hex-audit 0.4.0

package/dist/analysis/attack-surface.js

@@ -0,0 +1,206 @@
+const OWNER_MODIFIERS = new Set([
+    'onlyOwner', 'onlyAdmin', 'onlyGovernance', 'onlyDAO',
+    'onlyTimelock', 'onlyMultisig',
+]);
+const ROLE_MODIFIERS = new Set([
+    'onlyRole', 'onlyKeeper', 'onlyBot', 'onlyOperator',
+    'onlyRelayer', 'onlyMinter', 'onlyBurner', 'onlyPauser',
+    'onlyManager', 'onlyGuardian', 'whenNotPaused',
+]);
+const TOKEN_METHODS = new Set([
+    'transfer', 'transferFrom', 'safeTransfer', 'safeTransferFrom',
+    'approve', 'mint', 'burn', 'deposit', 'withdraw',
+]);
+const ORACLE_KEYWORDS = ['oracle', 'price', 'feed', 'chainlink', 'pyth', 'twap'];
+const DEX_KEYWORDS = ['swap', 'router', 'uniswap', 'sushiswap', 'curve', 'balancer', 'pool'];
+const LENDING_KEYWORDS = ['lend', 'borrow', 'aave', 'compound', 'lending'];
+/**
+ * Build an attack surface summary by cross-referencing existing analysis outputs.
+ */
+export function buildAttackSurface(access, calls, stateVars, patterns, constraints) {
+    const permissionless = [];
+    const roleGated = [];
+    const ownerOnly = [];
+    const tokenInteractions = [];
+    const externalDeps = [];
+    const riskSignals = [];
+    // Build state variable write map for cross-referencing
+    const varWriteMap = new Map();
+    if (stateVars) {
+        for (const sv of stateVars.variables) {
+            const writers = new Set(sv.written_by.functions);
+            varWriteMap.set(`${sv.contract}.${sv.name}`, writers);
+        }
+    }
+    // Build pattern map per file for enrichment
+    const filePatterns = new Map();
+    if (patterns) {
+        for (const [flag, data] of Object.entries(patterns.flags)) {
+            if (!data.detected)
+                continue;
+            for (const loc of data.locations) {
+                if (!filePatterns.has(loc.file))
+                    filePatterns.set(loc.file, new Set());
+                filePatterns.get(loc.file).add(flag);
+            }
+        }
+    }
+    // Classify entry points from access control data
+    if (access) {
+        for (const func of access.functions) {
+            if (func.visibility !== 'external' && func.visibility !== 'public')
+                continue;
+            if (func.state_mutability === 'view' || func.state_mutability === 'pure')
+                continue;
+            const modifiers = func.modifiers || [];
+            const funcPatterns = [];
+            // Enrich with pattern flags for this file
+            const funcFile = func.evidence?.file || '';
+            if (filePatterns.has(funcFile)) {
+                funcPatterns.push(...filePatterns.get(funcFile));
+            }
+            // Find what state this function mutates
+            const mutates = [];
+            if (stateVars) {
+                for (const sv of stateVars.variables) {
+                    if (sv.contract !== func.contract)
+                        continue;
+                    if (sv.written_by.functions.includes(func.function)) {
+                        mutates.push(sv.name);
+                    }
+                }
+            }
+            const entry = {
+                contract: func.contract,
+                function: func.function,
+                visibility: func.visibility,
+                state_mutability: func.state_mutability ?? 'nonpayable',
+                modifiers,
+                mutates,
+                patterns: funcPatterns,
+                file: funcFile,
+                line: func.evidence?.line_start ?? 0,
+            };
+            const isOwnerOnly = modifiers.some((m) => OWNER_MODIFIERS.has(m));
+            const isRoleGated = modifiers.some((m) => ROLE_MODIFIERS.has(m) || m.includes('Role'));
+            if (isOwnerOnly) {
+                ownerOnly.push(entry);
+            }
+            else if (isRoleGated) {
+                roleGated.push(entry);
+            }
+            else if (modifiers.length === 0 || !isOwnerOnly) {
+                permissionless.push(entry);
+            }
+        }
+    }
+    // Extract token interactions from external calls
+    if (calls) {
+        for (const call of calls.calls) {
+            const method = call.method || '';
+            if (TOKEN_METHODS.has(method) || method.includes('transfer') || method.includes('Transfer')) {
+                const direction = method.includes('From') || method === 'deposit' ? 'in' :
+                    method === 'withdraw' ? 'out' : 'out';
+                tokenInteractions.push({
+                    contract: call.contract,
+                    function: call.function,
+                    target: call.target || 'unknown',
+                    direction,
+                    mechanism: method,
+                    file: call.evidence?.file || '',
+                });
+            }
+            // Classify external dependencies
+            const target = (call.target || '').toLowerCase();
+            let depType = 'custom';
+            if (ORACLE_KEYWORDS.some((k) => target.includes(k)))
+                depType = 'oracle';
+            else if (DEX_KEYWORDS.some((k) => target.includes(k)))
+                depType = 'dex';
