vaspera 2.11.0 → 2.13.0

package/dist/autofix/ast/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * AST Transform Module
+ *
+ * Provides AST-based code transformations for security fixes.
+ * Uses ts-morph for TypeScript/JavaScript manipulation.
+ *
+ * @module autofix/ast
+ */
+export * from "./types.js";
+export { transformSQLInjection, transformXSS, transformHardcodedSecrets, transformIDOR, applyASTTransform, hasASTTransform, listASTTransforms, AST_TRANSFORMS, } from "./typescript.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/autofix/ast/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/autofix/ast/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,yBAAyB,EACzB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,cAAc,GACf,MAAM,iBAAiB,CAAC"}

package/dist/autofix/ast/index.js

@@ -0,0 +1,11 @@
+/**
+ * AST Transform Module
+ *
+ * Provides AST-based code transformations for security fixes.
+ * Uses ts-morph for TypeScript/JavaScript manipulation.
+ *
+ * @module autofix/ast
+ */
+export * from "./types.js";
+export { transformSQLInjection, transformXSS, transformHardcodedSecrets, transformIDOR, applyASTTransform, hasASTTransform, listASTTransforms, AST_TRANSFORMS, } from "./typescript.js";
+//# sourceMappingURL=index.js.map

package/dist/autofix/ast/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/autofix/ast/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,yBAAyB,EACzB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,cAAc,GACf,MAAM,iBAAiB,CAAC"}

package/dist/autofix/ast/types.d.ts

@@ -0,0 +1,77 @@
+/**
+ * AST Transform Types
+ *
+ * Types for AST-based code transformations.
+ *
+ * @module autofix/ast/types
+ */
+import type { Severity } from "../../certification/types.js";
+export type SupportedLanguage = "typescript" | "javascript";
+export interface ASTTransformPattern {
+    id: string;
+    name: string;
+    description: string;
+    language: SupportedLanguage | SupportedLanguage[];
+    category: string;
+    severity: Severity;
+    risk: "low" | "medium" | "high";
+    safeToAutoApply: boolean;
+}
+export interface ASTTransformContext {
+    filePath: string;
+    projectPath: string;
+    finding: {
+        id: string;
+        file: string;
+        line: number;
+        category: string;
+        description: string;
+    };
+}
+export interface ASTTransformResult {
+    success: boolean;
+    filePath: string;
+    originalCode: string;
+    transformedCode: string;
+    changesApplied: ASTChange[];
+    error?: string;
+}
+export interface ASTChange {
+    type: "insert" | "replace" | "delete";
+    startLine: number;
+    endLine: number;
+    startColumn?: number;
+    endColumn?: number;
+    originalText: string;
+    newText: string;
+    description: string;
+}
+export interface SQLInjectionFix {
+    type: "parameterized-query" | "prepared-statement" | "orm-method";
+    originalQuery: string;
+    safeQuery: string;
+    parameters: string[];
+}
+export interface XSSFix {
+    type: "sanitize" | "escape" | "safe-method";
+    originalCode: string;
+    safeCode: string;
+    sanitizer?: string;
+}
+export interface SecretsFix {
+    type: "env-variable" | "config-file" | "secret-manager";
+    secretName: string;
+    envVarName: string;
+    originalValue: string;
+}
+export interface IDORFix {
+    type: "ownership-check" | "access-control";
+    resourceType: string;
+    checkCode: string;
+}
+export interface AuthBypassFix {
+    type: "middleware" | "decorator" | "guard";
+    authCode: string;
+    placement: "before" | "wrap";
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/autofix/ast/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/autofix/ast/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,YAAY,CAAC;AAE5D,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,iBAAiB,GAAG,iBAAiB,EAAE,CAAC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChC,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,SAAS,EAAE,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,YAAY,CAAC;IAClE,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,aAAa,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,cAAc,GAAG,aAAa,GAAG,gBAAgB,CAAC;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,iBAAiB,GAAG,gBAAgB,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAC;CAC9B"}

package/dist/autofix/ast/types.js

@@ -0,0 +1,9 @@
+/**
+ * AST Transform Types
+ *
+ * Types for AST-based code transformations.
