hex-audit 0.4.0

package/dashboard/postcss.config.cjs

@@ -0,0 +1,6 @@
+module.exports = {
+  plugins: {
+    tailwindcss: {},
+    autoprefixer: {},
+  },
+};

package/dashboard/tailwind.config.ts

@@ -0,0 +1,79 @@
+import type { Config } from 'tailwindcss';
+
+const config: Config = {
+  content: [
+    './app/**/*.{js,ts,jsx,tsx,mdx}',
+    './components/**/*.{js,ts,jsx,tsx,mdx}',
+  ],
+  darkMode: ['selector', '[data-theme="dark"]'],
+  theme: {
+    extend: {
+      fontFamily: {
+        sans: ['var(--font-sans)'],
+        mono: ['var(--font-mono)'],
+      },
+      colors: {
+        surface: {
+          0: 'var(--surface-0)',
+          1: 'var(--surface-1)',
+          2: 'var(--surface-2)',
+          3: 'var(--surface-3)',
+        },
+        border: {
+          subtle: 'var(--border-subtle)',
+          default: 'var(--border-default)',
+          emphasis: 'var(--border-emphasis)',
+        },
+        text: {
+          primary: 'var(--text-primary)',
+          secondary: 'var(--text-secondary)',
+          tertiary: 'var(--text-tertiary)',
+        },
+        accent: {
+          DEFAULT: 'var(--accent)',
+          subtle: 'var(--accent-subtle)',
+          secondary: 'var(--accent-secondary)',
+          warm: 'var(--accent-warm)',
+        },
+        severity: {
+          critical: 'var(--critical)',
+          high: 'var(--high)',
+          medium: 'var(--medium)',
+          low: 'var(--low)',
+          info: 'var(--info)',
+        },
+        success: 'var(--success)',
+        neutral: 'var(--neutral)',
+      },
+      spacing: {
+        'sp-1': 'var(--space-1)',
+        'sp-2': 'var(--space-2)',
+        'sp-3': 'var(--space-3)',
+        'sp-4': 'var(--space-4)',
+        'sp-5': 'var(--space-5)',
+        'sp-6': 'var(--space-6)',
+        'sp-8': 'var(--space-8)',
+      },
+      borderRadius: {
+        sm: 'var(--radius-sm)',
+        md: 'var(--radius-md)',
+        lg: 'var(--radius-lg)',
+      },
+      boxShadow: {
+        sm: 'var(--shadow-sm)',
+        md: 'var(--shadow-md)',
+        lg: 'var(--shadow-lg)',
+      },
+      fontSize: {
+        display: ['28px', { lineHeight: '1.2', fontWeight: '600' }],
+        title:   ['20px', { lineHeight: '1.3', fontWeight: '600' }],
+        heading: ['15px', { lineHeight: '1.4', fontWeight: '500' }],
+        body:    ['14px', { lineHeight: '1.55', fontWeight: '400' }],
+        caption: ['12px', { lineHeight: '1.4', fontWeight: '400' }],
+      },
+    },
+  },
+  plugins: [require('@tailwindcss/typography')],
+};
+
+export default config;

package/dashboard/tsconfig.json

@@ -0,0 +1,21 @@
+{
+  "compilerOptions": {
+    "target": "ES2017",
+    "lib": ["dom", "dom.iterable", "esnext"],
+    "allowJs": true,
+    "skipLibCheck": true,
+    "strict": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "jsx": "preserve",
+    "incremental": true,
+    "plugins": [{ "name": "next" }],
+    "paths": { "@/*": ["./*"] }
+  },
+  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts"],
+  "exclude": ["node_modules"]
+}

package/dist/analysis/access-control.d.ts

@@ -0,0 +1,24 @@
+import type { ParsedContract } from '../parsers/solidity-parser.js';
+import type { SlitherFunctionSummary } from '../parsers/slither.js';
+import type { AccessFunction, Role } from '../types/index.js';
+/**
+ * Extract Tier 1 raw facts: functions with their visibility and modifiers.
