insa-check-core 0.1.0

package/dist/code/scan.js

@@ -0,0 +1,159 @@
+import { stat } from "node:fs/promises";
+import path from "node:path";
+import { ANNEX_B, STANDARD } from "../annex-b.js";
+import { evaluateRegistry, TOOL_NAME, TOOL_VERSION } from "../engine.js";
+import { summarize } from "../report/summary.js";
+import { CODE_CHECKS } from "./checks/index.js";
+import { createCodeContext } from "./context.js";
+import { detectProject } from "./detect.js";
+import { discoverFiles } from "./project.js";
+import { PythonUnavailableError } from "./python/index.js";
+export class CodeScanError extends Error {
+    name = "CodeScanError";
+}
+/** Frameworks with their own rule set (see code/checks). Others are detected and reported; language rules still run. */
+const SUPPORTED_FRAMEWORKS = ["django", "flask", "fastapi", "express", "koa", "fastify", "next", "nestjs", "laravel"];
+/** Languages with a parser and rules. */
+const SUPPORTED_LANGUAGES = ["python", "javascript", "php", "java", "csharp", "ruby", "go"];
+const LABEL = {
+    python: "Python", javascript: "JavaScript/TypeScript", php: "PHP", java: "Java", csharp: "C#", ruby: "Ruby", go: "Go",
+    django: "Django", flask: "Flask", laravel: "Laravel", express: "Node server",
+};
+const SEVERITY = ["fail", "error", "manual", "pass"];
+/**
+ * Several checks can decide one Annex item (one per language). Their results are combined:
+ * the worst status wins (fail > error > manual > pass) and findings are merged.
+ */
+function combineOutcomes(parts) {
+    const status = SEVERITY.find((s) => parts.some((p) => p.outcome.status === s)) ?? "manual";
+    const label = (c) => (c.key.startsWith("ts-") ? "Java/C#/Ruby/Go" : (LABEL[c.appliesTo[0] ?? ""] ?? c.appliesTo[0] ?? c.key));
+    const findings = parts.flatMap((p) => p.outcome.findings ?? []);
+    const evidence = parts.flatMap((p) => p.outcome.evidence ?? []);
+    return {
+        status,
+        detail: parts.map((p) => `${label(p.check)}: ${p.outcome.detail}`).join(" | "),
+        ...(findings.length ? { findings } : {}),
+        ...(evidence.length ? { evidence } : {}),
+    };
+}
+/**
+ * Tier 2: statically analyse a local project directory. Source code is read from disk
+ * and parsed locally; nothing is sent anywhere. Returns the same 102-row Report as runScan().
+ */
+export async function runCodeScan(dir, options = {}) {
+    const root = path.resolve(dir);
+    const info = await stat(root).catch(() => undefined);
+    if (!info?.isDirectory())
+        throw new CodeScanError(`Not a directory: ${dir}`);
+    const startedAt = new Date().toISOString();
+    const discovery = await discoverFiles(root, {
+        maxFiles: options.maxFiles ?? 20_000,
+        maxFileBytes: options.maxFileBytes ?? 1_000_000,
+    });
+    const ctx0 = createCodeContext(root, discovery.files, { language: null, languages: [], frameworks: [], evidence: [] });
+    const project = await detectProject(discovery.files, ctx0.read);
+    if (options.framework && !project.frameworks.includes(options.framework)) {
+        project.frameworks.unshift(options.framework);
+        project.evidence.push(`--framework ${options.framework} (forced)`);
+        if (options.framework === "django" || options.framework === "flask") {
+            project.language = "python";
+            if (!project.languages.includes("python"))
+                project.languages.unshift("python");
+        }
+    }
+    const ctx = { ...ctx0, project };
+    const notes = [];
+    let parseErrors = [];
+    if (project.languages.includes("python")) {
+        try {
+            parseErrors = (await ctx.python()).parseErrors;
+        }
+        catch (err) {
+            if (err instanceof PythonUnavailableError)
+                throw new CodeScanError(err.message);
+            throw err;
+        }
+    }
+    if (project.languages.includes("javascript"))
+        parseErrors = [...parseErrors, ...(await ctx.javascript()).parseErrors];
+    if (project.languages.includes("php"))
+        parseErrors = [...parseErrors, ...(await ctx.php()).parseErrors];
+    if (project.languages.some((l) => ["java", "csharp", "ruby", "go"].includes(l)))
+        parseErrors = [...parseErrors, ...(await ctx.treeSitter()).parseErrors];
+    const analysed = project.languages.filter((l) => SUPPORTED_LANGUAGES.includes(l));
+    const notAnalysed = project.languages.filter((l) => !SUPPORTED_LANGUAGES.includes(l));
+    const unsupported = project.frameworks.filter((f) => !SUPPORTED_FRAMEWORKS.includes(f));
+    if (analysed.length === 0)
+        notes.push("No supported source language found (Python, JavaScript/TypeScript, PHP, Java, C#, Ruby, Go); all code-based items are reported as manual.");
+    else
+        notes.push(`Analysed: ${analysed.map((l) => LABEL[l]).join(", ")}${project.frameworks.length ? ` (frameworks: ${project.frameworks.join(", ")})` : ""}.`);
+    if (notAnalysed.length)
+        notes.push(`${notAnalysed.map((l) => LABEL[l] ?? l).join(", ")} code is present but has no rules yet; it was not analysed.`);
+    if (analysed.includes("python") && !project.frameworks.some((f) => ["django", "flask", "fastapi"].includes(f))) {
+        notes.push("No Python web framework detected (Django, Flask, FastAPI); generic Python rules ran, framework-specific items are manual. Use --framework django to force Django.");
