/**
+ * Load provider configuration from file
+ *
+ * @param options - Optional configuration
+ * @param options.cwd - Working directory (defaults to process.cwd())
+ * @returns ProviderConfig if file exists and is valid, undefined otherwise
+ */
+export function loadProviderConfig(options) {
+    const cwd = options?.cwd || process.cwd();
+    // Determine config file path
+    let configPath;
+    // Check for explicit path override
+    if (process.env.CODEHERE_PROVIDER_CONFIG_PATH) {
+        configPath = resolve(process.env.CODEHERE_PROVIDER_CONFIG_PATH);
+    }
+    else {
+        // Find codebase root
+        const codebaseInfo = findCodebaseRoot(cwd);
+        if (codebaseInfo) {
+            // Default path: .codehere/providers.json
+            configPath = join(codebaseInfo.rootPath, '.codehere', 'providers.json');
+        }
+        else {
+            // Fallback to cwd if codebase root not found
+            configPath = join(cwd, '.codehere', 'providers.json');
+        }
+    }
+    // If file doesn't exist, return undefined (not an error)
+    if (!configPath || !existsSync(configPath)) {
+        return undefined;
+    }
+    try {
+        // Read and parse JSON
+        const fileContent = readFileSync(configPath, 'utf-8');
+        const rawConfig = JSON.parse(fileContent);
+        // Validate and normalize config
+        return validateAndNormalizeConfig(rawConfig);
+    }
+    catch (error) {
+        // Log warning but don't throw (non-fatal)
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        console.warn(`[ProviderConfigLoader] Failed to load config from ${configPath}: ${errorMessage}`);
+        return undefined;
+    }
+}
+/**
+ * Validate and normalize raw config object
+ * Ignores unknown fields and invalid values gracefully
+ */
+function validateAndNormalizeConfig(raw) {
+    if (!raw || typeof raw !== 'object') {
+        return undefined;
+    }
+    const config = {};
+    const obj = raw;
+    // Extract default provider
+    if (obj.default !== undefined) {
+        if (typeof obj.default === 'string' && obj.default.trim()) {
+            config.default = obj.default.trim();
+        }
+    }
+    // Extract operations
+    if (obj.operations !== undefined && typeof obj.operations === 'object' && obj.operations !== null) {
+        const operations = obj.operations;
+        const normalizedOps = {};
+        // Known operation types
+        const validOperations = ['chat', 'embedding', 'rerank'];
+        for (const op of validOperations) {
+            if (operations[op] !== undefined) {
+                const providerId = operations[op];
+                if (typeof providerId === 'string' && providerId.trim()) {
+                    normalizedOps[op] = providerId.trim();
+                }
+            }
+        }
+        // Only set operations if at least one is valid
+        if (Object.keys(normalizedOps).length > 0) {
+            config.operations = normalizedOps;
+        }
+    }
+    // Return config only if it has at least one meaningful field
+    if (config.default || config.operations) {
+        return config;
+    }
+    return undefined;
+}
+/**
+ * Convert ProviderConfig to OperationProviderConfig
+ * Used to pass config to OperationProviderResolver
+ */
+export function configToOperationConfig(config) {
+    const operationConfig = {};
+    // Set default if present
+    if (config.default) {
+        operationConfig.default = config.default;
+    }
+    // Map operations
+    if (config.operations) {
+        if (config.operations.chat) {
+            operationConfig.chat = config.operations.chat;
+        }
+        if (config.operations.embedding) {
+            operationConfig.embedding = config.operations.embedding;
+        }
+        if (config.operations.rerank) {
+            operationConfig.rerank = config.operations.rerank;
+        }
+    }
+    return operationConfig;
+}
+//# sourceMappingURL=provider-config-loader.js.map

