kirograph 0.17.0 → 0.19.0

package/dist/security/export/serialization.js

@@ -0,0 +1,142 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var serialization_exports = {};
+__export(serialization_exports, {
+  deserializeAll: () => deserializeAll,
+  deserializeComponentToDependency: () => deserializeComponentToDependency,
+  serializeAll: () => serializeAll,
+  serializeDependencyToComponent: () => serializeDependencyToComponent
+});
+module.exports = __toCommonJS(serialization_exports);
+const ECOSYSTEM_TO_PURL = {
+  npm: "npm",
+  maven: "maven",
+  go: "golang",
+  pypi: "pypi",
+  cargo: "cargo"
+};
+const PURL_TO_ECOSYSTEM = {
+  npm: "npm",
+  maven: "maven",
+  golang: "go",
+  pypi: "pypi",
+  cargo: "cargo"
+};
+function serializeDependencyToComponent(dep) {
+  const purlType = ECOSYSTEM_TO_PURL[dep.ecosystem];
+  if (!purlType) {
+    throw new Error(`Unsupported ecosystem: ${dep.ecosystem}`);
+  }
+  const version = dep.resolved_version ?? dep.declared_constraint;
+  if (!version) {
+    throw new Error(`No version or constraint available for dependency: ${dep.package_name}`);
+  }
+  if (!dep.package_name) {
+    throw new Error("Dependency package_name is required");
+  }
+  const purl = `pkg:${purlType}/${dep.package_name}@${version}`;
+  const scope = dep.scope === "production" ? "required" : "optional";
+  const component = {
+    type: "library",
+    name: dep.package_name,
+    version,
+    purl,
+    scope,
+    properties: [
+      { name: "kirograph:declaredConstraint", value: dep.declared_constraint }
+    ]
+  };
+  return component;
+}
+function deserializeComponentToDependency(component) {
+  if (!component.purl) {
+    throw new Error(`Component "${component.name}" is missing purl`);
+  }
+  if (!component.name) {
+    throw new Error("Component name is required");
+  }
+  const purlMatch = component.purl.match(/^pkg:([^/]+)\/(.+)@(.+)$/);
+  if (!purlMatch) {
+    throw new Error(`Invalid purl format: ${component.purl}`);
+  }
+  const [, purlType, purlName, purlVersion] = purlMatch;
+  const ecosystem = PURL_TO_ECOSYSTEM[purlType];
+  if (!ecosystem) {
+    throw new Error(`Unsupported purl type: ${purlType}`);
+  }
+  const constraintProp = component.properties?.find(
+    (p) => p.name === "kirograph:declaredConstraint"
+  );
+  const declaredConstraint = constraintProp?.value ?? component.version;
+  const scope = component.scope === "optional" ? "optional" : "production";
+  const row = {
+    node_id: `dep:${ecosystem}:${purlName}`,
+    ecosystem,
+    package_name: purlName,
+    declared_constraint: declaredConstraint,
+    resolved_version: purlVersion,
+    scope,
+    transitive_status: "complete",
+    last_vuln_check: null,
+    vuln_data_stale: 0,
+    vuln_data_stale_since: null,
+    source_manifests: "[]"
+  };
+  return row;
+}
+function serializeAll(deps) {
+  const components = [];
+  const errors = [];
+  for (const dep of deps) {
+    try {
+      const component = serializeDependencyToComponent(dep);
+      components.push(component);
+    } catch (err) {
+      errors.push({
+        name: dep.package_name || dep.node_id || "unknown",
+        reason: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+  return { components, errors };
+}
+function deserializeAll(components) {
+  const deps = [];
+  const errors = [];
+  for (const component of components) {
+    try {
+      const dep = deserializeComponentToDependency(component);
+      deps.push(dep);
+    } catch (err) {
+      errors.push({
+        name: component.name || "unknown",
+        reason: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+  return { deps, errors };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  deserializeAll,
+  deserializeComponentToDependency,
+  serializeAll,
+  serializeDependencyToComponent
+});
+//# sourceMappingURL=serialization.js.map

package/dist/security/export/serialization.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/security/export/serialization.ts"],
+  "sourcesContent": ["/**\n * CycloneDX serialization utilities for Dependency_Nodes.\n *\n * Provides serialize/deserialize between DependencyRow (sec_dependencies table)\n * and CycloneDX JSON component format, with partial failure resilience.\n *\n * Requirements: 8.2, 8.3, 8.4\n */\nimport type { CycloneDXComponent } from '../types';\n\n// \u2500\u2500 Interfaces \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Represents a row from the sec_dependencies table.\n */\nexport interface DependencyRow {\n  node_id: string;\n  ecosystem: string;\n  package_name: string;\n  declared_constraint: string;\n  resolved_version: string | null;\n  scope: 'production' | 'development' | 'optional';\n  transitive_status: 'complete' | 'incomplete';\n  last_vuln_check: number | null;\n  vuln_data_stale: number;\n  vuln_data_stale_since: number | null;\n  source_manifests: string; // JSON array of manifest paths\n}\n\n/**\n * Error reported when a single node fails serialization/deserialization.\n */\nexport interface SerializationError {\n  name: string;\n  reason: string;\n}\n\n// \u2500\u2500 Ecosystem \u2194 purl type mapping \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst ECOSYSTEM_TO_PURL: Record<string, string> = {\n  npm: 'npm',\n  maven: 'maven',\n  go: 'golang',\n  pypi: 'pypi',\n  cargo: 'cargo',\n};\n\nconst PURL_TO_ECOSYSTEM: Record<string, string> = {\n  npm: 'npm',\n  maven: 'maven',\n  golang: 'go',\n  pypi: 'pypi',\n  cargo: 'cargo',\n};\n\n// \u2500\u2500 Single-item serialization \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Converts a dependency database row to a CycloneDX component object.\n * Stores the declared constraint in a `properties` array entry with\n * name \"kirograph:declaredConstraint\".