npm-scan-plus 1.0.0

package/dist/lib/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/lib/scanner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,KAAK,EAEV,UAAU,EAGV,WAAW,EACX,qBAAqB,EAEtB,MAAM,UAAU,CAAC;AAElB;;GAEG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,OAAO,CAAc;gBAEjB,OAAO,GAAE,WAAgB;IAKrC;;OAEG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAiIhF;;OAEG;IACG,eAAe,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAsD1E;;OAEG;IACG,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAClF,GAAG,EAAE,UAAU,CAAC;QAChB,IAAI,EAAE,qBAAqB,CAAC;KAC7B,CAAC;IAgBF;;OAEG;IACH,OAAO,CAAC,YAAY;IA8BpB;;OAEG;IACH,OAAO,CAAC,eAAe;CAYxB;AAED,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAE5D;;;;;AAGD,wBAA0C"}

package/dist/lib/scanner.js

@@ -0,0 +1,432 @@
+"use strict";
+/**
+ * Core scanner module
+ * Pre and post-install security scanning for npm packages
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Scanner = void 0;
+exports.createScanner = createScanner;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const registry_1 = require("./registry");
+const blocklist_1 = require("./blocklist");
+const patterns_1 = require("./patterns");
+const vuln_1 = require("./vuln");
+const extended_1 = require("./extended");
+const integrity_1 = require("./integrity");
+/**
+ * Main scanner class
+ */
+class Scanner {
+    registry;
+    options;
+    vulnChecker;
+    constructor(options = {}) {
+        this.options = options;
+        this.registry = (0, registry_1.createRegistryClient)({ registry: options.registry });
+        this.vulnChecker = (0, vuln_1.createVulnerabilityChecker)(process.env.GITHUB_TOKEN);
+    }
+    /**
+     * Pre-install scan: Check a package before installation
+     */
+    async preInstallScan(packageName, version) {
+        const threats = [];
+        let score = 0;
+        // 1. Check blocklist
+        const blocklistEntry = blocklist_1.blocklistManager.isBlocklisted(packageName);
+        if (blocklistEntry) {
+            threats.push({
+                type: 'blocklisted',
+                severity: blocklistEntry.severity,
+                message: `Package is blocklisted: ${blocklistEntry.reason}`,
+                details: `Source: ${blocklistEntry.source || 'internal'}`
+            });
+            score += blocklistEntry.severity === 'critical' ? 100 : 75;
+        }
+        // 2. Check typosquatting
+        const typosquatMatches = blocklist_1.blocklistManager.detectTyposquatting(packageName);
+        if (typosquatMatches.length > 0) {
+            threats.push({
+                type: 'typosquatting',
+                severity: 'high',
+                message: `Possible typosquatting of "${typosquatMatches.join(', ')}"`,
+                details: 'This package name is similar to popular packages - may be attempting to confuse users'
+            });
+            score += 60;
+        }
+        // 3. Fetch metadata
+        let rawMetadata;
+        try {
+            rawMetadata = await this.registry.getPackageMetadata(packageName, version);
+        }
+        catch (e) {
+            threats.push({
+                type: 'supply_chain',
+                severity: 'medium',
+                message: `Could not fetch package metadata: ${e.message}`
+            });
+            return {
+                packageName,
+                version: version || 'unknown',
+                status: 'warning',
+                threats,
+                score: Math.min(score, 100)
+            };
+        }
+        const metadata = {
+            name: rawMetadata.name,
+            version: rawMetadata['dist-tags']?.latest || version || 'unknown',
+            description: rawMetadata.description,
+            publisher: rawMetadata.publisher,
+            maintainers: rawMetadata.maintainers,
+            repository: rawMetadata.repository,
+            homepage: rawMetadata.homepage,
+            license: rawMetadata.license
+        };
+        // Get latest version data
+        const latestVersion = rawMetadata.versions?.[metadata.version] || {};
+        metadata.dependencies = latestVersion.dependencies;
+        metadata.devDependencies = latestVersion.devDependencies;
+        metadata.peerDependencies = latestVersion.peerDependencies;
+        metadata.scripts = latestVersion.scripts;
+        metadata.time = rawMetadata.time;
+        // 4. Check for suspicious scripts
+        if (metadata.scripts) {
+            const suspiciousScripts = ['postinstall', 'preinstall', 'postpublish', 'preuninstall', 'postuninstall'];
