frontend-guardian-core 2.6.0

package/dist/scanners/security-scanner.js

@@ -0,0 +1,349 @@
+"use strict";
+/**
+ * 安全规则 Scanner
+ * 参考 OWASP Top 10、SonarQube 安全规则和 CWE 漏洞分类
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.securityRules = void 0;
+const traverse_1 = __importDefault(require("@babel/traverse"));
+const common_js_1 = require("../utils/common.js");
+/** 密钥检测模式 */
+const SECRET_PATTERNS = [
+    { regex: /AK[A-Za-z0-9]{16,}/, name: "阿里云 AccessKey", example: "AKLT..." },
+    { regex: /sk-[a-zA-Z0-9]{48}/, name: "OpenAI API Key", example: "sk-..." },
+    { regex: /wx[a-f0-9]{32}/, name: "微信密钥", example: "wx..." },
+    { regex: /password\s*=\s*['"][^'"]{4,}['"]/i, name: "硬编码密码", example: 'password = "xxx"' },
+    {
+        regex: /api[_-]?key\s*[:=]\s*['"][a-zA-Z0-9-_]{8,}['"]/i,
+        name: "API Key",
+        example: 'api_key = "xxx"',
+    },
+    {
+        regex: /secret[_-]?key\s*[:=]\s*['"][a-zA-Z0-9-_]{8,}['"]/i,
+        name: "Secret Key",
+        example: 'secret_key = "xxx"',
+    },
+    { regex: /token\s*[:=]\s*['"][a-zA-Z0-9-_]{20,}['"]/i, name: "Token", example: 'token = "xxx"' },
+];
+exports.securityRules = [
+    {
+        id: "sec-xss-innerhtml",
+        name: "危险的 innerHTML 使用",
+        description: "避免直接使用 innerHTML，应使用 textContent 或安全库",
+        severity: "critical",
+        category: "security",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/sec-xss-innerhtml.md",
+        execute(context) {
+            const issues = [];
+            const ast = context.utils.parseAST(context.source, {
+                ext: (0, common_js_1.getFileExt)(context.filePath),
+            });
+            if (!ast)
+                return issues;
+            (0, traverse_1.default)(ast, {
+                // 1. 赋值: element.innerHTML = ...
+                AssignmentExpression(path) {
+                    const left = path.node.left;
+                    if (left.type !== "MemberExpression")
+                        return;
+                    const prop = left.property;
+                    if (prop.type === "Identifier" && prop.name === "innerHTML") {
+                        const { line, column } = path.node.loc?.start || { line: 0, column: 0 };
+                        issues.push({
+                            ruleId: "sec-xss-innerhtml",
+                            title: "危险的 innerHTML 赋值",
+                            description: "innerHTML 赋值存在 XSS 风险，应使用 textContent 或 DOMPurify",
+                            severity: "critical",
+                            file: context.filePath,
+                            line,
+                            column,
+                            source: "innerHTML = ...",
+                            fix: {
+                                text: "textContent",
+                                start: { line, column },
+                                end: { line, column: column + "innerHTML".length },
+                                confidence: "high",
+                                description: "将 innerHTML 替换为 textContent，彻底消除 XSS 风险",
+                            },
+                        });
+                    }
+                },
+                // 2. 方法调用: element.innerHTML.replace(...)
+                MemberExpression(path) {
+                    const prop = path.node.property;
+                    if (prop.type === "Identifier" && prop.name === "innerHTML") {
+                        const parent = path.parentPath?.node;
+                        // 如果不是赋值左侧，可能是读取（可以放宽）
+                        if (parent?.type === "AssignmentExpression" && parent.left === path.node) {
+                            return; // 已在上面处理
+                        }
+                    }
+                },
+                // 3. Vue 的 v-html 指令
+                JSXAttribute(path) {
+                    const attrName = path.node.name;
+                    if (attrName.type === "JSXIdentifier" && attrName.name === "dangerouslySetInnerHTML") {
+                        const { line, column } = path.node.loc?.start || { line: 0, column: 0 };
+                        issues.push({
+                            ruleId: "sec-xss-innerhtml",
+                            title: "危险的 dangerouslySetInnerHTML 使用",
+                            description: "React dangerouslySetInnerHTML 存在 XSS 风险，确保数据来源可信",
+                            severity: "critical",
+                            file: context.filePath,
+                            line,
+                            column,
+                            source: "dangerouslySetInnerHTML={...}",
+                        });
+                    }
+                },
+            });
+            return issues;
+        },
+    },
+    {
+        id: "sec-eval-dangerous",
+        name: "禁止 eval / new Function",
+        description: "eval, new Function, setTimeout 字符串 存在代码注入风险",
+        severity: "critical",
+        category: "security",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/sec-eval-dangerous.md",
+        execute(context) {
+            const issues = [];
+            const ast = context.utils.parseAST(context.source, {
+                ext: (0, common_js_1.getFileExt)(context.filePath),
+            });
+            if (!ast)
+                return issues;
+            (0, traverse_1.default)(ast, {
+                CallExpression(path) {
+                    const callee = path.node.callee;
+                    const { line, column } = path.node.loc?.start || { line: 0, column: 0 };
+                    // 1. eval(...)
