upstream-radar 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +176 -0
- package/README.md +222 -0
- package/README.zh-CN.md +170 -0
- package/cordis.patch.yml +11 -0
- package/dist/src/cli.d.ts +3 -0
- package/dist/src/cli.d.ts.map +1 -0
- package/dist/src/cli.js +286 -0
- package/dist/src/cli.js.map +1 -0
- package/dist/src/compatibility.d.ts +12 -0
- package/dist/src/compatibility.d.ts.map +1 -0
- package/dist/src/compatibility.js +195 -0
- package/dist/src/compatibility.js.map +1 -0
- package/dist/src/dsh-analysis.d.ts +7 -0
- package/dist/src/dsh-analysis.d.ts.map +1 -0
- package/dist/src/dsh-analysis.js +53 -0
- package/dist/src/dsh-analysis.js.map +1 -0
- package/dist/src/dsh-plugin.d.ts +45 -0
- package/dist/src/dsh-plugin.d.ts.map +1 -0
- package/dist/src/dsh-plugin.js +121 -0
- package/dist/src/dsh-plugin.js.map +1 -0
- package/dist/src/graph.d.ts +14 -0
- package/dist/src/graph.d.ts.map +1 -0
- package/dist/src/graph.js +198 -0
- package/dist/src/graph.js.map +1 -0
- package/dist/src/index.d.ts +19 -0
- package/dist/src/index.d.ts.map +1 -0
- package/dist/src/index.js +19 -0
- package/dist/src/index.js.map +1 -0
- package/dist/src/inventory.d.ts +4 -0
- package/dist/src/inventory.d.ts.map +1 -0
- package/dist/src/inventory.js +182 -0
- package/dist/src/inventory.js.map +1 -0
- package/dist/src/npm-release.d.ts +24 -0
- package/dist/src/npm-release.d.ts.map +1 -0
- package/dist/src/npm-release.js +131 -0
- package/dist/src/npm-release.js.map +1 -0
- package/dist/src/npm.d.ts +36 -0
- package/dist/src/npm.d.ts.map +1 -0
- package/dist/src/npm.js +803 -0
- package/dist/src/npm.js.map +1 -0
- package/dist/src/osv.d.ts +18 -0
- package/dist/src/osv.d.ts.map +1 -0
- package/dist/src/osv.js +238 -0
- package/dist/src/osv.js.map +1 -0
- package/dist/src/policy.d.ts +5 -0
- package/dist/src/policy.d.ts.map +1 -0
- package/dist/src/policy.js +32 -0
- package/dist/src/policy.js.map +1 -0
- package/dist/src/radar-render.d.ts +4 -0
- package/dist/src/radar-render.d.ts.map +1 -0
- package/dist/src/radar-render.js +50 -0
- package/dist/src/radar-render.js.map +1 -0
- package/dist/src/radar-state.d.ts +5 -0
- package/dist/src/radar-state.d.ts.map +1 -0
- package/dist/src/radar-state.js +87 -0
- package/dist/src/radar-state.js.map +1 -0
- package/dist/src/radar-types.d.ts +163 -0
- package/dist/src/radar-types.d.ts.map +1 -0
- package/dist/src/radar-types.js +7 -0
- package/dist/src/radar-types.js.map +1 -0
- package/dist/src/radar.d.ts +24 -0
- package/dist/src/radar.d.ts.map +1 -0
- package/dist/src/radar.js +234 -0
- package/dist/src/radar.js.map +1 -0
- package/dist/src/render.d.ts +3 -0
- package/dist/src/render.d.ts.map +1 -0
- package/dist/src/render.js +58 -0
- package/dist/src/render.js.map +1 -0
- package/dist/src/scan.d.ts +8 -0
- package/dist/src/scan.d.ts.map +1 -0
- package/dist/src/scan.js +293 -0
- package/dist/src/scan.js.map +1 -0
- package/dist/src/semver.d.ts +13 -0
- package/dist/src/semver.d.ts.map +1 -0
- package/dist/src/semver.js +136 -0
- package/dist/src/semver.js.map +1 -0
- package/dist/src/tar.d.ts +25 -0
- package/dist/src/tar.d.ts.map +1 -0
- package/dist/src/tar.js +327 -0
- package/dist/src/tar.js.map +1 -0
- package/dist/src/types.d.ts +111 -0
- package/dist/src/types.d.ts.map +1 -0
- package/dist/src/types.js +2 -0
- package/dist/src/types.js.map +1 -0
- package/dist/src/version.d.ts +2 -0
- package/dist/src/version.d.ts.map +1 -0
- package/dist/src/version.js +2 -0
- package/dist/src/version.js.map +1 -0
- package/docs/assets/upstream-radar-hero-mobile.jpg +0 -0
- package/docs/assets/upstream-radar-hero.jpg +0 -0
- package/package.json +84 -0
- package/schemas/analysis-result.schema.json +39 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../src/npm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,eAAe,EACf,eAAe,EACf,MAAM,IAAI,eAAe,GAC1B,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,eAAe,EAAyB,MAAM,UAAU,CAAA;AACjE,OAAO,EACL,aAAa,GAQd,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,MAAM,gBAAgB,GAAG,6BAA6B,CAAA;AACtD,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAC5C,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAC1C,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AACjD,MAAM,2BAA2B,GAAG,0BAA0B,CAAA;AAC9D,MAAM,aAAa,GAAG,iIAAiI,CAAA;AAoEvJ,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACzF,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAChF,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,QAAkB,EAClB,OAAe,EACf,MAAc,EACd,QAA8B,EAC9B,WAAoB;IAEpB,MAAM,MAAM,GAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;IAC3D,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAA;IACtD,IAAI,WAAW,KAAK,SAAS;QAAE,MAAM,CAAC,WAAW,GAAG,WAAW,CAAA;IAC/D,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,YAAY,CAAC,QAAmB;IACvC,MAAM,KAAK,GAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;IAC5F,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAChJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IAC1B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IAC7E,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;IAChG,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAA;IACpD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACvB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IAC1B,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAA;IACjB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAA;IACjB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAA;IACf,GAAG,CAAC,IAAI,GAAG,EAAE,CAAA;IACb,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACvF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,SAAS,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACrF,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;IAC1C,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACxF,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC9F,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACpC,CAAC,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/C,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAA;IACpE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,0DAA0D,OAAO,EAAE,CAAC,CAAA;IACtF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,IAAI,OAAO,EAAE,EAAE,CAAA;AAC/D,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAkB,EAAE,GAAW,EAAE,QAAgB,EAAE,SAAiB,EAAE,MAAc;IAC7G,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IAC3B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;IACxH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE;QACrC,OAAO,EAAE;YACP,MAAM;YACN,YAAY,EAAE,kBAAkB,YAAY,EAAE;SAC/C;QACD,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;KACvC,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,mBAAmB,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC9G,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAE/H,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC7D,IAAI,cAAc,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,GAAG,QAAQ,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,aAAa,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAElD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;IACxC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAChC,IAAI,IAAI,CAAC,IAAI;YAAE,MAAK;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;QACrB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAA;YACnD,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,aAAa,CAAC,CAAA;QAC5D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AACrC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAkB,EAAE,GAAW,EAAE,QAAgB,EAAE,SAAiB;IAC3F,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAA;IACzF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;IAChF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAkB,EAAE,IAAmB;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;IAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACrD,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IACpG,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACvC,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;IACzF,CAAC;IAED,MAAM,UAAU,GAAwB,EAAE,CAAA;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