driftdetect-core 0.4.1 → 0.4.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (237) hide show
  1. package/dist/boundaries/boundary-scanner.d.ts +76 -0
  2. package/dist/boundaries/boundary-scanner.d.ts.map +1 -0
  3. package/dist/boundaries/boundary-scanner.js +801 -0
  4. package/dist/boundaries/boundary-scanner.js.map +1 -0
  5. package/dist/boundaries/data-access-learner.d.ts +126 -0
  6. package/dist/boundaries/data-access-learner.d.ts.map +1 -0
  7. package/dist/boundaries/data-access-learner.js +486 -0
  8. package/dist/boundaries/data-access-learner.js.map +1 -0
  9. package/dist/boundaries/index.d.ts +6 -0
  10. package/dist/boundaries/index.d.ts.map +1 -1
  11. package/dist/boundaries/index.js +6 -0
  12. package/dist/boundaries/index.js.map +1 -1
  13. package/dist/boundaries/security-prioritizer.d.ts +118 -0
  14. package/dist/boundaries/security-prioritizer.d.ts.map +1 -0
  15. package/dist/boundaries/security-prioritizer.js +316 -0
  16. package/dist/boundaries/security-prioritizer.js.map +1 -0
  17. package/dist/call-graph/analysis/coverage-analyzer.d.ts +201 -0
  18. package/dist/call-graph/analysis/coverage-analyzer.d.ts.map +1 -0
  19. package/dist/call-graph/analysis/coverage-analyzer.js +553 -0
  20. package/dist/call-graph/analysis/coverage-analyzer.js.map +1 -0
  21. package/dist/call-graph/analysis/dead-code-detector.d.ts +145 -0
  22. package/dist/call-graph/analysis/dead-code-detector.d.ts.map +1 -0
  23. package/dist/call-graph/analysis/dead-code-detector.js +391 -0
  24. package/dist/call-graph/analysis/dead-code-detector.js.map +1 -0
  25. package/dist/call-graph/analysis/graph-builder.d.ts +142 -0
  26. package/dist/call-graph/analysis/graph-builder.d.ts.map +1 -0
  27. package/dist/call-graph/analysis/graph-builder.js +624 -0
  28. package/dist/call-graph/analysis/graph-builder.js.map +1 -0
  29. package/dist/call-graph/analysis/impact-analyzer.d.ts +150 -0
  30. package/dist/call-graph/analysis/impact-analyzer.d.ts.map +1 -0
  31. package/dist/call-graph/analysis/impact-analyzer.js +329 -0
  32. package/dist/call-graph/analysis/impact-analyzer.js.map +1 -0
  33. package/dist/call-graph/analysis/index.d.ts +11 -0
  34. package/dist/call-graph/analysis/index.d.ts.map +1 -0
  35. package/dist/call-graph/analysis/index.js +9 -0
  36. package/dist/call-graph/analysis/index.js.map +1 -0
  37. package/dist/call-graph/analysis/path-finder.d.ts +117 -0
  38. package/dist/call-graph/analysis/path-finder.d.ts.map +1 -0
  39. package/dist/call-graph/analysis/path-finder.js +360 -0
  40. package/dist/call-graph/analysis/path-finder.js.map +1 -0
  41. package/dist/call-graph/analysis/reachability.d.ts +56 -0
  42. package/dist/call-graph/analysis/reachability.d.ts.map +1 -0
  43. package/dist/call-graph/analysis/reachability.js +357 -0
  44. package/dist/call-graph/analysis/reachability.js.map +1 -0
  45. package/dist/call-graph/demo.d.ts +11 -0
  46. package/dist/call-graph/demo.d.ts.map +1 -0
  47. package/dist/call-graph/demo.js +339 -0
  48. package/dist/call-graph/demo.js.map +1 -0
  49. package/dist/call-graph/enrichment/enrichment-engine.d.ts +126 -0
  50. package/dist/call-graph/enrichment/enrichment-engine.d.ts.map +1 -0
  51. package/dist/call-graph/enrichment/enrichment-engine.js +760 -0
  52. package/dist/call-graph/enrichment/enrichment-engine.js.map +1 -0
  53. package/dist/call-graph/enrichment/impact-scorer.d.ts +59 -0
  54. package/dist/call-graph/enrichment/impact-scorer.d.ts.map +1 -0
  55. package/dist/call-graph/enrichment/impact-scorer.js +328 -0
  56. package/dist/call-graph/enrichment/impact-scorer.js.map +1 -0
  57. package/dist/call-graph/enrichment/index.d.ts +12 -0
  58. package/dist/call-graph/enrichment/index.d.ts.map +1 -0
  59. package/dist/call-graph/enrichment/index.js +15 -0
  60. package/dist/call-graph/enrichment/index.js.map +1 -0
  61. package/dist/call-graph/enrichment/remediation-generator.d.ts +41 -0
  62. package/dist/call-graph/enrichment/remediation-generator.d.ts.map +1 -0
  63. package/dist/call-graph/enrichment/remediation-generator.js +609 -0
  64. package/dist/call-graph/enrichment/remediation-generator.js.map +1 -0
  65. package/dist/call-graph/enrichment/sensitivity-classifier.d.ts +71 -0
  66. package/dist/call-graph/enrichment/sensitivity-classifier.d.ts.map +1 -0
  67. package/dist/call-graph/enrichment/sensitivity-classifier.js +454 -0
  68. package/dist/call-graph/enrichment/sensitivity-classifier.js.map +1 -0
  69. package/dist/call-graph/enrichment/types.d.ts +402 -0
  70. package/dist/call-graph/enrichment/types.d.ts.map +1 -0
  71. package/dist/call-graph/enrichment/types.js +9 -0
  72. package/dist/call-graph/enrichment/types.js.map +1 -0
  73. package/dist/call-graph/extractors/base-extractor.d.ts +112 -0
  74. package/dist/call-graph/extractors/base-extractor.d.ts.map +1 -0
  75. package/dist/call-graph/extractors/base-extractor.js +140 -0
  76. package/dist/call-graph/extractors/base-extractor.js.map +1 -0
  77. package/dist/call-graph/extractors/csharp-data-access-extractor.d.ts +76 -0
  78. package/dist/call-graph/extractors/csharp-data-access-extractor.d.ts.map +1 -0
  79. package/dist/call-graph/extractors/csharp-data-access-extractor.js +387 -0
  80. package/dist/call-graph/extractors/csharp-data-access-extractor.js.map +1 -0
  81. package/dist/call-graph/extractors/csharp-extractor.d.ts +87 -0
  82. package/dist/call-graph/extractors/csharp-extractor.d.ts.map +1 -0
  83. package/dist/call-graph/extractors/csharp-extractor.js +470 -0
  84. package/dist/call-graph/extractors/csharp-extractor.js.map +1 -0
  85. package/dist/call-graph/extractors/data-access-extractor.d.ts +76 -0
  86. package/dist/call-graph/extractors/data-access-extractor.d.ts.map +1 -0
  87. package/dist/call-graph/extractors/data-access-extractor.js +234 -0
  88. package/dist/call-graph/extractors/data-access-extractor.js.map +1 -0
  89. package/dist/call-graph/extractors/index.d.ts +26 -0
  90. package/dist/call-graph/extractors/index.d.ts.map +1 -0
  91. package/dist/call-graph/extractors/index.js +36 -0
  92. package/dist/call-graph/extractors/index.js.map +1 -0
  93. package/dist/call-graph/extractors/java-data-access-extractor.d.ts +101 -0
  94. package/dist/call-graph/extractors/java-data-access-extractor.d.ts.map +1 -0
  95. package/dist/call-graph/extractors/java-data-access-extractor.js +611 -0
  96. package/dist/call-graph/extractors/java-data-access-extractor.js.map +1 -0
  97. package/dist/call-graph/extractors/java-extractor.d.ts +87 -0
  98. package/dist/call-graph/extractors/java-extractor.d.ts.map +1 -0
  99. package/dist/call-graph/extractors/java-extractor.js +510 -0
  100. package/dist/call-graph/extractors/java-extractor.js.map +1 -0
  101. package/dist/call-graph/extractors/php-data-access-extractor.d.ts +93 -0
  102. package/dist/call-graph/extractors/php-data-access-extractor.d.ts.map +1 -0
  103. package/dist/call-graph/extractors/php-data-access-extractor.js +589 -0
  104. package/dist/call-graph/extractors/php-data-access-extractor.js.map +1 -0
  105. package/dist/call-graph/extractors/php-extractor.d.ts +104 -0
  106. package/dist/call-graph/extractors/php-extractor.d.ts.map +1 -0
  107. package/dist/call-graph/extractors/php-extractor.js +619 -0
  108. package/dist/call-graph/extractors/php-extractor.js.map +1 -0
  109. package/dist/call-graph/extractors/python-data-access-extractor.d.ts +90 -0
  110. package/dist/call-graph/extractors/python-data-access-extractor.d.ts.map +1 -0
  111. package/dist/call-graph/extractors/python-data-access-extractor.js +537 -0
  112. package/dist/call-graph/extractors/python-data-access-extractor.js.map +1 -0
  113. package/dist/call-graph/extractors/python-extractor.d.ts +98 -0
  114. package/dist/call-graph/extractors/python-extractor.d.ts.map +1 -0
  115. package/dist/call-graph/extractors/python-extractor.js +681 -0
  116. package/dist/call-graph/extractors/python-extractor.js.map +1 -0
