toolip 1.0.6 → 2.0.0

package/dist/src/core/history/git-metadata.js

@@ -0,0 +1,37 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+async function git(root, args) {
+    try {
+        const { stdout } = await execFileAsync('git', args, {
+            cwd: root,
+            encoding: 'utf8'
+        });
+        return stdout.trim() || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function readGitMetadata(root) {
+    const branch = await git(root, [
+        'branch',
+        '--show-current'
+    ]);
+    const commit = await git(root, [
+        'rev-parse',
+        'HEAD'
+    ]);
+    const status = await git(root, [
+        'status',
+        '--porcelain'
+    ]);
+    return {
+        branch,
+        commit,
+        dirty: status === undefined
+            ? undefined
+            : status.length > 0
+    };
+}
+//# sourceMappingURL=git-metadata.js.map

package/dist/src/core/history/git-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-metadata.js","sourceRoot":"","sources":["../../../../src/core/history/git-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,KAAK,UAAU,GAAG,CAChB,IAAY,EACZ,IAAc;IAEd,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,KAAK,EACL,IAAI,EACJ;YACE,GAAG,EAAE,IAAI;YACT,QAAQ,EAAE,MAAM;SACjB,CACF,CAAC;QAEF,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAY;IAMZ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QAC7B,QAAQ;QACR,gBAAgB;KACjB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QAC7B,WAAW;QACX,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QAC7B,QAAQ;QACR,aAAa;KACd,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,MAAM;QACN,KAAK,EACH,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;KACxB,CAAC;AACJ,CAAC"}

package/dist/src/core/history/store.d.ts

@@ -0,0 +1,5 @@
+import type { HistoryEntry, HistoryStore } from './types.js';
+export declare function historyFilePath(root: string): string;
+export declare function readHistory(root: string): Promise<HistoryStore>;
+export declare function appendHistory(root: string, entry: HistoryEntry, maxEntries?: number): Promise<void>;
+export declare function clearHistory(root: string): Promise<void>;

package/dist/src/core/history/store.js

@@ -0,0 +1,65 @@
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+const schemaVersion = '1.0';
+export function historyFilePath(root) {
+    return path.join(root, '.toolip', 'history.json');
+}
+export async function readHistory(root) {
+    const filePath = historyFilePath(root);
+    try {
+        const raw = await readFile(filePath, 'utf8');
+        const parsed = JSON.parse(raw);
+        if (parsed.schemaVersion !== schemaVersion ||
+            !Array.isArray(parsed.entries)) {
+            throw new Error('Unsupported Toolip history schema.');
+        }
+        return parsed;
+    }
+    catch (error) {
+        if (error instanceof Error &&
+            'code' in error &&
+            error.code === 'ENOENT') {
+            return {
+                schemaVersion,
+                entries: []
+            };
+        }
+        throw error;
+    }
+}
+export async function appendHistory(root, entry, maxEntries = 500) {
+    const filePath = historyFilePath(root);
+    const directory = path.dirname(filePath);
+    const temporary = `${filePath}.tmp`;
+    await mkdir(directory, {
+        recursive: true
+    });
+    const current = await readHistory(root);
+    const entries = [
+        ...current.entries,
+        entry
+    ].slice(-Math.max(1, maxEntries));
+    await writeFile(temporary, `${JSON.stringify({
+        schemaVersion,
+        entries
+    }, null, 2)}\n`, {
+        encoding: 'utf8',
+        mode: 0o600
+    });
+    await rename(temporary, filePath);
+}
+export async function clearHistory(root) {
+    const filePath = historyFilePath(root);
+    const directory = path.dirname(filePath);
+    await mkdir(directory, {
+        recursive: true
+    });
+    await writeFile(filePath, `${JSON.stringify({
+        schemaVersion,
+        entries: []
+    }, null, 2)}\n`, {
+        encoding: 'utf8',
+        mode: 0o600
+    });
+}
+//# sourceMappingURL=store.js.map

