hex-audit 0.4.0

package/dist/analysis/nsloc.d.ts

@@ -0,0 +1,46 @@
+export interface NslocResult {
+    totalLines: number;
+    nsloc: number;
+    commentLines: number;
+    blankLines: number;
+    assemblyLines: number;
+}
+/**
+ * Count nSLOC, comments, blank lines, and assembly lines from source text.
+ * Uses comment ranges from the parser and InlineAssembly detection.
+ */
+export declare function countNsloc(source: string, commentRanges: Array<{
+    start: number;
+    end: number;
+}>, assemblyRanges: Array<{
+    start: number;
+    end: number;
+}>, lineRange?: {
+    start: number;
+    end: number;
+}): NslocResult;
+/**
+ * Extract comment line ranges from parser tokens.
+ */
+export declare function getCommentRanges(comments: Array<{
+    loc?: {
+        start: {
+            line: number;
+        };
+        end: {
+            line: number;
+        };
+    };
+}>): Array<{
+    start: number;
+    end: number;
+}>;
+/**
+ * Find assembly block ranges from source using regex.
+ * Returns line ranges of `assembly { ... }` blocks.
+ */
+export declare function getAssemblyRanges(source: string): Array<{
+    start: number;
+    end: number;
+}>;
+//# sourceMappingURL=nsloc.d.ts.map

package/dist/analysis/nsloc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nsloc.d.ts","sourceRoot":"","sources":["../../src/analysis/nsloc.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,EACpD,cAAc,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,EACrD,SAAS,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACzC,WAAW,CA6Cb;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,KAAK,CAAC;IAAE,GAAG,CAAC,EAAE;QAAE,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,GAAG,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;CAAE,CAAC,GAC5E,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAOvC;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAyCvF"}

package/dist/analysis/nsloc.js

@@ -0,0 +1,106 @@
+import { splitLines } from '../core/paths.js';
+/**
+ * Count nSLOC, comments, blank lines, and assembly lines from source text.
+ * Uses comment ranges from the parser and InlineAssembly detection.
+ */
+export function countNsloc(source, commentRanges, assemblyRanges, lineRange) {
+    const lines = splitLines(source);
+    const totalLines = lines.length;
+    // Build sets of line numbers that are comments or assembly
+    const commentLineSet = new Set();
+    const assemblyLineSet = new Set();
+    for (const range of commentRanges) {
+        for (let i = range.start; i <= range.end; i++) {
+            commentLineSet.add(i);
+        }
+    }
+    for (const range of assemblyRanges) {
+        for (let i = range.start; i <= range.end; i++) {
+            assemblyLineSet.add(i);
+        }
+    }
+    let blankLines = 0;
+    let commentLines = 0;
+    let assemblyLines = 0;
+    let nsloc = 0;
+    for (let i = 0; i < lines.length; i++) {
+        const lineNum = i + 1;
+        if (lineRange && (lineNum < lineRange.start || lineNum > lineRange.end))
+            continue;
+        const trimmed = lines[i].trim();
+        if (trimmed === '') {
+            blankLines++;
+        }
+        else if (commentLineSet.has(lineNum)) {
+            // Check if the line is purely a comment (no code on the same line)
+            // For simplicity, if the line is in a comment range, count it as comment
+            commentLines++;
+        }
+        else {
+            nsloc++;
+            if (assemblyLineSet.has(lineNum)) {
+                assemblyLines++;
+            }
+        }
+    }
+    return { totalLines, nsloc, commentLines, blankLines, assemblyLines };
+}
+/**
+ * Extract comment line ranges from parser tokens.
+ */
+export function getCommentRanges(comments) {
+    return comments
+        .filter((c) => c.loc)
+        .map((c) => ({
+        start: c.loc.start.line,
+        end: c.loc.end.line,
+    }));
+}
+/**
+ * Find assembly block ranges from source using regex.
+ * Returns line ranges of `assembly { ... }` blocks.
+ */
+export function getAssemblyRanges(source) {
+    const ranges = [];
+    const lines = splitLines(source);
+    let inAssembly = false;
+    let braceCount = 0;
+    let startLine = 0;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        if (!inAssembly) {
+            // Look for `assembly {` or `assembly "evmasm" {`
+            if (/\bassembly\b/.test(line)) {
+                inAssembly = true;
+                startLine = i + 1;
+                braceCount = 0;
+                // Count braces on this line
+                for (const ch of line) {
+                    if (ch === '{')
+                        braceCount++;
+                    if (ch === '}')
+                        braceCount--;
+                }
+                if (braceCount <= 0 && line.includes('{')) {
+                    // Single-line assembly block
+                    ranges.push({ start: startLine, end: i + 1 });
+                    inAssembly = false;
+                }
+            }
+        }
+        else {
+            for (const ch of line) {
+                if (ch === '{')
+                    braceCount++;
+                if (ch === '}')
+                    braceCount--;
+            }
+            if (braceCount <= 0) {
+                ranges.push({ start: startLine, end: i + 1 });
+                inAssembly = false;
+            }
+        }
+    }
+    return ranges;
+}
+//# sourceMappingURL=nsloc.js.map

