codesift-mcp 0.9.5 → 0.10.0

package/dist/tools/secret-tools.js

@@ -7,308 +7,13 @@
  * - File-level caching keyed by mtime
  * - Inline allowlist via `// codesift:allow-secret`
  */
-import { readFile, stat } from "node:fs/promises";
-import { basename, join } from "node:path";
-import { scan } from "@sanity-labs/secret-scan";
+import { join } from "node:path";
 import picomatch from "picomatch";
 import { getCodeIndex } from "./index-tools.js";
+import { getSecretCache, isMissingFileError, scanFileForSecrets, severityAtLeast, shouldSkipFile, } from "./secret-scan-shared.js";
+export { SEVERITY_MAP, classifyContext, enrichWithSymbolContext, getSecretCache, getSeverity, isAllowlisted, isDocFile, maskSecret, offsetToLine, onFileChanged, onFileDeleted, resetSecretCache, scanFileForSecrets, } from "./secret-scan-shared.js";
 import { isTestFile } from "../utils/test-file.js";
 // ---------------------------------------------------------------------------
-// Constants
-// ---------------------------------------------------------------------------
-const MAX_FILE_SIZE = 500 * 1024; // 500KB
-const SKIP_PATTERNS = [
-    "package-lock.json",
-    "yarn.lock",
-    "pnpm-lock.yaml",
-    "*.min.js",
-    "*.min.css",
-];
-const SKIP_DIR_PATTERNS = ["audits/artifacts/"];
-const DOC_EXTENSIONS = new Set([".md", ".mdx", ".txt", ".rst"]);
-const PLACEHOLDER_NAMES = new Set([
-    "placeholder",
-    "example",
-    "sample",
-    "dummy",
-    "test",
-    "mock",
-    "fake",
-    "stub",
-    "default",
-    "template",
-]);
-/**
- * Maps rule IDs to severity. Library confidence is BASE.
- * CodeSift only DEMOTES (test/doc/placeholder → low). Never promotes.
- */
-export const SEVERITY_MAP = {
-    // Critical — cloud provider keys
-    aws: "critical",
-    "aws-access_keys": "critical",
-    "aws-secret": "critical",
-    gcp: "critical",
-    "gcp-api-key": "critical",
-    azure: "critical",
-    // High — API keys for paid services
-    openai: "high",
-    anthropic: "high",
-    stripe: "high",
-    "stripe-secret": "high",
-    twilio: "high",
-    sendgrid: "high",
-    github: "high",
-    "github-v2": "high",
-    "github-pat": "high",
-    gitlab: "high",
-    slack: "high",
-    "slack-token": "high",
-    // Medium — generic/entropy-based
-    "generic-api-key": "medium",
-    "private-key": "medium",
-    "database-connection-string": "medium",
-    jwt: "medium",
-};
-// ---------------------------------------------------------------------------
-// Cache
-// ---------------------------------------------------------------------------
-/** Cache: repo → filePath → { mtime_ms, findings } */
-const secretCache = new Map();
-export function getSecretCache() {
-    return secretCache;
-}
-export function resetSecretCache() {
-    secretCache.clear();
-}
-// ---------------------------------------------------------------------------
-// Pure helpers
-// ---------------------------------------------------------------------------
-/**
- * Mask a secret for safe display.
- * <8 chars → "****"
- * >=8 chars → first4 + "***" + last4
- */
-export function maskSecret(secret) {
-    if (secret.length < 8)
-        return "****";
-    return secret.slice(0, 4) + "***" + secret.slice(-4);
-}
-/** Check if file is a documentation file by extension. */
-export function isDocFile(filePath) {
-    const ext = filePath.slice(filePath.lastIndexOf("."));
-    return DOC_EXTENSIONS.has(ext);
-}
-/**
- * Classify the context of a file for confidence adjustment.
- * - test files → "test"
- * - doc files → "doc"
- * - .env, .yaml, .yml, .json config → "config"
- * - everything else → "production"
- */
-export function classifyContext(filePath) {
-    if (isTestFile(filePath))
-        return "test";
-    if (isDocFile(filePath))
-        return "doc";
-    const base = basename(filePath);
-    if (base.endsWith(".env") ||
-        base.startsWith(".env") ||
-        base.endsWith(".yaml") ||
-        base.endsWith(".yml") ||
-        base.endsWith(".toml") ||
-        base.endsWith(".ini") ||
-        base.endsWith(".cfg") ||
-        (base.endsWith(".json") && !base.endsWith("package.json"))) {
-        return "config";
-    }
-    return "production";
-}
-/**
- * Get severity for a rule ID from the severity map.