package/dist/src/core/history/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../../src/core/history/store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,QAAQ,EACR,MAAM,EACN,SAAS,EACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAM7B,MAAM,aAAa,GAAG,KAAc,CAAC;AAErC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY;IAEZ,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;QAE/C,IACE,MAAM,CAAC,aAAa,KAAK,aAAa;YACtC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAC9B,CAAC;YACD,MAAM,IAAI,KAAK,CACb,oCAAoC,CACrC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACf,KAAK,CAAC,IAAI,KAAK,QAAQ,EACvB,CAAC;YACD,OAAO;gBACL,aAAa;gBACb,OAAO,EAAE,EAAE;aACZ,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,KAAmB,EACnB,UAAU,GAAG,GAAG;IAEhB,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,GAAG,QAAQ,MAAM,CAAC;IAEpC,MAAM,KAAK,CAAC,SAAS,EAAE;QACrB,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG;QACd,GAAG,OAAO,CAAC,OAAO;QAClB,KAAK;KACN,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IAElC,MAAM,SAAS,CACb,SAAS,EACT,GAAG,IAAI,CAAC,SAAS,CACf;QACE,aAAa;QACb,OAAO;KACe,EACxB,IAAI,EACJ,CAAC,CACF,IAAI,EACL;QACE,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CACF,CAAC;IAEF,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY;IAEZ,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEzC,MAAM,KAAK,CAAC,SAAS,EAAE;QACrB,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IAEH,MAAM,SAAS,CACb,QAAQ,EACR,GAAG,IAAI,CAAC,SAAS,CACf;QACE,aAAa;QACb,OAAO,EAAE,EAAE;KACW,EACxB,IAAI,EACJ,CAAC,CACF,IAAI,EACL;QACE,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CACF,CAAC;AACJ,CAAC"}

package/dist/src/core/history/types.d.ts

@@ -0,0 +1,27 @@
+export type HistorySummary = {
+    critical: number;
+    high: number;
+    medium: number;
+    low: number;
+    info: number;
+    total: number;
+};
+export type HistoryEntry = {
+    id: string;
+    createdAt: string;
+    toolipVersion: string;
+    command: string;
+    git?: {
+        branch?: string;
+        commit?: string;
+        dirty?: boolean;
+    };
+    score?: number;
+    summary: HistorySummary;
+    findingIds: string[];
+    metadata?: Record<string, unknown>;
+};
+export type HistoryStore = {
+    schemaVersion: '1.0';
+    entries: HistoryEntry[];
+};

package/dist/src/core/history/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/core/history/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/history/types.ts"],"names":[],"mappings":""}

package/dist/src/core/hooks.d.ts

@@ -0,0 +1 @@
+export declare function installPreCommitHook(root: string): Promise<string>;

package/dist/src/core/hooks.js

@@ -0,0 +1,14 @@
+import { mkdir, writeFile, chmod } from 'node:fs/promises';
+import path from 'node:path';
+export async function installPreCommitHook(root) {
+    const hooksDir = path.join(root, '.git', 'hooks');
+    const hookPath = path.join(hooksDir, 'pre-commit');
+    await mkdir(hooksDir, { recursive: true });
+    await writeFile(hookPath, `#!/bin/sh
+echo "Running Toolip pre-commit checks..."
+npx toolip pre-commit
+`, 'utf8');
+    await chmod(hookPath, 0o755);
+    return hookPath;
+}
+//# sourceMappingURL=hooks.js.map

package/dist/src/core/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../../src/core/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEnD,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,SAAS,CACb,QAAQ,EACR;;;CAGH,EACG,MAAM,CACP,CAAC;IAEF,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE7B,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/src/core/learn.d.ts

