mcp-garry-codes 1.0.0

package/dist/domain/networking/net_auditor.js

@@ -0,0 +1,188 @@
+import { FileUtils } from "../../core/file_utils.js";
+import { GLuaAnalyzer } from "../glua/ast.js";
+export class NetAuditor {
+    static async audit(addonDir, specificFiles) {
+        const filesToScan = specificFiles
+            ? specificFiles.map(f => ({ path: f, relativePath: f, sizeBytes: 0 }))
+            : await FileUtils.listLuaFiles(addonDir);
+        const registeredStrings = new Set();
+        const netStarts = [];
+        const netReceives = [];
+        const vulnerabilities = [];
+        // Step 1: Scan all files to collect registered strings and messages
+        for (const file of filesToScan) {
+            let content = "";
+            try {
+                content = await FileUtils.readFile(file.path);
+            }
+            catch {
+                continue;
+            }
+            const realm = GLuaAnalyzer.detectRealmFromPath(file.relativePath);
+            const lines = content.split("\n");
+            for (let lineIdx = 0; lineIdx < lines.length; lineIdx++) {
+                const lineNum = lineIdx + 1;
+                const line = lines[lineIdx];
+                // util.AddNetworkString("...")
+                const addNetMatch = line.match(/util\.AddNetworkString\s*\(\s*["']([^"']+)["']\s*\)/);
+                if (addNetMatch) {
+                    registeredStrings.add(addNetMatch[1]);
+                    if (realm === "client") {
+                        vulnerabilities.push({
+                            severity: "critical",
+                            type: "missing_network_string",
+                            message_name: addNetMatch[1],
+                            file: file.relativePath,
+                            line: lineNum,
+                            description: `util.AddNetworkString('${addNetMatch[1]}') is called on the CLIENT. This causes a fatal Lua error.`,
+                            recommended_fix: "Move util.AddNetworkString calls to server-only scripts (e.g. init.lua or inside if SERVER then).",
+                            vulnerable_code: line.trim()
+                        });
+                    }
+                }
+                // net.Start("...")
+                const startMatch = line.match(/net\.Start\s*\(\s*["']([^"']+)["']/);
+                if (startMatch) {
+                    netStarts.push({
+                        name: startMatch[1],
+                        file: file.relativePath,
+                        line: lineNum,
+                        realm
+                    });
+                }
+                // net.Receive("...", function(len, ply) ... )
+                const receiveMatch = line.match(/net\.Receive\s*\(\s*["']([^"']+)["']\s*,\s*function\s*\(([^)]*)\)/);
+                if (receiveMatch) {
+                    const msgName = receiveMatch[1];
+                    const funcParams = receiveMatch[2].split(",").map(p => p.trim());
+                    const plyParam = funcParams[1] ?? "ply";
+                    // Grab the body of the function (approx next 30 lines)
+                    const bodyLines = lines.slice(lineIdx, Math.min(lines.length, lineIdx + 35));
+                    const bodySnippet = bodyLines.join("\n");
+                    // Check for auth verification
+                    const hasAuthCheck = bodySnippet.includes(`${plyParam}:IsAdmin()`) ||
+                        bodySnippet.includes(`${plyParam}:IsSuperAdmin()`) ||
+                        bodySnippet.includes("CAMI.PlayerHasAccess") ||
+                        bodySnippet.includes("ULib.ucl.query") ||
+                        bodySnippet.includes("sam.ranks");
+                    // Check data reads
+                    const dataTypes = [];
+                    if (bodySnippet.includes("net.ReadString"))
+                        dataTypes.push("string");
+                    if (bodySnippet.includes("net.ReadUInt") || bodySnippet.includes("net.ReadInt"))
+                        dataTypes.push("number");
+                    if (bodySnippet.includes("net.ReadEntity"))
+                        dataTypes.push("entity");
+                    if (bodySnippet.includes("net.ReadTable"))
+                        dataTypes.push("table");
+                    if (bodySnippet.includes("net.ReadBool") || bodySnippet.includes("net.ReadBit"))
+                        dataTypes.push("boolean");
+                    netReceives.push({
+                        name: msgName,
+                        file: file.relativePath,
+                        line: lineNum,
+                        realm,
+                        codeSnippet: bodySnippet,
+                        hasAuthCheck,
+                        dataTypes
+                    });
+                    // Check for dangerous actions on server without auth
+                    const isServerReceiver = realm === "server" || realm === "shared";
+                    const hasDangerousAction = bodySnippet.includes(":SetUserGroup") ||
+                        bodySnippet.includes(":Ban(") ||
+                        bodySnippet.includes(":Kick(") ||
+                        bodySnippet.includes("RunConsoleCommand") ||
+                        bodySnippet.includes("sql.Query") ||
+                        bodySnippet.includes("RunString") ||