package/dist/analysis/nsloc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nsloc.js","sourceRoot":"","sources":["../../src/analysis/nsloc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAU9C;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,MAAc,EACd,aAAoD,EACpD,cAAqD,EACrD,SAA0C;IAE1C,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;IAEhC,2DAA2D;IAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1C,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,SAAS,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,KAAK,IAAI,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC;YAAE,SAAS;QAClF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEhC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,UAAU,EAAE,CAAC;QACf,CAAC;aAAM,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,mEAAmE;YACnE,yEAAyE;YACzE,YAAY,EAAE,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,KAAK,EAAE,CAAC;YACR,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,aAAa,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAA6E;IAE7E,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,KAAK,EAAE,CAAC,CAAC,GAAI,CAAC,KAAK,CAAC,IAAI;QACxB,GAAG,EAAE,CAAC,CAAC,GAAI,CAAC,GAAG,CAAC,IAAI;KACrB,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAEjC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,iDAAiD;YACjD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,UAAU,GAAG,IAAI,CAAC;gBAClB,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClB,UAAU,GAAG,CAAC,CAAC;gBACf,4BAA4B;gBAC5B,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;oBACtB,IAAI,EAAE,KAAK,GAAG;wBAAE,UAAU,EAAE,CAAC;oBAC7B,IAAI,EAAE,KAAK,GAAG;wBAAE,UAAU,EAAE,CAAC;gBAC/B,CAAC;gBACD,IAAI,UAAU,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1C,6BAA6B;oBAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC9C,UAAU,GAAG,KAAK,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;gBACtB,IAAI,EAAE,KAAK,GAAG;oBAAE,UAAU,EAAE,CAAC;gBAC7B,IAAI,EAAE,KAAK,GAAG;oBAAE,UAAU,EAAE,CAAC;YAC/B,CAAC;YACD,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9C,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/analysis/pattern-detection.d.ts

@@ -0,0 +1,20 @@
+export interface PatternLocation {
+    file: string;
+    line: number;
+    match: string;
+}
+export interface PatternFlag {
+    detected: boolean;
+    locations: PatternLocation[];
+    count: number;
+}
+export interface PatternResult {
+    flags: Record<string, PatternFlag>;
+    protocol_hints: string[];
+    risk_areas: string[];
+}
+/**
+ * Scan in-scope files for security-relevant patterns and return detection flags.
+ */
+export declare function detectPatterns(projectDir: string, scopeFiles: string[]): PatternResult;
+//# sourceMappingURL=pattern-detection.d.ts.map

package/dist/analysis/pattern-detection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-detection.d.ts","sourceRoot":"","sources":["../../src/analysis/pattern-detection.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACnC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AA2LD;;GAEG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,aAAa,CAuDtF"}