@@ -0,0 +1,11 @@
+export type LearnTopic = {
+    id: string;
+    title: string;
+    explanation: string;
+    risks: string[];
+    mistakes: string[];
+    secureExamples: string[];
+    bestPractices: string[];
+};
+export declare function listLearnTopics(): LearnTopic[];
+export declare function getLearnTopic(topic: string): LearnTopic | null;

package/dist/src/core/learn.js

@@ -0,0 +1,163 @@
+const topics = {
+    cors: {
+        id: 'cors',
+        title: 'CORS Security',
+        explanation: 'CORS controls which origins can access browser-protected resources from your API.',
+        risks: [
+            'Overly broad origins can expose APIs to untrusted frontends.',
+            'Credentials with wildcard origins can create serious access-control mistakes.'
+        ],
+        mistakes: [
+            'Using origin: "*" for authenticated APIs.',
+            'Using the same CORS policy in development and production.'
+        ],
+        secureExamples: [
+            'Allow only https://yourdomain.com in production.',
+            'Use environment-specific allowed origin lists.'
+        ],
+        bestPractices: [
+            'Avoid wildcard origins for sensitive APIs.',
+            'Review CORS together with cookies, credentials, and authentication.'
+        ]
+    },
+    jwt: {
+        id: 'jwt',
+        title: 'JWT Security',
+        explanation: 'JWTs are signed tokens used to represent claims, identity, and authorization context.',
+        risks: [
+            'Weak secrets allow token forgery.',
+            'Long-lived tokens increase impact after theft.'
+        ],
+        mistakes: [
+            'Using "secret" or "password" as the JWT secret.',
+            'Setting access tokens to last for months or years.'
+        ],
+        secureExamples: [
+            'Use a long random secret from a secret manager.',
+            'Use short access-token lifetimes with refresh-token rotation.'
+        ],
+        bestPractices: [
+            'Validate issuer, audience, signature, and expiry.',
+            'Never store JWT secrets in source code.'
+        ]
+    },
+    xss: {
+        id: 'xss',
+        title: 'Cross-Site Scripting',
+        explanation: 'XSS happens when untrusted input is rendered as executable browser code.',
+        risks: [
+            'Session theft.',
+            'Account takeover.',
+            'Malicious actions performed as the user.'
+        ],
+        mistakes: [
+            'Rendering raw HTML from users.',
+            'Trusting sanitized content without context-aware escaping.'
+        ],
+        secureExamples: [
+            'Escape output by default.',
+            'Use CSP to reduce script execution risk.'
+        ],
+        bestPractices: [
+            'Avoid dangerous HTML injection APIs.',
+            'Sanitize rich text with a trusted sanitizer.'
+        ]
+    },
+    csrf: {
+        id: 'csrf',
+        title: 'Cross-Site Request Forgery',
+        explanation: 'CSRF tricks a logged-in browser into sending unwanted authenticated requests.',
+        risks: [
+            'Unauthorized state changes.',
+            'Account setting changes.',
+            'Financial or administrative actions triggered silently.'
+        ],
+        mistakes: [
+            'Relying only on cookies for authentication.',
+            'Not using SameSite cookie settings.'
+        ],
+        secureExamples: [
+            'Use SameSite=Lax or SameSite=Strict cookies.',
+            'Use CSRF tokens for sensitive state-changing requests.'
+        ],
+        bestPractices: [
+            'Require explicit anti-CSRF protection for cookie-authenticated apps.',
+            'Avoid GET requests for state-changing operations.'
+        ]
+    },
+    secrets: {
+        id: 'secrets',
+        title: 'Secrets Management',
+        explanation: 'Secrets are credentials such as API keys, tokens, passwords, and private keys.',
+        risks: [
+            'Committed secrets can be copied forever from Git history.',
+            'Leaked credentials can grant attackers access to production systems.'
+        ],
+        mistakes: [
+            'Storing secrets in .env files committed to Git.',
+            'Hardcoding API keys in source files.'
+        ],
+        secureExamples: [
+            'Use environment variables or encrypted local vaults.',
+            'Rotate credentials after exposure.'
+        ],
+        bestPractices: [
+            'Keep .env files ignored.',
+            'Commit only safe .env.example files.',
+            'Scan before committing.'
+        ]
+    },
+    auth: {
+        id: 'auth',
+        title: 'Authentication and Authorization',
+        explanation: 'Authentication verifies identity; authorization decides what that identity can access.',
+        risks: [
+            'Broken access control.',
+            'Privilege escalation.',
+            'Session compromise.'
+        ],
+        mistakes: [
+            'Checking only if a user is logged in.',
+            'Trusting client-side roles.'
+        ],
+        secureExamples: [
+            'Check permissions on the server for every protected action.',
+            'Use least privilege access rules.'
+        ],
+        bestPractices: [
+            'Separate authentication from authorization.',
+            'Log sensitive access and permission changes.'
+        ]
+    },
+    dependencies: {
+        id: 'dependencies',
+        title: 'Dependency Security',
+        explanation: 'Dependency security is about managing risk from third-party packages.',
+        risks: [
+            'Deprecated packages may stop receiving fixes.',
+            'Typosquatted packages can impersonate popular libraries.',
+            'Transitive dependencies can introduce hidden risk.'
+        ],
+        mistakes: [
+            'Installing packages without checking maintainers.',
+            'Ignoring deprecated package warnings.',
+            'Allowing dependency bloat.'
+        ],
+        secureExamples: [
+            'Inspect package health before adoption.',
+            'Prefer maintained packages with active releases.'
+        ],
+        bestPractices: [
+            'Review lockfile changes.',
+            'Use small dependency surfaces.',
+            'Replace abandoned packages early.'
+        ]
+    }
+};
+export function listLearnTopics() {
+    return Object.values(topics);
+}
+export function getLearnTopic(topic) {
+    return topics[topic.toLowerCase()] ?? null;
+}
+//# sourceMappingURL=learn.js.map

