nexus-agents 2.28.0 → 2.29.1

package/dist/chunk-AP2FD37C.js

@@ -0,0 +1,127 @@
+import {
+  extractSymbols
+} from "./chunk-BQ4YXGGQ.js";
+
+// src/indexer/codebase-search.ts
+import { readdir } from "fs/promises";
+import { resolve, extname, relative } from "path";
+var SCORE_EXACT = 20;
+var SCORE_PREFIX = 10;
+var SCORE_WORD = 5;
+var SCORE_SUBSTRING = 2;
+var SCORE_EXPORTED_BONUS = 3;
+function isSourceFile(name) {
+  const ext = extname(name).toLowerCase();
+  return [".ts", ".tsx", ".js", ".jsx"].includes(ext) && !name.endsWith(".test.ts") && !name.endsWith(".test.tsx") && !name.endsWith(".d.ts");
+}
+async function findSourceFiles(dir, maxDepth) {
+  if (maxDepth <= 0) return [];
+  const files = [];
+  const entries = await readdir(dir, { withFileTypes: true }).catch(() => []);
+  for (const entry of entries) {
+    const fullPath = resolve(dir, entry.name);
+    if (entry.isDirectory() && entry.name !== "node_modules" && entry.name !== "dist") {
+      files.push(...await findSourceFiles(fullPath, maxDepth - 1));
+    }
+    if (entry.isFile() && isSourceFile(entry.name)) {
+      files.push(fullPath);
+    }
+  }
+  return files;
+}
+function scoreMatch(symbolName, query) {
+  const nameLower = symbolName.toLowerCase();
+  const queryLower = query.toLowerCase();
+  if (nameLower === queryLower) return SCORE_EXACT;
+  if (nameLower.startsWith(queryLower)) return SCORE_PREFIX;
+  const words = symbolName.replace(/([a-z])([A-Z])/g, "$1 $2").toLowerCase().split(/[\s_-]+/);
+  if (words.some((w) => w === queryLower)) return SCORE_WORD;
+  if (nameLower.includes(queryLower)) return SCORE_SUBSTRING;
+  return null;
+}
+function getMatchType(score) {
+  if (score >= SCORE_EXACT) return "exact";
+  if (score >= SCORE_PREFIX) return "prefix";
+  if (score >= SCORE_WORD) return "word";
+  return "substring";
+}
+var CodebaseIndex = class {
+  symbols = [];
+  fileResults = /* @__PURE__ */ new Map();
+  rootDir;
+  constructor(rootDir) {
+    this.rootDir = rootDir;
+  }
+  /** Index all TS/JS source files in the directory. */
+  async index(maxDepth = 4) {
+    const files = await findSourceFiles(this.rootDir, maxDepth);
+    for (const file of files) {
+      const result = await extractSymbols(file);
+      const relPath = relative(this.rootDir, file);
+      this.fileResults.set(relPath, result);
+      for (const symbol of result.symbols) {
+        this.symbols.push({ ...symbol, filePath: relPath });
+      }
+    }
+    return {
+      totalFiles: files.length,
+      totalSymbols: this.symbols.length,
+      indexedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+  }
+  /** Search symbols by keyword. Returns top N results sorted by relevance. */
+  search(query, limit = 20) {
+    const results = [];
+    for (const symbol of this.symbols) {
+      const baseScore = scoreMatch(symbol.name, query);
+      if (baseScore === null) continue;
+      const bonus = symbol.exported ? SCORE_EXPORTED_BONUS : 0;
+      results.push({
+        symbol,
+        score: baseScore + bonus,
+        matchType: getMatchType(baseScore)
+      });
+    }
+    return results.sort((a, b) => b.score - a.score).slice(0, limit);
+  }
+  /** Get a compact summary of a file's symbols. */
+  getFileSummary(filePath) {
+    const result = this.fileResults.get(filePath);
+    if (result === void 0) return void 0;
+    const kinds = {};
+    let exported = 0;
+    let priv = 0;
+    for (const s of result.symbols) {
+      kinds[s.kind] = (kinds[s.kind] ?? 0) + 1;
+      if (s.exported) exported++;
+      else priv++;
+    }
+    return {
+      filePath,
+      totalLines: result.totalLines,
+      exportedSymbols: exported,
+      privateSymbols: priv,
+      kinds
+    };
+  }
+  /** List all indexed files with symbol counts. */
+  listFiles() {
+    return [...this.fileResults.entries()].map(([path, result]) => ({
+      path,
+      symbols: result.symbols.length,
+      lines: result.totalLines
+    }));
+  }
+  /** Get index statistics. */
+  get stats() {
+    return {
+      files: this.fileResults.size,
+      symbols: this.symbols.length
+    };
+  }
+};
+
+export {
+  CodebaseIndex
+};
+//# sourceMappingURL=chunk-AP2FD37C.js.map

package/dist/chunk-AP2FD37C.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/indexer/codebase-search.ts"],"sourcesContent":["/**\n * Codebase search — keyword search across symbol indices.\n *\n * Builds an in-memory symbol index for a directory of TS/JS files,\n * then supports keyword search, file summaries, and symbol lookup.\n *\n * Inspired by Augment Code's Context Engine. Uses the existing\n * extractSymbols() function for AST parsing.\n *\n * @module indexer/codebase-search\n */\n\nimport { readdir } from 'node:fs/promises';\nimport { resolve, extname, relative } from 'node:path';\nimport {\n  extractSymbols,\n  type CodeSymbol,\n  type SymbolExtractionResult,\n} from './symbol-extractor.js';\n\n/** A symbol with its source file path. */\nexport interface IndexedSymbol extends CodeSymbol {\n  /** Relative file path from the indexed root. */\n  filePath: string;\n}\n\n/** Search result with relevance scoring. */\nexport interface SearchResult {\n  symbol: IndexedSymbol;\n  /** Relevance score (higher = better match). */\n  score: number;\n  /** How the query matched (exact, prefix, substring, word). */\n  matchType: 'exact' | 'prefix' | 'substring' | 'word';\n}\n\n/** File summary — compact overview of a source file. */\nexport interface FileSummary {\n  filePath: string;\n  totalLines: number;\n  exportedSymbols: number;\n  privateSymbols: number;\n  kinds: Record<string, number>;\n}\n\n/** Index statistics. */\nexport interface IndexStats {\n  totalFiles: number;\n  totalSymbols: number;\n  indexedAt: string;\n}\n\n// Score weights for different match types\nconst SCORE_EXACT = 20;\nconst SCORE_PREFIX = 10;\nconst SCORE_WORD = 5;\nconst SCORE_SUBSTRING = 2;\nconst SCORE_EXPORTED_BONUS = 3;\n\nfunction isSourceFile(name: string): boolean {\n  const ext = extname(name).toLowerCase();\n  return (\n    ['.ts', '.tsx', '.js', '.jsx'].includes(ext) &&\n    !name.endsWith('.test.ts') &&\n    !name.endsWith('.test.tsx') &&\n    !name.endsWith('.d.ts')\n  );\n}\n\nasync function findSourceFiles(dir: string, maxDepth: number): Promise<string[]> {\n  if (maxDepth <= 0) return [];\n  const files: string[] = [];\n  const entries = await readdir(dir, { withFileTypes: true }).catch(() => []);\n  for (const entry of entries) {\n    const fullPath = resolve(dir, entry.name);\n    if (entry.isDirectory() && entry.name !== 'node_modules' && entry.name !== 'dist') {\n      files.push(...