QACpC,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAA;YACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;YACpC,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IACvD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAA;IACjE,MAAM,aAAa,GAAG,QAAQ,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAA;IAC/D,MAAM,cAAc,GAAG,QAAQ,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACnD,MAAM,YAAY,GAAG,kBAAkB,KAAK,SAAS;QACnD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC;YAChE,GAAG,CAAC,gBAAgB,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC;SAC1E,CAAA;IAEL,OAAO;QACL,IAAI;QACJ,OAAO;QACP,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,IAAI,EAAE;YACJ,SAAS;YACT,OAAO;YACP,UAAU;YACV,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;SACxD;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,SAAiB;IACjE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACrG,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACjE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,CAAA;QACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACrC,OAAO,IAAI,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IACrF,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;IAC9B,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAEzF,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAA;IAC7E,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC/D,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,IAAI,eAAe,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;IAC5G,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACtC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACxC,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IACzC,MAAM,IAAI,GAAkB,EAAE,CAAA;IAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACnC,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACrE,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC5H,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAY,EACZ,OAAe,EACf,SAAiB,EACjB,UAAwC,EACxC,IAA4B,EAC5B,WAAoB;IAEpB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,OAAO,IAAI,SAAS,EAAE,EAAE,MAAM,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC3D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,2BAA2B,CAAC,CAAA;IAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;IAEzE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;YACvG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;QACtC,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACtC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,aAAa,IAAI,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;QAC9F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YAC1C,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YAC5E,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;QAChI,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;QACtC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;AACvC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAyB;IACzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAA;IACtE,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAAE,SAAQ;YACnE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC/C,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;YAC/H,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACnE,MAAM,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3E,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACtF,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ;QACjF,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU;KACzE,CAAA;IACD,MAAM,WAAW,GAAsB,EAAE,CAAA;IACzC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,KAAK,KAAK,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IACpD,CAAC;IACD,WAAW,CAAC,gBAAgB,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IACtD,WAAW,CAAC,qBAAqB,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAA;IAClE,WAAW,CAAC,uBAAuB,GAAG,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAA;IAC3E,WAAW,CAAC,yBAAyB,GAAG,MAAM,CAAA;IAC9C,WAAW,CAAC,gBAAgB,GAAG,OAAO,CAAA;IACtC,WAAW,CAAC,eAAe,GAAG,OAAO,CAAA;IACrC,WAAW,CAAC,0BAA0B,GAAG,OAAO,CAAA;IAChD,WAAW,CAAC,mBAAmB,GAAG,GAAG,CAAA;IACrC,WAAW,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;IAClE,WAAW,CAAC,mBAAmB,GAAG,GAAG,CAAA;IACrC,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAuB,EAAE,GAAW,EAAE,WAA8B,EAAE,SAAiB;IAC1H,OAAO,IAAI,OAAO,CAAC,CAAC,aAAa,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAA;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;QACxH,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,WAAW,GAAG,CAAC,CAAA;QACnB,IAAI,WAAW,GAAG,CAAC,CAAA;QACnB,IAAI,cAAc,GAAG,KAAK,CAAA;QAC1B,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,KAAiC,CAAA;QAErC,MAAM,SAAS,GAAG,GAAS,EAAE;YAC3B,IAAI,CAAC;gBACH,IAAI,QAAQ,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;;oBACvE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACvB,CAAC;QACH,CAAC,CAAA;QAED,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;YACpC,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC5C,aAAa,CAAC;gBACZ,IAAI;gBACJ,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC3D,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC3D,QAAQ;gBACR,cAAc;aACf,CAAC,CAAA;QACJ,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAE,KAAa,EAAE,MAA2B,EAAQ,EAAE;YACrF,IAAI,WAAW,GAAG,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;gBACxE,cAAc,GAAG,IAAI,CAAA;gBACrB,SAAS,EAAE,CAAA;gBACX,OAAM;YACR,CAAC;YACD,IAAI,MAAM,KAAK,QAAQ;gBAAE,WAAW,IAAI,KAAK,CAAC,MAAM,CAAA;;gBAC/C,WAAW,IAAI,KAAK,CAAC,MAAM,CAAA;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAA;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC5E,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC5E,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACtC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,QAAQ,GAAG,IAAI,CAAA;YACf,SAAS,EAAE,CAAA;QACb,CAAC,EAAE,SAAS,CAAC,CAAA;IACf,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IAC7B,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACpC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,WAAW,CAAA;QAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACzC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAA;IAC5D,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;IAC/C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,OAAO,GAAyB;QACpC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QAC3B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;KAChC,CAAA;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,eAAwB,EACxB,IAAmB,EACnB,QAAiB,EACjB,qBAA8B;IAE9B,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC5C,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACjH,IAAI,CAAC,qBAAqB;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IAEjE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACzD,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CACjF,CAAC,CAAA;IACF,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IAClG,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,gCAAgC,CAAC,CAAA;IACvI,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC3C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IAEtD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC,CAAA;QAClG,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QAChD,MAAM,eAAe,GAAG,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;QAC5D,MAAM,kBAAkB,GAAG,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAA;QACxE,MAAM,QAAQ,GAAG,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAA;QACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAA;QACrH,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,KAAK,SAAS,CAAC,CAAA;QACvG,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QACzC,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;QACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QACvC,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,aAAa,EAAE,gCAAgC;YAC/C,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;YAC/D,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;YACvD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;YACjE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;SAC3D,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