+            else if (LENDING_KEYWORDS.some((k) => target.includes(k)))
+                depType = 'lending';
+            const trustValue = String(call.trust_level.value);
+            if (trustValue === 'external' || trustValue === 'semi-trusted') {
+                const existing = externalDeps.find((d) => d.target === call.target);
+                if (existing) {
+                    existing.called_by.push(`${call.contract}.${call.function}`);
+                }
+                else {
+                    externalDeps.push({
+                        target: call.target || 'unknown',
+                        type: depType,
+                        trust: trustValue,
+                        called_by: [`${call.contract}.${call.function}`],
+                    });
+                }
+            }
+        }
+    }
+    // Generate risk signals from cross-referencing
+    // 1. Permissionless functions with balance-dependent patterns
+    if (patterns?.flags.BALANCE_DEPENDENT?.detected) {
+        for (const entry of permissionless) {
+            const pats = filePatterns.get(entry.file);
+            if (pats?.has('BALANCE_DEPENDENT')) {
+                riskSignals.push(`Permissionless ${entry.contract}.${entry.function}() in file with balanceOf(address(this)) — donation attack surface`);
+            }
+        }
+    }
+    // 2. Callback patterns in permissionless functions
+    if (patterns?.flags.CALLBACK?.detected) {
+        for (const entry of permissionless) {
+            const pats = filePatterns.get(entry.file);
+            if (pats?.has('CALLBACK')) {
+                riskSignals.push(`Permissionless ${entry.contract}.${entry.function}() in file with callbacks — reentrancy surface`);
+            }
+        }
+    }
+    // 3. Oracle reads without staleness checks (heuristic)
+    if (patterns?.flags.ORACLE?.detected && patterns?.flags.TEMPORAL?.detected === false) {
+        riskSignals.push('Oracle integration detected but no temporal checks found — potential staleness risk');
+    }
+    // 4. Unenforced constraints
+    if (constraints && constraints.summary.unenforced > 0) {
+        riskSignals.push(`${constraints.summary.unenforced} setter(s) lack input validation — admin can set arbitrary values`);
+    }
+    // 5. Missing events on setters
+    if (constraints && constraints.summary.missing_events > 0) {
+        riskSignals.push(`${constraints.summary.missing_events} setter(s) don't emit events — silent state changes`);
+    }
+    // 6. Delegatecall in permissionless context
+    if (patterns?.flags.DELEGATECALL?.detected) {
+        for (const entry of permissionless) {
+            const pats = filePatterns.get(entry.file);
+            if (pats?.has('DELEGATECALL')) {
+                riskSignals.push(`Permissionless ${entry.contract}.${entry.function}() in file with delegatecall — arbitrary execution risk`);
+            }
+        }
+    }
+    // 7. Unchecked arithmetic in share/monetary calculations
+    if (patterns?.flags.UNCHECKED?.detected) {
+        const hasShareOrMonetary = patterns?.flags.SHARE_ALLOCATION?.detected || patterns?.flags.MONETARY_PARAMETER?.detected;
+        if (hasShareOrMonetary) {
+            riskSignals.push('Unchecked arithmetic in codebase with share/monetary calculations — overflow/underflow risk');
+        }
+    }
+    const totalEntryPoints = permissionless.length + roleGated.length + ownerOnly.length;
+    return {
+        entry_points: {
+            permissionless,
+            role_gated: roleGated,
+            owner_only: ownerOnly,
+        },
+        token_interactions: tokenInteractions,
+        external_dependencies: externalDeps,
+        risk_signals: riskSignals.slice(0, 30),
+        summary: {
+            total_entry_points: totalEntryPoints,
+            permissionless_count: permissionless.length,
+            role_gated_count: roleGated.length,
+            owner_only_count: ownerOnly.length,
+            external_dependency_count: externalDeps.length,
+            risk_signal_count: riskSignals.length,
+        },
+    };
+}
+//# sourceMappingURL=attack-surface.js.map

package/dist/analysis/attack-surface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attack-surface.js","sourceRoot":"","sources":["../../src/analysis/attack-surface.ts"],"names":[],"mappings":"AAmDA,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS;IACrD,cAAc,EAAE,cAAc;CAC/B,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc;IACnD,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY;IACvD,aAAa,EAAE,cAAc,EAAE,eAAe;CAC/C,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB;IAC9D,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU;CACjD,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACjF,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AAC7F,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;AAE3E;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA4B,EAC5B,KAA2B,EAC3B,SAA2B,EAC3B,QAA8B,EAC9B,WAAoC;IAEpC,MAAM,cAAc,GAAiB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,MAAM,iBAAiB,GAAuB,EAAE,CAAC;IACjD,MAAM,YAAY,GAAyB,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,uDAAuD;IACvD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