project-shield 1.1.5 → 2.0.0

package/dist/auditor/checks/environment.js

@@ -0,0 +1,463 @@
+"use strict";
+// ─── F008: Claude Code Environment Security Checks (9 items) ─
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkEnvironment = checkEnvironment;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+// ─── Helpers ────────────────────────────────────────────────
+/**
+ * Strip fenced code blocks from markdown content to avoid
+ * false positives when patterns are mentioned in documentation
+ * rather than used as actual instructions.
+ */
+function stripCodeBlocks(content) {
+    return content.replace(/```[\s\S]*?```/g, '').replace(/`[^`\n]+`/g, '');
+}
+// ─── Trusted Anthropic domains ──────────────────────────────
+const TRUSTED_BASE_URLS = [
+    'https://api.anthropic.com',
+    'https://api.anthropic.com/',
+];
+// ─── CLAUDE.md injection patterns ───────────────────────────
+const INJECTION_PATTERNS = [
+    /ignore\s+(previous|all|above)\s+instructions/i,
+    /you\s+are\s+now\s+a?\s*(different|new|hacker)/i,
+    /forget\s+(everything|all|what)/i,
+    /system\s*prompt\s*:\s*override/i,
+    /new\s+instructions?\s*:/i,
+    /do\s+not\s+tell\s+the\s+user/i,
+    /secretly\s+(log|send|exfil|upload)/i,
+    /bypass\s*(all)?\s*permissions?/i,
+    /dangerously[\s-]*skip[\s-]*permissions/i,
+    /execute\s+(this|the\s+following)\s+command/i,
+    /curl\s+.*\|\s*sh/i,
+    /wget\s+.*\|\s*bash/i,
+];
+// ─── Dangerous tool patterns ────────────────────────────────
+const DANGEROUS_TOOL_PATTERNS = [
+    '*', // wildcard = all tools
+    'Bash', // unrestricted shell
+    'Write', // file write
+    'Edit', // file edit
+];
+const EXCESSIVE_TOOL_THRESHOLD = 10;
+/**
+ * Run all F008 environment checks and return findings.
+ */
+function checkEnvironment(settings, envFiles, instructionFiles, projectDir) {
+    const findings = [];
+    findings.push(...checkF008_01_baseUrl(settings, envFiles));
+    findings.push(...checkF008_02_bypassPermissions(settings));
+    findings.push(...checkF008_03_claudeMdInjection(instructionFiles));
+    findings.push(...checkF008_04_dangerouslySkipPermissions(settings, envFiles, instructionFiles));
+    findings.push(...checkF008_05_disableBypassMode(settings));
+    findings.push(...checkF008_06_excessiveToolAllowance(settings));
+    findings.push(...checkF008_07_permissionMode(settings));
+    findings.push(...checkF008_08_directoryPermissions(projectDir));
+    findings.push(...checkF008_09_projectOverride(settings));
+    return findings;
+}
+// ─── F008-01: ANTHROPIC_BASE_URL manipulation ───────────────
+function checkF008_01_baseUrl(settings, envFiles) {
+    const findings = [];
+    // Check .env files for ANTHROPIC_BASE_URL
+    for (const envFile of envFiles) {
+        if (!envFile.exists)
+            continue;
+        try {
+            const content = fs.readFileSync(envFile.filePath, 'utf-8');
+            const lines = content.split('\n');
+            for (const line of lines) {
+                const trimmed = line.trim();
+                if (trimmed.startsWith('#'))
+                    continue;
+                const match = trimmed.match(/^ANTHROPIC_BASE_URL\s*=\s*(.+)/);
+                if (match) {
+                    const url = match[1].trim().replace(/^["']|["']$/g, '');
+                    if (url && !TRUSTED_BASE_URLS.some((t) => url.startsWith(t))) {
+                        findings.push({
+                            id: 'F008-01',
+                            title: 'ANTHROPIC_BASE_URL points to untrusted host',
+                            description: `Non-official API endpoint detected: ${url}. This can intercept API keys (CVE-2026-21852).`,
+                            severity: 'critical',
+                            tier: 'free',
+                            category: 'environment',
+                            remediation: 'Remove ANTHROPIC_BASE_URL from .env or set it to https://api.anthropic.com',
+                            evidence: `${envFile.filePath}: ANTHROPIC_BASE_URL=${url}`,
+                        });
+                    }
+                }
+            }
+        }
+        catch {
+            // ignore read errors
+        }
+    }
+    // Check settings.json for env overrides
+    for (const s of settings) {