+    }
+    if (unsupported.length)
+        notes.push(`Detected ${unsupported.join(", ")}, which has no framework-specific rules yet; language rules still ran.`);
+    if (parseErrors.length)
+        notes.push(`${parseErrors.length} file(s) could not be parsed and were not analysed (see sources.code.parseErrors).`);
+    if (discovery.truncated)
+        notes.push(`File limit reached; only the first ${discovery.files.length} files were analysed.`);
+    notes.push("Static analysis reports patterns, not proven vulnerabilities. Review each finding; 'Pass' means no risky pattern was found.");
+    const checks = options.checks ?? CODE_CHECKS;
+    const kinds = [...project.languages, ...project.frameworks];
+    // Each check runs once per scan, even when used alone for one item and combined for another.
+    const runs = new Map();
+    const runOnce = (check) => {
+        let pending = runs.get(check.key);
+        if (!pending) {
+            pending = check.run(ctx).catch((err) => ({ status: "error", detail: `Could not complete: ${err.message}` }));
+            runs.set(check.key, pending);
+        }
+        return pending;
+    };
+    const results = await evaluateRegistry({
+        registry: options.registry ?? ANNEX_B,
+        kind: "code",
+        ctx,
+        checkTimeoutMs: options.checkTimeoutMs ?? 60_000,
+        resolve: (item) => {
+            const all = [item.checks?.code ?? []].flat().map((k) => checks.get(k)).filter((c) => !!c);
+            if (all.length === 0)
+                return undefined;
+            const applicable = all.filter((c) => c.appliesTo.some((a) => kinds.includes(a)));
+            if (applicable.length === 0) {
+                return `No code rule for this item applies to this project (${kinds.join(", ") || "unknown type"}). ${item.manualNote}`;
+            }
+            return {
+                key: applicable.map((c) => c.key).join("+"),
+                run: async () => {
+                    const parts = await Promise.all(applicable.map(async (check) => ({ check, outcome: await runOnce(check) })));
+                    return parts.length === 1 ? parts[0].outcome : combineOutcomes(parts);
+                },
+            };
+        },
+        onResult: options.onResult,
+    });
+    return {
+        tool: { name: TOOL_NAME, version: TOOL_VERSION },
+        standard: STANDARD,
+        target: `code: ${ctx.name}`,
+        sources: {
+            code: {
+                name: ctx.name,
+                language: project.language,
+                languages: project.languages,
+                frameworks: project.frameworks,
+                filesAnalyzed: discovery.files.length,
+                filesSkipped: discovery.skipped,
+                parseErrors,
+            },
+        },
+        notes,
+        startedAt,
+        finishedAt: new Date().toISOString(),
+        summary: summarize(results),
+        results,
+    };
+}
+//# sourceMappingURL=scan.js.map

package/dist/code/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/code/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAiB3D,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,GAAG,eAAe,CAAC;CACjC;AAED,wHAAwH;AACxH,MAAM,oBAAoB,GAA2B,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAC9I,yCAAyC;AACzC,MAAM,mBAAmB,GAAwB,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACjH,MAAM,KAAK,GAA2B;IACpC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,uBAAuB,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI;IACrH,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa;CAC7E,CAAC;AAEF,MAAM,QAAQ,GAAa,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAE/D;;;GAGG;AACH,SAAS,eAAe,CAAC,KAAoD;IAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;IAC3F,MAAM,KAAK,GAAG,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzI,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO;QACL,MAAM;QACN,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9E,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,OAAO,GAAoB,EAAE;IAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;IAE7E,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE;QAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,MAAM;QACpC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;KAChD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACvH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,SAAS,WAAW,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACpE,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAgB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;IAE9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAsC,EAAE,CAAC;IACxD,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,WAAW,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,sBAAsB;gBAAE,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChF,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,WAAW,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACtH,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,WAAW,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IACxG,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,WAAW,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAEzJ,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,