github-issue-tower-defence-management 1.148.5 → 1.148.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +14 -0
- package/bin/domain/usecases/DailySecurityScanUseCase.js +88 -44
- package/bin/domain/usecases/DailySecurityScanUseCase.js.map +1 -1
- package/package.json +1 -1
- package/src/domain/usecases/DailySecurityScanUseCase.test.ts +499 -197
- package/src/domain/usecases/DailySecurityScanUseCase.ts +156 -75
- package/types/domain/usecases/DailySecurityScanUseCase.d.ts +2 -3
- package/types/domain/usecases/DailySecurityScanUseCase.d.ts.map +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,17 @@
|
|
|
1
|
+
## [1.148.7](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/compare/v1.148.6...v1.148.7) (2026-08-09)
|
|
2
|
+
|
|
3
|
+
|
|
4
|
+
### Bug Fixes
|
|
5
|
+
|
|
6
|
+
* **security-scan:** select CISA KEV additions by scanned package versions ([#1481](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/issues/1481)) ([550a788](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/commit/550a788bf940d08c53e3ff5120dc6c589573f731))
|
|
7
|
+
|
|
8
|
+
## [1.148.6](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/compare/v1.148.5...v1.148.6) (2026-08-09)
|
|
9
|
+
|
|
10
|
+
|
|
11
|
+
### Bug Fixes
|
|
12
|
+
|
|
13
|
+
* **security-scan:** fix silent scan failures and issue deduplication ([#1479](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/issues/1479)) ([7cdc714](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/commit/7cdc7149fe1420bfb4581014220e8b70c6043b34))
|
|
14
|
+
|
|
1
15
|
## [1.148.5](https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/compare/v1.148.4...v1.148.5) (2026-08-09)
|
|
2
16
|
|
|
3
17
|
|
|
@@ -20,6 +20,48 @@ const isKevCatalog = (value) => {
|
|
|
20
20
|
return (Array.isArray(record.vulnerabilities) &&
|
|
21
21
|
record.vulnerabilities.every(isKevVulnerability));
|
|
22
22
|
};
|
|
23
|
+
const parseScannerVulnerabilities = (repositoryName, scannerOutput) => {
|
|
24
|
+
let parsed;
|
|
25
|
+
try {
|
|
26
|
+
parsed = JSON.parse(scannerOutput);
|
|
27
|
+
}
|
|
28
|
+
catch (error) {
|
|
29
|
+
console.error(`Unparsable osv-scanner output for ${repositoryName}: ${String(error)}`);
|
|
30
|
+
return [];
|
|
31
|
+
}
|
|
32
|
+
const toRecord = (value) => typeof value === 'object' && value !== null ? { ...value } : {};
|
|
33
|
+
const readArray = (value, key) => {
|
|
34
|
+
const entry = toRecord(value)[key];
|
|
35
|
+
return Array.isArray(entry) ? entry : [];
|
|
36
|
+
};
|
|
37
|
+
const readString = (value, key) => {
|
|
38
|
+
const entry = toRecord(value)[key];
|
|
39
|
+
return typeof entry === 'string' ? entry : '';
|
|
40
|
+
};
|
|
41
|
+
return readArray(parsed, 'results').flatMap((result) => readArray(result, 'packages').flatMap((scannedPackage) => {
|
|
42
|
+
const packageDetail = toRecord(scannedPackage).package;
|
|
43
|
+
return readArray(scannedPackage, 'vulnerabilities').map((vulnerability) => {
|
|
44
|
+
const vulnerabilityId = readString(vulnerability, 'id');
|
|
45
|
+
const aliases = readArray(vulnerability, 'aliases').filter((alias) => typeof alias === 'string');
|
|
46
|
+
return {
|
|
47
|
+
repositoryName,
|
|
48
|
+
ecosystem: readString(packageDetail, 'ecosystem'),
|
|
49
|
+
packageName: readString(packageDetail, 'name'),
|
|
50
|
+
packageVersion: readString(packageDetail, 'version'),
|
|
51
|
+
vulnerabilityId,
|
|
52
|
+
vulnerabilityIdentifiers: [vulnerabilityId, ...aliases],
|
|
53
|
+
summary: readString(vulnerability, 'summary'),
|
|
54
|
+
};
|
|
55
|
+
});
|
|
56
|
+
}));
|
|
57
|
+
};
|
|
58
|
+
const renderScannerFindings = (today, vulnerablePackages) => [
|
|
59
|
+
'## OSV-Scanner findings',
|
|
60
|
+
'',
|
|
61
|
+
`### ${today}`,
|
|
62
|
+
'',
|
|
63
|
+