package/dist/src/core/learn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"learn.js","sourceRoot":"","sources":["../../../src/core/learn.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,GAA+B;IACzC,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,mFAAmF;QAChG,KAAK,EAAE;YACL,8DAA8D;YAC9D,+EAA+E;SAChF;QACD,QAAQ,EAAE;YACR,2CAA2C;YAC3C,2DAA2D;SAC5D;QACD,cAAc,EAAE;YACd,kDAAkD;YAClD,gDAAgD;SACjD;QACD,aAAa,EAAE;YACb,4CAA4C;YAC5C,qEAAqE;SACtE;KACF;IACD,GAAG,EAAE;QACH,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,uFAAuF;QACpG,KAAK,EAAE;YACL,mCAAmC;YACnC,gDAAgD;SACjD;QACD,QAAQ,EAAE;YACR,iDAAiD;YACjD,oDAAoD;SACrD;QACD,cAAc,EAAE;YACd,iDAAiD;YACjD,+DAA+D;SAChE;QACD,aAAa,EAAE;YACb,mDAAmD;YACnD,yCAAyC;SAC1C;KACF;IACD,GAAG,EAAE;QACH,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,0EAA0E;QACvF,KAAK,EAAE;YACL,gBAAgB;YAChB,mBAAmB;YACnB,0CAA0C;SAC3C;QACD,QAAQ,EAAE;YACR,gCAAgC;YAChC,4DAA4D;SAC7D;QACD,cAAc,EAAE;YACd,2BAA2B;YAC3B,0CAA0C;SAC3C;QACD,aAAa,EAAE;YACb,sCAAsC;YACtC,8CAA8C;SAC/C;KACF;IACD,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,+EAA+E;QAC5F,KAAK,EAAE;YACL,6BAA6B;YAC7B,0BAA0B;YAC1B,yDAAyD;SAC1D;QACD,QAAQ,EAAE;YACR,6CAA6C;YAC7C,qCAAqC;SACtC;QACD,cAAc,EAAE;YACd,8CAA8C;YAC9C,wDAAwD;SACzD;QACD,aAAa,EAAE;YACb,sEAAsE;YACtE,mDAAmD;SACpD;KACF;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,gFAAgF;QAC7F,KAAK,EAAE;YACL,2DAA2D;YAC3D,sEAAsE;SACvE;QACD,QAAQ,EAAE;YACR,iDAAiD;YACjD,sCAAsC;SACvC;QACD,cAAc,EAAE;YACd,sDAAsD;YACtD,oCAAoC;SACrC;QACD,aAAa,EAAE;YACb,0BAA0B;YAC1B,sCAAsC;YACtC,yBAAyB;SAC1B;KACF;IACD,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,wFAAwF;QACrG,KAAK,EAAE;YACL,wBAAwB;YACxB,uBAAuB;YACvB,qBAAqB;SACtB;QACD,QAAQ,EAAE;YACR,uCAAuC;YACvC,6BAA6B;SAC9B;QACD,cAAc,EAAE;YACd,6DAA6D;YAC7D,mCAAmC;SACpC;QACD,aAAa,EAAE;YACb,6CAA6C;YAC7C,8CAA8C;SAC/C;KACF;IACD,YAAY,EAAE;QACZ,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,uEAAuE;QACpF,KAAK,EAAE;YACL,+CAA+C;YAC/C,0DAA0D;YAC1D,oDAAoD;SACrD;QACD,QAAQ,EAAE;YACR,mDAAmD;YACnD,uCAAuC;YACvC,4BAA4B;SAC7B;QACD,cAAc,EAAE;YACd,yCAAyC;YACzC,kDAAkD;SACnD;QACD,aAAa,EAAE;YACb,0BAA0B;YAC1B,gCAAgC;YAChC,mCAAmC;SACpC;KACF;CACF,CAAC;AAEF,MAAM,UAAU,eAAe;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC;AAC7C,CAAC"}