- * Unknown rules default to "medium".
- */
-export function getSeverity(rule) {
-    return SEVERITY_MAP[rule] ?? "medium";
-}
-function severityAtLeast(severity, minimum) {
-    const severityOrder = {
-        critical: 4,
-        high: 3,
-        medium: 2,
-        low: 1,
-    };
-    return severityOrder[severity] >= severityOrder[minimum];
-}
-function isMissingFileError(err) {
-    return (typeof err === "object"
-        && err !== null
-        && "code" in err
-        && err.code === "ENOENT");
-}
-/**
- * Check if a finding is allowlisted via inline comment.
- * Looks for `// codesift:allow-secret` on the same line or the line above.
- */
-export function isAllowlisted(lines, lineNumber) {
-    const marker = "codesift:allow-secret";
-    // lineNumber is 1-based
-    const lineIdx = lineNumber - 1;
-    if (lineIdx >= 0 && lineIdx < lines.length) {
-        if (lines[lineIdx].includes(marker))
-            return true;
-    }
-    // Check line above
-    const aboveIdx = lineIdx - 1;
-    if (aboveIdx >= 0 && aboveIdx < lines.length) {
-        if (lines[aboveIdx].includes(marker))
-            return true;
-    }
-    return false;
-}
-/**
- * Convert a byte offset in a string to a 1-based line number.
- */
-export function offsetToLine(content, offset) {
-    let line = 1;
-    for (let i = 0; i < offset && i < content.length; i++) {
-        if (content[i] === "\n")
-            line++;
-    }
-    return line;
-}
-// ---------------------------------------------------------------------------
-// File scanning
-// ---------------------------------------------------------------------------
-/**
- * Check if a file should be skipped (lock files, minified, etc.).
- */
-function shouldSkipFile(filePath) {
-    const base = basename(filePath);
-    // Skip lock files and minified assets
-    for (const pattern of SKIP_PATTERNS) {
-        if (pattern.includes("*")) {
-            if (picomatch.isMatch(base, pattern))
-                return true;
-        }
-        else {
-            if (base === pattern)
-                return true;
-        }
-    }
-    // Skip audit artifacts directory
-    for (const dir of SKIP_DIR_PATTERNS) {
-        if (filePath.includes(dir))
-            return true;
-    }
-    return false;
-}
-/**
- * Check if file content looks binary (null byte in first 512 bytes).
- */
-function isBinaryContent(buffer) {
-    const check = Math.min(buffer.length, 512);
-    for (let i = 0; i < check; i++) {
-        if (buffer[i] === 0)
-            return true;
-    }
-    return false;
-}
-/**
- * Enrich a finding with symbol context from the AST index.
- * - Finds the symbol that overlaps the finding's line
- * - Adds symbol_name and kind
- * - Demotes confidence if symbol name looks like a placeholder
- */
-export function enrichWithSymbolContext(finding, symbols) {
-    // Find the symbol that contains this line
-    const matchingSymbol = symbols.find((s) => s.file === finding.file &&
-        finding.line >= s.start_line &&
-        finding.line <= s.end_line);
-    if (!matchingSymbol)
-        return finding;
-    const enriched = { ...finding };
-    enriched.context = {
-        ...finding.context,
-        symbol_name: matchingSymbol.name,
-        symbol_kind: matchingSymbol.kind,
-    };
-    // Demote if symbol name looks like a placeholder
-    const lowerName = matchingSymbol.name.toLowerCase();
-    for (const placeholder of PLACEHOLDER_NAMES) {
-        if (lowerName.includes(placeholder)) {
-            enriched.confidence = "low";
-            break;
-        }
-    }
-    return enriched;
-}
-/**
- * Scan a single file for secrets.
- * Reads raw file, calls scan(), maps offsets to lines, checks allowlist,
- * enriches with AST context, masks, and caches.