;IACnD,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACzD,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;gBACvE,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ;gBAAE,SAAS;YAC7E,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM;gBAAE,SAAS;YAEnF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;YACvC,MAAM,YAAY,GAAa,EAAE,CAAC;YAElC,0CAA0C;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;YAC3C,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,YAAY,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,CAAC;YACpD,CAAC;YAED,wCAAwC;YACxC,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;oBACrC,IAAI,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;wBAAE,SAAS;oBAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACpD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAe;gBACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,YAAY;gBACvD,SAAS;gBACT,OAAO;gBACP,QAAQ,EAAE,YAAY;gBACtB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,CAAC;aACrC,CAAC;YAEF,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAEvF,IAAI,WAAW,EAAE,CAAC;gBAChB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;iBAAM,IAAI,WAAW,EAAE,CAAC;gBACvB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;iBAAM,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClD,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YACjC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5F,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACxD,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;gBAExC,iBAAiB,CAAC,IAAI,CAAC;oBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS;oBAChC,SAAS;oBACT,SAAS,EAAE,MAAM;oBACjB,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;iBAChC,CAAC,CAAC;YACL,CAAC;YAED,iCAAiC;YACjC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,OAAO,GAAG,QAAQ,CAAC;YACvB,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,QAAQ,CAAC;iBACnE,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,KAAK,CAAC;iBAClE,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,SAAS,CAAC;YAE/E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;gBAC/D,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpE,IAAI,QAAQ,EAAE,CAAC;oBACb,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC/D,CAAC;qBAAM,CAAC;oBACN,YAAY,CAAC,IAAI,CAAC;wBAChB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS;wBAChC,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,UAAU;wBACjB,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;qBACjD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,8DAA8D;IAC9D,IAAI,QAAQ,EAAE,KAAK,CAAC,iBAAiB,EAAE,QAAQ,EAAE,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,IAAI,EAAE,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACnC,WAAW,CAAC,IAAI,CACd,kBAAkB,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,oEAAoE,CACvH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,IAAI,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1B,WAAW,CAAC,IAAI,CACd,kBAAkB,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,gDAAgD,CACnG,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,IAAI,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,IAAI,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;QACrF,WAAW,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IAC1G,CAAC;IAED,4BAA4B;IAC5B,IAAI,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACtD,WAAW,CAAC,IAAI,CACd,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,mEAAmE,CACrG,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,IAAI,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAC1D,WAAW,CAAC,IAAI,CACd,GAAG,WAAW,CAAC,OAAO,CAAC,cAAc,qDAAqD,CAC3F,CAAC;IACJ,CAAC;IAED,4CAA4C;IAC5C,IAAI,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC9B,WAAW,CAAC,IAAI,CACd,kBAAkB,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,yDAAyD,CAC5G,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,IAAI,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;QACxC,MAAM,kBAAkB,GACtB,QAAQ,EAAE,KAAK,CAAC,gBAAgB,EAAE,QAAQ,IAAI,QAAQ,EAAE,KAAK,CAAC,kBAAkB,EAAE,QAAQ,CAAC;QAC7F,IAAI,kBAAkB,EAAE,CAAC;YACvB,WAAW,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAErF,OAAO;QACL,YAAY,EAAE;YACZ,cAAc;YACd,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;SACtB;QACD,kBAAkB,EAAE,iBAAiB;QACrC,qBAAqB,EAAE,YAAY;QACnC,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACtC,OAAO,EAAE;YACP,kBAAkB,EAAE,gBAAgB;YACpC,oBAAoB,EAAE,cAAc,CAAC,MAAM;YAC3C,gBAAgB,EAAE,SAAS,CAAC,MAAM;YAClC,gBAAgB,EAAE,SAAS,CAAC,MAAM;YAClC,yBAAyB,EAAE,YAAY,CAAC,MAAM;YAC9C,iBAAiB,EAAE,WAAW,CAAC,MAAM;SACtC;KACF,CAAC;AACJ,CAAC"}

package/dist/analysis/constraint-extraction.d.ts

@@ -0,0 +1,25 @@
+export interface ConstraintEntry {
+    variable: string;
+    contract: string;
+    setter: string;
+    setter_line: number;
+    file: string;
+    validation: string | null;
+    enforcement: 'ENFORCED' | 'UNENFORCED';
+    emits_event: boolean;
+    event_name: string | null;
+}
+export interface ConstraintResult {
+    constraints: ConstraintEntry[];
+    summary: {
+        total_setters: number;
+        enforced: number;
+        unenforced: number;
+        missing_events: number;
+    };
+}
+/**
+ * Extract constraint variables and their enforcement status from in-scope files.