package/dist/analysis/pattern-detection.js

@@ -0,0 +1,236 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { normalizePath } from '../core/paths.js';
+const PATTERN_DEFS = [
+    {
+        flag: 'TEMPORAL',
+        patterns: [
+            /block\.timestamp/,
+            /block\.number/,
+            /\b(interval|epoch|period|duration|deadline|expiry|cooldown)\b/i,
+        ],
+        risk_template: 'Time-dependent logic in {file}',
+    },
+    {
+        flag: 'ORACLE',
+        patterns: [
+            /latestRoundData/,
+            /latestAnswer/,
+            /\bTWAP\b/,
+            /\b(chainlink|pyth|redstone)\b/i,
+            /priceFeed/i,
+            /getPrice/,
+            /IOracle/,
+        ],
+        hint: 'oracle-dependent',
+        risk_template: 'Oracle integration in {file}',
+    },
+    {
+        flag: 'FLASH_LOAN',
+        patterns: [
+            /flashLoan/,
+            /onFlashLoan/,
+            /IERC3156/,
+            /flashFee/,
+            /IFlash/,
+        ],
+        risk_template: 'Flash loan callback in {file}',
+    },
+    {
+        flag: 'BALANCE_DEPENDENT',
+        patterns: [
+            /balanceOf\s*\(\s*address\s*\(\s*this\s*\)/,
+            /\.balance\b/,
+            /address\(this\)\.balance/,
+        ],
+        risk_template: 'Direct balance read in {file} — donation attack surface',
+    },
+    {
+        flag: 'CROSS_CHAIN',
+        patterns: [
+            /\b(bridge|crossChain|cross_chain)\b/i,
+            /\b(layerZero|wormhole|axelar|ccip)\b/i,
+            /\b(L1|L2)\b/,
+            /\bmessenger\b/i,
+            /\blzReceive\b/,
+            /\bccipReceive\b/,
+        ],
+        hint: 'cross-chain',
+        risk_template: 'Cross-chain interaction in {file}',
+    },
+    {
+        flag: 'SEMI_TRUSTED_ROLE',
+        patterns: [
+            /onlyKeeper/,
+            /onlyBot/,
+            /onlyOperator/,
+            /onlyRelayer/,
+            /\bBOT_ROLE\b/,
+            /\bKEEPER_ROLE\b/,
+            /\bOPERATOR_ROLE\b/,
+            /\bRELAYER_ROLE\b/,
+        ],
+        risk_template: 'Semi-trusted role in {file}',
+    },
+    {
+        flag: 'SHARE_ALLOCATION',
+        patterns: [
+            /\bshares\b/,
+            /\ballocation\b/i,
+            /pro.?rata/i,
+            /\bdistribution\b/i,
+            /convertToShares/,
+            /convertToAssets/,
+        ],
+        hint: 'vault',
+        risk_template: 'Share math in {file}',
+    },
+    {
+        flag: 'MONETARY_PARAMETER',
+        patterns: [
+            /\b(interestRate|feeRate|emissionRate|rewardRate)\b/,
+            /\brebase\b/i,
+            /\bemission\b/i,
+            /\.mint\s*\(/,
+            /\.burn\s*\(/,
+        ],
+        risk_template: 'Economic parameter in {file}',
+    },
+    {
+        flag: 'UPGRADEABLE',
+        patterns: [
+            /\bdelegatecall\b/,
+            /\bproxy\b/i,
+            /\binitializer\b/,
+            /\breinitializer\b/,
+            /_disableInitializers/,
+            /\bUUPS\b/,
+            /\bTransparentProxy\b/,
+        ],
+        hint: 'upgradeable',
+        risk_template: 'Upgrade pattern in {file}',
+    },
+    {
+        flag: 'ERC4626',
+        patterns: [
+            /\bERC4626\b/,
+            /convertToShares/,
+            /convertToAssets/,
+            /\bmaxDeposit\b/,
+            /\bmaxWithdraw\b/,
+        ],
+        hint: 'vault',
+        risk_template: 'ERC4626 vault math in {file}',
+    },
+    {
+        flag: 'RANDOMNESS',
+        patterns: [
+            /\bprevrandao\b/,
+            /block\.difficulty/,
+            /keccak256\s*\(\s*abi\.encodePacked\s*\(\s*block/,
+        ],
+        risk_template: 'Weak randomness source in {file}',
+    },
+    {
+        flag: 'HAS_SIGNATURES',
+        patterns: [
+            /\becrecover\b/,
+            /ECDSA\.recover/,
+            /\bEIP712\b/,
+            /domainSeparator/,
+            /\bpermit\b/,
+            /isValidSignature/,
+        ],
+        risk_template: 'Signature handling in {file}',
+    },
+    {
+        flag: 'CALLBACK',
+        patterns: [
+            /_safeMint/,
+            /onERC721Received/,
+            /onERC1155Received/,
+            /onFlashLoan/,
+            /\breceive\s*\(\s*\)/,
+            /\bfallback\s*\(/,
+        ],
+        risk_template: 'Callback / reentrancy entry in {file}',
+    },
+    {
+        flag: 'ASSEMBLY',
+        patterns: [
+            /assembly\s*\{/,
+            /\bsstore\b/,
+            /\bsload\b/,
+            /\bmstore\b/,
+            /\bmload\b/,
+            /\bcalldatacopy\b/,
+        ],
+        risk_template: 'Inline assembly in {file}',
+    },
+    {
+        flag: 'UNCHECKED',
+        patterns: [/unchecked\s*\{/],
+        risk_template: 'Unchecked arithmetic in {file}',
+    },
+    {
+        flag: 'DELEGATECALL',
+        patterns: [/\.delegatecall\s*\(/],
+        risk_template: 'Delegatecall in {file}',
+    },
+];
+/**
+ * Scan in-scope files for security-relevant patterns and return detection flags.
+ */
+export function detectPatterns(projectDir, scopeFiles) {
+    const flags = {};
+    const hintSet = new Set();
+    const riskSet = new Set();
+    // Initialize all flags
+    for (const def of PATTERN_DEFS) {
+        flags[def.flag] = { detected: false, locations: [], count: 0 };
+    }
+    for (const scopeFile of scopeFiles) {
+        const filePath = path.resolve(projectDir, scopeFile);
+        if (!fs.existsSync(filePath))
+            continue;
+        const source = fs.readFileSync(filePath, 'utf-8');
+        const lines = source.split('\n');
+        const normalFile = normalizePath(scopeFile);
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            // Skip comment-only lines
+            const trimmed = line.trim();
+            if (trimmed.startsWith('//') || trimmed.startsWith('*') || trimmed.startsWith('/*'))
+                continue;
+            for (const def of PATTERN_DEFS) {
+                for (const pattern of def.patterns) {
+                    const match = line.match(pattern);
+                    if (match) {
+                        const flag = flags[def.flag];
+                        flag.detected = true;
+                        flag.count++;
+                        // Keep max 5 locations per flag to avoid bloat
+                        if (flag.locations.length < 5) {
+                            flag.locations.push({
+                                file: normalFile,
+                                line: i + 1,
+                                match: match[0],
+                            });
+                        }
+                        if (def.hint)
+                            hintSet.add(def.hint);
+                        if (def.risk_template) {
+                            riskSet.add(def.risk_template.replace('{file}', normalFile));
+                        }
+                        break; // one match per pattern def per line
+                    }
+                }
+            }
+        }
+    }
+    // Deduplicate risk areas (same template + same file → one entry)
+    const risk_areas = [...riskSet].slice(0, 20);
+    const protocol_hints = [...hintSet];
+    return { flags, protocol_hints, risk_areas };
+}
+//# sourceMappingURL=pattern-detection.js.map