2IAA2I,CAAC,CAAC;;QAC9K,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/J,IAAI,WAAW,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IACrJ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,KAAK,CAAC,IAAI,CAAC,mKAAmK,CAAC,CAAC;IAClL,CAAC;IACD,IAAI,WAAW,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IAC/I,IAAI,WAAW,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,oFAAoF,CAAC,CAAC;IAC9I,IAAI,SAAS,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,sCAAsC,SAAS,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,CAAC;IACzH,KAAK,CAAC,IAAI,CAAC,6HAA6H,CAAC,CAAC;IAE1I,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC;IAC7C,MAAM,KAAK,GAAa,CAAC,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtE,6FAA6F;IAC7F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAiC,CAAC;IACtD,MAAM,OAAO,GAAG,CAAC,KAAgB,EAAyB,EAAE;QAC1D,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAgB,EAAE,MAAM,EAAE,uBAAuB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YAC7H,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC;QACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO;QACrC,IAAI,EAAE,MAAM;QACZ,GAAG;QACH,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,MAAM;QAChD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChB,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1G,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACvC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,uDAAuD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1H,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC3C,GAAG,EAAE,KAAK,IAAI,EAAE;oBACd,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC7G,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBACzE,CAAC;aACF,CAAC;QACJ,CAAC;QACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE;QAChD,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,SAAS,GAAG,CAAC,IAAI,EAAE;QAC3B,OAAO,EAAE;YACP,IAAI,EAAE;gBACJ,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM;gBACrC,YAAY,EAAE,SAAS,CAAC,OAAO;gBAC/B,WAAW;aACZ;SACF;QACD,KAAK;QACL,SAAS;QACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;QAC3B,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/code/treesitter/index.d.ts

@@ -0,0 +1,83 @@
+import Parser from "web-tree-sitter";
+/**
+ * Java, C#, Ruby and Go are parsed with tree-sitter (WebAssembly grammars from tree-sitter-wasms).
+ * One generic layer serves all four; each language is described by a small spec: what a call
+ * looks like, what counts as a string, and where client-controlled data comes from.
+ */
+export type TsNode = Parser.SyntaxNode;
+export type TsLang = "java" | "csharp" | "ruby" | "go";
+export interface LangSpec {
+    label: string;
+    wasm: string;
+    ext: RegExp;
+    callTypes: string[];
+    functionTypes: string[];
+    stringTypes: string[];
+    /** Child node types that make a string literal dynamic. */
+    interpolationTypes: string[];
+    /** Callee of string-formatting functions (their result is a built string). */
+    formatCall: RegExp;
+    assignTypes: string[];
+    identifierTypes: string[];
+    /** Client-controlled request data, matched against expression text. */
+    requestData: RegExp;
+    /** Normalised callee: "obj.method", "new Type", "Module::Class.method", "pkg.Func". */
+    callee(n: TsNode): string;
+    /** Names of parameters that carry client input (framework annotations / controller actions). */
+    taintedParams?(fn: TsNode): string[];
+}
+export declare const SPECS: Record<TsLang, LangSpec>;
+export interface TsScope {
+    tainted: Set<string>;
+    dynamicStrings: Set<string>;
+}
+export interface TsCallSite {
+    module: TsModule;
+    node: TsNode;
+    callee: string;
+    args: TsNode[];
+    fn: TsNode | null;
+}
+export declare class TsModule {
+    readonly lang: TsLang;
+    readonly path: string;
+    readonly root: TsNode;
+    readonly source: string;
+    readonly lines: string[];
+    readonly spec: LangSpec;
+    private readonly scopes;
+    private calls?;
+    constructor(lang: TsLang, path: string, root: TsNode, source: string);
+    lineOf(node: TsNode): number;
+    line(n: number): string;
+    isStringLiteral(n: TsNode): boolean;
+    isLiteral(n: TsNode): boolean;
+    /** Text of a plain string literal without its quotes. */
+    stringValue(n: TsNode | undefined): string | undefined;
+    /** Interpolated string, "+" concatenation involving a string, or a string-format call. */
+    isDynamicString(n: TsNode): boolean;
+    identifiers(n: TsNode): string[];
+    enclosingFunction(n: TsNode): TsNode | null;
+    /** Lightweight intra-procedural taint: request data, bound parameters, and names assigned from them. */
+    scope(fn: TsNode | null): TsScope;
+    isRequestDerived(n: TsNode, scope?: TsScope): boolean;
+    callSites(): TsCallSite[];
+}
+export declare class TsIndex {
+    readonly modules: TsModule[];
+    readonly parseErrors: {
+        file: string;
+        error: string;
+    }[];
+    constructor(modules: TsModule[], parseErrors: {
+        file: string;
+        error: string;
+    }[]);
+    byLang(lang: TsLang): TsModule[];
+    calls(): TsCallSite[];
+    mentions(lang: TsLang, pattern: RegExp): boolean;
+}
+export declare function langOfFile(path: string): TsLang | undefined;