IAC7B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAAmB,EACnB,QAAgB,EAChB,kBAA2B,EAC3B,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAA;IACvE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAmB,EAAE,CAAC,CAAC;QAClD,eAAe,EAAE;YACf,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,IAAI;YACd,iBAAiB,EAAE,EAAE;YACrB,iBAAiB,EAAE,EAAE;YACrB,eAAe,EAAE,IAAI;YACrB,KAAK;SACN;QACD,UAAU,EAAE,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE;KAClE,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5D,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE;SAC5C,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACjC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,YAAY,QAAQ,yEAAyE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC/J,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3E,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACxE,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAA;QAE5D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE;YACpC,SAAS,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB;YAC5F,YAAY,EAAE,QAAQ;SACvB,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ;gBAC7B,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,OAAO,CAAC,cAAc;oBACtB,CAAC,CAAC,kDAAkD;oBACpD,CAAC,CAAC,mDAAmD,OAAO,CAAC,IAAI,EAAE,CAAA;YACvE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;QACvB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAY,CAAA;QAC/F,MAAM,eAAe,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QACzD,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAA;QAC1C,IAAI,WAAW,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QACzF,IAAI,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE;YACrC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,wBAAwB,EAAE,YAAY,EAAE,QAAQ;SAClF,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;QAChC,IAAI,cAAc,GAAG,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QACvD,IAAI,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAA;QAC7C,MAAM,sBAAsB,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC;eACjE,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC;eACtC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QAC3C,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACvF,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;YAC3H,cAAc,GAAG,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACnD,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAA;QAC3C,CAAC;QACD,IAAI,cAAc,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;YACrF,OAAO,MAAM,CAAC,mEAAmE,CAAC,CAAA;QACpF,CAAC;QAED,MAAM,iBAAiB,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QAChE,MAAM,iBAAiB,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QAChE,MAAM,UAAU,GAAG,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC,CAAA;QACrG,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9F,OAAO;gBACL,eAAe,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM;oBACtC,WAAW;oBACX,KAAK,EAAE,eAAe;oBACtB,iBAAiB;oBACjB,iBAAiB;oBACjB,eAAe,EAAE,IAAI;oBACrB,KAAK,EAAE,oDAAoD,UAAU,CAAC,IAAI,EAAE;iBAC7E;gBACD,UAAU;aACX,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;QAC9G,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC/C,IAAI,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACtE,OAAO;gBACL,eAAe,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM;oBACtC,WAAW;oBACX,KAAK,EAAE,eAAe;oBACtB,iBAAiB;oBACjB,iBAAiB;oBACjB,eAAe,EAAE,IAAI;oBACrB,KAAK,EAAE,qDAAqD;iBAC7D;gBACD,UAAU;aACX,CAAA;QACH,CAAC;QACD,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAA;QACvD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO;gBACL,eAAe,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM;oBACtC,WAAW;oBACX,KAAK,EAAE,eAAe;oBACtB,iBAAiB;oBACjB,iBAAiB;oBACjB,eAAe,EAAE,IAAI;oBACrB,KAAK,EAAE,uEAAuE;iBAC/E;gBACD,UAAU;aACX,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;YAC9G,CAAC,CAAC,UAAmB;YACrB,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,UAAmB,CAAC,CAAC,CAAC,UAAmB,CAAA;QAErE,OAAO;YACL,eAAe,EAAE;gBACf,MAAM;gBACN,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM;gBACtC,WAAW;gBACX,KAAK,EAAE,eAAe;gBACtB,iBAAiB;gBACjB,iBAAiB;gBACjB,eAAe;aAChB;YACD,UAAU;SACX,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,0DAA0D,CAAC,CAAA;IAC3E,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACxF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,IAAI;QACd,iBAAiB,EAAE,EAAE;QACrB,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,IAAI;KACtB,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAmB,EACnB,cAAsB,EACtB,WAAwB,EACxB,QAAmB;IAEnB,YAAY,CAAC,QAAQ,CAAC,CAAA;IACtB,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC3C,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE;QACvD,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE;QACrG,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QACxB,QAAQ,EAAE;YACR,YAAY,EAAE,CAAC;YACf,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,IAAI;YACpB,gBAAgB,EAAE,EAAE;YACpB,YAAY,EAAE,EAAE;YAChB,GAAG,EAAE,WAAW;SACjB;QACD,QAAQ,EAAE;YACR,YAAY,EAAE,YAAY;YAC1B,iBAAiB,EAAE,WAAW,CAAC,SAAS,CAAC,MAAM;YAC/C,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC,MAAM;YACvD,oBAAoB,EAAE,eAAe;YACrC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,MAAM;YACzC,mBAAmB,EAAE,aAAa;YAClC,iBAAiB,EAAE,SAAS;SAC7B;QACD,QAAQ;QACR,WAAW;QACX,eAAe,EAAE,YAAY;QAC7B,OAAO,EAAE,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC;KAChD,CAAA;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAqB,EAAE,QAAmB;IACxE,IAAI,QAAQ,CAAC,iBAAiB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,WAAW,CACvB,gCAAgC,EAChC,MAAM,EACN,wCAAwC,EACxC,qFAAqF,CACtF,CAAC,CAAA;IACJ,CAAC;SAAM,IAAI,QAAQ,CAAC,iBAAiB,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3D,QAAQ,CAAC,IAAI,CAAC,WAAW,CACvB,gCAAgC,EAChC,UAAU,EACV,mCAAmC,EACnC,iGAAiG,CAClG,CAAC,CAAA;IACJ,CAAC;SAAM,IAAI,QAAQ,CAAC,iBAAiB,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC,WAAW,CACvB,qCAAqC,EACrC,MAAM,EACN,6CAA6C,EAC7C,wGAAwG,CACzG,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,WAAW,CACvB,wBAAwB,EACxB,QAAQ,EACR,sCAAsC,EACtC,sGAAsG,CACvG,CAAC,CAAA;IACJ,CAAC;SAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,WAAW,CACvB,wBAAwB,EACxB,UAAU,EACV,oCAAoC,EACpC,2EAA2E,CAC5E,CAAC,CAAA;IACJ,CAAC;SAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC,WAAW,CACvB,6BAA6B,EAC7B,MAAM,EACN,sCAAsC,EACtC,oFAAoF,CACrF,CAAC,CAAA;IACJ,CAAC;SAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,WAAW,CACvB,4BAA4B,EAC5B,QAAQ,EACR,gDAAgD,EAChD,0FAA0F,CAC3F,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC,WAAW,CACvB,yBAAyB,EACzB,MAAM,EACN,4CAA4C,EAC5C,QAAQ,CAAC,eAAe,CAAC,KAAK,IAAI,2EAA2E,CAC9G,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC,WAAW,CACvB,8BAA8B,EAC9B,UAAU,EACV,kDAAkD,EAClD,2EAA2E,EAC3E,EAAE,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC,iBAAiB,EAAE,CACzD,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC,WAAW,CACvB,8BAA8B,EAC9B,MAAM,EACN,iDAAiD,EACjD,+DAA+D,EAC/D,EAAE,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC,iBAAiB,EAAE,CACzD,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC,eAAe,CAAA;IAChE,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAa,eAAe,CAAC,QAAQ,GAAG,CAAC;YACrD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC;gBACxB,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,QAAQ,CAAA;QACd,QAAQ,CAAC,IAAI,CAAC,WAAW,CACvB,kCAAkC,EAClC,QAAQ,EACR,0DAA0D,EAC1D,6FAA6F,EAC7F;YACE,KAAK,EAAE,eAAe,CAAC,KAAK;YAC5B,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,GAAG,EAAE,eAAe,CAAC,GAAG;SACzB,CACF,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,OAAO,GAAsB,EAAE;IACpF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IAChC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC,CAAA;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAA;IAC7C,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAA;IACrH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAA;IAC3H,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACnE,MAAM,cAAc,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IAErF,IAAI,iBAAiB,GAAqC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IAC/F,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