package/dist/infrastructure/providers/provider-config-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-config-loader.js","sourceRoot":"","sources":["../../../src/infrastructure/providers/provider-config-loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAmB9E;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B;IAC3D,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1C,6BAA6B;IAC7B,IAAI,UAA8B,CAAC;IAEnC,mCAAmC;IACnC,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,CAAC;QAC9C,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,qBAAqB;QACrB,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,YAAY,EAAE,CAAC;YACjB,yCAAyC;YACzC,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,6CAA6C;YAC7C,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,sBAAsB;QACtB,MAAM,WAAW,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAY,CAAC;QAErD,gCAAgC;QAChC,OAAO,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0CAA0C;QAC1C,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,qDAAqD,UAAU,KAAK,YAAY,EAAE,CAAC,CAAC;QACjG,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CAAC,GAAY;IAC9C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,GAA8B,CAAC;IAE3C,2BAA2B;IAC3B,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1D,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAClG,MAAM,UAAU,GAAG,GAAG,CAAC,UAAqC,CAAC;QAC7D,MAAM,aAAa,GAAiC,EAAE,CAAC;QAEvD,wBAAwB;QACxB,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;QAEjE,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;YACjC,IAAI,UAAU,CAAC,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;gBAClC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;oBACxD,aAAa,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAED,+CAA+C;QAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,UAAU,GAAG,aAAa,CAAC;QACpC,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAsB;IAC5D,MAAM,eAAe,GAA4B,EAAE,CAAC;IAEpD,yBAAyB;IACzB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,eAAe,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3C,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC3B,eAAe,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAChC,eAAe,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAC7B,eAAe,CAAC,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QACpD,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/infrastructure/providers/provider-registry.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Provider Layer: ProviderRegistry
+ * Central registry for all model providers
+ *
+ * Phase 4A: Foundation Implementation (No Behavior Change)
+ */
+import type { IModelProvider } from './model-provider.interface.js';
+/**
+ * Provider Registry
+ * Singleton registry for managing model providers
+ */
+export declare class ProviderRegistry {
+    private static instance;
+    private providers;
+    private defaultProviderId?;
+    /**
+     * Get singleton instance
+     */
+    static getInstance(): ProviderRegistry;
+    /**
+     * Register a provider
+     */
+    register(provider: IModelProvider): void;
+    /**
+     * Get provider by ID
+     */
+    get(providerId: string): IModelProvider | undefined;
+    /**
+     * Get default provider
+     */
+    getDefault(): IModelProvider;
+    /**
+     * Set default provider
+     */
+    setDefault(providerId: string): void;
+    /**
+     * Get all registered providers
+     */
+    getAll(): IModelProvider[];
+    /**
+     * Find providers by capability
+     */
+    findByCapability(capability: keyof import('./model-provider.interface.js').ProviderCapabilities): IModelProvider[];
+    /**
+     * Check if provider is registered
+     */
+    has(providerId: string): boolean;
+    /**
+     * Clear all providers (mainly for testing)
+     */
+    clear(): void;
+}
+//# sourceMappingURL=provider-registry.d.ts.map

package/dist/infrastructure/providers/provider-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-registry.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/providers/provider-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAiC;IACxD,OAAO,CAAC,SAAS,CAA0C;IAC3D,OAAO,CAAC,iBAAiB,CAAC,CAAS;IAEnC;;OAEG;IACH,MAAM,CAAC,WAAW,IAAI,gBAAgB;IAOtC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI;IASxC;;OAEG;IACH,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAInD;;OAEG;IACH,UAAU,IAAI,cAAc;IAW5B;;OAEG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAOpC;;OAEG;IACH,MAAM,IAAI,cAAc,EAAE;IAI1B;;OAEG;IACH,gBAAgB,CAAC,UAAU,EAAE,MAAM,OAAO,+BAA+B,EAAE,oBAAoB,GAAG,cAAc,EAAE;IAIlH;;OAEG;IACH,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAIhC;;OAEG;IACH,KAAK,IAAI,IAAI;CAId"}

