synapsexcoder 6.0.0

package/dist/security/sarif-exporter.js

@@ -0,0 +1,216 @@
+/**
+ * SARIF Exporter — Converts audit findings to SARIF format
+ *
+ * SARIF (Static Analysis Results Interchange Format) is an OASIS
+ * standard for static analysis tool output. This generates
+ * SARIF v2.1.0 compliant JSON.
+ */
+import { writeFileSync, mkdirSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { BUILTIN_RULES } from "./audit-rules.js";
+// ============================================================================
+// SARIF Level Mapping
+// ============================================================================
+const SEVERITY_TO_SARIF_LEVEL = {
+    critical: "error",
+    high: "error",
+    medium: "warning",
+    low: "note",
+    info: "note",
+};
+// ============================================================================
+// SARIF Exporter
+// ============================================================================
+export class SarifExporter {
+    toolName;
+    toolVersion;
+    informationUri;
+    constructor(options) {
+        this.toolName = options?.toolName ?? "SynapseXcoder Security Auditor";
+        this.toolVersion = options?.toolVersion ?? "1.0.0";
+        this.informationUri =
+            options?.informationUri ?? "https://github.com/DuckyOnQuack-999/SynapseXcoder";
+    }
+    // ─── Export ──────────────────────────────────────────────────────────────
+    /**
+     * Convert an audit result to SARIF JSON string
+     */
+    toSarifJson(result) {
+        const sarifLog = this.buildSarifLog(result);
+        return JSON.stringify(sarifLog, null, 2);
+    }
+    /**
+     * Write SARIF output to a file
+     */
+    writeToFile(result, filePath) {
+        const json = this.toSarifJson(result);
+        const resolvedPath = resolve(filePath);
+        mkdirSync(dirname(resolvedPath), { recursive: true });
+        writeFileSync(resolvedPath, json, "utf-8");
+    }
+    // ─── SARIF Builder ──────────────────────────────────────────────────────
+    buildSarifLog(result) {
+        const rules = this.buildSarifRules(result);
+        return {
+            $schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
+            version: "2.1.0",
+            runs: [
+                {
+                    tool: {
+                        driver: {
+                            name: this.toolName,
+                            version: this.toolVersion,
+                            informationUri: this.informationUri,
+                            rules,
+                        },
+                    },
+                    results: this.buildSarifResults(result),
+                    invocations: [
+                        {
+                            executionSuccessful: result.errors.length === 0,
+                            startTimeUtc: new Date(result.timestamp).toISOString(),
+                            endTimeUtc: new Date(result.timestamp + result.duration).toISOString(),
+                        },
+                    ],
+                    properties: {
+                        totalFiles: result.totalFiles,
+                        totalFindings: result.totalFindings,
+                    },
+                },
+            ],
+        };
+    }
+    buildSarifRules(result) {
+        const ruleIds = new Set(result.findings.map((f) => f.ruleId));
+        return Array.from(ruleIds).map((ruleId) => {
+            const rule = BUILTIN_RULES.find((r) => r.id === ruleId);
+            return {
+                id: ruleId,
+                name: rule?.title ?? ruleId,
+                shortDescription: {
+                    text: rule?.description ?? "No description",
+                },
+                fullDescription: {
+                    text: rule?.description ?? "No description",
+                },
+                helpUri: rule
+                    ? `https://cwe.mitre.org/data/definitions/${rule.cwe[0]?.replace("CWE-", "")}.html`
+                    : undefined,
+                properties: {
+                    category: rule?.category ?? "unknown",
+                    severity: rule?.severity ?? "info",
+                    cwe: rule?.cwe ?? [],
+                    precision: rule
+                        ? rule.confidence > 0.7