+ */
+export declare function extractFunctionFacts(contracts: ParsedContract[], fileMap: Map<string, string>): AccessFunction[];
+/**
+ * Merge inherited functions from Slither function-summary into the function list.
+ * Slither's function-summary includes ALL functions per contract (including inherited).
+ * We deduplicate: overridden functions keep the child contract's version,
+ * non-overridden inherited functions get tagged with inherited_from.
+ */
+export declare function mergeInheritedFunctions(functions: AccessFunction[], slitherSummary: SlitherFunctionSummary[], contracts: ParsedContract[], fileMap: Map<string, string>): AccessFunction[];
+/**
+ * Merge inherited functions by walking the inheritance chain from flattened source AST.
+ * Fallback for when Slither is not available.
+ */
+export declare function mergeInheritedFromFlatten(functions: AccessFunction[], flatParsedContracts: ParsedContract[], targetContract: ParsedContract, filePath: string): AccessFunction[];
+/**
+ * Tier 2: Interpret roles from modifiers, inheritance, and heuristics.
+ */
+export declare function interpretRoles(functions: AccessFunction[], contracts: ParsedContract[], slitherSummary: SlitherFunctionSummary[] | null): Role[];
+//# sourceMappingURL=access-control.d.ts.map

package/dist/analysis/access-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.d.ts","sourceRoot":"","sources":["../../src/analysis/access-control.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,IAAI,EAAmB,MAAM,mBAAmB,CAAC;AAmD/E;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,cAAc,EAAE,EAC3B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,cAAc,EAAE,CA4BlB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,cAAc,EAAE,EAC3B,cAAc,EAAE,sBAAsB,EAAE,EACxC,SAAS,EAAE,cAAc,EAAE,EAC3B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,cAAc,EAAE,CAuFlB;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,cAAc,EAAE,EAC3B,mBAAmB,EAAE,cAAc,EAAE,EACrC,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,MAAM,GACf,cAAc,EAAE,CAmElB;AAyBD;;GAEG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,cAAc,EAAE,EAC3B,SAAS,EAAE,cAAc,EAAE,EAC3B,cAAc,EAAE,sBAAsB,EAAE,GAAG,IAAI,GAC9C,IAAI,EAAE,CAgHR"}

package/dist/analysis/access-control.js

@@ -0,0 +1,378 @@
+// Modifiers that read protocol state rather than caller identity.
+// Surfaced separately so auditors can find them, but not flagged as access control.
+const STATE_CHECK_MODIFIERS = new Set([
+    'whenNotPaused', 'whenPaused', 'initializer', 'reinitializer',
+    'onlyInitializing', 'whileActive', 'onlyActive', 'whileInactive',
+]);
+// Modifiers that protect call patterns rather than identity (reentrancy etc.).
+const GUARD_MODIFIERS = new Set([
+    'nonReentrant', 'nonreentrant', 'noReentrant',
+]);
+// Known OpenZeppelin access control patterns
+const OZ_ACCESS_PATTERNS = {
+    Ownable: { role: 'owner', description: 'Contract deployer / admin (OpenZeppelin Ownable)' },
+    Ownable2Step: { role: 'owner', description: 'Contract admin with two-step transfer (OpenZeppelin Ownable2Step)' },
+    AccessControl: { role: 'admin', description: 'Role-based access control (OpenZeppelin AccessControl)' },
+    AccessControlEnumerable: { role: 'admin', description: 'Enumerable role-based access (OpenZeppelin AccessControlEnumerable)' },
+};
+// Known access-control modifiers
+const KNOWN_ACCESS_MODIFIERS = new Set([
+    'onlyOwner', 'onlyAdmin', 'onlyRole', 'onlyGovernance', 'onlyGuardian',
+    'onlyOperator', 'onlyMinter', 'onlyPauser', 'onlyKeeper',
+    'onlyAuthorized', 'onlyManager',
+]);
+// Non-access-control modifiers (should not be treated as access control gates).