\n *\n * The purl format is: pkg:<ecosystem>/<name>@<version>\n */\nexport function serializeDependencyToComponent(dep: DependencyRow): CycloneDXComponent {\n  const purlType = ECOSYSTEM_TO_PURL[dep.ecosystem];\n  if (!purlType) {\n    throw new Error(`Unsupported ecosystem: ${dep.ecosystem}`);\n  }\n\n  const version = dep.resolved_version ?? dep.declared_constraint;\n  if (!version) {\n    throw new Error(`No version or constraint available for dependency: ${dep.package_name}`);\n  }\n\n  if (!dep.package_name) {\n    throw new Error('Dependency package_name is required');\n  }\n\n  const purl = `pkg:${purlType}/${dep.package_name}@${version}`;\n\n  const scope: 'required' | 'optional' =\n    dep.scope === 'production' ? 'required' : 'optional';\n\n  const component: CycloneDXComponent = {\n    type: 'library',\n    name: dep.package_name,\n    version,\n    purl,\n    scope,\n    properties: [\n      { name: 'kirograph:declaredConstraint', value: dep.declared_constraint },\n    ],\n  };\n\n  return component;\n}\n\n// \u2500\u2500 Single-item deserialization \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Converts a CycloneDX component back to a dependency row.\n * Extracts the constraint from the properties array.\n */\nexport function deserializeComponentToDependency(component: CycloneDXComponent): DependencyRow {\n  if (!component.purl) {\n    throw new Error(`Component \"${component.name}\" is missing purl`);\n  }\n\n  if (!component.name) {\n    throw new Error('Component name is required');\n  }\n\n  // Parse purl: pkg:<type>/<name>@<version>\n  const purlMatch = component.purl.match(/^pkg:([^/]+)\\/(.+)@(.+)$/);\n  if (!purlMatch) {\n    throw new Error(`Invalid purl format: ${component.purl}`);\n  }\n\n  const [, purlType, purlName, purlVersion] = purlMatch;\n\n  const ecosystem = PURL_TO_ECOSYSTEM[purlType];\n  if (!ecosystem) {\n    throw new Error(`Unsupported purl type: ${purlType}`);\n  }\n\n  // Extract declared constraint from properties\n  const constraintProp = component.properties?.find(\n    (p) => p.name === 'kirograph:declaredConstraint',\n  );\n  const declaredConstraint = constraintProp?.value ?? component.version;\n\n  // Map CycloneDX scope back to dependency scope\n  const scope: 'production' | 'development' | 'optional' =\n    component.scope === 'optional' ? 'optional' : 'production';\n\n  const row: DependencyRow = {\n    node_id: `dep:${ecosystem}:${purlName}`,\n    ecosystem,\n    package_name: purlName,\n    declared_constraint: declaredConstraint,\n    resolved_version: purlVersion,\n    scope,\n    transitive_status: 'complete',\n    last_vuln_check: null,\n    vuln_data_stale: 0,\n    vuln_data_stale_since: null,\n    source_manifests: '[]',\n  };\n\n  return row;\n}\n\n// \u2500\u2500 Batch serialization with partial failure resilience \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Serializes all dependencies, collecting errors for any that fail\n * without aborting the batch.\n */\nexport function serializeAll(deps: DependencyRow[]): {\n  components: CycloneDXComponent[];\n  errors: SerializationError[];\n} {\n  const components: CycloneDXComponent[] = [];\n  const errors: SerializationError[] = [];\n\n  for (const dep of deps) {\n    try {\n      const component = serializeDependencyToComponent(dep);\n      components.push(component);\n    } catch (err) {\n      errors.push({\n        name: dep.package_name || dep.node_id || 'unknown',\n        reason: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  return { components, errors };\n}\n\n/**\n * Deserializes all components back to dependency rows,\n * collecting errors for any that fail without aborting the batch.\n */\nexport function deserializeAll(components: CycloneDXComponent[]): {\n  deps: DependencyRow[];\n  errors: SerializationError[];\n} {\n  const deps: DependencyRow[] = [];\n  const errors: SerializationError[] = [];\n\n  for (const component of components) {\n    try {\n      const dep = deserializeComponentToDependency(component);\n      deps.push(dep);\n    } catch (err) {\n      errors.push({\n        name: component.name || 'unknown',\n        reason: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  return { deps, errors };\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAuCA,MAAM,oBAA4C;AAAA,EAChD,KAAK;AAAA,EACL,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,OAAO;AACT;AAEA,MAAM,oBAA4C;AAAA,EAChD,KAAK;AAAA,EACL,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,OAAO;AACT;AAWO,SAAS,+BAA+B,KAAwC;AACrF,QAAM,WAAW,kBAAkB,IAAI,SAAS;AAChD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,0BAA0B,IAAI,SAAS,EAAE;AAAA,EAC3D;AAEA,QAAM,UAAU,IAAI,oBAAoB,IAAI;AAC5C,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,sDAAsD,IAAI,YAAY,EAAE;AAAA,EAC1F;AAEA,MAAI,CAAC,IAAI,cAAc;AACrB,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AAEA,QAAM,OAAO,OAAO,QAAQ,IAAI,IAAI,YAAY,IAAI,OAAO;AAE3D,QAAM,QACJ,IAAI,UAAU,eAAe,aAAa;AAE5C,QAAM,YAAgC;AAAA,IACpC,MAAM;AAAA,IACN,MAAM,IAAI;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,MACV,EAAE,MAAM,gCAAgC,OAAO,IAAI,oBAAoB;AAAA,IACzE;AAAA,EACF;AAEA,SAAO;AACT;AAQO,SAAS,iCAAiC,WAA8C;AAC7F,MAAI,CAAC,UAAU,MAAM;AACnB,UAAM,IAAI,MAAM,cAAc,UAAU,IAAI,mBAAmB;AAAA,EACjE;AAEA,MAAI,CAAC,UAAU,MAAM;AACnB,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AAGA,QAAM,YAAY,UAAU,KAAK,MAAM,0BAA0B;AACjE,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,wBAAwB,UAAU,IAAI,EAAE;AAAA,EAC1D;AAEA,QAAM,CAAC,EAAE,UAAU,UAAU,WAAW,IAAI;AAE5C,QAAM,YAAY,kBAAkB,QAAQ;AAC5C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,0BAA0B,QAAQ,EAAE;AAAA,EACtD;AAGA,QAAM,iBAAiB,UAAU,YAAY;AAAA,IAC3C,CAAC,MAAM,EAAE,SAAS;AAAA,EACpB;AACA,QAAM,qBAAqB,gBAAgB,SAAS,UAAU;AAG9D,QAAM,QACJ,UAAU,UAAU,aAAa,aAAa;AAEhD,QAAM,MAAqB;AAAA,IACzB,SAAS,OAAO,SAAS,IAAI,QAAQ;AAAA,IACrC;AAAA,IACA,cAAc;AAAA,IACd,qBAAqB;AAAA,IACrB,kBAAkB;AAAA,IAClB;AAAA,IACA,mBAAmB;AAAA,IACnB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,uBAAuB;AAAA,IACvB,kBAAkB;AAAA,EACpB;AAEA,SAAO;AACT;AAQO,SAAS,aAAa,MAG3B;AACA,QAAM,aAAmC,CAAC;AAC1C,QAAM,SAA+B,CAAC;AAEtC,aAAW,OAAO,MAAM;AACtB,QAAI;AACF,YAAM,YAAY,+BAA+B,GAAG;AACpD,iBAAW,KAAK,SAAS;AAAA,IAC3B,SAAS,KAAK;AACZ,aAAO,KAAK;AAAA,QACV,MAAM,IAAI,gBAAgB,IAAI,WAAW;AAAA,QACzC,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACzD,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,YAAY,OAAO;AAC9B;AAMO,SAAS,eAAe,YAG7B;AACA,QAAM,OAAwB,CAAC;AAC/B,QAAM,SAA+B,CAAC;AAEtC,aAAW,aAAa,YAAY;AAClC,QAAI;AACF,YAAM,MAAM,iCAAiC,SAAS;AACtD,WAAK,KAAK,GAAG;AAAA,IACf,SAAS,KAAK;AACZ,aAAO,KAAK;AAAA,QACV,MAAM,UAAU,QAAQ;AAAA,QACxB,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACzD,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,OAAO;AACxB;",