+/** Parses one file. tree-sitter is error-tolerant, so a file with syntax errors still yields a (partial) tree. */
+export declare function parseTs(lang: TsLang, path: string, source: string): Promise<TsModule>;
+//# sourceMappingURL=index.d.ts.map

package/dist/code/treesitter/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/code/treesitter/index.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,iBAAiB,CAAC;AAErC;;;;GAIG;AAEH,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;AACvC,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC;AAEvD,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,2DAA2D;IAC3D,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,uFAAuF;IACvF,MAAM,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,gGAAgG;IAChG,aAAa,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACtC;AAKD,eAAO,MAAM,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAuF1C,CAAC;AAKF,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,QAAQ,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;CACnB;AAED,qBAAa,QAAQ;IAOjB,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM;IATzB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,KAAK,CAAC,CAAe;IAE7B,YACW,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EAIxB;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3B;IAED,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtB;IAED,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAElC;IAED,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAE5B;IAED,yDAAyD;IACzD,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAGrD;IAED,0FAA0F;IAC1F,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAYlC;IAED,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAG/B;IAED,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI1C;IAED,wGAAwG;IACxG,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAmBhC;IAED,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAGpD;IAED,SAAS,IAAI,UAAU,EAAE,CASxB;CACF;AAED,qBAAa,OAAO;IAEhB,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE;IAC5B,QAAQ,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE;IAFzD,YACW,OAAO,EAAE,QAAQ,EAAE,EACnB,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,EACrD;IAEJ,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,CAE/B;IAED,KAAK,IAAI,UAAU,EAAE,CAEpB;IAED,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAE/C;CACF;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE3D;AAsBD,kHAAkH;AAClH,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAG3F"}

package/dist/code/treesitter/index.js

@@ -0,0 +1,243 @@
+import { createRequire } from "node:module";
+import Parser from "web-tree-sitter";
+const squash = (s) => s.replace(/\s+/g, "");
+const field = (n, name) => n.childForFieldName(name);
+export const SPECS = {
+    java: {
+        label: "Java",
+        wasm: "java",
+        ext: /\.java$/,
+        callTypes: ["method_invocation", "object_creation_expression"],
+        functionTypes: ["method_declaration", "constructor_declaration", "lambda_expression"],
+        stringTypes: ["string_literal"],
+        interpolationTypes: [],
+        formatCall: /^(String\.format|MessageFormat\.format)$|\.formatted$/,
+        assignTypes: ["variable_declarator", "assignment_expression"],
+        identifierTypes: ["identifier"],
+        requestData: /\b(?:request|req|httpRequest)\.(?:getParameter|getParameterValues|getParameterMap|getHeader|getQueryString|getCookies|getInputStream|getReader|getRequestURI|getPathInfo)\b/,
+        callee(n) {
+            if (n.type === "object_creation_expression")
+                return `new ${squash(field(n, "type")?.text ?? "").replace(/<.*>$/, "")}`;
+            const obj = field(n, "object");
+            return squash(`${obj ? `${obj.text}.` : ""}${field(n, "name")?.text ?? ""}`);
+        },
+        taintedParams(fn) {
+            // Spring MVC: parameters bound from the request.
+            return (field(fn, "parameters")?.namedChildren ?? [])
+                .filter((p) => /@(RequestParam|PathVariable|RequestBody|RequestHeader|CookieValue|ModelAttribute)\b/.test(p.text))
+                .map((p) => field(p, "name")?.text ?? "")
+                .filter(Boolean);
+        },
+    },
+    csharp: {
+        label: "C#",
+        wasm: "c_sharp",
+        ext: /\.cs$/,
+        callTypes: ["invocation_expression", "object_creation_expression"],
+        functionTypes: ["method_declaration", "constructor_declaration", "lambda_expression", "local_function_statement"],
+        stringTypes: ["string_literal", "verbatim_string_literal", "interpolated_string_expression", "raw_string_literal"],
+        interpolationTypes: ["interpolation"],
+        formatCall: /^(string|String)\.Format$/,
+        assignTypes: ["variable_declarator", "assignment_expression"],
+        identifierTypes: ["identifier"],
+        requestData: /\b(?:Request|HttpContext\.Request)\.(?:Query|Form|Headers|Cookies|Body|QueryString|Params|Path|RouteValues)\b/,
+        callee(n) {
+            if (n.type === "object_creation_expression")
+                return `new ${squash(field(n, "type")?.text ?? "").replace(/<.*>$/, "")}`;
+            return squash(field(n, "function")?.text ?? "");
+        },
+        taintedParams(fn) {
+            // ASP.NET model binding: action parameters of controllers, or parameters marked [FromQuery] etc.