package/dist/infrastructure/providers/provider-registry.js

@@ -0,0 +1,88 @@
+/**
+ * Provider Layer: ProviderRegistry
+ * Central registry for all model providers
+ *
+ * Phase 4A: Foundation Implementation (No Behavior Change)
+ */
+/**
+ * Provider Registry
+ * Singleton registry for managing model providers
+ */
+export class ProviderRegistry {
+    static instance = null;
+    providers = new Map();
+    defaultProviderId;
+    /**
+     * Get singleton instance
+     */
+    static getInstance() {
+        if (!ProviderRegistry.instance) {
+            ProviderRegistry.instance = new ProviderRegistry();
+        }
+        return ProviderRegistry.instance;
+    }
+    /**
+     * Register a provider
+     */
+    register(provider) {
+        this.providers.set(provider.id, provider);
+        // Auto-set as default if this is the first provider
+        if (!this.defaultProviderId) {
+            this.defaultProviderId = provider.id;
+        }
+    }
+    /**
+     * Get provider by ID
+     */
+    get(providerId) {
+        return this.providers.get(providerId);
+    }
+    /**
+     * Get default provider
+     */
+    getDefault() {
+        if (!this.defaultProviderId) {
+            throw new Error('No default provider configured');
+        }
+        const provider = this.get(this.defaultProviderId);
+        if (!provider) {
+            throw new Error(`Default provider '${this.defaultProviderId}' not found`);
+        }
+        return provider;
+    }
+    /**
+     * Set default provider
+     */
+    setDefault(providerId) {
+        if (!this.providers.has(providerId)) {
+            throw new Error(`Provider '${providerId}' not registered`);
+        }
+        this.defaultProviderId = providerId;
+    }
+    /**
+     * Get all registered providers
+     */
+    getAll() {
+        return Array.from(this.providers.values());
+    }
+    /**
+     * Find providers by capability
+     */
+    findByCapability(capability) {
+        return this.getAll().filter(p => p.capabilities[capability]);
+    }
+    /**
+     * Check if provider is registered
+     */
+    has(providerId) {
+        return this.providers.has(providerId);
+    }
+    /**
+     * Clear all providers (mainly for testing)
+     */
+    clear() {
+        this.providers.clear();
+        this.defaultProviderId = undefined;
+    }
+}
+//# sourceMappingURL=provider-registry.js.map

package/dist/infrastructure/providers/provider-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-registry.js","sourceRoot":"","sources":["../../../src/infrastructure/providers/provider-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAC,QAAQ,GAA4B,IAAI,CAAC;IAChD,SAAS,GAAgC,IAAI,GAAG,EAAE,CAAC;IACnD,iBAAiB,CAAU;IAEnC;;OAEG;IACH,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC/B,gBAAgB,CAAC,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,gBAAgB,CAAC,QAAQ,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAwB;QAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE1C,oDAAoD;QACpD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,iBAAiB,aAAa,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,UAAkB;QAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,aAAa,UAAU,kBAAkB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,UAA8E;QAC7F,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;IACrC,CAAC"}

package/dist/infrastructure/security/ai-sast-scanner.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Infrastructure: AI SAST Scanner
+ * AI-driven Static Application Security Testing
+ * Detects security vulnerabilities in generated code
+ *
+ * Based on enterprise architecture: AI SAST for security gates
+ */
+import type { IAIService } from '../../domain/interfaces/ai-service.interface.js';
+export interface SASTFinding {
+    severity: 'critical' | 'high' | 'medium' | 'low';
+    category: string;
+    description: string;
+    filepath: string;
+    line: number;
+    recommendation: string;