(await findSourceFiles(fullPath, maxDepth - 1)));\n    }\n    if (entry.isFile() && isSourceFile(entry.name)) {\n      files.push(fullPath);\n    }\n  }\n  return files;\n}\n\nfunction scoreMatch(symbolName: string, query: string): SearchResult['score'] | null {\n  const nameLower = symbolName.toLowerCase();\n  const queryLower = query.toLowerCase();\n\n  if (nameLower === queryLower) return SCORE_EXACT;\n  if (nameLower.startsWith(queryLower)) return SCORE_PREFIX;\n\n  // Word boundary match (camelCase splitting)\n  const words = symbolName\n    .replace(/([a-z])([A-Z])/g, '$1 $2')\n    .toLowerCase()\n    .split(/[\\s_-]+/);\n  if (words.some((w) => w === queryLower)) return SCORE_WORD;\n\n  if (nameLower.includes(queryLower)) return SCORE_SUBSTRING;\n\n  return null;\n}\n\nfunction getMatchType(score: number): SearchResult['matchType'] {\n  if (score >= SCORE_EXACT) return 'exact';\n  if (score >= SCORE_PREFIX) return 'prefix';\n  if (score >= SCORE_WORD) return 'word';\n  return 'substring';\n}\n\n/** In-memory codebase symbol index. */\nexport class CodebaseIndex {\n  private readonly symbols: IndexedSymbol[] = [];\n  private readonly fileResults = new Map<string, SymbolExtractionResult>();\n  private readonly rootDir: string;\n\n  constructor(rootDir: string) {\n    this.rootDir = rootDir;\n  }\n\n  /** Index all TS/JS source files in the directory. */\n  async index(maxDepth = 4): Promise<IndexStats> {\n    const files = await findSourceFiles(this.rootDir, maxDepth);\n\n    for (const file of files) {\n      const result = await extractSymbols(file);\n      const relPath = relative(this.rootDir, file);\n      this.fileResults.set(relPath, result);\n\n      for (const symbol of result.symbols) {\n        this.symbols.push({ ...symbol, filePath: relPath });\n      }\n    }\n\n    return {\n      totalFiles: files.length,\n      totalSymbols: this.symbols.length,\n      indexedAt: new Date().toISOString(),\n    };\n  }\n\n  /** Search symbols by keyword. Returns top N results sorted by relevance. */\n  search(query: string, limit = 20): SearchResult[] {\n    const results: SearchResult[] = [];\n\n    for (const symbol of this.symbols) {\n      const baseScore = scoreMatch(symbol.name, query);\n      if (baseScore === null) continue;\n\n      const bonus = symbol.exported ? SCORE_EXPORTED_BONUS : 0;\n      results.push({\n        symbol,\n        score: baseScore + bonus,\n        matchType: getMatchType(baseScore),\n      });\n    }\n\n    return results.sort((a, b) => b.score - a.score).slice(0, limit);\n  }\n\n  /** Get a compact summary of a file's symbols. */\n  getFileSummary(filePath: string): FileSummary | undefined {\n    const result = this.fileResults.get(filePath);\n    if (result === undefined) return undefined;\n\n    const kinds: Record<string, number> = {};\n    let exported = 0;\n    let priv = 0;\n\n    for (const s of result.symbols) {\n      kinds[s.kind] = (kinds[s.kind] ?? 0) + 1;\n      if (s.exported) exported++;\n      else priv++;\n    }\n\n    return {\n      filePath,\n      totalLines: result.totalLines,\n      exportedSymbols: exported,\n      privateSymbols: priv,\n      kinds,\n    };\n  }\n\n  /** List all indexed files with symbol counts. */\n  listFiles(): Array<{ path: string; symbols: number; lines: number }> {\n    return [...this.fileResults.entries()].map(([path, result]) => ({\n      path,\n      symbols: result.symbols.length,\n      lines: result.totalLines,\n    }));\n  }\n\n  /** Get index statistics. */\n  get stats(): { files: number; symbols: number } {\n    return {\n      files: this.fileResults.size,\n      symbols: this.symbols.length,\n    };\n  }\n}\n"],"mappings":";;;;;AAYA,SAAS,eAAe;AACxB,SAAS,SAAS,SAAS,gBAAgB;AAuC3C,IAAM,cAAc;AACpB,IAAM,eAAe;AACrB,IAAM,aAAa;AACnB,IAAM,kBAAkB;AACxB,IAAM,uBAAuB;AAE7B,SAAS,aAAa,MAAuB;AAC3C,QAAM,MAAM,QAAQ,IAAI,EAAE,YAAY;AACtC,SACE,CAAC,OAAO,QAAQ,OAAO,MAAM,EAAE,SAAS,GAAG,KAC3C,CAAC,KAAK,SAAS,UAAU,KACzB,CAAC,KAAK,SAAS,WAAW,KAC1B,CAAC,KAAK,SAAS,OAAO;AAE1B;AAEA,eAAe,gBAAgB,KAAa,UAAqC;AAC/E,MAAI,YAAY,EAAG,QAAO,CAAC;AAC3B,QAAM,QAAkB,CAAC;AACzB,QAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC,CAAC;AAC1E,aAAW,SAAS,SAAS;AAC3B,UAAM,WAAW,QAAQ,KAAK,MAAM,IAAI;AACxC,QAAI,MAAM,YAAY,KAAK,MAAM,SAAS,kBAAkB,MAAM,SAAS,QAAQ;AACjF,YAAM,KAAK,GAAI,MAAM,gBAAgB,UAAU,WAAW,CAAC,CAAE;AAAA,IAC/D;AACA,QAAI,MAAM,OAAO,KAAK,aAAa,MAAM,IAAI,GAAG;AAC9C,YAAM,KAAK,QAAQ;AAAA,IACrB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,WAAW,YAAoB,OAA6C;AACnF,QAAM,YAAY,WAAW,YAAY;AACzC,QAAM,aAAa,MAAM,YAAY;AAErC,MAAI,cAAc,WAAY,QAAO;AACrC,MAAI,UAAU,WAAW,UAAU,EAAG,QAAO;AAG7C,QAAM,QAAQ,WACX,QAAQ,mBAAmB,OAAO,EAClC,YAAY,EACZ,MAAM,SAAS;AAClB,MAAI,MAAM,KAAK,CAAC,MAAM,MAAM,UAAU,EAAG,QAAO;AAEhD,MAAI,UAAU,SAAS,UAAU,EAAG,QAAO;AAE3C,SAAO;AACT;AAEA,SAAS,aAAa,OAA0C;AAC9D,MAAI,SAAS,YAAa,QAAO;AACjC,MAAI,SAAS,aAAc,QAAO;AAClC,MAAI,SAAS,WAAY,QAAO;AAChC,SAAO;AACT;AAGO,IAAM,gBAAN,MAAoB;AAAA,EACR,UAA2B,CAAC;AAAA,EAC5B,cAAc,oBAAI,IAAoC;AAAA,EACtD;AAAA,EAEjB,YAAY,SAAiB;AAC3B,SAAK,UAAU;AAAA,EACjB;AAAA;AAAA,EAGA,MAAM,MAAM,WAAW,GAAwB;AAC7C,UAAM,QAAQ,MAAM,gBAAgB,KAAK,SAAS,QAAQ;AAE1D,eAAW,QAAQ,OAAO;AACxB,YAAM,SAAS,MAAM,eAAe,IAAI;AACxC,YAAM,UAAU,SAAS,KAAK,SAAS,IAAI;AAC3C,WAAK,YAAY,IAAI,SAAS,MAAM;AAEpC,iBAAW,UAAU,OAAO,SAAS;AACnC,aAAK,QAAQ,KAAK,EAAE,GAAG,QAAQ,UAAU,QAAQ,CAAC;AAAA,MACpD;AAAA,IACF;AAEA,WAAO;AAAA,MACL,YAAY,MAAM;AAAA,MAClB,cAAc,KAAK,QAAQ;AAAA,MAC3B,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC;AAAA,EACF;AAAA;AAAA,EAGA,OAAO,OAAe,QAAQ,IAAoB;AAChD,UAAM,UAA0B,CAAC;AAEjC,eAAW,UAAU,KAAK,SAAS;AACjC,YAAM,YAAY,WAAW,OAAO,MAAM,KAAK;AAC/C,UAAI,cAAc,KAAM;AAExB,YAAM,QAAQ,OAAO,WAAW,uBAAuB;AACvD,cAAQ,KAAK;AAAA,QACX;AAAA,QACA,OAAO,YAAY;AAAA,QACnB,WAAW,aAAa,SAAS;AAAA,MACnC,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK;AAAA,EACjE;AAAA;AAAA,EAGA,eAAe,UAA2C;AACxD,UAAM,SAAS,KAAK,YAAY,IAAI,QAAQ;AAC5C,QAAI,WAAW,OAAW,QAAO;AAEjC,UAAM,QAAgC,CAAC;AACvC,QAAI,WAAW;AACf,QAAI,OAAO;AAEX,eAAW,KAAK,OAAO,SAAS;AAC9B,YAAM,EAAE,IAAI,KAAK,MAAM,EAAE,IAAI,KAAK,KAAK;AACvC,UAAI,EAAE,SAAU;AAAA,UACX;AAAA,IACP;AAEA,WAAO;AAAA,MACL;AAAA,MACA,YAAY,OAAO;AAAA,MACnB,iBAAiB;AAAA,MACjB,gBAAgB;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,YAAqE;AACnE,WAAO,CAAC,GAAG,KAAK,YAAY,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,MAAM,OAAO;AAAA,MAC9D;AAAA,MACA,SAAS,OAAO,QAAQ;AAAA,MACxB,OAAO,OAAO;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA;AAAA,EAGA,IAAI,QAA4C;AAC9C,WAAO;AAAA,MACL,OAAO,KAAK,YAAY;AAAA,MACxB,SAAS,KAAK,QAAQ;AAAA,IACxB;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-BC3M4VLP.js

@@ -0,0 +1,359 @@
+// src/mcp/tools/repo-analyze.ts
+function normalizeRepoId(input) {
+  const urlMatch = /github\.com\/([^/]+\/[^/]+?)(?:\.git)?(?:\/|$)/.exec(input);
+  const matched = urlMatch?.[1] ?? "";
+  if (matched.length > 0) return matched;