+            let cls = fn.parent;
+            while (cls && cls.type !== "class_declaration")
+                cls = cls.parent;
+            const inController = !!cls && /:\s*[\w.,\s]*Controller(Base)?\b/.test(cls.text.slice(0, 300));
+            return (field(fn, "parameters")?.namedChildren ?? [])
+                .filter((p) => inController || /\[From(Query|Body|Route|Form|Header)\b/.test(p.text))
+                .map((p) => field(p, "name")?.text ?? "")
+                .filter(Boolean);
+        },
+    },
+    ruby: {
+        label: "Ruby",
+        wasm: "ruby",
+        ext: /\.rb$/,
+        callTypes: ["call"],
+        functionTypes: ["method", "singleton_method", "block", "do_block", "lambda"],
+        stringTypes: ["string"],
+        interpolationTypes: ["interpolation"],
+        formatCall: /^(format|sprintf)$/,
+        assignTypes: ["assignment"],
+        identifierTypes: ["identifier", "instance_variable"],
+        requestData: /\bparams\b|\brequest\.(?:headers|body|query_parameters|request_parameters|raw_post|cookies|query_string)\b|\bcookies\[/,
+        callee(n) {
+            const receiver = field(n, "receiver");
+            return squash(`${receiver ? `${receiver.text}.` : ""}${field(n, "method")?.text ?? ""}`);
+        },
+    },
+    go: {
+        label: "Go",
+        wasm: "go",
+        ext: /\.go$/,
+        callTypes: ["call_expression"],
+        functionTypes: ["function_declaration", "method_declaration", "func_literal"],
+        stringTypes: ["interpreted_string_literal", "raw_string_literal"],
+        interpolationTypes: [],
+        formatCall: /^fmt\.Sprintf$/,
+        assignTypes: ["short_var_declaration", "assignment_statement", "var_spec"],
+        identifierTypes: ["identifier"],
+        requestData: /\b\w+\.(?:URL\.Query\(\)|URL\.Path|URL\.RawQuery|FormValue\(|PostFormValue\(|Form\b|PostForm\b|Header\.Get\(|Body\b|Cookie\()|\b\w+\.(?:Query|Param|PostForm|DefaultQuery|DefaultPostForm|GetHeader|QueryParam|FormValue|GetRawData)\(|\bmux\.Vars\(|\bchi\.URLParam\(/,
+        callee(n) {
+            return squash(field(n, "function")?.text ?? "");
+        },
+    },
+};
+const LITERAL_TYPES = /^(decimal_integer_literal|hex_integer_literal|integer_literal|integer|int_literal|float_literal|real_literal|decimal_floating_point_literal|float|true|false|boolean_literal|null_literal|nil|null|character_literal|simple_symbol|rune_literal)$/;
+export class TsModule {
+    lang;
+    path;
+    root;
+    source;
+    lines;
+    spec;
+    scopes = new Map();
+    calls;
+    constructor(lang, path, root, source) {
+        this.lang = lang;
+        this.path = path;
+        this.root = root;
+        this.source = source;
+        this.lines = source.split(/\r?\n/);
+        this.spec = SPECS[lang];
+    }
+    lineOf(node) {
+        return node.startPosition.row + 1;
+    }
+    line(n) {
+        return this.lines[n - 1] ?? "";
+    }
+    isStringLiteral(n) {
+        return this.spec.stringTypes.includes(n.type) && (this.spec.interpolationTypes.length === 0 || n.descendantsOfType(this.spec.interpolationTypes).length === 0);
+    }
+    isLiteral(n) {
+        return this.isStringLiteral(n) || LITERAL_TYPES.test(n.type);
+    }
+    /** Text of a plain string literal without its quotes. */
+    stringValue(n) {
+        if (!n || !this.isStringLiteral(n))
+            return undefined;
+        return n.text.replace(/^[@$]*("""|'''|"|'|`)/, "").replace(/("""|'''|"|'|`)$/, "");
+    }
+    /** Interpolated string, "+" concatenation involving a string, or a string-format call. */
+    isDynamicString(n) {
+        const s = this.spec;
+        if (s.stringTypes.includes(n.type))
+            return !this.isStringLiteral(n);
+        if (n.type === "binary_expression" || n.type === "binary") {
+            const op = n.childForFieldName("operator")?.text ?? (n.text.includes("+") ? "+" : "");
+            if (op !== "+")
+                return false;
+            const parts = n.namedChildren;
+            const stringy = (x) => s.stringTypes.includes(x.type) || this.isDynamicString(x);
+            return parts.some(stringy) && !parts.every((x) => this.isStringLiteral(x));
+        }
+        if (s.callTypes.includes(n.type))
+            return s.formatCall.test(s.callee(n));
+        return false;
+    }
+    identifiers(n) {
+        const own = this.spec.identifierTypes.includes(n.type) ? [n.text] : [];
+        return [...own, ...n.descendantsOfType(this.spec.identifierTypes).map((x) => x.text)];
+    }
+    enclosingFunction(n) {
+        let p = n.parent;
+        while (p && !this.spec.functionTypes.includes(p.type))
+            p = p.parent;
+        return p;
+    }
+    /** Lightweight intra-procedural taint: request data, bound parameters, and names assigned from them. */