package/dist/src/core/license-analysis.d.ts

@@ -0,0 +1,18 @@
+import type { ToolipFinding } from './report.js';
+export type LicenseEntry = {
+    name: string;
+    version: string;
+    license: string;
+    type: 'dependency' | 'devDependency';
+};
+export type LicenseAnalysisResult = {
+    licenses: LicenseEntry[];
+    findings: ToolipFinding[];
+    summary: {
+        total: number;
+        unknown: number;
+        restrictive: number;
+        distribution: Record<string, number>;
+    };
+};
+export declare function analyzeLicenses(root: string): Promise<LicenseAnalysisResult>;

package/dist/src/core/license-analysis.js

@@ -0,0 +1,98 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+const restrictiveLicenses = new Set([
+    'GPL',
+    'GPL-2.0',
+    'GPL-3.0',
+    'AGPL',
+    'AGPL-3.0',
+    'LGPL',
+    'LGPL-2.1',
+    'LGPL-3.0'
+]);
+export async function analyzeLicenses(root) {
+    const packageJsonPath = path.join(root, 'package.json');
+    const raw = await readFile(packageJsonPath, 'utf8');
+    const pkg = JSON.parse(raw);
+    const entries = [
+        ...Object.entries(pkg.dependencies ?? {}).map(([name, version]) => ({
+            name,
+            version,
+            license: inferLicense(name),
+            type: 'dependency'
+        })),
+        ...Object.entries(pkg.devDependencies ?? {}).map(([name, version]) => ({
+            name,
+            version,
+            license: inferLicense(name),
+            type: 'devDependency'
+        }))
+    ].sort((a, b) => a.name.localeCompare(b.name));
+    const findings = entries.flatMap(licenseToFindings);
+    const distribution = entries.reduce((summary, entry) => {
+        summary[entry.license] = (summary[entry.license] ?? 0) + 1;
+        return summary;
+    }, {});
+    return {
+        licenses: entries,
+        findings,
+        summary: {
+            total: entries.length,
+            unknown: entries.filter((entry) => entry.license === 'UNKNOWN').length,
+            restrictive: entries.filter((entry) => restrictiveLicenses.has(entry.license)).length,
+            distribution
+        }
+    };
+}
+function inferLicense(packageName) {
+    const known = {
+        '@types/node': 'MIT',
+        '@types/semver': 'MIT',
+        axios: 'MIT',
+        chalk: 'MIT',
+        commander: 'MIT',
+        express: 'MIT',
+        'fast-glob': 'MIT',
+        ignore: 'MIT',
+        ora: 'MIT',
+        pacote: 'ISC',
+        react: 'MIT',
+        request: 'Apache-2.0',
+        semver: 'ISC',
+        tsx: 'MIT',
+        typescript: 'Apache-2.0',
+        vitest: 'MIT',
+        zod: 'MIT'
+    };
+    return known[packageName] ?? 'UNKNOWN';
+}
+function licenseToFindings(entry) {
+    if (entry.license === 'UNKNOWN') {
+        return [
+            {
+                id: `TOOLIP-LICENSE-UNKNOWN-${entry.name.toUpperCase().replaceAll(/[^A-Z0-9]/g, '-')}`,
+                title: `Unknown license: ${entry.name}`,
+                severity: 'medium',
+                category: 'license',
+                message: `${entry.name} does not have a known license in Toolip's local license intelligence map.`,