+                    if (callee.type === "Identifier" && callee.name === "eval") {
+                        issues.push({
+                            ruleId: "sec-eval-dangerous",
+                            title: "禁止使用 eval()",
+                            description: "eval() 存在代码注入风险，应使用 JSON.parse 或安全的序列化方案",
+                            severity: "critical",
+                            file: context.filePath,
+                            line,
+                            column,
+                            source: "eval(...)",
+                        });
+                    }
+                    // 2. new Function(...)
+                    if (callee.type === "NewExpression" ||
+                        (callee.type === "Identifier" && callee.name === "Function")) {
+                        // 检查是否是 new Function()
+                        const parent = path.parentPath?.node;
+                        if (parent?.type === "NewExpression") {
+                            issues.push({
+                                ruleId: "sec-eval-dangerous",
+                                title: "禁止使用 new Function()",
+                                description: "new Function() 等同于 eval，存在代码注入风险",
+                                severity: "critical",
+                                file: context.filePath,
+                                line,
+                                column,
+                                source: "new Function(...)",
+                            });
+                        }
+                    }
+                    // 3. setTimeout(string, delay)
+                    if (callee.type === "Identifier" && callee.name === "setTimeout") {
+                        const firstArg = path.node.arguments[0];
+                        if (firstArg?.type === "StringLiteral") {
+                            issues.push({
+                                ruleId: "sec-eval-dangerous",
+                                title: "禁止 setTimeout 传入字符串",
+                                description: 'setTimeout("string", delay) 会被 eval 执行，存在注入风险',
+                                severity: "critical",
+                                file: context.filePath,
+                                line,
+                                column,
+                                source: `setTimeout("${firstArg.value}", ...)`,
+                            });
+                        }
+                    }
+                    // 4. setInterval(string, delay)
+                    if (callee.type === "Identifier" && callee.name === "setInterval") {
+                        const firstArg = path.node.arguments[0];
+                        if (firstArg?.type === "StringLiteral") {
+                            issues.push({
+                                ruleId: "sec-eval-dangerous",
+                                title: "禁止 setInterval 传入字符串",
+                                description: 'setInterval("string", delay) 会被 eval 执行，存在注入风险',
+                                severity: "critical",
+                                file: context.filePath,
+                                line,
+                                column,
+                                source: `setInterval("${firstArg.value}", ...)`,
+                            });
+                        }
+                    }
+                },
+            });
+            return issues;
+        },
+    },
+    {
+        id: "sec-url-validation",
+        name: "URL 参数验证",
+        description: "使用 window.open, location.href 时应对 URL 做白名单校验",
+        severity: "warning",
+        category: "security",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/sec-url-validation.md",
+        execute(context) {
+            const issues = [];
+            const ast = context.utils.parseAST(context.source, {
+                ext: (0, common_js_1.getFileExt)(context.filePath),
+            });
+            if (!ast)
+                return issues;
+            (0, traverse_1.default)(ast, {
+                // window.open(variable, ...)
+                CallExpression(path) {
+                    const callee = path.node.callee;
+                    if (callee.type === "MemberExpression") {
+                        const obj = callee.object;
+                        const prop = callee.property;
+                        if (obj.type === "Identifier" &&
+                            obj.name === "window" &&
+                            prop.type === "Identifier" &&
+                            prop.name === "open") {
+                            const firstArg = path.node.arguments[0];
+                            if (firstArg?.type === "Identifier") {
+                                const { line, column } = path.node.loc?.start || { line: 0, column: 0 };
+                                issues.push({
+                                    ruleId: "sec-url-validation",
+                                    title: "window.open 应校验 URL",