+            for (const script of suspiciousScripts) {
+                if (metadata.scripts?.[script]) {
+                    const isComplex = metadata.scripts?.[script].length > 100 ||
+                        /curl|wget|npm\|pipe|\$\(|\||\&\&/.test(metadata.scripts?.[script] || '');
+                    threats.push({
+                        type: 'suspicious_script',
+                        severity: isComplex ? 'high' : 'medium',
+                        message: `Package has "${script}" script that runs automatically`,
+                        details: metadata.scripts?.[script].substring(0, 100)
+                    });
+                    score += isComplex ? 40 : 20;
+                }
+            }
+        }
+        // 5. Check publisher reputation
+        if (!metadata.publisher && !metadata.maintainers?.length) {
+            threats.push({
+                type: 'unknown_publisher',
+                severity: 'medium',
+                message: 'Package has no verified publisher information'
+            });
+            score += 15;
+        }
+        // 6. Check version age
+        if (metadata.time?.created) {
+            const created = new Date(metadata.time.created);
+            const daysSince = (Date.now() - created.getTime()) / (1000 * 60 * 60 * 24);
+            if (daysSince < 7 && !metadata.maintainers?.length) {
+                threats.push({
+                    type: 'supply_chain',
+                    severity: 'medium',
+                    message: `Package was published less than ${Math.floor(daysSince)} days ago with no maintainers`
+                });
+                score += 20;
+            }
+        }
+        // 7. Check dependencies
+        if (metadata.dependencies) {
+            const depCount = Object.keys(metadata.dependencies).length;
+            if (depCount > 100) {
+                threats.push({
+                    type: 'supply_chain',
+                    severity: 'low',
+                    message: `Package has ${depCount} dependencies - large attack surface`
+                });
+                score += 10;
+            }
+            // Check for dependency confusion
+            for (const dep of Object.keys(metadata.dependencies)) {
+                if (dep.startsWith('@') && !dep.includes('/')) {
+                    threats.push({
+                        type: 'dependency_confusion',
+                        severity: 'medium',
+                        message: `Scoped dependency "@${dep}" may be internal package confusion`
+                    });
+                    score += 15;
+                    break;
+                }
+            }
+        }
+        // 8. Check vulnerability databases (OSV, GitHub Advisory, npm Audit)
+        if (this.options.checkVulnerabilities !== false) {
+            try {
+                const vulnResult = await this.vulnChecker.checkPackage(packageName, version || metadata.version);
+                for (const vuln of vulnResult.vulnerabilities) {
+                    if (vuln.id.startsWith('CVE-') || vuln.id.startsWith('GHSA-')) {
+                        threats.push({
+                            type: 'vulnerability',
+                            severity: vuln.severity,
+                            message: `${vuln.source.toUpperCase()} vulnerability: ${vuln.id}`,
+                            details: vuln.summary || vuln.details,
+                            location: vuln.patched_versions ? `Fixed in: ${vuln.patched_versions}` : undefined
+                        });
+                        if (vuln.severity === 'critical')
+                            score += 50;
+                        else if (vuln.severity === 'high')
+                            score += 30;
+                        else if (vuln.severity === 'medium')
+                            score += 15;
+                        else
+                            score += 5;
+                    }
+                }
+            }
+            catch (e) {
+                // Vulnerability check failed, continue without
+            }
+        }
+        // 9. License analysis
+        const licenseAnalysis = (0, extended_1.analyzeLicense)(metadata.license);
+        if (licenseAnalysis.risk === 'high') {
+            threats.push({
+                type: 'supply_chain',
+                severity: 'medium',
+                message: `License risk: ${licenseAnalysis.details}`,
+                details: metadata.license
+            });
+            score += 20;
+        }
+        else if (licenseAnalysis.risk === 'critical') {