  117. package/dist/call-graph/extractors/semantic-data-access-scanner.d.ts +91 -0
  118. package/dist/call-graph/extractors/semantic-data-access-scanner.d.ts.map +1 -0
  119. package/dist/call-graph/extractors/semantic-data-access-scanner.js +498 -0
  120. package/dist/call-graph/extractors/semantic-data-access-scanner.js.map +1 -0
  121. package/dist/call-graph/extractors/typescript-data-access-extractor.d.ts +122 -0
  122. package/dist/call-graph/extractors/typescript-data-access-extractor.d.ts.map +1 -0
  123. package/dist/call-graph/extractors/typescript-data-access-extractor.js +788 -0
  124. package/dist/call-graph/extractors/typescript-data-access-extractor.js.map +1 -0
  125. package/dist/call-graph/extractors/typescript-extractor.d.ts +145 -0
  126. package/dist/call-graph/extractors/typescript-extractor.d.ts.map +1 -0
  127. package/dist/call-graph/extractors/typescript-extractor.js +904 -0
  128. package/dist/call-graph/extractors/typescript-extractor.js.map +1 -0
  129. package/dist/call-graph/index.d.ts +127 -0
  130. package/dist/call-graph/index.d.ts.map +1 -0
  131. package/dist/call-graph/index.js +247 -0
  132. package/dist/call-graph/index.js.map +1 -0
  133. package/dist/call-graph/store/call-graph-store.d.ts +70 -0
  134. package/dist/call-graph/store/call-graph-store.d.ts.map +1 -0
  135. package/dist/call-graph/store/call-graph-store.js +210 -0
  136. package/dist/call-graph/store/call-graph-store.js.map +1 -0
  137. package/dist/call-graph/store/index.d.ts +7 -0
  138. package/dist/call-graph/store/index.d.ts.map +1 -0
  139. package/dist/call-graph/store/index.js +7 -0
  140. package/dist/call-graph/store/index.js.map +1 -0
  141. package/dist/call-graph/types.d.ts +376 -0
  142. package/dist/call-graph/types.d.ts.map +1 -0
  143. package/dist/call-graph/types.js +8 -0
  144. package/dist/call-graph/types.js.map +1 -0
  145. package/dist/index.d.ts +8 -0
  146. package/dist/index.d.ts.map +1 -1
  147. package/dist/index.js +12 -0
  148. package/dist/index.js.map +1 -1
  149. package/dist/lake/callgraph-shard-store.d.ts +168 -0
  150. package/dist/lake/callgraph-shard-store.d.ts.map +1 -0
  151. package/dist/lake/callgraph-shard-store.js +466 -0
  152. package/dist/lake/callgraph-shard-store.js.map +1 -0
  153. package/dist/lake/examples-store.d.ts +127 -0
  154. package/dist/lake/examples-store.d.ts.map +1 -0
  155. package/dist/lake/examples-store.js +389 -0
  156. package/dist/lake/examples-store.js.map +1 -0
  157. package/dist/lake/index-store.d.ts +82 -0
  158. package/dist/lake/index-store.d.ts.map +1 -0
  159. package/dist/lake/index-store.js +359 -0
  160. package/dist/lake/index-store.js.map +1 -0
  161. package/dist/lake/index.d.ts +93 -0
  162. package/dist/lake/index.d.ts.map +1 -0
  163. package/dist/lake/index.js +138 -0
  164. package/dist/lake/index.js.map +1 -0
  165. package/dist/lake/lake.bak/index-store.d.ts +82 -0
  166. package/dist/lake/lake.bak/index-store.d.ts.map +1 -0
  167. package/dist/lake/lake.bak/index-store.js +357 -0
  168. package/dist/lake/lake.bak/index-store.js.map +1 -0
  169. package/dist/lake/lake.bak/index.d.ts +81 -0
  170. package/dist/lake/lake.bak/index.d.ts.map +1 -0
  171. package/dist/lake/lake.bak/index.js +114 -0
  172. package/dist/lake/lake.bak/index.js.map +1 -0
  173. package/dist/lake/lake.bak/manifest-store.d.ts +51 -0
  174. package/dist/lake/lake.bak/manifest-store.d.ts.map +1 -0
  175. package/dist/lake/lake.bak/manifest-store.js +347 -0
  176. package/dist/lake/lake.bak/manifest-store.js.map +1 -0
  177. package/dist/lake/lake.bak/query-engine.d.ts +112 -0
  178. package/dist/lake/lake.bak/query-engine.d.ts.map +1 -0
  179. package/dist/lake/lake.bak/query-engine.js +370 -0
  180. package/dist/lake/lake.bak/query-engine.js.map +1 -0
  181. package/dist/lake/lake.bak/types.d.ts +428 -0
  182. package/dist/lake/lake.bak/types.d.ts.map +1 -0
  183. package/dist/lake/lake.bak/types.js +46 -0
  184. package/dist/lake/lake.bak/types.js.map +1 -0
  185. package/dist/lake/lake.bak/view-materializer.d.ts +70 -0
  186. package/dist/lake/lake.bak/view-materializer.d.ts.map +1 -0
  187. package/dist/lake/lake.bak/view-materializer.js +314 -0
  188. package/dist/lake/lake.bak/view-materializer.js.map +1 -0
  189. package/dist/lake/lake.bak/view-store.d.ts +57 -0
  190. package/dist/lake/lake.bak/view-store.d.ts.map +1 -0
  191. package/dist/lake/lake.bak/view-store.js +348 -0
  192. package/dist/lake/lake.bak/view-store.js.map +1 -0
  193. package/dist/lake/manifest-store.d.ts +51 -0
  194. package/dist/lake/manifest-store.d.ts.map +1 -0
  195. package/dist/lake/manifest-store.js +348 -0
  196. package/dist/lake/manifest-store.js.map +1 -0
  197. package/dist/lake/pattern-shard-store.d.ts +87 -0
  198. package/dist/lake/pattern-shard-store.d.ts.map +1 -0
  199. package/dist/lake/pattern-shard-store.js +347 -0
  200. package/dist/lake/pattern-shard-store.js.map +1 -0
  201. package/dist/lake/query-engine.d.ts +124 -0
  202. package/dist/lake/query-engine.d.ts.map +1 -0
  203. package/dist/lake/query-engine.js +453 -0
  204. package/dist/lake/query-engine.js.map +1 -0
  205. package/dist/lake/security-shard-store.d.ts +156 -0
  206. package/dist/lake/security-shard-store.d.ts.map +1 -0
  207. package/dist/lake/security-shard-store.js +498 -0
  208. package/dist/lake/security-shard-store.js.map +1 -0
  209. package/dist/lake/types.d.ts +428 -0
  210. package/dist/lake/types.d.ts.map +1 -0
  211. package/dist/lake/types.js +46 -0
  212. package/dist/lake/types.js.map +1 -0
  213. package/dist/lake/view-materializer.d.ts +70 -0
  214. package/dist/lake/view-materializer.d.ts.map +1 -0
  215. package/dist/lake/view-materializer.js +314 -0
  216. package/dist/lake/view-materializer.js.map +1 -0
  217. package/dist/lake/view-store.d.ts +57 -0
  218. package/dist/lake/view-store.d.ts.map +1 -0
  219. package/dist/lake/view-store.js +348 -0
  220. package/dist/lake/view-store.js.map +1 -0
  221. package/dist/parsers/tree-sitter/index.d.ts +1 -0
  222. package/dist/parsers/tree-sitter/index.d.ts.map +1 -1
  223. package/dist/parsers/tree-sitter/index.js +4 -0
  224. package/dist/parsers/tree-sitter/index.js.map +1 -1
  225. package/dist/parsers/tree-sitter/typescript-loader.d.ts +58 -0
  226. package/dist/parsers/tree-sitter/typescript-loader.d.ts.map +1 -0
  227. package/dist/parsers/tree-sitter/typescript-loader.js +250 -0
  228. package/dist/parsers/tree-sitter/typescript-loader.js.map +1 -0
  229. package/dist/store/project-config.d.ts +154 -0
  230. package/dist/store/project-config.d.ts.map +1 -0
  231. package/dist/store/project-config.js +235 -0
  232. package/dist/store/project-config.js.map +1 -0
  233. package/dist/store/project-registry.d.ts +241 -0
  234. package/dist/store/project-registry.d.ts.map +1 -0
  235. package/dist/store/project-registry.js +557 -0
  236. package/dist/store/project-registry.js.map +1 -0
  237. package/package.json +4 -2
@@ -0,0 +1 @@
1