+                                    description: `window.open("${firstArg.name}") 应校验目标 URL 是否在白名单中，防止跳转攻击`,
+                                    severity: "warning",
+                                    file: context.filePath,
+                                    line,
+                                    column,
+                                    source: `window.open(${firstArg.name}, ...)`,
+                                });
+                            }
+                        }
+                    }
+                },
+                // location.href = variable
+                AssignmentExpression(path) {
+                    const left = path.node.left;
+                    if (left.type === "MemberExpression") {
+                        const obj = left.object;
+                        const prop = left.property;
+                        if (obj.type === "Identifier" &&
+                            (obj.name === "location" || obj.name === "window") &&
+                            prop.type === "Identifier" &&
+                            prop.name === "href") {
+                            const right = path.node.right;
+                            if (right?.type === "Identifier") {
+                                const { line, column } = path.node.loc?.start || { line: 0, column: 0 };
+                                issues.push({
+                                    ruleId: "sec-url-validation",
+                                    title: "location.href 应校验 URL",
+                                    description: `location.href = ${right.name} 应校验目标 URL 是否在白名单中，防止跳转攻击`,
+                                    severity: "warning",
+                                    file: context.filePath,
+                                    line,
+                                    column,
+                                    source: `location.href = ${right.name}`,
+                                });
+                            }
+                        }
+                    }
+                },
+            });
+            return issues;
+        },
+    },
+    {
+        id: "sec-no-secrets",
+        name: "代码中不得包含密钥",
+        description: "禁止在源码中硬编码 API Key、Token、密码等敏感信息",
+        severity: "critical",
+        category: "security",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/sec-no-secrets.md",
+        execute(context) {
+            const issues = [];
+            const lines = context.source.split("\n");
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+                const lineNum = i + 1;
+                for (const pattern of SECRET_PATTERNS) {
+                    const match = pattern.regex.exec(line);
+                    if (match) {
+                        // 跳过注释行
+                        const trimmed = line.trim();
+                        if (trimmed.startsWith("//") || trimmed.startsWith("*") || trimmed.startsWith("/*"))
+                            continue;
+                        // 跳过测试数据中的假密钥
+                        if (line.includes("test") ||
+                            line.includes("mock") ||
+                            line.includes("example") ||
+                            line.includes("placeholder"))
+                            continue;
+                        issues.push({
+                            ruleId: "sec-no-secrets",
+                            title: `发现硬编码 ${pattern.name}`,
+                            description: `第 ${lineNum} 行疑似包含硬编码 ${pattern.name}，应使用环境变量存储`,
+                            severity: "critical",
+                            file: context.filePath,
+                            line: lineNum,
+                            column: match.index + 1,
+                            source: match[0],
+                        });
+                        // 每行只报一次
+                        break;
+                    }
+                }
+            }
+            return issues;
+        },
+    },
+    {
+        id: "sec-cors-misconfig",
+        name: "CORS 配置检查",
+        description: "CORS 不应配置为 * 在生产环境",
+        severity: "warning",
+        category: "security",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/sec-cors-misconfig.md",
+        execute(context) {
+            const issues = [];
+            const lines = context.source.split("\n");
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+                const lineNum = i + 1;
+                // 检测 Access-Control-Allow-Origin: * 或 setHeader('Access-Control-Allow-Origin', '*')
+                if (/Access-Control-Allow-Origin['"]?\s*[:=,]\s*['"]\*['"]/.test(line) ||
+                    /allowOrigin\s*[:=]\s*['"]\*['"]/.test(line)) {
+                    const match = line.match(/\*/);
+                    if (match) {
+                        issues.push({
+                            ruleId: "sec-cors-misconfig",
+                            title: "CORS 配置为通配符 *",
+                            description: "生产环境不应允许所有来源（*），应指定具体域名",
+                            severity: "warning",