+        if (!s.exists)
+            continue;
+        const env = s.raw.env;
+        if (typeof env === 'object' && env !== null) {
+            const baseUrl = env.ANTHROPIC_BASE_URL;
+            if (typeof baseUrl === 'string' && !TRUSTED_BASE_URLS.some((t) => baseUrl.startsWith(t))) {
+                findings.push({
+                    id: 'F008-01',
+                    title: 'ANTHROPIC_BASE_URL in settings points to untrusted host',
+                    description: `Non-official API endpoint in settings: ${baseUrl}. API key interception risk.`,
+                    severity: 'critical',
+                    tier: 'free',
+                    category: 'environment',
+                    remediation: 'Remove ANTHROPIC_BASE_URL from settings.json env section',
+                    evidence: `${s.filePath}: env.ANTHROPIC_BASE_URL=${baseUrl}`,
+                });
+            }
+        }
+    }
+    return findings;
+}
+// ─── F008-02: bypassPermissions enabled ─────────────────────
+function checkF008_02_bypassPermissions(settings) {
+    const findings = [];
+    for (const s of settings) {
+        if (!s.exists)
+            continue;
+        if (s.raw.bypassPermissions === true) {
+            findings.push({
+                id: 'F008-02',
+                title: 'bypassPermissions is enabled',
+                description: 'All permission prompts are automatically approved. Complete bypass of safety checks.',
+                severity: 'critical',
+                tier: 'free',
+                category: 'environment',
+                remediation: 'Set "bypassPermissions": false in ' + s.filePath,
+                evidence: `${s.filePath}: bypassPermissions=true`,
+            });
+        }
+    }
+    return findings;
+}
+// ─── F008-03: CLAUDE.md injection patterns ──────────────────
+function checkF008_03_claudeMdInjection(instructionFiles) {
+    const findings = [];
+    for (const file of instructionFiles) {
+        if (!file.exists)
+            continue;
+        try {
+            const raw = fs.readFileSync(file.filePath, 'utf-8');
+            // Strip code blocks so documented patterns don't trigger false positives
+            const content = stripCodeBlocks(raw);
+            const matchedPatterns = [];
+            for (const pattern of INJECTION_PATTERNS) {
+                if (pattern.test(content)) {
+                    matchedPatterns.push(pattern.source);
+                }
+            }
+            if (matchedPatterns.length > 0) {
+                findings.push({
+                    id: 'F008-03',
+                    title: 'CLAUDE.md contains injection patterns',
+                    description: `Potential prompt injection detected in ${path.basename(file.filePath)}. ${matchedPatterns.length} suspicious pattern(s) found.`,
+                    severity: 'critical',
+                    tier: 'free',
+                    category: 'environment',
+                    remediation: 'Review CLAUDE.md for hidden malicious instructions. Remove or rewrite suspicious directives.',
+                    evidence: `${file.filePath}: matched ${matchedPatterns.length} pattern(s)`,
+                });
+            }
+        }
+        catch {
+            // ignore read errors
+        }
+    }
+    return findings;
+}
+// ─── F008-04: --dangerously-skip-permissions usage ──────────
+// Scope: Claude Code files only (.claude/settings.json, .env, CLAUDE.md)
+// Excluded: CI/scripts (.github/workflows, package.json scripts)
+function checkF008_04_dangerouslySkipPermissions(settings, envFiles, instructionFiles) {
+    const findings = [];
+    const DSP = /dangerously[\s_-]*skip[\s_-]*permissions/i;
+    // Check settings.json raw content
+    for (const s of settings) {
+        if (!s.exists)
+            continue;
+        const raw = JSON.stringify(s.raw);
+        if (DSP.test(raw)) {
+            findings.push({
+                id: 'F008-04',
+                title: '--dangerously-skip-permissions detected in settings',
+                description: 'This flag bypasses all permission checks. Real-world case: rm -rf / execution risk.',
+                severity: 'critical',
+                tier: 'pro',
+                category: 'environment',