+                            ? "high"
+                            : rule.confidence > 0.4
+                                ? "medium"
+                                : "low"
+                        : "low",
+                },
+            };
+        });
+    }
+    buildSarifResults(result) {
+        const ruleIndexMap = this.buildRuleIndexMap(result);
+        return result.findings.map((f) => {
+            const locations = [
+                {
+                    physicalLocation: {
+                        artifactLocation: {
+                            uri: f.location.file,
+                        },
+                        region: {
+                            startLine: f.location.line,
+                            startColumn: f.location.column,
+                            snippet: f.location.snippet
+                                ? { text: f.location.snippet }
+                                : undefined,
+                        },
+                    },
+                },
+            ];
+            return {
+                ruleId: f.ruleId,
+                ruleIndex: ruleIndexMap.get(f.ruleId) ?? 0,
+                level: SEVERITY_TO_SARIF_LEVEL[f.severity] ?? "warning",
+                message: { text: f.message },
+                locations,
+                properties: {
+                    category: f.category,
+                    confidence: f.confidence,
+                },
+            };
+        });
+    }
+    buildRuleIndexMap(result) {
+        const ruleIds = Array.from(new Set(result.findings.map((f) => f.ruleId)));
+        const map = new Map();
+        ruleIds.forEach((id, index) => map.set(id, index));
+        return map;
+    }
+    // ─── Summary Export ──────────────────────────────────────────────────────
+    /**
+     * Export a human-readable markdown summary
+     */
+    toMarkdown(result) {
+        const s = result.summary;
+        let md = `# Security Audit Report\n\n`;
+        md += `**Audit ID:** ${result.id}\n`;
+        md += `**Date:** ${new Date(result.timestamp).toISOString()}\n`;
+        md += `**Duration:** ${result.duration}ms\n`;
+        md += `**Files Scanned:** ${result.totalFiles}\n`;
+        md += `**Findings:** ${result.totalFindings}\n\n`;
+        if (result.totalFindings === 0) {
+            md += "## ✅ No Vulnerabilities Found\n\n";
+            md += "The audit completed successfully with no security findings.\n";
+            return md;
+        }
+        md += "## Summary by Severity\n\n";
+        md += "| Severity | Count |\n|----------|-------|\n";
+        for (const sev of ["critical", "high", "medium", "low", "info"]) {
+            if (s.bySeverity[sev] > 0) {
+                md += `| **${sev}** | ${s.bySeverity[sev]} |\n`;
+            }
+        }
+        md += "\n";
+        md += "## Summary by Category\n\n";
+        md += "| Category | Count |\n|----------|-------|\n";
+        for (const [cat, count] of Object.entries(s.byCategory).sort(([, a], [, b]) => b - a)) {
+            md += `| ${cat} | ${count} |\n`;
+        }
+        md += "\n";
+        md += "## Findings\n\n";
+        for (const f of result.findings) {
+            const level = f.severity === "critical" || f.severity === "high"
+                ? "⚠️"
+                : "🔍";
+            md += `### ${level} [${f.ruleId}] ${f.title}\n\n`;
+            md += `- **Severity:** ${f.severity}\n`;
+            md += `- **File:** \`${f.location.file}\` (line ${f.location.line})\n`;
+            md += `- **Category:** ${f.category}\n`;
+            md += `- **CWE:** ${f.cwe?.join(", ") ?? "N/A"}\n`;
+            md += `- **Confidence:** ${(f.confidence * 100).toFixed(0)}%\n\n`;
+            md += `${f.description}\n\n`;
+            if (f.location.snippet) {
+                md += "```\n" + f.location.snippet + "\n```\n\n";
+            }
+            md += `**Remediation:** ${f.remediation}\n\n`;
+            md += "---\n\n";
+        }
+        if (result.errors.length > 0) {
+            md += "## Errors\n\n";
+            for (const err of result.errors) {
+                md += `- ${err}\n`;
+            }
+        }
+        return md;
+    }
+}
+// ============================================================================