- */
-export async function scanFileForSecrets(filePath, relPath, repo, symbols) {
-    // Check cache
-    const repoCache = secretCache.get(repo) ?? new Map();
-    if (!secretCache.has(repo))
-        secretCache.set(repo, repoCache);
-    const fileStat = await stat(filePath);
-    const cached = repoCache.get(relPath);
-    if (cached && cached.mtime_ms === fileStat.mtimeMs) {
-        return cached.findings;
-    }
-    // Skip check
-    if (shouldSkipFile(relPath)) {
-        repoCache.set(relPath, { mtime_ms: fileStat.mtimeMs, findings: [] });
-        return [];
-    }
-    // Read file
-    const buffer = await readFile(filePath);
-    // Skip binary files
-    if (isBinaryContent(buffer)) {
-        repoCache.set(relPath, { mtime_ms: fileStat.mtimeMs, findings: [] });
-        return [];
-    }
-    // Skip oversized files
-    if (buffer.length > MAX_FILE_SIZE) {
-        repoCache.set(relPath, { mtime_ms: fileStat.mtimeMs, findings: [] });
-        return [];
-    }
-    const content = buffer.toString("utf-8");
-    const lines = content.split("\n");
-    const contextType = classifyContext(relPath);
-    // Run secret-scan
-    const secrets = scan(content);
-    const findings = [];
-    for (const secret of secrets) {
-        const line = offsetToLine(content, secret.start);
-        // Check inline allowlist
-        if (isAllowlisted(lines, line))
-            continue;
-        let confidence = secret.confidence;
-        // Demote confidence for test/doc files
-        if (contextType === "test" || contextType === "doc") {
-            confidence = "low";
-        }
-        const finding = {
-            rule: secret.rule,
-            label: secret.label,
-            masked_secret: maskSecret(secret.text),
-            confidence,
-            severity: getSeverity(secret.rule),
-            file: relPath,
-            line,
-            context: { type: contextType },
-        };
-        // Enrich with symbol context
-        const enriched = enrichWithSymbolContext(finding, symbols);
-        findings.push(enriched);
-    }
-    // Cache results
-    repoCache.set(relPath, { mtime_ms: fileStat.mtimeMs, findings });
-    return findings;
-}
-// ---------------------------------------------------------------------------
 // Main handler
 // ---------------------------------------------------------------------------
 /**
@@ -372,7 +77,7 @@ export async function scanSecrets(repo, options) {
         allFindings = allFindings.slice(0, maxResults);
     }
     // Determine scan coverage
-    const repoCache = secretCache.get(repo);
+    const repoCache = getSecretCache().get(repo);
     let scanCoverage = "none";
     if (repoCache && repoCache.size > 0) {
         scanCoverage = repoCache.size >= index.files.length ? "full" : "partial";
@@ -390,21 +95,4 @@ export async function scanSecrets(repo, options) {
             : {}),
     };
 }
-// ---------------------------------------------------------------------------
-// Watcher hooks
-// ---------------------------------------------------------------------------
-/** Invalidate cache for a changed file. */
-export function onFileChanged(repo, filePath) {
-    const repoCache = secretCache.get(repo);
-    if (repoCache) {
-        repoCache.delete(filePath);
-    }
-}
-/** Remove cache entry for a deleted file. */
-export function onFileDeleted(repo, filePath) {
-    const repoCache = secretCache.get(repo);
-    if (repoCache) {
-        repoCache.delete(filePath);
-    }
-}
 //# sourceMappingURL=secret-tools.js.map

package/dist/tools/secret-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"secret-tools.js","sourceRoot":"","sources":["../../src/tools/secret-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAChD,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAwCnD,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ;AAE1C,MAAM,aAAa,GAAG;IACpB,mBAAmB;IACnB,WAAW;IACX,gBAAgB;IAChB,UAAU;IACV,WAAW;CACZ,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAEhD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,aAAa;IACb,SAAS;IACT,QAAQ;IACR,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAmC;IAC1D,iCAAiC;IACjC,GAAG,EAAE,UAAU;IACf,iBAAiB,EAAE,UAAU;IAC7B,YAAY,EAAE,UAAU;IACxB,GAAG,EAAE,UAAU;IACf,aAAa,EAAE,UAAU;IACzB,KAAK,EAAE,UAAU;IAEjB,oCAAoC;IACpC,MAAM,EAAE,MAAM;IACd,SAAS,EAAE,MAAM;IACjB,MAAM,EAAE,MAAM;IACd,eAAe,EAAE,MAAM;IACvB,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,MAAM;IAChB,MAAM,EAAE,MAAM;IACd,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,MAAM;IACpB,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,MAAM;IACb,aAAa,EAAE,MAAM;IAErB,iCAAiC;IACjC,iBAAiB,EAAE,QAAQ;IAC3B,aAAa,EAAE,QAAQ;IACvB,4BAA4B,EAAE,QAAQ;IACtC,GAAG,EAAE,QAAQ;CACd,CAAC;AAEF,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,sDAAsD;AACtD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAyC,CAAC;AAErE,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,SAAS,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,IACE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAC1D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