+  "names": []
+}

package/dist/security/export/serialization.test.js

@@ -0,0 +1,310 @@
+"use strict";
+var import_vitest = require("vitest");
+var import_serialization = require("./serialization");
+function makeDependencyRow(overrides) {
+  return {
+    node_id: "dep:npm:express",
+    ecosystem: "npm",
+    package_name: "express",
+    declared_constraint: "^4.18.0",
+    resolved_version: "4.18.2",
+    scope: "production",
+    transitive_status: "complete",
+    last_vuln_check: null,
+    vuln_data_stale: 0,
+    vuln_data_stale_since: null,
+    source_manifests: '["package.json"]',
+    ...overrides
+  };
+}
+(0, import_vitest.describe)("serializeDependencyToComponent", () => {
+  (0, import_vitest.it)("should serialize an npm dependency to a CycloneDX component", () => {
+    const dep = makeDependencyRow();
+    const component = (0, import_serialization.serializeDependencyToComponent)(dep);
+    (0, import_vitest.expect)(component.type).toBe("library");
+    (0, import_vitest.expect)(component.name).toBe("express");
+    (0, import_vitest.expect)(component.version).toBe("4.18.2");
+    (0, import_vitest.expect)(component.purl).toBe("pkg:npm/express@4.18.2");
+    (0, import_vitest.expect)(component.scope).toBe("required");
+    (0, import_vitest.expect)(component.properties).toEqual([
+      { name: "kirograph:declaredConstraint", value: "^4.18.0" }
+    ]);
+  });
+  (0, import_vitest.it)("should use declared_constraint as version when resolved_version is null", () => {
+    const dep = makeDependencyRow({ resolved_version: null });
+    const component = (0, import_serialization.serializeDependencyToComponent)(dep);
+    (0, import_vitest.expect)(component.version).toBe("^4.18.0");
+    (0, import_vitest.expect)(component.purl).toBe("pkg:npm/express@^4.18.0");
+  });
+  (0, import_vitest.it)("should map production scope to required", () => {
+    const dep = makeDependencyRow({ scope: "production" });
+    const component = (0, import_serialization.serializeDependencyToComponent)(dep);
+    (0, import_vitest.expect)(component.scope).toBe("required");
+  });
+  (0, import_vitest.it)("should map development scope to optional", () => {
+    const dep = makeDependencyRow({ scope: "development" });
+    const component = (0, import_serialization.serializeDependencyToComponent)(dep);
+    (0, import_vitest.expect)(component.scope).toBe("optional");
+  });
+  (0, import_vitest.it)("should map optional scope to optional", () => {
+    const dep = makeDependencyRow({ scope: "optional" });
+    const component = (0, import_serialization.serializeDependencyToComponent)(dep);
+    (0, import_vitest.expect)(component.scope).toBe("optional");
+  });
+  (0, import_vitest.it)("should correctly map maven ecosystem to purl type", () => {
+    const dep = makeDependencyRow({
+      node_id: "dep:maven:log4j-core",
+      ecosystem: "maven",
+      package_name: "org.apache.logging.log4j/log4j-core",
+      resolved_version: "2.17.0"
+    });
+    const component = (0, import_serialization.serializeDependencyToComponent)(dep);
+    (0, import_vitest.expect)(component.purl).toBe("pkg:maven/org.apache.logging.log4j/log4j-core@2.17.0");
+  });
+  (0, import_vitest.it)("should correctly map go ecosystem to golang purl type", () => {
+    const dep = makeDependencyRow({
+      node_id: "dep:go:github.com/gin-gonic/gin",
+      ecosystem: "go",
+      package_name: "github.com/gin-gonic/gin",
+      resolved_version: "1.9.1"
+    });
+    const component = (0, import_serialization.serializeDependencyToComponent)(dep);
+    (0, import_vitest.expect)(component.purl).toBe("pkg:golang/github.com/gin-gonic/gin@1.9.1");
+  });
+  (0, import_vitest.it)("should correctly map pypi ecosystem", () => {
+    const dep = makeDependencyRow({
+      node_id: "dep:pypi:django",
+      ecosystem: "pypi",
+      package_name: "django",
+      resolved_version: "4.2.0"
+    });
+    const component = (0, import_serialization.serializeDependencyToComponent)(dep);
+    (0, import_vitest.expect)(component.purl).toBe("pkg:pypi/django@4.2.0");
+  });
+  (0, import_vitest.it)("should correctly map cargo ecosystem", () => {
+    const dep = makeDependencyRow({
+      node_id: "dep:cargo:serde",
+      ecosystem: "cargo",
+      package_name: "serde",
+      resolved_version: "1.0.188"
+    });
+    const component = (0, import_serialization.serializeDependencyToComponent)(dep);
+    (0, import_vitest.expect)(component.purl).toBe("pkg:cargo/serde@1.0.188");
+  });
+  (0, import_vitest.it)("should throw for unsupported ecosystem", () => {
+    const dep = makeDependencyRow({ ecosystem: "unknown" });
+    (0, import_vitest.expect)(() => (0, import_serialization.serializeDependencyToComponent)(dep)).toThrow("Unsupported ecosystem: unknown");
+  });
+  (0, import_vitest.it)("should throw when both version and constraint are empty", () => {
+    const dep = makeDependencyRow({
+      resolved_version: null,
+      declared_constraint: ""
+    });
+    (0, import_vitest.expect)(() => (0, import_serialization.serializeDependencyToComponent)(dep)).toThrow(
+      "No version or constraint available"
+    );
+  });
+  (0, import_vitest.it)("should throw when package_name is empty", () => {
+    const dep = makeDependencyRow({ package_name: "" });
+    (0, import_vitest.expect)(() => (0, import_serialization.serializeDependencyToComponent)(dep)).toThrow(
+      "Dependency package_name is required"
+    );
+  });
+});
+(0, import_vitest.describe)("deserializeComponentToDependency", () => {
+  (0, import_vitest.it)("should deserialize a CycloneDX component to a dependency row", () => {
+    const component = {
+      type: "library",
+      name: "express",
+      version: "4.18.2",
+      purl: "pkg:npm/express@4.18.2",
+      scope: "required",
+      properties: [{ name: "kirograph:declaredConstraint", value: "^4.18.0" }]
+    };