+  if (/^[^/]+\/[^/]+$/.test(input)) return input;
+  throw new Error(`Invalid repo format: "${input}". Use "owner/name" or a GitHub URL.`);
+}
+var PACKAGE_MANAGER_RULES = [
+  [["pnpm-lock.yaml"], "pnpm"],
+  [["yarn.lock"], "yarn"],
+  [["package-lock.json", "package.json"], "npm"],
+  [["Cargo.toml"], "cargo"],
+  [["go.mod"], "go"],
+  [["requirements.txt", "pyproject.toml"], "pip"],
+  [["Gemfile"], "bundler"],
+  [["pom.xml"], "maven"],
+  [["build.gradle", "build.gradle.kts"], "gradle"]
+];
+function detectPackageManager(entries) {
+  for (const [files, manager] of PACKAGE_MANAGER_RULES) {
+    if (files.some((f) => entries.includes(f))) return manager;
+  }
+  return null;
+}
+function detectCiProvider(entries) {
+  if (entries.includes(".github")) return "github-actions";
+  if (entries.includes(".gitlab-ci.yml")) return "gitlab-ci";
+  if (entries.includes("Jenkinsfile")) return "jenkins";
+  if (entries.includes(".circleci")) return "circleci";
+  if (entries.includes(".travis.yml")) return "travis";
+  if (entries.includes("azure-pipelines.yml")) return "azure-devops";
+  if (entries.includes("concourse")) return "concourse";
+  return null;
+}
+var WORKFLOW_SECURITY_PATTERNS = [
+  ["semgrep", "semgrep"],
+  ["codeql", "codeql"],
+  ["grype", "grype"],
+  ["snyk", "snyk"]
+];
+function detectWorkflowSecurity(workflowEntries, existing) {
+  const wfLower = workflowEntries.map((w) => w.toLowerCase());
+  const found = [];
+  for (const [pattern, tool] of WORKFLOW_SECURITY_PATTERNS) {
+    if (!existing.includes(tool) && wfLower.some((w) => w.includes(pattern))) {
+      found.push(tool);
+    }
+  }
+  return found;
+}
+function detectSecurityTooling(entries, workflowEntries) {
+  const tools = [];
+  if (entries.includes(".semgrep.yml") || entries.includes(".semgrep")) tools.push("semgrep");
+  if (entries.includes(".snyk")) tools.push("snyk");
+  if (entries.includes("SECURITY.md")) tools.push("security-policy");
+  if (entries.includes(".grype.yaml")) tools.push("grype");
+  if (entries.includes("CODEOWNERS")) tools.push("codeowners");
+  if (workflowEntries !== void 0) {
+    tools.push(...detectWorkflowSecurity(workflowEntries, tools));
+  }
+  return tools;
+}
+function detectFramework(entries) {
+  if (entries.includes("helmfile.yaml") || entries.includes("helmfile.yaml.gotmpl"))
+    return "helmfile";
+  if (entries.includes("next.config.js") || entries.includes("next.config.ts")) return "nextjs";
+  if (entries.includes("angular.json")) return "angular";
+  if (entries.includes("vite.config.ts") || entries.includes("vite.config.js")) return "vite";
+  if (entries.includes("tsconfig.json") && entries.includes("package.json")) return "typescript";
+  return null;
+}
+var GAP_RULES = [
+  [["SECURITY.md"], "No SECURITY.md policy"],
+  [["CODEOWNERS"], "No CODEOWNERS file"],
+  [["LICENSE", "LICENSE.md"], "No LICENSE file"],
+  [
+    [".semgrep.yml", ".semgrep", ".grype.yaml", ".snyk"],
+    "No SAST/SCA security scanning configured"
+  ],
+  // Test detection handled separately via detectTestInfra (supports monorepo + co-located patterns)
+  [[".gitignore"], "No .gitignore file"]
+];
+var LANGUAGE_SCANNER_MATRIX = {
+  TypeScript: {
+    sast: ["semgrep (p/typescript, p/nodejs)", "eslint-plugin-security"],
+    sca: ["osv-scanner", "npm audit"]
+  },
+  JavaScript: {
+    sast: ["semgrep (p/javascript, p/nodejs)", "eslint-plugin-security"],
+    sca: ["osv-scanner", "npm audit"]
+  },
+  Python: {
+    sast: ["semgrep (p/python)", "bandit"],
+    sca: ["osv-scanner", "pip-audit"]
+  },
+  Java: {
+    sast: ["semgrep (p/java)", "spotbugs + find-sec-bugs"],
+    sca: ["osv-scanner", "OWASP dependency-check"]
+  },
+  Go: {
+    sast: ["semgrep (p/golang)", "gosec"],
+    sca: ["osv-scanner", "govulncheck"]
+  },
+  Rust: {
+    sast: ["semgrep (p/rust)"],
+    sca: ["osv-scanner", "cargo-audit"]
+  },
+  "C++": {
+    sast: ["semgrep (p/c)", "cppcheck"],
+    sca: ["osv-scanner"]
+  },
+  C: {
+    sast: ["semgrep (p/c)", "cppcheck"],
+    sca: ["osv-scanner"]
+  },
+  Kotlin: {
+    sast: ["semgrep (p/kotlin)", "detekt"],
+    sca: ["osv-scanner", "OWASP dependency-check"]
+  },
+  Swift: {
+    sast: ["semgrep (p/swift)"],
+    sca: ["osv-scanner"]
+  },
+  Ruby: {
+    sast: ["semgrep (p/ruby)", "brakeman"],
+    sca: ["osv-scanner", "bundler-audit"]
+  },
+  PHP: {
+    sast: ["semgrep (p/php)", "phpstan"],
+    sca: ["osv-scanner", "composer audit"]
+  },
+  Shell: {
+    sast: ["semgrep (p/bash)", "shellcheck"],
+    sca: []
+  },
+  HCL: {
+    sast: ["semgrep (p/terraform)", "tfsec"],
+    sca: ["osv-scanner"]
+  }
+};
+function getLanguageRecommendations(language, securityTooling) {
+  if (language === null) return [];
+  const scanners = LANGUAGE_SCANNER_MATRIX[language];
+  if (scanners === void 0) return [];
+  const hasSast = securityTooling.includes("semgrep") || securityTooling.includes("snyk");
+  const hasSca = securityTooling.includes("osv-scanner") || securityTooling.includes("grype") || securityTooling.includes("snyk");
+  const recs = [];
+  if (!hasSast && scanners.sast.length > 0) {
+    const tools = scanners.sast.join(", ");
+    recs.push(`${language} project missing SAST: ${tools}`);
+  }
+  if (!hasSca && scanners.sca.length > 0) {
+    const tools = scanners.sca.join(", ");
+    recs.push(`${language} project missing SCA: ${tools}`);
+  }
+  return recs;
+}
+var SAST_TOOLS = /* @__PURE__ */ new Set(["semgrep", "codeql", "snyk"]);
+var SAST_GAP_MSG = "No SAST/SCA security scanning configured";
+function removeSastGapIfToolDetected(gaps, secTools) {
+  if (secTools.some((t) => SAST_TOOLS.has(t))) {
+    const idx = gaps.indexOf(SAST_GAP_MSG);
+    if (idx !== -1) gaps.splice(idx, 1);
+  }
+}
+function identifyGaps(entries, ciProvider, language, securityTooling) {
+  const gaps = [];
+  if (ciProvider === null) gaps.push("No CI/CD configuration detected");
+  for (const [files, message] of GAP_RULES) {
+    if (!files.some((f) => entries.includes(f))) gaps.push(message);
+  }
+  if (!detectTestInfra(entries)) gaps.push("No test directory detected");
+  removeSastGapIfToolDetected(gaps, securityTooling ?? []);
+  const hasGenericSecGap = gaps.includes("No SAST/SCA security scanning configured");
+  if (hasGenericSecGap && language !== null && language !== void 0 && securityTooling !== void 0) {
+    const langRecs = getLanguageRecommendations(language, securityTooling);
+    gaps.push(...langRecs);
+  }
+  return gaps;
+}
+function analyzeRepo(metadata, topLevelEntries, workflowEntries) {
+  const ciProvider = detectCiProvider(topLevelEntries);
+  const secTooling = detectSecurityTooling(topLevelEntries, workflowEntries);
+  const hasTests = detectTestInfra(topLevelEntries);