+                        bodySnippet.includes("SetDarkRPVar") ||
+                        bodySnippet.includes("addMoney");
+                    if (isServerReceiver && hasDangerousAction && !hasAuthCheck) {
+                        vulnerabilities.push({
+                            severity: "critical",
+                            type: "unauthenticated_net_receiver",
+                            message_name: msgName,
+                            file: file.relativePath,
+                            line: lineNum,
+                            description: `net.Receive('${msgName}') performs state/administrative actions without checking '${plyParam}:IsAdmin()' or caller permissions. Any client can trigger this to exploit the server.`,
+                            recommended_fix: `Add 'if not IsValid(${plyParam}) or not ${plyParam}:IsAdmin() then return end' at the beginning of the handler.`,
+                            vulnerable_code: lines.slice(lineIdx, Math.min(lines.length, lineIdx + 5)).join("\n")
+                        });
+                    }
+                    // Check for SQL injection: net.ReadString concatenated with sql.Query
+                    if (bodySnippet.includes("net.ReadString") &&
+                        /sql\.Query\s*\([^)]*\.\./.test(bodySnippet) &&
+                        !bodySnippet.includes("sql.SQLStr")) {
+                        vulnerabilities.push({
+                            severity: "critical",
+                            type: "sql_injection",
+                            message_name: msgName,
+                            file: file.relativePath,
+                            line: lineNum,
+                            description: `net.Receive('${msgName}') reads a string from the network and directly concatenates it into a sql.Query call without sql.SQLStr escaping.`,
+                            recommended_fix: "Wrap all user-supplied strings with sql.SQLStr(str) before database queries.",
+                            vulnerable_code: lines.slice(lineIdx, Math.min(lines.length, lineIdx + 6)).join("\n")
+                        });
+                    }
+                    // Check for RunString exposure
+                    if (bodySnippet.includes("net.ReadString") && bodySnippet.includes("RunString")) {
+                        vulnerabilities.push({
+                            severity: "critical",
+                            type: "runstring_exposure",
+                            message_name: msgName,
+                            file: file.relativePath,
+                            line: lineNum,
+                            description: `net.Receive('${msgName}') passes an untrusted network string directly into RunString, allowing arbitrary Remote Code Execution (RCE).`,
+                            recommended_fix: "Remove RunString. Use deterministic enumerations or structured commands instead.",
+                            vulnerable_code: lines.slice(lineIdx, Math.min(lines.length, lineIdx + 5)).join("\n")
+                        });
+                    }
+                }
+            }
+        }
+        // Step 2: Cross-check missing network strings
+        for (const start of netStarts) {
+            if (!registeredStrings.has(start.name)) {
+                vulnerabilities.push({
+                    severity: "high",
+                    type: "missing_network_string",
+                    message_name: start.name,
+                    file: start.file,
+                    line: start.line,
+                    description: `net.Start('${start.name}') was called, but '${start.name}' was never registered with util.AddNetworkString in any scanned server file.`,
+                    recommended_fix: `Add util.AddNetworkString("${start.name}") in your server initialization code.`,
+                    vulnerable_code: `net.Start("${start.name}")`
+                });
+            }
+        }
+        // Step 3: Build Network Graph
+        const networkGraph = [];
+        const allMessageNames = new Set([
+            ...registeredStrings,
+            ...netStarts.map(s => s.name),
+            ...netReceives.map(r => r.name)
+        ]);
+        for (const msg of allMessageNames) {
+            const starts = netStarts.filter(s => s.name === msg);
+            const receives = netReceives.filter(r => r.name === msg);
+            const sentFrom = starts.length > 0 ? (starts[0].realm === "client" ? "client" : "server") : "unknown";
+            const receivedIn = receives.length > 0 ? (receives[0].realm === "client" ? "client" : "server") : "unknown";
+            const hasAuth = receives.every(r => r.hasAuthCheck);
+            const dataTypes = Array.from(new Set(receives.flatMap(r => r.dataTypes)));
+            networkGraph.push({
+                message: msg,
+                sent_from: sentFrom,
+                received_in: receivedIn,
+                has_auth_check: hasAuth,
+                registered_on_server: registeredStrings.has(msg),
+                data_types: dataTypes
+            });
+        }
+        return {
+            messages_found: allMessageNames.size,
+            registered_strings: Array.from(registeredStrings),
+            vulnerabilities,
+            network_graph: networkGraph
+        };
+    }
+}
+//# sourceMappingURL=net_auditor.js.map