+ {"version":3,"file":"enrichment-engine.js","sourceRoot":"","sources":["../../../src/call-graph/enrichment/enrichment-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AACjG,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAuB9F,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC;;GAEG;AACH,MAAM,sBAAsB,GAAG;IAC7B,kBAAkB;IAClB,qDAAqD;IACrD,wCAAwC;IACxC,2CAA2C;IAC3C,SAAS;IACT,+CAA+C;IAC/C,gBAAgB;IAChB,yCAAyC;IACzC,sCAAsC;IACtC,SAAS;IACT,yEAAyE;IACzE,UAAU;IACV,qDAAqD;IACrD,UAAU;IACV,0CAA0C;CAC3C,CAAC;AAEF,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACV,KAAK,CAAY;IACjB,YAAY,CAAqB;IACjC,UAAU,CAAwB;IAClC,MAAM,CAAe;IACrB,UAAU,CAAuB;IACjC,gBAAgB,CAAiC;IACjD,eAAe,CAA8B;IAE9D,YACE,KAAgB,EAChB,gBAAoC,EACpC,eAAkC;QAElC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,YAAY,GAAG,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,GAAG,2BAA2B,EAAE,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAE/C,mCAAmC;QACnC,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,EAAE,CAAC;QAClC,IAAI,gBAAgB,EAAE,CAAC;YACrB,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC9D,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACtB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,EAAE,CAAC;QACjC,IAAI,eAAe,EAAE,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;gBACxE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAwB,EACxB,UAA6B,EAAE;QAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC;YACH,sBAAsB;YACtB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAEtE,uBAAuB;YACvB,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe;gBACzC,CAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE;gBAC/B,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAE/C,2BAA2B;YAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAC5C,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,QAAQ,EAChB,UAAU,EACV,WAAW,EACX,OAAO,CAAC,IAAI,CACb,CAAC;YAEF,gCAAgC;YAChC,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe;gBACzC,CAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE;gBAC/B,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAElD,4BAA4B;YAC5B,MAAM,UAAU,GAAuB;gBACrC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,aAAa,EAAE,cAAc;gBAC7B,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO;gBACpC,UAAU,EAAE,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,WAAW,CAAC;gBAC7D,QAAQ;gBACR,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACzC,CAAC;YAEF,OAAO;gBACL,OAAO;gBACP,UAAU;gBACV,WAAW;gBACX,QAAQ;gBACR,WAAW;gBACX,UAAU;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uCAAuC;YACvC,QAAQ,CAAC,IAAI,CAAC,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YAE/F,OAAO;gBACL,OAAO;gBACP,UAAU,EAAE,IAAI,CAAC,qBAAqB,EAAE;gBACxC,WAAW,EAAE,IAAI,CAAC,sBAAsB,EAAE;gBAC1C,QAAQ,EAAE;oBACR,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACpD,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC;oBAC1D,eAAe,EAAE,CAAC;oBAClB,gBAAgB,EAAE,CAAC;oBACnB,mBAAmB,EAAE,EAAE;oBACvB,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACxC,iBAAiB,EAAE,EAAE;oBACrB,iBAAiB,EAAE,CAAC,8CAA8C,CAAC;iBACpE;gBACD,WAAW,EAAE,IAAI,CAAC,sBAAsB,EAAE;gBAC1C,UAAU,EAAE;oBACV,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACpC,aAAa,EAAE,cAAc;oBAC7B,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO;oBACpC,UAAU,EAAE,GAAG;oBACf,QAAQ;oBACR,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACzC;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,QAA2B,EAC3B,UAA6B,EAAE;QAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,gBAAgB,GAAsB,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAwB,EAAE,CAAC;QAEzC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;QAEtE,gDAAgD;QAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBAC1B,IAAI,CAAC;oBACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,QAAQ,CAAC,IAAI,CAAC;wBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;wBACrB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;wBAC/D,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CACH,CAAC;YAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,MAAM,EAAE,CAAC;oBACX,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAEpD,iBAAiB;QACjB,MAAM,QAAQ,GAAkB;YAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAC5C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACtC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,QAAQ,CAAC,MAAM;gBAC5C,CAAC,CAAC,CAAC;YACL,QAAQ;SACT,CAAC;QAEF,OAAO;YACL,QAAQ,EAAE,gBAAgB;YAC1B,OAAO;YACP,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,OAAwB,EACxB,OAA0B,EAC1B,QAAkB;QAElB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;QACvD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;QAEtE,6CAA6C;QAC7C,MAAM,kBAAkB,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAC3D,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,IAAI,EACZ;YACE,QAAQ;YACR,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,KAAK;SACtD,CACF,CAAC;QAEF,IAAI,kBAAkB,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACtC,CAAC;QAED,4CAA4C;QAC5C,MAAM,aAAa,GAAoB,EAAE,CAAC;QAC1C,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAgC,CAAC;QACnE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;QAEjD,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,CAAC;YACxD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,aAAa;gBAAE,SAAS;YAEvD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEnC,4BAA4B;YAC5B,MAAM,qBAAqB,GAAqB,EAAE,CAAC;YACnD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAErE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC/B,MAAM,cAAc,GAAmB;wBACrC,KAAK;wBACL,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;wBAC1B,eAAe,EAAE,OAAO,CAAC,IAAI;wBAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;wBACxB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;wBACxB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;qBACrC,CAAC;oBACF,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBAE3C,wBAAwB;oBACxB,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC5D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC7C,IAAI,QAAQ,EAAE,CAAC;wBACb,QAAQ,CAAC,SAAS,EAAE,CAAC;wBACrB,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;wBACtE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;4BAC3D,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;wBACpD,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE;4BAC1B,KAAK,EAAE,cAAc;4BACrB,SAAS,EAAE,CAAC;4BACZ,YAAY,EAAE,MAAM,CAAC,KAAK;4BAC1B,UAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;4BACrC,WAAW,EAAE,OAAO,CAAC,WAAW;4BAChC,WAAW,EAAE,OAAO,CAAC,SAAS;yBAC/B,CAAC,CAAC;oBACL,CAAC;oBAED,sBAAsB;oBACtB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;wBACtC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;YACH,CAAC;YAED,mCAAmC;YACnC,MAAM,WAAW,GAAG,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;YAE1F,aAAa,CAAC,IAAI,CAAC;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,IAAI;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,eAAe,EAAE,qBAAqB;gBACtC,UAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;gBACrC,WAAW;gBACX,eAAe,EAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC;aACjF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE/C,0BAA0B;QAC1B,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,wBAAwB,CACpE,eAAe,EACf,MAAM,EACN,kBAAkB,CAAC,QAAQ,EAC3B,kBAAkB,CAAC,kBAAkB,CACtC,CAAC;QAEF,OAAO;YACL,MAAM;YACN,eAAe;YACf,aAAa;YACb,QAAQ,EAAE,kBAAkB,CAAC,QAAQ;YACrC,iBAAiB,EAAE,kBAAkB,CAAC,kBAAkB;YACxD,WAAW;YACX,KAAK;YACL,cAAc;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,kBAAkB,CACxB,OAAwB,EACxB,QAAkB;QAElB,iDAAiD;QACjD,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACvC,CAAC;QAED,sDAAsD;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAEpE,gDAAgD;QAChD,MAAM,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAEnE,0CAA0C;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;QAEjE,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,sBAAsB,GAAa,EAAE,CAAC;QAE5C,kBAAkB;QAClB,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,yBAAyB,CACrE,WAAW,EACX,iBAAiB,CAAC,MAAM,EACxB,WAAW,CACZ,CAAC;QAEF,OAAO;YACL,WAAW;YACX,sBAAsB;YACtB,iBAAiB;YACjB,WAAW;YACX,KAAK;YACL,cAAc;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,QAAgB;QAChD,MAAM,WAAW,GAAqB,EAAE,CAAC;QAEzC,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACzD,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,8CAA8C;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAEhC,WAAW,CAAC,IAAI,CAAC;gBACf,UAAU,EAAE,YAAY;gBACxB,IAAI,EAAE,SAAS,CAAC,aAAa;gBAC7B,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,IAAI,EAAE,SAAS,CAAC,SAAS;gBACzB,IAAI,EAAE,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC;gBAC5C,QAAQ,EAAE,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;gBAC5C,YAAY,EAAE,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC;gBACpD,mBAAmB,EAAE,IAAI;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,MAAc,EAAE,IAAY;QAC3C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC;oBACN,UAAU,EAAE,MAAM;oBAClB,YAAY,EAAE,IAAI,CAAC,aAAa;oBAChC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,SAAS;iBACrB