+    const dep = (0, import_serialization.deserializeComponentToDependency)(component);
+    (0, import_vitest.expect)(dep.ecosystem).toBe("npm");
+    (0, import_vitest.expect)(dep.package_name).toBe("express");
+    (0, import_vitest.expect)(dep.resolved_version).toBe("4.18.2");
+    (0, import_vitest.expect)(dep.declared_constraint).toBe("^4.18.0");
+    (0, import_vitest.expect)(dep.scope).toBe("production");
+    (0, import_vitest.expect)(dep.node_id).toBe("dep:npm:express");
+  });
+  (0, import_vitest.it)("should use version as declared_constraint when property is missing", () => {
+    const component = {
+      type: "library",
+      name: "express",
+      version: "4.18.2",
+      purl: "pkg:npm/express@4.18.2"
+    };
+    const dep = (0, import_serialization.deserializeComponentToDependency)(component);
+    (0, import_vitest.expect)(dep.declared_constraint).toBe("4.18.2");
+  });
+  (0, import_vitest.it)("should map optional scope back to optional", () => {
+    const component = {
+      type: "library",
+      name: "jest",
+      version: "29.0.0",
+      purl: "pkg:npm/jest@29.0.0",
+      scope: "optional"
+    };
+    const dep = (0, import_serialization.deserializeComponentToDependency)(component);
+    (0, import_vitest.expect)(dep.scope).toBe("optional");
+  });
+  (0, import_vitest.it)("should map required scope back to production", () => {
+    const component = {
+      type: "library",
+      name: "express",
+      version: "4.18.2",
+      purl: "pkg:npm/express@4.18.2",
+      scope: "required"
+    };
+    const dep = (0, import_serialization.deserializeComponentToDependency)(component);
+    (0, import_vitest.expect)(dep.scope).toBe("production");
+  });
+  (0, import_vitest.it)("should map golang purl type back to go ecosystem", () => {
+    const component = {
+      type: "library",
+      name: "github.com/gin-gonic/gin",
+      version: "1.9.1",
+      purl: "pkg:golang/github.com/gin-gonic/gin@1.9.1"
+    };
+    const dep = (0, import_serialization.deserializeComponentToDependency)(component);
+    (0, import_vitest.expect)(dep.ecosystem).toBe("go");
+    (0, import_vitest.expect)(dep.package_name).toBe("github.com/gin-gonic/gin");
+  });
+  (0, import_vitest.it)("should throw for missing purl", () => {
+    const component = {
+      type: "library",
+      name: "express",
+      version: "4.18.2",
+      purl: ""
+    };
+    (0, import_vitest.expect)(() => (0, import_serialization.deserializeComponentToDependency)(component)).toThrow("missing purl");
+  });
+  (0, import_vitest.it)("should throw for invalid purl format", () => {
+    const component = {
+      type: "library",
+      name: "express",
+      version: "4.18.2",
+      purl: "invalid-purl"
+    };
+    (0, import_vitest.expect)(() => (0, import_serialization.deserializeComponentToDependency)(component)).toThrow("Invalid purl format");
+  });
+  (0, import_vitest.it)("should throw for unsupported purl type", () => {
+    const component = {
+      type: "library",
+      name: "something",
+      version: "1.0.0",
+      purl: "pkg:nuget/something@1.0.0"
+    };
+    (0, import_vitest.expect)(() => (0, import_serialization.deserializeComponentToDependency)(component)).toThrow("Unsupported purl type");
+  });
+  (0, import_vitest.it)("should set default values for non-serialized fields", () => {
+    const component = {
+      type: "library",
+      name: "express",
+      version: "4.18.2",
+      purl: "pkg:npm/express@4.18.2"
+    };
+    const dep = (0, import_serialization.deserializeComponentToDependency)(component);
+    (0, import_vitest.expect)(dep.transitive_status).toBe("complete");
+    (0, import_vitest.expect)(dep.last_vuln_check).toBeNull();
+    (0, import_vitest.expect)(dep.vuln_data_stale).toBe(0);
+    (0, import_vitest.expect)(dep.vuln_data_stale_since).toBeNull();
+    (0, import_vitest.expect)(dep.source_manifests).toBe("[]");
+  });
+});
+(0, import_vitest.describe)("serializeDependencyToComponent \u2192 deserializeComponentToDependency round-trip", () => {
+  (0, import_vitest.it)("should preserve key fields through round-trip", () => {
+    const original = makeDependencyRow();
+    const component = (0, import_serialization.serializeDependencyToComponent)(original);
+    const restored = (0, import_serialization.deserializeComponentToDependency)(component);
+    (0, import_vitest.expect)(restored.package_name).toBe(original.package_name);
+    (0, import_vitest.expect)(restored.resolved_version).toBe(original.resolved_version);
+    (0, import_vitest.expect)(restored.ecosystem).toBe(original.ecosystem);
+    (0, import_vitest.expect)(restored.scope).toBe(original.scope);
+    (0, import_vitest.expect)(restored.declared_constraint).toBe(original.declared_constraint);
+  });
+  (0, import_vitest.it)("should preserve constraint when resolved_version is null", () => {
+    const original = makeDependencyRow({ resolved_version: null });
+    const component = (0, import_serialization.serializeDependencyToComponent)(original);
+    const restored = (0, import_serialization.deserializeComponentToDependency)(component);
+    (0, import_vitest.expect)(restored.declared_constraint).toBe(original.declared_constraint);
+    (0, import_vitest.expect)(restored.resolved_version).toBe(original.declared_constraint);
+  });
+});
+(0, import_vitest.describe)("serializeAll", () => {
+  (0, import_vitest.it)("should serialize all valid dependencies", () => {
+    const deps = [
+      makeDependencyRow({ package_name: "express", node_id: "dep:npm:express" }),
+      makeDependencyRow({ package_name: "lodash", node_id: "dep:npm:lodash" })
+    ];
+    const result = (0, import_serialization.serializeAll)(deps);
+    (0, import_vitest.expect)(result.components).toHaveLength(2);
+    (0, import_vitest.expect)(result.errors).toHaveLength(0);
+  });
+  (0, import_vitest.it)("should collect errors for failing nodes and continue with remaining", () => {
+    const deps = [
+      makeDependencyRow({ package_name: "express" }),
+      makeDependencyRow({ package_name: "bad-dep", ecosystem: "unsupported" }),