+                remediation: 'Remove --dangerously-skip-permissions from ' + s.filePath,
+                evidence: s.filePath,
+            });
+        }
+    }
+    // Check .env files
+    for (const envFile of envFiles) {
+        if (!envFile.exists)
+            continue;
+        try {
+            const content = fs.readFileSync(envFile.filePath, 'utf-8');
+            if (DSP.test(content)) {
+                findings.push({
+                    id: 'F008-04',
+                    title: '--dangerously-skip-permissions in .env',
+                    description: 'Environment variable enables dangerous permission bypass.',
+                    severity: 'critical',
+                    tier: 'pro',
+                    category: 'environment',
+                    remediation: 'Remove the dangerously-skip-permissions variable from ' + envFile.filePath,
+                    evidence: envFile.filePath,
+                });
+            }
+        }
+        catch {
+            // ignore
+        }
+    }
+    // Check CLAUDE.md files
+    for (const file of instructionFiles) {
+        if (!file.exists)
+            continue;
+        try {
+            const raw = fs.readFileSync(file.filePath, 'utf-8');
+            // Strip code blocks so documented references don't trigger false positives
+            const content = stripCodeBlocks(raw);
+            if (DSP.test(content)) {
+                findings.push({
+                    id: 'F008-04',
+                    title: '--dangerously-skip-permissions referenced in CLAUDE.md',
+                    description: 'Instruction file references dangerous permission bypass flag.',
+                    severity: 'critical',
+                    tier: 'pro',
+                    category: 'environment',
+                    remediation: 'Remove dangerously-skip-permissions references from ' + file.filePath,
+                    evidence: file.filePath,
+                });
+            }
+        }
+        catch {
+            // ignore
+        }
+    }
+    return findings;
+}
+// ─── F008-05: disableBypassPermissionsMode unconfigured ─────
+function checkF008_05_disableBypassMode(settings) {
+    // Check if any global settings have managed-settings with disableBypassPermissionsMode
+    const globalSettings = settings.filter((s) => !s.isProjectLevel && s.exists);
+    const hasProtection = globalSettings.some((s) => {
+        const managed = s.raw['managed-settings'] ?? s.raw.managedSettings;
+        if (typeof managed !== 'object' || managed === null)
+            return false;
+        return managed.disableBypassPermissionsMode === true;
+    });
+    if (!hasProtection && globalSettings.length > 0) {
+        return [{
+                id: 'F008-05',
+                title: 'disableBypassPermissionsMode not configured',
+                description: 'Enterprise protection missing. No centralized policy prevents bypass mode activation.',
+                severity: 'medium',
+                tier: 'pro',
+                category: 'environment',
+                remediation: 'Add "managed-settings": { "disableBypassPermissionsMode": true } to global settings.json',
+            }];
+    }
+    return [];
+}
+// ─── F008-06: Excessive tool allowance ──────────────────────
+function checkF008_06_excessiveToolAllowance(settings) {
+    const findings = [];
+    for (const s of settings) {
+        if (!s.exists)
+            continue;
+        const allowed = s.raw.allowedTools;
+        if (!Array.isArray(allowed))
+            continue;
+        // Check for wildcards or dangerous tools
+        const dangerousFound = allowed.filter((tool) => typeof tool === 'string' && DANGEROUS_TOOL_PATTERNS.some((p) => tool === p || tool.includes('*')));
+        if (dangerousFound.length > 0) {
+            findings.push({
+                id: 'F008-06',
+                title: 'Dangerous tools in allowedTools',
+                description: `Wildcard or dangerous tools allowed: ${dangerousFound.join(', ')}. Principle of least privilege violation.`,
+                severity: 'medium',
+                tier: 'pro',
+                category: 'environment',
+                remediation: 'Remove wildcards and restrict allowedTools to specific, needed tools in ' + s.filePath,