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,KAAK,GAAgD,EAAE,CAAC;QAE9D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,CAAC;oBACL,UAAU,EAAE,MAAM;oBAClB,YAAY,EAAE,QAAQ,CAAC,aAAa;oBACpC,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,IAAI,EAAE,QAAQ,CAAC,SAAS;iBACzB,CAAC;SACH,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAEpC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBAE7B,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAClD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;wBACzB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBAClD,IAAI,CAAC,UAAU;4BAAE,SAAS;wBAC1B,OAAO;4BACL,GAAG,IAAI;4BACP;gCACE,UAAU,EAAE,IAAI;gCAChB,YAAY,EAAE,UAAU,CAAC,aAAa;gCACtC,IAAI,EAAE,UAAU,CAAC,IAAI;gCACrB,IAAI,EAAE,UAAU,CAAC,SAAS;6BAC3B;yBACF,CAAC;oBACJ,CAAC;oBAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;wBAC5D,IAAI,aAAa,EAAE,CAAC;4BAClB,KAAK,CAAC,IAAI,CAAC;gCACT,EAAE,EAAE,WAAW;gCACf,IAAI,EAAE;oCACJ,GAAG,IAAI;oCACP;wCACE,UAAU,EAAE,WAAW;wCACvB,YAAY,EAAE,aAAa,CAAC,aAAa;wCACzC,IAAI,EAAE,aAAa,CAAC,IAAI;wCACxB,IAAI,EAAE,aAAa,CAAC,SAAS;qCAC9B;iCACF;6BACF,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,YAA0B;QACtD,MAAM,QAAQ,GAAuB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,qCAAqC;QACrC,QAAQ,CAAC,IAAI,CAAC;YACZ,UAAU,EAAE,YAAY,CAAC,EAAE;YAC3B,IAAI,EAAE,YAAY,CAAC,aAAa;YAChC,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,IAAI,EAAE,YAAY,CAAC,SAAS;YAC5B,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAE7B,6DAA6D;QAC7D,MAAM,WAAW,GAA4C,EAAE,CAAC;QAChE,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACvD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,KAAK,EAAG,CAAC;YAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,UAAU,EAAE,EAAE;gBACd,IAAI,EAAE,IAAI,CAAC,aAAa;gBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,SAAS;gBACpB,UAAU,EAAE,QAAQ;gBACpB,QAAQ;aACT,CAAC,CAAC;YAEH,kDAAkD;YAClD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACpC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;oBACtE,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,WAAW,GAA4C,EAAE,CAAC;QAChE,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC9B,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;oBACrD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACvD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,KAAK,EAAG,CAAC;YAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,UAAU,EAAE,EAAE;gBACd,IAAI,EAAE,IAAI,CAAC,aAAa;gBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,SAAS;gBACpB,UAAU,EAAE,QAAQ;gBACpB,QAAQ;aACT,CAAC,CAAC;YAEH,kDAAkD;YAClD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC9B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;wBAClB,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;4BAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gCAC9B,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;4BAChE,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,IAAY,EAAE,IAAY;QACvD,IAAI,IAAI,GAAwB,IAAI,CAAC;QACrC,IAAI,QAAQ,GAAG,QAAQ,CAAC;QAExB,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACzE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC3C,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;oBACpB,IAAI,GAAG,IAAI,CAAC;oBACZ,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,IAAkB;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7C,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7B,OAAO,cAAc,CAAC;YACxB,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QAED,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,IAAkB;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAE3D,kCAAkC;QAClC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6DAA6D;QAC7D,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,IAAkB;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAE3D,4BAA4B;QAC5B,MAAM,YAAY,GAAG;YACnB,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW;YACjD,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO;SAC3C,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,SAA6B;QACxD,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC3D,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,0BAA0B,CAChC,MAAuB,EACvB,eAAiC;QAEjC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC,CAAC,oCAAoC;QACjD,CAAC;QAED,oCAAoC;QACpC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;YAChF,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QAED,4BAA4B;QAC5B,MAAM,mBAAmB,GAAG,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ;YACvF,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,GAAG,CAAC;QAER,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,mBAAmB,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACK,oBAAoB,CAC1B,MAAuB,EACvB,eAAiC;QAEjC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,GAAG,MAAM,CAAC,SAAS,cAAc,MAAM,CAAC,KAAK,EAAE,CAAC;QACzD,CAAC;QAED,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1E,OAAO,GAAG,MAAM,CAAC,SAAS,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC;IACrF,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,UAAsB,EAAE,WAAwB;QAC1E,IAAI,UAAU,GAAG,GAAG,CAAC,CAAC,kBAAkB;QAExC,4CAA4C;QAC5C,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,UAAU,IAAI,GAAG,CAAC;QACpB,CAAC;QAED,6CAA6C;QAC7C,IAAI,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,UAAU,IAAI,GAAG,CAAC;QACpB,CAAC;QAED,sDAAsD;QACtD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB;YACvD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/C,UAAU,IAAI,cAAc,GAAG,GAAG,CAAC;QAEnC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,QAA2B;QAC9C,MAAM,UAAU,GAAiC;YAC/C,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;SAClC,CAAC;QACF,MAAM,QAAQ,GAAyC;YACrD,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;SAC7E,CAAC;QACF,MAAM,UAAU,GAAoC;YAClD,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;YAC/D,eAAe,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC;YAC5D,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;SAC7C,CAAC;QAEF,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;QAEjD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC9C,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAEvC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;gBACvD,kBAAkB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBAC9C,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;gBACjD,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,WAAW,GAAG,QAAQ;aACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC;aACnE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;aACvD,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,OAAO;YACL,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,UAAU;YACV,QAAQ;YACR,UAAU;YACV,qBAAqB,EAAE,kBAAkB,CAAC,IAAI;YAC9C,YAAY,EAAE,SAAS,CAAC,IAAI;YAC5B,qBAAqB,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;YACjD,WAAW;SACZ,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,QAAqC;QAChE,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACzE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,QAAqC;QACvD,MAAM,KAAK,GAAsD;YAC/D,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;SAChE,CAAC;QACF,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,qBAAqB;QAC3B,OAAO;YACL,MAAM,EAAE,EAAE;YACV,eAAe,EAAE,EAAE;YACnB,aAAa,EAAE,EAAE;YACjB,QAAQ,EAAE,CAAC;YACX,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,EAAE;YACf,KAAK,EAAE,CAAC;YACR,cAAc,EAAE,MAAM;SACvB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB;QAC5B,OAAO;YACL,WAAW,EAAE,EAAE;YACf,sBAAsB,EAAE,EAAE;YAC1B,iBAAiB,EAAE,EAAE;YACrB,WAAW,EAAE,CAAC;YACd,KAAK,EAAE,CAAC;YACR,cAAc,EAAE,WAAW;SAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB;QAC5B,OAAO;YACL,OAAO,EAAE,yCAAyC;YAClD,KAAK,EAAE,EAAE;YACT,YAAY,EAAE,EAAE;YAChB,MAAM,EAAE;gBACN,IAAI,EAAE,OAAgB;gBACtB,UAAU,EAAE,UAAmB;gBAC/B,cAAc,EAAE,QAAiB;aAClC;YACD,UAAU,EAAE,EAAE;SACf,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAgB,EAChB,gBAAoC,EACpC,eAAkC;IAElC,OAAO,IAAI,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;AACxE,CAAC"}
@@ -0,0 +1,59 @@
1
+ /**
2
+ * Impact Scorer
3
+ *
4
+ * Enterprise-grade scoring engine for vulnerability impact assessment.