+            threats.push({
+                type: 'supply_chain',
+                severity: 'high',
+                message: `License: ${licenseAnalysis.details}`,
+                details: metadata.license
+            });
+            score += 40;
+        }
+        // 10. Maintainer trust check
+        const mainterTrust = (0, extended_1.checkMaintainerTrust)(metadata.maintainers, metadata.publisher);
+        if (!mainterTrust.isTrusted && mainterTrust.score < 30) {
+            threats.push({
+                type: 'unknown_publisher',
+                severity: 'medium',
+                message: `Maintainer trust: ${mainterTrust.details}`
+            });
+            score += 15;
+        }
+        // 11. Repository validation
+        if (metadata.repository) {
+            const repoCheck = await (0, extended_1.validateRepository)(metadata.repository.url, packageName);
+            if (!repoCheck.valid) {
+                for (const issue of repoCheck.issues) {
+                    threats.push({
+                        type: 'supply_chain',
+                        severity: 'medium',
+                        message: `Repository issue: ${issue}`,
+                        details: repoCheck.details
+                    });
+                    score += 10;
+                }
+            }
+        }
+        // 12. Deprecated dependency check
+        const depAnalysis = (0, extended_1.analyzeDependencies)(metadata.dependencies, metadata.devDependencies);
+        if (depAnalysis.outdatedCount > 0) {
+            threats.push({
+                type: 'supply_chain',
+                severity: 'low',
+                message: `${depAnalysis.outdatedCount} deprecated/outdated dependencies`,
+                details: depAnalysis.details.slice(0, 3).join('; ')
+            });
+            score += depAnalysis.outdatedCount * 2;
+        }
+        // 13. Package integrity check
+        const integrityChecked = await (0, integrity_1.fullIntegrityCheck)(packageName, version || metadata.version);
+        const integrity = integrityChecked.integrity;
+        const sizeInfo = integrityChecked.size;
+        const tarballInfo = integrityChecked.tarball;
+        if (!integrity.valid) {
+            threats.push({
+                type: 'supply_chain',
+                severity: 'high',
+                message: `Integrity check failed: ${integrity.details}`,
+                details: `Expected: ${integrity.expectedHash?.substring(0, 20)}...`
+            });
+            score += 50;
+        }
+        if (sizeInfo.suspicious) {
+            threats.push({
+                type: 'supply_chain',
+                severity: 'medium',
+                message: sizeInfo.details
+            });
+            score += 20;
+        }
+        if (tarballInfo.hasNativeCode) {
+            // Native code is usually fine for big packages, but warn
+            threats.push({
+                type: 'supply_chain',
+                severity: 'low',
+                message: 'Package contains native code'
+            });
+            score += 5;
+        }
+        // Determine status
+        const status = this.determineStatus(threats, score);
+        return {
+            packageName,
+            version: metadata?.version || version || 'unknown',
+            status,
+            threats,
+            metadata,
+            score
+        };
+    }
+    /**
+     * Post-install scan: Scan downloaded packages
+     */
+    async postInstallScan(folderPath) {
+        const startTime = Date.now();
+        const scanFolder = folderPath || path.join(process.cwd(), 'node_modules');
+        const allThreats = [];
+        let scannedPackages = 0;
+        if (!fs.existsSync(scanFolder)) {
+            throw new Error(`node_modules folder not found: ${scanFolder}`);
+        }
+        // Find all packages
+        const packages = this.findPackages(scanFolder);
+        for (const pkg of packages) {
+            scannedPackages++;
+            // Scan package directory
+            if (fs.existsSync(pkg)) {
+                const files = (0, patterns_1.scanDirectory)(pkg);
+                for (const [filePath, content] of files) {
+                    const fileThreats = (0, patterns_1.scanFile)(filePath, content);
+                    allThreats.push(...fileThreats.map(t => ({
+                        ...t,
+                        package: pkg.split(path.sep).slice(-2).join(path.sep)
+                    })));
+                }
+                // Check package.json