+ */
+export declare function extractConstraints(projectDir: string, scopeFiles: string[]): ConstraintResult;
+//# sourceMappingURL=constraint-extraction.d.ts.map

package/dist/analysis/constraint-extraction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraint-extraction.d.ts","sourceRoot":"","sources":["../../src/analysis/constraint-extraction.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,UAAU,GAAG,YAAY,CAAC;IACvC,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,OAAO,EAAE;QACP,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAyOD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,gBAAgB,CA4F7F"}

package/dist/analysis/constraint-extraction.js

@@ -0,0 +1,398 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import * as parser from '@solidity-parser/parser';
+import { parseSolidity } from '../parsers/solidity-parser.js';
+import { normalizePath } from '../core/paths.js';
+// Patterns that indicate a setter function
+const SETTER_PREFIXES = ['set', 'update', 'configure', 'change', 'adjust', 'modify'];
+// Library modifiers that always enforce a check even when we can't see their body.
+const KNOWN_ACCESS_MODIFIERS = new Set([
+    'onlyOwner', 'onlyAdmin', 'onlyRole', 'onlyGovernance', 'onlyGuardian',
+    'onlyOperator', 'onlyMinter', 'onlyPauser', 'onlyKeeper',
+    'onlyAuthorized', 'onlyManager',
+]);
+// Modifiers that revert based on state (pausability, initialization, reentrancy).
+// They count as enforcement because the function won't run when the state predicate fails.
+const STATE_GUARD_MODIFIERS = new Set([
+    'whenNotPaused', 'whenPaused', 'initializer', 'reinitializer', 'onlyInitializing',
+    'nonReentrant', 'nonreentrant',
+]);
+// Pattern for event emission (regex fallback)
+const EMIT_PATTERN = /emit\s+(\w+)\s*\(/;
+/**
+ * Generic AST walker. `visit` returns `true` to short-circuit.
+ */
+function walkAst(node, visit) {
+    if (!node || typeof node !== 'object')
+        return false;
+    const n = node;
+    if (typeof n.type === 'string') {
+        if (visit(n) === true)
+            return true;
+    }
+    for (const key of Object.keys(n)) {
+        if (key === 'loc' || key === 'range' || key === 'parent')
+            continue;
+        const v = n[key];
+        if (Array.isArray(v)) {
+            for (const item of v) {
+                if (walkAst(item, visit))
+                    return true;
+            }
+        }
+        else if (v && typeof v === 'object') {
+            if (walkAst(v, visit))
+                return true;
+        }
+    }
+    return false;
+}
+/**
+ * Does an AST subtree directly contain a validation statement
+ * (require / revert / assert / `if (cond) revert ...`)?
+ */
+function hasDirectValidation(body) {
+    if (!body)
+        return null;
+    let reason = null;
+    walkAst(body, (n) => {
+        if (n.type === 'RevertStatement') {
+            reason = 'revert with custom error';
+            return true;
+        }
+        if (n.type === 'FunctionCall') {
+            const callee = n.expression;
+            if (!callee)
+                return false;
+            const name = callee.name ?? callee.namePath;
+            if (name === 'require') {
+                reason = 'require()';
+                return true;
+            }
+            if (name === 'assert') {
+                reason = 'assert()';
+                return true;
+            }
+            if (name === 'revert') {
+                reason = 'revert(...)';
+                return true;
+            }
+        }
+        return false;
+    });
+    return reason;
+}
+/**
+ * Check whether a setter's modifiers contribute enforcement.