package/dist/domain/networking/net_auditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"net_auditor.js","sourceRoot":"","sources":["../../../src/domain/networking/net_auditor.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,YAAY,EAAa,MAAM,gBAAgB,CAAC;AAEzD,MAAM,OAAO,UAAU;IACd,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,aAAwB;QAClE,MAAM,WAAW,GAAG,aAAa;YAC/B,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC,CAAC,MAAM,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAE3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC5C,MAAM,SAAS,GAA0E,EAAE,CAAC;QAC5F,MAAM,WAAW,GAQZ,EAAE,CAAC;QAER,MAAM,eAAe,GAAuB,EAAE,CAAC;QAE/C,oEAAoE;QACpE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAG,YAAY,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,CAAC;gBAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;gBAE5B,+BAA+B;gBAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;gBACtF,IAAI,WAAW,EAAE,CAAC;oBAChB,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACvB,eAAe,CAAC,IAAI,CAAC;4BACnB,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,wBAAwB;4BAC9B,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;4BAC5B,IAAI,EAAE,IAAI,CAAC,YAAY;4BACvB,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,0BAA0B,WAAW,CAAC,CAAC,CAAC,4DAA4D;4BACjH,eAAe,EAAE,mGAAmG;4BACpH,eAAe,EAAE,IAAI,CAAC,IAAI,EAAE;yBAC7B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,mBAAmB;gBACnB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACpE,IAAI,UAAU,EAAE,CAAC;oBACf,SAAS,CAAC,IAAI,CAAC;wBACb,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;wBACnB,IAAI,EAAE,IAAI,CAAC,YAAY;wBACvB,IAAI,EAAE,OAAO;wBACb,KAAK;qBACN,CAAC,CAAC;gBACL,CAAC;gBAED,8CAA8C;gBAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;gBACrG,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;oBAChC,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACjE,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;oBAExC,uDAAuD;oBACvD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;oBAC7E,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAEzC,8BAA8B;oBAC9B,MAAM,YAAY,GAChB,WAAW,CAAC,QAAQ,CAAC,GAAG,QAAQ,YAAY,CAAC;wBAC7C,WAAW,CAAC,QAAQ,CAAC,GAAG,QAAQ,iBAAiB,CAAC;wBAClD,WAAW,CAAC,QAAQ,CAAC,sBAAsB,CAAC;wBAC5C,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC;wBACtC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;oBAEpC,mBAAmB;oBACnB,MAAM,SAAS,GAAa,EAAE,CAAC;oBAC/B,IAAI,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACrE,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC1G,IAAI,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACrE,IAAI,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACnE,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAE3G,WAAW,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE,IAAI,CAAC,YAAY;wBACvB,IAAI,EAAE,OAAO;wBACb,KAAK;wBACL,WAAW,EAAE,WAAW;wBACxB,YAAY;wBACZ,SAAS;qBACV,CAAC,CAAC;oBAEH,qDAAqD;oBACrD,MAAM,gBAAgB,GAAG,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,CAAC;oBAClE,MAAM,kBAAkB,GACtB,