+                recommendation: 'Manually verify the package license before using it in commercial or distributed software.',
+                evidence: entry.version
+            }
+        ];
+    }
+    if (restrictiveLicenses.has(entry.license)) {
+        return [
+            {
+                id: `TOOLIP-LICENSE-RESTRICTIVE-${entry.name.toUpperCase().replaceAll(/[^A-Z0-9]/g, '-')}`,
+                title: `Restrictive license detected: ${entry.name}`,
+                severity: 'high',
+                category: 'license',
+                message: `${entry.name} appears to use ${entry.license}, which may introduce redistribution obligations.`,
+                recommendation: 'Review the license terms with care before using this package in proprietary software.',
+                evidence: entry.license
+            }
+        ];
+    }
+    return [];
+}
+//# sourceMappingURL=license-analysis.js.map

package/dist/src/core/license-analysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-analysis.js","sourceRoot":"","sources":["../../../src/core/license-analysis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAqB7B,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,KAAK;IACL,SAAS;IACT,SAAS;IACT,MAAM;IACN,UAAU;IACV,MAAM;IACN,UAAU;IACV,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAEpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAGzB,CAAC;IAEF,MAAM,OAAO,GAAmB;QAC9B,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,IAAI;YACJ,OAAO;YACP,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,YAAqB;SAC5B,CAAC,CAAC;QACH,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YACrE,IAAI;YACJ,OAAO;YACP,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,eAAwB;SAC/B,CAAC,CAAC;KACJ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAC7E,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC;IACjB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,QAAQ;QACR,OAAO,EAAE;YACP,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,MAAM;YACtE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YACrF,YAAY;SACb;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB;IACvC,MAAM,KAAK,GAA2B;QACpC,aAAa,EAAE,KAAK;QACpB,eAAe,EAAE,KAAK;QACtB,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,KAAK;QACV,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,KAAK;QACV,UAAU,EAAE,YAAY;QACxB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,KAAK;KACX,CAAC;IAEF,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAmB;IAC5C,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACL;gBACE,EAAE,EAAE,0BAA0B,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE;gBACtF,KAAK,EAAE,oBAAoB,KAAK,CAAC,IAAI,EAAE;gBACvC,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,4EAA4E;gBAClG,cAAc,EAAE,4FAA4F;gBAC5G,QAAQ,EAAE,KAAK,CAAC,OAAO;aACxB;SACF,CAAC;IACJ,CAAC;IAED,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL;gBACE,EAAE,EAAE,8BAA8B,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE;gBAC1F,KAAK,EAAE,iCAAiC,KAAK,CAAC,IAAI,EAAE;gBACpD,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,mBAAmB,KAAK,CAAC,OAAO,mDAAmD;gBACzG,cAAc,EAAE,uFAAuF;gBACvG,QAAQ,EAAE,KAAK,CAAC,OAAO;aACxB;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/src/core/load-toolip-ignore.d.ts