+// Factory
+// ============================================================================
+export function createSarifExporter(options) {
+    return new SarifExporter(options);
+}
+//# sourceMappingURL=sarif-exporter.js.map

package/dist/security/sarif-exporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif-exporter.js","sourceRoot":"","sources":["../../src/security/sarif-exporter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAW7C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,MAAM,uBAAuB,GAA6B;IACxD,QAAQ,EAAE,OAAO;IACjB,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,MAAM;IACX,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,OAAO,aAAa;IACP,QAAQ,CAAS;IACjB,WAAW,CAAS;IACpB,cAAc,CAAS;IAExC,YAAY,OAIX;QACC,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,gCAAgC,CAAC;QACtE,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,OAAO,CAAC;QACnD,IAAI,CAAC,cAAc;YACjB,OAAO,EAAE,cAAc,IAAI,mDAAmD,CAAC;IACnF,CAAC;IAED,4EAA4E;IAE5E;;OAEG;IACH,WAAW,CAAC,MAAmB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,MAAmB,EAAE,QAAgB;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,2EAA2E;IAEnE,aAAa,CAAC,MAAmB;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAE3C,OAAO;YACL,OAAO,EACL,gGAAgG;YAClG,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE;gBACJ;oBACE,IAAI,EAAE;wBACJ,MAAM,EAAE;4BACN,IAAI,EAAE,IAAI,CAAC,QAAQ;4BACnB,OAAO,EAAE,IAAI,CAAC,WAAW;4BACzB,cAAc,EAAE,IAAI,CAAC,cAAc;4BACnC,KAAK;yBACN;qBACF;oBACD,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;oBACvC,WAAW,EAAE;wBACX;4BACE,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;4BAC/C,YAAY,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;4BACtD,UAAU,EAAE,IAAI,IAAI,CAClB,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CACnC,CAAC,WAAW,EAAE;yBAChB;qBACF;oBACD,UAAU,EAAE;wBACV,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;qBACpC;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,MAAmB;QACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CACrC,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACxC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;YACxD,OAAO;gBACL,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,MAAM;gBAC3B,gBAAgB,EAAE;oBAChB,IAAI,EAAE,IAAI,EAAE,WAAW,IAAI,gBAAgB;iBAC5C;gBACD,eAAe,EAAE;oBACf,IAAI,EAAE,IAAI,EAAE,WAAW,IAAI,gBAAgB;iBAC5C;gBACD,OAAO,EAAE,IAAI;oBACX,CAAC,CAAC,0CAA0C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO;oBACnF,CAAC,CAAC,SAAS;gBACb,UAAU,EAAE;oBACV,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,SAAS;oBACrC,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,MAAM;oBAClC,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE;oBACpB,SAAS,EAAE,IAAI;wBACb,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG;4BACrB,CAAC,CAAC,MAAM;4BACR,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG;gCACrB,CAAC,CAAC,QAAQ;gCACV,CAAC,CAAC,KAAK;wBACX,CAAC,CAAC,KAAK;iBACV;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CAAC,MAAmB;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAEpD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/B,MAAM,SAAS,GAAoB;gBACjC;oBACE,gBAAgB,EAAE;wBAChB,gBAAgB,EAAE;4BAChB,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI;yBACrB;wBACD,MAAM,EAAE;4BACN,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI;4BAC1B,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM;4BAC9B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO;gCACzB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE;gCAC9B,CAAC,CAAC,SAAS;yBACd;qBACF;iBACF;aACF,CAAC;YAEF,OAAO;gBACL,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;gBAC1C,KAAK,EAAE,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,SAAS;gBACvD,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;gBAC5B,SAAS;gBACT,UAAU,EAAE;oBACV,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;iBACzB;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CACvB,MAAmB;QAEnB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CACxB,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAC9C,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,4EAA4E;IAE5E;;OAEG;IACH,UAAU,CAAC,MAAmB;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QAEzB,IAAI,EAAE,GAAG,6BAA6B,CAAC;QACvC,EAAE,IAAI,iBAAiB,MAAM,CAAC,EAAE,IAAI,CAAC;QACrC,EAAE,IAAI