CACtB,QAAwB,EACxB,OAAuB;IAEvB,MAAM,aAAa,GAAmC;QACpD,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;KACP,CAAC;IACF,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAY;IACtC,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;WACpB,GAAG,KAAK,IAAI;WACZ,MAAM,IAAI,GAAG;WACZ,GAA0B,CAAC,IAAI,KAAK,QAAQ,CACjD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAe,EACf,UAAkB;IAElB,MAAM,MAAM,GAAG,uBAAuB,CAAC;IACvC,wBAAwB;IACxB,MAAM,OAAO,GAAG,UAAU,GAAG,CAAC,CAAC;IAC/B,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IACpD,CAAC;IACD,mBAAmB;IACnB,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,CAAC;IAC7B,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,QAAQ,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,MAAc;IAC1D,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;GAEG;AACH,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEhC,sCAAsC;IACtC,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC;QACpC,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAsB,EACtB,OAAqB;IAErB,0CAA0C;IAC1C,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;QACvB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU;QAC5B,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAC7B,CAAC;IAEF,IAAI,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC;IAEpC,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAChC,QAAQ,CAAC,OAAO,GAAG;QACjB,GAAG,OAAO,CAAC,OAAO;QAClB,WAAW,EAAE,cAAc,CAAC,IAAI;QAChC,WAAW,EAAE,cAAc,CAAC,IAAI;KACjC,CAAC;IAEF,iDAAiD;IACjD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACpD,KAAK,MAAM,WAAW,IAAI,iBAAiB,EAAE,CAAC;QAC5C,IAAI,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC;YAC5B,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,OAAe,EACf,IAAY,EACZ,OAAqB;IAErB,cAAc;IACd,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAA4B,CAAC;IAC/E,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAE7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,aAAa;IACb,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,YAAY;IACZ,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAExC,oBAAoB;IACpB,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QAClC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE7C,kBAAkB;IAClB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAE9B,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAEjD,yBAAyB;QACzB,IAAI,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC;YAAE,SAAS;QAEzC,IAAI,UAAU,GAA8B,MAAM,CAAC,UAAU,CAAC;QAE9D,uCAAuC;QACvC,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YACpD,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;QAED,MAAM,OAAO,GAAkB;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;YACtC,UAAU;YACV,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;YAClC,IAAI,EAAE,OAAO;YACb,IAAI;YACJ,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;SAC/B,CAAC;QAEF,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3D,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED,gBAAgB;IAChB,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEjE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,OAMC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,gDAAgD,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC;IACpD,MAAM,WAAW,GAAG,OAAO,EAAE,YAAY,CAAC;IAC1C,MAAM,aAAa,GAAG,OAAO,EAAE,cAAc,IAAI,QAAQ,CAAC;IAC1D,MAAM,WAAW,GAAG,OAAO,EAAE,QAAQ,IAAI,KAAK,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,EAAE,WAAW,IAAI,GAAG,CAAC;IAE/C,MAAM,eAAe,GAA2B;QAC9C,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;KACP,CAAC;IACF,MAAM,kBAAkB,GAAG,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAE/D,IAAI,WAAW,GAAoB,EAAE,CAAC;IACtC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,qCAAqC;QACrC,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAErD,+BAA+B;QAC/B,IAAI,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAEpD,6BAA6B;QAC7B,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAExC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACvC,OAAO,EACP,IAAI,CAAC,IAAI,EACT,IAAI,EACJ,KAAK,CAAC,OAAO,CACd,CAAC;YACF,YAAY,EAAE,CAAC;YAEf,oCAAoC;YACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,kBAAkB;mBACvD,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC9C,CAAC;YAEF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,WAAW,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,WAAW,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QACpC,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,YAAY,GAAuC,MAAM,CAAC;IAC9D,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACpC,YAAY,GAAG,SAAS,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,WAAW;QACrB,aAAa,EAAE,YAAY;QAC3B,kBAAkB,EAAE,gBAAgB,CAAC,IAAI;QACzC,aAAa,EAAE,YAAY;QAC3B,GAAG,CAAC,WAAW,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,YAAY,EAAE,WAAW;gBACzB,eAAe,EAAE,IAAI;aACtB;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,2CAA2C;AAC3C,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,QAAgB;IAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,QAAgB;IAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC"}
