codesift-mcp 0.3.0 → 0.4.0

package/dist/tools/dependency-audit-tools.js

@@ -0,0 +1,553 @@
+/**
+ * dependency_audit — composite tool that runs 4 dependency health checks
+ * in parallel: vulnerabilities, licenses, freshness, and lockfile integrity.
+ * Wraps existing CLI tools (npm/pnpm/yarn/bun audit + outdated).
+ */
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { readFile, stat } from "node:fs/promises";
+import { join } from "node:path";
+import { getCodeIndex } from "./index-tools.js";
+const execFileAsync = promisify(execFile);
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const CHECK_TIMEOUT_MS = 30_000;
+const MAX_BUFFER = 64 * 1024 * 1024; // 64MB — npm audit can be large
+const TOP_N = 20;
+const SEVERITY_RANK = {
+    low: 0,
+    moderate: 1,
+    high: 2,
+    critical: 3,
+};
+// GPL, AGPL, LGPL, SSPL, EUPL, OSL family → copyleft/problematic for many orgs
+const PROBLEMATIC_LICENSE_PATTERNS = [
+    /^GPL(-|$)/i,
+    /^AGPL(-|$)/i,
+    /^LGPL(-|$)/i,
+    /^SSPL(-|$)/i,
+    /^EUPL(-|$)/i,
+    /^OSL(-|$)/i,
+    /^CC-BY-NC/i,
+    /copyleft/i,
+];
+function withTimeout(promise, ms) {
+    return Promise.race([
+        promise,
+        new Promise((resolve) => setTimeout(() => resolve({ status: "timeout" }), ms)),
+    ]);
+}
+function isTimeout(v) {
+    return v != null
+        && typeof v === "object"
+        && "status" in v
+        && v.status === "timeout";
+}
+// ---------------------------------------------------------------------------
+// Package manager detection
+// ---------------------------------------------------------------------------
+async function fileExists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function detectPackageManager(workspace) {
+    if (await fileExists(join(workspace, "pnpm-lock.yaml")))
+        return "pnpm";
+    if (await fileExists(join(workspace, "yarn.lock")))
+        return "yarn";
+    if (await fileExists(join(workspace, "bun.lockb")))
+        return "bun";
+    if (await fileExists(join(workspace, "bun.lock")))
+        return "bun";
+    if (await fileExists(join(workspace, "package-lock.json")))
+        return "npm";
+    return "unknown";
+}
+function lockfileName(pm) {
+    switch (pm) {
+        case "npm": return "package-lock.json";
+        case "pnpm": return "pnpm-lock.yaml";
+        case "yarn": return "yarn.lock";
+        case "bun": return "bun.lockb";
+        default: return null;
+    }
+}
+function emptyVulnAggregate() {
+    return {
+        total: 0,
+        by_severity: { critical: 0, high: 0, moderate: 0, low: 0 },
+        findings: [],
+    };
+}
+function normalizeSeverity(raw) {
+    if (typeof raw !== "string")
+        return null;
+    const s = raw.toLowerCase();
+    if (s === "critical" || s === "high" || s === "moderate" || s === "low") {
+        return s;
+    }
+    // npm sometimes emits "info" — treat as low
+    if (s === "info")
+        return "low";
+    return null;
+}
+function parseNpmAudit(stdout, minRank) {
+    const agg = emptyVulnAggregate();
+    let parsed;
+    try {
+        parsed = JSON.parse(stdout);
+    }
+    catch {
+        return agg;
+    }
+    if (!parsed || typeof parsed !== "object")
+        return agg;
+    const vulns = parsed.vulnerabilities;
+    if (!vulns || typeof vulns !== "object")
+        return agg;
+    for (const [pkg, data] of Object.entries(vulns)) {
+        if (!data || typeof data !== "object")