+  return {
+    name: metadata.full_name,
+    language: metadata.language,
+    framework: detectFramework(topLevelEntries),
+    packageManager: detectPackageManager(topLevelEntries),
+    ciProvider,
+    securityTooling: secTooling,
+    hasDockerfile: topLevelEntries.includes("Dockerfile") || topLevelEntries.includes("docker-compose.yml") || topLevelEntries.includes("docker-compose.yaml"),
+    hasHelmCharts: topLevelEntries.includes("Chart.yaml") || topLevelEntries.includes("charts") || topLevelEntries.includes("helm"),
+    hasMakefile: topLevelEntries.includes("Makefile"),
+    hasTests,
+    license: metadata.license?.spdx_id ?? null,
+    description: metadata.description,
+    defaultBranch: metadata.default_branch,
+    stars: metadata.stargazers_count,
+    topLevelEntries: [...topLevelEntries],
+    gaps: identifyGaps(topLevelEntries, ciProvider, metadata.language, secTooling)
+  };
+}
+var MARKUP_LANGUAGES = /* @__PURE__ */ new Set([
+  "HTML",
+  "CSS",
+  "SCSS",
+  "Less",
+  "Markdown",
+  "Roff",
+  "SVG",
+  "XML",
+  "XSLT",
+  "Mustache",
+  "Handlebars",
+  "EJS"
+]);
+function detectPrimaryLanguage(languages, fallback) {
+  const sorted = Object.entries(languages).filter(([lang]) => !MARKUP_LANGUAGES.has(lang)).sort((a, b) => b[1] - a[1]);
+  const top = sorted[0];
+  return top !== void 0 ? top[0] : fallback;
+}
+function detectTestInfra(entries) {
+  const testDirs = ["tests", "test", "__tests__", "spec"];
+  if (testDirs.some((d) => entries.includes(d))) return true;
+  const testConfigs = [
+    "vitest.config.ts",
+    "vitest.config.js",
+    "vitest.config.mts",
+    "vitest.workspace.ts",
+    "vitest.workspace.js",
+    "jest.config.ts",
+    "jest.config.js",
+    "jest.config.mjs",
+    "cypress.config.ts",
+    "cypress.config.js",
+    "playwright.config.ts",
+    ".mocharc.yml",
+    ".mocharc.json"
+  ];
+  if (testConfigs.some((c) => entries.includes(c))) return true;
+  return entries.includes("packages") && entries.includes("package.json");
+}
+function inferLanguageFromEntries(entries, fallback) {
+  if (entries.includes("tsconfig.json")) return "TypeScript";
+  if (entries.includes("Cargo.toml")) return "Rust";
+  if (entries.includes("go.mod")) return "Go";
+  if (entries.includes("pyproject.toml") || entries.includes("setup.py")) return "Python";
+  if (entries.includes("pom.xml") || entries.includes("build.gradle")) return "Java";
+  if (entries.includes("Gemfile")) return "Ruby";
+  if (entries.includes("package.json")) return "JavaScript";
+  return fallback;
+}
+async function getExecFile() {
+  const { execFile } = await import("child_process");
+  const { promisify } = await import("util");
+  return promisify(execFile);
+}
+async function fetchRepoData(repoId, exec) {
+  const { stdout: metaJson } = await exec(
+    "gh",
+    [
+      "api",
+      `repos/${repoId}`,
+      "--jq",
+      "{name: .name, full_name: .full_name, description: .description, language: .language, default_branch: .default_branch, stargazers_count: .stargazers_count, license: .license}"
+    ],
+    { timeout: 3e4 }
+  );
+  let metadata;
+  try {
+    metadata = JSON.parse(metaJson.trim());
+  } catch {
+    throw new Error(`Failed to parse repo metadata for ${repoId}: ${metaJson.slice(0, 200)}`);
+  }
+  const { stdout: contentsJson } = await exec(
+    "gh",
+    ["api", `repos/${repoId}/contents`, "--jq", "[.[].name]"],
+    { timeout: 3e4 }
+  );
+  let entries;
+  try {
+    const parsed = JSON.parse(contentsJson.trim());
+    entries = Array.isArray(parsed) ? parsed.filter((e) => typeof e === "string") : [];
+  } catch {
+    throw new Error(`Failed to parse repo contents for ${repoId}: ${contentsJson.slice(0, 200)}`);
+  }
+  return { metadata, entries };
+}
+async function resolveLicense(repoId, exec) {
+  try {
+    const { stdout } = await exec(
+      "gh",
+      ["api", `repos/${repoId}/license`, "--jq", ".license.spdx_id"],
+      { timeout: 15e3 }
+    );
+    const spdxId = stdout.trim();
+    if (spdxId !== "" && spdxId !== "null" && spdxId !== "NOASSERTION") {
+      return spdxId;
+    }
+  } catch {
+  }
+  return null;
+}
+async function resolveLanguage(repoId, entries, metadata, exec) {
+  let languages = {};
+  try {
+    const { stdout } = await exec("gh", ["api", `repos/${repoId}/languages`], { timeout: 15e3 });
+    languages = JSON.parse(stdout.trim());
+  } catch {
+  }
+  const primary = detectPrimaryLanguage(languages, metadata.language);
+  if (primary === null || MARKUP_LANGUAGES.has(primary)) {
+    return inferLanguageFromEntries(entries, primary);
+  }
+  return primary;
+}
+async function fetchWorkflowEntries(repoId, exec) {
+  try {
+    const { stdout } = await exec(
+      "gh",
+      ["api", `repos/${repoId}/contents/.github/workflows`, "--jq", "[.[].name]"],
+      { timeout: 15e3 }
+    );
+    const parsed = JSON.parse(stdout.trim());
+    return Array.isArray(parsed) ? parsed.filter((e) => typeof e === "string") : [];
+  } catch {
+    return [];
+  }
+}
+async function analyzeGitHubRepo(input) {
+  const repoId = normalizeRepoId(input.repo);
+  const exec = await getExecFile();
+  const { metadata, entries } = await fetchRepoData(repoId, exec);
+  const primaryLang = await resolveLanguage(repoId, entries, metadata, exec);
+  const enhanced = { ...metadata, language: primaryLang };
+  const hasLicenseFile = entries.includes("LICENSE") || entries.includes("LICENSE.md");
+  const licenseUnresolved = enhanced.license === null || enhanced.license.spdx_id === "NOASSERTION";
+  if (licenseUnresolved && hasLicenseFile) {
+    const resolved = await resolveLicense(repoId, exec);
+    if (resolved !== null) enhanced.license = { spdx_id: resolved };
+  }
+  const workflowEntries = entries.includes(".github") ? await fetchWorkflowEntries(repoId, exec) : [];
+  return analyzeRepo(enhanced, entries, workflowEntries);
+}
+
+export {
+  normalizeRepoId,
+  detectPackageManager,
+  detectCiProvider,
+  detectSecurityTooling,
+  detectFramework,
+  getLanguageRecommendations,
+  identifyGaps,
+  analyzeRepo,
+  analyzeGitHubRepo
+};
+//# sourceMappingURL=chunk-BC3M4VLP.js.map