+      makeDependencyRow({ package_name: "lodash" })
+    ];
+    const result = (0, import_serialization.serializeAll)(deps);
+    (0, import_vitest.expect)(result.components).toHaveLength(2);
+    (0, import_vitest.expect)(result.errors).toHaveLength(1);
+    (0, import_vitest.expect)(result.errors[0].name).toBe("bad-dep");
+    (0, import_vitest.expect)(result.errors[0].reason).toContain("Unsupported ecosystem");
+  });
+  (0, import_vitest.it)("should handle empty input", () => {
+    const result = (0, import_serialization.serializeAll)([]);
+    (0, import_vitest.expect)(result.components).toHaveLength(0);
+    (0, import_vitest.expect)(result.errors).toHaveLength(0);
+  });
+  (0, import_vitest.it)("should handle all failures gracefully", () => {
+    const deps = [
+      makeDependencyRow({ ecosystem: "unknown1", package_name: "a" }),
+      makeDependencyRow({ ecosystem: "unknown2", package_name: "b" })
+    ];
+    const result = (0, import_serialization.serializeAll)(deps);
+    (0, import_vitest.expect)(result.components).toHaveLength(0);
+    (0, import_vitest.expect)(result.errors).toHaveLength(2);
+  });
+});
+(0, import_vitest.describe)("deserializeAll", () => {
+  (0, import_vitest.it)("should deserialize all valid components", () => {
+    const components = [
+      { type: "library", name: "express", version: "4.18.2", purl: "pkg:npm/express@4.18.2" },
+      { type: "library", name: "lodash", version: "4.17.21", purl: "pkg:npm/lodash@4.17.21" }
+    ];
+    const result = (0, import_serialization.deserializeAll)(components);
+    (0, import_vitest.expect)(result.deps).toHaveLength(2);
+    (0, import_vitest.expect)(result.errors).toHaveLength(0);
+  });
+  (0, import_vitest.it)("should collect errors for failing components and continue with remaining", () => {
+    const components = [
+      { type: "library", name: "express", version: "4.18.2", purl: "pkg:npm/express@4.18.2" },
+      { type: "library", name: "bad", version: "1.0.0", purl: "invalid-purl" },
+      { type: "library", name: "lodash", version: "4.17.21", purl: "pkg:npm/lodash@4.17.21" }
+    ];
+    const result = (0, import_serialization.deserializeAll)(components);
+    (0, import_vitest.expect)(result.deps).toHaveLength(2);
+    (0, import_vitest.expect)(result.errors).toHaveLength(1);
+    (0, import_vitest.expect)(result.errors[0].name).toBe("bad");
+    (0, import_vitest.expect)(result.errors[0].reason).toContain("Invalid purl format");
+  });
+  (0, import_vitest.it)("should handle empty input", () => {
+    const result = (0, import_serialization.deserializeAll)([]);
+    (0, import_vitest.expect)(result.deps).toHaveLength(0);
+    (0, import_vitest.expect)(result.errors).toHaveLength(0);
+  });
+  (0, import_vitest.it)("should handle all failures gracefully", () => {
+    const components = [
+      { type: "library", name: "a", version: "1.0", purl: "bad1" },
+      { type: "library", name: "b", version: "2.0", purl: "bad2" }
+    ];
+    const result = (0, import_serialization.deserializeAll)(components);
+    (0, import_vitest.expect)(result.deps).toHaveLength(0);
+    (0, import_vitest.expect)(result.errors).toHaveLength(2);
+  });
+});
+//# sourceMappingURL=serialization.test.js.map

package/dist/security/export/serialization.test.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/security/export/serialization.test.ts"],
+  "sourcesContent": ["/**\n * Unit tests for CycloneDX serialization utilities.\n *\n * Tests serialize/deserialize for Dependency_Nodes to/from CycloneDX JSON\n * component format, including round-trip and partial failure resilience.\n */\nimport { describe, it, expect } from 'vitest';\nimport {\n  serializeDependencyToComponent,\n  deserializeComponentToDependency,\n  serializeAll,\n  deserializeAll,\n  type DependencyRow,\n} from './serialization';\nimport type { CycloneDXComponent } from '../types';\n\nfunction makeDependencyRow(overrides?: Partial<DependencyRow>): DependencyRow {\n  return {\n    node_id: 'dep:npm:express',\n    ecosystem: 'npm',\n    package_name: 'express',\n    declared_constraint: '^4.18.0',\n    resolved_version: '4.18.2',\n    scope: 'production',\n    transitive_status: 'complete',\n    last_vuln_check: null,\n    vuln_data_stale: 0,\n    vuln_data_stale_since: null,\n    source_manifests: '[\"package.json\"]',\n    ...overrides,\n  };\n}\n\ndescribe('serializeDependencyToComponent', () => {\n  it('should serialize an npm dependency to a CycloneDX component', () => {\n    const dep = makeDependencyRow();\n    const component = serializeDependencyToComponent(dep);\n\n    expect(component.type).toBe('library');\n    expect(component.name).toBe('express');\n    expect(component.version).toBe('4.18.2');\n    expect(component.purl).toBe('pkg:npm/express@4.18.2');\n    expect(component.scope).toBe('required');\n    expect(component.properties).toEqual([\n      { name: 'kirograph:declaredConstraint', value: '^4.18.0' },\n    ]);\n  });\n\n  it('should use declared_constraint as version when resolved_version is null', () => {\n    const dep = makeDependencyRow({ resolved_version: null });\n    const component = serializeDependencyToComponent(dep);\n\n    expect(component.version).toBe('^4.18.0');\n    expect(component.purl).toBe('pkg:npm/express@^4.18.0');\n  });\n\n  it('should map production scope to required', () => {\n    const dep = makeDependencyRow({ scope: 'production' });\n    const component = serializeDependencyToComponent(dep);\n    expect(component.scope).toBe('required');\n  });\n\n  it('should map development scope to optional', () => {\n    const dep = makeDependencyRow({ scope: 'development' });\n    const component = serializeDependencyToComponent(dep);\n    expect(component.scope).toBe('optional');\n  });\n\n  it('should map optional scope to optional', () => {\n    const dep = makeDependencyRow({ scope: 'optional' });\n    const component = serializeDependencyToComponent(dep);\n    expect(component.scope).toBe('optional');\n  });\n\n  it('should correctly map maven ecosystem to purl type', () => {\n    const dep = makeDependencyRow({\n      node_id: 'dep:maven:log4j-core',\n      ecosystem: 'maven',\n      package_name: 'org.apache.logging.log4j/log4j-core',\n      resolved_version: '2.17.0',\n    });\n    const component = serializeDependencyToComponent(dep);\n    expect(component.purl).toBe('pkg:maven/org.apache.logging.log4j/log4j-core@2.17.0');\n  });\n\n  it('should correctly map go ecosystem to golang purl type', () => {\n    const dep = makeDependencyRow({\n      node_id: 'dep:go:github.com/gin-gonic/gin',\n      ecosystem: 'go',\n      package_name: 'github.com/gin-gonic/gin',\n      resolved_version: '1.9.1',\n    });\n    const component = serializeDependencyToComponent(dep);\n    expect(component.purl).toBe('pkg:golang/github.com/gin-gonic/gin@1.9.1');\n  });\n\n  it('should correctly map pypi ecosystem', () => {\n    const dep = makeDependencyRow({\n      node_id: 'dep:pypi:django',\n      ecosystem: 'pypi',\n      package_name: 'django',\n      resolved_version: '4.2.0',\n    });\n    const component = serializeDependencyToComponent(dep);\n    expect(component.purl).toBe('pkg:pypi/django@4.2.0');\n  });\n\n  it('should correctly map cargo ecosystem', () => {\n    const dep = makeDependencyRow({\n      node_id: 'dep:cargo:serde',\n      ecosystem: 'cargo',\n      package_name: 'serde',\n      resolved_version: '1.0.188',\n    });\n    const component = serializeDependencyToComponent(dep);\n    expect(component.purl).toBe('pkg:cargo/serde@1.0.188');\n  });\n\n  it('should throw for unsupported ecosystem', () => {\n    const dep = makeDependencyRow({ ecosystem: 'unknown' });\n    expect(() => serializeDependencyToComponent(dep)).toThrow('Unsupported ecosystem: unknown');\n  });\n\n  it('should throw when both version and constraint are empty', () => {\n    const dep = makeDependencyRow({\n      resolved_version: null,\n      declared_constraint: '',\n    });\n    expect(() => serializeDependencyToComponent(dep)).toThrow(\n      'No version or constraint available',\n    );\n  });\n\n  it('should throw when package_name is empty', () => {\n    const dep = makeDependencyRow({ package_name: '' });\n    expect(() => serializeDependencyToComponent(dep)).toThrow(\n      'Dependency package_name is required',\n    );\n  });\n});\n\ndescribe('deserializeComponentToDependency', () => {\n  it('should deserialize a CycloneDX component to a dependency row', () => {\n    const component: CycloneDXComponent = {\n      type: 'library',\n      name: 'express',\n      version: '4.18.2',\n      purl: 'pkg:npm/express@4.18.2',\n      scope: 'required',\n      properties: [{ name: 'kirograph:declaredConstraint', value: '^4.18.0' }],\n    };\n\n    const dep = deserializeComponentToDependency(component);\n\n    expect(dep.ecosystem).toBe('npm');\n    expect(dep.package_name).toBe('express');\n    expect(dep.resolved_version).toBe('4.18.2');\n    expect(dep.declared_constraint).toBe('^4.18.0');\n    expect(dep.scope).toBe('production');\n    expect(dep.node_id).toBe('dep:npm:express');\n  });\n\n  it('should use version as declared_constraint when property is missing', () => {\n    const component: CycloneDXComponent = {\n      type: 'library',\n      name: 'express',\n      version: '4.18.2',\n      purl: 'pkg:npm/express@4.18.2',\n    };\n\n    const dep = deserializeComponentToDependency(component);\n    expect(dep.declared_constraint).toBe('4.18.2');\n  });\n\n  it('should map optional scope back to optional', () => {\n    const component: CycloneDXComponent = {\n      type: 'library',\n      name: 'jest',\n      version: '29.0.0',\n      purl: 'pkg:npm/jest@29.0.0',\n      scope: 'optional',\n    };\n\n    const dep = deserializeComponentToDependency(component);\n    expect(dep.scope).toBe('optional');\n  });\n\n  it('should map required scope back to production', () => {\n    const component: CycloneDXComponent = {\n      type: 'library',\n      name: 'express',\n      version: '4.18.2',\n      purl: 'pkg:npm/express@4.18.2',\n      scope: 'required',\n    };\n\n    const dep = deserializeComponentToDependency(component);\n    expect(dep.scope).toBe('production');\n  });\n\n  it('should map golang purl type back to go ecosystem', () => {\n    const component: CycloneDXComponent = {\n      type: 'library',\n      name: 'github.com/gin-gonic/gin',\n      version: '1.9.1',\n      purl: 'pkg:golang/github.com/gin-gonic/gin@1.9.1',\n    };\n\n    const dep = deserializeComponentToDependency(component);\n    expect(dep.ecosystem).toBe('go');\n    expect(dep.package_name).toBe('github.com/gin-gonic/gin');\n  });\n\n  it('should throw for missing purl', () => {\n    const component = {\n      type: 'library',\n      name: 'express',\n      version: '4.18.2',\n      purl: '',\n    } as CycloneDXComponent;\n\n    expect(() => deserializeComponentToDependency(component)).toThrow('missing purl');\n  });\n\n  it('should throw for invalid purl format', () => {\n    const component: CycloneDXComponent = {\n      type: 'library',\n      name: 'express',\n      version: '4.18.2',\n      purl: 'invalid-purl',\n    };\n\n    expect(() => deserializeComponentToDependency(component)).toThrow('Invalid purl format');\n  });\n\n  it('should throw for unsupported purl type', () => {\n    const component: CycloneDXComponent = {\n      type: 'library',\n      name: 'something',\n      version: '1.0.0',\n      purl: 'pkg:nuget/something@1.0.0',\n    };\n\n    expect(() => deserializeComponentToDependency(component)).toThrow('Unsupported purl type');\n  });\n\n  it('should set default values for non-serialized fields', () => {\n    const component: CycloneDXComponent = {\n      type: 'library',\n      name: 'express',\n      version: '4.18.2',\n      purl: 'pkg:npm/express@4.18.2',\n    };\n\n    const dep = deserializeComponentToDependency(component);\n    expect(dep.transitive_status).toBe('complete');\n    expect(dep.last_vuln_check).toBeNull();\n    expect(dep.vuln_data_stale).toBe(0);\n    expect(dep.vuln_data_stale_since).toBeNull();\n    expect(dep.source_manifests).toBe('[]');\n  });\n});\n\ndescribe('serializeDependencyToComponent \u2192 