,GAAG,IAAI,EAAE,SAAS,CAAC,CAAA;QAChH,iBAAiB,GAAG,wBAAwB,CAC1C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,QAAQ,CAAC,IAAI,CAAC,SAAS,EACvB,QAAQ,CAAC,IAAI,CAAC,UAAU,EACxB,iBAAiB,CAAC,QAAQ,CAAC,EAC3B,QAAQ,CAAC,WAAW,CACrB,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;IAC9G,CAAC;IAED,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,KAAK,SAAS,CAAA;IAC/E,MAAM,iBAAiB,GAA0B,kBAAkB;QACjE,CAAC,CAAC;YACE,MAAM,EAAE,oBAAoB;YAC5B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,aAAa,KAAK,SAAS;gBACrE,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;SAC5E;QACH,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACzB,MAAM,eAAe,GAAgB;QACnC,QAAQ;QACR,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACzC,eAAe,EAAE,OAAO,CAAC,MAAM;QAC/B,aAAa,EAAE,CAAC;QAChB,SAAS;QACT,iBAAiB;QACjB,UAAU,EAAE,iBAAiB;QAC7B,eAAe,EAAE,oBAAoB,EAAE;KACxC,CAAA;IAED,MAAM,aAAa,GAAc,EAAE,CAAA;IACnC,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACnC,aAAa,CAAC,IAAI,CAAC,WAAW,CAC5B,wBAAwB,EACxB,UAAU,EACV,0DAA0D,EAC1D,2FAA2F,EAC3F,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAC3F,CAAC,CAAA;QACF,sBAAsB,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;QACtD,OAAO,oBAAoB,CAAC,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACrE,IAAI,YAAY,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,aAAa,CAAC,IAAI,CAAC,WAAW,CAC5B,qBAAqB,EACrB,UAAU,EACV,uDAAuD,EACvD,4EAA4E,EAC5E,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CACzD,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,aAAa,CAAC,IAAI,CAAC,WAAW,CAC5B,qBAAqB,EACrB,UAAU,EACV,sCAAsC,EACtC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC,CAAA;QACF,sBAAsB,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;QACtD,OAAO,oBAAoB,CAAC,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;IACnF,CAAC;IACD,eAAe,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAA;IAErD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;QACxD,sBAAsB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;QACjD,OAAO,oBAAoB,CAAC,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAA;IAC9E,CAAC;IAED,IAAI,IAAiC,CAAA;IACrC,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1B,IAAI,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;QACjG,eAAe,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAA;QACtD,eAAe,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;IAC9C,CAAC;IAED,IAAI,YAAoB,CAAA;IACxB,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,QAAQ,GAAG;YACf,GAAG,aAAa;YAChB,GAAG,OAAO,CAAC,QAAQ;YACnB,WAAW,CACT,wCAAwC,EACxC,MAAM,EACN,oEAAoE,EACpE,+EAA+E,CAChF;SACF,CAAA;QACD,sBAAsB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;QACjD,OAAO,oBAAoB,CAAC,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAA;IAC9E,CAAC;IACD,IAAI,CAAC;QACH,IAAI,MAAkB,CAAA;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE;gBACzC,uBAAuB,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,EAAE,eAAe,CAAC,MAAM,KAAK,UAAU;aACpH,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,QAAQ,GAAG;gBACf,GAAG,aAAa;gBAChB,GAAG,OAAO,CAAC,QAAQ;gBACnB,WAAW,CACT,8BAA8B,EAC9B,UAAU,EACV,mDAAmD,EACnD,sFAAsF,CACvF;aACF,CAAA;YACD,sBAAsB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;YACjD,OAAO,oBAAoB,CAAC,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAA;QAC9E,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAA;QACvC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAA;QAC7C,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,YAAY,CAAA;QAClC,MAAM,CAAC,MAAM,GAAG;YACd,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,cAAc;YACd,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,IAAI,EAAE,IAAI,CAAC,SAAS;SACrB,CAAA;QACD,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,eAAe,CAAA;QACrC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAA;QACpD,MAAM,CAAC,QAAQ,CAAC,iBAAiB,GAAG,iBAAiB,CAAC,MAAM,CAAA;QAC5D,MAAM,CAAC,QAAQ,CAAC,oBAAoB,GAAG,IAAI,EAAE,eAAe,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,EAAE,eAAe,CAAC,MAAM,KAAK,UAAU;YAC/H,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,eAAe,CAAA;QACnB,MAAM,CAAC,QAAQ,CAAC,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,MAAM,CAAA;QAC9D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC3D,IAAI,YAAY,KAAK,IAAI,CAAC,IAAI,IAAI,eAAe,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACnE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAC9B,gCAAgC,EAChC,UAAU,EACV,oEAAoE,EACpE,4GAA4G,EAC5G;gBACE,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE;gBACzC,QAAQ,EAAE,GAAG,YAAY,IAAI,eAAe,IAAI,WAAW,EAAE;aAC9D,CACF,CAAC,CAAA;QACJ,CAAC;QACD,sBAAsB,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;QACxD,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC7B,MAAM,CAAC,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACnD,MAAM,CAAC,eAAe,GAAG,YAAY,CAAA;QACrC,MAAM,CAAC,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QAC9D,OAAO,MAAM,CAAA;IACf,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAChG,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
import type { AdvisoryMatch, PackageCoordinate } from './radar-types.js';
|
|
2
|
+
type FetchLike = (input: string | URL, init?: RequestInit) => Promise<Response>;
|
|
3
|
+
export interface OsvClientOptions {
|
|
4
|
+
baseUrl?: string;
|
|
5
|
+
fetch?: FetchLike;
|
|
6
|
+
timeoutMs?: number;
|
|
7
|
+
}
|
|
8
|
+
export declare function packageKey(value: PackageCoordinate): string;
|
|
9
|
+
export declare class OsvClient {
|
|
10
|
+
private readonly baseUrl;
|
|
11
|
+
private readonly fetcher;
|
|
12
|
+
private readonly timeoutMs;
|
|
13
|
+
constructor(options?: OsvClientOptions);
|
|
14
|
+
private fetchJson;
|
|
15
|
+
query(input: readonly PackageCoordinate[]): Promise<Map<string, AdvisoryMatch[]>>;
|
|
16
|
+
}
|
|
17
|
+
export {};
|
|
18
|
+
//# sourceMappingURL=osv.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"osv.d.ts","sourceRoot":"","sources":["../../src/osv.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,iBAAiB,EAGlB,MAAM,kBAAkB,CAAA;AASzB,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AA2ID,wBAAgB,UAAU,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAE3D;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAW;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAElC,YAAY,OAAO,GAAE,gBAAqB,EAOzC;YAEa,SAAS;IAcjB,KAAK,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CA2DtF;CACF"}
|
package/dist/src/osv.js
ADDED
|
@@ -0,0 +1,238 @@
|
|
|
1
|
+
import { TOOL_VERSION } from './version.js';
|
|
2
|
+
const DEFAULT_OSV_BASE_URL = 'https://api.osv.dev/';
|
|
3
|
+
const MAX_RESPONSE_BYTES = 16 * 1024 * 1024;
|
|
4
|
+
const MAX_BATCH_SIZE = 1_000;
|
|
5
|
+
const MAX_PACKAGES = 50_000;
|
|
6
|
+
const MAX_ADVISORIES = 5_000;
|
|
7
|
+
function asRecord(value) {
|
|
8
|
+
if (typeof value !== 'object' || value === null || Array.isArray(value))
|
|
9
|
+
return undefined;
|
|
10
|
+
return value;
|
|
11
|
+
}
|
|
12
|
+
function strings(value, limit = 100) {
|
|
13
|
+
if (!Array.isArray(value))
|
|
14
|
+
return [];
|
|
15
|
+
return value.filter((item) => typeof item === 'string').slice(0, limit);
|
|
16
|
+
}
|
|
17
|
+
function normalizeBaseUrl(input) {
|
|
18
|
+
const url = new URL(input);
|
|
19
|
+
if (url.protocol !== 'https:')
|
|
20
|
+
throw new Error('OSV base URL must use HTTPS');
|
|
21
|
+
if (url.username !== '' || url.password !== '' || url.search !== '' || url.hash !== '') {
|
|
22
|
+
throw new Error('OSV base URL must not contain credentials, a query string or a fragment');
|
|
23
|
+
}
|
|
24
|
+
if (!url.pathname.endsWith('/'))
|
|
25
|
+
url.pathname += '/';
|
|
26
|
+
return url.toString();
|
|
27
|
+
}
|
|
28
|
+
function severity(value) {
|
|
29
|
+
if (typeof value !== 'string')
|
|
30
|
+
return 'unknown';
|
|
31
|
+
switch (value.toLowerCase()) {
|
|
32
|
+
case 'info': return 'info';
|
|
33
|
+
case 'low': return 'low';
|
|
34
|
+
case 'moderate':
|
|
35
|
+
case 'medium': return 'medium';
|
|
36
|
+
case 'high': return 'high';
|
|
37
|
+
case 'critical': return 'critical';
|
|
38
|
+
default: return 'unknown';
|
|
39
|
+
}
|
|
40
|
+
}
|
|
41
|
+
async function boundedJson(response) {