package/dist/chunk-BC3M4VLP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mcp/tools/repo-analyze.ts"],"sourcesContent":["/* eslint-disable max-lines -- cohesive module, governance allows 400-600 */\n/**\n * nexus-agents/mcp - Repository Analyze Logic\n *\n * Inspects a GitHub repository and returns structured analysis\n * including language, tooling, CI, security, and gap identification.\n *\n * @module mcp/tools/repo-analyze\n * (Source: Issue #1074)\n */\n\nimport type { RepoAnalyzeInput, RepoAnalysis } from './repo-analyze-types.js';\n\n// ============================================================================\n// Helpers\n// ============================================================================\n\n/** Normalize \"owner/repo\" from either \"owner/repo\" or full GitHub URL. */\nexport function normalizeRepoId(input: string): string {\n  const urlMatch = /github\\.com\\/([^/]+\\/[^/]+?)(?:\\.git)?(?:\\/|$)/.exec(input);\n  const matched = urlMatch?.[1] ?? '';\n  if (matched.length > 0) return matched;\n  if (/^[^/]+\\/[^/]+$/.test(input)) return input;\n  throw new Error(`Invalid repo format: \"${input}\". Use \"owner/name\" or a GitHub URL.`);\n}\n\n/** Package manager detection rules: [files, manager]. First match wins. */\nconst PACKAGE_MANAGER_RULES: ReadonlyArray<readonly [readonly string[], string]> = [\n  [['pnpm-lock.yaml'], 'pnpm'],\n  [['yarn.lock'], 'yarn'],\n  [['package-lock.json', 'package.json'], 'npm'],\n  [['Cargo.toml'], 'cargo'],\n  [['go.mod'], 'go'],\n  [['requirements.txt', 'pyproject.toml'], 'pip'],\n  [['Gemfile'], 'bundler'],\n  [['pom.xml'], 'maven'],\n  [['build.gradle', 'build.gradle.kts'], 'gradle'],\n];\n\n/** Detect package manager from top-level files. */\nexport function detectPackageManager(entries: readonly string[]): string | null {\n  for (const [files, manager] of PACKAGE_MANAGER_RULES) {\n    if (files.some((f) => entries.includes(f))) return manager;\n  }\n  return null;\n}\n\n/** Detect CI provider from directory structure. */\nexport function detectCiProvider(entries: readonly string[]): string | null {\n  if (entries.includes('.github')) return 'github-actions';\n  if (entries.includes('.gitlab-ci.yml')) return 'gitlab-ci';\n  if (entries.includes('Jenkinsfile')) return 'jenkins';\n  if (entries.includes('.circleci')) return 'circleci';\n  if (entries.includes('.travis.yml')) return 'travis';\n  if (entries.includes('azure-pipelines.yml')) return 'azure-devops';\n  if (entries.includes('concourse')) return 'concourse';\n  return null;\n}\n\n/** Tool names detectable from CI workflow filenames (#1674). */\nconst WORKFLOW_SECURITY_PATTERNS: ReadonlyArray<readonly [string, string]> = [\n  ['semgrep', 'semgrep'],\n  ['codeql', 'codeql'],\n  ['grype', 'grype'],\n  ['snyk', 'snyk'],\n];\n\n/** Detect security tools from .github/workflows/ filenames. */\nfunction detectWorkflowSecurity(\n  workflowEntries: readonly string[],\n  existing: readonly string[]\n): readonly string[] {\n  const wfLower = workflowEntries.map((w) => w.toLowerCase());\n  const found: string[] = [];\n  for (const [pattern, tool] of WORKFLOW_SECURITY_PATTERNS) {\n    if (!existing.includes(tool) && wfLower.some((w) => w.includes(pattern))) {\n      found.push(tool);\n    }\n  }\n  return found;\n}\n\n/** Detect security tooling from root files and CI workflow filenames (#1674). */\nexport function detectSecurityTooling(\n  entries: readonly string[],\n  workflowEntries?: readonly string[]\n): readonly string[] {\n  const tools: string[] = [];\n  if (entries.includes('.semgrep.yml') || entries.includes('.semgrep')) tools.push('semgrep');\n  if (entries.includes('.snyk')) tools.push('snyk');\n  if (entries.includes('SECURITY.md')) tools.push('security-policy');\n  if (entries.includes('.grype.yaml')) tools.push('grype');\n  if (entries.includes('CODEOWNERS')) tools.push('codeowners');\n  if (workflowEntries !== undefined) {\n    tools.push(...detectWorkflowSecurity(workflowEntries, tools));\n  }\n  return tools;\n}\n\n/** Detect framework from package manager config. */\nexport function detectFramework(entries: readonly string[]): string | null {\n  if (entries.includes('helmfile.yaml') || entries.includes('helmfile.yaml.gotmpl'))\n    return 'helmfile';\n  if (entries.includes('next.config.js') || entries.includes('next.config.ts')) return 'nextjs';\n  if (entries.includes('angular.json')) return 'angular';\n  if (entries.includes('vite.config.ts') || entries.includes('vite.config.js')) return 'vite';\n  if (entries.includes('tsconfig.json') && entries.includes('package.json')) return 'typescript';\n  return null;\n}\n\n/** Gap detection rules: [files-any-present, gap message]. */\nconst GAP_RULES: ReadonlyArray<readonly [readonly string[], string]> = [\n  [['SECURITY.md'], 'No SECURITY.md policy'],\n  [['CODEOWNERS'], 'No CODEOWNERS file'],\n  [['LICENSE', 'LICENSE.md'], 'No LICENSE file'],\n  [\n    ['.semgrep.yml', '.semgrep', '.grype.yaml', '.snyk'],\n    'No SAST/SCA security scanning configured',\n  ],\n  // Test detection handled separately via detectTestInfra (supports monorepo + co-located patterns)\n  [['.gitignore'], 'No .gitignore file'],\n];\n\n/** Scanner recommendation per language. Canonical source: secure-language-stacks. */\ninterface LanguageScanners {\n  readonly sast: readonly string[];\n  readonly sca: readonly string[];\n}\n\nconst LANGUAGE_SCANNER_MATRIX: Readonly<Record<string, LanguageScanners>> = {\n  TypeScript: {\n    sast: ['semgrep (p/typescript, p/nodejs)', 'eslint-plugin-security'],\n    sca: ['osv-scanner', 'npm audit'],\n  },\n  JavaScript: {\n    sast: ['semgrep (p/javascript, p/nodejs)', 'eslint-plugin-security'],\n    sca: ['osv-scanner', 'npm audit'],\n  },\n  Python: {\n    sast: ['semgrep (p/python)', 'bandit'],\n    sca: ['osv-scanner', 'pip-audit'],\n  },\n  Java: {\n    sast: ['semgrep (p/java)', 'spotbugs + find-sec-bugs'],\n    sca: ['osv-scanner', 'OWASP dependency-check'],\n  },\n  Go: {\n    sast: ['semgrep (p/golang)', 'gosec'],\n    sca: ['osv-scanner', 'govulncheck'],\n  },\n  Rust: {\n    sast: ['semgrep (p/rust)'],\n    sca: ['osv-scanner', 'cargo-audit'],\n  },\n  'C++': {\n    sast: ['semgrep (p/c)', 'cppcheck'],\n    sca: ['osv-scanner'],\n  },\n  C: {\n    sast: ['semgrep (p/c)', 'cppcheck'],\n    sca: ['osv-scanner'],\n  },\n  Kotlin: {\n    sast: ['semgrep (p/kotlin)', 'detekt'],\n    sca: ['osv-scanner', 'OWASP dependency-check'],\n  },\n  Swift: {\n    sast: ['semgrep (p/swift)'],\n    sca: ['osv-scanner'],\n  },\n  Ruby: {\n    sast: ['semgrep (p/ruby)', 'brakeman'],\n    sca: ['osv-scanner', 'bundler-audit'],\n  },\n  PHP: {\n    sast: ['semgrep (p/php)', 'phpstan'],\n    sca: ['osv-scanner', 'composer audit'],\n  },\n  Shell: {\n    sast: ['semgrep (p/bash)', 'shellcheck'],\n    sca: [],\n  },\n  HCL: {\n    sast: ['semgrep (p/terraform)', 'tfsec'],\n    sca: ['osv-scanner'],\n  },\n};\n\n/** Generate language-specific scanner recommendations when SAST/SCA is missing. */\nexport function getLanguageRecommendations(\n  language: string | null,\n  securityTooling: readonly string[]\n): readonly string[] {\n  if (language === null) return [];\n  const scanners = LANGUAGE_SCANNER_MATRIX[language];\n  if (scanners === undefined) return [];\n\n  const