,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC;QAChE,EAAE,IAAI,iBAAiB,MAAM,CAAC,QAAQ,MAAM,CAAC;QAC7C,EAAE,IAAI,sBAAsB,MAAM,CAAC,UAAU,IAAI,CAAC;QAClD,EAAE,IAAI,iBAAiB,MAAM,CAAC,aAAa,MAAM,CAAC;QAElD,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;YAC/B,EAAE,IAAI,mCAAmC,CAAC;YAC1C,EAAE,IAAI,+DAA+D,CAAC;YACtE,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,EAAE,IAAI,4BAA4B,CAAC;QACnC,EAAE,IAAI,8CAA8C,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAe,EAAE,CAAC;YAC9E,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,EAAE,IAAI,OAAO,GAAG,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;YAClD,CAAC;QACH,CAAC;QACD,EAAE,IAAI,IAAI,CAAC;QAEX,EAAE,IAAI,4BAA4B,CAAC;QACnC,EAAE,IAAI,8CAA8C,CAAC;QACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,CAAC,CAAC,UAAU,CACb,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAChC,EAAE,IAAI,KAAK,GAAG,MAAM,KAAK,MAAM,CAAC;QAClC,CAAC;QACD,EAAE,IAAI,IAAI,CAAC;QAEX,EAAE,IAAI,iBAAiB,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,GACT,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;gBAChD,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC;YACX,EAAE,IAAI,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC;YAClD,EAAE,IAAI,mBAAmB,CAAC,CAAC,QAAQ,IAAI,CAAC;YACxC,EAAE,IAAI,iBAAiB,CAAC,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;YACvE,EAAE,IAAI,mBAAmB,CAAC,CAAC,QAAQ,IAAI,CAAC;YACxC,EAAE,IAAI,cAAc,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;YACnD,EAAE,IAAI,qBAAqB,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YAClE,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,MAAM,CAAC;YAC7B,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACvB,EAAE,IAAI,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,WAAW,CAAC;YACnD,CAAC;YACD,EAAE,IAAI,oBAAoB,CAAC,CAAC,WAAW,MAAM,CAAC;YAC9C,EAAE,IAAI,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,EAAE,IAAI,eAAe,CAAC;YACtB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChC,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,UAAU,mBAAmB,CACjC,OAAwD;IAExD,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC"}

package/dist/security/security-auditor.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Security Auditor — Scans codebase files for vulnerabilities
+ *
+ * Applies built-in audit rules to source files and produces
+ * structured findings compatible with SARIF export.
+ */
+import type { AuditOptions, AuditResult, AuditRule } from "./security-types.js";
+export declare class SecurityAuditor {
+    private rules;
+    private excludePatterns;
+    constructor(rules?: AuditRule[], excludePatterns?: RegExp[]);
+    /**
+     * Run a security audit on the specified paths
+     */
+    audit(options?: AuditOptions): AuditResult;
+    private collectFiles;
+    private collectDir;
+    private shouldInclude;
+    private isExcluded;
+    private scanFile;
+    private normalizePath;
+    private buildSummary;
+    /**
+     * Get readable summary text
+     */
+    formatSummary(result: AuditResult): string;
+    private severityTag;
+}
+export declare function createAuditor(rules?: AuditRule[]): SecurityAuditor;
+//# sourceMappingURL=security-auditor.d.ts.map

package/dist/security/security-auditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-auditor.d.ts","sourceRoot":"","sources":["../../src/security/security-auditor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EAMX,SAAS,EACV,MAAM,qBAAqB,CAAC;AA8B7B,qBAAa,eAAe;IAC1B,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,eAAe,CAAW;gBAEtB,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,eAAe,CAAC,EAAE,MAAM,EAAE;IAO3D;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW;IA6D1C,OAAO,CAAC,YAAY;IA2BpB,OAAO,CAAC,UAAU;IA6BlB,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,UAAU;IAYlB,OAAO,CAAC,QAAQ;IAqEhB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,YAAY;IAgCpB;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM;IAkD1C,OAAO,CAAC,WAAW;CAUpB;AAMD,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,eAAe,CAElE"}

package/dist/security/security-auditor.js

@@ -0,0 +1,295 @@
+/**
+ * Security Auditor — Scans codebase files for vulnerabilities
+ *
+ * Applies built-in audit rules to source files and produces
+ * structured findings compatible with SARIF export.