+                evidence: `${s.filePath}: allowedTools includes ${dangerousFound.join(', ')}`,
+            });
+        }
+        if (allowed.length > EXCESSIVE_TOOL_THRESHOLD) {
+            findings.push({
+                id: 'F008-06',
+                title: 'Excessive number of allowed tools',
+                description: `${allowed.length} tools allowed without restriction. Consider reducing to minimum necessary.`,
+                severity: 'medium',
+                tier: 'pro',
+                category: 'environment',
+                remediation: `Reduce allowedTools list in ${s.filePath} to only necessary tools (currently ${allowed.length})`,
+                evidence: `${s.filePath}: ${allowed.length} tools allowed`,
+            });
+        }
+    }
+    return findings;
+}
+// ─── F008-07: Permission mode verification ──────────────────
+function checkF008_07_permissionMode(settings) {
+    const findings = [];
+    for (const s of settings) {
+        if (!s.exists)
+            continue;
+        const mode = s.raw.permissionMode ?? s.raw.permission_mode;
+        if (typeof mode === 'string' && (mode === 'auto' || mode === 'auto-accept' || mode === 'yolo')) {
+            findings.push({
+                id: 'F008-07',
+                title: 'Auto-accept permission mode active',
+                description: 'Operations run without human review. Permission prompts are automatically accepted.',
+                severity: 'medium',
+                tier: 'pro',
+                category: 'environment',
+                remediation: 'Set permissionMode to "prompt" or remove it (default is prompt) in ' + s.filePath,
+                evidence: `${s.filePath}: permissionMode=${mode}`,
+            });
+        }
+    }
+    return findings;
+}
+// ─── F008-08: .claude/ directory permissions ────────────────
+function checkF008_08_directoryPermissions(projectDir) {
+    const claudeDir = path.join(projectDir, '.claude');
+    if (!fs.existsSync(claudeDir))
+        return [];
+    // On Unix-like systems, check if others have write permission
+    if (process.platform !== 'win32') {
+        try {
+            const stats = fs.statSync(claudeDir);
+            const mode = stats.mode;
+            // Check "others" write bit (0o002) and "group" write bit (0o020)
+            const othersWrite = (mode & 0o002) !== 0;
+            const groupWrite = (mode & 0o020) !== 0;
+            if (othersWrite || groupWrite) {
+                return [{
+                        id: 'F008-08',
+                        title: '.claude/ directory is writable by other users',
+                        description: 'Privilege escalation possible. Other users can modify Claude Code configuration.',
+                        severity: 'low',
+                        tier: 'pro',
+                        category: 'environment',
+                        remediation: `Run: chmod 700 ${claudeDir}`,
+                        evidence: `${claudeDir}: mode=${mode.toString(8)}`,
+                    }];
+            }
+        }
+        catch {
+            // ignore stat errors
+        }
+    }
+    return [];
+}
+// ─── F008-09: Project-level setting override ────────────────
+function checkF008_09_projectOverride(settings) {
+    const findings = [];
+    const globalSettings = settings.filter((s) => !s.isProjectLevel && s.exists);
+    const projectSettings = settings.filter((s) => s.isProjectLevel && s.exists);
+    if (globalSettings.length === 0 || projectSettings.length === 0)
+        return [];
+    for (const ps of projectSettings) {
+        // Check if project weakens security relative to global
+        // Case 1: Project enables bypassPermissions while global doesn't
+        if (ps.raw.bypassPermissions === true) {
+            const globalHasIt = globalSettings.some((g) => g.raw.bypassPermissions === true);
+            if (!globalHasIt) {
+                findings.push({
+                    id: 'F008-09',
+                    title: 'Project settings weaken global security',
+                    description: 'Project enables bypassPermissions while global settings do not. CVE-2025-59536 attack pattern.',
+                    severity: 'medium',
+                    tier: 'pro',
+                    category: 'environment',