hasSast = securityTooling.includes('semgrep') || securityTooling.includes('snyk');\n  const hasSca =\n    securityTooling.includes('osv-scanner') ||\n    securityTooling.includes('grype') ||\n    securityTooling.includes('snyk');\n\n  const recs: string[] = [];\n  if (!hasSast && scanners.sast.length > 0) {\n    const tools = scanners.sast.join(', ');\n    recs.push(`${language} project missing SAST: ${tools}`);\n  }\n  if (!hasSca && scanners.sca.length > 0) {\n    const tools = scanners.sca.join(', ');\n    recs.push(`${language} project missing SCA: ${tools}`);\n  }\n  return recs;\n}\n\n/** SAST tool names that suppress the generic gap message. */\nconst SAST_TOOLS = new Set(['semgrep', 'codeql', 'snyk']);\nconst SAST_GAP_MSG = 'No SAST/SCA security scanning configured';\n\n/** Remove the SAST/SCA gap if any SAST tool was detected (#1674). */\nfunction removeSastGapIfToolDetected(gaps: string[], secTools: readonly string[]): void {\n  if (secTools.some((t) => SAST_TOOLS.has(t))) {\n    const idx = gaps.indexOf(SAST_GAP_MSG);\n    if (idx !== -1) gaps.splice(idx, 1);\n  }\n}\n\n/** Identify gaps in repository best practices. */\nexport function identifyGaps(\n  entries: readonly string[],\n  ciProvider: string | null,\n  language?: string | null,\n  securityTooling?: readonly string[]\n): readonly string[] {\n  const gaps: string[] = [];\n  if (ciProvider === null) gaps.push('No CI/CD configuration detected');\n  for (const [files, message] of GAP_RULES) {\n    if (!files.some((f) => entries.includes(f))) gaps.push(message);\n  }\n  // Test detection: uses detectTestInfra for monorepo + co-located pattern support (#1130)\n  if (!detectTestInfra(entries)) gaps.push('No test directory detected');\n\n  // Remove SAST/SCA gap if workflow-level security was detected (#1674)\n  removeSastGapIfToolDetected(gaps, securityTooling ?? []);\n\n  // Language-specific recommendations when generic SAST/SCA gap detected\n  const hasGenericSecGap = gaps.includes('No SAST/SCA security scanning configured');\n  if (\n    hasGenericSecGap &&\n    language !== null &&\n    language !== undefined &&\n    securityTooling !== undefined\n  ) {\n    const langRecs = getLanguageRecommendations(language, securityTooling);\n    gaps.push(...langRecs);\n  }\n\n  return gaps;\n}\n\n// ============================================================================\n// Core\n// ============================================================================\n\n/** GitHub repo metadata from the API. */\nexport interface GhRepoMetadata {\n  readonly name: string;\n  readonly full_name: string;\n  readonly description: string | null;\n  readonly language: string | null;\n  readonly default_branch: string;\n  readonly stargazers_count: number;\n  readonly license: { readonly spdx_id: string } | null;\n}\n\n/** Analyze a GitHub repository given its metadata and file tree. */\nexport function analyzeRepo(\n  metadata: GhRepoMetadata,\n  topLevelEntries: readonly string[],\n  workflowEntries?: readonly string[]\n): RepoAnalysis {\n  const ciProvider = detectCiProvider(topLevelEntries);\n  const secTooling = detectSecurityTooling(topLevelEntries, workflowEntries);\n  const hasTests = detectTestInfra(topLevelEntries);\n\n  return {\n    name: metadata.full_name,\n    language: metadata.language,\n    framework: detectFramework(topLevelEntries),\n    packageManager: detectPackageManager(topLevelEntries),\n    ciProvider,\n    securityTooling: secTooling,\n    hasDockerfile:\n      topLevelEntries.includes('Dockerfile') ||\n      topLevelEntries.includes('docker-compose.yml') ||\n      topLevelEntries.includes('docker-compose.yaml'),\n    hasHelmCharts:\n      topLevelEntries.includes('Chart.yaml') ||\n      topLevelEntries.includes('charts') ||\n      topLevelEntries.includes('helm'),\n    hasMakefile: topLevelEntries.includes('Makefile'),\n    hasTests,\n    license: metadata.license?.spdx_id ?? null,\n    description: metadata.description,\n    defaultBranch: metadata.default_branch,\n    stars: metadata.stargazers_count,\n    topLevelEntries: [...topLevelEntries],\n    gaps: identifyGaps(topLevelEntries, ciProvider, metadata.language, secTooling),\n  };\n}\n\n/** Non-code languages to exclude when detecting primary language. */\nconst MARKUP_LANGUAGES = new Set([\n  'HTML',\n  'CSS',\n  'SCSS',\n  'Less',\n  'Markdown',\n  'Roff',\n  'SVG',\n  'XML',\n  'XSLT',\n  'Mustache',\n  'Handlebars',\n  'EJS',\n]);\n\n/** Detect primary language from GitHub languages API (byte counts). */\nfunction detectPrimaryLanguage(\n  languages: Record<string, number>,\n  fallback: string | null\n): string | null {\n  const sorted = Object.entries(languages)\n    .filter(([lang]) => !MARKUP_LANGUAGES.has(lang))\n    .sort((a, b) => b[1] - a[1]);\n  const top = sorted[0];\n  return top !== undefined ? top[0] : fallback;\n}\n\n/** Check for test infrastructure beyond top-level directories. */\nfunction detectTestInfra(entries: readonly string[]): boolean {\n  const testDirs = ['tests', 'test', '__tests__', 'spec'];\n  if (testDirs.some((d) => entries.includes(d))) return true;\n  // Check for test config files (co-located test pattern, monorepos)\n  const testConfigs = [\n    'vitest.config.ts',\n    'vitest.config.js',\n    'vitest.config.mts',\n    'vitest.workspace.ts',\n    'vitest.workspace.js',\n    'jest.config.ts',\n    'jest.config.js',\n    'jest.config.mjs',\n    'cypress.config.ts',\n    'cypress.config.js',\n    'playwright.config.ts',\n    '.mocharc.yml',\n    '.mocharc.json',\n  ];\n  if (testConfigs.some((c) => entries.includes(c))) return true;\n  // Monorepo: packages/ dir + package.json implies co-located tests\n  return entries.includes('packages') && entries.includes('package.json');\n}\n\n/** Infer code language from project files when GitHub reports markup. */\nfunction inferLanguageFromEntries(\n  entries: readonly string[],\n  fallback: string | null\n): string | null {\n  if (entries.includes('tsconfig.json')) return 'TypeScript';\n  if (entries.includes('Cargo.toml')) return 'Rust';\n  if (entries.includes('go.mod')) return 'Go';\n  if (entries.includes('pyproject.toml') || entries.includes('setup.py')) return 'Python';\n  if (entries.includes('pom.xml') || entries.includes('build.gradle')) return 'Java';\n  if (entries.includes('Gemfile')) return 'Ruby';\n  if (entries.includes('package.json')) return 'JavaScript';\n  return fallback;\n}\n\ntype ExecFileFn = (\n  cmd: string,\n  args: string[],\n  options?: { timeout?: number }\n) => Promise<{ stdout: string }>;\n\n/** Lazy-load promisified execFile. */\nasync function getExecFile(): Promise<ExecFileFn> {\n  const { execFile } = await import('node:child_process');\n  const { promisify } = await import('node:util');\n  return promisify(execFile);\n}\n\n/** Fetch repo metadata and languages via GitHub API. */\nasync function fetchRepoData(\n  repoId: string,\n  exec: ExecFileFn\n): Promise<{ metadata: GhRepoMetadata; entries: string[] }> {\n  const { stdout: metaJson } = await exec(\n    'gh',\n    [\n      'api',\n      `repos/${repoId}`,\n      '--jq',\n      '{name: .name, full_name: .full_name, description: .description, language: .language, default_branch: .default_branch, stargazers_count: .stargazers_count, license: .license}',\n    ],\n    { timeout: 30_000 }\n  );\n  let metadata: GhRepoMetadata;\n  try {\n    metadata = JSON.parse(metaJson.trim()) as GhRepoMetadata;\n  } catch {\n    throw new Error(`Failed to parse repo metadata for ${repoId}: ${metaJson.slice(0, 200)}`);\n  }\n  const { stdout: contentsJson } = await exec(\n    'gh',\n    ['api', `repos/${repoId}/contents`, '--jq', '[.