package/dist/analysis/pattern-detection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-detection.js","sourceRoot":"","sources":["../../src/analysis/pattern-detection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AA2BjD,MAAM,YAAY,GAAiB;IACjC;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,kBAAkB;YAClB,eAAe;YACf,gEAAgE;SACjE;QACD,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE;YACR,iBAAiB;YACjB,cAAc;YACd,UAAU;YACV,gCAAgC;YAChC,YAAY;YACZ,UAAU;YACV,SAAS;SACV;QACD,IAAI,EAAE,kBAAkB;QACxB,aAAa,EAAE,8BAA8B;KAC9C;IACD;QACE,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE;YACR,WAAW;YACX,aAAa;YACb,UAAU;YACV,UAAU;YACV,QAAQ;SACT;QACD,aAAa,EAAE,+BAA+B;KAC/C;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE;YACR,2CAA2C;YAC3C,aAAa;YACb,0BAA0B;SAC3B;QACD,aAAa,EAAE,yDAAyD;KACzE;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE;YACR,sCAAsC;YACtC,uCAAuC;YACvC,aAAa;YACb,gBAAgB;YAChB,eAAe;YACf,iBAAiB;SAClB;QACD,IAAI,EAAE,aAAa;QACnB,aAAa,EAAE,mCAAmC;KACnD;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE;YACR,YAAY;YACZ,SAAS;YACT,cAAc;YACd,aAAa;YACb,cAAc;YACd,iBAAiB;YACjB,mBAAmB;YACnB,kBAAkB;SACnB;QACD,aAAa,EAAE,6BAA6B;KAC7C;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE;YACR,YAAY;YACZ,iBAAiB;YACjB,YAAY;YACZ,mBAAmB;YACnB,iBAAiB;YACjB,iBAAiB;SAClB;QACD,IAAI,EAAE,OAAO;QACb,aAAa,EAAE,sBAAsB;KACtC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE;YACR,oDAAoD;YACpD,aAAa;YACb,eAAe;YACf,aAAa;YACb,aAAa;SACd;QACD,aAAa,EAAE,8BAA8B;KAC9C;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE;YACR,kBAAkB;YAClB,YAAY;YACZ,iBAAiB;YACjB,mBAAmB;YACnB,sBAAsB;YACtB,UAAU;YACV,sBAAsB;SACvB;QACD,IAAI,EAAE,aAAa;QACnB,aAAa,EAAE,2BAA2B;KAC3C;IACD;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACR,aAAa;YACb,iBAAiB;YACjB,iBAAiB;YACjB,gBAAgB;YAChB,iBAAiB;SAClB;QACD,IAAI,EAAE,OAAO;QACb,aAAa,EAAE,8BAA8B;KAC9C;IACD;QACE,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE;YACR,gBAAgB;YAChB,mBAAmB;YACnB,iDAAiD;SAClD;QACD,aAAa,EAAE,kCAAkC;KAClD;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,eAAe;YACf,gBAAgB;YAChB,YAAY;YACZ,iBAAiB;YACjB,YAAY;YACZ,kBAAkB;SACnB;QACD,aAAa,EAAE,8BAA8B;KAC9C;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,WAAW;YACX,kBAAkB;YAClB,mBAAmB;YACnB,aAAa;YACb,qBAAqB;YACrB,iBAAiB;SAClB;QACD,aAAa,EAAE,uCAAuC;KACvD;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,eAAe;YACf,YAAY;YACZ,WAAW;YACX,YAAY;YACZ,WAAW;YACX,kBAAkB;SACnB;QACD,aAAa,EAAE,2BAA2B;KAC3C;IACD;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,CAAC,gBAAgB,CAAC;QAC5B,aAAa,EAAE,gCAAgC;KAChD;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,CAAC,qBAAqB,CAAC;QACjC,aAAa,EAAE,wBAAwB;KACxC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,UAAoB;IACrE,MAAM,KAAK,GAAgC,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,uBAAuB;IACvB,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAE5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,0BAA0B;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAE9F,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAClC,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;wBACrB,IAAI,CAAC,KAAK,EAAE,CAAC;wBACb,+CAA+C;wBAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gCAClB,IAAI,EAAE,UAAU;gCAChB,IAAI,EAAE,CAAC,GAAG,CAAC;gCACX,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;6BAChB,CAAC,CAAC;wBACL,CAAC;wBACD,IAAI,GAAG,CAAC,IAAI;4BAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBACpC,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;4BACtB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;wBAC/D,CAAC;wBACD,MAAM,CAAC,qCAAqC;oBAC9C,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAEpC,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;AAC/C,CAAC"}