+ *
+ * @module autofix/ast/types
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/autofix/ast/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/autofix/ast/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/autofix/ast/typescript.d.ts

@@ -0,0 +1,17 @@
+/**
+ * TypeScript/JavaScript AST Transforms
+ *
+ * Uses ts-morph for AST manipulation to fix security vulnerabilities.
+ *
+ * @module autofix/ast/typescript
+ */
+import type { ASTTransformResult, ASTTransformContext } from "./types.js";
+export declare function transformSQLInjection(context: ASTTransformContext): Promise<ASTTransformResult>;
+export declare function transformXSS(context: ASTTransformContext): Promise<ASTTransformResult>;
+export declare function transformHardcodedSecrets(context: ASTTransformContext): Promise<ASTTransformResult>;
+export declare function transformIDOR(context: ASTTransformContext): Promise<ASTTransformResult>;
+export declare const AST_TRANSFORMS: Record<string, (context: ASTTransformContext) => Promise<ASTTransformResult>>;
+export declare function applyASTTransform(category: string, context: ASTTransformContext): Promise<ASTTransformResult>;
+export declare function hasASTTransform(category: string): boolean;
+export declare function listASTTransforms(): string[];
+//# sourceMappingURL=typescript.d.ts.map

package/dist/autofix/ast/typescript.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript.d.ts","sourceRoot":"","sources":["../../../src/autofix/ast/typescript.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAa,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAOrF,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAyF7B;AAwDD,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAmH7B;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CA8G7B;AASD,wBAAsB,aAAa,CACjC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAwF7B;AAED,eAAO,MAAM,cAAc,EAAE,MAAM,CACjC,MAAM,EACN,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAQ9D,CAAC;AAEF,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAe7B;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAE5C"}

package/dist/autofix/ast/typescript.js

@@ -0,0 +1,427 @@
+/**
+ * TypeScript/JavaScript AST Transforms
+ *
+ * Uses ts-morph for AST manipulation to fix security vulnerabilities.
+ *
+ * @module autofix/ast/typescript
+ */
+import { Project, SyntaxKind, Node } from "ts-morph";
+import { readFile, writeFile } from "fs/promises";
+const project = new Project({
+    useInMemoryFileSystem: false,
+    skipFileDependencyResolution: true,
+});
+export async function transformSQLInjection(context) {
+    const { filePath, finding } = context;
+    const changes = [];
+    try {
+        const originalCode = await readFile(filePath, "utf-8");
+        const sourceFile = project.createSourceFile(`temp_${Date.now()}.ts`, originalCode, { overwrite: true });
+        const targetLine = finding.line;
+        sourceFile.forEachDescendant((node) => {
+            const startLine = node.getStartLineNumber();
+            if (Math.abs(startLine - targetLine) > 3)
+                return;
+            if (Node.isCallExpression(node)) {
+                const expression = node.getExpression();
+                const expressionText = expression.getText();
+                if (expressionText.includes("query") ||
+                    expressionText.includes("execute") ||
+                    expressionText.includes("raw")) {
+                    const args = node.getArguments();
+                    if (args.length > 0) {
+                        const firstArg = args[0];
+                        if (Node.isTemplateExpression(firstArg)) {
+                            const result = transformTemplateToParameterized(node, firstArg);
+                            if (result) {
+                                changes.push({
+                                    type: "replace",
+                                    startLine: node.getStartLineNumber(),
+                                    endLine: node.getEndLineNumber(),
+                                    originalText: node.getText(),
+                                    newText: result.newCode,
+                                    description: "Convert template literal SQL to parameterized query",
+                                });
+                                node.replaceWithText(result.newCode);
+                            }
+                        }
+                        else if (Node.isBinaryExpression(firstArg)) {
+                            const result = transformConcatToParameterized(node, firstArg);
+                            if (result) {
+                                changes.push({
+                                    type: "replace",