+                            file: context.filePath,
+                            line: lineNum,
+                            column: (match.index || 0) + 1,
+                            source: line.trim(),
+                        });
+                    }
+                }
+            }
+            return issues;
+        },
+    },
+];
+//# sourceMappingURL=security-scanner.js.map

package/dist/scanners/security-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scanner.js","sourceRoot":"","sources":["../../src/scanners/security-scanner.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;AAGH,+DAAuC;AAEvC,iDAA+C;AAE/C,aAAa;AACb,MAAM,eAAe,GAAG;IACpB,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;IAC1E,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1E,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;IAC3D,EAAE,KAAK,EAAE,mCAAmC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE;IAC1F;QACI,KAAK,EAAE,iDAAiD;QACxD,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,iBAAiB;KAC7B;IACD;QACI,KAAK,EAAE,oDAAoD;QAC3D,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,oBAAoB;KAChC;IACD,EAAE,KAAK,EAAE,4CAA4C,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE;CACnG,CAAC;AAEW,QAAA,aAAa,GAAW;IACjC;QACI,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,uCAAuC;QACpD,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,uFAAuF;QAChG,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;gBAC/C,GAAG,EAAE,IAAA,sBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC;aACpC,CAA4B,CAAC;YAE9B,IAAI,CAAC,GAAG;gBAAE,OAAO,MAAM,CAAC;YAExB,IAAA,kBAAQ,EAAC,GAAG,EAAE;gBACV,iCAAiC;gBACjC,oBAAoB,CAAC,IAAI;oBACrB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB;wBAAE,OAAO;oBAE7C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;oBAE3B,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;wBAC1D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;wBACxE,MAAM,CAAC,IAAI,CAAC;4BACR,MAAM,EAAE,mBAAmB;4BAC3B,KAAK,EAAE,kBAAkB;4BACzB,WAAW,EAAE,mDAAmD;4BAChE,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;4BACtB,IAAI;4BACJ,MAAM;4BACN,MAAM,EAAE,iBAAiB;4BACzB,GAAG,EAAE;gCACD,IAAI,EAAE,aAAa;gCACnB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gCACvB,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE;gCAClD,UAAU,EAAE,MAAM;gCAClB,WAAW,EAAE,yCAAyC;6BACzD;yBACJ,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;gBAED,0CAA0C;gBAC1C,gBAAgB,CAAC,IAAI;oBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAChC,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;wBAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC;wBACrC,uBAAuB;wBACvB,IAAI,MAAM,EAAE,IAAI,KAAK,sBAAsB,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;4BACvE,OAAO,CAAC,SAAS;wBACrB,CAAC;oBACL,CAAC;gBACL,CAAC;gBAED,qBAAqB;gBACrB,YAAY,CAAC,IAAI;oBACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBAChC,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,IAAI,QAAQ,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;wBACnF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;wBACxE,MAAM,CAAC,IAAI,CAAC;4BACR,MAAM,EAAE,mBAAmB;4BAC3B,KAAK,EAAE,gCAAgC;4BACvC,WAAW,EAAE,kDAAkD;4BAC/D,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;4BACtB,IAAI;4BACJ,MAAM;4BACN,MAAM,EAAE,+BAA+B;yBAC1C,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;aACJ,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,6CAA6C;QAC1D,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,wFAAwF;QACjG,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;gBAC/C,GAAG,EAAE,IAAA,sBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC;aACpC,CAA4B,CAAC;YAE9B,IAAI,CAAC,GAAG;gBAAE,OAAO,MAAM,CAAC;YAExB,IAAA,kBAAQ,EAAC,GAAG,EAAE;gBACV,cAAc,CAAC,IAAI;oBACf,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;oBAChC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;oBAExE,eAAe;oBACf,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBACzD,MAAM,CAAC,IAAI,CAAC;4BACR,MAAM,EAAE,oBAAoB;4BAC5B,KAAK,EAAE,aAAa;4BACpB,WAAW,EAAE,0CAA0C;4BACvD,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;4BACtB,IAAI;4BACJ,MAAM;4BACN,MAAM,EAAE,WAAW;yBACtB,CAAC,CAAC;oBACP,CAAC;oBAED,uBAAuB;oBACvB,IACI,MAAM,CAAC,IAAI,KAAK,eAAe;wBAC/B,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,EAC9D,CAAC;wBACC,uBAAuB;wBACvB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC;wBACrC,IAAI,MAAM,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;4BACnC,MAAM,CAAC,IAAI,CAAC;gCACR,MAAM,EAAE,oBAAoB;gCAC5B,KAAK,EAAE,qBAAqB;gCAC5B,WAAW,EAAE,kCAAkC;gCAC/C,QAAQ,EAAE,UAAU;gCACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;gCACtB,IAAI;gCACJ,MAAM;gCACN,MAAM,EAAE,mBAAmB;6BAC9B,CAAC,CAAC;wBACP,CAAC;oBACL,CAAC;oBAED,+BAA+B;oBAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;wBACxC,IAAI,QAAQ,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;4BACrC,MAAM,CAAC,IAAI,CAAC;gCACR,MAAM,EAAE,oBAAoB;gCAC5B,KAAK,EAAE,qBAAqB;gCAC5B,WAAW,EAAE,+CAA+C;gCAC5D,QAAQ,EAAE,UAAU;gCACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;gCACtB,IAAI;gCACJ,MAAM;gCACN,MAAM,EAAE,eAAe,QAAQ,CAAC,KAAK,SAAS;6BACjD,CAAC,CAAC;wBACP,CAAC;oBACL,CAAC;oBAED,gCAAgC;oBAChC,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;wBACxC,IAAI,QAAQ,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;4BACrC,MAAM,CAAC,IAAI,CAAC;gCACR,MAAM,EAAE,oBAAoB;gCAC5B,KAAK,EAAE,sBAAsB;gCAC7B,WAAW,EAAE,gDAAgD;gCAC7D,QAAQ,EAAE,UAAU;gCACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;gCACtB,IAAI;gCACJ,MAAM;gCACN,MAAM,EAAE,gBAAgB,QAAQ,CAAC,KAAK,SAAS;6BAClD,CAAC,CAAC;wBACP,CAAC;oBACL,CAAC;gBACL,CAAC;aACJ,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,8CAA8C;QAC3D,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,wFAAwF;QACjG,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;gBAC/C,GAAG,EAAE,IAAA,sBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC;aACpC,CAA4B,CAAC;YAE9B,IAAI,CAAC,GAAG;gBAAE,OAAO,MAAM,CAAC;YAExB,IAAA,kBAAQ,EAAC,GAAG,EAAE;gBACV,6BAA6B;gBAC7B,cAAc,CAAC,IAAI;oBACf,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;oBAChC,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;wBACrC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;wBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;wBAE7B,IACI,GAAG,CAAC,IAAI,KAAK,YAAY;4BACzB,GAAG,CAAC,IAAI,KAAK,QAAQ;4BACrB,IAAI,CAAC,IAAI,KAAK,YAAY;4BAC1B,IAAI,CAAC,IAAI,KAAK,MAAM,EACtB,CAAC;4BACC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;4BACxC,IAAI,QAAQ,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;gCAClC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;gCACxE,MAAM,CAAC,IAAI,CAAC;oCACR,MAAM,EAAE,oBAAoB;oCAC5B,KAAK,EAAE,qBAAqB;oCAC5B,WAAW,EAAE,gBAAgB,QAAQ,CAAC,IAAI,6BAA6B;oCACvE,QAAQ,EAAE,SAAS;oCACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;oCACtB,IAAI;oCACJ,MAAM;oCACN,MAAM,EAAE,eAAe,QAAQ,CAAC,IAAI,QAAQ;iCAC/C,CAAC,CAAC;4BACP,CAAC;wBACL,CAAC;oBACL,CAAC;gBACL,CAAC;gBAED,2BAA2B;gBAC3B,oBAAoB,CAAC,IAAI;oBACrB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;wBACnC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;wBACxB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;wBAE3B,IACI,GAAG,CAAC,IAAI,KAAK,YAAY;4BACzB,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC;4BAClD,IAAI,CAAC,IAAI,KAAK,YAAY;4BAC1B,IAAI,CAAC,IAAI,KAAK,MAAM,EACtB,CAAC;4BACC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;4BAC9B,IAAI,KAAK,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;gCAC/B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;gCACxE,MAAM,CAAC,IAAI,CAAC;oCACR,MAAM,EAAE,oBAAoB;oCAC5B,KAAK,EAAE,uBAAuB;oCAC9B,WAAW,EAAE,mBAAmB,KAAK,CAAC,IAAI,2BAA2B;oCACrE,QAAQ,EAAE,SAAS;oCACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;oCACtB,IAAI;oCACJ,MAAM;oCACN,MAAM,EAAE,mBAAmB,KAAK,CAAC,IAAI,EAAE;iCAC1C,CAAC,CAAC;4BACP,CAAC;wBACL,CAAC;oBACL,CAAC;gBACL,CAAC;aACJ,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,iCAAiC;QAC9C,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,oFAAoF;QAC7F,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEtB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;oBACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACvC,IAAI,KAAK,EAAE,CAAC;wBACR,QAAQ;wBACR,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;wBAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;4BAAE,SAAS;wBAE9F,cAAc;wBACd,IACI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;4BACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;4BACrB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;4BACxB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;4BAE5B,SAAS;wBAEb,MAAM,CAAC,IAAI,CAAC;4BACR,MAAM,EAAE,gBAAgB;4BACxB,KAAK,EAAE,SAAS,OAAO,CAAC,IAAI,EAAE;4BAC9B,WAAW,EAAE,KAAK,OAAO,aAAa,OAAO,CAAC,IAAI,YAAY;4BAC9D,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;4BACtB,IAAI,EAAE,OAAO;4BACb,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;4BACvB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;yBACnB,CAAC,CAAC;wBAEH,SAAS;wBACT,MAAM;oBACV,CAAC;gBACL,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,oBAAoB;QACjC,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,wFAAwF;QACjG,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEtB,oFAAoF;gBACpF,IACI,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC;oBAClE,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,EAC9C,CAAC;oBACC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC/B,IAAI,KAAK,EAAE,CAAC;wBACR,MAAM,CAAC,IAAI,CAAC;4BACR,MAAM,EAAE,oBAAoB;4BAC5B,KAAK,EAAE,eAAe;4BACtB,WAAW,EAAE,yBAAyB;4BACtC,QAAQ,EAAE,SAAS;4BACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;4BACtB,IAAI,EAAE,OAAO;4BACb,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;4BAC9B,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;yBACtB,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;CACJ,CAAC"}

package/dist/scanners/svelte-scanner.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Svelte Scanner
+ * Phase 4: 覆盖全面化 — 现代框架支持
+ *
+ * 规则列表：
+ * 1. svelte-reactive-statement — $: 响应式语句中使用未声明变量
+ * 2. svelte-store-unsubscribe — 订阅 store 但未取消订阅（内存泄漏）
+ * 3. svelte-transition-directive — transition 指令在条件渲染中的问题
+ * 4. svelte-props-mutate — 直接修改 props（Svelte 中 props 是只读的）
