kirograph 0.19.0 → 0.20.0

package/dist/security/manifest/plugins/npm.test.js

@@ -1,298 +0,0 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var import_vitest = require("vitest");
-var fs = __toESM(require("fs"));
-var path = __toESM(require("path"));
-var os = __toESM(require("os"));
-var import_npm = require("./npm");
-(0, import_vitest.describe)("parseNpmManifest", () => {
-  let tmpDir;
-  (0, import_vitest.beforeEach)(() => {
-    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "kirograph-npm-test-"));
-  });
-  (0, import_vitest.afterEach)(() => {
-    fs.rmSync(tmpDir, { recursive: true, force: true });
-  });
-  function writePackageJson(content, dir) {
-    const targetDir = dir ?? tmpDir;
-    const filePath = path.join(targetDir, "package.json");
-    fs.mkdirSync(targetDir, { recursive: true });
-    fs.writeFileSync(filePath, JSON.stringify(content, null, 2));
-    return filePath;
-  }
-  (0, import_vitest.it)("extracts production dependencies with correct scope", async () => {
-    const manifestPath = writePackageJson({
-      name: "test-project",
-      version: "1.0.0",
-      dependencies: {
-        express: "^4.18.2",
-        lodash: "~4.17.21"
-      }
-    });
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    const express = deps.find((d) => d.name === "express");
-    (0, import_vitest.expect)(express).toBeDefined();
-    (0, import_vitest.expect)(express.declaredConstraint).toBe("^4.18.2");
-    (0, import_vitest.expect)(express.scope).toBe("production");
-    (0, import_vitest.expect)(express.ecosystem).toBe("npm");
-    const lodash = deps.find((d) => d.name === "lodash");
-    (0, import_vitest.expect)(lodash).toBeDefined();
-    (0, import_vitest.expect)(lodash.declaredConstraint).toBe("~4.17.21");
-    (0, import_vitest.expect)(lodash.scope).toBe("production");
-  });
-  (0, import_vitest.it)("extracts devDependencies with development scope", async () => {
-    const manifestPath = writePackageJson({
-      name: "test-project",
-      devDependencies: {
-        vitest: "^1.0.0",
-        typescript: "^5.0.0"
-      }
-    });
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps.every((d) => d.scope === "development")).toBe(true);
-  });
-  (0, import_vitest.it)("extracts optionalDependencies with optional scope", async () => {
-    const manifestPath = writePackageJson({
-      name: "test-project",
-      optionalDependencies: {
-        "better-sqlite3": "^11.0.0"
-      }
-    });
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].scope).toBe("optional");
-    (0, import_vitest.expect)(deps[0].name).toBe("better-sqlite3");
-  });
-  (0, import_vitest.it)("handles all scope fields together", async () => {
-    const manifestPath = writePackageJson({
-      name: "test-project",
-      dependencies: { express: "^4.18.0" },
-      devDependencies: { vitest: "^1.0.0" },
-      optionalDependencies: { sqlite3: "^5.0.0" }
-    });
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(3);
-    (0, import_vitest.expect)(deps.find((d) => d.name === "express").scope).toBe("production");
-    (0, import_vitest.expect)(deps.find((d) => d.name === "vitest").scope).toBe("development");
-    (0, import_vitest.expect)(deps.find((d) => d.name === "sqlite3").scope).toBe("optional");
-  });
-  (0, import_vitest.it)("resolves versions from package-lock.json (v2/v3 format)", async () => {
-    writePackageJson({
-      name: "test-project",
-      dependencies: { express: "^4.18.0" }
-    });
-    const lockContent = {
-      lockfileVersion: 3,
-      packages: {
-        "": { name: "test-project", version: "1.0.0" },
-        "node_modules/express": { version: "4.18.2" }
-      }
-    };
-    fs.writeFileSync(
-      path.join(tmpDir, "package-lock.json"),
-      JSON.stringify(lockContent)
-    );
-    const manifestPath = path.join(tmpDir, "package.json");
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBe("4.18.2");
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("^4.18.0");
-  });
-  (0, import_vitest.it)("resolves versions from package-lock.json (v1 format)", async () => {
-    writePackageJson({
-      name: "test-project",
-      dependencies: { lodash: "^4.17.0" }
-    });
-    const lockContent = {
-      lockfileVersion: 1,
-      dependencies: {
-        lodash: { version: "4.17.21" }
-      }
-    };
-    fs.writeFileSync(
-      path.join(tmpDir, "package-lock.json"),
-      JSON.stringify(lockContent)
-    );
-    const manifestPath = path.join(tmpDir, "package.json");
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBe("4.17.21");
-  });
-  (0, import_vitest.it)("resolves versions from yarn.lock", async () => {
-    writePackageJson({
-      name: "test-project",
-      dependencies: { react: "^18.0.0" }
-    });
-    const yarnLock = `# yarn lockfile v1
-
-react@^18.0.0:
-  version "18.2.0"
-  resolved "https://registry.yarnpkg.com/react/-/react-18.2.0.tgz"
-  integrity sha512-abc123
-`;
-    fs.writeFileSync(path.join(tmpDir, "yarn.lock"), yarnLock);
-    const manifestPath = path.join(tmpDir, "package.json");
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBe("18.2.0");
-  });
-  (0, import_vitest.it)("handles scoped packages in yarn.lock", async () => {
-    writePackageJson({
-      name: "test-project",
-      dependencies: { "@types/node": "^20.0.0" }
-    });
-    const yarnLock = `# yarn lockfile v1
-
-"@types/node@^20.0.0":
-  version "20.11.5"
-  resolved "https://registry.yarnpkg.com/@types/node/-/node-20.11.5.tgz"
-`;
-    fs.writeFileSync(path.join(tmpDir, "yarn.lock"), yarnLock);
-    const manifestPath = path.join(tmpDir, "package.json");
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].name).toBe("@types/node");
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBe("20.11.5");
-  });
-  (0, import_vitest.it)("skips invalid dependency entries gracefully", async () => {
-    const manifestPath = writePackageJson({
-      name: "test-project",
-      dependencies: {
-        express: "^4.18.0",
-        "": "^1.0.0",
-        // invalid: empty name
-        ".hidden": "^1.0.0",
-        // invalid: starts with dot
-        validPkg: "",
-        // invalid: empty constraint