+// Kept for the existing modifier-skip behaviour in `interpretRoles`; the
+// classification of state-check vs guard is done via STATE_CHECK_MODIFIERS /
+// GUARD_MODIFIERS above so we can tell them apart in the role schema.
+const NON_ACCESS_MODIFIERS = new Set([
+    ...STATE_CHECK_MODIFIERS,
+    ...GUARD_MODIFIERS,
+]);
+function classifyModifier(modifier, isOzBacked) {
+    if (isOzBacked)
+        return { kind: 'access_control', isLikelyAccessControl: true };
+    if (KNOWN_ACCESS_MODIFIERS.has(modifier))
+        return { kind: 'access_control', isLikelyAccessControl: true };
+    if (GUARD_MODIFIERS.has(modifier))
+        return { kind: 'guard', isLikelyAccessControl: false };
+    if (STATE_CHECK_MODIFIERS.has(modifier))
+        return { kind: 'state_check', isLikelyAccessControl: false };
+    // Naming heuristic: `only<X>` strongly implies caller identity, treat as access control
+    // but keep confidence low (warnings already flag this in interpretRoles).
+    if (/^only[A-Z]/.test(modifier))
+        return { kind: 'access_control', isLikelyAccessControl: true };
+    return { kind: 'unknown', isLikelyAccessControl: false };
+}
+/**
+ * Extract Tier 1 raw facts: functions with their visibility and modifiers.
+ */
+export function extractFunctionFacts(contracts, fileMap) {
+    const functions = [];
+    for (const contract of contracts) {
+        // Skip interface contracts — they're just signatures, not implementations
+        if (contract.type === 'interface')
+            continue;
+        const file = fileMap.get(contract.name) ?? '';
+        for (const func of contract.functions) {
+            if (func.isConstructor || func.isFallback || func.isReceive)
+                continue;
+            functions.push({
+                contract: contract.name,
+                function: func.name,
+                visibility: func.visibility === 'default' ? 'internal' : func.visibility,
+                state_mutability: func.stateMutability ?? null,
+                modifiers: func.modifiers,
+                evidence: {
+                    file,
+                    line_start: func.lineStart,
+                    line_end: func.lineEnd,
+                },
+            });
+        }
+    }
+    return functions;
+}
+/**
+ * Merge inherited functions from Slither function-summary into the function list.
+ * Slither's function-summary includes ALL functions per contract (including inherited).
+ * We deduplicate: overridden functions keep the child contract's version,
+ * non-overridden inherited functions get tagged with inherited_from.
+ */
+export function mergeInheritedFunctions(functions, slitherSummary, contracts, fileMap) {
+    // Build set of scope contract names
+    const scopeContracts = new Set(contracts.map((c) => c.name));
+    // Build set of already-known function keys (contract.function)
+    const knownKeys = new Set(functions.map((f) => `${f.contract}.${f.function}`));
+    // Build inheritance map: child -> parents[]
+    const inheritanceMap = new Map();
+    for (const contract of contracts) {
+        if (contract.baseContracts.length > 0) {
+            inheritanceMap.set(contract.name, contract.baseContracts);
+        }
+    }
+    // Compute inheritance depth for each contract's ancestors
+    // depth 1 = direct parent, 2 = grandparent, etc.