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC;wBACrC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;wBAC7B,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAC9B,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC;wBACzC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;wBACjC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;wBACjC,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC;wBACpC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;oBAEnC,IAAI,gBAAgB,IAAI,kBAAkB,IAAI,CAAC,YAAY,EAAE,CAAC;wBAC5D,eAAe,CAAC,IAAI,CAAC;4BACnB,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,8BAA8B;4BACpC,YAAY,EAAE,OAAO;4BACrB,IAAI,EAAE,IAAI,CAAC,YAAY;4BACvB,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,gBAAgB,OAAO,8DAA8D,QAAQ,uFAAuF;4BACjM,eAAe,EAAE,uBAAuB,QAAQ,YAAY,QAAQ,8DAA8D;4BAClI,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;yBACtF,CAAC,CAAC;oBACL,CAAC;oBAED,sEAAsE;oBACtE,IACE,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC;wBACtC,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC;wBAC5C,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EACnC,CAAC;wBACD,eAAe,CAAC,IAAI,CAAC;4BACnB,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,eAAe;4BACrB,YAAY,EAAE,OAAO;4BACrB,IAAI,EAAE,IAAI,CAAC,YAAY;4BACvB,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,gBAAgB,OAAO,oHAAoH;4BACxJ,eAAe,EAAE,8EAA8E;4BAC/F,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;yBACtF,CAAC,CAAC;oBACL,CAAC;oBAED,+BAA+B;oBAC/B,IAAI,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBAChF,eAAe,CAAC,IAAI,CAAC;4BACnB,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,oBAAoB;4BAC1B,YAAY,EAAE,OAAO;4BACrB,IAAI,EAAE,IAAI,CAAC,YAAY;4BACvB,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,gBAAgB,OAAO,gHAAgH;4BACpJ,eAAe,EAAE,kFAAkF;4BACnG,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;yBACtF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,eAAe,CAAC,IAAI,CAAC;oBACnB,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,wBAAwB;oBAC9B,YAAY,EAAE,KAAK,CAAC,IAAI;oBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,WAAW,EAAE,cAAc,KAAK,CAAC,IAAI,uBAAuB,KAAK,CAAC,IAAI,+EAA+E;oBACrJ,eAAe,EAAE,8BAA8B,KAAK,CAAC,IAAI,wCAAwC;oBACjG,eAAe,EAAE,cAAc,KAAK,CAAC,IAAI,IAAI;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,YAAY,GAA8B,EAAE,CAAC;QACnD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;YAC9B,GAAG,iBAAiB;YACpB,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7B,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAChC,CAAC,CAAC;QAEH,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YAEzD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAE1E,YAAY,CAAC,IAAI,CAAC;gBAChB,OAAO,EAAE,GAAG;gBACZ,SAAS,EAAE,QAAQ;gBACnB,WAAW,EAAE,UAAU;gBACvB,cAAc,EAAE,OAAO;gBACvB,oBAAoB,EAAE,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAChD,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,cAAc,EAAE,eAAe,CAAC,IAAI;YACpC,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC;YACjD,eAAe;YACf,aAAa,EAAE,YAAY;SAC5B,CAAC;IACJ,CAAC;CACF"}