package/dist/analysis/state-variables.d.ts

@@ -0,0 +1,33 @@
+import type { ParsedContract } from '../parsers/solidity-parser.js';
+import type { SlitherFunctionSummary } from '../parsers/slither.js';
+import type { StorageLayout } from '../parsers/solc.js';
+import type { StateVariable } from '../types/index.js';
+import { z } from 'zod';
+import { StorageCollisionSchema } from '../core/schema.js';
+export type StorageCollision = z.infer<typeof StorageCollisionSchema>;
+/**
+ * Extract state variables from parsed contracts, enriched with Slither and solc data.
+ */
+export declare function extractStateVariables(contracts: ParsedContract[], fileMap: Map<string, string>, slitherSummary: SlitherFunctionSummary[] | null, storageLayout: StorageLayout | null): {
+    variables: StateVariable[];
+    storageLayoutSource: 'compiler-artifact' | null;
+    storageCollisions: StorageCollision[];
+};
+/**
+ * Detect storage slot collisions.
+ *
+ * Two checks are performed:
+ *   1. **Intra-contract:** the same (slot, offset) listed twice within a contract's
+ *      layout — solc should never emit this, so a hit usually means the artifact
+ *      was hand-edited or a build cache is stale.
+ *   2. **Inheritance divergence:** a parent contract's slot 0..N has a different
+ *      label than the child's at the same slot, which would mean the child
+ *      overrode a parent's storage layout incompatibly. With well-formed solc
+ *      output this should never fire; it catches manually packed layouts and
+ *      upgrade-safety regressions.
+ *
+ * Each collision is recorded with a Critical severity so it surfaces on the
+ * dashboard's attack-surface view.
+ */
+export declare function detectStorageCollisions(contracts: ParsedContract[], storageLayout: StorageLayout | null): StorageCollision[];
+//# sourceMappingURL=state-variables.d.ts.map