|
|
42
|
+
if (!response.ok)
|
|
43
|
+
throw new Error(`OSV returned HTTP ${response.status}`);
|
|
44
|
+
const declared = response.headers.get('content-length');
|
|
45
|
+
if (declared !== null && Number(declared) > MAX_RESPONSE_BYTES)
|
|
46
|
+
throw new Error('OSV response exceeds the byte limit');
|
|
47
|
+
if (response.body === null)
|
|
48
|
+
throw new Error('OSV returned an empty response');
|
|
49
|
+
const reader = response.body.getReader();
|
|
50
|
+
const chunks = [];
|
|
51
|
+
let total = 0;
|
|
52
|
+
while (true) {
|
|
53
|
+
const next = await reader.read();
|
|
54
|
+
if (next.done)
|
|
55
|
+
break;
|
|
56
|
+
const chunk = Buffer.from(next.value);
|
|
57
|
+
total += chunk.length;
|
|
58
|
+
if (total > MAX_RESPONSE_BYTES) {
|
|
59
|
+
await reader.cancel('OSV response exceeded byte limit');
|
|
60
|
+
throw new Error('OSV response exceeds the byte limit');
|
|
61
|
+
}
|
|
62
|
+
chunks.push(chunk);
|
|
63
|
+
}
|
|
64
|
+
try {
|
|
65
|
+
return JSON.parse(Buffer.concat(chunks, total).toString('utf8'));
|
|
66
|
+
}
|
|
67
|
+
catch {
|
|
68
|
+
throw new Error('OSV returned invalid JSON');
|
|
69
|
+
}
|
|
70
|
+
}
|
|
71
|
+
function parseStubs(value, expected) {
|
|
72
|
+
const root = asRecord(value);
|
|
73
|
+
if (!Array.isArray(root?.results) || root.results.length !== expected) {
|
|
74
|
+
throw new Error('OSV batch response does not align with the submitted package versions');
|
|
75
|
+
}
|
|
76
|
+
return root.results.map((rawResult) => {
|
|
77
|
+
const result = asRecord(rawResult);
|
|
78
|
+
if (!Array.isArray(result?.vulns))
|
|
79
|
+
return [];
|
|
80
|
+
return result.vulns.slice(0, MAX_ADVISORIES).flatMap((rawVulnerability) => {
|
|
81
|
+
const vulnerability = asRecord(rawVulnerability);
|
|
82
|
+
const id = typeof vulnerability?.id === 'string' ? vulnerability.id : undefined;
|
|
83
|
+
const modified = typeof vulnerability?.modified === 'string' ? vulnerability.modified : undefined;
|
|
84
|
+
return id === undefined || modified === undefined ? [] : [{ id, modified }];
|
|
85
|
+
});
|
|
86
|
+
});
|
|
87
|
+
}
|
|
88
|
+
function parseAdvisory(value, packageName) {
|
|
89
|
+
const root = asRecord(value);
|
|
90
|
+
if (root === undefined)
|
|
91
|
+
throw new Error('OSV advisory is not an object');
|
|
92
|
+
const id = typeof root?.id === 'string' ? root.id : undefined;
|
|
93
|
+
const modified = typeof root?.modified === 'string' ? root.modified : undefined;
|
|
94
|
+
if (id === undefined || modified === undefined)
|
|
95
|
+
throw new Error('OSV advisory is missing id or modified time');
|
|
96
|
+
let rawSeverity = asRecord(root.database_specific)?.severity;
|
|
97
|
+
const fixedVersions = new Set();
|
|
98
|
+
if (Array.isArray(root.affected)) {
|
|
99
|
+
for (const rawAffected of root.affected) {
|
|
100
|
+
const affected = asRecord(rawAffected);
|
|
101
|
+
const affectedPackage = asRecord(affected?.package);
|
|
102
|
+
if (affectedPackage?.ecosystem !== 'npm' || affectedPackage.name !== packageName)
|
|
103
|
+
continue;
|
|
104
|
+
rawSeverity ??= asRecord(affected?.ecosystem_specific)?.severity;
|
|
105
|
+
if (!Array.isArray(affected?.ranges))
|
|
106
|
+
continue;
|
|
107
|
+
for (const rawRange of affected.ranges) {
|
|
108
|
+
const range = asRecord(rawRange);
|
|
109
|
+
if (!Array.isArray(range?.events))
|
|
110
|
+
continue;
|
|
111
|
+
for (const rawEvent of range.events) {
|
|
112
|
+
const event = asRecord(rawEvent);
|
|
113
|
+
if (typeof event?.fixed === 'string')
|
|
114
|
+
fixedVersions.add(event.fixed);
|
|
115
|
+
}
|
|
116
|
+
}
|
|
117
|
+
}
|
|
118
|
+
}
|
|
119
|
+
const references = Array.isArray(root.references)
|
|
120
|
+
? root.references.flatMap((rawReference) => {
|
|
121
|
+
const reference = asRecord(rawReference);
|
|
122
|
+
if (typeof reference?.url !== 'string')
|
|
123
|
+
return [];
|
|
124
|
+
try {
|
|
125
|
+
const url = new URL(reference.url);
|
|
126
|
+
return url.protocol === 'https:' || url.protocol === 'http:' ? [url.toString()] : [];
|
|
127
|
+
}
|
|
128
|
+
catch {
|
|
129
|
+
return [];
|
|
130
|
+
}
|
|
131
|
+
}).slice(0, 100)
|
|
132
|
+
: [];
|
|
133
|
+
const published = typeof root.published === 'string' ? root.published : undefined;
|
|
134
|
+
const withdrawn = typeof root.withdrawn === 'string' ? root.withdrawn : undefined;
|
|
135
|
+
return {
|
|
136
|
+
id,
|
|
137
|
+
aliases: strings(root.aliases),
|
|
138
|
+
summary: typeof root.summary === 'string' ? root.summary.slice(0, 8_192) : '(no summary supplied)',
|
|
139
|
+
details: typeof root.details === 'string' ? root.details.slice(0, 64 * 1_024) : '',
|
|
140
|
+
severity: id.startsWith('MAL-') ? 'critical' : severity(rawSeverity),
|
|
141
|
+
...(published === undefined ? {} : { published }),
|
|
142
|
+
modified,
|
|
143
|
+
...(withdrawn === undefined ? {} : { withdrawn }),
|
|
144
|
+
fixedVersions: [...fixedVersions].sort(),
|
|
145
|
+
references,
|
|
146
|
+
};
|
|
147
|
+
}
|
|
148
|
+
export function packageKey(value) {
|
|
149
|
+
return `${value.ecosystem}:${value.name}@${value.version}`;
|
|
150
|
+
}
|
|
151
|
+
export class OsvClient {
|
|
152
|
+
baseUrl;
|
|
153
|
+
fetcher;
|
|
154
|
+
timeoutMs;
|
|
155
|
+
constructor(options = {}) {
|
|
156
|
+
this.baseUrl = normalizeBaseUrl(options.baseUrl ?? DEFAULT_OSV_BASE_URL);
|
|
157
|
+
this.fetcher = options.fetch ?? fetch;
|
|
158
|
+
this.timeoutMs = options.timeoutMs ?? 20_000;
|
|
159
|
+
if (!Number.isSafeInteger(this.timeoutMs) || this.timeoutMs < 1_000 || this.timeoutMs > 120_000) {
|
|
160
|
+
throw new Error('OSV timeout must be between 1000 and 120000 milliseconds');
|
|
161
|
+
}
|
|
162
|
+
}
|
|
163
|
+
async fetchJson(path, init) {
|
|
164
|
+
const url = new URL(path, this.baseUrl);
|
|
165
|
+
return boundedJson(await this.fetcher(url, {
|
|
166
|
+
...init,
|
|
167
|
+
headers: {
|
|
168
|
+
accept: 'application/json',
|
|
169
|
+
'content-type': 'application/json',
|
|
170
|
+
'user-agent': `upstream-radar/${TOOL_VERSION}`,
|
|
171
|
+
...init?.headers,
|
|
172
|
+
},
|
|
173
|
+
signal: AbortSignal.timeout(this.timeoutMs),
|
|
174
|
+
}));
|
|
175
|
+
}
|
|
176
|
+
async query(input) {
|
|
177
|
+
const unique = [...new Map(input.map(item => [packageKey(item), item])).values()];
|
|
178
|
+
if (unique.length > MAX_PACKAGES)
|
|
179
|
+
throw new Error(`OSV query exceeds the ${MAX_PACKAGES} package limit`);
|
|
180
|
+
for (const item of unique) {
|
|
181
|
+
if (item.ecosystem !== 'npm' || item.name.length === 0 || item.version.length === 0) {
|
|
182
|
+
throw new Error('OSV queries require an exact npm package name and version');
|
|
183
|
+
}
|
|
184
|
+
}
|
|
185
|
+
const stubsByPackage = new Map();
|
|
186
|
+
for (let offset = 0; offset < unique.length; offset += MAX_BATCH_SIZE) {
|
|
187
|
+
const chunk = unique.slice(offset, offset + MAX_BATCH_SIZE);
|
|
188
|
+
const response = await this.fetchJson('v1/querybatch', {
|
|
189
|
+
method: 'POST',
|
|
190
|
+
body: JSON.stringify({
|
|
191
|
+
queries: chunk.map(item => ({
|
|
192
|
+
package: { ecosystem: item.ecosystem, name: item.name },
|
|
193
|
+
version: item.version,
|
|
194
|
+
})),
|
|
195
|
+
}),
|
|
196
|
+
});
|
|
197
|
+
const parsed = parseStubs(response, chunk.length);
|
|
198
|
+
for (let index = 0; index < chunk.length; index += 1) {
|
|
199
|
+
const coordinate = chunk[index];
|
|
200
|
+
if (coordinate !== undefined)
|
|
201
|
+
stubsByPackage.set(packageKey(coordinate), parsed[index] ?? []);
|
|
202
|
+
}
|
|
203
|
+
}
|
|
204
|
+
const requested = new Map();
|
|
205
|
+
for (const coordinate of unique) {
|
|
206
|
+
for (const stub of stubsByPackage.get(packageKey(coordinate)) ?? []) {
|
|
207
|
+
if (!/^[A-Za-z0-9._-]{1,256}$/.test(stub.id))
|
|
208
|
+
throw new Error('OSV returned an invalid advisory id');
|
|
209
|
+
requested.set(stub.id, coordinate.name);
|
|
210
|
+
}
|
|
211
|
+
}
|
|
212
|
+
if (requested.size > MAX_ADVISORIES)
|
|
213
|
+
throw new Error(`OSV query exceeds the ${MAX_ADVISORIES} advisory limit`);
|
|
214
|
+
const details = new Map();
|
|