+ */
+import { readFileSync, statSync } from "node:fs";
+import { readdirSync } from "node:fs";
+import { join, relative, resolve, extname } from "node:path";
+import { v4 as uuidv4 } from "uuid";
+import { BUILTIN_RULES } from "./audit-rules.js";
+import { meetsThreshold, } from "./audit-rules.js";
+// ============================================================================
+// Default Configuration
+// ============================================================================
+const DEFAULT_EXCLUDE_PATTERNS = [
+    /node_modules[/\\]/,
+    /\.git[/\\]/,
+    /dist[/\\]/,
+    /\.next[/\\]/,
+    /coverage[/\\]/,
+    /\..*\.(swp|swo)/,
+    /\.DS_Store/,
+    /yarn\.lock/,
+    /package-lock\.json/,
+];
+const TEXT_EXTENSIONS = new Set([
+    ".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs",
+    ".json", ".yaml", ".yml", ".md", ".html", ".css",
+    ".sh", ".bash", ".zsh", ".env",
+    ".py", ".rb", ".go", ".java", ".rs",
+    ".vue", ".svelte", ".astro",
+]);
+// ============================================================================
+// Security Auditor
+// ============================================================================
+export class SecurityAuditor {
+    rules;
+    excludePatterns;
+    constructor(rules, excludePatterns) {
+        this.rules = rules ?? BUILTIN_RULES;
+        this.excludePatterns = excludePatterns ?? DEFAULT_EXCLUDE_PATTERNS;
+    }
+    // ─── Main Audit ─────────────────────────────────────────────────────────
+    /**
+     * Run a security audit on the specified paths
+     */
+    audit(options) {
+        const startTime = Date.now();
+        const errors = [];
+        const findings = [];
+        const scanPaths = options?.paths ?? [process.cwd()];
+        const excludePatterns = options?.excludePatterns
+            ? options.excludePatterns.map((p) => new RegExp(p))
+            : this.excludePatterns;
+        const skipRuleSet = new Set(options?.skipRules ?? []);
+        const activeRules = this.rules.filter((r) => !skipRuleSet.has(r.id));
+        // Collect files
+        const files = this.collectFiles(scanPaths, excludePatterns, errors);
+        // Scan each file
+        const maxFindings = options?.maxFindings ?? 500;
+        const threshold = options?.severityThreshold ?? "info";
+        for (const file of files) {
+            if (findings.length >= maxFindings) {
+                errors.push(`Reached maximum findings limit (${maxFindings})`);
+                break;
+            }
+            try {
+                const content = readFileSync(file, "utf-8");
+                const fileFindings = this.scanFile(file, content, activeRules, threshold, maxFindings - findings.length);
+                findings.push(...fileFindings);
+            }
+            catch (err) {
+                errors.push(`Failed to read ${file}: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        const duration = Date.now() - startTime;
+        return {
+            id: uuidv4(),
+            timestamp: startTime,
+            duration,
+            totalFiles: files.length,
+            totalFindings: findings.length,
+            findings,
+            summary: this.buildSummary(findings),
+            errors,
+        };
+    }
+    // ─── File Collection ────────────────────────────────────────────────────
+    collectFiles(paths, excludePatterns, errors) {
+        const files = [];
+        for (const scanPath of paths) {
+            try {
+                const stats = statSync(scanPath);
+                if (stats.isFile()) {
+                    if (this.shouldInclude(scanPath, excludePatterns)) {
+                        files.push(scanPath);
+                    }
+                }
+                else if (stats.isDirectory()) {
+                    this.collectDir(scanPath, scanPath, files, excludePatterns, errors);
+                }
+            }
+            catch (err) {
+                errors.push(`Cannot access ${scanPath}: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        return files;
+    }
+    collectDir(root, dir, files, excludePatterns, errors) {
+        try {
+            const entries = readdirSync(dir, { withFileTypes: true });
+            for (const entry of entries) {
+                const fullPath = join(dir, entry.name);
+                if (this.isExcluded(fullPath, excludePatterns))
+                    continue;
+                if (entry.isFile()) {
+                    if (this.shouldInclude(fullPath, excludePatterns)) {