+            continue;
+        const entry = data;
+        const severity = normalizeSeverity(entry.severity);
+        if (!severity)
+            continue;
+        if (SEVERITY_RANK[severity] < minRank)
+            continue;
+        // `via` can be an array of strings or objects (when transitive)
+        const viaRaw = Array.isArray(entry.via) ? entry.via : [];
+        const via = viaRaw.map((v) => {
+            if (typeof v === "string")
+                return v;
+            if (v && typeof v === "object" && "name" in v && typeof v.name === "string") {
+                return v.name;
+            }
+            return "";
+        }).filter((s) => s.length > 0);
+        // fixAvailable may be boolean or an object
+        const fixAvailable = entry.fixAvailable === true
+            || (entry.fixAvailable !== undefined && entry.fixAvailable !== false
+                && typeof entry.fixAvailable === "object" && entry.fixAvailable !== null);
+        agg.total++;
+        agg.by_severity[severity]++;
+        const finding = {
+            package: pkg,
+            severity,
+            via,
+            fix_available: fixAvailable,
+        };
+        if (typeof entry.url === "string" && entry.url.length > 0) {
+            finding.advisory_url = entry.url;
+        }
+        agg.findings.push(finding);
+    }
+    // Sort by severity (critical first), then by package name
+    agg.findings.sort((a, b) => SEVERITY_RANK[b.severity] - SEVERITY_RANK[a.severity]
+        || a.package.localeCompare(b.package));
+    agg.findings = agg.findings.slice(0, TOP_N);
+    return agg;
+}
+async function runAudit(pm, workspace, minRank) {
+    if (pm === "unknown") {
+        throw new Error("cannot run audit: unknown package manager");
+    }
+    // All supported package managers accept `audit --json`
+    const args = ["audit", "--json"];
+    // execFile with non-zero exit is treated as error, but npm audit exits
+    // non-zero when vulnerabilities are found. We still want the stdout.
+    try {
+        const { stdout } = await execFileAsync(pm, args, {
+            cwd: workspace,
+            maxBuffer: MAX_BUFFER,
+            timeout: CHECK_TIMEOUT_MS,
+            // Don't inherit the parent's TTY; force non-interactive output
+            env: { ...process.env, CI: "1", NO_COLOR: "1" },
+        });
+        return parseNpmAudit(stdout, minRank);
+    }
+    catch (err) {
+        // Non-zero exit is normal if vulns exist; stdout may still hold the JSON
+        if (err && typeof err === "object" && "stdout" in err) {
+            const stdout = err.stdout;
+            if (typeof stdout === "string" && stdout.trim().length > 0) {
+                return parseNpmAudit(stdout, minRank);
+            }
+        }
+        throw err;
+    }
+}
+function isProblematicLicense(license) {
+    return PROBLEMATIC_LICENSE_PATTERNS.some((pat) => pat.test(license));
+}
+function normalizeLicenseField(raw) {
+    if (typeof raw === "string")
+        return raw;
+    // SPDX object form: { type: "MIT" }
+    if (raw && typeof raw === "object") {
+        const obj = raw;
+        if (typeof obj.type === "string")
+            return obj.type;
+    }
+    return "UNKNOWN";
+}
+async function scanLicenses(workspace, indexFiles) {
+    const agg = {
+        total: 0,
+        problematic: [],
+        distribution: {},
+    };
+    // Look for node_modules/<pkg>/package.json entries in the index.