+{"version":3,"file":"secret-tools.js","sourceRoot":"","sources":["../../src/tools/secret-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,cAAc,GACf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,YAAY,EACZ,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,WAAW,EACX,aAAa,EACb,SAAS,EACT,UAAU,EACV,YAAY,EACZ,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AAOjC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAYnD,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,OAMC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,gDAAgD,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC;IACpD,MAAM,WAAW,GAAG,OAAO,EAAE,YAAY,CAAC;IAC1C,MAAM,aAAa,GAAG,OAAO,EAAE,cAAc,IAAI,QAAQ,CAAC;IAC1D,MAAM,WAAW,GAAG,OAAO,EAAE,QAAQ,IAAI,KAAK,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,EAAE,WAAW,IAAI,GAAG,CAAC;IAE/C,MAAM,eAAe,GAA2B;QAC9C,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;KACP,CAAC;IACF,MAAM,kBAAkB,GAAG,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAE/D,IAAI,WAAW,GAAoB,EAAE,CAAC;IACtC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,qCAAqC;QACrC,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAErD,+BAA+B;QAC/B,IAAI,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAEpD,6BAA6B;QAC7B,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAExC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACvC,OAAO,EACP,IAAI,CAAC,IAAI,EACT,IAAI,EACJ,KAAK,CAAC,OAAO,CACd,CAAC;YACF,YAAY,EAAE,CAAC;YAEf,oCAAoC;YACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,kBAAkB;mBACvD,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC9C,CAAC;YAEF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,WAAW,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,WAAW,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QACpC,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,YAAY,GAAuC,MAAM,CAAC;IAC9D,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACpC,YAAY,GAAG,SAAS,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,WAAW;QACrB,aAAa,EAAE,YAAY;QAC3B,kBAAkB,EAAE,gBAAgB,CAAC,IAAI;QACzC,aAAa,EAAE,YAAY;QAC3B,GAAG,CAAC,WAAW,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,YAAY,EAAE,WAAW;gBACzB,eAAe,EAAE,IAAI;aACtB;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/tools/sql-audit-tools.d.ts

@@ -0,0 +1,42 @@
+/** Composite SQL audit capability. */
+export type SqlAuditCheck = "drift" | "orphan" | "lint" | "dml" | "complexity";
+export interface SqlAuditOptions {
+    /** Which checks to run (default: all) */
+    checks?: SqlAuditCheck[];
+    /** Scope to files matching pattern */
+    file_pattern?: string;
+    /** Optional: max_results for dml scan */
+    max_results?: number;
+}
+export interface SqlAuditGate {
+    check: SqlAuditCheck;
+    pass: boolean;
+    critical: boolean;
+    finding_count: number;
+    /** Per-check result shape differs; let consumers drill into .data if needed */
+    data: unknown;
+    /** One-line human-readable summary */
+    summary: string;
+}
+export interface SqlAuditResult {
+    gates: SqlAuditGate[];
+    summary: {
+        total_findings: number;
+        critical_findings: number;
+        gates_run: number;
+        gates_passed: number;
+        gates_failed: number;
+    };
+    warnings: string[];
+}
+/**
+ * Composite SQL audit — runs multiple diagnostic gates in a single call.
+ * Mirrors framework_audit / nest_audit / audit_scan pattern.
+ *
+ * Individual gate functions (analyzeSchemaDrift, findOrphanTables, lintSchema,
+ * scanDmlSafety, analyzeSchemaComplexity) remain exported for internal use
+ * but are NOT registered as separate MCP tools. sql_audit is the single
+ * discoverable entry point.
+ */
+export declare function sqlAudit(repo: string, options?: SqlAuditOptions): Promise<SqlAuditResult>;
+//# sourceMappingURL=sql-audit-tools.d.ts.map

package/dist/tools/sql-audit-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-audit-tools.d.ts","sourceRoot":"","sources":["../../src/tools/sql-audit-tools.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAQtC,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,YAAY,CAAC;AAE/E,MAAM,WAAW,eAAe;IAC9B,yCAAyC;IACzC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IACzB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,aAAa,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,IAAI,EAAE,OAAO,CAAC;IACd,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,OAAO,EAAE;QACP,cAAc,EAAE,MAAM,CAAC;QACvB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAID;;;;;;;;GAQG;AACH,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,cAAc,CAAC,CAkHzB"}

package/dist/tools/sql-audit-tools.js

@@ -0,0 +1,130 @@
+/** Composite SQL audit capability. */
+import { analyzeSchemaComplexity } from "./sql-complexity-tools.js";
+import { scanDmlSafety } from "./sql-dml-safety-tools.js";
+import { analyzeSchemaDrift } from "./sql-drift-tools.js";
+import { lintSchema } from "./sql-lint-schema-tools.js";
+import { findOrphanTables } from "./sql-orphan-table-tools.js";
+const DEFAULT_SQL_AUDIT_CHECKS = ["drift", "orphan", "lint", "dml", "complexity"];
+/**
+ * Composite SQL audit — runs multiple diagnostic gates in a single call.