+                const packageJsonPath = path.join(pkg, 'package.json');
+                if (fs.existsSync(packageJsonPath)) {
+                    try {
+                        const pkgJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
+                        if (pkgJson.scripts) {
+                            const scriptThreats = (0, patterns_1.scanPackageJsonScripts)(pkgJson.scripts);
+                            allThreats.push(...scriptThreats.map(t => ({
+                                ...t,
+                                package: pkg.split(path.sep).slice(-2).join(path.sep)
+                            })));
+                        }
+                    }
+                    catch (e) {
+                        // Skip invalid package.json
+                    }
+                }
+            }
+        }
+        return {
+            scannedPackages,
+            threats: allThreats,
+            duration: Date.now() - startTime
+        };
+    }
+    /**
+     * Full scan: Pre-scan, then install, then post-scan
+     */
+    async fullScan(packageName, version, folderPath) {
+        const pre = await this.preInstallScan(packageName, version);
+        if (pre.status === 'blocked') {
+            return { pre, post: { scannedPackages: 0, threats: [], duration: 0 } };
+        }
+        // Run post-install scan if folder provided
+        let post = { scannedPackages: 0, threats: [], duration: 0 };
+        if (folderPath) {
+            post = await this.postInstallScan(folderPath);
+        }
+        return { pre, post };
+    }
+    /**
+     * Find all packages in node_modules
+     */
+    findPackages(nodeModulesPath) {
+        const packages = [];
+        function findPkgs(dir, depth = 0) {
+            if (depth > 3)
+                return; // Limit depth
+            try {
+                const entries = fs.readdirSync(dir, { withFileTypes: true });
+                for (const entry of entries) {
+                    if (entry.isDirectory()) {
+                        const fullPath = path.join(dir, entry.name);
+                        // Skip scoped packages at root level
+                        if (entry.name.startsWith('@')) {
+                            findPkgs(fullPath, depth + 1);
+                        }
+                        else if (fs.existsSync(path.join(fullPath, 'package.json'))) {
+                            packages.push(fullPath);
+                        }
+                    }
+                }
+            }
+            catch (e) {
+                // Skip inaccessible
+            }
+        }
+        findPkgs(nodeModulesPath);
+        return packages;
+    }
+    /**
+     * Determine overall status from threats and score
+     */
+    determineStatus(threats, score) {
+        if (threats.some(t => t.type === 'blocklisted')) {
+            return 'blocked';
+        }
+        if (score >= 60 || threats.some(t => t.severity === 'critical')) {
+            return 'danger';
+        }
+        if (score >= 30 || threats.some(t => t.severity === 'high')) {
+            return 'warning';
+        }
+        return 'safe';
+    }
+}
+exports.Scanner = Scanner;
+function createScanner(options) {
+    return new Scanner(options);
+}
+// Export for CLI
+exports.default = { Scanner, createScanner };
+//# sourceMappingURL=scanner.js.map

package/dist/lib/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/lib/scanner.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsbH,sCAEC;AAtbD,uCAAyB;AACzB,2CAA6B;AAC7B,yCAAkE;AAClE,2CAAuE;AACvE,yCAA8F;AAC9F,iCAA0E;AAC1E,yCAMoB;AACpB,2CAAiD;AAWjD;;GAEG;AACH,MAAa,OAAO;IACV,QAAQ,CAAiB;IACzB,OAAO,CAAc;IACrB,WAAW,CAAuB;IAE1C,YAAY,UAAuB,EAAE;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,IAAA,+BAAoB,EAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW,GAAG,IAAA,iCAA0B,EAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,OAAgB;QACxD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,qBAAqB;QACrB,MAAM,cAAc,GAAG,4BAAgB,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QACnE,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,cAAc,CAAC,QAAQ;gBACjC,OAAO,EAAE,2BAA2B,cAAc,CAAC,MAAM,EAAE;gBAC3D,OAAO,EAAE,WAAW,cAAc,CAAC,MAAM,IAAI,UAAU,EAAE;aAC1D,CAAC,CAAC;YACH,KAAK,IAAI,cAAc,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,CAAC;QAED,yBAAyB;QACzB,MAAM,gBAAgB,GAAG,4BAAgB,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC3E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,8BAA8B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACrE,OAAO,EAAE,uFAAuF;aACjG,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;QACd,CAAC;QAED,oBAAoB;QACpB,IAAI,WAAgB,CAAC;QACrB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,qCAAqC,CAAC,CAAC,OAAO,EAAE;aAC1D,CAAC,CAAC;YACH,OAAO;gBACL,WAAW;gBACX,OAAO,EAAE,OAAO,IAAI,SAAS;gBAC7B,MAAM,EAAE,SAAS;gBACjB,OAAO;gBACP,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC;aAC5B,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAoB;YAChC,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,OAAO,EAAE,WAAW,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,OAAO,IAAI,SAAS;YACjE,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,OAAO,EAAE,WAAW,CAAC,OAAO;SAC7B,CAAC;QAEF,0BAA0B;QAC1B,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACrE,QAAQ,CAAC,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC;QACnD,QAAQ,CAAC,eAAe,GAAG,aAAa,CAAC,eAAe,CAAC;QACzD,QAAQ,CAAC,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;QAC3D,QAAQ,CAAC,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QACzC,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;QAEjC,kCAAkC;QAClC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,iBAAiB,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;YACxG,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACvC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,GAAG;wBACvD,kCAAkC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;oBAE5E,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,mBAAmB;wBACzB,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;wBACvC,OAAO,EAAE,gBAAgB,MAAM,kCAAkC;wBACjE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;qBACtD,CAAC,CAAC;oBACH,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;QACd,CAAC;QAED,uBAAuB;QACvB,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3E,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;gBACnD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,cAAc;oBACpB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,mCAAmC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,+BAA+B;iBACjG,CAAC,CAAC;gBACH,KAAK,IAAI,EAAE,CAAC;YACd,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;YAC3D,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,cAAc;oBACpB,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,eAAe,QAAQ,sCAAsC;iBACvE,CAAC,CAAC;gBACH,KAAK,IAAI,EAAE,CAAC;YACd,CAAC;YAED,iCAAiC;YACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACrD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9C,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,sBAAsB;wBAC5B,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,uBAAuB,GAAG,qCAAqC;qBACzE,CAAC,CAAC;oBACH,KAAK,IAAI,EAAE,CAAC;oBACZ,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,IAAI,IAAI,CAAC,OAAO,CAAC,oBAAoB,KAAK,KAAK,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAEjG,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;oBAC9C,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC9D,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,eAAe;4BACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,mBAAmB,IAAI,CAAC,EAAE,EAAE;4BACjE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;4BACrC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS;yBACnF,CAAC,CAAC;wBAEH,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU;4BAAE,KAAK,IAAI,EAAE,CAAC;6BACzC,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;4BAAE,KAAK,IAAI,EAAE,CAAC;6BAC1C,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;4BAAE,KAAK,IAAI,EAAE,CAAC;;4BAC5C,KAAK,IAAI,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,+CAA+C;YACjD,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,MAAM,eAAe,GAAG,IAAA,yBAAc,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,eAAe,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,iBAAiB,eAAe,CAAC,OAAO,EAAE;gBACnD,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;QACd,CAAC;aAAM,IAAI,eAAe,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,YAAY,eAAe,CAAC,OAAO,EAAE;gBAC9C,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;QACd,CAAC;QAED,6BAA6B;QAC7B,MAAM,YAAY,GAAG,IAAA,+BAAoB,EAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpF,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,YAAY,CAAC,KAAK,GAAG,EAAE,EAAE,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,qBAAqB,YAAY,CAAC,OAAO,EAAE;aACrD,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;QACd,CAAC;QAED,4BAA4B;QAC5B,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAkB,EAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACjF,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBACrB,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;oBACrC,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,cAAc;wBACpB