+    // Scoped packages: node_modules/@scope/pkg/package.json (depth 3)
+    // Regular:        node_modules/pkg/package.json (depth 2)
+    const pkgManifests = indexFiles.filter((f) => {
+        if (!f.path.includes("node_modules/"))
+            return false;
+        if (!f.path.endsWith("/package.json"))
+            return false;
+        // Strip everything up to and including "node_modules/"
+        const idx = f.path.lastIndexOf("node_modules/");
+        const tail = f.path.slice(idx + "node_modules/".length);
+        const parts = tail.split("/");
+        // Regular: ["pkg", "package.json"] (2 parts)
+        // Scoped:  ["@scope", "pkg", "package.json"] (3 parts)
+        if (parts.length === 2)
+            return true;
+        if (parts.length === 3 && parts[0].startsWith("@"))
+            return true;
+        return false;
+    });
+    for (const file of pkgManifests) {
+        try {
+            const absPath = join(workspace, file.path);
+            const source = await readFile(absPath, "utf-8");
+            const json = JSON.parse(source);
+            const pkgName = typeof json.name === "string" ? json.name : file.path;
+            // Prefer `license` (SPDX), fall back to legacy `licenses` array
+            let license = "UNKNOWN";
+            if (json.license !== undefined) {
+                license = normalizeLicenseField(json.license);
+            }
+            else if (Array.isArray(json.licenses) && json.licenses.length > 0) {
+                license = normalizeLicenseField(json.licenses[0]);
+            }
+            agg.total++;
+            agg.distribution[license] = (agg.distribution[license] ?? 0) + 1;
+            if (isProblematicLicense(license)) {
+                agg.problematic.push({
+                    package: pkgName,
+                    license,
+                    is_problematic: true,
+                });
+            }
+        }
+        catch {
+            // Skip unreadable / malformed manifests
+        }
+    }
+    return agg;
+}
+function parseMajor(version) {
+    const cleaned = version.replace(/^[\^~>=<v\s]+/, "");
+    const first = cleaned.split(".")[0];
+    if (!first)
+        return null;
+    const num = parseInt(first, 10);
+    return Number.isNaN(num) ? null : num;
+}
+function parseOutdated(stdout) {
+    const agg = { outdated_count: 0, major_gaps: [] };
+    if (!stdout.trim())
+        return agg;
+    let parsed;
+    try {
+        parsed = JSON.parse(stdout);
+    }
+    catch {
+        return agg;
+    }
+    if (!parsed || typeof parsed !== "object")
+        return agg;
+    const entries = [];
+    for (const [pkg, data] of Object.entries(parsed)) {
+        if (!data || typeof data !== "object")
+            continue;
+        const entry = data;
+        const current = typeof entry.current === "string" ? entry.current : "";
+        const latest = typeof entry.latest === "string" ? entry.latest : "";
+        if (!current || !latest)
+            continue;
+        const currMajor = parseMajor(current);
+        const latestMajor = parseMajor(latest);
+        const gap = currMajor !== null && latestMajor !== null
+            ? Math.max(0, latestMajor - currMajor)
+            : 0;
+        entries.push({
+            package: pkg,
+            current,
+            latest,
+            major_gap: gap,
+        });
+    }
+    agg.outdated_count = entries.length;
+    entries.sort((a, b) => b.major_gap - a.major_gap || a.package.localeCompare(b.package));
+    agg.major_gaps = entries.slice(0, TOP_N);
+    return agg;
+}
+async function runOutdated(pm, workspace) {
+    if (pm === "unknown") {
+        throw new Error("cannot run outdated: unknown package manager");
+    }
+    // npm/pnpm/yarn/bun all accept `outdated --json`. Yarn Classic emits NDJSON
+    // (different schema); we only support the modern JSON form here.
+    const args = ["outdated", "--json"];
+    try {
+        const { stdout } = await execFileAsync(pm, args, {
+            cwd: workspace,
+            maxBuffer: MAX_BUFFER,
+            timeout: CHECK_TIMEOUT_MS,
+            env: { ...process.env, CI: "1", NO_COLOR: "1" },
+        });
+        return parseOutdated(stdout);
+    }
+    catch (err) {
+        // `npm outdated` exits 1 when outdated packages exist, but stdout still has JSON
+        if (err && typeof err === "object" && "stdout" in err) {
+            const stdout = err.stdout;
+            if (typeof stdout === "string" && stdout.trim().length > 0) {
+                return parseOutdated(stdout);
+            }
+        }
+        throw err;
+    }
+}
+function cleanVersionRange(range) {
+    return range.replace(/^[\^~>=<v\s]+/, "").trim();
+}
+function versionSatisfiesManifest(manifestRange, installed) {
+    // Lightweight check: caret/tilde compatibility on the major.