package/dist/domain/packaging/validator.d.ts

@@ -0,0 +1,5 @@
+import { PackageAndValidateOutput } from "../../contracts/scaffold_contracts.js";
+export declare class PackagingValidator {
+    static validateAndPackage(addonDir: string, buildGma?: boolean, outputGmaPath?: string): Promise<PackageAndValidateOutput>;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/domain/packaging/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../src/domain/packaging/validator.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,wBAAwB,EACzB,MAAM,uCAAuC,CAAC;AAsC/C,qBAAa,kBAAkB;WACT,kBAAkB,CACpC,QAAQ,EAAE,MAAM,EAChB,QAAQ,UAAQ,EAChB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,wBAAwB,CAAC;CAyFrC"}

package/dist/domain/packaging/validator.js

@@ -0,0 +1,121 @@
+import path from "node:path";
+import { FileUtils } from "../../core/file_utils.js";
+import { ProcessRunner } from "../../core/process_runner.js";
+import { getConfig } from "../../config/env.js";
+const GMA_ALLOWED_EXTENSIONS = new Set([
+    ".lua",
+    ".vmt",
+    ".vtf",
+    ".mdl",
+    ".vtx",
+    ".vvd",
+    ".phy",
+    ".wav",
+    ".mp3",
+    ".ogg",
+    ".png",
+    ".jpg",
+    ".jpeg",
+    ".json",
+    ".txt",
+    ".bsp",
+    ".nav",
+    ".ain",
+    ".pcf"
+]);
+const VALID_ADDON_TYPES = new Set([
+    "ServerContent",
+    "gamemode",
+    "map",
+    "weapon",
+    "vehicle",
+    "npc",
+    "tool",
+    "effects",
+    "model"
+]);
+export class PackagingValidator {
+    static async validateAndPackage(addonDir, buildGma = false, outputGmaPath) {
+        const warnings = [];
+        const illegalFiles = [];
+        // 1. Verify addon.json
+        let addonJsonValid = false;
+        const addonJsonPath = path.join(addonDir, "addon.json");
+        if (await FileUtils.fileExists(addonJsonPath)) {
+            try {
+                const rawJson = await FileUtils.readFile(addonJsonPath);
+                const parsed = JSON.parse(rawJson);
+                if (!parsed.title || typeof parsed.title !== "string") {
+                    warnings.push("addon.json is missing a valid 'title' string.");
+                }
+                if (!parsed.type || !VALID_ADDON_TYPES.has(parsed.type)) {
+                    warnings.push(`addon.json 'type' must be one of: ${Array.from(VALID_ADDON_TYPES).join(", ")}.`);
+                }
+                if (parsed.tags && (!Array.isArray(parsed.tags) || parsed.tags.length > 2)) {
+                    warnings.push("addon.json 'tags' must be an array of maximum 2 tags.");
+                }
+                if (warnings.length === 0) {
+                    addonJsonValid = true;
+                }
+            }
+            catch (err) {
+                warnings.push(`Failed to parse addon.json: ${String(err)}`);
+            }
+        }
+        else {
+            warnings.push("addon.json does not exist in the root of the addon directory.");
+        }
+        // 2. Scan all files for GMA compatibility
+        const allFiles = await FileUtils.listAllFiles(addonDir);
+        let totalSizeBytes = 0;
+        for (const file of allFiles) {
+            totalSizeBytes += file.sizeBytes;
+            const ext = path.extname(file.path).toLowerCase();
+            // Check if file is inside .git or .vscode or addon.json
+            if (file.relativePath.toLowerCase() === "addon.json") {
+                continue;
+            }
+            if (!GMA_ALLOWED_EXTENSIONS.has(ext)) {
+                illegalFiles.push({
+                    path: file.relativePath,
+                    reason: `Extension '${ext}' is rejected by Steam Workshop gmad compiler.`
+                });
+            }
+            // Check for uppercase characters in paths (causes Linux dedicated server 404s)
+            if (/[A-Z]/.test(file.relativePath)) {
+                warnings.push(`File path '${file.relativePath}' contains uppercase letters, which causes file-not-found issues on Linux servers.`);
+            }
+        }
+        // 3. Compile GMA if requested and gmad exists
+        let compiledGmaPath = undefined;
+        if (buildGma && illegalFiles.length === 0 && addonJsonValid) {
+            const gmadPath = getConfig().GMAD_PATH;
+            if (gmadPath) {
+                const destGma = outputGmaPath ?? path.join(addonDir, "out.gma");
+                try {
+                    await ProcessRunner.execute(gmadPath, ["create", "-folder", addonDir, "-out", destGma], {
+                        timeoutMs: 30000
+                    });
+                    compiledGmaPath = destGma;
+                }
+                catch (err) {
+                    warnings.push(`Failed to compile GMA package: ${String(err)}`);
+                }
+            }
+            else {
+                warnings.push("GMAD_PATH environment variable is not configured; cannot compile .gma binary.");
+            }
+        }
+        const isValid = addonJsonValid && illegalFiles.length === 0;
+        return {
+            valid: isValid,
+            addon_json_valid: addonJsonValid,
+            total_files: allFiles.length,
+            total_size_bytes: totalSizeBytes,
+            illegal_files: illegalFiles,
+            warnings,
+            gma_path: compiledGmaPath
+        };
+    }
+}
+//# sourceMappingURL=validator.js.map