-        anotherValid: "^2.0.0",
-        // valid
-        badConstraint: 123
-        // invalid: non-string constraint
-      }
-    });
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    const names = deps.map((d) => d.name);
-    (0, import_vitest.expect)(names).toContain("express");
-    (0, import_vitest.expect)(names).toContain("anotherValid");
-    (0, import_vitest.expect)(names).not.toContain("");
-    (0, import_vitest.expect)(names).not.toContain(".hidden");
-    (0, import_vitest.expect)(names).not.toContain("validPkg");
-    (0, import_vitest.expect)(names).not.toContain("badConstraint");
-  });
-  (0, import_vitest.it)("returns empty array for invalid JSON", async () => {
-    const filePath = path.join(tmpDir, "package.json");
-    fs.writeFileSync(filePath, "not valid json {{{");
-    const deps = await (0, import_npm.parseNpmManifest)(filePath, tmpDir);
-    (0, import_vitest.expect)(deps).toEqual([]);
-  });
-  (0, import_vitest.it)("returns empty array for non-object JSON", async () => {
-    const filePath = path.join(tmpDir, "package.json");
-    fs.writeFileSync(filePath, '"just a string"');
-    const deps = await (0, import_npm.parseNpmManifest)(filePath, tmpDir);
-    (0, import_vitest.expect)(deps).toEqual([]);
-  });
-  (0, import_vitest.it)("returns empty array for array JSON", async () => {
-    const filePath = path.join(tmpDir, "package.json");
-    fs.writeFileSync(filePath, "[1, 2, 3]");
-    const deps = await (0, import_npm.parseNpmManifest)(filePath, tmpDir);
-    (0, import_vitest.expect)(deps).toEqual([]);
-  });
-  (0, import_vitest.it)("handles package.json with no dependency fields", async () => {
-    const manifestPath = writePackageJson({
-      name: "empty-project",
-      version: "1.0.0"
-    });
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toEqual([]);
-  });
-  (0, import_vitest.it)("sets sourceManifest as relative path", async () => {
-    const subDir = path.join(tmpDir, "packages", "sub");
-    const manifestPath = writePackageJson(
-      { name: "sub", dependencies: { foo: "^1.0.0" } },
-      subDir
-    );
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].sourceManifest).toBe("packages/sub/package.json");
-  });
-  (0, import_vitest.it)("handles peerDependencies with production scope", async () => {
-    const manifestPath = writePackageJson({
-      name: "test-project",
-      peerDependencies: { react: ">=16.0.0" }
-    });
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].name).toBe("react");
-    (0, import_vitest.expect)(deps[0].scope).toBe("production");
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe(">=16.0.0");
-  });
-  (0, import_vitest.it)("does not duplicate peerDependencies already in dependencies", async () => {
-    const manifestPath = writePackageJson({
-      name: "test-project",
-      dependencies: { react: "^18.0.0" },
-      peerDependencies: { react: ">=16.0.0" }
-    });
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    const reactDeps = deps.filter((d) => d.name === "react");
-    (0, import_vitest.expect)(reactDeps).toHaveLength(1);
-    (0, import_vitest.expect)(reactDeps[0].scope).toBe("production");
-    (0, import_vitest.expect)(reactDeps[0].declaredConstraint).toBe("^18.0.0");
-  });
-  (0, import_vitest.it)("prefers package-lock.json over yarn.lock", async () => {
-    writePackageJson({
-      name: "test-project",
-      dependencies: { express: "^4.0.0" }
-    });
-    const lockContent = {
-      lockfileVersion: 3,
-      packages: {
-        "": { name: "test-project" },
-        "node_modules/express": { version: "4.18.2" }
-      }
-    };
-    fs.writeFileSync(path.join(tmpDir, "package-lock.json"), JSON.stringify(lockContent));
-    const yarnLock = `# yarn lockfile v1
-
-express@^4.0.0:
-  version "4.17.0"
-`;
-    fs.writeFileSync(path.join(tmpDir, "yarn.lock"), yarnLock);
-    const manifestPath = path.join(tmpDir, "package.json");
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBe("4.18.2");
-  });
-  (0, import_vitest.it)("leaves resolvedVersion undefined when no lock file exists", async () => {
-    const manifestPath = writePackageJson({
-      name: "test-project",
-      dependencies: { express: "^4.18.0" }
-    });
-    const deps = await (0, import_npm.parseNpmManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBeUndefined();
-  });
-});
-//# sourceMappingURL=npm.test.js.map

package/dist/security/manifest/plugins/npm.test.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/security/manifest/plugins/npm.test.ts"],
-  "sourcesContent": ["/**\n * Unit tests for the npm security manifest plugin.\n */\nimport { describe, it, expect, beforeEach, afterEach } from 'vitest';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as os from 'os';\nimport { parseNpmManifest } from './npm';\n\ndescribe('parseNpmManifest', () => {\n  let tmpDir: string;\n\n  beforeEach(() => {\n    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'kirograph-npm-test-'));\n  });\n\n  afterEach(() => {\n    fs.rmSync(tmpDir, { recursive: true, force: true });\n  });\n\n  function writePackageJson(content: Record<string, unknown>, dir?: string): string {\n    const targetDir = dir ?? tmpDir;\n    const filePath = path.join(targetDir, 'package.json');\n    fs.mkdirSync(targetDir, { recursive: true });\n    fs.writeFileSync(filePath, JSON.stringify(content, null, 2));\n    return filePath;\n  }\n\n  it('extracts production dependencies with correct scope', async () => {\n    const manifestPath = writePackageJson({\n      name: 'test-project',\n      version: '1.0.0',\n      dependencies: {\n        express: '^4.18.2',\n        lodash: '~4.17.21',\n      },\n    });\n\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    const express = deps.find(d => d.name === 'express');\n    expect(express).toBeDefined();\n    expect(express!.declaredConstraint).toBe('^4.18.2');\n    expect(express!.scope).toBe('production');\n    expect(express!.ecosystem).toBe('npm');\n\n    const lodash = deps.find(d => d.name === 'lodash');\n    expect(lodash).toBeDefined();\n    expect(lodash!.declaredConstraint).toBe('~4.17.21');\n    expect(lodash!.scope).toBe('production');\n  });\n\n  it('extracts devDependencies with development scope', async () => {\n    const manifestPath = writePackageJson({\n      name: 'test-project',\n      devDependencies: {\n        vitest: '^1.0.0',\n        typescript: '^5.0.0',\n      },\n    });\n\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps.every(d => d.scope === 'development')).toBe(true);\n  });\n\n  it('extracts optionalDependencies with optional scope', async () => {\n    const manifestPath = writePackageJson({\n      name: 'test-project',\n      optionalDependencies: {\n        'better-sqlite3': '^11.0.0',\n      },\n    });\n\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].scope).toBe('optional');\n    expect(deps[0].name).toBe('better-sqlite3');\n  });\n\n  it('handles all scope fields together', async () => {\n    const manifestPath = writePackageJson({\n      name: 'test-project',\n      dependencies: { express: '^4.18.0' },\n      devDependencies: { vitest: '^1.0.0' },\n      optionalDependencies: { sqlite3: '^5.0.0' },\n    });\n\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(3);\n    expect(deps.find(d => d.name === 'express')!.scope).toBe('production');\n    expect(deps.find(d => d.name === 'vitest')!.scope).toBe('development');\n    expect(deps.find(d => d.name === 'sqlite3')!.scope).toBe('optional');\n  });\n\n  it('resolves versions from package-lock.json (v2/v3 format)', async () => {\n    writePackageJson({\n      name: 'test-project',\n      dependencies: { express: '^4.18.0' },\n    });\n\n    // Write a package-lock.json with resolved versions\n    const lockContent = {\n      lockfileVersion: 3,\n      packages: {\n        '': { name: 'test-project', version: '1.0.0' },\n        'node_modules/express': { version: '4.18.2' },\n      },\n    };\n    fs.writeFileSync(\n      path.join(tmpDir, 'package-lock.json'),\n      JSON.stringify(lockContent),\n    );\n\n    const manifestPath = path.join(tmpDir, 'package.json');\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].resolvedVersion).toBe('4.18.2');\n    expect(deps[0].declaredConstraint).toBe('^4.18.0');\n  });\n\n  it('resolves versions from package-lock.json (v1 format)', async () => {\n    writePackageJson({\n      name: 'test-project',\n      dependencies: { lodash: '^4.17.0' },\n    });\n\n    const lockContent = {\n      lockfileVersion: 1,\n      dependencies: {\n        lodash: { version: '4.17.21' },\n      },\n    };\n    fs.writeFileSync(\n      path.join(tmpDir, 'package-lock.json'),\n      JSON.stringify(lockContent),\n    );\n\n    const manifestPath = path.join(tmpDir, 'package.json');\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].resolvedVersion).toBe('4.17.21');\n  });\n\n  it('resolves versions from yarn.lock', async () => {\n    writePackageJson({\n      name: 'test-project',\n      dependencies: { react: '^18.0.0' },\n    });\n\n    const yarnLock = `# yarn lockfile v1\n\nreact@^18.0.0:\n  version \"18.2.0\"\n  resolved \"https://registry.yarnpkg.com/react/-/react-18.2.0.tgz\"\n  integrity sha512-abc123\n`;\n    fs.writeFileSync(path.join(tmpDir, 'yarn.lock'), yarnLock);\n\n    const manifestPath = path.join(tmpDir, 'package.json');\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].resolvedVersion).toBe('18.2.0');\n  });\n\n  it('handles scoped packages in yarn.lock', async () => {\n    writePackageJson({\n      name: 'test-project',\n      dependencies: { '@types/node': '^20.0.0' },\n    });\n\n    const yarnLock = `# yarn lockfile v1\n\n\"@types/node@^20.0.0\":\n  version \"20.11.5\"\n  resolved \"https://registry.yarnpkg.com/@types/node/-/node-20.11.5.tgz\"\n`;\n    fs.writeFileSync(path.join(tmpDir, 'yarn.lock'), yarnLock);\n\n    const manifestPath = path.join(tmpDir, 'package.json');\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].name).toBe('@types/node');\n    expect(deps[0].resolvedVersion).toBe('20.11.5');\n  });\n\n  it('skips invalid dependency entries gracefully', async () => {\n    const manifestPath = writePackageJson({\n      name: 'test-project',\n      dependencies: {\n        express: '^4.18.0',\n        '': '^1.0.0',           // invalid: empty name\n        '.hidden': '^1.0.0',    // invalid: starts with dot\n        validPkg: '',           // invalid: empty constraint\n        anotherValid: '^2.0.0', // valid\n        badConstraint: 123,     // invalid: non-string constraint\n      },\n    });\n\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    // Should only extract valid entries\n    const names = deps.map(d => d.name);\n    expect(names).toContain('express');\n    expect(names).toContain('anotherValid');\n    expect(names).not.toContain('');\n    expect(names).not.toContain('.hidden');\n    expect(names).not.toContain('validPkg');\n    expect(names).not.toContain('badConstraint');\n  });\n\n  it('returns empty array for invalid JSON', async () => {\n    const filePath = path.join(tmpDir, 'package.json');\n    fs.writeFileSync(filePath, 'not valid json {{{');\n\n    const deps = await parseNpmManifest(filePath, tmpDir);\n    expect(deps).toEqual([]);\n  });\n\n  it('returns empty array for non-object JSON', async () => {\n    const filePath = path.join(tmpDir, 'package.json');\n    fs.writeFileSync(filePath, '\"just a string\"');\n\n    const deps = await parseNpmManifest(filePath, tmpDir);\n    expect(deps).toEqual([]);\n  });\n\n  it('returns empty array for array JSON', async () => {\n    const filePath = path.join(tmpDir, 'package.json');\n    fs.writeFileSync(filePath, '[1, 2, 3]');\n\n    const deps = await parseNpmManifest(filePath, tmpDir);\n    expect(deps).toEqual([]);\n  });\n\n  it('handles package.json with no dependency fields', async () => {\n    const manifestPath = writePackageJson({\n      name: 'empty-project',\n      version: '1.0.0',\n    });\n\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n    expect(deps).toEqual([]);\n  });\n\n  it('sets sourceManifest as relative path', async () => {\n    const subDir = path.join(tmpDir, 'packages', 'sub');\n    const manifestPath = writePackageJson(\n      { name: 'sub', dependencies: { foo: '^1.0.0' } },\n      subDir,\n    );\n\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].sourceManifest).toBe('packages/sub/package.json');\n  });\n\n  it('handles peerDependencies with production scope', async () => {\n    const manifestPath = writePackageJson({\n      name: 'test-project',\n      peerDependencies: { react: '>=16.0.0' },\n    });\n\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].name).toBe('react');\n    expect(deps[0].scope).toBe('production');\n    expect(deps[0].declaredConstraint).toBe('>=16.0.0');\n  });\n\n  it('does not duplicate peerDependencies already in dependencies', async () => {\n    const manifestPath = writePackageJson({\n      name: 'test-project',\n      dependencies: { react: '^18.0.0' },\n      peerDependencies: { react: '>=16.0.0' },\n    });\n\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    const reactDeps = deps.filter(d => d.name === 'react');\n    expect(reactDeps).toHaveLength(1);\n    expect(reactDeps[0].scope).toBe('production');\n    expect(reactDeps[0].declaredConstraint).toBe('^18.0.0');\n  });\n\n  it('prefers package-lock.json over yarn.lock', async () => {\n    writePackageJson({\n      name: 'test-project',\n      dependencies: { express: '^4.0.0' },\n    });\n\n    // Both lock files present\n    const lockContent = {\n      lockfileVersion: 3,\n      packages: {\n        '': { name: 'test-project' },\n        'node_modules/express': { version: '4.18.2' },\n      },\n    };\n    fs.writeFileSync(path.join(tmpDir, 'package-lock.json'), JSON.stringify(lockContent));\n\n    const yarnLock = `# yarn lockfile v1\n\nexpress@^4.0.0:\n  version \"4.17.0\"\n`;\n    fs.writeFileSync(path.join(tmpDir, 'yarn.lock'), yarnLock);\n\n    const manifestPath = path.join(tmpDir, 'package.json');\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    // Should use package-lock.json version\n    expect(deps[0].resolvedVersion).toBe('4.18.2');\n  });\n\n  it('leaves resolvedVersion undefined when no lock file exists', async () => {\n    const manifestPath = writePackageJson({\n      name: 'test-project',\n      dependencies: { express: '^4.18.0' },\n    });\n\n    const deps = await parseNpmManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].resolvedVersion).toBeUndefined();\n  });\n});\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;AAGA,oBAA4D;AAC5D,SAAoB;AACpB,WAAsB;AACtB,SAAoB;AACpB,iBAAiC;AAAA,IAEjC,wBAAS,oBAAoB,MAAM;AACjC,MAAI;AAEJ,gCAAW,MAAM;AACf,aAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,qBAAqB,CAAC;AAAA,EACvE,CAAC;AAED,+BAAU,MAAM;AACd,OAAG,OAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACpD,CAAC;AAED,WAAS,iBAAiB,SAAkC,KAAsB;AAChF,UAAM,YAAY,OAAO;AACzB,UAAM,WAAW,KAAK,KAAK,WAAW,cAAc;AACpD,OAAG,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;AAC3C,OAAG,cAAc,UAAU,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAC3D,WAAO;AAAA,EACT;AAEA,wBAAG,uDAAuD,YAAY;AACpE,UAAM,eAAe,iBAAiB;AAAA,MACpC,MAAM;AAAA,MACN,SAAS;AAAA,MACT,cAAc;AAAA,QACZ,SAAS;AAAA,QACT,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAED,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,UAAM,UAAU,KAAK,KAAK,OAAK,EAAE,SAAS,SAAS;AACnD,8BAAO,OAAO,EAAE,YAAY;AAC5B,8BAAO,QAAS,kBAAkB,EAAE,KAAK,SAAS;AAClD,8BAAO,QAAS,KAAK,EAAE,KAAK,YAAY;AACxC,8BAAO,QAAS,SAAS,EAAE,KAAK,KAAK;AAErC,UAAM,SAAS,KAAK,KAAK,OAAK,EAAE,SAAS,QAAQ;AACjD,8BAAO,MAAM,EAAE,YAAY;AAC3B,8BAAO,OAAQ,kBAAkB,EAAE,KAAK,UAAU;AAClD,8BAAO,OAAQ,KAAK,EAAE,KAAK,YAAY;AAAA,EACzC,CAAC;AAED,wBAAG,mDAAmD,YAAY;AAChE,UAAM,eAAe,iBAAiB;AAAA,MACpC,MAAM;AAAA,MACN,iBAAiB;AAAA,QACf,QAAQ;AAAA,QACR,YAAY;AAAA,MACd;AAAA,IACF,CAAC;AAED,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,MAAM,OAAK,EAAE,UAAU,aAAa,CAAC,EAAE,KAAK,IAAI;AAAA,EAC9D,CAAC;AAED,wBAAG,qDAAqD,YAAY;AAClE,UAAM,eAAe,iBAAiB;AAAA,MACpC,MAAM;AAAA,MACN,sBAAsB;AAAA,QACpB,kBAAkB;AAAA,MACpB;AAAA,IACF,CAAC;AAED,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,UAAU;AACrC,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,gBAAgB;AAAA,EAC5C,CAAC;AAED,wBAAG,qCAAqC,YAAY;AAClD,UAAM,eAAe,iBAAiB;AAAA,MACpC,MAAM;AAAA,MACN,cAAc,EAAE,SAAS,UAAU;AAAA,MACnC,iBAAiB,EAAE,QAAQ,SAAS;AAAA,MACpC,sBAAsB,EAAE,SAAS,SAAS;AAAA,IAC5C,CAAC;AAED,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,SAAS,EAAG,KAAK,EAAE,KAAK,YAAY;AACrE,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,QAAQ,EAAG,KAAK,EAAE,KAAK,aAAa;AACrE,8BAAO,KAAK,KAAK,OAAK,EAAE,SAAS,SAAS,EAAG,KAAK,EAAE,KAAK,UAAU;AAAA,EACrE,CAAC;AAED,wBAAG,2DAA2D,YAAY;AACxE,qBAAiB;AAAA,MACf,MAAM;AAAA,MACN,cAAc,EAAE,SAAS,UAAU;AAAA,IACrC,CAAC;AAGD,UAAM,cAAc;AAAA,MAClB,iBAAiB;AAAA,MACjB,UAAU;AAAA,QACR,IAAI,EAAE,MAAM,gBAAgB,SAAS,QAAQ;AAAA,QAC7C,wBAAwB,EAAE,SAAS,SAAS;AAAA,MAC9C;AAAA,IACF;AACA,OAAG;AAAA,MACD,KAAK,KAAK,QAAQ,mBAAmB;AAAA,MACrC,KAAK,UAAU,WAAW;AAAA,IAC5B;AAEA,UAAM,eAAe,KAAK,KAAK,QAAQ,cAAc;AACrD,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,KAAK,QAAQ;AAC7C,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,SAAS;AAAA,EACnD,CAAC;AAED,wBAAG,wDAAwD,YAAY;AACrE,qBAAiB;AAAA,MACf,MAAM;AAAA,MACN,cAAc,EAAE,QAAQ,UAAU;AAAA,IACpC,CAAC;AAED,UAAM,cAAc;AAAA,MAClB,iBAAiB;AAAA,MACjB,cAAc;AAAA,QACZ,QAAQ,EAAE,SAAS,UAAU;AAAA,MAC/B;AAAA,IACF;AACA,OAAG;AAAA,MACD,KAAK,KAAK,QAAQ,mBAAmB;AAAA,MACrC,KAAK,UAAU,WAAW;AAAA,IAC5B;AAEA,UAAM,eAAe,KAAK,KAAK,QAAQ,cAAc;AACrD,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,KAAK,SAAS;AAAA,EAChD,CAAC;AAED,wBAAG,oCAAoC,YAAY;AACjD,qBAAiB;AAAA,MACf,MAAM;AAAA,MACN,cAAc,EAAE,OAAO,UAAU;AAAA,IACnC,CAAC;AAED,UAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOjB,OAAG,cAAc,KAAK,KAAK,QAAQ,WAAW,GAAG,QAAQ;AAEzD,UAAM,eAAe,KAAK,KAAK,QAAQ,cAAc;AACrD,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,KAAK,QAAQ;AAAA,EAC/C,CAAC;AAED,wBAAG,wCAAwC,YAAY;AACrD,qBAAiB;AAAA,MACf,MAAM;AAAA,MACN,cAAc,EAAE,eAAe,UAAU;AAAA,IAC3C,CAAC;AAED,UAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAMjB,OAAG,cAAc,KAAK,KAAK,QAAQ,WAAW,GAAG,QAAQ;AAEzD,UAAM,eAAe,KAAK,KAAK,QAAQ,cAAc;AACrD,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,aAAa;AACvC,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,KAAK,SAAS;AAAA,EAChD,CAAC;AAED,wBAAG,+CAA+C,YAAY;AAC5D,UAAM,eAAe,iBAAiB;AAAA,MACpC,MAAM;AAAA,MACN,cAAc;AAAA,QACZ,SAAS;AAAA,QACT,IAAI;AAAA;AAAA,QACJ,WAAW;AAAA;AAAA,QACX,UAAU;AAAA;AAAA,QACV,cAAc;AAAA;AAAA,QACd,eAAe;AAAA;AAAA,MACjB;AAAA,IACF,CAAC;AAED,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAGxD,UAAM,QAAQ,KAAK,IAAI,OAAK,EAAE,IAAI;AAClC,8BAAO,KAAK,EAAE,UAAU,SAAS;AACjC,8BAAO,KAAK,EAAE,UAAU,cAAc;AACtC,8BAAO,KAAK,EAAE,IAAI,UAAU,EAAE;AAC9B,8BAAO,KAAK,EAAE,IAAI,UAAU,SAAS;AACrC,8BAAO,KAAK,EAAE,IAAI,UAAU,UAAU;AACtC,8BAAO,KAAK,EAAE,IAAI,UAAU,eAAe;AAAA,EAC7C,CAAC;AAED,wBAAG,wCAAwC,YAAY;AACrD,UAAM,WAAW,KAAK,KAAK,QAAQ,cAAc;AACjD,OAAG,cAAc,UAAU,oBAAoB;AAE/C,UAAM,OAAO,UAAM,6BAAiB,UAAU,MAAM;AACpD,8BAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzB,CAAC;AAED,wBAAG,2CAA2C,YAAY;AACxD,UAAM,WAAW,KAAK,KAAK,QAAQ,cAAc;AACjD,OAAG,cAAc,UAAU,iBAAiB;AAE5C,UAAM,OAAO,UAAM,6BAAiB,UAAU,MAAM;AACpD,8BAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzB,CAAC;AAED,wBAAG,sCAAsC,YAAY;AACnD,UAAM,WAAW,KAAK,KAAK,QAAQ,cAAc;AACjD,OAAG,cAAc,UAAU,WAAW;AAEtC,UAAM,OAAO,UAAM,6BAAiB,UAAU,MAAM;AACpD,8BAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzB,CAAC;AAED,wBAAG,kDAAkD,YAAY;AAC/D,UAAM,eAAe,iBAAiB;AAAA,MACpC,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAED,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AACxD,8BAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzB,CAAC;AAED,wBAAG,wCAAwC,YAAY;AACrD,UAAM,SAAS,KAAK,KAAK,QAAQ,YAAY,KAAK;AAClD,UAAM,eAAe;AAAA,MACnB,EAAE,MAAM,OAAO,cAAc,EAAE,KAAK,SAAS,EAAE;AAAA,MAC/C;AAAA,IACF;AAEA,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,cAAc,EAAE,KAAK,2BAA2B;AAAA,EACjE,CAAC;AAED,wBAAG,kDAAkD,YAAY;AAC/D,UAAM,eAAe,iBAAiB;AAAA,MACpC,MAAM;AAAA,MACN,kBAAkB,EAAE,OAAO,WAAW;AAAA,IACxC,CAAC;AAED,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,OAAO;AACjC,8BAAO,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY;AACvC,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,UAAU;AAAA,EACpD,CAAC;AAED,wBAAG,+DAA+D,YAAY;AAC5E,UAAM,eAAe,iBAAiB;AAAA,MACpC,MAAM;AAAA,MACN,cAAc,EAAE,OAAO,UAAU;AAAA,MACjC,kBAAkB,EAAE,OAAO,WAAW;AAAA,IACxC,CAAC;AAED,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,UAAM,YAAY,KAAK,OAAO,OAAK,EAAE,SAAS,OAAO;AACrD,8BAAO,SAAS,EAAE,aAAa,CAAC;AAChC,8BAAO,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY;AAC5C,8BAAO,UAAU,CAAC,EAAE,kBAAkB,EAAE,KAAK,SAAS;AAAA,EACxD,CAAC;AAED,wBAAG,4CAA4C,YAAY;AACzD,qBAAiB;AAAA,MACf,MAAM;AAAA,MACN,cAAc,EAAE,SAAS,SAAS;AAAA,IACpC,CAAC;AAGD,UAAM,cAAc;AAAA,MAClB,iBAAiB;AAAA,MACjB,UAAU;AAAA,QACR,IAAI,EAAE,MAAM,eAAe;AAAA,QAC3B,wBAAwB,EAAE,SAAS,SAAS;AAAA,MAC9C;AAAA,IACF;AACA,OAAG,cAAc,KAAK,KAAK,QAAQ,mBAAmB,GAAG,KAAK,UAAU,WAAW,CAAC;AAEpF,UAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAKjB,OAAG,cAAc,KAAK,KAAK,QAAQ,WAAW,GAAG,QAAQ;AAEzD,UAAM,eAAe,KAAK,KAAK,QAAQ,cAAc;AACrD,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAGxD,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,KAAK,QAAQ;AAAA,EAC/C,CAAC;AAED,wBAAG,6DAA6D,YAAY;AAC1E,UAAM,eAAe,iBAAiB;AAAA,MACpC,MAAM;AAAA,MACN,cAAc,EAAE,SAAS,UAAU;AAAA,IACrC,CAAC;AAED,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,cAAc;AAAA,EAChD,CAAC;AACH,CAAC;",
-  "names": []
-}

package/dist/security/manifest/plugins/pip.test.js

@@ -1,208 +0,0 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var import_vitest = require("vitest");
-var fs = __toESM(require("fs"));
-var path = __toESM(require("path"));
-var os = __toESM(require("os"));
-var import_pip = require("./pip");
-(0, import_vitest.describe)("parsePipManifest", () => {
-  let tmpDir;
-  (0, import_vitest.beforeEach)(() => {
-    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "kirograph-pip-test-"));
-  });
-  (0, import_vitest.afterEach)(() => {
-    fs.rmSync(tmpDir, { recursive: true, force: true });
-  });
-  function writeRequirements(content, filename = "requirements.txt") {
-    const filePath = path.join(tmpDir, filename);
-    fs.writeFileSync(filePath, content);
-    return filePath;
-  }
-  (0, import_vitest.it)("extracts packages with == constraint and resolves exact version", async () => {
-    const manifestPath = writeRequirements("flask==2.3.0\nrequests==2.28.1\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    const flask = deps.find((d) => d.name === "flask");
-    (0, import_vitest.expect)(flask).toBeDefined();
-    (0, import_vitest.expect)(flask.declaredConstraint).toBe("==2.3.0");
-    (0, import_vitest.expect)(flask.resolvedVersion).toBe("2.3.0");
-    (0, import_vitest.expect)(flask.scope).toBe("production");
-    (0, import_vitest.expect)(flask.ecosystem).toBe("pypi");
-    const requests = deps.find((d) => d.name === "requests");
-    (0, import_vitest.expect)(requests).toBeDefined();
-    (0, import_vitest.expect)(requests.declaredConstraint).toBe("==2.28.1");
-    (0, import_vitest.expect)(requests.resolvedVersion).toBe("2.28.1");
-  });
-  (0, import_vitest.it)("extracts packages with >= constraint (no resolved version)", async () => {
-    const manifestPath = writeRequirements("requests>=2.28\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].name).toBe("requests");
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe(">=2.28");
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBeUndefined();
-  });
-  (0, import_vitest.it)("extracts packages with ~= constraint", async () => {
-    const manifestPath = writeRequirements("django~=4.2\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].name).toBe("django");
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("~=4.2");
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBeUndefined();
-  });
-  (0, import_vitest.it)("extracts packages with no version constraint", async () => {
-    const manifestPath = writeRequirements("numpy\nscipy\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps[0].name).toBe("numpy");
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("");
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBeUndefined();
-    (0, import_vitest.expect)(deps[1].name).toBe("scipy");
-  });
-  (0, import_vitest.it)("skips comment lines", async () => {
-    const manifestPath = writeRequirements(
-      "# This is a comment\nflask==2.3.0\n# Another comment\nrequests>=2.28\n"
-    );
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps.map((d) => d.name)).toEqual(["flask", "requests"]);
-  });
-  (0, import_vitest.it)("skips empty lines", async () => {
-    const manifestPath = writeRequirements("flask==2.3.0\n\n\nrequests>=2.28\n\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-  });