+    function computeDepths(contractName) {
+        const depths = new Map();
+        const visited = new Set();
+        function walk(name, depth) {
+            if (visited.has(name))
+                return;
+            visited.add(name);
+            if (name !== contractName)
+                depths.set(name, depth);
+            for (const base of inheritanceMap.get(name) ?? []) {
+                walk(base, depth + 1);
+            }
+        }
+        walk(contractName, 0);
+        return depths;
+    }
+    // Group Slither summaries by contract
+    const slitherByContract = new Map();
+    for (const s of slitherSummary) {
+        if (!scopeContracts.has(s.contract))
+            continue;
+        if (!slitherByContract.has(s.contract))
+            slitherByContract.set(s.contract, []);
+        slitherByContract.get(s.contract).push(s);
+    }
+    const inherited = [];
+    for (const [contractName, summaries] of slitherByContract) {
+        const parents = inheritanceMap.get(contractName) ?? [];
+        if (parents.length === 0)
+            continue;
+        const depthMap = computeDepths(contractName);
+        for (const summary of summaries) {
+            // Skip constructors and special functions
+            const funcName = summary.function;
+            if (funcName === 'constructor' || funcName === 'fallback' || funcName === 'receive' || funcName === '')
+                continue;
+            // Skip if we already know about this function from AST parsing
+            if (knownKeys.has(`${contractName}.${funcName}`))
+                continue;
+            // Skip slitherConstructor naming patterns
+            if (funcName.startsWith('slither'))
+                continue;
+            // Map Slither visibility to our enum
+            const visibility = mapSlitherVisibility(summary.visibility);
+            if (!visibility)
+                continue;
+            // Determine which parent this function comes from
+            const parentContract = findParentContract(funcName, parents, slitherSummary);
+            const key = `${contractName}.${funcName}`;
+            if (knownKeys.has(key))
+                continue;
+            knownKeys.add(key);
+            inherited.push({
+                contract: contractName,
+                function: funcName,
+                visibility,
+                state_mutability: null,
+                modifiers: summary.modifiers.filter((m) => m !== '[]' && m !== ''),
+                evidence: {
+                    file: fileMap.get(contractName) ?? '',
+                    line_start: 0,
+                    line_end: 0,
+                },
+                inherited_from: parentContract ?? undefined,
+                inheritance_depth: parentContract ? (depthMap.get(parentContract) ?? 1) : 1,
+            });
+        }
+    }
+    return [...functions, ...inherited];
+}
+/**
+ * Merge inherited functions by walking the inheritance chain from flattened source AST.
+ * Fallback for when Slither is not available.
+ */
+export function mergeInheritedFromFlatten(functions, flatParsedContracts, targetContract, filePath) {
+    const contractMap = new Map();
+    for (const c of flatParsedContracts)
+        contractMap.set(c.name, c);
+    const target = contractMap.get(targetContract.name);
+    if (!target || target.baseContracts.length === 0)
+        return functions;
+    // Build set of already-known function keys for this contract
+    const knownKeys = new Set(functions
+        .filter((f) => f.contract === targetContract.name)
+        .map((f) => f.function));
+    const visited = new Set();
+    const inherited = [];
+    // Compute inheritance depth for each ancestor (1 = direct parent, 2 = grandparent, etc.)
+    const depthMap = new Map();
+    function computeDepth(name, depth) {
+        if (visited.has(name))
+            return;
+        visited.add(name);
+        const contract = contractMap.get(name);
+        if (!contract)
+            return;
+        if (name !== targetContract.name) {
+            depthMap.set(name, depth);
+        }
+        for (const base of contract.baseContracts) {
+            computeDepth(base, depth + 1);
+        }
+    }
+    computeDepth(targetContract.name, 0);
+    // Walk again to collect inherited functions (reset visited)
+    visited.clear();
+    function walk(name) {
+        if (visited.has(name))
+            return;
+        visited.add(name);
+        const contract = contractMap.get(name);
+        if (!contract)
+            return;
+        // Walk parents first so child overrides take precedence
+        for (const base of contract.baseContracts)
+            walk(base);
+        // Skip the target contract itself — its functions are already in Tier 1
+        if (name === targetContract.name)
+            return;
+        for (const func of contract.functions) {
+            if (func.isConstructor || func.isFallback || func.isReceive)
+                continue;
+            if (knownKeys.has(func.name))
+                continue;
+            knownKeys.add(func.name);
+            inherited.push({
+                contract: targetContract.name,
+                function: func.name,
+                visibility: func.visibility === 'default' ? 'internal' : func.visibility,
+                state_mutability: func.stateMutability ?? null,
+                modifiers: func.modifiers,
+                evidence: { file: filePath, line_start: 0, line_end: 0 },
+                inherited_from: name,
+                inheritance_depth: depthMap.get(name) ?? 1,
+            });
+        }
+    }
+    walk(targetContract.name);
+    return [...functions, ...inherited];
+}
+function mapSlitherVisibility(vis) {
+    const normalized = vis.toLowerCase().trim();
+    if (normalized === 'external')
+        return 'external';
+    if (normalized === 'public')
+        return 'public';
+    if (normalized === 'internal')
+        return 'internal';
+    if (normalized === 'private')
+        return 'private';
+    return null;
+}
+function findParentContract(funcName, parents, allSummaries) {
+    for (const parent of parents) {
+        const parentSummary = allSummaries.find((s) => s.contract === parent && s.function === funcName);
+        if (parentSummary)
+            return parent;
+    }
+    return parents[0] ?? null;
+}
+/**
+ * Tier 2: Interpret roles from modifiers, inheritance, and heuristics.