package/dist/analysis/state-variables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-variables.d.ts","sourceRoot":"","sources":["../../src/analysis/state-variables.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,cAAc,EAAE,EAC3B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,cAAc,EAAE,sBAAsB,EAAE,GAAG,IAAI,EAC/C,aAAa,EAAE,aAAa,GAAG,IAAI,GAClC;IACD,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,mBAAmB,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAChD,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;CACvC,CAuEA;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,cAAc,EAAE,EAC3B,aAAa,EAAE,aAAa,GAAG,IAAI,GAClC,gBAAgB,EAAE,CAuEpB"}

package/dist/analysis/state-variables.js

@@ -0,0 +1,179 @@
+/**
+ * Extract state variables from parsed contracts, enriched with Slither and solc data.
+ */
+export function extractStateVariables(contracts, fileMap, slitherSummary, storageLayout) {
+    const variables = [];
+    for (const contract of contracts) {
+        const file = fileMap.get(contract.name) ?? '';
+        for (const sv of contract.stateVariables) {
+            // Build read/write tracking
+            const { readers, writers } = getReadWriteInfo(contract.name, sv.name, slitherSummary);
+            // Check if variable has a dedicated setter
+            const hasSetter = detectSetter(contract, sv.name);
+            // Check if unused
+            const isUnused = readers.length === 0 && writers.length === 0 && sv.mutability === 'mutable';
+            // Get storage slot if available
+            const slot = getStorageSlot(contract.name, sv.name, storageLayout);
+            const variable = {
+                contract: contract.name,
+                name: sv.name,
+                type: sv.typeName,
+                visibility: sv.visibility,
+                mutability: sv.mutability,
+                evidence: {
+                    file,
+                    line_start: sv.lineStart,
+                    line_end: sv.lineEnd,
+                },
+                written_by: {
+                    functions: writers,
+                    confidence: slitherSummary ? 'medium' : 'low',
+                    derived_from: slitherSummary ? 'slither' : 'heuristic',
+                    warnings: slitherSummary
+                        ? ['Write detection based on data dependency analysis; indirect writes via assembly not tracked']
+                        : ['No Slither data available; write detection limited'],
+                },
+                read_by: {
+                    functions: readers,
+                    confidence: slitherSummary ? 'medium' : 'low',
+                    derived_from: slitherSummary ? 'slither' : 'heuristic',
+                },
+                has_setter: hasSetter,
+                is_bounded: sv.mutability === 'constant' || sv.mutability === 'immutable',
+                bound_description: sv.mutability === 'constant' && sv.initialValue
+                    ? `Constant: ${sv.initialValue}`
+                    : sv.mutability === 'immutable'
+                        ? 'Immutable: set at construction'
+                        : null,
+                is_unused: isUnused || undefined,
+                storage_slot: slot,
+            };
+            if (sv.mutability === 'constant' && sv.initialValue) {
+                variable.value = sv.initialValue;
+            }
+            variables.push(variable);
+        }
+    }
+    return {
+        variables,
+        storageLayoutSource: storageLayout && storageLayout.entries.length > 0 ? 'compiler-artifact' : null,
+        storageCollisions: detectStorageCollisions(contracts, storageLayout),
+    };
+}
+/**
+ * Detect storage slot collisions.
+ *
+ * Two checks are performed:
+ *   1. **Intra-contract:** the same (slot, offset) listed twice within a contract's
+ *      layout — solc should never emit this, so a hit usually means the artifact
+ *      was hand-edited or a build cache is stale.
+ *   2. **Inheritance divergence:** a parent contract's slot 0..N has a different
+ *      label than the child's at the same slot, which would mean the child
+ *      overrode a parent's storage layout incompatibly. With well-formed solc
+ *      output this should never fire; it catches manually packed layouts and
+ *      upgrade-safety regressions.
+ *
+ * Each collision is recorded with a Critical severity so it surfaces on the
+ * dashboard's attack-surface view.
+ */
+export function detectStorageCollisions(contracts, storageLayout) {
+    if (!storageLayout || storageLayout.entries.length === 0)
+        return [];
+    const collisions = [];
+    // 1. Intra-contract duplicate (slot, offset)