+    const cleaned = cleanVersionRange(manifestRange);
+    const manifestMajor = parseMajor(cleaned);
+    const installedMajor = parseMajor(installed);
+    if (manifestMajor === null || installedMajor === null)
+        return true;
+    // Accept exact equality of major version as "in range" for drift detection
+    return manifestMajor === installedMajor;
+}
+async function checkLockfile(workspace, pm) {
+    const agg = { present: false, issues: [] };
+    const lockName = lockfileName(pm);
+    if (!lockName) {
+        agg.issues.push({
+            type: "missing",
+            message: "No supported lockfile found",
+        });
+        return agg;
+    }
+    const lockPath = join(workspace, lockName);
+    if (!(await fileExists(lockPath))) {
+        agg.issues.push({
+            type: "missing",
+            message: `Lockfile ${lockName} is missing`,
+        });
+        return agg;
+    }
+    agg.present = true;
+    // Only npm (package-lock.json v2+) is parsed in detail here; others just
+    // report presence and skip deep drift/duplicate analysis.
+    if (pm !== "npm")
+        return agg;
+    let manifest = {};
+    try {
+        const manifestSrc = await readFile(join(workspace, "package.json"), "utf-8");
+        manifest = JSON.parse(manifestSrc);
+    }
+    catch {
+        agg.issues.push({
+            type: "missing",
+            message: "package.json could not be read",
+        });
+        return agg;
+    }
+    let lock = {};
+    try {
+        const lockSrc = await readFile(lockPath, "utf-8");
+        lock = JSON.parse(lockSrc);
+    }
+    catch {
+        agg.issues.push({
+            type: "missing",
+            message: `Lockfile ${lockName} could not be parsed`,
+        });
+        return agg;
+    }
+    // Declared deps from manifest
+    const declared = {};
+    for (const field of ["dependencies", "devDependencies", "optionalDependencies"]) {
+        const bag = manifest[field];
+        if (bag && typeof bag === "object") {
+            for (const [name, range] of Object.entries(bag)) {
+                if (typeof range === "string")
+                    declared[name] = range;
+            }
+        }
+    }
+    // Walk installed versions from `packages` (v2+). Root entry has key "" —
+    // every other key starts with "node_modules/".
+    const installedVersions = new Map();
+    const packages = lock.packages ?? {};
+    for (const [key, data] of Object.entries(packages)) {
+        if (!key.startsWith("node_modules/"))
+            continue;
+        const lastIdx = key.lastIndexOf("node_modules/");
+        const tail = key.slice(lastIdx + "node_modules/".length);
+        // Scoped names include a slash
+        const parts = tail.split("/");
+        let name;
+        if (parts.length >= 2 && parts[0].startsWith("@")) {
+            name = `${parts[0]}/${parts[1]}`;
+        }
+        else {
+            name = parts[0];
+        }
+        if (!name)
+            continue;
+        const version = data && typeof data === "object" && "version" in data
+            && typeof data.version === "string"
+            ? data.version
+            : null;
+        if (!version)
+            continue;
+        if (!installedVersions.has(name))
+            installedVersions.set(name, new Set());
+        installedVersions.get(name).add(version);
+    }
+    // Detect drift: manifest says ^1.x but installed is 0.x
+    for (const [name, range] of Object.entries(declared)) {
+        const versions = installedVersions.get(name);
+        if (!versions || versions.size === 0) {
+            agg.issues.push({
+                type: "missing",
+                package: name,
+                message: `${name} declared in package.json but not present in lockfile`,
+            });
+            continue;
+        }
+        for (const installed of versions) {
+            if (!versionSatisfiesManifest(range, installed)) {
+                agg.issues.push({
+                    type: "drift",
+                    package: name,
+                    message: `${name}: manifest range ${range} does not match installed ${installed}`,
+                });
+            }
+        }
+    }
+    // Detect duplicates: same package name appearing with multiple versions in the tree
+    for (const [name, versions] of installedVersions) {
+        if (versions.size > 1) {
+            agg.issues.push({
+                type: "duplicate",
+                package: name,
+                message: `${name} installed with ${versions.size} different versions: ${[...versions].join(", ")}`,
+            });
+        }
+    }
+    return agg;
+}
+// ---------------------------------------------------------------------------
+// Main composite tool
+// ---------------------------------------------------------------------------
+export async function dependencyAudit(repo, options) {
+    const startMs = Date.now();
+    const index = await getCodeIndex(repo);