+                        files.push(fullPath);
+                    }
+                }
+                else if (entry.isDirectory()) {
+                    this.collectDir(root, fullPath, files, excludePatterns, errors);
+                }
+            }
+        }
+        catch (err) {
+            errors.push(`Cannot read directory ${dir}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    shouldInclude(filePath, excludePatterns) {
+        if (this.isExcluded(filePath, excludePatterns))
+            return false;
+        const ext = extname(filePath);
+        return TEXT_EXTENSIONS.has(ext);
+    }
+    isExcluded(filePath, excludePatterns) {
+        for (const pattern of excludePatterns) {
+            if (pattern.test(filePath))
+                return true;
+        }
+        return false;
+    }
+    // ─── File Scanning ──────────────────────────────────────────────────────
+    scanFile(filePath, content, rules, threshold, maxFindings) {
+        const findings = [];
+        const lines = content.split("\n");
+        for (const rule of rules) {
+            if (findings.length >= maxFindings)
+                break;
+            // Check file pattern filter
+            if (rule.filePattern &&
+                !rule.filePattern.test(filePath)) {
+                continue;
+            }
+            const regex = rule.pattern;
+            if (!regex)
+                continue;
+            // Scan line by line for this rule
+            for (let i = 0; i < lines.length; i++) {
+                if (findings.length >= maxFindings)
+                    break;
+                const line = lines[i];
+                const match = regex.exec(line);
+                if (!match)
+                    continue;
+                const severity = rule.severity;
+                if (!meetsThreshold(severity, threshold))
+                    continue;
+                const location = {
+                    file: this.normalizePath(filePath),
+                    line: i + 1,
+                    column: match.index + 1,
+                    snippet: line.trim().substring(0, 120),
+                };
+                findings.push({
+                    id: `${rule.id}-${uuidv4().substring(0, 8)}`,
+                    ruleId: rule.id,
+                    category: rule.category,
+                    severity,
+                    title: rule.title,
+                    description: rule.description,
+                    message: `${rule.title} found at ${location.file}:${location.line}`,
+                    location,
+                    remediation: rule.remediation,
+                    cwe: rule.cwe,
+                    confidence: rule.confidence,
+                });
+                // Continue in case the same line matches multiple times
+                // (reset lastIndex for global regex)
+                if (regex.global && regex.lastIndex > 0) {
+                    regex.lastIndex = 0;
+                }
+            }
+        }
+        return findings;
+    }
+    // ─── Helpers ────────────────────────────────────────────────────────────
+    normalizePath(filePath) {
+        const cwd = process.cwd();
+        const rel = relative(cwd, filePath);
+        return rel.startsWith("..") ? resolve(filePath) : rel;
+    }
+    buildSummary(findings) {
+        const bySeverity = {
+            critical: 0,
+            high: 0,
+            medium: 0,
+            low: 0,
+            info: 0,
+        };
+        const byCategory = {};
+        const byFile = {};
+        for (const f of findings) {
+            bySeverity[f.severity] = (bySeverity[f.severity] ?? 0) + 1;
+            byCategory[f.category] = (byCategory[f.category] ?? 0) + 1;
+            byFile[f.location.file] = (byFile[f.location.file] ?? 0) + 1;
+        }
+        return {
+            bySeverity,
+            byCategory,
+            byFile,
+            criticalCount: bySeverity.critical,
+            highCount: bySeverity.high,
+            mediumCount: bySeverity.medium,
+            lowCount: bySeverity.low,
+            infoCount: bySeverity.info,
+        };
+    }
+    // ─── Utility ─────────────────────────────────────────────────────────────
+    /**
+     * Get readable summary text
+     */
+    formatSummary(result) {
+        const s = result.summary;
+        let output = `Security Audit: ${result.id}\n`;
+        output += `Files scanned: ${result.totalFiles}\n`;
+        output += `Total findings: ${result.totalFindings}\n`;