+    cwe?: string;
+}
+export interface SASTResult {
+    findings: SASTFinding[];
+    totalFindings: number;
+    criticalCount: number;
+    highCount: number;
+    mediumCount: number;
+    lowCount: number;
+    passed: boolean;
+}
+export declare class AISASTScanner {
+    private aiService;
+    constructor(aiService: IAIService);
+    /**
+     * Fast security check on instruction text (before expensive operations)
+     * This is a quick heuristic check to reject dangerous instructions early
+     */
+    scanInstruction(instruction: string): Promise<SASTResult | null>;
+    /**
+     * Fast pattern-based check for dangerous code patterns
+     */
+    private checkDangerousPatterns;
+    /**
+     * Scan code for security vulnerabilities
+     */
+    scan(filepath: string, code: string): Promise<SASTResult>;
+    /**
+     * Scan multiple files
+     */
+    scanFiles(files: Array<{
+        filepath: string;
+        code: string;
+    }>): Promise<SASTResult>;
+    /**
+     * Analyze code with AI for security vulnerabilities
+     */
+    private analyzeWithAI;
+    /**
+     * Check if code passes security gates
+     */
+    passesSecurityGates(filepath: string, code: string): Promise<boolean>;
+}
+//# sourceMappingURL=ai-sast-scanner.d.ts.map

package/dist/infrastructure/security/ai-sast-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-sast-scanner.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/security/ai-sast-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iDAAiD,CAAC;AAGlF,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,SAAS;gBAAT,SAAS,EAAE,UAAU;IAEzC;;;OAGG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA6CtE;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA2D9B;;OAEG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA+C/D;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IA0BtF;;OAEG;YACW,aAAa;IAoD3B;;OAEG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAI5E"}

package/dist/infrastructure/security/ai-sast-scanner.js

@@ -0,0 +1,241 @@
+/**
+ * Infrastructure: AI SAST Scanner
+ * AI-driven Static Application Security Testing
+ * Detects security vulnerabilities in generated code
+ *
+ * Based on enterprise architecture: AI SAST for security gates
+ */
+export class AISASTScanner {
+    aiService;
+    constructor(aiService) {
+        this.aiService = aiService;
+    }
+    /**
+     * Fast security check on instruction text (before expensive operations)
+     * This is a quick heuristic check to reject dangerous instructions early
+     */
+    async scanInstruction(instruction) {
+        // Fast pattern-based check for obvious security issues
+        const lower = instruction.toLowerCase();
+        // Dangerous patterns that should be blocked immediately
+        const dangerousPatterns = [
+            { pattern: /execute.*user.*input|eval.*user|exec.*user/i, severity: 'critical', category: 'Code Injection' },
+            { pattern: /shell.*command|system.*call|process\.exec/i, severity: 'critical', category: 'Command Injection' },
+            { pattern: /sql.*injection|raw.*sql.*query/i, severity: 'high', category: 'SQL Injection' },
+            { pattern: /bypass.*security|disable.*security|remove.*validation/i, severity: 'critical', category: 'Security Bypass' },
+            { pattern: /hardcode.*password|store.*password|plaintext.*password/i, severity: 'high', category: 'Password Exposure' },
+        ];
+        const findings = [];
+        for (const { pattern, severity, category } of dangerousPatterns) {
+            if (pattern.test(instruction)) {
+                findings.push({
+                    severity: severity,
+                    category,
+                    description: `Instruction contains dangerous pattern: ${category}`,
+                    filepath: 'instruction',
+                    line: 0,
+                    recommendation: `Review instruction for security vulnerabilities. Pattern detected: ${category}`,
+                });
+            }
+        }
+        if (findings.length === 0) {
+            return null; // No issues found, allow to proceed
+        }
+        const criticalCount = findings.filter(f => f.severity === 'critical').length;