215
|
+
const queue = [...requested.entries()];
|
|
216
|
+
const workers = Array.from({ length: Math.min(8, queue.length) }, async () => {
|
|
217
|
+
while (queue.length > 0) {
|
|
218
|
+
const next = queue.shift();
|
|
219
|
+
if (next === undefined)
|
|
220
|
+
return;
|
|
221
|
+
const [id, packageName] = next;
|
|
222
|
+
const advisory = parseAdvisory(await this.fetchJson(`v1/vulns/${encodeURIComponent(id)}`), packageName);
|
|
223
|
+
details.set(id, advisory);
|
|
224
|
+
}
|
|
225
|
+
});
|
|
226
|
+
await Promise.all(workers);
|
|
227
|
+
const result = new Map();
|
|
228
|
+
for (const coordinate of unique) {
|
|
229
|
+
const matches = (stubsByPackage.get(packageKey(coordinate)) ?? []).flatMap((stub) => {
|
|
230
|
+
const advisory = details.get(stub.id);
|
|
231
|
+
return advisory === undefined || advisory.withdrawn !== undefined ? [] : [{ package: coordinate, advisory }];
|
|
232
|
+
});
|
|
233
|
+
result.set(packageKey(coordinate), matches);
|
|
234
|
+
}
|
|
235
|
+
return result;
|
|
236
|
+
}
|
|
237
|
+
}
|
|
238
|
+
//# sourceMappingURL=osv.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"osv.js","sourceRoot":"","sources":["../../src/osv.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,MAAM,oBAAoB,GAAG,sBAAsB,CAAA;AACnD,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAC3C,MAAM,cAAc,GAAG,KAAK,CAAA;AAC5B,MAAM,YAAY,GAAG,MAAM,CAAA;AAC3B,MAAM,cAAc,GAAG,KAAK,CAAA;AAe5B,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACzF,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,KAAK,GAAG,GAAG;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACpC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AACzF,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IAC1B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IAC7E,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;IAC5F,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAA;IACpD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/C,QAAQ,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,KAAK,MAAM,EAAE,OAAO,MAAM,CAAA;QAC1B,KAAK,KAAK,EAAE,OAAO,KAAK,CAAA;QACxB,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ,EAAE,OAAO,QAAQ,CAAA;QAC9B,KAAK,MAAM,EAAE,OAAO,MAAM,CAAA;QAC1B,KAAK,UAAU,EAAE,OAAO,UAAU,CAAA;QAClC,SAAS,OAAO,SAAS,CAAA;IAC3B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAkB;IAC3C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IACzE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACvD,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACtH,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;IACxC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAChC,IAAI,IAAI,CAAC,IAAI;YAAE,MAAK;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;QACrB,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAA;YACvD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,QAAgB;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;IAC1F,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,EAAE;YACxE,MAAM,aAAa,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAA;YAChD,MAAM,EAAE,GAAG,OAAO,aAAa,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;YAC/E,MAAM,QAAQ,GAAG,OAAO,aAAa,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;YACjG,OAAO,EAAE,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC7E,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,WAAmB;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACxE,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7D,MAAM,QAAQ,GAAG,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/E,IAAI,EAAE,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAE9G,IAAI,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAA;IAC5D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAA;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAA;YACtC,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YACnD,IAAI,eAAe,EAAE,SAAS,KAAK,KAAK,IAAI,eAAe,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAQ;YAC1F,WAAW,KAAK,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EAAE,QAAQ,CAAA;YAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAAE,SAAQ;YAC9C,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;gBAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;oBAAE,SAAQ;gBAC3C,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;oBAChC,IAAI,OAAO,KAAK,EAAE,KAAK,KAAK,QAAQ;wBAAE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBACtE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;YACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAA;YACxC,IAAI,OAAO,SAAS,EAAE,GAAG,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAA;YACjD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;gBAClC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACtF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAA;YACX,CAAC;QACH,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAClB,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IACjF,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IAEjF,OAAO;QACL,EAAE;QACF,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,uBAAuB;QAClG,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;QAClF,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACpE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,QAAQ;QACR,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE;QACxC,UAAU;KACX,CAAA;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAwB;IACjD,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAA;AAC5D,CAAC;AAED,MAAM,OAAO,SAAS;IACH,OAAO,CAAQ;IACf,OAAO,CAAW;IAClB,SAAS,CAAQ;IAElC,YAAY,OAAO,GAAqB,EAAE;QACxC,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,IAAI,oBAAoB,CAAC,CAAA;QACxE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAA;QACrC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAA;QAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,KAAK,IAAI,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;QAC7E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAkB;QACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QACvC,OAAO,WAAW,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACzC,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,kBAAkB,YAAY,EAAE;gBAC9C,GAAG,IAAI,EAAE,OAAO;aACjB;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;SAC5C,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAmC;QAC7C,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACjF,IAAI,MAAM,CAAC,MAAM,GAAG,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,YAAY,gBAAgB,CAAC,CAAA;QACxG,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpF,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,GAAG,EAAqB,CAAA;QACnD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,cAAc,EAAE,CAAC;YACtE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAAA;YAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBAC1B,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;wBACvD,OAAO,EAAE,IAAI,CAAC,OAAO;qBACtB,CAAC,CAAC;iBACJ,CAAC;aACH,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;YACjD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;gBAC/B,IAAI,UAAU,KAAK,SAAS;oBAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YAC/F,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAA;QAC3C,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACpE,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;gBACpG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,GAAG,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,cAAc,iBAAiB,CAAC,CAAA;QAE9G,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAA;QACxD,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAA;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YAC3E,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;gBAC1B,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAM;gBAC9B,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,GAAG,IAAI,CAAA;gBAC9B,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAA;gBACvG,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;YAC3B,CAAC;QACH,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAE1B,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAA;QACjD,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACrC,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC9G,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAA;QAC7C,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;CACF"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import type { Finding, Verdict } from './types.js';