+        output += `Duration: ${result.duration}ms\n`;
+        if (result.totalFindings > 0) {
+            output += "\nBy Severity:\n";
+            for (const sev of ["critical", "high", "medium", "low", "info"]) {
+                if (s.bySeverity[sev] > 0) {
+                    output += `  ${sev}: ${s.bySeverity[sev]}\n`;
+                }
+            }
+            output += "\nBy Category:\n";
+            for (const [cat, count] of Object.entries(s.byCategory)) {
+                output += `  ${cat}: ${count}\n`;
+            }
+            output += "\nTop Files:\n";
+            const topFiles = Object.entries(s.byFile)
+                .sort(([, a], [, b]) => b - a)
+                .slice(0, 5);
+            for (const [file, count] of topFiles) {
+                output += `  ${file}: ${count}\n`;
+            }
+            output += "\nFindings:\n";
+            for (const f of result.findings.slice(0, 20)) {
+                const sevTag = this.severityTag(f.severity);
+                output += `${sevTag} [${f.ruleId}] ${f.message}\n`;
+            }
+            if (result.findings.length > 20) {
+                output += `  ... and ${result.findings.length - 20} more\n`;
+            }
+        }
+        else {
+            output += "\nNo findings. Clean audit.\n";
+        }
+        if (result.errors.length > 0) {
+            output += `\nErrors: ${result.errors.length}\n`;
+            for (const err of result.errors.slice(0, 5)) {
+                output += `  ${err}\n`;
+            }
+        }
+        return output;
+    }
+    severityTag(severity) {
+        const tags = {
+            critical: "[CRITICAL]",
+            high: "[HIGH]",
+            medium: "[MEDIUM]",
+            low: "[LOW]",
+            info: "[INFO]",
+        };
+        return tags[severity];
+    }
+}
+// ============================================================================
+// Factory
+// ============================================================================
+export function createAuditor(rules) {
+    return new SecurityAuditor(rules);
+}
+//# sourceMappingURL=security-auditor.js.map

package/dist/security/security-auditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-auditor.js","sourceRoot":"","sources":["../../src/security/security-auditor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,cAAc,GAEf,MAAM,kBAAkB,CAAC;AAY1B,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,MAAM,wBAAwB,GAAG;IAC/B,mBAAmB;IACnB,YAAY;IACZ,WAAW;IACX,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,YAAY;IACZ,YAAY;IACZ,oBAAoB;CACrB,CAAC;AAEF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM;IAChD,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IAC9B,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;IACnC,MAAM,EAAE,SAAS,EAAE,QAAQ;CAC5B,CAAC,CAAC;AAEH,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,MAAM,OAAO,eAAe;IAClB,KAAK,CAAc;IACnB,eAAe,CAAW;IAElC,YAAY,KAAmB,EAAE,eAA0B;QACzD,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,aAAa,CAAC;QACpC,IAAI,CAAC,eAAe,GAAG,eAAe,IAAI,wBAAwB,CAAC;IACrE,CAAC;IAED,2EAA2E;IAE3E;;OAEG;IACH,KAAK,CAAC,OAAsB;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,MAAM,SAAS,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,MAAM,eAAe,GAAG,OAAO,EAAE,eAAe;YAC9C,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;QAEzB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9B,CAAC;QAEF,gBAAgB;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;QAEpE,iBAAiB;QACjB,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,GAAG,CAAC;QAChD,MAAM,SAAS,GAAG,OAAO,EAAE,iBAAiB,IAAI,MAAM,CAAC;QAEvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,QAAQ,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,mCAAmC,WAAW,GAAG,CAAC,CAAC;gBAC/D,MAAM;YACR,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAChC,IAAI,EACJ,OAAO,EACP,WAAW,EACX,SAAS,EACT,WAAW,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CACT,kBAAkB,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,OAAO;YACL,EAAE,EAAE,MAAM,EAAE;YACZ,SAAS,EAAE,SAAS;YACpB,QAAQ;YACR,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;YACpC,MAAM;SACP,CAAC;IACJ,CAAC;IAED,2EAA2E;IAEnE,YAAY,CAClB,KAAe,EACf,eAAyB,EACzB,MAAgB;QAEhB,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACjC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;oBACnB,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;wBAClD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACvB,CAAC;gBACH,CAAC;qBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC/B,