...vulnerablePackages.map((vulnerablePackage) => `- ${vulnerablePackage.ecosystem} ${vulnerablePackage.packageName} ${vulnerablePackage.packageVersion} ${vulnerablePackage.vulnerabilityIdentifiers.join(' ')} ${vulnerablePackage.summary}`),
|
|
64
|
+
].join('\n');
|
|
23
65
|
const KEV_CATALOG_URL = 'https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json';
|
|
24
66
|
class DailySecurityScanUseCase {
|
|
25
67
|
constructor(localCommandRunner, issueRepository, httpRepository) {
|
|
@@ -34,16 +76,14 @@ class DailySecurityScanUseCase {
|
|
|
34
76
|
}
|
|
35
77
|
const lastTargetDate = input.targetDates[input.targetDates.length - 1];
|
|
36
78
|
const today = lastTargetDate.toISOString().slice(0, 10);
|
|
37
|
-
await this.scanRepositories(input.org, input.manager, today, input.dailySecurityScan);
|
|
38
|
-
await this.reportKevAdditions(input.org, input.manager, lastTargetDate, input.dailySecurityScan);
|
|
79
|
+
const scannedVulnerablePackages = await this.scanRepositories(input.org, input.manager, today, input.dailySecurityScan);
|
|
80
|
+
await this.reportKevAdditions(input.org, input.manager, lastTargetDate, input.dailySecurityScan, scannedVulnerablePackages);
|
|
39
81
|
};
|
|
40
82
|
this.scanRepositories = async (org, manager, today, config) => {
|
|
41
83
|
const { stdout: findOutput } = await this.localCommandRunner.runCommand('find', [
|
|
42
84
|
config.scanBaseDirectory,
|
|
43
|
-
'-mindepth',
|
|
44
|
-
'4',
|
|
45
85
|
'-maxdepth',
|
|
46
|
-
'
|
|
86
|
+
'5',
|
|
47
87
|
'-name',
|
|
48
88
|
'.git',
|
|
49
89
|
'-type',
|
|
@@ -53,6 +93,11 @@ class DailySecurityScanUseCase {
|
|
|
53
93
|
.split('\n')
|
|
54
94
|
.filter((line) => line.length > 0)
|
|
55
95
|
.map((gitDirectory) => gitDirectory.replace(/\/\.git$/, ''));
|
|
96
|
+
if (repositoryDirectories.length === 0) {
|
|
97
|
+
console.error(`No repositories found in scan base directory: ${config.scanBaseDirectory}`);
|
|
98
|
+
return [];
|
|
99
|
+
}
|
|
100
|
+
const scannedVulnerablePackages = [];
|
|
56
101
|
for (const repositoryDirectory of repositoryDirectories) {
|
|
57
102
|
const { stdout: remoteUrl, exitCode: remoteExitCode } = await this.localCommandRunner.runCommand('git', [
|
|
58
103
|
'-C',
|
|
@@ -72,19 +117,42 @@ class DailySecurityScanUseCase {
|
|
|
72
117
|
}
|
|
73
118
|
const repositoryOrg = remoteMatch[1];
|
|
74
119
|
const repositoryName = remoteMatch[2];
|
|
75
|
-
const { stdout: scanOutput, exitCode: scanExitCode } = await this.localCommandRunner.runCommand('osv-scanner', [
|
|
120
|
+
const { stdout: scanOutput, stderr: scanStderr, exitCode: scanExitCode, } = await this.localCommandRunner.runCommand('osv-scanner', [
|
|
76
121
|
'scan',
|
|
77
122
|
'source',
|
|
78
123
|
'-r',
|
|
79
124
|
repositoryDirectory,
|
|
125
|
+
'--format',
|
|
126
|
+
'json',
|
|
80
127
|
]);
|
|
128
|
+
if (scanExitCode === 0) {
|
|
129
|
+
continue;
|
|
130
|
+
}
|
|
81
131
|
if (scanExitCode !== 1) {
|
|
132
|
+
console.error(`osv-scanner failed with exit code ${scanExitCode} for ${repositoryDirectory}: ${scanStderr}`);
|
|
82
133
|
continue;
|
|
83
134
|
}
|
|
84
|
-
|
|
135
|
+
const vulnerablePackages = parseScannerVulnerabilities(repositoryName, scanOutput);
|
|
136
|
+
scannedVulnerablePackages.push(...vulnerablePackages);
|
|
137
|
+
const findingsBody = renderScannerFindings(today, vulnerablePackages);
|
|
138
|
+
const existingIssues = await this.issueRepository.searchIssue({
|
|
139
|
+
owner: repositoryOrg,
|
|
140
|
+
repositoryName,
|
|
141
|
+
type: 'issue',
|
|
142
|
+
state: 'open',
|
|
143
|
+
title: 'Daily security scan findings',
|
|
144
|
+
});
|
|
145
|
+
const existingIssue = existingIssues.find((issue) => issue.title === 'Daily security scan findings');
|
|
146
|
+
if (existingIssue) {
|
|
147
|
+
await this.issueRepository.createCommentByUrl(existingIssue.url, findingsBody);
|
|
148
|
+
}
|
|
149
|
+
else {
|
|
150
|
+
await this.issueRepository.createNewIssue(repositoryOrg, repositoryName, 'Daily security scan findings', findingsBody, [manager], []);
|
|
151
|
+
}
|
|
85
152
|
}
|
|
153
|
+
return scannedVulnerablePackages;
|
|
86
154
|
};
|
|
87
|
-
this.reportKevAdditions = async (org, manager, lastTargetDate, config) => {
|
|
155
|
+
this.reportKevAdditions = async (org, manager, lastTargetDate, config, scannedVulnerablePackages) => {
|
|
88
156
|
if (!config.enableKevNvdReport || !config.kevReportRepo) {
|
|
89
157
|
return;
|
|
90
158
|
}
|
|
@@ -97,46 +165,22 @@ class DailySecurityScanUseCase {
|
|
|
97
165
|
throw new Error(`Unexpected CISA KEV catalog format from ${KEV_CATALOG_URL}`);
|
|
98
166
|
}
|
|
99
167
|
const newKevEntries = parsedKev.vulnerabilities.filter((vulnerability) => vulnerability.dateAdded >= yesterdayYmd);
|
|
100
|
-
const
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
if (
|
|
168
|
+
const affectingKevEntries = newKevEntries
|
|
169
|
+
.map((vulnerability) => ({
|
|
170
|
+
vulnerability,
|
|
171
|
+
affectedPackages: scannedVulnerablePackages.filter((scannedPackage) => scannedPackage.vulnerabilityIdentifiers.includes(vulnerability.cveID)),
|
|
172
|
+
}))
|
|
173
|
+
.filter((entry) => entry.affectedPackages.length > 0);
|
|
174
|
+
if (affectingKevEntries.length === 0) {
|
|
107
175
|
return;
|
|
108
176
|
}
|
|
109
|
-
await this.issueRepository.createNewIssue(org, config.kevReportRepo, `CISA KEV new additions since ${yesterdayYmd}`,
|
|
110
|
-
.map((
|
|
177
|
+
await this.issueRepository.createNewIssue(org, config.kevReportRepo, `CISA KEV new additions since ${yesterdayYmd}`, affectingKevEntries
|
|
178
|
+
.map((entry) => [
|
|
179
|
+
`- ${entry.vulnerability.dateAdded} ${entry.vulnerability.cveID} ${entry.vulnerability.vulnerabilityName}`,
|
|
180
|
+
...entry.affectedPackages.map((affectedPackage) => ` - ${affectedPackage.repositoryName} ${affectedPackage.ecosystem} ${affectedPackage.packageName} ${affectedPackage.packageVersion}`),
|
|
181
|
+
].join('\n'))
|
|
111
182
|
.join('\n'), [manager], []);
|
|
112
183
|
};
|
|
113
|
-
this.isProductPresentInScannedWorkspace = async (scanBaseDirectory, product) => {
|
|
114
|
-
const { stdout: findOutput } = await this.localCommandRunner.runCommand('find', [scanBaseDirectory, '-maxdepth', '3', '-name', '.git', '-type', 'd']);
|
|
115
|
-
const repositoryDirectories = findOutput
|
|
116
|
-
.split('\n')
|
|
117
|
-
.filter((line) => line.length > 0)
|
|
118
|
-
.map((gitDirectory) => gitDirectory.replace(/\/\.git$/, ''));
|
|
119
|
-
for (const repositoryDirectory of repositoryDirectories) {
|
|
120
|
-
const { stderr, exitCode } = await this.localCommandRunner.runCommand('git', [
|
|
121
|
-
'-C',
|
|
122
|
-
repositoryDirectory,
|
|
123
|
-
'grep',
|
|
124
|
-
'-I',
|
|
125
|
-
'-i',
|
|
126
|
-
'-q',
|
|
127
|
-
'-F',
|
|
128
|
-
'-e',
|
|
129
|
-
product,
|
|
130
|
-
]);
|
|
131
|
-
if (exitCode === 0) {
|
|
132
|
-
return true;
|
|
133
|
-
}
|
|
134
|
-
if (exitCode !== 1) {
|
|
135
|
-
console.error(`Failed to search ${repositoryDirectory} for ${product}: ${stderr}`);
|
|
136
|
-
}
|
|
137
|
-
}
|
|
138
|
-
return false;
|
|
139
|
-
};
|
|
140
184
|
}
|
|
141
185
|
}
|
|
142
186
|
exports.DailySecurityScanUseCase = DailySecurityScanUseCase;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"DailySecurityScanUseCase.js","sourceRoot":"","sources":["../../../src/domain/usecases/DailySecurityScanUseCase.ts"],"names":[],"mappings":";;;AAwBA,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAA6B,EAAE;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IACrD,OAAO,CACL,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAChC,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QACxC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ;QAC5C,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CACrC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAuB,EAAE;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IACrD,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,kBAAkB,CAAC,CACjD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,eAAe,GACnB,qFAAqF,CAAC;AAExF,MAAa,wBAAwB;IACnC,YACW,kBAAsC,EACtC,