+ */
+export function interpretRoles(functions, contracts, slitherSummary) {
+    const roles = [];
+    const modifierToFunctions = new Map();
+    // Group functions by their access-control modifiers
+    for (const func of functions) {
+        for (const mod of func.modifiers) {
+            if (NON_ACCESS_MODIFIERS.has(mod))
+                continue;
+            if (!modifierToFunctions.has(mod))
+                modifierToFunctions.set(mod, []);
+            modifierToFunctions.get(mod).push({
+                contract: func.contract,
+                function: func.function,
+            });
+        }
+    }
+    // Detect OZ patterns from inheritance
+    const ozDetected = new Set();
+    for (const contract of contracts) {
+        for (const base of contract.baseContracts) {
+            const pattern = OZ_ACCESS_PATTERNS[base];
+            if (pattern)
+                ozDetected.add(base);
+        }
+    }
+    // Build roles from modifier groupings
+    for (const [modifier, funcs] of modifierToFunctions) {
+        const isKnown = KNOWN_ACCESS_MODIFIERS.has(modifier);
+        const roleName = extractRoleName(modifier);
+        // Determine confidence based on source
+        let confidence = 'low';
+        let derivedFrom = 'heuristic';
+        let description = `Role inferred from modifier name '${modifier}'`;
+        const warnings = [];
+        let isOzBacked = false;
+        // Check if this modifier comes from a known OZ pattern
+        if (modifier === 'onlyOwner' && ozDetected.has('Ownable')) {
+            confidence = 'high';
+            derivedFrom = slitherSummary ? 'slither' : 'solc-ast';
+            description = 'Contract deployer / admin (OpenZeppelin Ownable)';
+            isOzBacked = true;
+        }
+        else if (modifier === 'onlyOwner' && ozDetected.has('Ownable2Step')) {
+            confidence = 'high';
+            derivedFrom = slitherSummary ? 'slither' : 'solc-ast';
+            description = 'Contract admin with two-step transfer (OpenZeppelin Ownable2Step)';
+            isOzBacked = true;
+        }
+        else if (modifier === 'onlyRole') {
+            confidence = 'medium';
+            derivedFrom = 'solc-ast';
+            description = 'Role-based access (OpenZeppelin AccessControl)';
+            isOzBacked = true;
+        }
+        else if (isKnown) {
+            confidence = 'low';
+            warnings.push('Custom modifier — role semantics inferred from name only');
+            warnings.push('Verify modifier body to confirm actual access check');
+        }
+        else {
+            confidence = 'low';
+            warnings.push(`Unknown modifier '${modifier}' — may not be an access control check`);
+            warnings.push('Verify modifier body to confirm actual access check');
+        }
+        const { kind, isLikelyAccessControl } = classifyModifier(modifier, isOzBacked);
+        if (!isLikelyAccessControl) {
+            warnings.push(`Classified as '${kind}', not access control — hidden by default on the dashboard`);
+        }
+        roles.push({
+            role: roleName,
+            description,
+            confidence,
+            derived_from: derivedFrom,
+            reasoning: `Functions gated by '${modifier}' modifier`,
+            modifier,
+            functions: funcs,
+            warnings,
+            kind,
+            is_likely_access_control: isLikelyAccessControl,
+        });
+    }
+    // Add "anyone" role for unprotected external/public functions
+    const unprotectedFuncs = [];
+    for (const func of functions) {
+        const hasAccessModifier = func.modifiers.some((m) => !NON_ACCESS_MODIFIERS.has(m));
+        if (!hasAccessModifier) {
+            unprotectedFuncs.push({
+                contract: func.contract,
+                function: func.function,
+            });
+        }
+    }
+    if (unprotectedFuncs.length > 0) {
+        roles.push({
+            role: 'anyone',
+            description: 'No access restriction',