5
+ * Combines multiple factors into actionable priority scores.
6
+ */
7
+ import type { FindingSeverity, FindingCategory, DataImpact, BlastRadius, PriorityScore, ImpactClassification, BlastRadiusClassification, SensitiveFieldImpact, EntryPointInfo } from './types.js';
8
+ /**
9
+ * Calculates comprehensive impact and priority scores
10
+ */
11
+ export declare class ImpactScorer {
12
+ /**
13
+ * Calculate the overall priority score for a finding
14
+ */
15
+ calculatePriority(severity: FindingSeverity, category: FindingCategory, dataImpact: DataImpact, blastRadius: BlastRadius, cvss?: number): PriorityScore;
16
+ /**
17
+ * Calculate data impact score
18
+ */
19
+ calculateDataImpactScore(sensitiveFields: SensitiveFieldImpact[], tables: string[], maxDepth: number, attackSurfaceSize: number): {
20
+ score: number;
21
+ classification: ImpactClassification;
22
+ };
23
+ /**
24
+ * Calculate blast radius score
25
+ */
26
+ calculateBlastRadiusScore(entryPoints: EntryPointInfo[], affectedFunctionsCount: number, linesOfCode: number): {
27
+ score: number;
28
+ classification: BlastRadiusClassification;
29
+ };
30
+ /**
31
+ * Calculate severity score with CVSS override
32
+ */
33
+ private calculateSeverityScore;
34
+ /**
35
+ * Calculate exploitability score
36
+ */
37
+ private calculateExploitabilityScore;
38
+ /**
39
+ * Apply modifiers based on specific conditions
40
+ */
41
+ private applyModifiers;
42
+ /**
43
+ * Calculate priority tier
44
+ */
45
+ private calculateTier;
46
+ /**
47
+ * Classify impact level
48
+ */
49
+ private classifyImpact;
50
+ /**
51
+ * Classify blast radius
52
+ */
53
+ private classifyBlastRadius;
54
+ }
55
+ /**
56
+ * Create a new impact scorer
57
+ */
58
+ export declare function createImpactScorer(): ImpactScorer;
59
+ //# sourceMappingURL=impact-scorer.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"impact-scorer.d.ts","sourceRoot":"","sources":["../../../src/call-graph/enrichment/impact-scorer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,UAAU,EACV,WAAW,EACX,aAAa,EAEb,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,cAAc,EACf,MAAM,YAAY,CAAC;AAwEpB;;GAEG;AACH,qBAAa,YAAY;IACvB;;OAEG;IACH,iBAAiB,CACf,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,UAAU,EACtB,WAAW,EAAE,WAAW,EACxB,IAAI,CAAC,EAAE,MAAM,GACZ,aAAa;IA8ChB;;OAEG;IACH,wBAAwB,CACtB,eAAe,EAAE,oBAAoB,EAAE,EACvC,MAAM,EAAE,MAAM,EAAE,EAChB,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,GACxB;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,oBAAoB,CAAA;KAAE;IAkD1D;;OAEG;IACH,yBAAyB,CACvB,WAAW,EAAE,cAAc,EAAE,EAC7B,sBAAsB,EAAE,MAAM,EAC9B,WAAW,EAAE,MAAM,GAClB;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,yBAAyB,CAAA;KAAE;IA0C/D;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAQ9B;;OAEG;IACH,OAAO,CAAC,4BAA4B;IAoCpC;;OAEG;IACH,OAAO,CAAC,cAAc;IAwDtB;;OAEG;IACH,OAAO,CAAC,aAAa;IAmCrB;;OAEG;IACH,OAAO,CAAC,cAAc;IAStB;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAU5B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,CAEjD"}
@@ -0,0 +1,328 @@
1
+ /**
2
+ * Impact Scorer
3
+ *
4
+ * Enterprise-grade scoring engine for vulnerability impact assessment.
5
+ * Combines multiple factors into actionable priority scores.
6
+ */
7
+ // ============================================================================
8
+ // Scoring Weights
9
+ // ============================================================================
10
+ /**
11
+ * Weights for priority score calculation
12
+ * These are tuned based on industry best practices and real-world impact
13
+ */
14
+ const PRIORITY_WEIGHTS = {
15
+ severity: 0.30, // Base severity from scanner
16
+ dataImpact: 0.35, // Data sensitivity and reach
17
+ blastRadius: 0.20, // Attack surface size
18
+ exploitability: 0.15, // How easy to exploit
19
+ };
20
+ /**
21
+ * Severity base scores
22
+ */
23
+ const SEVERITY_SCORES = {
24
+ critical: 100,
25
+ high: 80,
26
+ medium: 50,
27
+ low: 25,
28
+ info: 10,
29
+ };
30
+ /**
31
+ * Category exploitability modifiers
32
+ * Based on CVSS exploitability metrics
33
+ */
34
+ const CATEGORY_EXPLOITABILITY = {
35
+ injection: 95, // Easy to exploit, high impact
36
+ 'broken-auth': 85, // Often exploitable
37
+ 'sensitive-exposure': 70, // Depends on access
38
+ xxe: 75, // Requires specific conditions
39
+ 'broken-access': 80, // Common and impactful
40
+ misconfig: 60, // Varies widely
41
+ xss: 70, // Requires user interaction
42
+ deserialization: 85, // Can be severe
43
+ components: 65, // Depends on vulnerability
44
+ logging: 30, // Usually low direct impact
45
+ ssrf: 80, // Can be severe
46
+ other: 50, // Unknown
47
+ };
48
+ /**
49
+ * Sensitivity type impact multipliers
50
+ */
51
+ const SENSITIVITY_MULTIPLIERS = {
52
+ credentials: 1.0, // Maximum impact
53
+ financial: 0.95, // Near-maximum
54
+ health: 0.90, // Very high (HIPAA)
55
+ pii: 0.80, // High
56
+ unknown: 0.30, // Low baseline
57
+ };
58
+ /**
59
+ * Operation risk multipliers
60
+ */
61
+ const OPERATION_MULTIPLIERS = {
62
+ write: 1.0, // Can modify data
63
+ delete: 1.0, // Can destroy data
64
+ read: 0.7, // Can exfiltrate
65
+ unknown: 0.5, // Uncertain
66
+ };
67
+ // ============================================================================
68
+ // Impact Scorer
69
+ // ============================================================================
70
+ /**
71
+ * Calculates comprehensive impact and priority scores
72
+ */
73
+ export class ImpactScorer {
74
+ /**
75
+ * Calculate the overall priority score for a finding
76
+ */
77
+ calculatePriority(severity, category, dataImpact, blastRadius, cvss) {
78
+ const increasingFactors = [];
79
+ const decreasingFactors = [];
80
+ // Calculate component scores
81
+ const severityScore = this.calculateSeverityScore(severity, cvss);
82
+ const dataImpactScore = dataImpact.score;
83
+ const blastRadiusScore = blastRadius.score;
84
+ const exploitabilityScore = this.calculateExploitabilityScore(category, blastRadius, increasingFactors, decreasingFactors);
85
+ // Weighted combination
86
+ let overall = severityScore * PRIORITY_WEIGHTS.severity +
87
+ dataImpactScore * PRIORITY_WEIGHTS.dataImpact +
88
+ blastRadiusScore * PRIORITY_WEIGHTS.blastRadius +
89
+ exploitabilityScore * PRIORITY_WEIGHTS.exploitability;
90
+ // Apply boosters and penalties
91
+ overall = this.applyModifiers(overall, dataImpact, blastRadius, increasingFactors, decreasingFactors);
92
+ // Clamp to 0-100
93
+ overall = Math.max(0, Math.min(100, Math.round(overall)));
94
+ return {
95
+ overall,
96
+ severityScore: Math.round(severityScore),
97
+ dataImpactScore: Math.round(dataImpactScore),
98
+ blastRadiusScore: Math.round(blastRadiusScore),
99
+ exploitabilityScore: Math.round(exploitabilityScore),
100
+ tier: this.calculateTier(overall, dataImpact, blastRadius),
101
+ increasingFactors,
102
+ decreasingFactors,
103
+ };
104
+ }
105
+ /**
106
+ * Calculate data impact score
107
+ */
108
+ calculateDataImpactScore(sensitiveFields, tables, maxDepth, attackSurfaceSize) {
109
+ if (sensitiveFields.length === 0 && tables.length === 0) {