+    const byContract = new Map();
+    for (const entry of storageLayout.entries) {
+        if (!byContract.has(entry.contract))
+            byContract.set(entry.contract, []);
+        byContract.get(entry.contract).push(entry);
+    }
+    for (const [contract, entries] of byContract) {
+        const seen = new Map();
+        for (const entry of entries) {
+            const key = `${entry.slot}:${entry.offset}`;
+            if (!seen.has(key))
+                seen.set(key, []);
+            seen.get(key).push(entry);
+        }
+        for (const [, group] of seen) {
+            if (group.length < 2)
+                continue;
+            collisions.push({
+                slot: group[0].slot,
+                offset: group[0].offset,
+                variables: group.map((e) => ({ contract, name: e.label, type: e.type })),
+                severity: 'Critical',
+                description: `${contract} has ${group.length} variables sharing slot ${group[0].slot}@${group[0].offset}. ` +
+                    `Storage layouts emitted by solc should never collide within a single contract; this almost certainly indicates a stale build artifact or manually packed storage that bypasses the layout planner.`,
+            });
+        }
+    }
+    // 2. Inheritance divergence — child slot N should match parent slot N if defined.
+    const contractMap = new Map();
+    for (const c of contracts)
+        contractMap.set(c.name, c);
+    for (const [childName, childEntries] of byContract) {
+        const child = contractMap.get(childName);
+        if (!child || child.baseContracts.length === 0)
+            continue;
+        const childBySlot = new Map();
+        for (const e of childEntries)
+            childBySlot.set(e.slot, e);
+        for (const parentName of child.baseContracts) {
+            const parentEntries = byContract.get(parentName);
+            if (!parentEntries)
+                continue;
+            for (const parentEntry of parentEntries) {
+                const childEntry = childBySlot.get(parentEntry.slot);
+                if (!childEntry)
+                    continue;
+                if (childEntry.label !== parentEntry.label ||
+                    childEntry.type !== parentEntry.type ||
+                    childEntry.offset !== parentEntry.offset) {
+                    collisions.push({
+                        slot: parentEntry.slot,
+                        offset: parentEntry.offset,
+                        variables: [
+                            { contract: parentName, name: parentEntry.label, type: parentEntry.type },
+                            { contract: childName, name: childEntry.label, type: childEntry.type },
+                        ],
+                        severity: 'Critical',
+                        description: `Inheritance storage divergence at slot ${parentEntry.slot}: ${parentName} stores ` +
+                            `\`${parentEntry.label}: ${parentEntry.type}\` while ${childName} stores ` +
+                            `\`${childEntry.label}: ${childEntry.type}\`. For upgradeable contracts this would brick the proxy. ` +
+                            `Confirm the child preserves the parent's storage layout, or document the deliberate repack.`,
+                    });
+                }
+            }
+        }
+    }
+    return collisions;
+}
+function getReadWriteInfo(contractName, varName, slitherSummary) {
+    if (!slitherSummary)
+        return { readers: [], writers: [] };
+    const readers = [];
+    const writers = [];
+    for (const func of slitherSummary) {
+        if (func.contract !== contractName)
+            continue;
+        if (func.readVars.includes(varName))
+            readers.push(func.function);
+        if (func.writeVars.includes(varName))
+            writers.push(func.function);
+    }
+    return { readers: [...new Set(readers)], writers: [...new Set(writers)] };
+}
+function detectSetter(contract, varName) {
+    // Heuristic: look for external/public functions named set<VarName>
+    const setterPattern = `set${varName.charAt(0).toUpperCase()}${varName.slice(1)}`;
+    return contract.functions.some((f) => (f.visibility === 'external' || f.visibility === 'public') &&
+        (f.name === setterPattern || f.name === `update${varName.charAt(0).toUpperCase()}${varName.slice(1)}`));
+}
+function getStorageSlot(contractName, varName, storageLayout) {
+    if (!storageLayout)
+        return null;
+    const entry = storageLayout.entries.find((e) => e.contract === contractName && e.label === varName);
+    return entry?.slot ?? null;
+}
+//# sourceMappingURL=state-variables.js.map