+ */
+function modifierEnforces(modName, modBodies) {
+    if (KNOWN_ACCESS_MODIFIERS.has(modName))
+        return `library-style access modifier '${modName}'`;
+    if (STATE_GUARD_MODIFIERS.has(modName))
+        return `state guard modifier '${modName}'`;
+    const body = modBodies.get(modName);
+    if (body) {
+        const reason = hasDirectValidation(body);
+        if (reason)
+            return `validation inside modifier '${modName}' (${reason})`;
+    }
+    // Heuristic for unknown but identity-shaped modifiers (e.g., onlyCustomRole)
+    if (/^only[A-Z]/.test(modName))
+        return `naming heuristic — modifier '${modName}' likely gates by caller`;
+    return null;
+}
+/**
+ * Walk the function body, follow calls into same-contract helpers (up to 2 deep),
+ * and look for validation inside any of them.
+ */
+function helperCallEnforces(body, funcBodies, depth, seen) {
+    if (depth > 2 || !body)
+        return null;
+    let result = null;
+    walkAst(body, (n) => {
+        if (n.type === 'FunctionCall') {
+            const callee = n.expression;
+            if (!callee)
+                return false;
+            const name = callee.name ?? callee.namePath;
+            if (typeof name !== 'string' || seen.has(name))
+                return false;
+            const target = funcBodies.get(name);
+            if (!target)
+                return false;
+            seen.add(name);
+            const direct = hasDirectValidation(target);
+            if (direct) {
+                result = `validation inside helper '${name}()' (${direct})`;
+                return true;
+            }
+            const deeper = helperCallEnforces(target, funcBodies, depth + 1, seen);
+            if (deeper) {
+                result = deeper;
+                return true;
+            }
+        }
+        return false;
+    });
+    return result;
+}
+/**
+ * Build modifier/function body maps for each contract in a file via a fresh AST walk.
+ */
+function buildContractEnforcementMaps(source) {
+    const map = new Map();
+    let ast;
+    try {
+        ast = parser.parse(source, { loc: true, range: true, tolerant: true });
+    }
+    catch {
+        return map;
+    }
+    for (const node of ast.children) {
+        if (node.type !== 'ContractDefinition')
+            continue;
+        const contractNode = node;
+        const modifierBodies = new Map();
+        const functionBodies = new Map();
+        const functions = [];
+        for (const sub of contractNode.subNodes ?? []) {
+            if (sub.type === 'ModifierDefinition') {
+                const m = sub;
+                modifierBodies.set(m.name, m.body);
+            }
+            else if (sub.type === 'FunctionDefinition') {
+                const f = sub;
+                const name = f.name ?? '';
+                if (name) {
+                    functionBodies.set(name, f.body);
+                    functions.push({
+                        name,
+                        body: f.body,
+                        modifiers: (f.modifiers ?? []).map((m) => m.name),
+                        lineStart: f.loc?.start.line ?? 0,
+                    });
+                }
+            }
+        }
+        map.set(contractNode.name, { modifierBodies, functionBodies, functions });
+    }
+    return map;
+}
+function determineEnforcement(ctx, contract) {
+    // 1. Inline require / revert / assert / if-revert
+    const direct = hasDirectValidation(ctx.body);
+    if (direct)
+        return { enforced: true, reason: direct };
+    // 2. Modifier-resident validation
+    for (const modName of ctx.modifiers) {
+        const reason = modifierEnforces(modName, contract.modifierBodies);
+        if (reason)
+            return { enforced: true, reason };
+    }
+    // 3. Helper-call validation (depth 2)
+    const helperReason = helperCallEnforces(ctx.body, contract.functionBodies, 0, new Set([ctx.name]));
+    if (helperReason)
+        return { enforced: true, reason: helperReason };
+    return { enforced: false, reason: null };
+}
+/**
+ * Extract constraint variables and their enforcement status from in-scope files.