+ * Mirrors framework_audit / nest_audit / audit_scan pattern.
+ *
+ * Individual gate functions (analyzeSchemaDrift, findOrphanTables, lintSchema,
+ * scanDmlSafety, analyzeSchemaComplexity) remain exported for internal use
+ * but are NOT registered as separate MCP tools. sql_audit is the single
+ * discoverable entry point.
+ */
+export async function sqlAudit(repo, options) {
+    const checks = options?.checks ?? DEFAULT_SQL_AUDIT_CHECKS;
+    const filePattern = options?.file_pattern;
+    const gates = [];
+    const warnings = [];
+    // Build option objects with only defined fields (for exactOptionalPropertyTypes compat)
+    const scopedOpts = {};
+    if (filePattern !== undefined)
+        scopedOpts.file_pattern = filePattern;
+    // Gate 1: schema_drift (ORM ↔ SQL drift)
+    if (checks.includes("drift")) {
+        const drift = await analyzeSchemaDrift(repo, scopedOpts);
+        const criticalCount = drift.summary.type_mismatches;
+        gates.push({
+            check: "drift",
+            pass: drift.summary.total === 0,
+            critical: criticalCount > 0,
+            finding_count: drift.summary.total,
+            data: drift,
+            summary: drift.summary.total === 0
+                ? "No schema drift detected"
+                : `${drift.summary.total} drift${drift.summary.total === 1 ? "" : "s"}: ${drift.summary.extra_in_orm} extra in ORM, ${drift.summary.extra_in_sql} extra in SQL, ${drift.summary.type_mismatches} type mismatches`,
+        });
+        for (const w of drift.warnings)
+            warnings.push(`drift: ${w}`);
+    }
+    // Gate 2: orphan_tables
+    if (checks.includes("orphan")) {
+        const orphan = await findOrphanTables(repo, scopedOpts);
+        gates.push({
+            check: "orphan",
+            pass: orphan.orphan_count === 0,
+            critical: false,
+            finding_count: orphan.orphan_count,
+            data: orphan,
+            summary: orphan.orphan_count === 0
+                ? `No orphan tables (${orphan.total_tables} tables scanned)`
+                : `${orphan.orphan_count}/${orphan.total_tables} tables with zero references`,
+        });
+    }
+    // Gate 3: lint_schema
+    if (checks.includes("lint")) {
+        const lint = await lintSchema(repo, scopedOpts);
+        gates.push({
+            check: "lint",
+            pass: lint.summary.total === 0,
+            critical: false,
+            finding_count: lint.summary.total,
+            data: lint,
+            summary: lint.summary.total === 0
+                ? "No schema lint violations"
+                : `${lint.summary.total} lint violation${lint.summary.total === 1 ? "" : "s"}: ${Object.entries(lint.summary.by_rule).map(([r, n]) => `${r}=${n}`).join(", ")}`,
+        });
+        for (const w of lint.warnings)
+            warnings.push(`lint: ${w}`);
+    }
+    // Gate 4: dml_safety
+    if (checks.includes("dml")) {
+        const dmlOpts = {};
+        if (filePattern !== undefined)
+            dmlOpts.file_pattern = filePattern;
+        if (options?.max_results !== undefined)
+            dmlOpts.max_results = options.max_results;
+        const dml = await scanDmlSafety(repo, dmlOpts);
+        const highSeverity = dml.findings.filter((f) => f.severity === "high").length;
+        gates.push({
+            check: "dml",
+            pass: highSeverity === 0,
+            critical: highSeverity > 0,
+            finding_count: dml.summary.total,
+            data: dml,
+            summary: dml.summary.total === 0
+                ? `No DML safety issues (${dml.summary.files_scanned} files scanned)`
+                : `${dml.summary.total} DML issue${dml.summary.total === 1 ? "" : "s"} (${highSeverity} high risk): ${Object.entries(dml.summary.by_rule).map(([r, n]) => `${r}=${n}`).join(", ")}`,
+        });
+    }
+    // Gate 5: schema_complexity (god tables)
+    if (checks.includes("complexity")) {
+        const complexityOpts = { top_n: 10 };
+        if (filePattern !== undefined)
+            complexityOpts.file_pattern = filePattern;
+        const complexity = await analyzeSchemaComplexity(repo, complexityOpts);
+        // Threshold: score >= 25 = "needs refactor" (20 cols + 1 FK + 1 idx → 24.5)
+        const godTables = complexity.tables.filter((t) => t.score >= 25);
+        gates.push({
+            check: "complexity",
+            pass: godTables.length === 0,
+            critical: false,
+            finding_count: godTables.length,
+            data: complexity,
+            summary: godTables.length === 0
+                ? `No god tables detected (${complexity.tables.length} tables analyzed)`