+        const highCount = findings.filter(f => f.severity === 'high').length;
+        return {
+            findings,
+            totalFindings: findings.length,
+            criticalCount,
+            highCount,
+            mediumCount: 0,
+            lowCount: 0,
+            passed: criticalCount === 0 && highCount === 0,
+        };
+    }
+    /**
+     * Fast pattern-based check for dangerous code patterns
+     */
+    checkDangerousPatterns(code) {
+        const findings = [];
+        const dangerousPatterns = [
+            {
+                pattern: /\beval\s*\(/gi,
+                category: 'Code Injection',
+                description: 'Use of eval() allows arbitrary code execution',
+                severity: 'critical',
+                cwe: 'CWE-95',
+            },
+            {
+                pattern: /\bFunction\s*\(/gi,
+                category: 'Code Injection',
+                description: 'Use of Function() constructor allows arbitrary code execution',
+                severity: 'critical',
+                cwe: 'CWE-95',
+            },
+            {
+                pattern: /\.innerHTML\s*=\s*[^=]/gi,
+                category: 'Cross-Site Scripting',
+                description: 'Direct innerHTML assignment can lead to XSS',
+                severity: 'high',
+                cwe: 'CWE-79',
+            },
+            {
+                pattern: /setTimeout\s*\(\s*[^,)]+\s*\)/gi,
+                category: 'Code Injection',
+                description: 'setTimeout with user input can execute arbitrary code',
+                severity: 'high',
+                cwe: 'CWE-95',
+            },
+            {
+                pattern: /setInterval\s*\(\s*[^,)]+\s*\)/gi,
+                category: 'Code Injection',
+                description: 'setInterval with user input can execute arbitrary code',
+                severity: 'high',
+                cwe: 'CWE-95',
+            },
+        ];
+        dangerousPatterns.forEach(({ pattern, category, description, severity, cwe }) => {
+            const matches = code.matchAll(pattern);
+            for (const match of matches) {
+                const line = code.substring(0, match.index || 0).split('\n').length;
+                findings.push({
+                    severity,
+                    category,
+                    description,
+                    line,
+                    recommendation: `Avoid ${category.toLowerCase()}. Use safer alternatives.`,
+                    cwe,
+                    filepath: '', // Will be set by caller
+                });
+            }
+        });
+        return findings;
+    }
+    /**
+     * Scan code for security vulnerabilities
+     */
+    async scan(filepath, code) {
+        const findings = [];
+        // Fast pattern-based checks first (before expensive AI analysis)
+        const patternFindings = this.checkDangerousPatterns(code);
+        // Set filepath for pattern findings
+        patternFindings.forEach(f => { f.filepath = filepath; });
+        findings.push(...patternFindings);
+        // If critical patterns found, return early (don't need AI analysis)
+        const criticalPatternFindings = patternFindings.filter(f => f.severity === 'critical');
+        if (criticalPatternFindings.length > 0) {
+            return {
+                findings,
+                totalFindings: findings.length,
+                criticalCount: criticalPatternFindings.length,
+                highCount: findings.filter(f => f.severity === 'high').length,
+                mediumCount: findings.filter(f => f.severity === 'medium').length,
+                lowCount: findings.filter(f => f.severity === 'low').length,
+                passed: false,
+            };
+        }
+        // AI-based analysis (only if no critical patterns found)
+        const aiFindings = await this.analyzeWithAI(filepath, code);
+        findings.push(...aiFindings);
+        // Count by severity
+        const criticalCount = findings.filter(f => f.severity === 'critical').length;
+        const highCount = findings.filter(f => f.severity === 'high').length;