+                    remediation: 'Remove bypassPermissions from project-level ' + ps.filePath,
+                    evidence: `${ps.filePath} overrides global: bypassPermissions=true`,
+                });
+            }
+        }
+        // Case 2: Project has more allowed tools than global
+        const projectAllowed = Array.isArray(ps.raw.allowedTools) ? ps.raw.allowedTools : [];
+        for (const gs of globalSettings) {
+            const globalAllowed = Array.isArray(gs.raw.allowedTools) ? gs.raw.allowedTools : [];
+            if (projectAllowed.length > 0 && projectAllowed.length > globalAllowed.length + 5) {
+                findings.push({
+                    id: 'F008-09',
+                    title: 'Project allows significantly more tools than global',
+                    description: `Project allows ${projectAllowed.length} tools vs global ${globalAllowed.length}. Settings downgrade risk.`,
+                    severity: 'medium',
+                    tier: 'pro',
+                    category: 'environment',
+                    remediation: 'Review and reduce allowedTools in project-level ' + ps.filePath,
+                    evidence: `${ps.filePath}: ${projectAllowed.length} tools vs global ${globalAllowed.length}`,
+                });
+                break;
+            }
+        }
+        // Case 3: Project sets auto-accept permission mode while global doesn't
+        const pMode = ps.raw.permissionMode ?? ps.raw.permission_mode;
+        if (typeof pMode === 'string' && (pMode === 'auto' || pMode === 'auto-accept' || pMode === 'yolo')) {
+            const globalAutoAccept = globalSettings.some((g) => {
+                const gMode = g.raw.permissionMode ?? g.raw.permission_mode;
+                return typeof gMode === 'string' && (gMode === 'auto' || gMode === 'auto-accept' || gMode === 'yolo');
+            });
+            if (!globalAutoAccept) {
+                findings.push({
+                    id: 'F008-09',
+                    title: 'Project enables auto-accept while global uses prompt mode',
+                    description: 'Project overrides global permission mode to auto-accept. Settings downgrade risk.',
+                    severity: 'medium',
+                    tier: 'pro',
+                    category: 'environment',
+                    remediation: 'Remove permissionMode override from project-level ' + ps.filePath,
+                    evidence: `${ps.filePath}: permissionMode=${pMode} overrides global`,
+                });
+            }
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=environment.js.map

package/dist/auditor/checks/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../../src/auditor/checks/environment.ts"],"names":[],"mappings":";AAAA,gEAAgE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDhE,4CAmBC;AAtED,4CAA8B;AAC9B,gDAAkC;AAIlC,+DAA+D;AAE/D;;;;GAIG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,+DAA+D;AAC/D,MAAM,iBAAiB,GAAG;IACxB,2BAA2B;IAC3B,4BAA4B;CAC7B,CAAC;AAEF,+DAA+D;AAC/D,MAAM,kBAAkB,GAAG;IACzB,+CAA+C;IAC/C,gDAAgD;IAChD,iCAAiC;IACjC,iCAAiC;IACjC,0BAA0B;IAC1B,+BAA+B;IAC/B,qCAAqC;IACrC,iCAAiC;IACjC,yCAAyC;IACzC,6CAA6C;IAC7C,mBAAmB;IACnB,qBAAqB;CACtB,CAAC;AAEF,+DAA+D;AAC/D,MAAM,uBAAuB,GAAG;IAC9B,GAAG,EAAY,uBAAuB;IACtC,MAAM,EAAS,qBAAqB;IACpC,OAAO,EAAQ,aAAa;IAC5B,MAAM,EAAS,YAAY;CAC5B,CAAC;AAEF,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC;;GAEG;AACH,SAAgB,gBAAgB,CAC9B,QAAwB,EACxB,QAAuB,EACvB,gBAAuC,EACvC,UAAkB;IAElB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,QAAQ,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,CAAC,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,CAAC,GAAG,8BAA8B,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACnE,QAAQ,CAAC,IAAI,CAAC,GAAG,uCAAuC,CAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAChG,QAAQ,CAAC,IAAI,CAAC,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,CAAC,GAAG,mCAAmC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,IAAI,CAAC,GAAG,iCAAiC,CAAC,UAAU,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEzD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,SAAS,oBAAoB,CAC3B,QAAwB,EACxB,QAAuB;IAEvB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,0CAA0C;IAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,SAAS;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAC9D,