+ * 5. svelte-event-modifier — 使用过时的 event modifier（Svelte 5 已弃用）
+ */
+import type { Rule } from "../types.js";
+export declare const svelteRules: Rule[];
+//# sourceMappingURL=svelte-scanner.d.ts.map

package/dist/scanners/svelte-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"svelte-scanner.d.ts","sourceRoot":"","sources":["../../src/scanners/svelte-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAsB,MAAM,YAAY,CAAC;AAE3D,eAAO,MAAM,WAAW,EAAE,IAAI,EAqM7B,CAAC"}

package/dist/scanners/svelte-scanner.js

@@ -0,0 +1,228 @@
+"use strict";
+/**
+ * Svelte Scanner
+ * Phase 4: 覆盖全面化 — 现代框架支持
+ *
+ * 规则列表：
+ * 1. svelte-reactive-statement — $: 响应式语句中使用未声明变量
+ * 2. svelte-store-unsubscribe — 订阅 store 但未取消订阅（内存泄漏）
+ * 3. svelte-transition-directive — transition 指令在条件渲染中的问题
+ * 4. svelte-props-mutate — 直接修改 props（Svelte 中 props 是只读的）
+ * 5. svelte-event-modifier — 使用过时的 event modifier（Svelte 5 已弃用）
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.svelteRules = void 0;
+exports.svelteRules = [
+    {
+        id: "svelte-reactive-statement",
+        name: "响应式语句使用未声明变量",
+        description: "$: 响应式语句中引用了未声明的变量",
+        severity: "critical",
+        category: "component",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/svelte-reactive-statement.md",
+        frameworks: ["svelte"],
+        execute(context) {
+            const issues = [];
+            const source = context.source;
+            // Svelte 响应式语句：$: expr
+            // 简单正则匹配 $: 语句中引用的变量是否在 script 中声明
+            const reactiveRegex = /^\s*\$:\s*(.+)$/gm;
+            let match;
+            while ((match = reactiveRegex.exec(source)) !== null) {
+                const expr = match[1];
+                const line = source.slice(0, match.index).split("\n").length;
+                // 简单检查：如果表达式中引用了一个看起来像变量的标识符
+                // 但 script 中没有 let/const/var 声明它
+                const varMatches = expr.match(/\b[a-zA-Z_]\w*\b/g);
+                if (varMatches) {
+                    for (const varName of varMatches) {
+                        // 跳过常见关键字和内置变量
+                        if (isSvelteBuiltin(varName))
+                            continue;
+                        // 检查是否在 script 中声明
+                        const declarationPattern = new RegExp(`(?:let|const|var|function)\\s+${varName}\\b`, "m");
+                        if (!declarationPattern.test(source)) {
+                            issues.push({
+                                ruleId: "svelte-reactive-statement",
+                                title: `响应式语句引用了未声明变量 '${varName}'`,
+                                description: `\$:${expr.trim()} 中使用了未在 script 中声明的变量 '${varName}'。响应式语句只能引用已声明的变量或 store。`,
+                                severity: "critical",
+                                file: context.filePath,
+                                line,
+                                column: 1,
+                                source: match[0].trim(),
+                            });
+                            break; // 每条响应式语句只报一次
+                        }
+                    }
+                }
+            }
+            return issues;
+        },
+    },
+    {
+        id: "svelte-store-unsubscribe",
+        name: "Store 订阅未取消",
+        description: "subscribe() 返回的 unsubscribe 函数未被调用，导致内存泄漏",
+        severity: "warning",
+        category: "hooks",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/svelte-store-unsubscribe.md",
+        frameworks: ["svelte"],
+        execute(context) {
+            const issues = [];
+            const source = context.source;
+            // 检测 subscribe() 调用
+            const subscribeRegex = /\b(\w+)\.subscribe\s*\(/g;
+            let match;
+            while ((match = subscribeRegex.exec(source)) !== null) {
+                const storeName = match[1];
+                const subscribePos = match.index;
+                const line = source.slice(0, subscribePos).split("\n").length;
+                // 检查后面是否有 unsubscribe 调用
+                const afterSource = source.slice(subscribePos);
+                const unsubscribePattern = new RegExp(`\\b${storeName}\\.unsubscribe\\b|\\bunsubscribe\\s*\\(\\s*${storeName}\\s*\\)`);
+                // 检查是否在 onDestroy 中取消订阅
+                const hasOnDestroy = /onDestroy\s*\(/.test(source);
+                const hasUnsubscribe = unsubscribePattern.test(afterSource);
+                if (!hasUnsubscribe && !hasOnDestroy) {
+                    issues.push({
+                        ruleId: "svelte-store-unsubscribe",
+                        title: `Store '${storeName}' 订阅未取消`,
+                        description: `${storeName}.subscribe() 返回的 unsubscribe 函数未被调用。组件卸载后订阅仍会持续，导致内存泄漏。建议在 onDestroy 中取消订阅或使用 $store 自动订阅语法。`,
+                        severity: "warning",
+                        file: context.filePath,
+                        line,
+                        column: 1,
+                        source: `${storeName}.subscribe(...)`,
+                        fix: {