+                                    startLine: node.getStartLineNumber(),
+                                    endLine: node.getEndLineNumber(),
+                                    originalText: node.getText(),
+                                    newText: result.newCode,
+                                    description: "Convert string concatenation SQL to parameterized query",
+                                });
+                                node.replaceWithText(result.newCode);
+                            }
+                        }
+                    }
+                }
+            }
+        });
+        const transformedCode = sourceFile.getFullText();
+        sourceFile.delete();
+        if (changes.length > 0) {
+            await writeFile(filePath, transformedCode, "utf-8");
+        }
+        return {
+            success: changes.length > 0,
+            filePath,
+            originalCode,
+            transformedCode: changes.length > 0 ? transformedCode : originalCode,
+            changesApplied: changes,
+            error: changes.length === 0 ? "No SQL injection patterns found to fix" : undefined,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            filePath,
+            originalCode: "",
+            transformedCode: "",
+            changesApplied: [],
+            error: error instanceof Error ? error.message : "Unknown error",
+        };
+    }
+}
+function transformTemplateToParameterized(callExpr, templateExpr) {
+    const params = [];
+    let paramIndex = 1;
+    let sqlParts = [];
+    const head = templateExpr.getHead().getLiteralText();
+    sqlParts.push(head);
+    for (const span of templateExpr.getTemplateSpans()) {
+        const expr = span.getExpression();
+        params.push(expr.getText());
+        sqlParts.push(`$${paramIndex++}`);
+        sqlParts.push(span.getLiteral().getLiteralText());
+    }
+    const sql = sqlParts.join("");
+    const expression = callExpr.getExpression().getText();
+    const newCode = `${expression}(\`${sql}\`, [${params.join(", ")}])`;
+    return { newCode, params };
+}
+function transformConcatToParameterized(callExpr, binaryExpr) {
+    const params = [];
+    const sqlParts = [];
+    let paramIndex = 1;
+    function extractParts(node) {
+        if (Node.isBinaryExpression(node)) {
+            extractParts(node.getLeft());
+            extractParts(node.getRight());
+        }
+        else if (Node.isStringLiteral(node)) {
+            sqlParts.push(node.getLiteralText());
+        }
+        else {
+            params.push(node.getText());
+            sqlParts.push(`$${paramIndex++}`);
+        }
+    }
+    extractParts(binaryExpr);
+    const sql = sqlParts.join("");
+    const expression = callExpr.getExpression().getText();
+    const newCode = `${expression}(\`${sql}\`, [${params.join(", ")}])`;
+    return { newCode, params };
+}
+export async function transformXSS(context) {
+    const { filePath, finding } = context;
+    const changes = [];
+    try {
+        const originalCode = await readFile(filePath, "utf-8");
+        const sourceFile = project.createSourceFile(`temp_${Date.now()}.ts`, originalCode, { overwrite: true });
+        const targetLine = finding.line;
+        sourceFile.forEachDescendant((node) => {
+            const startLine = node.getStartLineNumber();
+            if (Math.abs(startLine - targetLine) > 3)
+                return;
+            if (Node.isBinaryExpression(node)) {
+                const left = node.getLeft();
+                if (Node.isPropertyAccessExpression(left)) {
+                    const propName = left.getName();
+                    if (propName === "innerHTML" || propName === "outerHTML") {
+                        const parent = node.getParent();
+                        if (parent) {
+                            const leftText = left.getExpression().getText();
+                            const rightText = node.getRight().getText();
+                            const newCode = `${leftText}.textContent = ${rightText}`;
+                            changes.push({
+                                type: "replace",
+                                startLine: node.getStartLineNumber(),
+                                endLine: node.getEndLineNumber(),
+                                originalText: node.getText(),
+                                newText: newCode,
+                                description: `Replace ${propName} with textContent to prevent XSS`,
+                            });
+                            node.replaceWithText(newCode);
+                        }
+                    }
+                }
+            }
+            if (Node.isCallExpression(node)) {