|
|
2
|
+
export declare function decideVerdict(findings: readonly Finding[]): Verdict;
|
|
3
|
+
export declare function verdictAtLeast(actual: Verdict, threshold: Verdict): boolean;
|
|
4
|
+
export declare function stricterVerdict(left: Verdict, right: Verdict): Verdict;
|
|
5
|
+
//# sourceMappingURL=policy.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAY,OAAO,EAAE,MAAM,YAAY,CAAA;AAiB5D,wBAAgB,aAAa,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAYnE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAE3E;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAEtE"}
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
const severityRank = {
|
|
2
|
+
info: 0,
|
|
3
|
+
low: 1,
|
|
4
|
+
medium: 2,
|
|
5
|
+
high: 3,
|
|
6
|
+
critical: 4,
|
|
7
|
+
};
|
|
8
|
+
const verdictRank = {
|
|
9
|
+
allow: 0,
|
|
10
|
+
warn: 1,
|
|
11
|
+
review: 2,
|
|
12
|
+
block: 3,
|
|
13
|
+
};
|
|
14
|
+
export function decideVerdict(findings) {
|
|
15
|
+
const highest = findings.reduce((current, finding) => severityRank[finding.severity] > severityRank[current]
|
|
16
|
+
? finding.severity
|
|
17
|
+
: current, 'info');
|
|
18
|
+
if (highest === 'critical')
|
|
19
|
+
return 'block';
|
|
20
|
+
if (highest === 'high')
|
|
21
|
+
return 'review';
|
|
22
|
+
if (highest === 'medium' || highest === 'low')
|
|
23
|
+
return 'warn';
|
|
24
|
+
return 'allow';
|
|
25
|
+
}
|
|
26
|
+
export function verdictAtLeast(actual, threshold) {
|
|
27
|
+
return verdictRank[actual] >= verdictRank[threshold];
|
|
28
|
+
}
|
|
29
|
+
export function stricterVerdict(left, right) {
|
|
30
|
+
return verdictRank[left] >= verdictRank[right] ? left : right;
|
|
31
|
+
}
|
|
32
|
+
//# sourceMappingURL=policy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":"AAEA,MAAM,YAAY,GAA6B;IAC7C,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAA;AAED,MAAM,WAAW,GAA4B;IAC3C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,CAAC;CACT,CAAA;AAED,MAAM,UAAU,aAAa,CAAC,QAA4B;IACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAC7B,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC;QAC1E,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,OAAO,EACX,MAAM,CACP,CAAA;IAED,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,OAAO,CAAA;IAC1C,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAA;IACvC,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,MAAM,CAAA;IAC5D,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAe,EAAE,SAAkB;IAChE,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAa,EAAE,KAAc;IAC3D,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAA;AAC/D,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"radar-render.d.ts","sourceRoot":"","sources":["../../src/radar-render.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAsB,UAAU,EAAsB,MAAM,kBAAkB,CAAA;AAgD1F,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAE1D;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,CAGvE"}
|
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
function display(value, max = 2_048) {
|
|
2
|
+
const escaped = value.replace(/[\u0000-\u001f\u007f-\u009f]/g, character => (`\\u${character.codePointAt(0)?.toString(16).padStart(4, '0') ?? '0000'}`));
|
|
3
|
+
return escaped.length <= max ? escaped : `${escaped.slice(0, max - 1)}…`;
|
|
4
|
+
}
|
|
5
|
+
function packageLabel(value) {
|
|
6
|
+
return `${display(value.name)}@${display(value.version)}`;
|
|
7
|
+
}
|
|
8
|
+
function renderVulnerability(event) {
|
|
9
|
+
const severity = event.kind === 'malware' ? 'CRITICAL' : event.advisory.severity.toUpperCase();
|
|
10
|
+
const lines = [
|
|
11
|
+
`[${severity}][${event.change.toUpperCase()}] ${event.kind === 'malware' ? 'Malicious package' : 'Dependency vulnerability'}`,
|
|
12
|
+
`Project: ${display(event.project.name)} (${display(event.project.id)})`,
|
|
13
|
+
`Plugin: ${packageLabel(event.plugin)}`,
|
|
14
|
+
`Affected: ${packageLabel(event.affected)}`,
|
|
15
|
+
`Advisory: ${display(event.advisory.id)}${event.advisory.aliases.length === 0 ? '' : ` / ${event.advisory.aliases.map(item => display(item)).join(', ')}`}`,
|
|
16
|
+
`Summary: ${display(event.advisory.summary)}`,
|
|
17
|
+
];
|
|
18
|
+
if (event.paths.length > 0) {
|
|
19
|
+
lines.push('Paths:');
|
|
20
|
+
for (const path of event.paths)
|
|
21
|
+
lines.push(` ${path.map(packageLabel).join(' -> ')}`);
|
|
22
|
+
}
|
|
23
|
+
lines.push(`Fixed versions: ${event.advisory.fixedVersions.length === 0 ? 'none published' : event.advisory.fixedVersions.map(item => display(item)).join(', ')}`);
|
|
24
|
+
lines.push(`Route: ${event.route.owner === undefined ? '(no owner)' : display(event.route.owner)} via ${event.route.channels.map(item => display(item)).join(', ')}`);
|
|
25
|
+
return lines;
|
|
26
|
+
}
|
|
27
|
+
function renderCompatibility(event) {
|
|
28
|
+
const lines = [
|
|
29
|
+
`[COMPATIBILITY][${event.change.toUpperCase()}] ${event.change === 'resolved' ? 'Candidate risk no longer applies' : 'Candidate update needs project analysis'}`,
|
|
30
|
+
`Project: ${display(event.project.name)} (${display(event.project.id)})`,
|
|
31
|
+
`Installed plugin: ${packageLabel(event.plugin)}`,
|
|
32
|
+
`Changed package: ${packageLabel(event.installed)}`,
|
|
33
|
+
`Candidate: ${packageLabel(event.candidate)}`,
|
|
34
|
+
'Signals:',
|
|
35
|
+
];
|
|
36
|
+
for (const signal of event.signals) {
|
|
37
|
+
lines.push(` [${signal.confidence.toUpperCase()}] ${display(signal.code)}: ${display(signal.summary)}`);
|
|
38
|
+
}
|
|
39
|
+
lines.push(`Route: ${event.route.owner === undefined ? '(no owner)' : display(event.route.owner)} via ${event.route.channels.map(item => display(item)).join(', ')}`);
|
|
40
|
+
return lines;
|
|
41
|
+
}
|
|
42
|
+
export function renderRadarEvent(event) {
|
|
43
|
+
return `${(event.kind === 'compatibility' ? renderCompatibility(event) : renderVulnerability(event)).join('\n')}\n`;
|
|
44
|
+
}
|
|
45
|
+
export function renderRadarEvents(events) {
|
|
46
|
+
if (events.length === 0)
|
|
47
|
+
return 'No vulnerability or compatibility changes require attention.\n';
|
|
48
|
+
return events.map(renderRadarEvent).join('\n');
|
|
49
|
+
}
|
|
50
|
+
//# sourceMappingURL=radar-render.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"radar-render.js","sourceRoot":"","sources":["../../src/radar-render.ts"],"names":[],"mappings":"AAEA,SAAS,OAAO,CAAC,KAAa,EAAE,GAAG,GAAG,KAAK;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,+BAA+B,EAAE,SAAS,CAAC,EAAE,CAAC,CAC1E,MAAM,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAC1E,CAAC,CAAA;IACF,OAAO,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAA;AAC1E,CAAC;AAED,SAAS,YAAY,CAAC,KAAwC;IAC5D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAA;AAC3D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;IAC9F,MAAM,KAAK,GAAG;QACZ,IAAI,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,0BAA0B,EAAE;QAC7H,YAAY,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG;QACxE,WAAW,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;QACvC,aAAa,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;QAC3C,aAAa,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;QAC3J,YAAY,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;KAC9C,CAAA;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClK,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACrK,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,MAAM,KAAK,GAAG;QACZ,mBAAmB,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,yCAAyC,EAAE;QAChK,YAAY,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG;QACxE,qBAAqB,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;QACjD,oBAAoB,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;QACnD,cAAc,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;QAC7C,UAAU;KACX,CAAA;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC1G,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACrK,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAA;AACrH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA6B;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,gEAAgE,CAAA;IAChG,OAAO,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAChD,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import { type RadarState } from './radar-types.js';