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;oBACxD,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7D,QAAQ,CAAC,IAAI,CAAC;4BACZ,EAAE,EAAE,SAAS;4BACb,KAAK,EAAE,6CAA6C;4BACpD,WAAW,EAAE,uCAAuC,GAAG,iDAAiD;4BACxG,QAAQ,EAAE,UAAU;4BACpB,IAAI,EAAE,MAAM;4BACZ,QAAQ,EAAE,aAAa;4BACvB,WAAW,EAAE,4EAA4E;4BACzF,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,wBAAwB,GAAG,EAAE;yBAC3D,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,GAA0C,CAAC;QAC7D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC;YACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,SAAS;oBACb,KAAK,EAAE,yDAAyD;oBAChE,WAAW,EAAE,0CAA0C,OAAO,8BAA8B;oBAC5F,QAAQ,EAAE,UAAU;oBACpB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,aAAa;oBACvB,WAAW,EAAE,0DAA0D;oBACvE,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,4BAA4B,OAAO,EAAE;iBAC7D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,SAAS,8BAA8B,CAAC,QAAwB;IAC9D,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,SAAS;QACxB,IAAI,CAAC,CAAC,GAAG,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,8BAA8B;gBACrC,WAAW,EAAE,sFAAsF;gBACnG,QAAQ,EAAE,UAAU;gBACpB,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,aAAa;gBACvB,WAAW,EAAE,oCAAoC,GAAG,CAAC,CAAC,QAAQ;gBAC9D,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,0BAA0B;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,SAAS,8BAA8B,CACrC,gBAAuC;IAEvC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAS;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpD,yEAAyE;YACzE,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,eAAe,GAAa,EAAE,CAAC;YAErC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1B,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,SAAS;oBACb,KAAK,EAAE,uCAAuC;oBAC9C,WAAW,EAAE,0CAA0C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,eAAe,CAAC,MAAM,+BAA+B;oBAC7I,QAAQ,EAAE,UAAU;oBACpB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,aAAa;oBACvB,WAAW,EAAE,8FAA8F;oBAC3G,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,aAAa,eAAe,CAAC,MAAM,aAAa;iBAC3E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,yEAAyE;AACzE,iEAAiE;AACjE,SAAS,uCAAuC,CAC9C,QAAwB,EACxB,QAAuB,EACvB,gBAAuC;IAEvC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,2CAA2C,CAAC;IAExD,kCAAkC;IAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,qDAAqD;gBAC5D,WAAW,EAAE,qFAAqF;gBAClG,QAAQ,EAAE,UAAU;gBACpB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,aAAa;gBACvB,WAAW,EAAE,6CAA6C,GAAG,CAAC,CAAC,QAAQ;gBACvE,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,SAAS;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC3D,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,SAAS;oBACb,KAAK,EAAE,wCAAwC;oBAC/C,WAAW,EAAE,2DAA2D;oBACxE,QAAQ,EAAE,UAAU;oBACpB,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,aAAa;oBACvB,WAAW,EAAE,wDAAwD,GAAG,OAAO,CAAC,QAAQ;oBACxF,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAS;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpD,2EAA2E;YAC3E,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,SAAS;oBACb,KAAK,EAAE,wDAAwD;oBAC/D,WAAW,EAAE,+DAA+D;oBAC5E,QAAQ,EAAE,UAAU;oBACpB,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,aAAa;oBACvB,WAAW,EAAE,sDAAsD,GAAG,IAAI,CAAC,QAAQ;oBACnF,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,SAAS,8BAA8B,CAAC,QAAwB;IAC9D,uFAAuF;IACvF,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;QACnE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClE,OAAQ,OAAmC,CAAC,4BAA4B,KAAK,IAAI,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,aAAa,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC;gBACN,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,6CAA6C;gBACpD,WAAW,EAAE,uFAAuF;gBACpG,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,aAAa;gBACvB,WAAW,EAAE,0FAA0F;aACxG,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,+DAA+D;AAC/D,SAAS,mCAAmC,CAAC,QAAwB;IACnE,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,SAAS;QACxB,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAEtC,yCAAyC;QACzC,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC7C,OAAO,IAAI,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAClG,CAAC;QAEF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,iCAAiC;gBACxC,WAAW,EAAE,wCAAwC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,2CAA2C;gBACzH,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,aAAa