+    if (!index) {
+        throw new Error(`Repository "${repo}" not found. Index it first with index_folder.`);
+    }
+    const workspace = options?.workspace_path ?? index.root;
+    const minRank = SEVERITY_RANK[options?.min_severity ?? "low"];
+    const skipLicenses = options?.skip_licenses === true;
+    const pm = await detectPackageManager(workspace);
+    const errors = [];
+    // Fan out 4 checks in parallel with per-check timeout
+    const [vulnRes, licenseRes, freshRes, lockRes] = await Promise.allSettled([
+        pm === "unknown"
+            ? Promise.resolve(emptyVulnAggregate())
+            : withTimeout(runAudit(pm, workspace, minRank), CHECK_TIMEOUT_MS),
+        skipLicenses
+            ? Promise.resolve({ total: 0, problematic: [], distribution: {} })
+            : withTimeout(scanLicenses(workspace, index.files), CHECK_TIMEOUT_MS),
+        pm === "unknown"
+            ? Promise.resolve({ outdated_count: 0, major_gaps: [] })
+            : withTimeout(runOutdated(pm, workspace), CHECK_TIMEOUT_MS),
+        withTimeout(checkLockfile(workspace, pm), CHECK_TIMEOUT_MS),
+    ]);
+    // Extract results — any failure becomes an error[] entry, never crashes the audit
+    let vulnerabilities = emptyVulnAggregate();
+    if (vulnRes.status === "fulfilled") {
+        if (isTimeout(vulnRes.value)) {
+            errors.push("vulnerabilities: check timed out");
+        }
+        else {
+            vulnerabilities = vulnRes.value;
+        }
+    }
+    else {
+        errors.push(`vulnerabilities: ${vulnRes.reason instanceof Error ? vulnRes.reason.message : String(vulnRes.reason)}`);
+    }
+    let licenses = { total: 0, problematic: [], distribution: {} };
+    if (licenseRes.status === "fulfilled") {
+        if (isTimeout(licenseRes.value)) {
+            errors.push("licenses: check timed out");
+        }
+        else {
+            licenses = licenseRes.value;
+        }
+    }
+    else {
+        errors.push(`licenses: ${licenseRes.reason instanceof Error ? licenseRes.reason.message : String(licenseRes.reason)}`);
+    }
+    let freshness = { outdated_count: 0, major_gaps: [] };
+    if (freshRes.status === "fulfilled") {
+        if (isTimeout(freshRes.value)) {
+            errors.push("freshness: check timed out");
+        }
+        else {
+            freshness = freshRes.value;
+        }
+    }
+    else {
+        errors.push(`freshness: ${freshRes.reason instanceof Error ? freshRes.reason.message : String(freshRes.reason)}`);
+    }
+    let lockfile = { present: false, issues: [] };
+    if (lockRes.status === "fulfilled") {
+        if (isTimeout(lockRes.value)) {
+            errors.push("lockfile: check timed out");
+        }
+        else {
+            lockfile = lockRes.value;
+        }
+    }
+    else {
+        errors.push(`lockfile: ${lockRes.reason instanceof Error ? lockRes.reason.message : String(lockRes.reason)}`);
+    }
+    if (pm === "unknown") {
+        errors.push("package_manager: could not detect from lockfile");
+    }
+    return {
+        workspace,
+        package_manager: pm,
+        vulnerabilities,
+        licenses,
+        freshness,
+        lockfile,
+        duration_ms: Date.now() - startMs,
+        errors,
+    };
+}
+//# sourceMappingURL=dependency-audit-tools.js.map

package/dist/tools/dependency-audit-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-audit-tools.js","sourceRoot":"","sources":["../../src/tools/dependency-audit-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AA8D1C,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,gCAAgC;AACrE,MAAM,KAAK,GAAG,EAAE,CAAC;AAEjB,MAAM,aAAa,GAA6B;IAC9C,GAAG,EAAE,CAAC;IACN,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,+EAA+E;AAC/E,MAAM,4BAA4B,GAAG;IACnC,YAAY;IACZ,aAAa;IACb,aAAa;IACb,aAAa;IACb,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,WAAW;CACZ,CAAC;AAQF,SAAS,WAAW,CAClB,OAAmB,EACnB,EAAU;IAEV,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,OAAO;QACP,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE,CACvC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CACrD;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,CAAU;IAC3B,OAAO,CAAC,IAAI,IAAI;WACX,OAAO,CAAC,KAAK,QAAQ;WACrB,QAAQ,IAAI,CAAC;WACZ,CAAqB,CAAC,MAAM,KAAK,SAAS,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IACnD,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACvE,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAClE,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,EAAkB;IACtC,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,KAAK,CAAC,CAAC,OAAO,mBAAmB,CAAC;QACvC,KAAK,MAAM,CAAC,CAAC,OAAO,gBAAgB,CAAC;QACrC,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC;QAChC,KAAK,KAAK,CAAC,CAAC,OAAO,WAAW,CAAC;QAC/B,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;IACvB,CAAC;AACH,CAAC;AAYD,SAAS,kBAAkB;IACzB,OAAO;QACL,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;QAC1D,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