+                            text: `const unsubscribe = ${storeName}.subscribe(...);\n\nonDestroy(() => {\n  unsubscribe();\n});`,
+                            start: { line, column: 1 },
+                            end: { line, column: 1 },
+                        },
+                    });
+                }
+            }
+            return issues;
+        },
+    },
+    {
+        id: "svelte-props-mutate",
+        name: "直接修改 props",
+        description: "Svelte 中 props 是只读的，直接赋值会产生编译错误",
+        severity: "critical",
+        category: "component",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/svelte-props-mutate.md",
+        frameworks: ["svelte"],
+        execute(context) {
+            const issues = [];
+            const source = context.source;
+            // Svelte 中 props 通过 export let propName 声明
+            // 检测在组件内部对 props 的直接赋值（非响应式语句中）
+            const propRegex = /export\s+let\s+(\w+)/g;
+            const props = [];
+            let match;
+            while ((match = propRegex.exec(source)) !== null) {
+                props.push(match[1]);
+            }
+            for (const prop of props) {
+                // 检测直接赋值（非 $: 响应式语句中的赋值）
+                const assignPattern = new RegExp(`(?<!\\$:)\\s*\\b${prop}\\s*=[^=]`, "g");
+                while ((match = assignPattern.exec(source)) !== null) {
+                    const line = source.slice(0, match.index).split("\n").length;
+                    const lineText = source.split("\n")[line - 1] || "";
+                    // 排除 export let 声明本身和响应式语句
+                    if (lineText.includes("export let"))
+                        continue;
+                    if (lineText.trim().startsWith("$:"))
+                        continue;
+                    issues.push({
+                        ruleId: "svelte-props-mutate",
+                        title: `直接修改了 props '${prop}'`,
+                        description: `Svelte 中 props 是只读的。\'${prop}\' 通过 export let 声明为 prop，不能直接在组件内部赋值。如需双向绑定请使用 bind: 语法，或使用本地状态副本。`,
+                        severity: "critical",
+                        file: context.filePath,
+                        line,
+                        column: lineText.indexOf(prop) + 1,
+                        source: lineText.trim(),
+                    });
+                }
+            }
+            return issues;
+        },
+    },
+    {
+        id: "svelte-event-modifier",
+        name: "使用过时的 event modifier",
+        description: "Svelte 5 已弃用 event modifier（如 |preventDefault），建议使用事件处理函数",
+        severity: "warning",
+        category: "component",
+        defaultEnabled: true,
+        docsUrl: "https://github.com/wzm111/frontend-guardian/blob/main/docs/rules/svelte-event-modifier.md",
+        frameworks: ["svelte"],
+        execute(context) {
+            const issues = [];
+            const source = context.source;
+            // Svelte 事件修饰符：on:click|preventDefault, on:submit|stopPropagation 等
+            const modifierRegex = /on:\w+\|(\w+)/g;
+            let match;
+            while ((match = modifierRegex.exec(source)) !== null) {
+                const modifier = match[1];
+                const line = source.slice(0, match.index).split("\n").length;
+                issues.push({
+                    ruleId: "svelte-event-modifier",
+                    title: `使用了过时的事件修饰符 '|${modifier}'`,
+                    description: `Svelte 5 已弃用事件修饰符语法（on:event|modifier）。建议使用原生事件处理函数调用 event.${modifier}()，或使用动作（action）实现。`,
+                    severity: "warning",
+                    file: context.filePath,
+                    line,
+                    column: 1,
+                    source: match[0],
+                });
+            }
+            return issues;
+        },
+    },
+];
+/** Svelte 内置变量和关键字 */
+function isSvelteBuiltin(name) {
+    const builtins = new Set([
+        "console",
+        "window",
+        "document",
+        "Math",
+        "JSON",
+        "Date",
+        "Array",
+        "Object",
+        "String",
+        "Number",
+        "Boolean",
+        "Promise",
+        "setTimeout",
+        "setInterval",
+        "clearTimeout",
+        "clearInterval",
+        "fetch",
+        "true",
+        "false",
+        "null",
+        "undefined",
+        "if",
+        "else",
+        "for",
+        "while",
+        "return",
+        "function",
+        "const",
+        "let",
+        "var",
+        "new",
+        "typeof",
+        "instanceof",
+    ]);
+    return builtins.has(name);
+}
+//# sourceMappingURL=svelte-scanner.js.map