+        const mediumCount = findings.filter(f => f.severity === 'medium').length;
+        const lowCount = findings.filter(f => f.severity === 'low').length;
+        // Pass if no critical or high severity findings
+        const passed = criticalCount === 0 && highCount === 0;
+        return {
+            findings,
+            totalFindings: findings.length,
+            criticalCount,
+            highCount,
+            mediumCount,
+            lowCount,
+            passed,
+        };
+    }
+    /**
+     * Scan multiple files
+     */
+    async scanFiles(files) {
+        const allFindings = [];
+        for (const file of files) {
+            const result = await this.scan(file.filepath, file.code);
+            allFindings.push(...result.findings);
+        }
+        const criticalCount = allFindings.filter(f => f.severity === 'critical').length;
+        const highCount = allFindings.filter(f => f.severity === 'high').length;
+        const mediumCount = allFindings.filter(f => f.severity === 'medium').length;
+        const lowCount = allFindings.filter(f => f.severity === 'low').length;
+        const passed = criticalCount === 0 && highCount === 0;
+        return {
+            findings: allFindings,
+            totalFindings: allFindings.length,
+            criticalCount,
+            highCount,
+            mediumCount,
+            lowCount,
+            passed,
+        };
+    }
+    /**
+     * Analyze code with AI for security vulnerabilities
+     */
+    async analyzeWithAI(filepath, code) {
+        const prompt = `Analyze the following code for security vulnerabilities. Focus on:
+- SQL Injection (CWE-89)
+- Cross-Site Scripting / XSS (CWE-79)
+- Code Injection (CWE-94, CWE-95) - including eval(), Function(), setTimeout/setInterval with user input
+- Command Injection (CWE-78)
+- Path Traversal (CWE-22)
+- Insecure Deserialization (CWE-502)
+- Authentication/Authorization flaws
+- Sensitive data exposure
+- Insecure dependencies
+- Dangerous JavaScript patterns: eval(), Function(), innerHTML with user input, dangerous regex
+
+Code from ${filepath}:
+\`\`\`
+${code}
+\`\`\`
+
+Respond with a JSON array of findings. Each finding should have:
+- severity: "critical" | "high" | "medium" | "low"
+- category: e.g., "SQL Injection"
+- description: Brief description of the vulnerability
+- line: Line number (approximate)
+- recommendation: How to fix it
+- cwe: CWE identifier if applicable
+
+If no vulnerabilities found, return empty array [].
+
+JSON only, no other text:`;
+        try {
+            const response = await this.aiService.chat(prompt, []);
+            // Extract JSON from response
+            const jsonMatch = response.match(/\[[\s\S]*\]/);
+            if (!jsonMatch) {
+                return [];
+            }
+            const findings = JSON.parse(jsonMatch[0]);
+            // Add filepath to each finding
+            return findings.map(f => ({
+                ...f,
+                filepath,
+            }));
+        }
+        catch (error) {
+            console.warn('AI SAST analysis failed:', error);
+            return [];
+        }
+    }
+    /**
+     * Check if code passes security gates
+     */
+    async passesSecurityGates(filepath, code) {
+        const result = await this.scan(filepath, code);
+        return result.passed;
+    }
+}
+//# sourceMappingURL=ai-sast-scanner.js.map

package/dist/infrastructure/security/ai-sast-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-sast-scanner.js","sourceRoot":"","sources":["../../../src/infrastructure/security/ai-sast-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAyBH,MAAM,OAAO,aAAa;IACJ;IAApB,YAAoB,SAAqB;QAArB,cAAS,GAAT,SAAS,CAAY;IAAG,CAAC;IAE7C;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,uDAAuD;QACvD,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;QAExC,wDAAwD;QACxD,MAAM,iBAAiB,GAAG;YACxB,EAAE,OAAO,EAAE,6CAA6C,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE;YAC5G,EAAE,OAAO,EAAE,4CAA4C,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,EAAE;YAC9G,EAAE,OAAO,EAAE,iCAAiC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE;YAC3F,EAAE,OAAO,EAAE,wDAAwD,