;QACxE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,4CAA4C;IAC5C,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,OAAe;IACpD,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACtD,MAAM,KAAK,GAAI,MAAwC,CAAC,eAAe,CAAC;IACxE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAEpD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,KAAK,GAAG,IAKb,CAAC;QAEF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,OAAO;YAAE,SAAS;QAEhD,gEAAgE;QAChE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,GAAG,GAAa,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACrC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,IAAI,CAAC,IAAI,OAAQ,CAAuB,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnG,OAAQ,CAAsB,CAAC,IAAI,CAAC;YACtC,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAE/B,2CAA2C;QAC3C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,KAAK,IAAI;eAC3C,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK;mBAC/D,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;QAE9E,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAE5B,MAAM,OAAO,GAAkB;YAC7B,OAAO,EAAE,GAAG;YACZ,QAAQ;YACR,GAAG;YACH,aAAa,EAAE,YAAY;SAC5B,CAAC;QACF,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC;QACnC,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,0DAA0D;IAC1D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACzB,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;WAClD,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAE5C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,EAAkB,EAClB,SAAiB,EACjB,OAAe;IAEf,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,uDAAuD;IACvD,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEjC,uEAAuE;IACvE,qEAAqE;IACrE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE;YAC/C,GAAG,EAAE,SAAS;YACd,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,gBAAgB;YACzB,+DAA+D;YAC/D,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE;SAChD,CAAC,CAAC;QACH,OAAO,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,yEAAyE;QACzE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;YACtD,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAC;YACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3D,OAAO,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAYD,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,oCAAoC;IACpC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,GAAyB,CAAC;QACtC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IACpD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,SAAiB,EACjB,UAAmC;IAEnC,MAAM,GAAG,GAAqB;QAC5B,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,EAAE;KACjB,CAAC;IAEF,iEAAiE;IACjE,kEAAkE;IAClE,0DAA0D;IAC1D,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,uDAAuD;QACvD,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,6CAA6C;QAC7C,uDAAuD;QACvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA8D,CAAC;YAE7F,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAEtE,gEAAgE;YAChE,IAAI,OAAO,GAAG,SAAS,CAAC;YACxB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChD,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpE,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC;YAED,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAEjE,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,OAAO;oBAChB,OAAO;oBACP,cAAc,EAAE,IAAI;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAWD,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,GAAG,GAAuB,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAE/B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAEtD,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,KAAK,GAAG,IAA+C,CAAC;QAE9D,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;YAAE,SAAS;QAElC,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,SAAS,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI;YACpD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;YACtC,CAAC,CAAC,CAAC,CAAC;QAEN,OAAO,CAAC,IAAI,CAAC;YACX,OAAO,EAAE,GAAG;YACZ,OAAO;YACP,MAAM;YACN,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,EAAkB,EAClB,SAAiB;IAEjB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE;YAC/C,GAAG,EAAE,SAAS;YACd,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,gBAAgB;YACzB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE;SAChD,CAAC,CAAC;QACH,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,iFAAiF;QACjF,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;YACtD,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAC;YACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3D,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAWD,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,wBAAwB,CAAC,aAAqB,EAAE,SAAiB;IACxE,6DAA6D;IAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,aAAa,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnE,2EAA2E;IAC3E,OAAO,aAAa,KAAK,cAAc,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,EAAkB;IAElB,MAAM,GAAG,GAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAE9D,