package/dist/scanners/svelte-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"svelte-scanner.js","sourceRoot":"","sources":["../../src/scanners/svelte-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAIU,QAAA,WAAW,GAAW;IAC/B;QACI,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,oBAAoB;QACjC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,+FAA+F;QACxG,UAAU,EAAE,CAAC,QAAQ,CAAC;QACtB,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAE9B,uBAAuB;YACvB,mCAAmC;YACnC,MAAM,aAAa,GAAG,mBAAmB,CAAC;YAC1C,IAAI,KAAK,CAAC;YAEV,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACnD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBAE7D,6BAA6B;gBAC7B,iCAAiC;gBACjC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBACnD,IAAI,UAAU,EAAE,CAAC;oBACb,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;wBAC/B,eAAe;wBACf,IAAI,eAAe,CAAC,OAAO,CAAC;4BAAE,SAAS;wBAEvC,mBAAmB;wBACnB,MAAM,kBAAkB,GAAG,IAAI,MAAM,CAAC,iCAAiC,OAAO,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC1F,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;4BACnC,MAAM,CAAC,IAAI,CAAC;gCACR,MAAM,EAAE,2BAA2B;gCACnC,KAAK,EAAE,kBAAkB,OAAO,GAAG;gCACnC,WAAW,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE,0BAA0B,OAAO,2BAA2B;gCAC1F,QAAQ,EAAE,UAAU;gCACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;gCACtB,IAAI;gCACJ,MAAM,EAAE,CAAC;gCACT,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;6BAC1B,CAAC,CAAC;4BACH,MAAM,CAAC,cAAc;wBACzB,CAAC;oBACL,CAAC;gBACL,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,0BAA0B;QAC9B,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,2CAA2C;QACxD,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,OAAO;QACjB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,8FAA8F;QACvG,UAAU,EAAE,CAAC,QAAQ,CAAC;QACtB,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAE9B,oBAAoB;YACpB,MAAM,cAAc,GAAG,0BAA0B,CAAC;YAClD,IAAI,KAAK,CAAC;YAEV,OAAO,CAAC,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACpD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3B,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC;gBACjC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBAE9D,yBAAyB;gBACzB,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC/C,MAAM,kBAAkB,GAAG,IAAI,MAAM,CACjC,MAAM,SAAS,8CAA8C,SAAS,SAAS,CAClF,CAAC;gBAEF,wBAAwB;gBACxB,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnD,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAE5D,IAAI,CAAC,cAAc,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnC,MAAM,CAAC,IAAI,CAAC;wBACR,MAAM,EAAE,0BAA0B;wBAClC,KAAK,EAAE,UAAU,SAAS,SAAS;wBACnC,WAAW,EAAE,GAAG,SAAS,8FAA8F;wBACvH,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI;wBACJ,MAAM,EAAE,CAAC;wBACT,MAAM,EAAE,GAAG,SAAS,iBAAiB;wBACrC,GAAG,EAAE;4BACD,IAAI,EAAE,uBAAuB,SAAS,8DAA8D;4BACpG,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE;4BAC1B,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE;yBAC3B;qBACJ,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,iCAAiC;QAC9C,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,yFAAyF;QAClG,UAAU,EAAE,CAAC,QAAQ,CAAC;QACtB,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAE9B,2CAA2C;YAC3C,gCAAgC;YAChC,MAAM,SAAS,GAAG,uBAAuB,CAAC;YAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC;YAEV,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC/C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACvB,yBAAyB;gBACzB,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,mBAAmB,IAAI,WAAW,EAAE,GAAG,CAAC,CAAC;gBAE1E,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBACnD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;oBAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;oBAEpD,2BAA2B;oBAC3B,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;wBAAE,SAAS;oBAC9C,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAE/C,MAAM,CAAC,IAAI,CAAC;wBACR,MAAM,EAAE,qBAAqB;wBAC7B,KAAK,EAAE,gBAAgB,IAAI,GAAG;wBAC9B,WAAW,EAAE,yBAAyB,IAAI,qEAAqE;wBAC/G,QAAQ,EAAE,UAAU;wBACpB,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI;wBACJ,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;wBAClC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE;qBAC1B,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;IAED;QACI,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,2DAA2D;QACxE,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,WAAW;QACrB,cAAc,EAAE,IAAI;QACpB,OAAO,EAAE,2FAA2F;QACpG,UAAU,EAAE,CAAC,QAAQ,CAAC;QACtB,OAAO,CAAC,OAAoB;YACxB,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAE9B,oEAAoE;YACpE,MAAM,aAAa,GAAG,gBAAgB,CAAC;YACvC,IAAI,KAAK,CAAC;YAEV,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBAE7D,MAAM,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,uBAAuB;oBAC/B,KAAK,EAAE,iBAAiB,QAAQ,GAAG;oBACnC,WAAW,EAAE,+DAA+D,QAAQ,qBAAqB;oBACzG,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;oBACtB,IAAI;oBACJ,MAAM,EAAE,CAAC;oBACT,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;iBACnB,CAAC,CAAC;YACP,CAAC;YAED,OAAO,MAAM,CAAC;QAClB,CAAC;KACJ;CACJ,CAAC;AAEF,sBAAsB;AACtB,SAAS,eAAe,CAAC,IAAY;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;QACrB,SAAS;QACT,QAAQ;QACR,UAAU;QACV,MAAM;QACN,MAAM;QACN,MAAM;QACN,OAAO;QACP,QAAQ;QACR,QAAQ;QACR,QAAQ;QACR,SAAS;QACT,SAAS;QACT,YAAY;QACZ,aAAa;QACb,cAAc;QACd,eAAe;QACf,OAAO;QACP,MAAM;QACN,OAAO;QACP,MAAM;QACN,WAAW;QACX,IAAI;QACJ,MAAM;QACN,KAAK;QACL,OAAO;QACP,QAAQ;QACR,UAAU;QACV,OAAO;QACP,KAAK;QACL,KAAK;QACL,KAAK;QACL,QAAQ;QACR,YAAY;KACf,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}