+                : `${godTables.length} god table${godTables.length === 1 ? "" : "s"}: ${godTables.slice(0, 3).map((t) => `${t.name}(${t.score.toFixed(0)})`).join(", ")}${godTables.length > 3 ? "..." : ""}`,
+        });
+    }
+    const total_findings = gates.reduce((sum, g) => sum + g.finding_count, 0);
+    const critical_findings = gates
+        .filter((g) => g.critical)
+        .reduce((sum, g) => sum + g.finding_count, 0);
+    const gates_passed = gates.filter((g) => g.pass).length;
+    const gates_failed = gates.filter((g) => !g.pass).length;
+    return {
+        gates,
+        summary: {
+            total_findings,
+            critical_findings,
+            gates_run: gates.length,
+            gates_passed,
+            gates_failed,
+        },
+        warnings,
+    };
+}
+//# sourceMappingURL=sql-audit-tools.js.map

package/dist/tools/sql-audit-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-audit-tools.js","sourceRoot":"","sources":["../../src/tools/sql-audit-tools.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAoC/D,MAAM,wBAAwB,GAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AAEnG;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,OAAyB;IAEzB,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,wBAAwB,CAAC;IAC3D,MAAM,WAAW,GAAG,OAAO,EAAE,YAAY,CAAC;IAC1C,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,wFAAwF;IACxF,MAAM,UAAU,GAA8B,EAAE,CAAC;IACjD,IAAI,WAAW,KAAK,SAAS;QAAE,UAAU,CAAC,YAAY,GAAG,WAAW,CAAC;IAErE,yCAAyC;IACzC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC;YAC/B,QAAQ,EAAE,aAAa,GAAG,CAAC;YAC3B,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;YAClC,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC;gBAChC,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,CAAC,YAAY,kBAAkB,KAAK,CAAC,OAAO,CAAC,YAAY,kBAAkB,KAAK,CAAC,OAAO,CAAC,eAAe,kBAAkB;SACpN,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,wBAAwB;IACxB,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC;YAC/B,QAAQ,EAAE,KAAK;YACf,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,MAAM,CAAC,YAAY,KAAK,CAAC;gBAChC,CAAC,CAAC,qBAAqB,MAAM,CAAC,YAAY,kBAAkB;gBAC5D,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,8BAA8B;SAChF,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC;YAC9B,QAAQ,EAAE,KAAK;YACf,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACjC,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC;gBAC/B,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,kBAAkB,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAClK,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAoD,EAAE,CAAC;QACpE,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC;QAClE,IAAI,OAAO,EAAE,WAAW,KAAK,SAAS;YAAE,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAClF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QAC9E,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY,KAAK,CAAC;YACxB,QAAQ,EAAE,YAAY,GAAG,CAAC;YAC1B,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK;YAChC,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC;gBAC9B,CAAC,CAAC,yBAAyB,GAAG,CAAC,OAAO,CAAC,aAAa,iBAAiB;gBACrE,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,aAAa,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,gBAAgB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACtL,CAAC,CAAC;IACL,CAAC;IAED,yCAAyC;IACzC,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,MAAM,cAAc,GAA8C,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAChF,IAAI,WAAW,KAAK,SAAS;YAAE,cAAc,CAAC,YAAY,GAAG,WAAW,CAAC;QACzE,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACvE,4EAA4E;QAC5E,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC;YAC5B,QAAQ,EAAE,KAAK;YACf,aAAa,EAAE,SAAS,CAAC,MAAM;YAC/B,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC;gBAC7B,CAAC,CAAC,2BAA2B,UAAU,CAAC,MAAM,CAAC,MAAM,mBAAmB;gBACxE,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,aAAa,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;SAChM,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,iBAAiB,GAAG,KAAK;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAEzD,OAAO;QACL,KAAK;QACL,OAAO,EAAE;YACP,cAAc;YACd,iBAAiB;YACjB,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,YAAY;YACZ,YAAY;SACb;QACD,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/tools/sql-column-tools.d.ts

@@ -0,0 +1,28 @@
+/** SQL column search capability. */
+export interface SearchColumnsOptions {
+    /** Substring to match against column name (case-insensitive). Empty string = no name filter. */
+    query: string;
+    /** Optional: filter by normalized column type (int, string, float, bool, datetime, json, uuid, bytes) */
+    type?: string;
+    /** Optional: substring to match against table name */
+    table?: string;
+    /** Optional: file_pattern to scope */
+    file_pattern?: string;