[].name]'],\n    { timeout: 30_000 }\n  );\n  let entries: string[];\n  try {\n    const parsed: unknown = JSON.parse(contentsJson.trim());\n    entries = Array.isArray(parsed) ? parsed.filter((e): e is string => typeof e === 'string') : [];\n  } catch {\n    throw new Error(`Failed to parse repo contents for ${repoId}: ${contentsJson.slice(0, 200)}`);\n  }\n  return { metadata, entries };\n}\n\n/** Resolve NOASSERTION license via the GitHub license API. */\nasync function resolveLicense(repoId: string, exec: ExecFileFn): Promise<string | null> {\n  try {\n    const { stdout } = await exec(\n      'gh',\n      ['api', `repos/${repoId}/license`, '--jq', '.license.spdx_id'],\n      { timeout: 15_000 }\n    );\n    const spdxId = stdout.trim();\n    if (spdxId !== '' && spdxId !== 'null' && spdxId !== 'NOASSERTION') {\n      return spdxId;\n    }\n  } catch {\n    // Keep NOASSERTION if license API also fails\n  }\n  return null;\n}\n\n/** Resolve primary language, falling back to entry inference for markup repos. */\nasync function resolveLanguage(\n  repoId: string,\n  entries: readonly string[],\n  metadata: GhRepoMetadata,\n  exec: ExecFileFn\n): Promise<string | null> {\n  let languages: Record<string, number> = {};\n  try {\n    const { stdout } = await exec('gh', ['api', `repos/${repoId}/languages`], { timeout: 15_000 });\n    languages = JSON.parse(stdout.trim()) as Record<string, number>;\n  } catch {\n    /* fall back to metadata.language */\n  }\n  const primary = detectPrimaryLanguage(languages, metadata.language);\n  if (primary === null || MARKUP_LANGUAGES.has(primary)) {\n    return inferLanguageFromEntries(entries, primary);\n  }\n  return primary;\n}\n\n/** Fetch workflow filenames from .github/workflows/ (#1674). Best-effort. */\nasync function fetchWorkflowEntries(repoId: string, exec: ExecFileFn): Promise<readonly string[]> {\n  try {\n    const { stdout } = await exec(\n      'gh',\n      ['api', `repos/${repoId}/contents/.github/workflows`, '--jq', '[.[].name]'],\n      { timeout: 15_000 }\n    );\n    const parsed: unknown = JSON.parse(stdout.trim());\n    return Array.isArray(parsed) ? parsed.filter((e): e is string => typeof e === 'string') : [];\n  } catch {\n    return []; // No workflows directory or API error — graceful fallback\n  }\n}\n\n/** Fetch repo data from GitHub and produce analysis. */\nexport async function analyzeGitHubRepo(input: RepoAnalyzeInput): Promise<RepoAnalysis> {\n  const repoId = normalizeRepoId(input.repo);\n  const exec = await getExecFile();\n  const { metadata, entries } = await fetchRepoData(repoId, exec);\n\n  const primaryLang = await resolveLanguage(repoId, entries, metadata, exec);\n  const enhanced = { ...metadata, language: primaryLang };\n\n  // Resolve null or NOASSERTION license when LICENSE file exists\n  const hasLicenseFile = entries.includes('LICENSE') || entries.includes('LICENSE.md');\n  const licenseUnresolved = enhanced.license === null || enhanced.license.spdx_id === 'NOASSERTION';\n  if (licenseUnresolved && hasLicenseFile) {\n    const resolved = await resolveLicense(repoId, exec);\n    if (resolved !== null) enhanced.license = { spdx_id: resolved };\n  }\n\n  // Fetch workflow filenames for CI-level security detection (#1674)\n  const workflowEntries = entries.includes('.github')\n    ? await fetchWorkflowEntries(repoId, exec)\n    : [];\n\n  return analyzeRepo(enhanced, entries, workflowEntries);\n}\n"],"mappings":";AAkBO,SAAS,gBAAgB,OAAuB;AACrD,QAAM,WAAW,iDAAiD,KAAK,KAAK;AAC5E,QAAM,UAAU,WAAW,CAAC,KAAK;AACjC,MAAI,QAAQ,SAAS,EAAG,QAAO;AAC/B,MAAI,iBAAiB,KAAK,KAAK,EAAG,QAAO;AACzC,QAAM,IAAI,MAAM,yBAAyB,KAAK,sCAAsC;AACtF;AAGA,IAAM,wBAA6E;AAAA,EACjF,CAAC,CAAC,gBAAgB,GAAG,MAAM;AAAA,EAC3B,CAAC,CAAC,WAAW,GAAG,MAAM;AAAA,EACtB,CAAC,CAAC,qBAAqB,cAAc,GAAG,KAAK;AAAA,EAC7C,CAAC,CAAC,YAAY,GAAG,OAAO;AAAA,EACxB,CAAC,CAAC,QAAQ,GAAG,IAAI;AAAA,EACjB,CAAC,CAAC,oBAAoB,gBAAgB,GAAG,KAAK;AAAA,EAC9C,CAAC,CAAC,SAAS,GAAG,SAAS;AAAA,EACvB,CAAC,CAAC,SAAS,GAAG,OAAO;AAAA,EACrB,CAAC,CAAC,gBAAgB,kBAAkB,GAAG,QAAQ;AACjD;AAGO,SAAS,qBAAqB,SAA2C;AAC9E,aAAW,CAAC,OAAO,OAAO,KAAK,uBAAuB;AACpD,QAAI,MAAM,KAAK,CAAC,MAAM,QAAQ,SAAS,CAAC,CAAC,EAAG,QAAO;AAAA,EACrD;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,SAA2C;AAC1E,MAAI,QAAQ,SAAS,SAAS,EAAG,QAAO;AACxC,MAAI,QAAQ,SAAS,gBAAgB,EAAG,QAAO;AAC/C,MAAI,QAAQ,SAAS,aAAa,EAAG,QAAO;AAC5C,MAAI,QAAQ,SAAS,WAAW,EAAG,QAAO;AAC1C,MAAI,QAAQ,SAAS,aAAa,EAAG,QAAO;AAC5C,MAAI,QAAQ,SAAS,qBAAqB,EAAG,QAAO;AACpD,MAAI,QAAQ,SAAS,WAAW,EAAG,QAAO;AAC1C,SAAO;AACT;AAGA,IAAM,6BAAuE;AAAA,EAC3E,CAAC,WAAW,SAAS;AAAA,EACrB,CAAC,UAAU,QAAQ;AAAA,EACnB,CAAC,SAAS,OAAO;AAAA,EACjB,CAAC,QAAQ,MAAM;AACjB;AAGA,SAAS,uBACP,iBACA,UACmB;AACnB,QAAM,UAAU,gBAAgB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;AAC1D,QAAM,QAAkB,CAAC;AACzB,aAAW,CAAC,SAAS,IAAI,KAAK,4BAA4B;AACxD,QAAI,CAAC,SAAS,SAAS,IAAI,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG;AACxE,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,sBACd,SACA,iBACmB;AACnB,QAAM,QAAkB,CAAC;AACzB,MAAI,QAAQ,SAAS,cAAc,KAAK,QAAQ,SAAS,UAAU,EAAG,OAAM,KAAK,SAAS;AAC1F,MAAI,QAAQ,SAAS,OAAO,EAAG,OAAM,KAAK,MAAM;AAChD,MAAI,QAAQ,SAAS,aAAa,EAAG,OAAM,KAAK,iBAAiB;AACjE,MAAI,QAAQ,SAAS,aAAa,EAAG,OAAM,KAAK,OAAO;AACvD,MAAI,QAAQ,SAAS,YAAY,EAAG,OAAM,KAAK,YAAY;AAC3D,MAAI,oBAAoB,QAAW;AACjC,UAAM,KAAK,GAAG,uBAAuB,iBAAiB,KAAK,CAAC;AAAA,EAC9D;AACA,SAAO;AACT;AAGO,SAAS,gBAAgB,SAA2C;AACzE,MAAI,QAAQ,SAAS,eAAe,KAAK,QAAQ,SAAS,sBAAsB;AAC9E,WAAO;AACT,MAAI,QAAQ,SAAS,gBAAgB,KAAK,QAAQ,SAAS,gBAAgB,EAAG,QAAO;AACrF,MAAI,QAAQ,SAAS,cAAc,EAAG,QAAO;AAC7C,MAAI,QAAQ,SAAS,gBAAgB,KAAK,QAAQ,SAAS,gBAAgB,EAAG,QAAO;AACrF,MAAI,QAAQ,SAAS,eAAe,KAAK,QAAQ,SAAS,cAAc,EAAG,QAAO;AAClF,SAAO;AACT;AAGA,IAAM,YAAiE;AAAA,EACrE,CAAC,CAAC,aAAa,GAAG,uBAAuB;AAAA,EACzC,CAAC,CAAC,YAAY,GAAG,oBAAoB;AAAA,EACrC,CAAC,CAAC,WAAW,YAAY,GAAG,iBAAiB;AAAA,EAC7C;AAAA,IACE,CAAC,gBAAgB,YAAY,eAAe,OAAO;AAAA,IACnD;AAAA,EACF;AAAA;AAAA,EAEA,CAAC,CAAC,YAAY,GAAG,oBAAoB;AACvC;AAQA,IAAM,0BAAsE;AAAA,EAC1E,YAAY;AAAA,IACV,MAAM,CAAC,oCAAoC,wBAAwB;AAAA,IACnE,KAAK,CAAC,eAAe,WAAW;AAAA,EAClC;AAAA,EACA,YAAY;AAAA,IACV,MAAM,CAAC,oCAAoC,wBAAwB;AAAA,IACnE,KAAK,CAAC,eAAe,WAAW;AAAA,EAClC;AAAA,EACA,QAAQ;AAAA,IACN,MAAM,CAAC,sBAAsB,QAAQ;AAAA,IACrC,KAAK,CAAC,eAAe,WAAW;AAAA,EAClC;AAAA,EACA,MAAM;AAAA,IACJ,MAAM,CAAC,oBAAoB,0BAA0B;AAAA,IACrD,KAAK,CAAC,eAAe,wBAAwB;AAAA,EAC/C;AAAA,EACA,IAAI;AAAA,IACF,MAAM,CAAC,sBAAsB,OAAO;AAAA,IACpC,KAAK,CAAC,eAAe,aAAa;AAAA,EACpC;AAAA,EACA,MAAM;AAAA,IACJ,MAAM,CAAC,kBAAkB;AAAA,IACzB,KAAK,CAAC,eAAe,aAAa;AAAA,EACpC;AAAA,EACA,OAAO;AAAA,IACL,MAAM,CAAC,iBAAiB,UAAU;AAAA,IAClC,KAAK,CAAC,aAAa;AAAA,EACrB;AAAA,EACA,GAAG;AAAA,IACD,MAAM,CAAC,iBAAiB,UAAU;AAAA,IAClC,KAAK,CAAC,aAAa;AAAA,EACrB;AAAA,EACA,QAAQ;AAAA,IACN,MAAM,CAAC,sBAAsB,QAAQ;AAAA,IACrC,KAAK,CAAC,eAAe,wBAAwB;AAAA,EAC/C;AAAA,EACA,OAAO;AAAA,IACL,MAAM,CAAC,mBAAmB;AAAA,IAC1B,KAAK,CAAC,aAAa;AAAA,EACrB;AAAA,EACA,MAAM;AAAA,IACJ,MAAM,CAAC,oBAAoB,UAAU;AAAA,IACrC,KAAK,CAAC,eAAe,eAAe;AAAA,EACtC;AAAA,EACA,KAAK;AAAA,IACH,MAAM,CAAC,mBAAmB,SAAS;AAAA,IACnC,KAAK,CAAC,eAAe,gBAAgB;AAAA,EACvC;AAAA,EACA,OAAO;AAAA,IACL,MAAM,CAAC,oBAAoB,YAAY;AAAA,IACvC,KAAK,CAAC;AAAA,EACR;AAAA,EACA,KAAK;AAAA,IACH,MAAM,CAAC,yBAAyB,OAAO;AAAA,IACvC,KAAK,CAAC,aAAa;AAAA,EACrB;AACF;AAGO,SAAS,2BACd,UACA,iBACmB;AACnB,MAAI,aAAa,KAAM,QAAO,CAAC;AAC/B,QAAM,WAAW,wBAAwB,QAAQ;AACjD,MAAI,aAAa,OAAW,QAAO,CAAC;AAEpC,QAAM,UAAU,gBAAgB,SAAS,SAAS,KAAK,gBAAgB,SAAS,MAAM;AACtF,QAAM,SACJ,gBAAgB,SAAS,aAAa,KACtC,gBAAgB,SAAS,OAAO,KAChC,gBAAgB,SAAS,MAAM;AAEjC,QAAM,OAAiB,CAAC;AACxB,MAAI,CAAC,WAAW,SAAS,KAAK,SAAS,GAAG;AACxC,UAAM,QAAQ,SAAS,KAAK,KAAK,IAAI;AACrC,SAAK,KAAK,GAAG,QAAQ,0BAA0B,KAAK,EAAE;AAAA,EACxD;AACA,MAAI,CAAC,UAAU,SAAS,IAAI,SAAS,GAAG;AACtC,UAAM,QAAQ,SAAS,IAAI,KAAK,IAAI;AACpC,SAAK,KAAK,GAAG,QAAQ,yBAAyB,KAAK,EAAE;AAAA,EACvD;AACA,SAAO;AACT;AAGA,IAAM,aAAa,oBAAI,IAAI,CAAC,WAAW,UAAU,MAAM,CAAC;AACxD,IAAM,eAAe;AAGrB,SAAS,4BAA4B,MAAgB,UAAmC;AACtF,MAAI,SAAS,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,CAAC,GAAG;AAC3C,UAAM,MAAM,KAAK,QAAQ,YAAY;AACrC,QAAI,QAAQ,GAAI,MAAK,OAAO,KAAK,CAAC;AAAA,EACpC;AACF;AAGO,SAAS,aACd,SACA,YACA,UACA,iBACmB;AACnB,QAAM,OAAiB,CAAC;AACxB,MAAI,eAAe,KAAM,MAAK,KAAK,iCAAiC;AACpE,aAAW,CAAC,OAAO,OAAO,KAAK,WAAW;AACxC,QAAI,CAAC,MAAM,KAAK,CAAC,MAAM,QAAQ,SAAS,CAAC,CAAC,EAAG,MAAK,KAAK,OAAO;AAAA,EAChE;AAEA,MAAI,CAAC,gBAAgB,OAAO,EAAG,MAAK,KAAK,4BAA4B;AAGrE,8BAA4B,MAAM,mBAAmB,CAAC,CAAC;AAGvD,QAAM,mBAAmB,KAAK,SAAS,0CAA0C;AACjF,MACE,oBACA,aAAa,QACb,aAAa,UACb,oBAAoB,QACpB;AACA,UAAM,WAAW,2BAA2B,UAAU,eAAe;AACrE,SAAK,KAAK,GAAG,QAAQ;AAAA,EACvB;AAEA,SAAO;AACT;AAkBO,SAAS,YACd,UACA,iBACA,iBACc;AACd,QAAM,aAAa,iBAAiB,eAAe;AACnD,QAAM,aAAa,sBAAsB,iBAAiB,eAAe;AACzE,QAAM,WAAW,gBAAgB,eAAe;AAEhD,SAAO;AAAA,IACL,MAAM,SAAS;AAAA,IACf,UAAU,SAAS;AAAA,IACnB,WAAW,gBAAgB,eAAe;AAAA,IAC1C,gBAAgB,qBAAqB,eAAe;AAAA,IACpD;AAAA,IACA,iBAAiB;AAAA,IACjB,eACE,gBAAgB,SAAS,YAAY,KACrC,gBAAgB,SAAS,oBAAoB,KAC7C,gBAAgB,SAAS,qBAAqB;AAAA,IAChD,eACE,gBAAgB,SAAS,YAAY,KACrC,gBAAgB,SAAS,QAAQ,KACjC,gBAAgB,SAAS,MAAM;AAAA,IACjC,aAAa,gBAAgB,SAAS,UAAU;AAAA,IAChD;AAAA,IACA,SAAS,SAAS,SAAS,WAAW;AAAA,IACtC,aAAa,SAAS;AAAA,IACtB,eAAe,SAAS;AAAA,IACxB,OAAO,SAAS;AAAA,IAChB,iBAAiB,CAAC,GAAG,eAAe;AAAA,IACpC,MAAM,aAAa,iBAAiB,YAAY,SAAS,UAAU,UAAU;AAAA,EAC/E;AACF;AAGA,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,SAAS,sBACP,WACA,UACe;AACf,QAAM,SAAS,OAAO,QAAQ,SAAS,EACpC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC,EAC9C,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAC7B,QAAM,MAAM,OAAO,CAAC;AACpB,SAAO,QAAQ,SAAY,IAAI,CAAC,IAAI;AACtC;AAGA,SAAS,gBAAgB,SAAqC;AAC5D,QAAM,WAAW,CAAC,SAAS,QAAQ,aAAa,MAAM;AACtD,MAAI,SAAS,KAAK,CAAC,MAAM,QAAQ,SAAS,CAAC,CAAC,EAAG,QAAO;AAEtD,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,YAAY,KAAK,CAAC,MAAM,QAAQ,SAAS,CAAC,CAAC,EAAG,QAAO;AAEzD,SAAO,QAAQ,SAAS,UAAU,KAAK,QAAQ,SAAS,cAAc;AACxE;AAGA,SAAS,yBACP,SACA,UACe;AACf,MAAI,QAAQ,SAAS,eAAe,EAAG,QAAO;AAC9C,MAAI,QAAQ,SAAS,YAAY,EAAG,QAAO;AAC3C,MAAI,QAAQ,SAAS,QAAQ,EAAG,QAAO;AACvC,MAAI,QAAQ,SAAS,gBAAgB,KAAK,QAAQ,SAAS,UAAU,EAAG,QAAO;AAC/E,MAAI,QAAQ,SAAS,SAAS,KAAK,QAAQ,SAAS,cAAc,EAAG,QAAO;AAC5E,MAAI,QAAQ,SAAS,SAAS,EAAG,QAAO;AACxC,MAAI,QAAQ,SAAS,cAAc,EAAG,QAAO;AAC7C,SAAO;AACT;AASA,eAAe,cAAmC;AAChD,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,eAAoB;AACtD,QAAM,EAAE,UAAU,IAAI,MAAM,OAAO,MAAW;AAC9C,SAAO,UAAU,QAAQ;AAC3B;AAGA,eAAe,cACb,QACA,MAC0D;AAC1D,QAAM,EAAE,QAAQ,SAAS,IAAI,MAAM;AAAA,IACjC;AAAA,IACA;AAAA,MACE;AAAA,MACA,SAAS,MAAM;AAAA,MACf;AAAA,MACA;AAAA,IACF;AAAA,IACA,EAAE,SAAS,IAAO;AAAA,EACpB;AACA,MAAI;AACJ,MAAI;AACF,eAAW,KAAK,MAAM,SAAS,KAAK,CAAC;AAAA,EACvC,QAAQ;AACN,UAAM,IAAI,MAAM,qCAAqC,MAAM,KAAK,SAAS,MAAM,GAAG,GAAG,CAAC,EAAE;AAAA,EAC1F;AACA,QAAM,EAAE,QAAQ,aAAa,IAAI,MAAM;AAAA,IACrC;AAAA,IACA,CAAC,OAAO,SAAS,MAAM,aAAa,QAAQ,YAAY;AAAA,IACxD,EAAE,SAAS,IAAO;AAAA,EACpB;AACA,MAAI;AACJ,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,aAAa,KAAK,CAAC;AACtD,cAAU,MAAM,QAAQ,MAAM,IAAI,OAAO,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAAI,CAAC;AAAA,EAChG,QAAQ;AACN,UAAM,IAAI,MAAM,qCAAqC,MAAM,KAAK,aAAa,MAAM,GAAG,GAAG,CAAC,EAAE;AAAA,EAC9F;AACA,SAAO,EAAE,UAAU,QAAQ;AAC7B;AAGA,eAAe,eAAe,QAAgB,MAA0C;AACtF,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM;AAAA,MACvB;AAAA,MACA,CAAC,OAAO,SAAS,MAAM,YAAY,QAAQ,kBAAkB;AAAA,MAC7D,EAAE,SAAS,KAAO;AAAA,IACpB;AACA,UAAM,SAAS,OAAO,KAAK;AAC3B,QAAI,WAAW,MAAM,WAAW,UAAU,WAAW,eAAe;AAClE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAGA,eAAe,gBACb,QACA,SACA,UACA,MACwB;AACxB,MAAI,YAAoC,CAAC;AACzC,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,YAAY,GAAG,EAAE,SAAS,KAAO,CAAC;AAC7F,gBAAY,KAAK,MAAM,OAAO,KAAK,CAAC;AAAA,EACtC,QAAQ;AAAA,EAER;AACA,QAAM,UAAU,sBAAsB,WAAW,SAAS,QAAQ;AAClE,MAAI,YAAY,QAAQ,iBAAiB,IAAI,OAAO,GAAG;AACrD,WAAO,yBAAyB,SAAS,OAAO;AAAA,EAClD;AACA,SAAO;AACT;AAGA,eAAe,qBAAqB,QAAgB,MAA8C;AAChG,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM;AAAA,MACvB;AAAA,MACA,CAAC,OAAO,SAAS,MAAM,+BAA+B,QAAQ,YAAY;AAAA,MAC1E,EAAE,SAAS,KAAO;AAAA,IACpB;AACA,UAAM,SAAkB,KAAK,MAAM,OAAO,KAAK,CAAC;AAChD,WAAO,MAAM,QAAQ,MAAM,IAAI,OAAO,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAAI,CAAC;AAAA,EAC7F,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAGA,eAAsB,kBAAkB,OAAgD;AACtF,QAAM,SAAS,gBAAgB,MAAM,IAAI;AACzC,QAAM,OAAO,MAAM,YAAY;AAC/B,QAAM,EAAE,UAAU,QAAQ,IAAI,MAAM,cAAc,QAAQ,IAAI;AAE9D,QAAM,cAAc,MAAM,gBAAgB,QAAQ,SAAS,UAAU,IAAI;AACzE,QAAM,WAAW,EAAE,GAAG,UAAU,UAAU,YAAY;AAGtD,QAAM,iBAAiB,QAAQ,SAAS,SAAS,KAAK,QAAQ,SAAS,YAAY;AACnF,QAAM,oBAAoB,SAAS,YAAY,QAAQ,SAAS,QAAQ,YAAY;AACpF,MAAI,qBAAqB,gBAAgB;AACvC,UAAM,WAAW,MAAM,eAAe,QAAQ,IAAI;AAClD,QAAI,aAAa,KAAM,UAAS,UAAU,EAAE,SAAS,SAAS;AAAA,EAChE;AAGA,QAAM,kBAAkB,QAAQ,SAAS,SAAS,IAC9C,MAAM,qBAAqB,QAAQ,IAAI,IACvC,CAAC;AAEL,SAAO,YAAY,UAAU,SAAS,eAAe;AACvD;","names":[]}