+            confidence: 'high',
+            derived_from: 'solc-ast',
+            reasoning: 'External/public functions with no access-control modifiers',
+            modifier: null,
+            functions: unprotectedFuncs,
+            warnings: [],
+            kind: 'access_control',
+            is_likely_access_control: true,
+        });
+    }
+    return roles;
+}
+/**
+ * Extract a human-readable role name from a modifier name.
+ */
+function extractRoleName(modifier) {
+    // Remove "only" prefix if present
+    if (modifier.startsWith('only')) {
+        const rest = modifier.slice(4);
+        return rest.charAt(0).toLowerCase() + rest.slice(1);
+    }
+    return modifier;
+}
+//# sourceMappingURL=access-control.js.map

package/dist/analysis/access-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.js","sourceRoot":"","sources":["../../src/analysis/access-control.ts"],"names":[],"mappings":"AAMA,kEAAkE;AAClE,oFAAoF;AACpF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe;IAC7D,kBAAkB,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe;CACjE,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,cAAc,EAAE,cAAc,EAAE,aAAa;CAC9C,CAAC,CAAC;AAEH,6CAA6C;AAC7C,MAAM,kBAAkB,GAA0D;IAChF,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,kDAAkD,EAAE;IAC3F,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,mEAAmE,EAAE;IACjH,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,wDAAwD,EAAE;IACvG,uBAAuB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,qEAAqE,EAAE;CAC/H,CAAC;AAEF,iCAAiC;AACjC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,cAAc;IACtE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY;IACxD,gBAAgB,EAAE,aAAa;CAChC,CAAC,CAAC;AAEH,gFAAgF;AAChF,yEAAyE;AACzE,6EAA6E;AAC7E,sEAAsE;AACtE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,GAAG,qBAAqB;IACxB,GAAG,eAAe;CACnB,CAAC,CAAC;AAEH,SAAS,gBAAgB,CAAC,QAAgB,EAAE,UAAmB;IAC7D,IAAI,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC/E,IAAI,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;IACzG,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;IAC1F,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;IACtG,wFAAwF;IACxF,0EAA0E;IAC1E,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAChG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAA2B,EAC3B,OAA4B;IAE5B,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,0EAA0E;QAC1E,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QAE5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAE9C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEtE,SAAS,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU;gBACxE,gBAAgB,EAAG,IAAI,CAAC,eAA8D,IAAI,IAAI;gBAC9F,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE;oBACR,IAAI;oBACJ,UAAU,EAAE,IAAI,CAAC,SAAS;oBAC1B,QAAQ,EAAE,IAAI,CAAC,OAAO;iBACvB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAA2B,EAC3B,cAAwC,EACxC,SAA2B,EAC3B,OAA4B;IAE5B,oCAAoC;IACpC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,+DAA+D;IAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAE/E,4CAA4C;IAC5C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,iDAAiD;IACjD,SAAS,aAAa,CAAC,YAAoB;QACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,SAAS,IAAI,CAAC,IAAY,EAAE,KAAa;YACvC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,IAAI,KAAK,YAAY;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnD,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClD,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sCAAsC;IACtC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAoC,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC9C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9E,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,IAAI,iBAAiB,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEnC,MAAM,QAAQ,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;QAE7C,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YAChC,0CAA0C;YAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAClC,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;gBAAE,SAAS;YACjH,+DAA+D;YAC/D,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,IAAI,QAAQ,EAAE,CAAC;gBAAE,SAAS;YAE3D,0CAA0C;YAC1C,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,SAAS;YAE7C,qCAAqC;YACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5D,IAAI,CAAC,UAAU;gBAAE,SAAS;YAE1B,kDAAkD;YAClD,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;YAE7E,MAAM,GAAG,GAAG,GAAG,YAAY,IAAI,QAAQ,EAAE,CAAC;YAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEnB,SAAS,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,QAAQ;gBAClB,UAAU;gBACV,gBAAgB,EAAE,IAAI;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClE,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;oBACrC,UAAU,EAAE,CAAC;oBACb,QAAQ,EAAE,CAAC;iBACZ;gBACD,cAAc,EAAE,cAAc,IAAI,SAAS;gBAC3C,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,SAAS,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAA2B,EAC3B,mBAAqC,EACrC,cAA8B,EAC9B,QAAgB;IAEhB,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,mBAAmB;QAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEhE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnE,6DAA6D;IAC7D,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,SAAS;SACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,IAAI,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC1B,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,SAAS,GAAqB,EAAE,CAAC;IAEvC,yFAAyF;IACzF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa;QAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,IAAI,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;YACjC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC1C,YAAY,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,YAAY,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAErC,4DAA4D;IAC5D,OAAO,CAAC,KAAK,EAAE,CAAC;IAEhB,SAAS,IAAI,CAAC,IAAY;QACxB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,wDAAwD;QACxD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtD,wEAAwE;QACxE,IAAI,IAAI,KAAK,cAAc,CAAC,IAAI;YAAE,OAAO;QAEzC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS;gBAAE,SAAS;YACtE,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEzB,SAAS,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,cAAc,CAAC,IAAI;gBAC7B,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU;gBACxE,gBAAgB,EAAG,IAAI,CAAC,eAA8D,IAAI,IAAI;gBAC9F,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;gBACxD,cAAc,EAAE,IAAI;gBACpB,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,UAAU,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IACjD,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC7C,IAAI,UAAU,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IACjD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAgB,EAChB,OAAiB,EACjB,YAAsC;IAEtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CACxD,CAAC;QACF,IAAI,aAAa;YAAE,OAAO,MAAM,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,SAA2B,EAC3B,SAA2B,EAC3B,cAA+C;IAE/C,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEjE,oDAAoD;IACpD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACpE,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC;gBACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,OAAO;gBAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,mBAAmB,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE3C,uCAAuC;QACvC,IAAI,UAAU,GAA8B,KAAK,CAAC;QAClD,IAAI,WAAW,GAAyC,WAAW,CAAC;QACpE,IAAI,WAAW,GAAG,qCAAqC,QAAQ,GAAG,CAAC;QACnE,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,UAAU,GAAG,KAAK,CAAC;QAEvB,uDAAuD;QACvD,IAAI,QAAQ,KAAK,WAAW,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,UAAU,GAAG,MAAM,CAAC;YACpB,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;YACtD,WAAW,GAAG,kDAAkD,CAAC;YACjE,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,IAAI,QAAQ,KAAK,WAAW,IAAI,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACtE,UAAU,GAAG,MAAM,CAAC;YACpB,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;YACtD,WAAW,GAAG,mEAAmE,CAAC;YAClF,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,UAAU,GAAG,QAAQ,CAAC;YACtB,WAAW,GAAG,UAAU,CAAC;YACzB,WAAW,GAAG,gDAAgD,CAAC;YAC/D,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,UAAU,GAAG,KAAK,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YAC1E,QAAQ,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,KAAK,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,qBAAqB,QAAQ,wCAAwC,CAAC,CAAC;YACrF,QAAQ,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC/E,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,kBAAkB,IAAI,4DAA4D,CAAC,CAAC;QACpG,CAAC;QAED,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,QAAQ;YACd,WAAW;YACX,UAAU;YACV,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,uBAAuB,QAAQ,YAAY;YACtD,QAAQ;YACR,SAAS,EAAE,KAAK;YAChB,QAAQ;YACR,IAAI;YACJ,wBAAwB,EAAE,qBAAqB;SAChD,CAAC,CAAC;IACL,CAAC;IAED,8DAA8D;IAC9D,MAAM,gBAAgB,GAAsB,EAAE,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CACpC,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,gBAAgB,CAAC,IAAI,CAAC;gBACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,uBAAuB;YACpC,UAAU,EAAE,MAAM;YAClB,YAAY,EAAE,UAAU;YACxB,SAAS,EAAE,4DAA4D;YACvE,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,gBAAgB;YAC3B,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,gBAAgB;YACtB,wBAAwB,EAAE,IAAI;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,kCAAkC;IAClC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/analysis/attack-surface.d.ts

@@ -0,0 +1,51 @@
+import type { AccessControl, ExternalCalls, StateVars } from '../types/index.js';
+import type { PatternResult } from './pattern-detection.js';
+import type { ConstraintResult } from './constraint-extraction.js';
+export interface EntryPoint {
+    contract: string;
+    function: string;
+    visibility: string;
+    state_mutability: string;
+    modifiers: string[];
+    mutates: string[];
+    patterns: string[];
+    file: string;
+    line: number;
+}
+export interface TokenInteraction {
+    contract: string;
+    function: string;
+    target: string;
+    direction: 'in' | 'out' | 'both';
+    mechanism: string;
+    file: string;
+}
+export interface ExternalDependency {
+    target: string;
+    type: string;
+    trust: string;
+    called_by: string[];
+}
+export interface AttackSurfaceResult {
+    entry_points: {
+        permissionless: EntryPoint[];
+        role_gated: EntryPoint[];
+        owner_only: EntryPoint[];
+    };
+    token_interactions: TokenInteraction[];
+    external_dependencies: ExternalDependency[];
+    risk_signals: string[];
+    summary: {
+        total_entry_points: number;
+        permissionless_count: number;
+        role_gated_count: number;
+        owner_only_count: number;
+        external_dependency_count: number;
+        risk_signal_count: number;
+    };
+}
+/**
+ * Build an attack surface summary by cross-referencing existing analysis outputs.
+ */
+export declare function buildAttackSurface(access: AccessControl | null, calls: ExternalCalls | null, stateVars: StateVars | null, patterns: PatternResult | null, constraints: ConstraintResult | null): AttackSurfaceResult;
+//# sourceMappingURL=attack-surface.d.ts.map

package/dist/analysis/attack-surface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attack-surface.d.ts","sourceRoot":"","sources":["../../src/analysis/attack-surface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE;QACZ,cAAc,EAAE,UAAU,EAAE,CAAC;QAC7B,UAAU,EAAE,UAAU,EAAE,CAAC;QACzB,UAAU,EAAE,UAAU,EAAE,CAAC;KAC1B,CAAC;IACF,kBAAkB,EAAE,gBAAgB,EAAE,CAAC;IACvC,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;IAC5C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE;QACP,kBAAkB,EAAE,MAAM,CAAC;QAC3B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,gBAAgB,EAAE,MAAM,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;QACzB,yBAAyB,EAAE,MAAM,CAAC;QAClC,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH;AAsBD;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,aAAa,GAAG,IAAI,EAC5B,KAAK,EAAE,aAAa,GAAG,IAAI,EAC3B,SAAS,EAAE,SAAS,GAAG,IAAI,EAC3B,QAAQ,EAAE,aAAa,GAAG,IAAI,EAC9B,WAAW,EAAE,gBAAgB,GAAG,IAAI,GACnC,mBAAmB,CAgNrB"}