110
+ return { score: 0, classification: 'none' };
111
+ }
112
+ let score = 0;
113
+ // Base score from sensitive fields
114
+ for (const field of sensitiveFields) {
115
+ const sensitivityMultiplier = SENSITIVITY_MULTIPLIERS[field.field.sensitivityType];
116
+ const operationMultiplier = Math.max(...field.operations.map((op) => OPERATION_MULTIPLIERS[op]));
117
+ // Field impact: base score * sensitivity * operation * path factor
118
+ const pathFactor = Math.min(1, 1 / Math.sqrt(field.shortestPath + 1));
119
+ const fieldScore = field.impactScore * sensitivityMultiplier * operationMultiplier * pathFactor;
120
+ score += fieldScore;
121
+ }
122
+ // Normalize by number of fields (diminishing returns)
123
+ if (sensitiveFields.length > 0) {
124
+ score = score / Math.sqrt(sensitiveFields.length);
125
+ }
126
+ // Boost for multiple tables (broader exposure)
127
+ if (tables.length > 1) {
128
+ score *= 1 + Math.log10(tables.length) * 0.2;
129
+ }
130
+ // Depth penalty (deeper = harder to exploit)
131
+ if (maxDepth > 3) {
132
+ score *= 1 - (maxDepth - 3) * 0.05;
133
+ }
134
+ // Attack surface boost
135
+ if (attackSurfaceSize > 10) {
136
+ score *= 1 + Math.log10(attackSurfaceSize / 10) * 0.1;
137
+ }
138
+ // Clamp and classify
139
+ score = Math.max(0, Math.min(100, Math.round(score)));
140
+ return {
141
+ score,
142
+ classification: this.classifyImpact(score),
143
+ };
144
+ }
145
+ /**
146
+ * Calculate blast radius score
147
+ */
148
+ calculateBlastRadiusScore(entryPoints, affectedFunctionsCount, linesOfCode) {
149
+ if (entryPoints.length === 0) {
150
+ return { score: 10, classification: 'contained' };
151
+ }
152
+ let score = 0;
153
+ // Entry point analysis
154
+ const publicEntryPoints = entryPoints.filter((ep) => ep.isPublic);
155
+ const unauthEntryPoints = entryPoints.filter((ep) => !ep.requiresAuth);
156
+ const publicUnauthEntryPoints = entryPoints.filter((ep) => ep.isPublic && !ep.requiresAuth);
157
+ // Public + unauthenticated = highest risk
158
+ if (publicUnauthEntryPoints.length > 0) {
159
+ score += 50 + Math.min(30, publicUnauthEntryPoints.length * 10);
160
+ }
161
+ else if (publicEntryPoints.length > 0) {
162
+ score += 30 + Math.min(20, publicEntryPoints.length * 5);
163
+ }
164
+ else if (unauthEntryPoints.length > 0) {
165
+ score += 20 + Math.min(15, unauthEntryPoints.length * 3);
166
+ }
167
+ else {
168
+ score += 10 + Math.min(10, entryPoints.length * 2);
169
+ }
170
+ // Affected functions factor
171
+ if (affectedFunctionsCount > 0) {
172
+ score += Math.min(20, Math.log10(affectedFunctionsCount + 1) * 10);
173
+ }
174
+ // Lines of code factor (larger blast = higher risk)
175
+ if (linesOfCode > 100) {
176
+ score += Math.min(10, Math.log10(linesOfCode / 100) * 5);
177
+ }
178
+ // Clamp and classify
179
+ score = Math.max(0, Math.min(100, Math.round(score)));
180
+ return {
181
+ score,
182
+ classification: this.classifyBlastRadius(score, publicUnauthEntryPoints.length > 0),
183
+ };
184
+ }
185
+ /**
186
+ * Calculate severity score with CVSS override
187
+ */
188
+ calculateSeverityScore(severity, cvss) {
189
+ if (cvss !== undefined) {
190
+ // CVSS is 0-10, convert to 0-100
191
+ return cvss * 10;
192
+ }
193
+ return SEVERITY_SCORES[severity];
194
+ }
195
+ /**
196
+ * Calculate exploitability score
197
+ */
198
+ calculateExploitabilityScore(category, blastRadius, increasingFactors, decreasingFactors) {
199
+ let score = CATEGORY_EXPLOITABILITY[category];
200
+ // Public entry points increase exploitability
201
+ const publicEntryPoints = blastRadius.entryPoints.filter((ep) => ep.isPublic);
202
+ if (publicEntryPoints.length > 0) {
203
+ score += 10;
204
+ increasingFactors.push('Publicly accessible entry points');
205
+ }
206
+ // No auth required increases exploitability
207
+ const noAuthEntryPoints = blastRadius.entryPoints.filter((ep) => !ep.requiresAuth);
208
+ if (noAuthEntryPoints.length > 0) {
209
+ score += 15;
210
+ increasingFactors.push('No authentication required');
211
+ }
212
+ // Deep call chains decrease exploitability
213
+ const avgPathLength = blastRadius.entryPoints.reduce((sum, ep) => sum + ep.pathToVulnerability.length, 0) / Math.max(1, blastRadius.entryPoints.length);
214
+ if (avgPathLength > 5) {
215
+ score -= 10;
216
+ decreasingFactors.push('Deep call chain (harder to reach)');
217
+ }
218
+ return Math.max(0, Math.min(100, score));
219
+ }
220
+ /**
221
+ * Apply modifiers based on specific conditions
222
+ */
223
+ applyModifiers(score, dataImpact, blastRadius, increasingFactors, decreasingFactors) {
224
+ // Regulatory implications boost
225
+ if (dataImpact.regulations.length > 0) {
226
+ const regBoost = Math.min(15, dataImpact.regulations.length * 5);
227
+ score += regBoost;
228
+ increasingFactors.push(`Regulatory implications: ${dataImpact.regulations.join(', ')}`);
229
+ }
230
+ // Credentials exposure is always critical
231
+ const hasCredentials = dataImpact.sensitiveFields.some((f) => f.field.sensitivityType === 'credentials');
232
+ if (hasCredentials) {
233
+ score = Math.max(score, 85);
234
+ increasingFactors.push('Credentials exposure detected');
235
+ }
236
+ // Financial data exposure
237
+ const hasFinancial = dataImpact.sensitiveFields.some((f) => f.field.sensitivityType === 'financial');
238
+ if (hasFinancial) {
239
+ score += 10;
240
+ increasingFactors.push('Financial data exposure');
241
+ }
242
+ // Health data (HIPAA)
243
+ const hasHealth = dataImpact.sensitiveFields.some((f) => f.field.sensitivityType === 'health');
244
+ if (hasHealth) {
245
+ score += 10;
246
+ increasingFactors.push('Protected health information (HIPAA)');
247
+ }
248
+ // No data access reduces priority
249
+ if (dataImpact.tables.length === 0) {
250
+ score *= 0.7;
251
+ decreasingFactors.push('No database access detected');
252
+ }
253
+ // Contained blast radius reduces priority
254
+ if (blastRadius.classification === 'contained') {
255
+ score *= 0.8;
256
+ decreasingFactors.push('Contained blast radius');
257
+ }
258
+ return score;
259
+ }
260
+ /**
261
+ * Calculate priority tier
262
+ */
263
+ calculateTier(score, dataImpact, blastRadius) {
264
+ // P0: Critical - immediate action required
265
+ if (score >= 90)
266
+ return 'P0';
267
+ if (score >= 80 &&
268
+ dataImpact.sensitiveFields.some((f) => f.field.sensitivityType === 'credentials')) {
269
+ return 'P0';
270
+ }
271
+ if (score >= 75 &&
272
+ blastRadius.entryPoints.some((ep) => ep.isPublic && !ep.requiresAuth)) {
273
+ return 'P0';
274
+ }
275
+ // P1: High - fix within 24 hours
276
+ if (score >= 75)
277
+ return 'P1';
278
+ if (score >= 65 && dataImpact.classification === 'catastrophic')
279
+ return 'P1';
280
+ // P2: Medium - fix within 1 week
281
+ if (score >= 50)
282
+ return 'P2';
283
+ if (score >= 40 && dataImpact.regulations.length > 0)
284
+ return 'P2';
285
+ // P3: Low - fix within 1 month
286
+ if (score >= 25)
287
+ return 'P3';
288
+ // P4: Minimal - fix when convenient
289
+ return 'P4';
290
+ }
291
+ /**
292