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,iBAAiB,EAAE;YACxH,EAAE,OAAO,EAAE,yDAAyD,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE;SACxH,CAAC;QAEF,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,iBAAiB,EAAE,CAAC;YAChE,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,QAA+B;oBACzC,QAAQ;oBACR,WAAW,EAAE,2CAA2C,QAAQ,EAAE;oBAClE,QAAQ,EAAE,aAAa;oBACvB,IAAI,EAAE,CAAC;oBACP,cAAc,EAAE,sEAAsE,QAAQ,EAAE;iBACjG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,CAAC,oCAAoC;QACnD,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAC7E,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QAErE,OAAO;YACL,QAAQ;YACR,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,aAAa;YACb,SAAS;YACT,WAAW,EAAE,CAAC;YACd,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,aAAa,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,IAAY;QACzC,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,MAAM,iBAAiB,GAAG;YACxB;gBACE,OAAO,EAAE,eAAe;gBACxB,QAAQ,EAAE,gBAAgB;gBAC1B,WAAW,EAAE,+CAA+C;gBAC5D,QAAQ,EAAE,UAAmB;gBAC7B,GAAG,EAAE,QAAQ;aACd;YACD;gBACE,OAAO,EAAE,mBAAmB;gBAC5B,QAAQ,EAAE,gBAAgB;gBAC1B,WAAW,EAAE,+DAA+D;gBAC5E,QAAQ,EAAE,UAAmB;gBAC7B,GAAG,EAAE,QAAQ;aACd;YACD;gBACE,OAAO,EAAE,0BAA0B;gBACnC,QAAQ,EAAE,sBAAsB;gBAChC,WAAW,EAAE,6CAA6C;gBAC1D,QAAQ,EAAE,MAAe;gBACzB,GAAG,EAAE,QAAQ;aACd;YACD;gBACE,OAAO,EAAE,iCAAiC;gBAC1C,QAAQ,EAAE,gBAAgB;gBAC1B,WAAW,EAAE,uDAAuD;gBACpE,QAAQ,EAAE,MAAe;gBACzB,GAAG,EAAE,QAAQ;aACd;YACD;gBACE,OAAO,EAAE,kCAAkC;gBAC3C,QAAQ,EAAE,gBAAgB;gBAC1B,WAAW,EAAE,wDAAwD;gBACrE,QAAQ,EAAE,MAAe;gBACzB,GAAG,EAAE,QAAQ;aACd;SACF,CAAC;QAEF,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE;YAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBACpE,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ;oBACR,QAAQ;oBACR,WAAW;oBACX,IAAI;oBACJ,cAAc,EAAE,SAAS,QAAQ,CAAC,WAAW,EAAE,2BAA2B;oBAC1E,GAAG;oBACH,QAAQ,EAAE,EAAE,EAAE,wBAAwB;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,IAAY;QACvC,MAAM,QAAQ,GAAkB,EAAE,CAAC;QAEnC,iEAAiE;QACjE,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC1D,oCAAoC;QACpC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;QAElC,oEAAoE;QACpE,MAAM,uBAAuB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACvF,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,QAAQ;gBACR,aAAa,EAAE,QAAQ,CAAC,MAAM;gBAC9B,aAAa,EAAE,uBAAuB,CAAC,MAAM;gBAC7C,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;gBAC7D,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;gBACjE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;gBAC3D,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAED,yDAAyD;QACzD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5D,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;QAE7B,oBAAoB;QACpB,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAC7E,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QACrE,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QACzE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;QAEnE,gDAAgD;QAChD,MAAM,MAAM,GAAG,aAAa,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC;QAEtD,OAAO;YACL,QAAQ;YACR,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,aAAa;YACb,SAAS;YACT,WAAW;YACX,QAAQ;YACR,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAAgD;QAC9D,MAAM,WAAW,GAAkB,EAAE,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAChF,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QACxE,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC5E,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;QAEtE,MAAM,MAAM,GAAG,aAAa,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC;QAEtD,OAAO;YACL,QAAQ,EAAE,WAAW;YACrB,aAAa,EAAE,WAAW,CAAC,MAAM;YACjC,aAAa;YACb,SAAS;YACT,WAAW;YACX,QAAQ;YACR,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,IAAY;QACxD,MAAM,MAAM,GAAG;;;;;;;;;;;;YAYP,QAAQ;;EAElB,IAAI;;;;;;;;;;;;;0BAaoB,CAAC;QAEvB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAEvD,6BAA6B;YAC7B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAChD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAkB,CAAC;YAE3D,+BAA+B;YAC/B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxB,GAAG,CAAC;gBACJ,QAAQ;aACT,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,QAAgB,EAAE,IAAY;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;CACF"}