package/dist/domain/packaging/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/domain/packaging/validator.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAKrD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,eAAe;IACf,UAAU;IACV,KAAK;IACL,QAAQ;IACR,SAAS;IACT,KAAK;IACL,MAAM;IACN,SAAS;IACT,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,OAAO,kBAAkB;IACtB,MAAM,CAAC,KAAK,CAAC,kBAAkB,CACpC,QAAgB,EAChB,QAAQ,GAAG,KAAK,EAChB,aAAsB;QAEtB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAyB,EAAE,CAAC;QAE9C,uBAAuB;QACvB,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACxD,IAAI,MAAM,SAAS,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;gBACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAEnC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACtD,QAAQ,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;gBACjE,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,QAAQ,CAAC,IAAI,CAAC,qCAAqC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClG,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC3E,QAAQ,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;gBACzE,CAAC;gBAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1B,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QACjF,CAAC;QAED,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,cAAc,IAAI,IAAI,CAAC,SAAS,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAElD,wDAAwD;YACxD,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,YAAY,EAAE,CAAC;gBACrD,SAAS;YACX,CAAC;YAED,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,YAAY,CAAC,IAAI,CAAC;oBAChB,IAAI,EAAE,IAAI,CAAC,YAAY;oBACvB,MAAM,EAAE,cAAc,GAAG,gDAAgD;iBAC1E,CAAC,CAAC;YACL,CAAC;YAED,+EAA+E;YAC/E,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,YAAY,oFAAoF,CAAC,CAAC;YACrI,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,IAAI,eAAe,GAAuB,SAAS,CAAC;QACpD,IAAI,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC,SAAS,CAAC;YACvC,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAChE,IAAI,CAAC;oBACH,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;wBACtF,SAAS,EAAE,KAAK;qBACjB,CAAC,CAAC;oBACH,eAAe,GAAG,OAAO,CAAC;gBAC5B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,QAAQ,CAAC,IAAI,CAAC,kCAAkC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,cAAc,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC;QAE5D,OAAO;YACL,KAAK,EAAE,OAAO;YACd,gBAAgB,EAAE,cAAc;YAChC,WAAW,EAAE,QAAQ,CAAC,MAAM;YAC5B,gBAAgB,EAAE,cAAc;YAChC,aAAa,EAAE,YAAY;YAC3B,QAAQ;YACR,QAAQ,EAAE,eAAe;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/domain/performance/hot_path_analyzer.d.ts

@@ -0,0 +1,5 @@
+import { AnalyzePerformanceOutput } from "../../contracts/linter_contracts.js";
+export declare class HotPathAnalyzer {
+    static analyze(code: string): AnalyzePerformanceOutput;
+}
+//# sourceMappingURL=hot_path_analyzer.d.ts.map

package/dist/domain/performance/hot_path_analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hot_path_analyzer.d.ts","sourceRoot":"","sources":["../../../src/domain/performance/hot_path_analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EAEzB,MAAM,qCAAqC,CAAC;AAgB7C,qBAAa,eAAe;WACZ,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB;CA+H9D"}