+    scope(fn) {
+        const root = fn ?? this.root;
+        let scope = this.scopes.get(root.id);
+        if (scope)
+            return scope;
+        scope = { tainted: new Set(fn ? (this.spec.taintedParams?.(fn) ?? []) : []), dynamicStrings: new Set() };
+        this.scopes.set(root.id, scope);
+        const assigns = root.descendantsOfType(this.spec.assignTypes);
+        for (let pass = 0; pass < 2; pass++) {
+            for (const a of assigns) {
+                const left = a.childForFieldName("left") ?? a.childForFieldName("name") ?? a.namedChildren[0];
+                const right = a.childForFieldName("right") ?? a.childForFieldName("value") ?? a.namedChildren.at(-1);
+                if (!left || !right || left.id === right.id)
+                    continue;
+                const names = this.identifiers(left);
+                if (this.isRequestDerived(right, scope))
+                    names.forEach((x) => scope.tainted.add(x));
+                const value = right.type === "equals_value_clause" || right.type === "expression_list" ? (right.namedChildren[0] ?? right) : right;
+                if (this.isDynamicString(value))
+                    names.forEach((x) => scope.dynamicStrings.add(x));
+            }
+        }
+        return scope;
+    }
+    isRequestDerived(n, scope) {
+        if (this.spec.requestData.test(n.text))
+            return true;
+        return !!scope && this.identifiers(n).some((i) => scope.tainted.has(i));
+    }
+    callSites() {
+        if (this.calls)
+            return this.calls;
+        this.calls = this.root.descendantsOfType(this.spec.callTypes).map((node) => {
+            let args = node.childForFieldName("arguments")?.namedChildren ?? [];
+            // C# wraps each argument; unwrap to the expression (also skips the name in "name: value").
+            args = args.map((a) => (a.type === "argument" ? (a.namedChildren.at(-1) ?? a) : a));
+            return { module: this, node, callee: this.spec.callee(node), args, fn: this.enclosingFunction(node) };
+        });
+        return this.calls;
+    }
+}
+export class TsIndex {
+    modules;
+    parseErrors;
+    constructor(modules, parseErrors) {
+        this.modules = modules;
+        this.parseErrors = parseErrors;
+    }
+    byLang(lang) {
+        return this.modules.filter((m) => m.lang === lang);
+    }
+    calls() {
+        return this.modules.flatMap((m) => m.callSites());
+    }
+    mentions(lang, pattern) {
+        return this.byLang(lang).some((m) => pattern.test(m.source));
+    }
+}
+export function langOfFile(path) {
+    return Object.keys(SPECS).find((l) => SPECS[l].ext.test(path));
+}
+const require = createRequire(import.meta.url);
+let ready;
+const parsers = new Map();
+function parserFor(lang) {
+    let pending = parsers.get(lang);
+    if (!pending) {
+        pending = (async () => {
+            ready ??= Parser.init();
+            await ready;
+            const language = await Parser.Language.load(require.resolve(`tree-sitter-wasms/out/tree-sitter-${SPECS[lang].wasm}.wasm`));
+            const parser = new Parser();
+            parser.setLanguage(language);
+            return parser;
+        })();
+        parsers.set(lang, pending);
+    }
+    return pending;
+}
+/** Parses one file. tree-sitter is error-tolerant, so a file with syntax errors still yields a (partial) tree. */
+export async function parseTs(lang, path, source) {
+    const parser = await parserFor(lang);
+    return new TsModule(lang, path, parser.parse(source).rootNode, source);
+}
+//# sourceMappingURL=index.js.map

package/dist/code/treesitter/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/code/treesitter/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,MAAM,MAAM,iBAAiB,CAAC;AAgCrC,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,KAAK,GAA6B;IAC7C,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,SAAS;QACd,SAAS,EAAE,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;QAC9D,aAAa,EAAE,CAAC,oBAAoB,EAAE,yBAAyB,EAAE,mBAAmB,CAAC;QACrF,WAAW,EAAE,CAAC,gBAAgB,CAAC;QAC/B,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,uDAAuD;QACnE,WAAW,EAAE,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;QAC7D,eAAe,EAAE,CAAC,YAAY,CAAC;QAC/B,WAAW,EAAE,6KAA6K;QAC1L,MAAM,CAAC,CAAC;YACN,IAAI,CAAC,CAAC,IAAI,KAAK,4BAA4B;gBAAE,OAAO,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;YACvH,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC/B,OAAO,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,aAAa,CAAC,EAAE;YACd,iDAAiD;YACjD,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC;iBAClD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qFAAqF,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;iBACjH,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