+    /** Maximum columns to return (default: 100) */
+    max_results?: number;
+}
+export interface ColumnSearchHit {
+    name: string;
+    type: string;
+    normalized_type: string;
+    table: string;
+    file: string;
+    line: number;
+}
+export interface SearchColumnsResult {
+    columns: ColumnSearchHit[];
+    total: number;
+    truncated: boolean;
+}
+export declare function searchColumns(repo: string, options: SearchColumnsOptions): Promise<SearchColumnsResult>;
+//# sourceMappingURL=sql-column-tools.d.ts.map

package/dist/tools/sql-column-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-column-tools.d.ts","sourceRoot":"","sources":["../../src/tools/sql-column-tools.ts"],"names":[],"mappings":"AAAA,oCAAoC;AAKpC,MAAM,WAAW,oBAAoB;IACnC,gGAAgG;IAChG,KAAK,EAAE,MAAM,CAAC;IACd,yGAAyG;IACzG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAoD9B"}

package/dist/tools/sql-column-tools.js

@@ -0,0 +1,58 @@
+/** SQL column search capability. */
+import { getCodeIndex } from "./index-tools.js";
+import { normalizeSqlType } from "./sql-shared-tools.js";
+export async function searchColumns(repo, options) {
+    const index = await getCodeIndex(repo);
+    if (!index) {
+        throw new Error(`Repository "${repo}" not found. Run index_folder first.`);
+    }
+    const queryLower = (options.query ?? "").toLowerCase();
+    const typeFilter = options.type?.toLowerCase();
+    const tableFilter = options.table?.toLowerCase();
+    const filePattern = options.file_pattern;
+    const maxResults = options.max_results ?? 100;
+    // Build table-id → table-name lookup (only SQL tables, not Prisma models)
+    const tableIdToName = new Map();
+    for (const sym of index.symbols) {
+        if (sym.kind !== "table")
+            continue;
+        if (filePattern && !sym.file.includes(filePattern))
+            continue;
+        tableIdToName.set(sym.id, { name: sym.name, file: sym.file });
+    }
+    // Collect field symbols whose parent is a SQL table
+    const allHits = [];
+    for (const sym of index.symbols) {
+        if (sym.kind !== "field")
+            continue;
+        if (!sym.parent)
+            continue;
+        const parent = tableIdToName.get(sym.parent);
+        if (!parent)
+            continue;
+        const name = sym.name;
+        const type = sym.signature ?? "unknown";
+        const normalized = normalizeSqlType(type);
+        // Apply filters
+        if (queryLower && !name.toLowerCase().includes(queryLower))
+            continue;
+        if (typeFilter && normalized !== typeFilter)
+            continue;
+        if (tableFilter && !parent.name.toLowerCase().includes(tableFilter))
+            continue;
+        allHits.push({
+            name,
+            type,
+            normalized_type: normalized,
+            table: parent.name,
+            file: parent.file,
+            line: sym.start_line,
+        });
+    }
+    const total = allHits.length;
+    const truncated = total > maxResults;
+    const columns = truncated ? allHits.slice(0, maxResults) : allHits;
+    return { columns, total, truncated };
+}
+// ── analyze_schema_complexity ──────────────────────────────
+//# sourceMappingURL=sql-column-tools.js.map

package/dist/tools/sql-column-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-column-tools.js","sourceRoot":"","sources":["../../src/tools/sql-column-tools.ts"],"names":[],"mappings":"AAAA,oCAAoC;AAEpC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AA8BzD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,OAA6B;IAE7B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,sCAAsC,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC;IAE9C,0EAA0E;IAC1E,MAAM,aAAa,GAAG,IAAI,GAAG,EAA0C,CAAC;IACxE,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACnC,IAAI,WAAW,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAS;QAC7D,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,oDAAoD;IACpD,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QACnC,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,SAAS;QAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC;QACxC,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAE1C,gBAAgB;QAChB,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,SAAS;QACrE,IAAI,UAAU,IAAI,UAAU,KAAK,UAAU;YAAE,SAAS;QACtD,IAAI,WAAW,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAS;QAE9E,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,IAAI;YACJ,eAAe,EAAE,UAAU;YAC3B,KAAK,EAAE,MAAM,CAAC,IAAI;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,GAAG,CAAC,UAAU;SACrB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,KAAK,GAAG,UAAU,CAAC;IACrC,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC;AAED,8DAA8D"}