-  (0, import_vitest.it)("skips pip option lines (-r, -c, -e, --index-url, --extra-index-url)", async () => {
-    const manifestPath = writeRequirements(
-      "-r base.txt\n-c constraints.txt\n-e git+https://github.com/user/repo.git\n--index-url https://pypi.org/simple\n--extra-index-url https://private.pypi.org/simple\nflask==2.3.0\n"
-    );
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].name).toBe("flask");
-  });
-  (0, import_vitest.it)("strips environment markers", async () => {
-    const manifestPath = writeRequirements(
-      'pywin32>=300; sys_platform == "win32"\ncolorama>=0.4; os_name == "nt"\nflask==2.3.0\n'
-    );
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(3);
-    const pywin32 = deps.find((d) => d.name === "pywin32");
-    (0, import_vitest.expect)(pywin32).toBeDefined();
-    (0, import_vitest.expect)(pywin32.declaredConstraint).toBe(">=300");
-    const colorama = deps.find((d) => d.name === "colorama");
-    (0, import_vitest.expect)(colorama).toBeDefined();
-    (0, import_vitest.expect)(colorama.declaredConstraint).toBe(">=0.4");
-  });
-  (0, import_vitest.it)("handles packages with extras (e.g. package[extra]>=1.0)", async () => {
-    const manifestPath = writeRequirements("requests[security]>=2.28.0\ncelery[redis]==5.3.0\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    const requests = deps.find((d) => d.name === "requests");
-    (0, import_vitest.expect)(requests).toBeDefined();
-    (0, import_vitest.expect)(requests.declaredConstraint).toBe(">=2.28.0");
-    const celery = deps.find((d) => d.name === "celery");
-    (0, import_vitest.expect)(celery).toBeDefined();
-    (0, import_vitest.expect)(celery.declaredConstraint).toBe("==5.3.0");
-    (0, import_vitest.expect)(celery.resolvedVersion).toBe("5.3.0");
-  });
-  (0, import_vitest.it)("normalizes package names (PEP 503)", async () => {
-    const manifestPath = writeRequirements(
-      "Flask==2.3.0\nPyYAML>=6.0\nmy_package==1.0.0\nAnother.Package>=2.0\n"
-    );
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(4);
-    (0, import_vitest.expect)(deps.map((d) => d.name)).toEqual([
-      "flask",
-      "pyyaml",
-      "my-package",
-      "another-package"
-    ]);
-  });
-  (0, import_vitest.it)("all dependencies have production scope", async () => {
-    const manifestPath = writeRequirements("flask==2.3.0\npytest==7.0.0\nmypy>=1.0\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(3);
-    (0, import_vitest.expect)(deps.every((d) => d.scope === "production")).toBe(true);
-  });
-  (0, import_vitest.it)("all dependencies have pypi ecosystem", async () => {
-    const manifestPath = writeRequirements("flask==2.3.0\ndjango~=4.2\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps.every((d) => d.ecosystem === "pypi")).toBe(true);
-  });
-  (0, import_vitest.it)("sets sourceManifest as relative path", async () => {
-    const subDir = path.join(tmpDir, "services", "api");
-    fs.mkdirSync(subDir, { recursive: true });
-    const filePath = path.join(subDir, "requirements.txt");
-    fs.writeFileSync(filePath, "flask==2.3.0\n");
-    const deps = await (0, import_pip.parsePipManifest)(filePath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].sourceManifest).toBe("services/api/requirements.txt");
-  });
-  (0, import_vitest.it)("returns empty array for non-existent file", async () => {
-    const deps = await (0, import_pip.parsePipManifest)(
-      path.join(tmpDir, "nonexistent.txt"),
-      tmpDir
-    );
-    (0, import_vitest.expect)(deps).toEqual([]);
-  });
-  (0, import_vitest.it)("handles inline comments", async () => {
-    const manifestPath = writeRequirements(
-      "flask==2.3.0  # web framework\nrequests>=2.28 # HTTP library\n"
-    );
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("==2.3.0");
-    (0, import_vitest.expect)(deps[1].declaredConstraint).toBe(">=2.28");
-  });
-  (0, import_vitest.it)("handles compound version constraints (e.g. >=1.0,<2.0)", async () => {
-    const manifestPath = writeRequirements("flask>=2.0,<3.0\nrequests>=2.28,!=2.29.0\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps[0].name).toBe("flask");
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe(">=2.0,<3.0");
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBeUndefined();
-    (0, import_vitest.expect)(deps[1].name).toBe("requests");
-    (0, import_vitest.expect)(deps[1].declaredConstraint).toBe(">=2.28,!=2.29.0");
-  });
-  (0, import_vitest.it)("handles != constraint", async () => {
-    const manifestPath = writeRequirements("flask!=2.2.0\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("!=2.2.0");
-    (0, import_vitest.expect)(deps[0].resolvedVersion).toBeUndefined();
-  });
-  (0, import_vitest.it)("handles < and > constraints", async () => {
-    const manifestPath = writeRequirements("flask>2.0\ndjango<5.0\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(2);
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe(">2.0");
-    (0, import_vitest.expect)(deps[1].declaredConstraint).toBe("<5.0");
-  });
-  (0, import_vitest.it)("handles <= constraint", async () => {
-    const manifestPath = writeRequirements("flask<=2.3.0\n");
-    const deps = await (0, import_pip.parsePipManifest)(manifestPath, tmpDir);
-    (0, import_vitest.expect)(deps).toHaveLength(1);
-    (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("<=2.3.0");
-  });
-});
-//# sourceMappingURL=pip.test.js.map

package/dist/security/manifest/plugins/pip.test.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/security/manifest/plugins/pip.test.ts"],