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,qBAAqB,KAAK,EAAE;wBACrC,OAAO,EAAE,SAAS,CAAC,OAAO;qBAC3B,CAAC,CAAC;oBACH,KAAK,IAAI,EAAE,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,MAAM,WAAW,GAAG,IAAA,8BAAmB,EAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;QACzF,IAAI,WAAW,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,GAAG,WAAW,CAAC,aAAa,mCAAmC;gBACxE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;aACpD,CAAC,CAAC;YACH,KAAK,IAAI,WAAW,CAAC,aAAa,GAAG,CAAC,CAAC;QACzC,CAAC;QAED,8BAA8B;QAC9B,MAAM,gBAAgB,GAAG,MAAM,IAAA,8BAAkB,EAAC,WAAW,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5F,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,CAAC;QAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC;QACvC,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC;QAE7C,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,2BAA2B,SAAS,CAAC,OAAO,EAAE;gBACvD,OAAO,EAAE,aAAa,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;aACpE,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;QACd,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;QACd,CAAC;QACD,IAAI,WAAW,CAAC,aAAa,EAAE,CAAC;YAC9B,yDAAyD;YACzD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,8BAA8B;aACxC,CAAC,CAAC;YACH,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QAED,mBAAmB;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEpD,OAAO;YACL,WAAW;YACX,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,OAAO,IAAI,SAAS;YAClD,MAAM;YACN,OAAO;YACP,QAAQ;YACR,KAAK;SACN,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,UAAmB;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAiB,EAAE,CAAC;QACpC,IAAI,eAAe,GAAG,CAAC,CAAC;QAExB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,oBAAoB;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAE/C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,eAAe,EAAE,CAAC;YAElB,yBAAyB;YACzB,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,IAAA,wBAAa,EAAC,GAAG,CAAC,CAAC;gBAEjC,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;oBACxC,MAAM,WAAW,GAAG,IAAA,mBAAQ,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAChD,UAAU,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACvC,GAAG,CAAC;wBACJ,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;qBACtD,CAAC,CAAC,CAAC,CAAC;gBACP,CAAC;gBAED,qBAAqB;gBACrB,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;gBACvD,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;oBACnC,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;wBACtE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;4BACpB,MAAM,aAAa,GAAG,IAAA,iCAAsB,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;4BAC9D,UAAU,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gCACzC,GAAG,CAAC;gCACJ,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;6BACtD,CAAC,CAAC,CAAC,CAAC;wBACP,CAAC;oBACH,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,4BAA4B;oBAC9B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,eAAe;YACf,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACjC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,OAAgB,EAAE,UAAmB;QAIvE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAE5D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QACzE,CAAC;QAED,2CAA2C;QAC3C,IAAI,IAAI,GAA0B,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnF,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,eAAuB;QAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,SAAS,QAAQ,CAAC,GAAW,EAAE,QAAgB,CAAC;YAC9C,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,CAAC,cAAc;YAErC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;gBAE7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;wBACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;wBAE5C,qCAAqC;wBACrC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC/B,QAAQ,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;wBAChC,CAAC;6BAAM,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;4BAC9D,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBAC1B,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,oBAAoB;YACtB,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC1B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,OAAiB,EAAE,KAAa;QACtD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,CAAC;YAChD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,EAAE,CAAC;YAChE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,KAAK,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;YAC5D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAvZD,0BAuZC;AAED,SAAgB,aAAa,CAAC,OAAqB;IACjD,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,iBAAiB;AACjB,kBAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC"}