|
|
1
|
+
{"version":3,"file":"DailySecurityScanUseCase.js","sourceRoot":"","sources":["../../../src/domain/usecases/DailySecurityScanUseCase.ts"],"names":[],"mappings":";;;AAwBA,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAA6B,EAAE;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IACrD,OAAO,CACL,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAChC,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QACxC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ;QAC5C,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CACrC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAuB,EAAE;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IACrD,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,kBAAkB,CAAC,CACjD,CAAC;AACJ,CAAC,CAAC;AAYF,MAAM,2BAA2B,GAAG,CAClC,cAAsB,EACtB,aAAqB,EACO,EAAE;IAC9B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CACX,qCAAqC,cAAc,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CACxE,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAA2B,EAAE,CAC3D,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,GAAW,EAAa,EAAE;QAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,KAAc,EAAE,GAAW,EAAU,EAAE;QACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,CAAC,CAAC;IACF,OAAO,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACrD,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;QACvD,MAAM,aAAa,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC;QACvD,OAAO,SAAS,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC,GAAG,CACrD,CAAC,aAAa,EAAE,EAAE;YAChB,MAAM,eAAe,GAAG,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,SAAS,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,MAAM,CACxD,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CACtD,CAAC;YACF,OAAO;gBACL,cAAc;gBACd,SAAS,EAAE,UAAU,CAAC,aAAa,EAAE,WAAW,CAAC;gBACjD,WAAW,EAAE,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC;gBAC9C,cAAc,EAAE,UAAU,CAAC,aAAa,EAAE,SAAS,CAAC;gBACpD,eAAe;gBACf,wBAAwB,EAAE,CAAC,eAAe,EAAE,GAAG,OAAO,CAAC;gBACvD,OAAO,EAAE,UAAU,CAAC,aAAa,EAAE,SAAS,CAAC;aAC9C,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,KAAa,EACb,kBAA8C,EACtC,EAAE,CACV;IACE,yBAAyB;IACzB,EAAE;IACF,OAAO,KAAK,EAAE;IACd,EAAE;IACF,GAAG,kBAAkB,CAAC,GAAG,CACvB,CAAC,iBAAiB,EAAE,EAAE,CACpB,KAAK,iBAAiB,CAAC,SAAS,IAAI,iBAAiB,CAAC,WAAW,IAAI,iBAAiB,CAAC,cAAc,IAAI,iBAAiB,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAC/L;CACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,MAAM,eAAe,GACnB,qFAAqF,CAAC;AAExF,MAAa,wBAAwB;IACnC,YACW,kBAAsC,EACtC,eAGR,EACQ,cAA8B;QAL9B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,oBAAe,GAAf,eAAe,CAGvB;QACQ,mBAAc,GAAd,cAAc,CAAgB;QAGzC,QAAG,GAAG,KAAK,EAAE,KAKZ,EAAiB,EAAE;YAClB,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CACtC,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,iBAAiB,CAAC,aAAa;gBAClE,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,CACnC,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACvE,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAExD,MAAM,yBAAyB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC3D,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,OAAO,EACb,KAAK,EACL,KAAK,CAAC,iBAAiB,CACxB,CAAC;YAEF,MAAM,IAAI,CAAC,kBAAkB,CAC3B,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,OAAO,EACb,cAAc,EACd,KAAK,CAAC,iBAAiB,EACvB,yBAAyB,CAC1B,CAAC;QACJ,CAAC,CAAC;QAEM,qBAAgB,GAAG,KAAK,EAC9B,GAAW,EACX,OAAuB,EACvB,KAAa,EACb,MAA+B,EACM,EAAE;YACvC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CACrE,MAAM,EACN;gBACE,MAAM,CAAC,iBAAiB;gBACxB,WAAW;gBACX,GAAG;gBACH,OAAO;gBACP,MAAM;gBACN,OAAO;gBACP,GAAG;aACJ,CACF,CAAC;YAEF,MAAM,qBAAqB,GAAG,UAAU;iBACrC,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;iBACjC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;YAE/D,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,KAAK,CACX,iDAAiD,MAAM,CAAC,iBAAiB,EAAE,CAC5E,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,yBAAyB,GAA+B,EAAE,CAAC;YACjE,KAAK,MAAM,mBAAmB,IAAI,qBAAqB,EAAE,CAAC;gBACxD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,GACnD,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,KAAK,EAAE;oBAC9C,IAAI;oBACJ,mBAAmB;oBACnB,QAAQ;oBACR,SAAS;oBACT,QAAQ;iBACT,CAAC,CAAC;gBACL,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;oBACzB,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,SAAS;qBAC1B,IAAI,EAAE;qBACN,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBAC7C,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC3C,SAAS;gBACX,CAAC;gBACD,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;gBACrC,MAAM,cAAc,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;gBAEtC,MAAM,EACJ,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,YAAY,GACvB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,aAAa,EAAE;oBAC1D,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,mBAAmB;oBACnB,UAAU;oBACV,MAAM;iBACP,CAAC,CAAC;gBACH,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;oBACvB,SAAS;gBACX,CAAC;gBACD,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,KAAK,CACX,qCAAqC,YAAY,QAAQ,mBAAmB,KAAK,UAAU,EAAE,CAC9F,CAAC;oBACF,SAAS;gBACX,CAAC;gBAED,MAAM,kBAAkB,GAAG,2BAA2B,CACpD,cAAc,EACd,UAAU,CACX,CAAC;gBACF,yBAAyB,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC;gBAEtD,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;gBACtE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC;oBAC5D,KAAK,EAAE,aAAa;oBACpB,cAAc;oBACd,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,MAAM;oBACb,KAAK,EAAE,8BAA8B;iBACtC,CAAC,CAAC;gBACH,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CACvC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,8BAA8B,CAC1D,CAAC;gBACF,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAC3C,aAAa,CAAC,GAAG,EACjB,YAAY,CACb,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CACvC,aAAa,EACb,cAAc,EACd,8BAA8B,EAC9B,YAAY,EACZ,CAAC,OAAO,CAAC,EACT,EAAE,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,yBAAyB,CAAC;QACnC,CAAC,CAAC;QAEM,uBAAkB,GAAG,KAAK,EAChC,GAAW,EACX,OAAuB,EACvB,cAAoB,EACpB,MAA+B,EAC/B,yBAAqD,EACtC,EAAE;YACjB,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBACxD,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC;YAC3C,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;YACjD,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAE1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAC/D,MAAM,SAAS,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,2CAA2C,eAAe,EAAE,CAC7D,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAAG,SAAS,CAAC,eAAe,CAAC,MAAM,CACpD,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,IAAI,YAAY,CAC3D,CAAC;YACF,MAAM,mBAAmB,GAAG,aAAa;iBACtC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBACvB,aAAa;gBACb,gBAAgB,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE,CACpE,cAAc,CAAC,wBAAwB,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CACtE;aACF,CAAC,CAAC;iBACF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxD,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CACvC,GAAG,EACH,MAAM,CAAC,aAAa,EACpB,gCAAgC,YAAY,EAAE,EAC9C,mBAAmB;iBAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb;gBACE,KAAK,KAAK,CAAC,aAAa,CAAC,SAAS,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,CAAC,iBAAiB,EAAE;gBAC1G,GAAG,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAC3B,CAAC,eAAe,EAAE,EAAE,CAClB,OAAO,eAAe,CAAC,cAAc,IAAI,eAAe,CAAC,SAAS,IAAI,eAAe,CAAC,WAAW,IAAI,eAAe,CAAC,cAAc,EAAE,CACxI;aACF,CAAC,IAAI,CAAC,IAAI,CAAC,CACb;iBACA,IAAI,CAAC,IAAI,CAAC,EACb,CAAC,OAAO,CAAC,EACT,EAAE,CACH,CAAC;QACJ,CAAC,CAAC;IA5MC,CAAC;CA6ML;AArND,4DAqNC"}
|