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CACT,iBAAiB,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,UAAU,CAChB,IAAY,EACZ,GAAW,EACX,KAAe,EACf,eAAyB,EACzB,MAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAEvC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,eAAe,CAAC;oBAAE,SAAS;gBAEzD,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;oBACnB,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;wBAClD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACvB,CAAC;gBACH,CAAC;qBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,yBAAyB,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,aAAa,CACnB,QAAgB,EAChB,eAAyB;QAEzB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,eAAe,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAEO,UAAU,CAChB,QAAgB,EAChB,eAAyB;QAEzB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC1C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2EAA2E;IAEnE,QAAQ,CACd,QAAgB,EAChB,OAAe,EACf,KAAkB,EAClB,SAAiB,EACjB,WAAmB;QAEnB,MAAM,QAAQ,GAAsB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,QAAQ,CAAC,MAAM,IAAI,WAAW;gBAAE,MAAM;YAE1C,4BAA4B;YAC5B,IACE,IAAI,CAAC,WAAW;gBAChB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAChC,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;YAC3B,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,kCAAkC;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,IAAI,QAAQ,CAAC,MAAM,IAAI,WAAW;oBAAE,MAAM;gBAE1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,CAAC,KAAK;oBAAE,SAAS;gBAErB,MAAM,QAAQ,GAAa,IAAI,CAAC,QAAQ,CAAC;gBACzC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC;oBAAE,SAAS;gBAEnD,MAAM,QAAQ,GAAoB;oBAChC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;oBAClC,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;iBACvC,CAAC;gBAEF,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;oBAC5C,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ;oBACR,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,aAAa,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE;oBACnE,QAAQ;oBACR,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC,CAAC;gBAEH,wDAAwD;gBACxD,qCAAqC;gBACrC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;oBACxC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,2EAA2E;IAEnE,aAAa,CAAC,QAAgB;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACxD,CAAC;IAEO,YAAY,CAAC,QAA2B;QAC9C,MAAM,UAAU,GAA6B;YAC3C,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,CAAC;SACR,CAAC;QAEF,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,MAAM,MAAM,GAA2B,EAAE,CAAC;QAE1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3D,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3D,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO;YACL,UAAU;YACV,UAAU;YACV,MAAM;YACN,aAAa,EAAE,UAAU,CAAC,QAAQ;YAClC,SAAS,EAAE,UAAU,CAAC,IAAI;YAC1B,WAAW,EAAE,UAAU,CAAC,MAAM;YAC9B,QAAQ,EAAE,UAAU,CAAC,GAAG;YACxB,SAAS,EAAE,UAAU,CAAC,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,4EAA4E;IAE5E;;OAEG;IACH,aAAa,CAAC,MAAmB;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,IAAI,MAAM,GAAG,mBAAmB,MAAM,CAAC,EAAE,IAAI,CAAC;QAC9C,MAAM,IAAI,kBAAkB,MAAM,CAAC,UAAU,IAAI,CAAC;QAClD,MAAM,IAAI,mBAAmB,MAAM,CAAC,aAAa,IAAI,CAAC;QACtD,MAAM,IAAI,aAAa,MAAM,CAAC,QAAQ,MAAM,CAAC;QAE7C,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,kBAAkB,CAAC;YAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAe,EAAE,CAAC;gBAC9E,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC/C,CAAC;YACH,CAAC;YAED,MAAM,IAAI,kBAAkB,CAAC;YAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,GAAG,KAAK,KAAK,IAAI,CAAC;YACnC,CAAC;YAED,MAAM,IAAI,gBAAgB,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;iBACtC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;iBAC7B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC;YACpC,CAAC;YAED,MAAM,IAAI,eAAe,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC;YACrD,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBAChC,MAAM,IAAI,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,SAAS,CAAC;YAC9D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,+BAA+B,CAAC;QAC5C,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,aAAa,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC;YAChD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,GAAG,IAAI,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,WAAW,CAAC,QAAkB;QACpC,MAAM,IAAI,GAA6B;YACrC,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,UAAU;YAClB,GAAG,EAAE,OAAO;YACZ,IAAI,EAAE,QAAQ;SACf,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;CACF;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC"}