package/dist/domain/performance/hot_path_analyzer.js

@@ -0,0 +1,127 @@
+const HOT_PATH_HOOKS = [
+    "HUDPaint",
+    "HUDPaintBackground",
+    "RenderScreenspaceEffects",
+    "PostDrawTranslucentRenderables",
+    "PostDrawOpaqueRenderables",
+    "PostDrawViewModel",
+    "PreDrawViewModel",
+    "Think",
+    "Tick",
+    "Move",
+    "SetupMove"
+];
+export class HotPathAnalyzer {
+    static analyze(code) {
+        const issues = [];
+        let allocationsInHotPath = 0;
+        let globalCallsInHotPath = 0;
+        let dynamicDrawCalls = 0;
+        const lines = code.split("\n");
+        let currentHook = null;
+        let hookScopeDepth = 0;
+        for (let i = 0; i < lines.length; i++) {
+            const lineNum = i + 1;
+            const line = lines[i];
+            // Detect entering a hot-path hook: hook.Add("HUDPaint", ... or function GM:HUDPaint() or ENT:Think()
+            for (const hook of HOT_PATH_HOOKS) {
+                const hookAddPattern = new RegExp(`hook\\.Add\\s*\\(\\s*["']${hook}["']`, "i");
+                const gmPattern = new RegExp(`function\\s+(?:GM|GAMEMODE):${hook}\\s*\\(`, "i");
+                const entPattern = new RegExp(`function\\s+(?:ENT|SWEP):${hook}\\s*\\(`, "i");
+                if (hookAddPattern.test(line) || gmPattern.test(line) || entPattern.test(line)) {
+                    currentHook = hook;
+                    hookScopeDepth = 1;
+                    break;
+                }
+            }
+            if (currentHook) {
+                // 1. Color(...) table allocation
+                if (/Color\s*\(\s*\d+/.test(line)) {
+                    allocationsInHotPath++;
+                    issues.push({
+                        hook_name: currentHook,
+                        line: lineNum,
+                        severity: "critical",
+                        category: "allocation_in_render_hook",
+                        description: `Calling Color(r,g,b,a) inside '${currentHook}' allocates a new Lua table every frame, triggering GC stutters.`,
+                        recommended_code: `-- Define outside the hook once:\nlocal MY_COLOR = Color(255, 255, 255)\n\n-- Inside hook:\ndraw.SimpleText(..., MY_COLOR)`
+                    });
+                }
+                // 2. Vector(...) or Angle(...) table allocation
+                if (/Vector\s*\(\s*[-0-9]/.test(line) || /Angle\s*\(\s*[-0-9]/.test(line)) {
+                    allocationsInHotPath++;
+                    issues.push({
+                        hook_name: currentHook,
+                        line: lineNum,
+                        severity: "high",
+                        category: "allocation_in_render_hook",
+                        description: `Calling Vector() or Angle() inside '${currentHook}' allocates garbage every frame.`,
+                        recommended_code: `-- Pre-allocate static vectors outside the hook or reuse an upvalue vector with vec:Set(x, y, z).`
+                    });
+                }
+                // 3. Dynamic table creation {}
+                if (/=\s*\{/.test(line) && !line.includes("local") && !line.trim().startsWith("--")) {
+                    allocationsInHotPath++;
+                    issues.push({
+                        hook_name: currentHook,
+                        line: lineNum,
+                        severity: "medium",
+                        category: "allocation_in_render_hook",
+                        description: `Instantiating dynamic table '{}' inside '${currentHook}'.`,
+                        recommended_code: "Reuse a pre-allocated table and wipe it using table.Empty(tbl) if necessary."
+                    });
+                }
+                // 4. Uncached surface.CreateFont
+                if (/surface\.CreateFont/.test(line)) {
+                    dynamicDrawCalls++;
+                    issues.push({
+                        hook_name: currentHook,
+                        line: lineNum,
+                        severity: "critical",
+                        category: "uncached_font",
+                        description: `Calling surface.CreateFont inside '${currentHook}' creates a new Source Engine font handle every frame!`,
+                        recommended_code: "Move surface.CreateFont to the top of your file outside any hooks."
+                    });
+                }
+                // 5. Uncached Material(...) call
+                if (/Material\s*\(\s*["']/.test(line)) {
+                    allocationsInHotPath++;
+                    issues.push({
+                        hook_name: currentHook,
+                        line: lineNum,
+                        severity: "high",
+                        category: "uncached_material",
+                        description: `Calling Material() inside '${currentHook}' queries the engine material cache repeatedly every frame.`,
+                        recommended_code: `local MAT_ICON = Material("path/to/icon.png", "noclamp smooth")\n-- Inside hook:\nsurface.SetMaterial(MAT_ICON)`
+                    });
+                }
+                // 6. Unlocalized standard globals (math.Clamp, math.floor)
+                if (/math\.(Clamp|floor|ceil|min|max|sin|cos|rad)/.test(line)) {
+                    globalCallsInHotPath++;
+                }
+                // Track blocks to know when the hook ends
+                const openers = (line.match(/\b(function|then|do|repeat)\b/g) || []).length;
+                const closers = (line.match(/\bend\b/g) || []).length;
+                hookScopeDepth += (openers - closers);
+                if (hookScopeDepth <= 0) {
+                    currentHook = null;
+                }
+            }
+        }
+        // Calculate score
+        const penalties = issues.filter(i => i.severity === "critical").length * 25 +
+            issues.filter(i => i.severity === "high").length * 15 +
+            issues.filter(i => i.severity === "medium").length * 5;
+        const score = Math.max(0, 100 - penalties);
+        return {
+            performance_score: score,
+            issues,
+            metrics: {
+                allocations_in_hot_path: allocationsInHotPath,
+                global_calls_in_hot_path: globalCallsInHotPath,
+                dynamic_draw_calls: dynamicDrawCalls
+            }
+        };
+    }
+}
+//# sourceMappingURL=hot_path_analyzer.js.map