;gBACvB,WAAW,EAAE,0EAA0E,GAAG,CAAC,CAAC,QAAQ;gBACpG,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,2BAA2B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC9E,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,mCAAmC;gBAC1C,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,6EAA6E;gBAC3G,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,aAAa;gBACvB,WAAW,EAAE,+BAA+B,CAAC,CAAC,QAAQ,uCAAuC,OAAO,CAAC,MAAM,GAAG;gBAC9G,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,MAAM,gBAAgB;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,SAAS,2BAA2B,CAAC,QAAwB;IAC3D,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,SAAS;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;QAC3D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;YAC/F,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,oCAAoC;gBAC3C,WAAW,EAAE,qFAAqF;gBAClG,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,aAAa;gBACvB,WAAW,EAAE,qEAAqE,GAAG,CAAC,CAAC,QAAQ;gBAC/F,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,oBAAoB,IAAI,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+DAA+D;AAC/D,SAAS,iCAAiC,CAAC,UAAkB;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAEnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,8DAA8D;IAC9D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACxB,iEAAiE;YACjE,MAAM,WAAW,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,IAAI,WAAW,IAAI,UAAU,EAAE,CAAC;gBAC9B,OAAO,CAAC;wBACN,EAAE,EAAE,SAAS;wBACb,KAAK,EAAE,+CAA+C;wBACtD,WAAW,EAAE,kFAAkF;wBAC/F,QAAQ,EAAE,KAAK;wBACf,IAAI,EAAE,KAAK;wBACX,QAAQ,EAAE,aAAa;wBACvB,WAAW,EAAE,kBAAkB,SAAS,EAAE;wBAC1C,QAAQ,EAAE,GAAG,SAAS,UAAU,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;qBACnD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,+DAA+D;AAC/D,SAAS,4BAA4B,CAAC,QAAwB;IAC5D,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;IAE7E,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3E,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;QACjC,uDAAuD;QACvD,iEAAiE;QACjE,IAAI,EAAE,CAAC,GAAG,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;YACtC,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC;YACjF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,SAAS;oBACb,KAAK,EAAE,yCAAyC;oBAChD,WAAW,EAAE,gGAAgG;oBAC7G,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,aAAa;oBACvB,WAAW,EAAE,8CAA8C,GAAG,EAAE,CAAC,QAAQ;oBACzE,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,2CAA2C;iBACpE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAChC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClF,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,SAAS;oBACb,KAAK,EAAE,qDAAqD;oBAC5D,WAAW,EAAE,kBAAkB,cAAc,CAAC,MAAM,oBAAoB,aAAa,CAAC,MAAM,4BAA4B;oBACxH,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,aAAa;oBACvB,WAAW,EAAE,kDAAkD,GAAG,EAAE,CAAC,QAAQ;oBAC7E,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,KAAK,cAAc,CAAC,MAAM,oBAAoB,aAAa,CAAC,MAAM,EAAE;iBAC7F,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC;QAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,MAAM,CAAC,EAAE,CAAC;YACnG,MAAM,gBAAgB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;gBAC5D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC;YACxG,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,SAAS;oBACb,KAAK,EAAE,2DAA2D;oBAClE,WAAW,EAAE,mFAAmF;oBAChG,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,aAAa;oBACvB,WAAW,EAAE,oDAAoD,GAAG,EAAE,CAAC,QAAQ;oBAC/E,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,oBAAoB,KAAK,mBAAmB;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/auditor/checks/hooks.d.ts

@@ -0,0 +1,13 @@
+import type { AuditFinding } from '../../types/audit.js';
+import type { HookConfig, ToolSettings } from '../providers/types.js';
+interface CheckContext {
+    hooks: HookConfig[];
+    settings: ToolSettings[];
+}
+/**
+ * Run all F009 hooks checks and return findings.
+ * All F009 findings are tier: 'pro' (hidden from Free users entirely).
+ */
+export declare function checkHooks(ctx: CheckContext): AuditFinding[];
+export {};
+//# sourceMappingURL=hooks.d.ts.map

package/dist/auditor/checks/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../../src/auditor/checks/hooks.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAwEtE,UAAU,YAAY;IACpB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,YAAY,GAAG,YAAY,EAAE,CAe5D"}