+                const expression = node.getExpression();
+                if (Node.isPropertyAccessExpression(expression)) {
+                    const methodName = expression.getName();
+                    if (methodName === "insertAdjacentHTML") {
+                        const args = node.getArguments();
+                        if (args.length >= 2) {
+                            const objText = expression.getExpression().getText();
+                            const position = args[0].getText();
+                            const content = args[1].getText();
+                            const newCode = position.includes("beforeend") || position.includes("afterbegin")
+                                ? `${objText}.append(document.createTextNode(${content}))`
+                                : `${objText}.insertAdjacentText(${position}, ${content})`;
+                            changes.push({
+                                type: "replace",
+                                startLine: node.getStartLineNumber(),
+                                endLine: node.getEndLineNumber(),
+                                originalText: node.getText(),
+                                newText: newCode,
+                                description: "Replace insertAdjacentHTML with safe text insertion",
+                            });
+                            node.replaceWithText(newCode);
+                        }
+                    }
+                    if (methodName === "write" || methodName === "writeln") {
+                        const objText = expression.getExpression().getText();
+                        if (objText === "document") {
+                            changes.push({
+                                type: "replace",
+                                startLine: node.getStartLineNumber(),
+                                endLine: node.getEndLineNumber(),
+                                originalText: node.getText(),
+                                newText: `/* UNSAFE: ${node.getText()} - Use DOM methods instead */`,
+                                description: "Comment out document.write (requires manual fix)",
+                            });
+                        }
+                    }
+                }
+            }
+        });
+        const transformedCode = sourceFile.getFullText();
+        sourceFile.delete();
+        if (changes.length > 0) {
+            await writeFile(filePath, transformedCode, "utf-8");
+        }
+        return {
+            success: changes.length > 0,
+            filePath,
+            originalCode,
+            transformedCode: changes.length > 0 ? transformedCode : originalCode,
+            changesApplied: changes,
+            error: changes.length === 0 ? "No XSS patterns found to fix" : undefined,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            filePath,
+            originalCode: "",
+            transformedCode: "",
+            changesApplied: [],
+            error: error instanceof Error ? error.message : "Unknown error",
+        };
+    }
+}
+export async function transformHardcodedSecrets(context) {
+    const { filePath, finding } = context;
+    const changes = [];
+    try {
+        const originalCode = await readFile(filePath, "utf-8");
+        const sourceFile = project.createSourceFile(`temp_${Date.now()}.ts`, originalCode, { overwrite: true });
+        const targetLine = finding.line;
+        const secretPatterns = [
+            /api[_-]?key/i,
+            /secret[_-]?key/i,
+            /password/i,
+            /auth[_-]?token/i,
+            /access[_-]?token/i,
+            /private[_-]?key/i,
+            /bearer/i,
+            /credential/i,
+        ];
+        sourceFile.forEachDescendant((node) => {
+            const startLine = node.getStartLineNumber();
+            if (Math.abs(startLine - targetLine) > 3)
+                return;
+            if (Node.isVariableDeclaration(node)) {
+                const name = node.getName();
+                const initializer = node.getInitializer();
+                if (initializer && Node.isStringLiteral(initializer)) {
+                    const value = initializer.getLiteralText();
+                    const isSecretName = secretPatterns.some((p) => p.test(name));
+                    const looksLikeSecret = value.length > 10 && /[a-zA-Z0-9+/=_-]{10,}/.test(value);
+                    if (isSecretName || looksLikeSecret) {
+                        const envVarName = toEnvVarName(name);
+                        const newCode = `process.env.${envVarName}`;
+                        changes.push({
+                            type: "replace",
+                            startLine: initializer.getStartLineNumber(),