-  "sourcesContent": ["/**\n * Unit tests for the pip security manifest plugin.\n */\nimport { describe, it, expect, beforeEach, afterEach } from 'vitest';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as os from 'os';\nimport { parsePipManifest } from './pip';\n\ndescribe('parsePipManifest', () => {\n  let tmpDir: string;\n\n  beforeEach(() => {\n    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'kirograph-pip-test-'));\n  });\n\n  afterEach(() => {\n    fs.rmSync(tmpDir, { recursive: true, force: true });\n  });\n\n  function writeRequirements(content: string, filename = 'requirements.txt'): string {\n    const filePath = path.join(tmpDir, filename);\n    fs.writeFileSync(filePath, content);\n    return filePath;\n  }\n\n  it('extracts packages with == constraint and resolves exact version', async () => {\n    const manifestPath = writeRequirements('flask==2.3.0\\nrequests==2.28.1\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    const flask = deps.find(d => d.name === 'flask');\n    expect(flask).toBeDefined();\n    expect(flask!.declaredConstraint).toBe('==2.3.0');\n    expect(flask!.resolvedVersion).toBe('2.3.0');\n    expect(flask!.scope).toBe('production');\n    expect(flask!.ecosystem).toBe('pypi');\n\n    const requests = deps.find(d => d.name === 'requests');\n    expect(requests).toBeDefined();\n    expect(requests!.declaredConstraint).toBe('==2.28.1');\n    expect(requests!.resolvedVersion).toBe('2.28.1');\n  });\n\n  it('extracts packages with >= constraint (no resolved version)', async () => {\n    const manifestPath = writeRequirements('requests>=2.28\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].name).toBe('requests');\n    expect(deps[0].declaredConstraint).toBe('>=2.28');\n    expect(deps[0].resolvedVersion).toBeUndefined();\n  });\n\n  it('extracts packages with ~= constraint', async () => {\n    const manifestPath = writeRequirements('django~=4.2\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].name).toBe('django');\n    expect(deps[0].declaredConstraint).toBe('~=4.2');\n    expect(deps[0].resolvedVersion).toBeUndefined();\n  });\n\n  it('extracts packages with no version constraint', async () => {\n    const manifestPath = writeRequirements('numpy\\nscipy\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps[0].name).toBe('numpy');\n    expect(deps[0].declaredConstraint).toBe('');\n    expect(deps[0].resolvedVersion).toBeUndefined();\n    expect(deps[1].name).toBe('scipy');\n  });\n\n  it('skips comment lines', async () => {\n    const manifestPath = writeRequirements(\n      '# This is a comment\\nflask==2.3.0\\n# Another comment\\nrequests>=2.28\\n',\n    );\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps.map(d => d.name)).toEqual(['flask', 'requests']);\n  });\n\n  it('skips empty lines', async () => {\n    const manifestPath = writeRequirements('flask==2.3.0\\n\\n\\nrequests>=2.28\\n\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n  });\n\n  it('skips pip option lines (-r, -c, -e, --index-url, --extra-index-url)', async () => {\n    const manifestPath = writeRequirements(\n      '-r base.txt\\n-c constraints.txt\\n-e git+https://github.com/user/repo.git\\n--index-url https://pypi.org/simple\\n--extra-index-url https://private.pypi.org/simple\\nflask==2.3.0\\n',\n    );\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].name).toBe('flask');\n  });\n\n  it('strips environment markers', async () => {\n    const manifestPath = writeRequirements(\n      'pywin32>=300; sys_platform == \"win32\"\\ncolorama>=0.4; os_name == \"nt\"\\nflask==2.3.0\\n',\n    );\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(3);\n    const pywin32 = deps.find(d => d.name === 'pywin32');\n    expect(pywin32).toBeDefined();\n    expect(pywin32!.declaredConstraint).toBe('>=300');\n\n    const colorama = deps.find(d => d.name === 'colorama');\n    expect(colorama).toBeDefined();\n    expect(colorama!.declaredConstraint).toBe('>=0.4');\n  });\n\n  it('handles packages with extras (e.g. package[extra]>=1.0)', async () => {\n    const manifestPath = writeRequirements('requests[security]>=2.28.0\\ncelery[redis]==5.3.0\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    const requests = deps.find(d => d.name === 'requests');\n    expect(requests).toBeDefined();\n    expect(requests!.declaredConstraint).toBe('>=2.28.0');\n\n    const celery = deps.find(d => d.name === 'celery');\n    expect(celery).toBeDefined();\n    expect(celery!.declaredConstraint).toBe('==5.3.0');\n    expect(celery!.resolvedVersion).toBe('5.3.0');\n  });\n\n  it('normalizes package names (PEP 503)', async () => {\n    const manifestPath = writeRequirements(\n      'Flask==2.3.0\\nPyYAML>=6.0\\nmy_package==1.0.0\\nAnother.Package>=2.0\\n',\n    );\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(4);\n    expect(deps.map(d => d.name)).toEqual([\n      'flask',\n      'pyyaml',\n      'my-package',\n      'another-package',\n    ]);\n  });\n\n  it('all dependencies have production scope', async () => {\n    const manifestPath = writeRequirements('flask==2.3.0\\npytest==7.0.0\\nmypy>=1.0\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(3);\n    expect(deps.every(d => d.scope === 'production')).toBe(true);\n  });\n\n  it('all dependencies have pypi ecosystem', async () => {\n    const manifestPath = writeRequirements('flask==2.3.0\\ndjango~=4.2\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps.every(d => d.ecosystem === 'pypi')).toBe(true);\n  });\n\n  it('sets sourceManifest as relative path', async () => {\n    const subDir = path.join(tmpDir, 'services', 'api');\n    fs.mkdirSync(subDir, { recursive: true });\n    const filePath = path.join(subDir, 'requirements.txt');\n    fs.writeFileSync(filePath, 'flask==2.3.0\\n');\n\n    const deps = await parsePipManifest(filePath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].sourceManifest).toBe('services/api/requirements.txt');\n  });\n\n  it('returns empty array for non-existent file', async () => {\n    const deps = await parsePipManifest(\n      path.join(tmpDir, 'nonexistent.txt'),\n      tmpDir,\n    );\n    expect(deps).toEqual([]);\n  });\n\n  it('handles inline comments', async () => {\n    const manifestPath = writeRequirements(\n      'flask==2.3.0  # web framework\\nrequests>=2.28 # HTTP library\\n',\n    );\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps[0].declaredConstraint).toBe('==2.3.0');\n    expect(deps[1].declaredConstraint).toBe('>=2.28');\n  });\n\n  it('handles compound version constraints (e.g. >=1.0,<2.0)', async () => {\n    const manifestPath = writeRequirements('flask>=2.0,<3.0\\nrequests>=2.28,!