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,6BAA6B;SACvC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,YAAY,QAAQ,aAAa;SAC3C,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IACD,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;IAEnB,yEAAyE;IACzE,0DAA0D;IAC1D,IAAI,EAAE,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC;IAE7B,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7E,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAA4B,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,gCAAgC;SAC1C,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,IAAI,GAGJ,EAAE,CAAC;IACP,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,YAAY,QAAQ,sBAAsB;SACpD,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,8BAA8B;IAC9B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,CAAU,EAAE,CAAC;QACzF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;gBAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,SAAS;QAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACzD,+BAA+B;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,IAAY,CAAC;QACjB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,OAAO,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI;eAChE,OAAQ,IAA8B,CAAC,OAAO,KAAK,QAAQ;YAC9D,CAAC,CAAE,IAA4B,CAAC,OAAO;YACvC,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACzE,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,wDAAwD;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,GAAG,IAAI,uDAAuD;aACxE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;gBAChD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,GAAG,IAAI,oBAAoB,KAAK,6BAA6B,SAAS,EAAE;iBAClF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,iBAAiB,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,GAAG,IAAI,mBAAmB,QAAQ,CAAC,IAAI,wBAAwB,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACnG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY,EACZ,OAIC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE3B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,gDAAgD,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,EAAE,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC;IACxD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,YAAY,IAAI,KAAK,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;IAErD,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,sDAAsD;IACtD,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QACxE,EAAE,KAAK,SAAS;YACd,CAAC,CAAC,OAAO,CAAC,OAAO,CAAgB,kBAAkB,EAAE,CAAC;YACtD,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC;QACnE,YAAY;YACV,CAAC,CAAC,OAAO,CAAC,OAAO,CAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;YACpF,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;QACvE,EAAE,KAAK,SAAS;YACd,CAAC,CAAC,OAAO,CAAC,OAAO,CAAqB,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC5E,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,gBAAgB,CAAC;QAC7D,WAAW,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,gBAAgB,CAAC;KAC5D,CAAC,CAAC;IAEH,kFAAkF;IAClF,IAAI,eAAe,GAAkB,kBAAkB,EAAE,CAAC;IAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,eAAe,GAAG,OAAO,CAAC,KAAsB,CAAC;QACnD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IAED,IAAI,QAAQ,GAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACjF,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACtC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,UAAU,CAAC,KAAyB,CAAC;QAClD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzH,CAAC;IAED,IAAI,SAAS,GAAuB,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACpC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,QAAQ,CAAC,KAA2B,CAAC;QACnD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC;IAED,IAAI,QAAQ,GAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,OAAO,CAAC,KAA0B,CAAC;QAChD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;IAED,OAAO;QACL,SAAS;QACT,eAAe,EAAE,EAAE;QACnB,eAAe;QACf,QAAQ;QACR,SAAS;QACT,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;QACjC,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/tools/django-settings.d.ts

@@ -0,0 +1,22 @@
+export interface SettingsFinding {
+    rule: string;
+    severity: "critical" | "high" | "medium" | "low";
+    message: string;
+    file: string;
+    line: number;
+    match: string;
+    fix: string;
+}
+export interface DjangoSettingsResult {
+    files_scanned: string[];
+    findings: SettingsFinding[];
+    total: number;
+    by_severity: Record<string, number>;
+}
+/**
+ * Analyze Django settings files for security and configuration anti-patterns.
+ */
+export declare function analyzeDjangoSettings(repo: string, options?: {
+    settings_file?: string;
+}): Promise<DjangoSettingsResult>;
+//# sourceMappingURL=django-settings.d.ts.map

package/dist/tools/django-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"django-settings.d.ts","sourceRoot":"","sources":["../../src/tools/django-settings.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAwOD;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACA,OAAO,CAAC,oBAAoB,CAAC,CAiE/B"}