@@ -0,0 +1,5 @@
+export type ToolipIgnore = {
+    ignores(filePath: string): boolean;
+    patterns: string[];
+};
+export declare function loadToolipIgnore(root: string): Promise<ToolipIgnore>;

package/dist/src/core/load-toolip-ignore.js

@@ -0,0 +1,35 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import ignore from 'ignore';
+const defaultPatterns = [
+    'node_modules',
+    'dist',
+    'coverage',
+    'build',
+    '.git',
+    '.toolip-vault.json'
+];
+export async function loadToolipIgnore(root) {
+    const ignoreFile = path.join(root, '.toolipignore');
+    let customPatterns = [];
+    try {
+        const raw = await readFile(ignoreFile, 'utf8');
+        customPatterns = raw
+            .split('\n')
+            .map((line) => line.trim())
+            .filter((line) => line.length > 0 && !line.startsWith('#'));
+    }
+    catch {
+        customPatterns = [];
+    }
+    const patterns = [...defaultPatterns, ...customPatterns];
+    const ig = ignore().add(patterns);
+    return {
+        patterns,
+        ignores(filePath) {
+            const relativePath = path.relative(root, filePath).replaceAll('\\', '/');
+            return relativePath.length > 0 && ig.ignores(relativePath);
+        }
+    };
+}
+//# sourceMappingURL=load-toolip-ignore.js.map

package/dist/src/core/load-toolip-ignore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-toolip-ignore.js","sourceRoot":"","sources":["../../../src/core/load-toolip-ignore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,QAAQ,CAAC;AAO5B,MAAM,eAAe,GAAG;IACtB,cAAc;IACd,MAAM;IACN,UAAU;IACV,OAAO;IACP,MAAM;IACN,oBAAoB;CACrB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACpD,IAAI,cAAc,GAAa,EAAE,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/C,cAAc,GAAG,GAAG;aACjB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,cAAc,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAElC,OAAO;QACL,QAAQ;QACR,OAAO,CAAC,QAAgB;YACtB,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACzE,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/core/monorepo/discover.d.ts

@@ -0,0 +1,7 @@
+export type WorkspaceProject = {
+    root: string;
+    relativePath: string;
+    name?: string;
+    version?: string;
+};
+export declare function discoverWorkspaces(root: string): Promise<WorkspaceProject[]>;

package/dist/src/core/monorepo/discover.js

@@ -0,0 +1,49 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import fg from 'fast-glob';
+async function patterns(root) {
+    const manifest = JSON.parse(await readFile(path.join(root, 'package.json'), 'utf8'));
+    if (Array.isArray(manifest.workspaces)) {
+        return manifest.workspaces;
+    }
+    if (Array.isArray(manifest.workspaces?.packages)) {
+        return manifest.workspaces.packages;
+    }
+    try {
+        const yaml = await readFile(path.join(root, 'pnpm-workspace.yaml'), 'utf8');
+        return yaml
+            .split(/\r?\n/)
+            .map((line) => line.match(/^\s*-\s*['"]?([^'"]+)['"]?\s*$/)?.[1])
+            .filter((value) => Boolean(value));
+    }
+    catch {
+        return [];
+    }
+}
+export async function discoverWorkspaces(root) {
+    const workspacePatterns = await patterns(root);
+    if (workspacePatterns.length === 0) {
+        return [{
+                root,
+                relativePath: '.'
+            }];
+    }
+    const manifests = await fg(workspacePatterns.map((pattern) => `${pattern.replace(/\/$/, '')}/package.json`), {
+        cwd: root,
+        absolute: false,
+        onlyFiles: true,
+        ignore: ['**/node_modules/**', '**/dist/**']
+    });
+    return Promise.all(manifests.sort().map(async (manifestPath) => {
+        const absolute = path.join(root, manifestPath);
+        const manifest = JSON.parse(await readFile(absolute, 'utf8'));
+        const workspaceRoot = path.dirname(absolute);
+        return {
+            root: workspaceRoot,
+            relativePath: path.relative(root, workspaceRoot) || '.',
+            name: manifest.name,
+            version: manifest.version
+        };
+    }));
+}
+//# sourceMappingURL=discover.js.map