+ */
+export function extractConstraints(projectDir, scopeFiles) {
+    const constraints = [];
+    for (const scopeFile of scopeFiles) {
+        const filePath = path.resolve(projectDir, scopeFile);
+        if (!fs.existsSync(filePath))
+            continue;
+        const source = fs.readFileSync(filePath, 'utf-8');
+        const normalFile = normalizePath(scopeFile);
+        let parsed;
+        try {
+            parsed = parseSolidity(source, normalFile);
+        }
+        catch {
+            extractConstraintsGrep(source, normalFile, constraints);
+            continue;
+        }
+        const enforcementMaps = buildContractEnforcementMaps(source);
+        for (const contract of parsed.contracts) {
+            const enforcement = enforcementMaps.get(contract.name);
+            // Collect state variable names for this contract
+            const stateVarNames = new Set();
+            if (contract.stateVariables) {
+                for (const sv of contract.stateVariables) {
+                    stateVarNames.add(sv.name);
+                }
+            }
+            for (const func of contract.functions) {
+                // Check if this is a setter function
+                const isSetter = SETTER_PREFIXES.some((prefix) => func.name.toLowerCase().startsWith(prefix.toLowerCase()));
+                if (!isSetter)
+                    continue;
+                if (func.stateMutability === 'view' || func.stateMutability === 'pure')
+                    continue;
+                // Extract the function body from source for variable detection + emit detection
+                const funcBody = extractFunctionBody(source, func.name, func.lineStart);
+                if (!funcBody)
+                    continue;
+                // Find which state variable this setter modifies
+                const modifiedVar = findModifiedVariable(func.name, stateVarNames, funcBody);
+                if (!modifiedVar)
+                    continue;
+                // Validation via AST traversal (covers modifiers + helpers + custom errors)
+                let verdict = { enforced: false, reason: null };
+                if (enforcement) {
+                    const ctx = enforcement.functions.find((f) => f.name === func.name);
+                    if (ctx) {
+                        verdict = determineEnforcement(ctx, enforcement);
+                    }
+                }
+                // Check for event emission (regex; emits are syntactically simple)
+                let emitsEvent = false;
+                let eventName = null;
+                const emitMatch = funcBody.match(EMIT_PATTERN);
+                if (emitMatch) {
+                    emitsEvent = true;
+                    eventName = emitMatch[1];
+                }
+                constraints.push({
+                    variable: modifiedVar,
+                    contract: contract.name,
+                    setter: func.name,
+                    setter_line: func.lineStart,
+                    file: normalFile,
+                    validation: verdict.reason,
+                    enforcement: verdict.enforced ? 'ENFORCED' : 'UNENFORCED',
+                    emits_event: emitsEvent,
+                    event_name: eventName,
+                });
+            }
+        }
+    }
+    const enforced = constraints.filter((c) => c.enforcement === 'ENFORCED').length;
+    const unenforced = constraints.filter((c) => c.enforcement === 'UNENFORCED').length;
+    const missingEvents = constraints.filter((c) => !c.emits_event).length;
+    return {
+        constraints,
+        summary: {
+            total_setters: constraints.length,
+            enforced,
+            unenforced,
+            missing_events: missingEvents,
+        },
+    };
+}
+/**
+ * Extract the body of a function from source code (used for variable name
+ * detection and event emission scan only; enforcement classification uses the AST).
+ */
+function extractFunctionBody(source, funcName, startLine) {
+    const lines = source.split('\n');
+    const start = Math.max(0, startLine - 1);
+    let braceCount = 0;
+    let inFunction = false;
+    let bodyStart = -1;
+    let bodyEnd = -1;
+    for (let i = start; i < lines.length; i++) {
+        const line = lines[i];
+        if (!inFunction && line.includes(`function ${funcName}`)) {
+            inFunction = true;
+        }
+        if (inFunction) {
+            for (const ch of line) {
+                if (ch === '{') {
+                    if (bodyStart === -1)
+                        bodyStart = i;
+                    braceCount++;
+                }
+                if (ch === '}') {
+                    braceCount--;
+                    if (braceCount === 0) {
+                        bodyEnd = i;
+                        break;
+                    }
+                }
+            }
+            if (bodyEnd !== -1)
+                break;
+        }
+        if (i - start > 200)
+            break;
+    }
+    if (bodyStart === -1 || bodyEnd === -1)
+        return null;
+    return lines.slice(bodyStart, bodyEnd + 1).join('\n');
+}
+/**
+ * Find which state variable a setter function modifies.
+ */
+function findModifiedVariable(funcName, stateVars, funcBody) {
+    for (const prefix of SETTER_PREFIXES) {
+        if (funcName.toLowerCase().startsWith(prefix.toLowerCase())) {
+            const rest = funcName.slice(prefix.length);
+            if (rest.length === 0)
+                continue;
+            const camelCase = rest[0].toLowerCase() + rest.slice(1);
+            if (stateVars.has(camelCase))
+                return camelCase;
+            if (stateVars.has(rest))
+                return rest;
+            if (stateVars.has(`_${camelCase}`))
+                return `_${camelCase}`;
+        }
+    }
+    for (const varName of stateVars) {
+        const assignPattern = new RegExp(`\\b${escapeRegex(varName)}\\s*[=\\[]`);
+        if (assignPattern.test(funcBody))
+            return varName;
+    }
+    return null;
+}
+function escapeRegex(str) {
+    return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/**
+ * Grep-based fallback for constraint extraction when AST parsing fails.
+ * Validation detection here is purposely loose — anything matching require/revert/assert
+ * inside the next 30 lines counts. Auditor will be told via the validation string.