package/dist/analysis/state-variables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-variables.js","sourceRoot":"","sources":["../../src/analysis/state-variables.ts"],"names":[],"mappings":"AASA;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAA2B,EAC3B,OAA4B,EAC5B,cAA+C,EAC/C,aAAmC;IAMnC,MAAM,SAAS,GAAoB,EAAE,CAAC;IAEtC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAE9C,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;YACzC,4BAA4B;YAC5B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAC3C,QAAQ,CAAC,IAAI,EACb,EAAE,CAAC,IAAI,EACP,cAAc,CACf,CAAC;YAEF,2CAA2C;YAC3C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAElD,kBAAkB;YAClB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;YAE7F,gCAAgC;YAChC,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YAEnE,MAAM,QAAQ,GAAkB;gBAC9B,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,EAAE,CAAC,QAAQ;gBACjB,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,UAAU,EAAE,EAAE,CAAC,UAAU;gBACzB,QAAQ,EAAE;oBACR,IAAI;oBACJ,UAAU,EAAE,EAAE,CAAC,SAAS;oBACxB,QAAQ,EAAE,EAAE,CAAC,OAAO;iBACrB;gBACD,UAAU,EAAE;oBACV,SAAS,EAAE,OAAO;oBAClB,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;oBAC7C,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;oBACtD,QAAQ,EAAE,cAAc;wBACtB,CAAC,CAAC,CAAC,6FAA6F,CAAC;wBACjG,CAAC,CAAC,CAAC,oDAAoD,CAAC;iBAC3D;gBACD,OAAO,EAAE;oBACP,SAAS,EAAE,OAAO;oBAClB,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;oBAC7C,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;iBACvD;gBACD,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,UAAU,IAAI,EAAE,CAAC,UAAU,KAAK,WAAW;gBACzE,iBAAiB,EAAE,EAAE,CAAC,UAAU,KAAK,UAAU,IAAI,EAAE,CAAC,YAAY;oBAChE,CAAC,CAAC,aAAa,EAAE,CAAC,YAAY,EAAE;oBAChC,CAAC,CAAC,EAAE,CAAC,UAAU,KAAK,WAAW;wBAC7B,CAAC,CAAC,gCAAgC;wBAClC,CAAC,CAAC,IAAI;gBACV,SAAS,EAAE,QAAQ,IAAI,SAAS;gBAChC,YAAY,EAAE,IAAI;aACnB,CAAC;YAEF,IAAI,EAAE,CAAC,UAAU,KAAK,UAAU,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;gBACpD,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC;YACnC,CAAC;YAED,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS;QACT,mBAAmB,EAAE,aAAa,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI;QACnG,iBAAiB,EAAE,uBAAuB,CAAC,SAAS,EAAE,aAAa,CAAC;KACrE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAA2B,EAC3B,aAAmC;IAEnC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpE,MAAM,UAAU,GAAuB,EAAE,CAAC;IAE1C,6CAA6C;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAwC,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoC,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAC/B,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;gBACnB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;gBACvB,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACxE,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,GAAG,QAAQ,QAAQ,KAAK,CAAC,MAAM,2BAA2B,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI;oBACzG,oMAAoM;aACvM,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEtD,KAAK,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,UAAU,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACzD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuC,CAAC;QACnE,KAAK,MAAM,CAAC,IAAI,YAAY;YAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAEzD,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YAC7C,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACjD,IAAI,CAAC,aAAa;gBAAE,SAAS;YAC7B,KAAK,MAAM,WAAW,IAAI,aAAa,EAAE,CAAC;gBACxC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBACrD,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC1B,IACE,UAAU,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK;oBACtC,UAAU,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;oBACpC,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EACxC,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,WAAW,CAAC,IAAI;wBACtB,MAAM,EAAE,WAAW,CAAC,MAAM;wBAC1B,SAAS,EAAE;4BACT,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE;4BACzE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE;yBACvE;wBACD,QAAQ,EAAE,UAAU;wBACpB,WAAW,EAAE,0CAA0C,WAAW,CAAC,IAAI,KAAK,UAAU,UAAU;4BAC9F,KAAK,WAAW,CAAC,KAAK,KAAK,WAAW,CAAC,IAAI,YAAY,SAAS,UAAU;4BAC1E,KAAK,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,IAAI,4DAA4D;4BACrG,6FAA6F;qBAChG,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CACvB,YAAoB,EACpB,OAAe,EACf,cAA+C;IAE/C,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAEzD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,QAAQ,KAAK,YAAY;YAAE,SAAS;QAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,YAAY,CAAC,QAAwB,EAAE,OAAe;IAC7D,mEAAmE;IACnE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC;QAC1D,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CACzG,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,YAAoB,EACpB,OAAe,EACf,aAAmC;IAEnC,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,CAC1D,CAAC;IACF,OAAO,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC;AAC7B,CAAC"}