=2.29.0\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps[0].name).toBe('flask');\n    expect(deps[0].declaredConstraint).toBe('>=2.0,<3.0');\n    expect(deps[0].resolvedVersion).toBeUndefined();\n\n    expect(deps[1].name).toBe('requests');\n    expect(deps[1].declaredConstraint).toBe('>=2.28,!=2.29.0');\n  });\n\n  it('handles != constraint', async () => {\n    const manifestPath = writeRequirements('flask!=2.2.0\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].declaredConstraint).toBe('!=2.2.0');\n    expect(deps[0].resolvedVersion).toBeUndefined();\n  });\n\n  it('handles < and > constraints', async () => {\n    const manifestPath = writeRequirements('flask>2.0\\ndjango<5.0\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(2);\n    expect(deps[0].declaredConstraint).toBe('>2.0');\n    expect(deps[1].declaredConstraint).toBe('<5.0');\n  });\n\n  it('handles <= constraint', async () => {\n    const manifestPath = writeRequirements('flask<=2.3.0\\n');\n\n    const deps = await parsePipManifest(manifestPath, tmpDir);\n\n    expect(deps).toHaveLength(1);\n    expect(deps[0].declaredConstraint).toBe('<=2.3.0');\n  });\n});\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;AAGA,oBAA4D;AAC5D,SAAoB;AACpB,WAAsB;AACtB,SAAoB;AACpB,iBAAiC;AAAA,IAEjC,wBAAS,oBAAoB,MAAM;AACjC,MAAI;AAEJ,gCAAW,MAAM;AACf,aAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,qBAAqB,CAAC;AAAA,EACvE,CAAC;AAED,+BAAU,MAAM;AACd,OAAG,OAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACpD,CAAC;AAED,WAAS,kBAAkB,SAAiB,WAAW,oBAA4B;AACjF,UAAM,WAAW,KAAK,KAAK,QAAQ,QAAQ;AAC3C,OAAG,cAAc,UAAU,OAAO;AAClC,WAAO;AAAA,EACT;AAEA,wBAAG,mEAAmE,YAAY;AAChF,UAAM,eAAe,kBAAkB,kCAAkC;AAEzE,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,UAAM,QAAQ,KAAK,KAAK,OAAK,EAAE,SAAS,OAAO;AAC/C,8BAAO,KAAK,EAAE,YAAY;AAC1B,8BAAO,MAAO,kBAAkB,EAAE,KAAK,SAAS;AAChD,8BAAO,MAAO,eAAe,EAAE,KAAK,OAAO;AAC3C,8BAAO,MAAO,KAAK,EAAE,KAAK,YAAY;AACtC,8BAAO,MAAO,SAAS,EAAE,KAAK,MAAM;AAEpC,UAAM,WAAW,KAAK,KAAK,OAAK,EAAE,SAAS,UAAU;AACrD,8BAAO,QAAQ,EAAE,YAAY;AAC7B,8BAAO,SAAU,kBAAkB,EAAE,KAAK,UAAU;AACpD,8BAAO,SAAU,eAAe,EAAE,KAAK,QAAQ;AAAA,EACjD,CAAC;AAED,wBAAG,8DAA8D,YAAY;AAC3E,UAAM,eAAe,kBAAkB,kBAAkB;AAEzD,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,UAAU;AACpC,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,QAAQ;AAChD,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,cAAc;AAAA,EAChD,CAAC;AAED,wBAAG,wCAAwC,YAAY;AACrD,UAAM,eAAe,kBAAkB,eAAe;AAEtD,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,QAAQ;AAClC,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,OAAO;AAC/C,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,cAAc;AAAA,EAChD,CAAC;AAED,wBAAG,gDAAgD,YAAY;AAC7D,UAAM,eAAe,kBAAkB,gBAAgB;AAEvD,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,OAAO;AACjC,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE;AAC1C,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,cAAc;AAC9C,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,OAAO;AAAA,EACnC,CAAC;AAED,wBAAG,uBAAuB,YAAY;AACpC,UAAM,eAAe;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,IAAI,OAAK,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,SAAS,UAAU,CAAC;AAAA,EAC7D,CAAC;AAED,wBAAG,qBAAqB,YAAY;AAClC,UAAM,eAAe,kBAAkB,sCAAsC;AAE7E,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAAA,EAC7B,CAAC;AAED,wBAAG,uEAAuE,YAAY;AACpF,UAAM,eAAe;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,OAAO;AAAA,EACnC,CAAC;AAED,wBAAG,8BAA8B,YAAY;AAC3C,UAAM,eAAe;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,UAAM,UAAU,KAAK,KAAK,OAAK,EAAE,SAAS,SAAS;AACnD,8BAAO,OAAO,EAAE,YAAY;AAC5B,8BAAO,QAAS,kBAAkB,EAAE,KAAK,OAAO;AAEhD,UAAM,WAAW,KAAK,KAAK,OAAK,EAAE,SAAS,UAAU;AACrD,8BAAO,QAAQ,EAAE,YAAY;AAC7B,8BAAO,SAAU,kBAAkB,EAAE,KAAK,OAAO;AAAA,EACnD,CAAC;AAED,wBAAG,2DAA2D,YAAY;AACxE,UAAM,eAAe,kBAAkB,oDAAoD;AAE3F,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,UAAM,WAAW,KAAK,KAAK,OAAK,EAAE,SAAS,UAAU;AACrD,8BAAO,QAAQ,EAAE,YAAY;AAC7B,8BAAO,SAAU,kBAAkB,EAAE,KAAK,UAAU;AAEpD,UAAM,SAAS,KAAK,KAAK,OAAK,EAAE,SAAS,QAAQ;AACjD,8BAAO,MAAM,EAAE,YAAY;AAC3B,8BAAO,OAAQ,kBAAkB,EAAE,KAAK,SAAS;AACjD,8BAAO,OAAQ,eAAe,EAAE,KAAK,OAAO;AAAA,EAC9C,CAAC;AAED,wBAAG,sCAAsC,YAAY;AACnD,UAAM,eAAe;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,IAAI,OAAK,EAAE,IAAI,CAAC,EAAE,QAAQ;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAED,wBAAG,0CAA0C,YAAY;AACvD,UAAM,eAAe,kBAAkB,0CAA0C;AAEjF,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,MAAM,OAAK,EAAE,UAAU,YAAY,CAAC,EAAE,KAAK,IAAI;AAAA,EAC7D,CAAC;AAED,wBAAG,wCAAwC,YAAY;AACrD,UAAM,eAAe,kBAAkB,6BAA6B;AAEpE,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,KAAK,MAAM,OAAK,EAAE,cAAc,MAAM,CAAC,EAAE,KAAK,IAAI;AAAA,EAC3D,CAAC;AAED,wBAAG,wCAAwC,YAAY;AACrD,UAAM,SAAS,KAAK,KAAK,QAAQ,YAAY,KAAK;AAClD,OAAG,UAAU,QAAQ,EAAE,WAAW,KAAK,CAAC;AACxC,UAAM,WAAW,KAAK,KAAK,QAAQ,kBAAkB;AACrD,OAAG,cAAc,UAAU,gBAAgB;AAE3C,UAAM,OAAO,UAAM,6BAAiB,UAAU,MAAM;AAEpD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,cAAc,EAAE,KAAK,+BAA+B;AAAA,EACrE,CAAC;AAED,wBAAG,6CAA6C,YAAY;AAC1D,UAAM,OAAO,UAAM;AAAA,MACjB,KAAK,KAAK,QAAQ,iBAAiB;AAAA,MACnC;AAAA,IACF;AACA,8BAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzB,CAAC;AAED,wBAAG,2BAA2B,YAAY;AACxC,UAAM,eAAe;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,SAAS;AACjD,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,QAAQ;AAAA,EAClD,CAAC;AAED,wBAAG,0DAA0D,YAAY;AACvE,UAAM,eAAe,kBAAkB,4CAA4C;AAEnF,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,OAAO;AACjC,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,YAAY;AACpD,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,cAAc;AAE9C,8BAAO,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,UAAU;AACpC,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,iBAAiB;AAAA,EAC3D,CAAC;AAED,wBAAG,yBAAyB,YAAY;AACtC,UAAM,eAAe,kBAAkB,gBAAgB;AAEvD,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,SAAS;AACjD,8BAAO,KAAK,CAAC,EAAE,eAAe,EAAE,cAAc;AAAA,EAChD,CAAC;AAED,wBAAG,+BAA+B,YAAY;AAC5C,UAAM,eAAe,kBAAkB,yBAAyB;AAEhE,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,MAAM;AAC9C,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,MAAM;AAAA,EAChD,CAAC;AAED,wBAAG,yBAAyB,YAAY;AACtC,UAAM,eAAe,kBAAkB,gBAAgB;AAEvD,UAAM,OAAO,UAAM,6BAAiB,cAAc,MAAM;AAExD,8BAAO,IAAI,EAAE,aAAa,CAAC;AAC3B,8BAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,SAAS;AAAA,EACnD,CAAC;AACH,CAAC;",
-  "names": []
-}