+ */
+function extractConstraintsGrep(source, file, constraints) {
+    const lines = source.split('\n');
+    const funcPattern = /function\s+(set|update|configure|change|adjust|modify)(\w+)\s*\(/i;
+    for (let i = 0; i < lines.length; i++) {
+        const match = lines[i].match(funcPattern);
+        if (!match)
+            continue;
+        const funcName = match[1] + match[2];
+        const varName = match[2][0].toLowerCase() + match[2].slice(1);
+        const bodySlice = lines.slice(i, Math.min(i + 30, lines.length)).join('\n');
+        let validation = null;
+        if (/require\s*\(/.test(bodySlice))
+            validation = 'require()';
+        else if (/revert\s+\w+\s*\(/.test(bodySlice))
+            validation = 'revert with custom error';
+        else if (/\brevert\s*\(/.test(bodySlice))
+            validation = 'revert(...)';
+        else if (/\bassert\s*\(/.test(bodySlice))
+            validation = 'assert()';
+        let emitsEvent = false;
+        let eventName = null;
+        const emitMatch = bodySlice.match(EMIT_PATTERN);
+        if (emitMatch) {
+            emitsEvent = true;
+            eventName = emitMatch[1];
+        }
+        constraints.push({
+            variable: varName,
+            contract: 'Unknown',
+            setter: funcName,
+            setter_line: i + 1,
+            file,
+            validation,
+            enforcement: validation ? 'ENFORCED' : 'UNENFORCED',
+            emits_event: emitsEvent,
+            event_name: eventName,
+        });
+    }
+}
+//# sourceMappingURL=constraint-extraction.js.map

package/dist/analysis/constraint-extraction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraint-extraction.js","sourceRoot":"","sources":["../../src/analysis/constraint-extraction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAwBjD,2CAA2C;AAC3C,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAErF,mFAAmF;AACnF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,cAAc;IACtE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY;IACxD,gBAAgB,EAAE,aAAa;CAChC,CAAC,CAAC;AAEH,kFAAkF;AAClF,2FAA2F;AAC3F,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB;IACjF,cAAc,EAAE,cAAc;CAC/B,CAAC,CAAC;AAEH,8CAA8C;AAC9C,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAQzC;;GAEG;AACH,SAAS,OAAO,CAAC,IAAa,EAAE,KAAqC;IACnE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,CAAC,GAAG,IAAe,CAAC;IAC1B,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACrC,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ;YAAE,SAAS;QACnE,MAAM,CAAC,GAAI,CAA6B,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;gBACrB,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;YACxC,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,IAAa;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;QAClB,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACjC,MAAM,GAAG,0BAA0B,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,UAAiC,CAAC;YACnD,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1B,MAAM,IAAI,GACP,MAAM,CAAC,IAA2B,IAAK,MAAM,CAAC,QAA+B,CAAC;YACjF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,GAAG,WAAW,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG,UAAU,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG,aAAa,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,OAAe,EACf,SAA+B;IAE/B,IAAI,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,kCAAkC,OAAO,GAAG,CAAC;IAC7F,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,yBAAyB,OAAO,GAAG,CAAC;IACnF,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM;YAAE,OAAO,+BAA+B,OAAO,MAAM,MAAM,GAAG,CAAC;IAC3E,CAAC;IACD,6EAA6E;IAC7E,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,gCAAgC,OAAO,0BAA0B,CAAC;IACzG,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CACzB,IAAa,EACb,UAAgC,EAChC,KAAa,EACb,IAAiB;IAEjB,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;QAClB,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,UAAiC,CAAC;YACnD,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1B,MAAM,IAAI,GACP,MAAM,CAAC,IAA2B,IAAK,MAAM,CAAC,QAA+B,CAAC;YACjF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,GAAG,6BAA6B,IAAI,QAAQ,MAAM,GAAG,CAAC;gBAC5D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YACvE,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,GAAG,MAAM,CAAC;gBAChB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAeD;;GAEG;AACH,SAAS,4BAA4B,CAAC,MAAc;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;IACnD,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,MAAM,IAAI,IAAK,GAA0C,CAAC,QAAQ,EAAE,CAAC;QACxE,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB;YAAE,SAAS;QACjD,MAAM,YAAY,GAAG,IAAuD,CAAC;QAE7E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAmB,CAAC;QAClD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAmB,CAAC;QAClD,MAAM,SAAS,GAAsB,EAAE,CAAC;QAExC,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBACtC,MAAM,CAAC,GAAG,GAAgD,CAAC;gBAC3D,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC7C,MAAM,CAAC,GAAG,GAMT,CAAC;gBACF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC1B,IAAI,IAAI,EAAE,CAAC;oBACT,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;oBACjC,SAAS,CAAC,IAAI,CAAC;wBACb,IAAI;wBACJ,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;wBACjD,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;qBAClC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,SAAS,oBAAoB,CAC3B,GAAoB,EACpB,QAA6B;IAE7B,kDAAkD;IAClD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAEtD,kCAAkC;IAClC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;QAClE,IAAI,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;IAED,sCAAsC;IACtC,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnG,IAAI,YAAY;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAElE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,UAAoB;IACzE,MAAM,WAAW,GAAsB,EAAE,CAAC;IAE1C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAE5C,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QAED,MAAM,eAAe,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QAE7D,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvD,iDAAiD;YACjD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;YACxC,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC5B,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;oBACzC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACtC,qCAAqC;gBACrC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CACzD,CAAC;gBACF,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBACxB,IAAI,IAAI,CAAC,eAAe,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,KAAK,MAAM;oBAAE,SAAS;gBAEjF,gFAAgF;gBAChF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxE,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBAExB,iDAAiD;gBACjD,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;gBAC7E,IAAI,CAAC,WAAW;oBAAE,SAAS;gBAE3B,4EAA4E;gBAC5E,IAAI,OAAO,GAAuB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBACpE,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;oBACpE,IAAI,GAAG,EAAE,CAAC;wBACR,OAAO,GAAG,oBAAoB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;oBACnD,CAAC;gBACH,CAAC;gBAED,mEAAmE;gBACnE,IAAI,UAAU,GAAG,KAAK,CAAC;gBACvB,IAAI,SAAS,GAAkB,IAAI,CAAC;gBACpC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC/C,IAAI,SAAS,EAAE,CAAC;oBACd,UAAU,GAAG,IAAI,CAAC;oBAClB,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC3B,CAAC;gBAED,WAAW,CAAC,IAAI,CAAC;oBACf,QAAQ,EAAE,WAAW;oBACrB,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,MAAM,EAAE,IAAI,CAAC,IAAI;oBACjB,WAAW,EAAE,IAAI,CAAC,SAAS;oBAC3B,IAAI,EAAE,UAAU;oBAChB,UAAU,EAAE,OAAO,CAAC,MAAM;oBAC1B,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;oBACzD,WAAW,EAAE,UAAU;oBACvB,UAAU,EAAE,SAAS;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAChF,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,MAAM,CAAC;IACpF,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAEvE,OAAO;QACL,WAAW;QACX,OAAO,EAAE;YACP,aAAa,EAAE,WAAW,CAAC,MAAM;YACjC,QAAQ;YACR,UAAU;YACV,cAAc,EAAE,aAAa;SAC9B;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,MAAc,EAAE,QAAgB,EAAE,SAAiB;IAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IACnB,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IAEjB,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,QAAQ,EAAE,CAAC,EAAE,CAAC;YACzD,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;gBACtB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBACf,IAAI,SAAS,KAAK,CAAC,CAAC;wBAAE,SAAS,GAAG,CAAC,CAAC;oBACpC,UAAU,EAAE,CAAC;gBACf,CAAC;gBACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBACf,UAAU,EAAE,CAAC;oBACb,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;wBACrB,OAAO,GAAG,CAAC,CAAC;wBACZ,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,CAAC;gBAAE,MAAM;QAC5B,CAAC;QAED,IAAI,CAAC,GAAG,KAAK,GAAG,GAAG;YAAE,MAAM;IAC7B,CAAC;IAED,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,SAAsB,EAAE,QAAgB;IACtF,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxD,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC/C,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;gBAAE,OAAO,IAAI,SAAS,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzE,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC;IACnD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,MAAc,EAAE,IAAY,EAAE,WAA8B;IAC1F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,WAAW,GAAG,mEAAmE,CAAC;IAExF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE9D,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,UAAU,GAAG,WAAW,CAAC;aACxD,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,UAAU,GAAG,0BAA0B,CAAC;aACjF,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,UAAU,GAAG,aAAa,CAAC;aAChE,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,UAAU,GAAG,UAAU,CAAC;QAElE,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,SAAS,EAAE,CAAC;YACd,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAED,WAAW,CAAC,IAAI,CAAC;YACf,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC,GAAG,CAAC;YAClB,IAAI;YACJ,UAAU;YACV,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;YACnD,WAAW,EAAE,UAAU;YACvB,UAAU,EAAE,SAAS;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}