+                            endLine: initializer.getEndLineNumber(),
+                            originalText: initializer.getText(),
+                            newText: newCode,
+                            description: `Replace hardcoded secret with environment variable ${envVarName}`,
+                        });
+                        initializer.replaceWithText(newCode);
+                    }
+                }
+            }
+            if (Node.isPropertyAssignment(node)) {
+                const name = node.getName();
+                const initializer = node.getInitializer();
+                if (initializer && Node.isStringLiteral(initializer)) {
+                    const value = initializer.getLiteralText();
+                    const isSecretName = secretPatterns.some((p) => p.test(name));
+                    const looksLikeSecret = value.length > 10 && /[a-zA-Z0-9+/=_-]{10,}/.test(value);
+                    if (isSecretName || looksLikeSecret) {
+                        const envVarName = toEnvVarName(name);
+                        const newCode = `process.env.${envVarName}`;
+                        changes.push({
+                            type: "replace",
+                            startLine: initializer.getStartLineNumber(),
+                            endLine: initializer.getEndLineNumber(),
+                            originalText: initializer.getText(),
+                            newText: newCode,
+                            description: `Replace hardcoded secret with environment variable ${envVarName}`,
+                        });
+                        initializer.replaceWithText(newCode);
+                    }
+                }
+            }
+        });
+        const transformedCode = sourceFile.getFullText();
+        sourceFile.delete();
+        if (changes.length > 0) {
+            await writeFile(filePath, transformedCode, "utf-8");
+        }
+        return {
+            success: changes.length > 0,
+            filePath,
+            originalCode,
+            transformedCode: changes.length > 0 ? transformedCode : originalCode,
+            changesApplied: changes,
+            error: changes.length === 0 ? "No hardcoded secrets found to fix" : undefined,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            filePath,
+            originalCode: "",
+            transformedCode: "",
+            changesApplied: [],
+            error: error instanceof Error ? error.message : "Unknown error",
+        };
+    }
+}
+function toEnvVarName(name) {
+    return name
+        .replace(/([a-z])([A-Z])/g, "$1_$2")
+        .replace(/[-\s]/g, "_")
+        .toUpperCase();
+}
+export async function transformIDOR(context) {
+    const { filePath, finding } = context;
+    const changes = [];
+    try {
+        const originalCode = await readFile(filePath, "utf-8");
+        const sourceFile = project.createSourceFile(`temp_${Date.now()}.ts`, originalCode, { overwrite: true });
+        const targetLine = finding.line;
+        sourceFile.forEachDescendant((node) => {
+            const startLine = node.getStartLineNumber();
+            if (Math.abs(startLine - targetLine) > 5)
+                return;
+            if (Node.isCallExpression(node)) {
+                const expression = node.getExpression();
+                const expressionText = expression.getText();
+                const isDbAccess = expressionText.includes("findById") ||
+                    expressionText.includes("findOne") ||
+                    expressionText.includes("findUnique") ||
+                    expressionText.includes("where");
+                if (isDbAccess) {
+                    const args = node.getArguments();
+                    if (args.length > 0) {
+                        const idArg = args[0].getText();
+                        if (idArg.includes("req.params") ||
+                            idArg.includes("req.query") ||
+                            idArg.includes("req.body")) {
+                            const ownershipCheck = `// IDOR Protection: Verify ownership before accessing resource
+  const resource = await ${node.getText()};
+  if (!resource || resource.userId !== req.user?.id) {
+    throw new Error("Access denied: Resource not found or not owned by user");
+  }`;
+                            const statement = node.getFirstAncestorByKind(SyntaxKind.VariableStatement);
+                            if (statement) {
+                                changes.push({
+                                    type: "replace",
+                                    startLine: statement.getStartLineNumber(),
+                                    endLine: statement.getEndLineNumber(),