+ * Classify impact level
293
+ */
294
+ classifyImpact(score) {
295
+ if (score >= 90)
296
+ return 'catastrophic';
297
+ if (score >= 70)
298
+ return 'severe';
299
+ if (score >= 50)
300
+ return 'significant';
301
+ if (score >= 30)
302
+ return 'moderate';
303
+ if (score >= 10)
304
+ return 'minimal';
305
+ return 'none';
306
+ }
307
+ /**
308
+ * Classify blast radius
309
+ */
310
+ classifyBlastRadius(score, hasPublicUnauth) {
311
+ if (hasPublicUnauth && score >= 70)
312
+ return 'critical';
313
+ if (score >= 70)
314
+ return 'high';
315
+ if (score >= 50)
316
+ return 'medium';
317
+ if (score >= 25)
318
+ return 'low';
319
+ return 'contained';
320
+ }
321
+ }
322
+ /**
323
+ * Create a new impact scorer
324
+ */
325
+ export function createImpactScorer() {
326
+ return new ImpactScorer();
327
+ }
328
+ //# sourceMappingURL=impact-scorer.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"impact-scorer.js","sourceRoot":"","sources":["../../../src/call-graph/enrichment/impact-scorer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,gBAAgB,GAAG;IACvB,QAAQ,EAAE,IAAI,EAAS,6BAA6B;IACpD,UAAU,EAAE,IAAI,EAAO,6BAA6B;IACpD,WAAW,EAAE,IAAI,EAAM,sBAAsB;IAC7C,cAAc,EAAE,IAAI,EAAG,sBAAsB;CACrC,CAAC;AAEX;;GAEG;AACH,MAAM,eAAe,GAAoC;IACvD,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,EAAE;IACV,GAAG,EAAE,EAAE;IACP,IAAI,EAAE,EAAE;CACT,CAAC;AAEF;;;GAGG;AACH,MAAM,uBAAuB,GAAoC;IAC/D,SAAS,EAAE,EAAE,EAAY,+BAA+B;IACxD,aAAa,EAAE,EAAE,EAAQ,oBAAoB;IAC7C,oBAAoB,EAAE,EAAE,EAAE,oBAAoB;IAC9C,GAAG,EAAE,EAAE,EAAkB,+BAA+B;IACxD,eAAe,EAAE,EAAE,EAAM,uBAAuB;IAChD,SAAS,EAAE,EAAE,EAAY,gBAAgB;IACzC,GAAG,EAAE,EAAE,EAAkB,4BAA4B;IACrD,eAAe,EAAE,EAAE,EAAM,gBAAgB;IACzC,UAAU,EAAE,EAAE,EAAW,2BAA2B;IACpD,OAAO,EAAE,EAAE,EAAc,4BAA4B;IACrD,IAAI,EAAE,EAAE,EAAiB,gBAAgB;IACzC,KAAK,EAAE,EAAE,EAAgB,UAAU;CACpC,CAAC;AAEF;;GAEG;AACH,MAAM,uBAAuB,GAAoC;IAC/D,WAAW,EAAE,GAAG,EAAI,iBAAiB;IACrC,SAAS,EAAE,IAAI,EAAK,eAAe;IACnC,MAAM,EAAE,IAAI,EAAQ,oBAAoB;IACxC,GAAG,EAAE,IAAI,EAAW,OAAO;IAC3B,OAAO,EAAE,IAAI,EAAO,eAAe;CACpC,CAAC;AAEF;;GAEG;AACH,MAAM,qBAAqB,GAAkC;IAC3D,KAAK,EAAE,GAAG,EAAK,kBAAkB;IACjC,MAAM,EAAE,GAAG,EAAI,mBAAmB;IAClC,IAAI,EAAE,GAAG,EAAM,iBAAiB;IAChC,OAAO,EAAE,GAAG,EAAG,YAAY;CAC5B,CAAC;AAEF,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,YAAY;IACvB;;OAEG;IACH,iBAAiB,CACf,QAAyB,EACzB,QAAyB,EACzB,UAAsB,EACtB,WAAwB,EACxB,IAAa;QAEb,MAAM,iBAAiB,GAAa,EAAE,CAAC;QACvC,MAAM,iBAAiB,GAAa,EAAE,CAAC;QAEvC,6BAA6B;QAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC;QACzC,MAAM,gBAAgB,GAAG,WAAW,CAAC,KAAK,CAAC;QAC3C,MAAM,mBAAmB,GAAG,IAAI,CAAC,4BAA4B,CAC3D,QAAQ,EACR,WAAW,EACX,iBAAiB,EACjB,iBAAiB,CAClB,CAAC;QAEF,uBAAuB;QACvB,IAAI,OAAO,GACT,aAAa,GAAG,gBAAgB,CAAC,QAAQ;YACzC,eAAe,GAAG,gBAAgB,CAAC,UAAU;YAC7C,gBAAgB,GAAG,gBAAgB,CAAC,WAAW;YAC/C,mBAAmB,GAAG,gBAAgB,CAAC,cAAc,CAAC;QAExD,+BAA+B;QAC/B,OAAO,GAAG,IAAI,CAAC,cAAc,CAC3B,OAAO,EACP,UAAU,EACV,WAAW,EACX,iBAAiB,EACjB,iBAAiB,CAClB,CAAC;QAEF,iBAAiB;QACjB,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAE1D,OAAO;YACL,OAAO;YACP,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;YACxC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YAC5C,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAC9C,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;YACpD,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC;YAC1D,iBAAiB;YACjB,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,wBAAwB,CACtB,eAAuC,EACvC,MAAgB,EAChB,QAAgB,EAChB,iBAAyB;QAEzB,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QAC9C,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,mCAAmC;QACnC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACnF,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAClC,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAC3D,CAAC;YAEF,mEAAmE;YACnE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC;YACtE,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,GAAG,qBAAqB,GAAG,mBAAmB,GAAG,UAAU,CAAC;YAEhG,KAAK,IAAI,UAAU,CAAC;QACtB,CAAC;QAED,sDAAsD;QACtD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QAED,+CAA+C;QAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;QAC/C,CAAC;QAED,6CAA6C;QAC7C,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;QACrC,CAAC;QAED,uBAAuB;QACvB,IAAI,iBAAiB,GAAG,EAAE,EAAE,CAAC;YAC3B,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;QACxD,CAAC;QAED,qBAAqB;QACrB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtD,OAAO;YACL,KAAK;YACL,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;SAC3C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,yBAAyB,CACvB,WAA6B,EAC7B,sBAA8B,EAC9B,WAAmB;QAEnB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;QACpD,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,uBAAuB;QACvB,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;QACvE,MAAM,uBAAuB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;QAE5F,0CAA0C;QAC1C,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,4BAA4B;QAC5B,IAAI,sBAAsB,GAAG,CAAC,EAAE,CAAC;YAC/B,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,oDAAoD;QACpD,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;YACtB,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,qBAAqB;QACrB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtD,OAAO;YACL,KAAK;YACL,cAAc,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,uBAAuB,CAAC,MAAM,GAAG,CAAC,CAAC;SACpF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,QAAyB,EAAE,IAAa;QACrE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,iCAAiC;YACjC,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;QACD,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACK,4BAA4B,CAClC,QAAyB,EACzB,WAAwB,EACxB,iBAA2B,EAC3B,iBAA2B;QAE3B,IAAI,KAAK,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAE9C,8CAA8C;QAC9C,MAAM,iBAAiB,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC9E,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,IAAI,EAAE,CAAC;YACZ,iBAAiB,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC7D,CAAC;QAED,4CAA4C;QAC5C,MAAM,iBAAiB,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;QACnF,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,IAAI,EAAE,CAAC;YACZ,iBAAiB,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACvD,CAAC;QAED,2CAA2C;QAC3C,MAAM,aAAa,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,CAClD,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAChD,CAAC,CACF,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEhD,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,IAAI,EAAE,CAAC;YACZ,iBAAiB,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,KAAa,EACb,UAAsB,EACtB,WAAwB,EACxB,iBAA2B,EAC3B,iBAA2B;QAE3B,gCAAgC;QAChC,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACjE,KAAK,IAAI,QAAQ,CAAC;YAClB,iBAAiB,CAAC,IAAI,CAAC,4BAA4B,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,0CAA0C;QAC1C,MAAM,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC,IAAI,CACpD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,KAAK,aAAa,CACjD,CAAC;QACF,IAAI,cAAc,EAAE,CAAC;YACnB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5B,iBAAiB,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC1D,CAAC;QAED,0BAA0B;QAC1B,MAAM,YAAY,GAAG,UAAU,CAAC,eAAe,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,KAAK,WAAW,CAC/C,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,IAAI,EAAE,CAAC;YACZ,iBAAiB,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACpD,CAAC;QAED,sBAAsB;QACtB,MAAM,SAAS,GAAG,UAAU,CAAC,eAAe,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,KAAK,QAAQ,CAC5C,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,IAAI,EAAE,CAAC;YACZ,iBAAiB,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACjE,CAAC;QAED,kCAAkC;QAClC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,KAAK,IAAI,GAAG,CAAC;YACb,iBAAiB,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACxD,CAAC;QAED,0CAA0C;QAC1C,IAAI,WAAW,CAAC,cAAc,KAAK,WAAW,EAAE,CAAC;YAC/C,KAAK,IAAI,GAAG,CAAC;YACb,iBAAiB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,aAAa,CACnB,KAAa,EACb,UAAsB,EACtB,WAAwB;QAExB,2CAA2C;QAC3C,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAC7B,IACE,KAAK,IAAI,EAAE;YACX,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,KAAK,aAAa,CAAC,EACjF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IACE,KAAK,IAAI,EAAE;YACX,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,EACrE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iCAAiC;QACjC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,KAAK,IAAI,EAAE,IAAI,UAAU,CAAC,cAAc,KAAK,cAAc;YAAE,OAAO,IAAI,CAAC;QAE7E,iCAAiC;QACjC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,KAAK,IAAI,EAAE,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAElE,+BAA+B;QAC/B,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAE7B,oCAAoC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,KAAa;QAClC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,cAAc,CAAC;QACvC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,QAAQ,CAAC;QACjC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,aAAa,CAAC;QACtC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,UAAU,CAAC;QACnC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,SAAS,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,mBAAmB,CACzB,KAAa,EACb,eAAwB;QAExB,IAAI,eAAe,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,UAAU,CAAC;QACtD,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC;QAC/B,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,QAAQ,CAAC;QACjC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;QAC9B,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,YAAY,EAAE,CAAC;AAC5B,CAAC"}
@@ -0,0 +1,12 @@
1
+ /**
2
+ * Enrichment Module
3
+ *
4
+ * Enterprise-grade security finding enrichment.
5
+ * Transforms raw vulnerability findings into actionable intelligence.
6
+ */
7
+ export type { FindingSeverity, FindingCategory, SecurityFinding, DataSensitivityProfile, DataRegulation, ReachableData, DataImpact, SensitiveFieldImpact, ImpactClassification, BlastRadius, EntryPointInfo, EntryPointType, AffectedFunction, BlastRadiusClassification, PriorityScore, PriorityTier, RemediationGuidance, RemediationStep, CodeExample, RemediationEffort, Reference, EnrichedFinding, EnrichmentMetadata, EnrichmentOptions, EnrichmentResult, EnrichmentSummary, BatchMetadata, EnrichmentFailure, } from './types.js';
8
+ export { EnrichmentEngine, createEnrichmentEngine, } from './enrichment-engine.js';
9
+ export { SensitivityClassifier, createSensitivityClassifier, getDefaultClassifier, } from './sensitivity-classifier.js';
10
+ export { ImpactScorer, createImpactScorer, } from './impact-scorer.js';
11
+ export { RemediationGenerator, createRemediationGenerator, } from './remediation-generator.js';
12
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/call-graph/enrichment/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EAEV,eAAe,EACf,eAAe,EACf,eAAe,EAEf,sBAAsB,EACtB,cAAc,EACd,aAAa,EACb,UAAU,EACV,oBAAoB,EACpB,oBAAoB,EAEpB,WAAW,EACX,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EAEzB,aAAa,EACb,YAAY,EAEZ,mBAAmB,EACnB,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,SAAS,EAET,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EACL,YAAY,EACZ,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC"}
@@ -0,0 +1,15 @@
1
+ /**
2
+ * Enrichment Module
3
+ *
4
+ * Enterprise-grade security finding enrichment.
5
+ * Transforms raw vulnerability findings into actionable intelligence.
6
+ */
7
+ // Enrichment Engine
8
+ export { EnrichmentEngine, createEnrichmentEngine, } from './enrichment-engine.js';
9
+ // Sensitivity Classifier
10
+ export { SensitivityClassifier, createSensitivityClassifier, getDefaultClassifier, } from './sensitivity-classifier.js';
11
+ // Impact Scorer
12
+ export { ImpactScorer, createImpactScorer, } from './impact-scorer.js';
13
+ // Remediation Generator
14
+ export { RemediationGenerator, createRemediationGenerator, } from './remediation-generator.js';
15
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/call-graph/enrichment/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwCH,oBAAoB;AACpB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAEhC,yBAAyB;AACzB,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC,gBAAgB;AAChB,OAAO,EACL,YAAY,EACZ,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAE5B,wBAAwB;AACxB,OAAO,EACL,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC"}
@@ -0,0 +1,41 @@
1
+ /**
2
+ * Remediation Generator
3
+ *
4
+ * Generates actionable remediation guidance for security findings.
5
+ * Provides step-by-step instructions, code examples, and effort estimates.
6
+ */
7
+ import type { SecurityFinding, DataImpact, RemediationGuidance } from './types.js';
8
+ /**
9
+ * Generates remediation guidance for security findings
10
+ */
11
+ export declare class RemediationGenerator {
12
+ /**
13
+ * Generate remediation guidance for a finding
14
+ */
15
+ generate(finding: SecurityFinding, dataImpact: DataImpact): RemediationGuidance;
16
+ /**
17
+ * Build context-aware summary
18
+ */
19
+ private buildSummary;
20
+ /**
21
+ * Build context-aware remediation steps
22
+ */
23
+ private buildSteps;
24
+ /**
25
+ * Filter code examples relevant to the finding
26
+ */
27
+ private filterCodeExamples;
28
+ /**
29
+ * Adjust effort estimate based on data impact
30
+ */
31
+ private adjustEffort;
32
+ /**
33
+ * Build comprehensive references
34
+ */
35
+ private buildReferences;
36
+ }
37
+ /**
38
+ * Create a new remediation generator
39
+ */
40
+ export declare function createRemediationGenerator(): RemediationGenerator;
41
+ //# sourceMappingURL=remediation-generator.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"remediation-generator.d.ts","sourceRoot":"","sources":["../../../src/call-graph/enrichment/remediation-generator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,eAAe,EAEf,UAAU,EACV,mBAAmB,EAKpB,MAAM,YAAY,CAAC;AAiepB;;GAEG;AACH,qBAAa,oBAAoB;IAC/B;;OAEG;IACH,QAAQ,CACN,OAAO,EAAE,eAAe,EACxB,UAAU,EAAE,UAAU,GACrB,mBAAmB;IAwBtB;;OAEG;IACH,OAAO,CAAC,YAAY;IAuBpB;;OAEG;IACH,OAAO,CAAC,UAAU;IAkClB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAS1B;;OAEG;IACH,OAAO,CAAC,YAAY;IA2BpB;;OAEG;IACH,OAAO,CAAC,eAAe;CAqCxB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,oBAAoB,CAEjE"}