package/dist/src/core/monorepo/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../../../src/core/monorepo/discover.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,WAAW,CAAC;AAe3B,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACxC,CAAC;IAElB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC,UAAU,CAAC;IAC7B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjD,OAAO,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5E,OAAO,IAAI;aACR,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aAChE,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACnD,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE/C,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC;gBACN,IAAI;gBACJ,YAAY,EAAE,GAAG;aAClB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,EAAE,CACxB,iBAAiB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,EAChF;QACE,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,oBAAoB,EAAE,YAAY,CAAC;KAC7C,CACF,CAAC;IAEF,OAAO,OAAO,CAAC,GAAG,CAChB,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAG3D,CAAC;QACF,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE7C,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,GAAG;YACvD,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/src/core/npm-registry.d.ts

@@ -0,0 +1,3 @@
+import { type PackageManifest } from 'pacote';
+export type NpmPackageManifest = PackageManifest;
+export declare function fetchPackageManifest(packageName: string): Promise<NpmPackageManifest>;

package/dist/src/core/npm-registry.js

@@ -0,0 +1,5 @@
+import pacote from 'pacote';
+export async function fetchPackageManifest(packageName) {
+    return pacote.manifest(packageName);
+}
+//# sourceMappingURL=npm-registry.js.map

package/dist/src/core/npm-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-registry.js","sourceRoot":"","sources":["../../../src/core/npm-registry.ts"],"names":[],"mappings":"AAAA,OAAO,MAAgC,MAAM,QAAQ,CAAC;AAItD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IAC5D,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC"}

package/dist/src/core/pre-commit.d.ts

@@ -0,0 +1,11 @@
+import type { ToolipFinding } from './report.js';
+export type PreCommitResult = {
+    passed: boolean;
+    findings: ToolipFinding[];
+    summary: {
+        critical: number;
+        high: number;
+        blocking: number;
+    };
+};
+export declare function runPreCommit(root: string): Promise<PreCommitResult>;

package/dist/src/core/pre-commit.js

@@ -0,0 +1,22 @@
+import { runGitAudit } from './git-audit.js';
+import { runSecurityDoctor } from './security-doctor.js';
+export async function runPreCommit(root) {
+    const [doctor, gitAudit] = await Promise.all([
+        runSecurityDoctor(root),
+        runGitAudit(root)
+    ]);
+    const findings = [...doctor.findings, ...gitAudit.findings];
+    const critical = findings.filter((finding) => finding.severity === 'critical').length;
+    const high = findings.filter((finding) => finding.severity === 'high').length;
+    const blocking = critical + high;
+    return {
+        passed: blocking === 0,
+        findings,
+        summary: {
+            critical,
+            high,
+            blocking
+        }
+    };
+}
+//# sourceMappingURL=pre-commit.js.map

package/dist/src/core/pre-commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-commit.js","sourceRoot":"","sources":["../../../src/core/pre-commit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAazD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3C,iBAAiB,CAAC,IAAI,CAAC;QACvB,WAAW,CAAC,IAAI,CAAC;KAClB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IACtF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC9E,MAAM,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAC;IAEjC,OAAO;QACL,MAAM,EAAE,QAAQ,KAAK,CAAC;QACtB,QAAQ;QACR,OAAO,EAAE;YACP,QAAQ;YACR,IAAI;YACJ,QAAQ;SACT;KACF,CAAC;AACJ,CAAC"}