;iBACxC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;KACF;IACD,MAAM,EAAE;QACN,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,SAAS;QACf,GAAG,EAAE,OAAO;QACZ,SAAS,EAAE,CAAC,uBAAuB,EAAE,4BAA4B,CAAC;QAClE,aAAa,EAAE,CAAC,oBAAoB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,0BAA0B,CAAC;QACjH,WAAW,EAAE,CAAC,gBAAgB,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,oBAAoB,CAAC;QAClH,kBAAkB,EAAE,CAAC,eAAe,CAAC;QACrC,UAAU,EAAE,2BAA2B;QACvC,WAAW,EAAE,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;QAC7D,eAAe,EAAE,CAAC,YAAY,CAAC;QAC/B,WAAW,EAAE,+GAA+G;QAC5H,MAAM,CAAC,CAAC;YACN,IAAI,CAAC,CAAC,IAAI,KAAK,4BAA4B;gBAAE,OAAO,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;YACvH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,aAAa,CAAC,EAAE;YACd,iGAAiG;YACjG,IAAI,GAAG,GAAkB,EAAE,CAAC,MAAM,CAAC;YACnC,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB;gBAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;YACjE,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,IAAI,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9F,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC;iBAClD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,IAAI,wCAAwC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;iBACpF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;iBACxC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;KACF;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,OAAO;QACZ,SAAS,EAAE,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,CAAC,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC;QAC5E,WAAW,EAAE,CAAC,QAAQ,CAAC;QACvB,kBAAkB,EAAE,CAAC,eAAe,CAAC;QACrC,UAAU,EAAE,oBAAoB;QAChC,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,eAAe,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC;QACpD,WAAW,EAAE,wHAAwH;QACrI,MAAM,CAAC,CAAC;YACN,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3F,CAAC;KACF;IACD,EAAE,EAAE;QACF,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,IAAI;QACV,GAAG,EAAE,OAAO;QACZ,SAAS,EAAE,CAAC,iBAAiB,CAAC;QAC9B,aAAa,EAAE,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,cAAc,CAAC;QAC7E,WAAW,EAAE,CAAC,4BAA4B,EAAE,oBAAoB,CAAC;QACjE,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,CAAC,uBAAuB,EAAE,sBAAsB,EAAE,UAAU,CAAC;QAC1E,eAAe,EAAE,CAAC,YAAY,CAAC;QAC/B,WAAW,EACT,wQAAwQ;QAC1Q,MAAM,CAAC,CAAC;YACN,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;KACF;CACF,CAAC;AAEF,MAAM,aAAa,GACjB,mPAAmP,CAAC;AAetP,MAAM,OAAO,QAAQ;IAOR,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,MAAM;IATR,KAAK,CAAW;IAChB,IAAI,CAAW;IACP,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC7C,KAAK,CAAgB;IAE7B,YACW,IAAY,EACZ,IAAY,EACZ,IAAY,EACZ,MAAc;oBAHd,IAAI;oBACJ,IAAI;oBACJ,IAAI;sBACJ,MAAM;QAEf,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,CAAS;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,eAAe,CAAC,CAAS;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IACjK,CAAC;IAED,SAAS,CAAC,CAAS;QACjB,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IAED,yDAAyD;IACzD,WAAW,CAAC,CAAqB;QAC/B,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACrD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,0FAA0F;IAC1F,eAAe,CAAC,CAAS;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,IAAI,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,EAAE,GAAG,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtF,IAAI,EAAE,KAAK,GAAG;gBAAE,OAAO,KAAK,CAAC;YAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,aAAa,CAAC;YAC9B,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACzF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW,CAAC,CAAS;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,iBAAiB,CAAC,CAAS;QACzB,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACpE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,wGAAwG;IACxG,KAAK,CAAC,EAAiB;QACrB,MAAM,IAAI,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC;QAC7B,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QACzG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;gBAC9F,MAAM,KAAK,GAAG,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrG,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;oBAAE,SAAS;gBACtD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC;oBAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,qBAAqB,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBACnI,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;oBAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gBAAgB,CAAC,CAAS,EAAE,KAAe;QACzC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,OAAO,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACzE,IAAI,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC;YACpE,2FAA2F;YAC3F,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QACxG,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF;AAED,MAAM,OAAO,OAAO;IAEP,OAAO;IACP,WAAW;IAFtB,YACW,OAAmB,EACnB,WAA8C;uBAD9C,OAAO;2BACP,WAAW;IACnB,CAAC;IAEJ,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,OAAe;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAQ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,IAAI,KAAgC,CAAC;AACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEnD,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YACpB,KAAK,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,KAAK,CAAC;YACZ,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,qCAAqC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;YAC3H,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,kHAAkH;AAClH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc;IACtE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC"}

package/dist/code/types.d.ts

@@ -0,0 +1,48 @@
+import type { CheckOutcome } from "../types.js";
+import type { JsIndex } from "./javascript/index.js";
+import type { PhpIndex } from "./php/index.js";
+import type { PythonIndex } from "./python/index.js";
+import type { TsIndex } from "./treesitter/index.js";
+export type Language = "python" | "javascript" | "php" | "java" | "csharp" | "ruby" | "go";
+/** Frameworks we can recognise. Only those with a rule set get code checks; others are reported as detected. */
+export type FrameworkId = "django" | "flask" | "fastapi" | "express" | "koa" | "fastify" | "next" | "nestjs" | "laravel" | "spring" | "aspnet" | "rails" | "gin";
+export interface SourceFile {
+    /** Relative to the project root, "/" separators. */
+    path: string;
+    size: number;
+}
+export interface ProjectInfo {
+    /** Primary language (most source files, weighted by detected frameworks). */
+    language: Language | null;
+    /** Every language with source files in the project. */
+    languages: Language[];
+    frameworks: FrameworkId[];
+    /** Why we think so, e.g. "requirements.txt lists Django". */
+    evidence: string[];
+}
+export interface CodeContext {
+    /** Project directory name, for messages. Never the absolute path. */
+    name: string;
+    project: ProjectInfo;
+    files: readonly SourceFile[];
+    /** Read a project file by relative path (cached). */
+    read(path: string): Promise<string>;
+    /** Parsed Python modules (cached; parsed once per scan). */
+    python(): Promise<PythonIndex>;
+    /** Parsed JavaScript / TypeScript modules (cached; parsed once per scan). */
+    javascript(): Promise<JsIndex>;
+    /** Parsed PHP files (cached; parsed once per scan). */
+    php(): Promise<PhpIndex>;
+    /** Parsed Java, C#, Ruby and Go files (tree-sitter; cached, parsed once per scan). */
+    treeSitter(): Promise<TsIndex>;
+}
+/** A static-analysis check (Tier 2). */
+export interface CodeCheck {
+    kind: "code";
+    /** Stable identifier, referenced from AnnexItem.checks.code. */
+    key: string;
+    /** The check runs only when the project's language or one of its frameworks is listed. */
+    appliesTo: readonly (Language | FrameworkId)[];
+    run(ctx: CodeContext): Promise<CheckOutcome>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/code/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/code/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC;AAE3F,gHAAgH;AAChH,MAAM,MAAM,WAAW,GACnB,QAAQ,GAAG,OAAO,GAAG,SAAS,GAC9B,SAAS,GAAG,KAAK,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GACjD,SAAS,GACT,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAC;AAE1C,MAAM,WAAW,UAAU;IACzB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC1B,uDAAuD;IACvD,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,UAAU,EAAE,WAAW,EAAE,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IAC7B,qDAAqD;IACrD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,4DAA4D;IAC5D,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/B,6EAA6E;IAC7E,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,uDAAuD;IACvD,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzB,sFAAsF;IACtF,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAChC;AAED,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,GAAG,EAAE,MAAM,CAAC;IACZ,0FAA0F;IAC1F,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC;IAC/C,GAAG,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC9C"}

package/dist/code/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/code/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/code/types.ts"],"names":[],"mappings":""}

package/dist/content/en.d.ts

@@ -0,0 +1,3 @@
+import type { GuidanceCatalog } from "./types.js";
+export declare const EN: GuidanceCatalog;
+//# sourceMappingURL=en.d.ts.map

package/dist/content/en.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"en.d.ts","sourceRoot":"","sources":["../../src/content/en.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAelD,eAAO,MAAM,EAAE,EAAE,eA2sBhB,CAAC"}