package/dist/domain/performance/hot_path_analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hot_path_analyzer.js","sourceRoot":"","sources":["../../../src/domain/performance/hot_path_analyzer.ts"],"names":[],"mappings":"AAKA,MAAM,cAAc,GAAG;IACrB,UAAU;IACV,oBAAoB;IACpB,0BAA0B;IAC1B,gCAAgC;IAChC,2BAA2B;IAC3B,mBAAmB;IACnB,kBAAkB;IAClB,OAAO;IACP,MAAM;IACN,MAAM;IACN,WAAW;CACZ,CAAC;AAEF,MAAM,OAAO,eAAe;IACnB,MAAM,CAAC,OAAO,CAAC,IAAY;QAChC,MAAM,MAAM,GAAuB,EAAE,CAAC;QACtC,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,IAAI,gBAAgB,GAAG,CAAC,CAAC;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAEtB,qGAAqG;YACrG,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;gBAClC,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,4BAA4B,IAAI,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC/E,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,+BAA+B,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC;gBAChF,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,4BAA4B,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC;gBAE9E,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/E,WAAW,GAAG,IAAI,CAAC;oBACnB,cAAc,GAAG,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;YACH,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,iCAAiC;gBACjC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClC,oBAAoB,EAAE,CAAC;oBACvB,MAAM,CAAC,IAAI,CAAC;wBACV,SAAS,EAAE,WAAW;wBACtB,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,UAAU;wBACpB,QAAQ,EAAE,2BAA2B;wBACrC,WAAW,EAAE,kCAAkC,WAAW,kEAAkE;wBAC5H,gBAAgB,EAAE,4HAA4H;qBAC/I,CAAC,CAAC;gBACL,CAAC;gBAED,gDAAgD;gBAChD,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1E,oBAAoB,EAAE,CAAC;oBACvB,MAAM,CAAC,IAAI,CAAC;wBACV,SAAS,EAAE,WAAW;wBACtB,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,2BAA2B;wBACrC,WAAW,EAAE,uCAAuC,WAAW,kCAAkC;wBACjG,gBAAgB,EAAE,mGAAmG;qBACtH,CAAC,CAAC;gBACL,CAAC;gBAED,+BAA+B;gBAC/B,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpF,oBAAoB,EAAE,CAAC;oBACvB,MAAM,CAAC,IAAI,CAAC;wBACV,SAAS,EAAE,WAAW;wBACtB,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,QAAQ;wBAClB,QAAQ,EAAE,2BAA2B;wBACrC,WAAW,EAAE,4CAA4C,WAAW,IAAI;wBACxE,gBAAgB,EAAE,8EAA8E;qBACjG,CAAC,CAAC;gBACL,CAAC;gBAED,iCAAiC;gBACjC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,gBAAgB,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC;wBACV,SAAS,EAAE,WAAW;wBACtB,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,UAAU;wBACpB,QAAQ,EAAE,eAAe;wBACzB,WAAW,EAAE,sCAAsC,WAAW,wDAAwD;wBACtH,gBAAgB,EAAE,oEAAoE;qBACvF,CAAC,CAAC;gBACL,CAAC;gBAED,iCAAiC;gBACjC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,oBAAoB,EAAE,CAAC;oBACvB,MAAM,CAAC,IAAI,CAAC;wBACV,SAAS,EAAE,WAAW;wBACtB,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,mBAAmB;wBAC7B,WAAW,EAAE,8BAA8B,WAAW,6DAA6D;wBACnH,gBAAgB,EAAE,iHAAiH;qBACpI,CAAC,CAAC;gBACL,CAAC;gBAED,2DAA2D;gBAC3D,IAAI,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9D,oBAAoB,EAAE,CAAC;gBACzB,CAAC;gBAED,0CAA0C;gBAC1C,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,gCAAgC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC5E,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBACtD,cAAc,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;gBACtC,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;oBACxB,WAAW,GAAG,IAAI,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,GAAG,EAAE;YACzD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,GAAG,EAAE;YACrD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAEzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC;QAE3C,OAAO;YACL,iBAAiB,EAAE,KAAK;YACxB,MAAM;YACN,OAAO,EAAE;gBACP,uBAAuB,EAAE,oBAAoB;gBAC7C,wBAAwB,EAAE,oBAAoB;gBAC9C,kBAAkB,EAAE,gBAAgB;aACrC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/domain/scaffolding/templates.d.ts

@@ -0,0 +1,5 @@
+import { ScaffoldGModComponentInput, ScaffoldGModComponentOutput } from "../../contracts/scaffold_contracts.js";
+export declare class ScaffoldingService {
+    static scaffold(input: ScaffoldGModComponentInput, workspaceRoot?: string): Promise<ScaffoldGModComponentOutput>;
+}
+//# sourceMappingURL=templates.d.ts.map

package/dist/domain/scaffolding/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/domain/scaffolding/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC5B,MAAM,uCAAuC,CAAC;AAI/C,qBAAa,kBAAkB;WACT,QAAQ,CAC1B,KAAK,EAAE,0BAA0B,EACjC,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,2BAA2B,CAAC;CA+NxC"}