|
|
2
|
+
export declare function parseRadarState(value: unknown): RadarState;
|
|
3
|
+
export declare function loadRadarState(path: string): Promise<RadarState>;
|
|
4
|
+
export declare function saveRadarState(path: string, state: RadarState): Promise<void>;
|
|
5
|
+
//# sourceMappingURL=radar-state.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"radar-state.d.ts","sourceRoot":"","sources":["../../src/radar-state.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAA;AAOzB,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CA2C1D;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAUtE;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAWnF"}
|
|
@@ -0,0 +1,87 @@
|
|
|
1
|
+
import { randomUUID } from 'node:crypto';
|
|
2
|
+
import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
|
|
3
|
+
import { basename, dirname, join, resolve } from 'node:path';
|
|
4
|
+
import { emptyRadarState } from './radar.js';
|
|
5
|
+
import { ANALYSIS_TASK_SCHEMA, RADAR_EVENT_SCHEMA, RADAR_STATE_SCHEMA, } from './radar-types.js';
|
|
6
|
+
function asRecord(value) {
|
|
7
|
+
if (typeof value !== 'object' || value === null || Array.isArray(value))
|
|
8
|
+
return undefined;
|
|
9
|
+
return value;
|
|
10
|
+
}
|
|
11
|
+
export function parseRadarState(value) {
|
|
12
|
+
const root = asRecord(value);
|
|
13
|
+
if (root?.schema !== RADAR_STATE_SCHEMA)
|
|
14
|
+
throw new Error('radar state has an unsupported schema');
|
|
15
|
+
const active = asRecord(root.activeVulnerabilities);
|
|
16
|
+
if (active === undefined)
|
|
17
|
+
throw new Error('radar state has no active vulnerability map');
|
|
18
|
+
const activeCompatibility = asRecord(root.activeCompatibility);
|
|
19
|
+
if (activeCompatibility === undefined)
|
|
20
|
+
throw new Error('radar state has no active compatibility map');
|
|
21
|
+
if (!Array.isArray(root.pendingAnalysisTasks) || root.pendingAnalysisTasks.length > 100_000) {
|
|
22
|
+
throw new Error('radar state has an invalid pending analysis queue');
|
|
23
|
+
}
|
|
24
|
+
for (const rawTask of root.pendingAnalysisTasks) {
|
|
25
|
+
const task = asRecord(rawTask);
|
|
26
|
+
const event = asRecord(task?.event);
|
|
27
|
+
if (task?.schema !== ANALYSIS_TASK_SCHEMA || typeof task.id !== 'string'
|
|
28
|
+
|| typeof task.createdAt !== 'string' || event?.schema !== RADAR_EVENT_SCHEMA
|
|
29
|
+
|| typeof event.id !== 'string' || typeof event.incidentId !== 'string'
|
|
30
|
+
|| (event.kind !== 'vulnerability' && event.kind !== 'malware' && event.kind !== 'compatibility')) {
|
|
31
|
+
throw new Error('radar state contains an invalid pending analysis task');
|
|
32
|
+
}
|
|
33
|
+
}
|
|
34
|
+
if (Object.keys(active).length > 1_000_000)
|
|
35
|
+
throw new Error('radar state exceeds the active match limit');
|
|
36
|
+
if (Object.keys(activeCompatibility).length > 1_000_000) {
|
|
37
|
+
throw new Error('radar state exceeds the active compatibility limit');
|
|
38
|
+
}
|
|
39
|
+
for (const [key, rawStored] of Object.entries(active)) {
|
|
40
|
+
const stored = asRecord(rawStored);
|
|
41
|
+
const event = asRecord(stored?.event);
|
|
42
|
+
const advisory = asRecord(event?.advisory);
|
|
43
|
+
if (stored?.key !== key || event?.schema !== RADAR_EVENT_SCHEMA || typeof event.incidentId !== 'string'
|
|
44
|
+
|| (event.kind !== 'vulnerability' && event.kind !== 'malware')
|
|
45
|
+
|| typeof advisory?.id !== 'string' || typeof advisory.modified !== 'string') {
|
|
46
|
+
throw new Error(`radar state contains an invalid active match: ${key.slice(0, 256)}`);
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
for (const [key, rawStored] of Object.entries(activeCompatibility)) {
|
|
50
|
+
const stored = asRecord(rawStored);
|
|
51
|
+
const event = asRecord(stored?.event);
|
|
52
|
+
if (stored?.key !== key || event?.schema !== RADAR_EVENT_SCHEMA
|
|
53
|
+
|| event.kind !== 'compatibility' || event.incidentId !== key) {
|
|
54
|
+
throw new Error(`radar state contains an invalid compatibility match: ${key.slice(0, 256)}`);
|
|
55
|
+
}
|
|
56
|
+
}
|
|
57
|
+
return structuredClone(value);
|
|
58
|
+
}
|
|
59
|
+
export async function loadRadarState(path) {
|
|
60
|
+
try {
|
|
61
|
+
const contents = await readFile(resolve(path), 'utf8');
|
|
62
|
+
if (Buffer.byteLength(contents) > 256 * 1024 * 1024)
|
|
63
|
+
throw new Error('radar state exceeds the file size limit');
|
|
64
|
+
return parseRadarState(JSON.parse(contents));
|
|
65
|
+
}
|
|
66
|
+
catch (error) {
|
|
67
|
+
if (error.code === 'ENOENT')
|
|
68
|
+
return emptyRadarState();
|
|
69
|
+
if (error instanceof SyntaxError)
|
|
70
|
+
throw new Error('radar state is not valid JSON');
|
|
71
|
+
throw error;
|
|
72
|
+
}
|
|
73
|
+
}
|
|
74
|
+
export async function saveRadarState(path, state) {
|
|
75
|
+
const destination = resolve(path);
|
|
76
|
+
const directory = dirname(destination);
|
|
77
|
+
await mkdir(directory, { recursive: true, mode: 0o700 });
|
|
78
|
+
const temporary = join(directory, `.${basename(destination)}.${process.pid}.${randomUUID()}.tmp`);
|
|
79
|
+
try {
|
|
80
|
+
await writeFile(temporary, `${JSON.stringify(state, null, 2)}\n`, { flag: 'wx', mode: 0o600 });
|
|
81
|
+
await rename(temporary, destination);
|
|
82
|
+
}
|
|
83
|
+
finally {
|
|
84
|
+
await rm(temporary, { force: true }).catch(() => undefined);
|
|
85
|
+
}
|
|
86
|
+
}
|
|
87
|
+
//# sourceMappingURL=radar-state.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"radar-state.js","sourceRoot":"","sources":["../../src/radar-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,kBAAkB,CAAA;AAEzB,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACzF,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,IAAI,EAAE,MAAM,KAAK,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACjG,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;IACnD,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IACxF,MAAM,mBAAmB,GAAG,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC9D,IAAI,mBAAmB,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IACrG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACnC,IAAI,IAAI,EAAE,MAAM,KAAK,oBAAoB,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;eACnE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,EAAE,MAAM,KAAK,kBAAkB;eAC1E,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;eACpE,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,EAAE,CAAC;YACpG,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IACzG,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QAC1C,IAAI,MAAM,EAAE,GAAG,KAAK,GAAG,IAAI,KAAK,EAAE,MAAM,KAAK,kBAAkB,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;eAClG,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;eAC5D,OAAO,QAAQ,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,iDAAiD,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACrC,IAAI,MAAM,EAAE,GAAG,KAAK,GAAG,IAAI,KAAK,EAAE,MAAM,KAAK,kBAAkB;eAC1D,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC9F,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAe,CAAA;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;QACtD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC/G,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,eAAe,EAAE,CAAA;QAChF,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAClF,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,KAAiB;IAClE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACtC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC,CAAA;IACjG,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9F,MAAM,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IACtC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC7D,CAAC;AACH,CAAC"}
|