deserializeComponentToDependency round-trip', () => {\n  it('should preserve key fields through round-trip', () => {\n    const original = makeDependencyRow();\n    const component = serializeDependencyToComponent(original);\n    const restored = deserializeComponentToDependency(component);\n\n    expect(restored.package_name).toBe(original.package_name);\n    expect(restored.resolved_version).toBe(original.resolved_version);\n    expect(restored.ecosystem).toBe(original.ecosystem);\n    expect(restored.scope).toBe(original.scope);\n    expect(restored.declared_constraint).toBe(original.declared_constraint);\n  });\n\n  it('should preserve constraint when resolved_version is null', () => {\n    const original = makeDependencyRow({ resolved_version: null });\n    const component = serializeDependencyToComponent(original);\n    const restored = deserializeComponentToDependency(component);\n\n    expect(restored.declared_constraint).toBe(original.declared_constraint);\n    // When no resolved version, the version in purl is the constraint\n    expect(restored.resolved_version).toBe(original.declared_constraint);\n  });\n});\n\ndescribe('serializeAll', () => {\n  it('should serialize all valid dependencies', () => {\n    const deps = [\n      makeDependencyRow({ package_name: 'express', node_id: 'dep:npm:express' }),\n      makeDependencyRow({ package_name: 'lodash', node_id: 'dep:npm:lodash' }),\n    ];\n\n    const result = serializeAll(deps);\n    expect(result.components).toHaveLength(2);\n    expect(result.errors).toHaveLength(0);\n  });\n\n  it('should collect errors for failing nodes and continue with remaining', () => {\n    const deps = [\n      makeDependencyRow({ package_name: 'express' }),\n      makeDependencyRow({ package_name: 'bad-dep', ecosystem: 'unsupported' }),\n      makeDependencyRow({ package_name: 'lodash' }),\n    ];\n\n    const result = serializeAll(deps);\n    expect(result.components).toHaveLength(2);\n    expect(result.errors).toHaveLength(1);\n    expect(result.errors[0].name).toBe('bad-dep');\n    expect(result.errors[0].reason).toContain('Unsupported ecosystem');\n  });\n\n  it('should handle empty input', () => {\n    const result = serializeAll([]);\n    expect(result.components).toHaveLength(0);\n    expect(result.errors).toHaveLength(0);\n  });\n\n  it('should handle all failures gracefully', () => {\n    const deps = [\n      makeDependencyRow({ ecosystem: 'unknown1', package_name: 'a' }),\n      makeDependencyRow({ ecosystem: 'unknown2', package_name: 'b' }),\n    ];\n\n    const result = serializeAll(deps);\n    expect(result.components).toHaveLength(0);\n    expect(result.errors).toHaveLength(2);\n  });\n});\n\ndescribe('deserializeAll', () => {\n  it('should deserialize all valid components', () => {\n    const components: CycloneDXComponent[] = [\n      { type: 'library', name: 'express', version: '4.18.2', purl: 'pkg:npm/express@4.18.2' },\n      { type: 'library', name: 'lodash', version: '4.17.21', purl: 'pkg:npm/lodash@4.17.21' },\n    ];\n\n    const result = deserializeAll(components);\n    expect(result.deps).toHaveLength(2);\n    expect(result.errors).toHaveLength(0);\n  });\n\n  it('should collect errors for failing components and continue with remaining', () => {\n    const components: CycloneDXComponent[] = [\n      { type: 'library', name: 'express', version: '4.18.2', purl: 'pkg:npm/express@4.18.2' },\n      { type: 'library', name: 'bad', version: '1.0.0', purl: 'invalid-purl' },\n      { type: 'library', name: 'lodash', version: '4.17.21', purl: 'pkg:npm/lodash@4.17.21' },\n    ];\n\n    const result = deserializeAll(components);\n    expect(result.deps).toHaveLength(2);\n    expect(result.errors).toHaveLength(1);\n    expect(result.errors[0].name).toBe('bad');\n    expect(result.errors[0].reason).toContain('Invalid purl format');\n  });\n\n  it('should handle empty input', () => {\n    const result = deserializeAll([]);\n    expect(result.deps).toHaveLength(0);\n    expect(result.errors).toHaveLength(0);\n  });\n\n  it('should handle all failures gracefully', () => {\n    const components: CycloneDXComponent[] = [\n      { type: 'library', name: 'a', version: '1.0', purl: 'bad1' },\n      { type: 'library', name: 'b', version: '2.0', purl: 'bad2' },\n    ];\n\n    const result = deserializeAll(components);\n    expect(result.deps).toHaveLength(0);\n    expect(result.errors).toHaveLength(2);\n  });\n});\n"],
+  "mappings": ";AAMA,oBAAqC;AACrC,2BAMO;AAGP,SAAS,kBAAkB,WAAmD;AAC5E,SAAO;AAAA,IACL,SAAS;AAAA,IACT,WAAW;AAAA,IACX,cAAc;AAAA,IACd,qBAAqB;AAAA,IACrB,kBAAkB;AAAA,IAClB,OAAO;AAAA,IACP,mBAAmB;AAAA,IACnB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,uBAAuB;AAAA,IACvB,kBAAkB;AAAA,IAClB,GAAG;AAAA,EACL;AACF;AAAA,IAEA,wBAAS,kCAAkC,MAAM;AAC/C,wBAAG,+DAA+D,MAAM;AACtE,UAAM,MAAM,kBAAkB;AAC9B,UAAM,gBAAY,qDAA+B,GAAG;AAEpD,8BAAO,UAAU,IAAI,EAAE,KAAK,SAAS;AACrC,8BAAO,UAAU,IAAI,EAAE,KAAK,SAAS;AACrC,8BAAO,UAAU,OAAO,EAAE,KAAK,QAAQ;AACvC,8BAAO,UAAU,IAAI,EAAE,KAAK,wBAAwB;AACpD,8BAAO,UAAU,KAAK,EAAE,KAAK,UAAU;AACvC,8BAAO,UAAU,UAAU,EAAE,QAAQ;AAAA,MACnC,EAAE,MAAM,gCAAgC,OAAO,UAAU;AAAA,IAC3D,CAAC;AAAA,EACH,CAAC;AAED,wBAAG,2EAA2E,MAAM;AAClF,UAAM,MAAM,kBAAkB,EAAE,kBAAkB,KAAK,CAAC;AACxD,UAAM,gBAAY,qDAA+B,GAAG;AAEpD,8BAAO,UAAU,OAAO,EAAE,KAAK,SAAS;AACxC,8BAAO,UAAU,IAAI,EAAE,KAAK,yBAAyB;AAAA,EACvD,CAAC;AAED,wBAAG,2CAA2C,MAAM;AAClD,UAAM,MAAM,kBAAkB,EAAE,OAAO,aAAa,CAAC;AACrD,UAAM,gBAAY,qDAA+B,GAAG;AACpD,8BAAO,UAAU,KAAK,EAAE,KAAK,UAAU;AAAA,EACzC,CAAC;AAED,wBAAG,4CAA4C,MAAM;AACnD,UAAM,MAAM,kBAAkB,EAAE,OAAO,cAAc,CAAC;AACtD,UAAM,gBAAY,qDAA+B,GAAG;AACpD,8BAAO,UAAU,KAAK,EAAE,KAAK,UAAU;AAAA,EACzC,CAAC;AAED,wBAAG,yCAAyC,MAAM;AAChD,UAAM,MAAM,kBAAkB,EAAE,OAAO,WAAW,CAAC;AACnD,UAAM,gBAAY,qDAA+B,GAAG;AACpD,8BAAO,UAAU,KAAK,EAAE,KAAK,UAAU;AAAA,EACzC,CAAC;AAED,wBAAG,qDAAqD,MAAM;AAC5D,UAAM,MAAM,kBAAkB;AAAA,MAC5B,SAAS;AAAA,MACT,WAAW;AAAA,MACX,cAAc;AAAA,MACd,kBAAkB;AAAA,IACpB,CAAC;AACD,UAAM,gBAAY,qDAA+B,GAAG;AACpD,8BAAO,UAAU,IAAI,EAAE,KAAK,sDAAsD;AAAA,EACpF,CAAC;AAED,wBAAG,yDAAyD,MAAM;AAChE,UAAM,MAAM,kBAAkB;AAAA,MAC5B,SAAS;AAAA,MACT,WAAW;AAAA,MACX,cAAc;AAAA,MACd,kBAAkB;AAAA,IACpB,CAAC;AACD,UAAM,