+                                    originalText: statement.getText(),
+                                    newText: ownershipCheck.trim(),
+                                    description: "Add ownership verification to prevent IDOR",
+                                });
+                                statement.replaceWithText(ownershipCheck.trim());
+                            }
+                        }
+                    }
+                }
+            }
+        });
+        const transformedCode = sourceFile.getFullText();
+        sourceFile.delete();
+        if (changes.length > 0) {
+            await writeFile(filePath, transformedCode, "utf-8");
+        }
+        return {
+            success: changes.length > 0,
+            filePath,
+            originalCode,
+            transformedCode: changes.length > 0 ? transformedCode : originalCode,
+            changesApplied: changes,
+            error: changes.length === 0 ? "No IDOR patterns found to fix" : undefined,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            filePath,
+            originalCode: "",
+            transformedCode: "",
+            changesApplied: [],
+            error: error instanceof Error ? error.message : "Unknown error",
+        };
+    }
+}
+export const AST_TRANSFORMS = {
+    "sql-injection": transformSQLInjection,
+    "xss": transformXSS,
+    "hardcoded-secrets": transformHardcodedSecrets,
+    "secrets": transformHardcodedSecrets,
+    "idor": transformIDOR,
+    "authorization": transformIDOR,
+};
+export async function applyASTTransform(category, context) {
+    const transform = AST_TRANSFORMS[category.toLowerCase()];
+    if (!transform) {
+        return {
+            success: false,
+            filePath: context.filePath,
+            originalCode: "",
+            transformedCode: "",
+            changesApplied: [],
+            error: `No AST transform available for category: ${category}`,
+        };
+    }
+    return transform(context);
+}
+export function hasASTTransform(category) {
+    return category.toLowerCase() in AST_TRANSFORMS;
+}
+export function listASTTransforms() {
+    return Object.keys(AST_TRANSFORMS);
+}
+//# sourceMappingURL=typescript.js.map

package/dist/autofix/ast/typescript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript.js","sourceRoot":"","sources":["../../../src/autofix/ast/typescript.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAA2F,MAAM,UAAU,CAAC;AAC9I,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAIlD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;IAC1B,qBAAqB,EAAE,KAAK;IAC5B,4BAA4B,EAAE,IAAI;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAA4B;IAE5B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CACzC,QAAQ,IAAI,CAAC,GAAG,EAAE,KAAK,EACvB,YAAY,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QAEF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;QAEhC,UAAU,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,EAAE;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAE5C,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO;YAEjD,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACxC,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;gBAE5C,IACE,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAChC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAClC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC9B,CAAC;oBACD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;oBACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;wBAEzB,IAAI,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;4BACxC,MAAM,MAAM,GAAG,gCAAgC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;4BAChE,IAAI,MAAM,EAAE,CAAC;gCACX,OAAO,CAAC,IAAI,CAAC;oCACX,IAAI,EAAE,SAAS;oCACf,SAAS,EAAE,IAAI,CAAC,kBAAkB,EAAE;oCACpC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;oCAChC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE;oCAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;oCACvB,WAAW,EAAE,qDAAqD;iCACnE,CAAC,CAAC;gCACH,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;4BACvC,CAAC;wBACH,CAAC;6BAAM,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC7C,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;4BAC9D,IAAI,MAAM,EAAE,CAAC;gCACX,OAAO,CAAC,IAAI,CAAC;oCACX,IAAI,EAAE,SAAS;oCACf,SAAS,EAAE,IAAI,CAAC,kBAAkB,EAAE;oCACpC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;oCAChC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE;oCAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;oCACvB,WAAW,EAAE,yDAAyD;iCACvE,CAAC,CAAC;gCACH,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;4BACvC,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACjD,UAAU,CAAC,MAAM,EAAE,CAAC;QAEpB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAC3B,QAAQ;YACR,YAAY;YACZ,eAAe,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY;YACpE,cAAc,EAAE,OAAO;YACvB,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,SAAS;SACnF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ;YACR,YAAY,EAAE,EAAE;YAChB,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CACvC,QAAwB,EACxB,YAAgC;IAEhC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,QAAQ,GAAa,EAAE,CAAC;IAE5B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,cAAc,EAAE,CAAC;IACrD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEpB,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,GAAG,UAAU,MAAM,GAAG,QAAQ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAEpE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,8BAA8B,CACrC,QAAwB,EACxB,UAAgB;IAEhB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,SAAS,YAAY,CAAC,IAAU;QAC9B,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7B,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,YAAY,CAAC,UAAU,CAAC,CAAC;IAEzB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,GAAG,UAAU,MAAM,GAAG,QAAQ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAEpE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAA4B;IAE5B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CACzC,QAAQ,IAAI,CAAC,GAAG,EAAE,KAAK,EACvB,YAAY,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QAEF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;QAEhC,UAAU,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,EAAE;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAE5C,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO;YAEjD,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;oBAEhC,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;wBACzD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;wBAChC,IAAI,MAAM,EAAE,CAAC;4BACX,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;4BAChD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,CAAC;4BAE5C,MAAM,OAAO,GAAG,GAAG,QAAQ,kBAAkB,SAAS,EAAE,CAAC;4BACzD,OAAO,CAAC,IAAI,CAAC;gCACX,IAAI,EAAE,SAAS;gCACf,SAAS,EAAE,IAAI,CAAC,kBAAkB,EAAE;gCACpC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;gCAChC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE;gCAC5B,OAAO,EAAE,OAAO;gCAChB,WAAW,EAAE,WAAW,QAAQ,kCAAkC;6BACnE,CAAC,CAAC;4BACH,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;wBAChC,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACxC,IAAI,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;oBAChD,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;oBAExC,IAAI,UAAU,KAAK,oBAAoB,EAAE,CAAC;wBACxC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;wBACjC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;4BACrB,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;4BACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;4BACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;4BAElC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;gCAC/E,CAAC,CAAC,GAAG,OAAO,mCAAmC,OAAO,IAAI;gCAC1D,CAAC,CAAC,GAAG,OAAO,uBAAuB,QAAQ,KAAK,OAAO,GAAG,CAAC;4BAE7D,OAAO,CAAC,IAAI,CAAC;gCACX,IAAI,EAAE,SAAS;gCACf,SAAS,EAAE,IAAI,CAAC,kBAAkB,EAAE;gCACpC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;gCAChC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE;gCAC5B,OAAO,EAAE,OAAO;gCAChB,WAAW,EAAE,qDAAqD;6BACnE,CAAC,CAAC;4BACH,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;wBAChC,CAAC;oBACH,CAAC;oBAED,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;wBACvD,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;wBACrD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;4BAC3B,OAAO,CAAC,IAAI,CAAC;gCACX,IAAI,EAAE,SAAS;gCACf,SAAS,EAAE,IAAI,CAAC,kBAAkB,EAAE;gCACpC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;gCAChC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE;gCAC5B,OAAO,EAAE,cAAc,IAAI,CAAC,OAAO,EAAE,+BAA+B;gCACpE,WAAW,EAAE,kDAAkD;6BAChE,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACjD,UAAU,CAAC,MAAM,EAAE,CAAC;QAEpB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAC3B,QAAQ;YACR,YAAY;YACZ,eAAe,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY;YACpE,cAAc,EAAE,OAAO;YACvB,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,SAAS;SACzE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ;YACR,YAAY,EAAE,EAAE;YAChB,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAA4B;IAE5B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CACzC,QAAQ,IAAI,CAAC,GAAG,EAAE,KAAK,EACvB,YAAY,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QAEF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;QAEhC,MAAM,cAAc,GAAG;YACrB,cAAc;YACd,iBAAiB;YACjB,WAAW;YACX,iBAAiB;YACjB,mBAAmB;YACnB,kBAAkB;YAClB,SAAS;YACT,aAAa;SACd,CAAC;QAEF,UAAU,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,EAAE;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAE5C,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO;YAEjD,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;gBAE1C,IAAI,WAAW,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;oBACrD,MAAM,KAAK,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;oBAE3C,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC9D,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAEjF,IAAI,YAAY,IAAI,eAAe,EAAE,CAAC;wBACpC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;wBACtC,MAAM,OAAO,GAAG,eAAe,UAAU,EAAE,CAAC;wBAE5C,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,SAAS;4BACf,SAAS,EAAE,WAAW,CAAC,kBAAkB,EAAE;4BAC3C,OAAO,EAAE,WAAW,CAAC,gBAAgB,EAAE;4BACvC,YAAY,EAAE,WAAW,CAAC,OAAO,EAAE;4BACnC,OAAO,EAAE,OAAO;4BAChB,WAAW,EAAE,sDAAsD,UAAU,EAAE;yBAChF,CAAC,CAAC;wBACH,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;oBACvC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;gBAE1C,IAAI,WAAW,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;oBACrD,MAAM,KAAK,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;oBAE3C,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC9D,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAEjF,IAAI,YAAY,IAAI,eAAe,EAAE,CAAC;wBACpC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;wBACtC,MAAM,OAAO,GAAG,eAAe,UAAU,EAAE,CAAC;wBAE5C,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAE,SAAS;4BACf,SAAS,EAAE,WAAW,CAAC,kBAAkB,EAAE;4BAC3C,OAAO,EAAE,WAAW,CAAC,gBAAgB,EAAE;4BACvC,YAAY,EAAE,WAAW,CAAC,OAAO,EAAE;4BACnC,OAAO,EAAE,OAAO;4BAChB,WAAW,EAAE,sDAAsD,UAAU,EAAE;yBAChF,CAAC,CAAC;wBACH,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;oBACvC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACjD,UAAU,CAAC,MAAM,EAAE,CAAC;QAEpB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAC3B,QAAQ;YACR,YAAY;YACZ,eAAe,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY;YACpE,cAAc,EAAE,OAAO;YACvB,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,SAAS;SAC9E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ;YACR,YAAY,EAAE,EAAE;YAChB,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI;SACR,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC;SACnC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA4B;IAE5B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CACzC,QAAQ,IAAI,CAAC,GAAG,EAAE,KAAK,EACvB,YAAY,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QAEF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;QAEhC,UAAU,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,EAAE;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAE5C,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO;YAEjD,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACxC,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;gBAE5C,MAAM,UAAU,GACd,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;oBACnC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAClC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC;oBACrC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAEnC,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;oBACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;wBAEhC,IACE,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;4BAC5B,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;4BAC3B,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC1B,CAAC;4BACD,MAAM,cAAc,GAAG;2BACV,IAAI,CAAC,OAAO,EAAE;;;IAGrC,CAAC;4BAES,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;4BAC5E,IAAI,SAAS,EAAE,CAAC;gCACd,OAAO,CAAC,IAAI,CAAC;oCACX,IAAI,EAAE,SAAS;oCACf,SAAS,EAAE,SAAS,CAAC,kBAAkB,EAAE;oCACzC,OAAO,EAAE,SAAS,CAAC,gBAAgB,EAAE;oCACrC,YAAY,EAAE,SAAS,CAAC,OAAO,EAAE;oCACjC,OAAO,EAAE,cAAc,CAAC,IAAI,EAAE;oCAC9B,WAAW,EAAE,4CAA4C;iCAC1D,CAAC,CAAC;gCACH,SAAS,CAAC,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;4BACnD,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACjD,UAAU,CAAC,MAAM,EAAE,CAAC;QAEpB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAC3B,QAAQ;YACR,YAAY;YACZ,eAAe,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY;YACpE,cAAc,EAAE,OAAO;YACvB,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS;SAC1E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ;YACR,YAAY,EAAE,EAAE;YAChB,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAGvB;IACF,eAAe,EAAE,qBAAqB;IACtC,KAAK,EAAE,YAAY;IACnB,mBAAmB,EAAE,yBAAyB;IAC9C,SAAS,EAAE,yBAAyB;IACpC,MAAM,EAAE,aAAa;IACrB,eAAe,EAAE,aAAa;CAC/B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,OAA4B;IAE5B,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAEzD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,EAAE;YAChB,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,KAAK,EAAE,4CAA4C,QAAQ,EAAE;SAC9D,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,QAAQ,CAAC,WAAW,EAAE,IAAI,cAAc,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AACrC,CAAC"}