gBAAY,qDAA+B,GAAG;AACpD,8BAAO,UAAU,IAAI,EAAE,KAAK,2CAA2C;AAAA,EACzE,CAAC;AAED,wBAAG,uCAAuC,MAAM;AAC9C,UAAM,MAAM,kBAAkB;AAAA,MAC5B,SAAS;AAAA,MACT,WAAW;AAAA,MACX,cAAc;AAAA,MACd,kBAAkB;AAAA,IACpB,CAAC;AACD,UAAM,gBAAY,qDAA+B,GAAG;AACpD,8BAAO,UAAU,IAAI,EAAE,KAAK,uBAAuB;AAAA,EACrD,CAAC;AAED,wBAAG,wCAAwC,MAAM;AAC/C,UAAM,MAAM,kBAAkB;AAAA,MAC5B,SAAS;AAAA,MACT,WAAW;AAAA,MACX,cAAc;AAAA,MACd,kBAAkB;AAAA,IACpB,CAAC;AACD,UAAM,gBAAY,qDAA+B,GAAG;AACpD,8BAAO,UAAU,IAAI,EAAE,KAAK,yBAAyB;AAAA,EACvD,CAAC;AAED,wBAAG,0CAA0C,MAAM;AACjD,UAAM,MAAM,kBAAkB,EAAE,WAAW,UAAU,CAAC;AACtD,8BAAO,UAAM,qDAA+B,GAAG,CAAC,EAAE,QAAQ,gCAAgC;AAAA,EAC5F,CAAC;AAED,wBAAG,2DAA2D,MAAM;AAClE,UAAM,MAAM,kBAAkB;AAAA,MAC5B,kBAAkB;AAAA,MAClB,qBAAqB;AAAA,IACvB,CAAC;AACD,8BAAO,UAAM,qDAA+B,GAAG,CAAC,EAAE;AAAA,MAChD;AAAA,IACF;AAAA,EACF,CAAC;AAED,wBAAG,2CAA2C,MAAM;AAClD,UAAM,MAAM,kBAAkB,EAAE,cAAc,GAAG,CAAC;AAClD,8BAAO,UAAM,qDAA+B,GAAG,CAAC,EAAE;AAAA,MAChD;AAAA,IACF;AAAA,EACF,CAAC;AACH,CAAC;AAAA,IAED,wBAAS,oCAAoC,MAAM;AACjD,wBAAG,gEAAgE,MAAM;AACvE,UAAM,YAAgC;AAAA,MACpC,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,MACN,OAAO;AAAA,MACP,YAAY,CAAC,EAAE,MAAM,gCAAgC,OAAO,UAAU,CAAC;AAAA,IACzE;AAEA,UAAM,UAAM,uDAAiC,SAAS;AAEtD,8BAAO,IAAI,SAAS,EAAE,KAAK,KAAK;AAChC,8BAAO,IAAI,YAAY,EAAE,KAAK,SAAS;AACvC,8BAAO,IAAI,gBAAgB,EAAE,KAAK,QAAQ;AAC1C,8BAAO,IAAI,mBAAmB,EAAE,KAAK,SAAS;AAC9C,8BAAO,IAAI,KAAK,EAAE,KAAK,YAAY;AACnC,8BAAO,IAAI,OAAO,EAAE,KAAK,iBAAiB;AAAA,EAC5C,CAAC;AAED,wBAAG,sEAAsE,MAAM;AAC7E,UAAM,YAAgC;AAAA,MACpC,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IACR;AAEA,UAAM,UAAM,uDAAiC,SAAS;AACtD,8BAAO,IAAI,mBAAmB,EAAE,KAAK,QAAQ;AAAA,EAC/C,CAAC;AAED,wBAAG,8CAA8C,MAAM;AACrD,UAAM,YAAgC;AAAA,MACpC,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,MACN,OAAO;AAAA,IACT;AAEA,UAAM,UAAM,uDAAiC,SAAS;AACtD,8BAAO,IAAI,KAAK,EAAE,KAAK,UAAU;AAAA,EACnC,CAAC;AAED,wBAAG,gDAAgD,MAAM;AACvD,UAAM,YAAgC;AAAA,MACpC,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,MACN,OAAO;AAAA,IACT;AAEA,UAAM,UAAM,uDAAiC,SAAS;AACtD,8BAAO,IAAI,KAAK,EAAE,KAAK,YAAY;AAAA,EACrC,CAAC;AAED,wBAAG,oDAAoD,MAAM;AAC3D,UAAM,YAAgC;AAAA,MACpC,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IACR;AAEA,UAAM,UAAM,uDAAiC,SAAS;AACtD,8BAAO,IAAI,SAAS,EAAE,KAAK,IAAI;AAC/B,8BAAO,IAAI,YAAY,EAAE,KAAK,0BAA0B;AAAA,EAC1D,CAAC;AAED,wBAAG,iCAAiC,MAAM;AACxC,UAAM,YAAY;AAAA,MAChB,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IACR;AAEA,8BAAO,UAAM,uDAAiC,SAAS,CAAC,EAAE,QAAQ,cAAc;AAAA,EAClF,CAAC;AAED,wBAAG,wCAAwC,MAAM;AAC/C,UAAM,YAAgC;AAAA,MACpC,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IACR;AAEA,8BAAO,UAAM,uDAAiC,SAAS,CAAC,EAAE,QAAQ,qBAAqB;AAAA,EACzF,CAAC;AAED,wBAAG,0CAA0C,MAAM;AACjD,UAAM,YAAgC;AAAA,MACpC,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IACR;AAEA,8BAAO,UAAM,uDAAiC,SAAS,CAAC,EAAE,QAAQ,uBAAuB;AAAA,EAC3F,CAAC;AAED,wBAAG,uDAAuD,MAAM;AAC9D,UAAM,YAAgC;AAAA,MACpC,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IACR;AAEA,UAAM,UAAM,uDAAiC,SAAS;AACtD,8BAAO,IAAI,iBAAiB,EAAE,KAAK,UAAU;AAC7C,8BAAO,IAAI,eAAe,EAAE,SAAS;AACrC,8BAAO,IAAI,eAAe,EAAE,KAAK,CAAC;AAClC,8BAAO,IAAI,qBAAqB,EAAE,SAAS;AAC3C,8BAAO,IAAI,gBAAgB,EAAE,KAAK,IAAI;AAAA,EACxC,CAAC;AACH,CAAC;AAAA,IAED,wBAAS,qFAAgF,MAAM;AAC7F,wBAAG,iDAAiD,MAAM;AACxD,UAAM,WAAW,kBAAkB;AACnC,UAAM,gBAAY,qDAA+B,QAAQ;AACzD,UAAM,eAAW,uDAAiC,SAAS;AAE3D,8BAAO,SAAS,YAAY,EAAE,KAAK,SAAS,YAAY;AACxD,8BAAO,SAAS,gBAAgB,EAAE,KAAK,SAAS,gBAAgB;AAChE,8BAAO,SAAS,SAAS,EAAE,KAAK,SAAS,SAAS;AAClD,8BAAO,SAAS,KAAK,EAAE,KAAK,SAAS,KAAK;AAC1C,8BAAO,SAAS,mBAAmB,EAAE,KAAK,SAAS,mBAAmB;AAAA,EACxE,CAAC;AAED,wBAAG,4DAA4D,MAAM;AACnE,UAAM,WAAW,kBAAkB,EAAE,kBAAkB,KAAK,CAAC;AAC7D,UAAM,gBAAY,qDAA+B,QAAQ;AACzD,UAAM,eAAW,uDAAiC,SAAS;AAE3D,8BAAO,SAAS,mBAAmB,EAAE,KAAK,SAAS,mBAAmB;AAEtE,8BAAO,SAAS,gBAAgB,EAAE,KAAK,SAAS,mBAAmB;AAAA,EACrE,CAAC;AACH,CAAC;AAAA,IAED,wBAAS,gBAAgB,MAAM;AAC7B,wBAAG,2CAA2C,MAAM;AAClD,UAAM,OAAO;AAAA,MACX,kBAAkB,EAAE,cAAc,WAAW,SAAS,kBAAkB,CAAC;AAAA,MACzE,kBAAkB,EAAE,cAAc,UAAU,SAAS,iBAAiB,CAAC;AAAA,IACzE;AAEA,UAAM,aAAS,mCAAa,IAAI;AAChC,8BAAO,OAAO,UAAU,EAAE,aAAa,CAAC;AACxC,8BAAO,OAAO,MAAM,EAAE,aAAa,CAAC;AAAA,EACtC,CAAC;AAED,wBAAG,uEAAuE,MAAM;AAC9E,UAAM,OAAO;AAAA,MACX,kBAAkB,EAAE,cAAc,UAAU,CAAC;AAAA,MAC7C,kBAAkB,EAAE,cAAc,WAAW,WAAW,cAAc,CAAC;AAAA,MACvE,kBAAkB,EAAE,cAAc,SAAS,CAAC;AAAA,IAC9C;AAEA,UAAM,aAAS,mCAAa,IAAI;AAChC,8BAAO,OAAO,UAAU,EAAE,aAAa,CAAC;AACxC,8BAAO,OAAO,MAAM,EAAE,aAAa,CAAC;AACpC,8BAAO,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,SAAS;AAC5C,8BAAO,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,uBAAuB;AAAA,EACnE,CAAC;AAED,wBAAG,6BAA6B,MAAM;AACpC,UAAM,aAAS,mCAAa,CAAC,CAAC;AAC9B,8BAAO,OAAO,UAAU,EAAE,aAAa,CAAC;AACxC,8BAAO,OAAO,MAAM,EAAE,aAAa,CAAC;AAAA,EACtC,CAAC;AAED,wBAAG,yCAAyC,MAAM;AAChD,UAAM,OAAO;AAAA,MACX,kBAAkB,EAAE,WAAW,YAAY,cAAc,IAAI,CAAC;AAAA,MAC9D,kBAAkB,EAAE,WAAW,YAAY,cAAc,IAAI,CAAC;AAAA,IAChE;AAEA,UAAM,aAAS,mCAAa,IAAI;AAChC,8BAAO,OAAO,UAAU,EAAE,aAAa,CAAC;AACxC,8BAAO,OAAO,MAAM,EAAE,aAAa,CAAC;AAAA,EACtC,CAAC;AACH,CAAC;AAAA,IAED,wBAAS,kBAAkB,MAAM;AAC/B,wBAAG,2CAA2C,MAAM;AAClD,UAAM,aAAmC;AAAA,MACvC,EAAE,MAAM,WAAW,MAAM,WAAW,SAAS,UAAU,MAAM,yBAAyB;AAAA,MACtF,EAAE,MAAM,WAAW,MAAM,UAAU,SAAS,WAAW,MAAM,yBAAyB;AAAA,IACxF;AAEA,UAAM,aAAS,qCAAe,UAAU;AACxC,8BAAO,OAAO,IAAI,EAAE,aAAa,CAAC;AAClC,8BAAO,OAAO,MAAM,EAAE,aAAa,CAAC;AAAA,EACtC,CAAC;AAED,wBAAG,4EAA4E,MAAM;AACnF,UAAM,aAAmC;AAAA,MACvC,EAAE,MAAM,WAAW,MAAM,WAAW,SAAS,UAAU,MAAM,yBAAyB;AAAA,MACtF,EAAE,MAAM,WAAW,MAAM,OAAO,SAAS,SAAS,MAAM,eAAe;AAAA,MACvE,EAAE,MAAM,WAAW,MAAM,UAAU,SAAS,WAAW,MAAM,yBAAyB;AAAA,IACxF;AAEA,UAAM,aAAS,qCAAe,UAAU;AACxC,8BAAO,OAAO,IAAI,EAAE,aAAa,CAAC;AAClC,8BAAO,OAAO,MAAM,EAAE,aAAa,CAAC;AACpC,8BAAO,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK;AACxC,8BAAO,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,qBAAqB;AAAA,EACjE,CAAC;AAED,wBAAG,6BAA6B,MAAM;AACpC,UAAM,aAAS,qCAAe,CAAC,CAAC;AAChC,8BAAO,OAAO,IAAI,EAAE,aAAa,CAAC;AAClC,8BAAO,OAAO,MAAM,EAAE,aAAa,CAAC;AAAA,EACtC,CAAC;AAED,wBAAG,yCAAyC,MAAM;AAChD,UAAM,aAAmC;AAAA,MACvC,EAAE,MAAM,WAAW,MAAM,KAAK,SAAS,OAAO,MAAM,OAAO;AAAA,MAC3D,EAAE,MAAM,WAAW,MAAM,KAAK,SAAS,OAAO,MAAM,OAAO;AAAA,IAC7D;AAEA,UAAM,aAAS,qCAAe,UAAU;AACxC,8BAAO,OAAO,IAAI,EAAE,aAAa,CAAC;AAClC,8BAAO,OAAO,MAAM,EAAE,aAAa,CAAC;AAAA,EACtC,CAAC;AACH,CAAC;",
+  "names": []
+}