vaspera 2.5.0

package/dist/certification/rules.js

@@ -0,0 +1,317 @@
+/**
+ * Custom Rule Engine
+ *
+ * Allows projects to define custom validation rules that are
+ * checked during certification alongside built-in checks.
+ *
+ * Rules are defined in `.vaspera/hardening-rules.yaml` or `.vaspera/hardening-rules.json`
+ *
+ * @module certification/rules
+ */
+import { readFile } from "fs/promises";
+import { join } from "path";
+import { logger } from "../logger.js";
+/**
+ * Built-in rule templates that can be extended
+ */
+export const RULE_TEMPLATES = {
+    "no-hardcoded-secrets": {
+        name: "No Hardcoded Secrets",
+        pattern: "(password|secret|api_key|apikey|token)\\s*[:=]\\s*[\"'][^\"']{8,}[\"']",
+        severity: "critical",
+        message: "Hardcoded secret detected. Use environment variables instead.",
+        category: "security",
+        agent: "security",
+        confidence: 90,
+    },
+    "no-console-log": {
+        name: "No Console Logs",
+        pattern: "console\\.(log|debug|info|warn|error)\\s*\\(",
+        severity: "low",
+        message: "Console statement found. Use proper logging.",
+        category: "quality",
+        agent: "quality",
+        confidence: 100,
+    },
+    "no-any-type": {
+        name: "No Any Type",
+        pattern: ":\\s*any\\b",
+        severity: "medium",
+        message: "Avoid using 'any' type. Use specific types or generics.",
+        category: "typesafety",
+        agent: "typesafety",
+        confidence: 95,
+    },
+    "async-await-consistency": {
+        name: "Async/Await Consistency",
+        pattern: "\\.then\\s*\\([^)]*\\)\\s*\\.catch",
+        severity: "low",
+        message: "Consider using async/await instead of .then().catch() chains.",
+        category: "quality",
+        agent: "quality",
+        confidence: 80,
+    },
+    "no-eval": {
+        name: "No Eval",
+        pattern: "\\beval\\s*\\(",
+        severity: "critical",
+        message: "eval() is dangerous and should never be used.",
+        category: "security",
+        agent: "security",
+        confidence: 100,
+    },
+    "no-sql-concatenation": {
+        name: "No SQL Concatenation",
+        pattern: "(SELECT|INSERT|UPDATE|DELETE)[^;]*\\+\\s*(\\w+|[\"'])",
+        severity: "critical",
+        message: "Potential SQL injection. Use parameterized queries.",
+        category: "security",
+        agent: "security",
+        confidence: 85,
+    },
+};
+/**
+ * Load custom rules from project configuration
+ */
+export async function loadCustomRules(projectPath) {
+    const rules = [];
+    // Try YAML first, then JSON
+    const configPaths = [
+        join(projectPath, ".vaspera", "hardening-rules.yaml"),
+        join(projectPath, ".vaspera", "hardening-rules.yml"),
+        join(projectPath, ".vaspera", "hardening-rules.json"),
+    ];
+    for (const configPath of configPaths) {
+        try {
+            const content = await readFile(configPath, "utf-8");
+            let config;
+            if (configPath.endsWith(".json")) {
+                config = JSON.parse(content);
+            }
+            else {
+                // Simple YAML parsing for common cases
+                config = parseSimpleYaml(content);
+            }
+            if (config.rules && Array.isArray(config.rules)) {
+                for (const rule of config.rules) {
+                    // Apply template if referenced
+                    if (rule.id && RULE_TEMPLATES[rule.id]) {
+                        rules.push({
+                            ...RULE_TEMPLATES[rule.id],
+                            ...rule,
+                            enabled: rule.enabled !== false,
+                        });
+                    }
+                    else {
+                        rules.push({
+                            ...rule,
+                            enabled: rule.enabled !== false,
+                            confidence: rule.confidence ?? 80,
+                        });
+                    }
+                }
+            }
+            logger.info("rules.loaded", {
+                configPath,
+                ruleCount: rules.length,
+            });
+            break; // Stop after first successful load
+        }
+        catch {
+            // Config file doesn't exist or is invalid, continue to next
+        }
+    }
+    return rules;
+}
+/**
+ * Simple YAML parser for rule configuration
+ * (Only supports the subset needed for rules)
+ */
+function parseSimpleYaml(content) {
+    const lines = content.split("\n");
+    const config = { rules: [] };
+    let currentRule = null;
+    let inRules = false;
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        if (trimmed === "rules:" || trimmed === "custom_rules:") {
+            inRules = true;
+            continue;
+        }
+        if (!inRules)
+            continue;
+        // New rule item
+        if (trimmed.startsWith("- id:") || trimmed.startsWith("-id:")) {
+            if (currentRule && currentRule.id) {
+                config.rules.push(currentRule);
+            }
+            currentRule = {
+                id: trimmed.replace(/^-\s*id:\s*["']?/, "").replace(/["']?\s*$/, ""),
+            };
+            continue;
+        }
+        // Rule properties
+        if (currentRule && trimmed.includes(":")) {
+            const [key, ...valueParts] = trimmed.replace(/^-\s*/, "").split(":");
+            const value = valueParts.join(":").trim().replace(/^["']|["']$/g, "");
+            switch (key.trim()) {
+                case "name":
+                    currentRule.name = value;
+                    break;
+                case "description":
+                    currentRule.description = value;
+                    break;
+                case "pattern":
+                    currentRule.pattern = value;
+                    break;
+                case "severity":
+                    currentRule.severity = value;
+                    break;
+                case "message":
+                    currentRule.message = value;
+                    break;
+                case "category":
+                    currentRule.category = value;
+                    break;
+                case "agent":
+                    currentRule.agent = value;
+                    break;
+                case "confidence":
+                    currentRule.confidence = parseInt(value, 10);
+                    break;
+                case "enabled":
+                    currentRule.enabled = value === "true";
+                    break;
+            }
+        }
+    }
+    // Don't forget the last rule
+    if (currentRule && currentRule.id) {
+        config.rules.push(currentRule);
+    }
+    return config;
+}
+/**
+ * Check a file against custom rules
+ */
+export async function checkFileAgainstRules(filePath, content, rules) {
+    const matches = [];
+    for (const rule of rules) {
+        if (!rule.enabled)
+            continue;
+        // Check file patterns
+        if (rule.excludeFiles) {
+            const shouldExclude = rule.excludeFiles.some((pattern) => {
+                const regex = new RegExp(pattern.replace(/\*/g, ".*"));
+                return regex.test(filePath);
+            });
+            if (shouldExclude)
+                continue;
+        }
+        if (rule.includeFiles) {
+            const shouldInclude = rule.includeFiles.some((pattern) => {
+                const regex = new RegExp(pattern.replace(/\*/g, ".*"));
+                return regex.test(filePath);
+            });
+            if (!shouldInclude)
+                continue;
+        }
+        try {
+            const regex = new RegExp(rule.pattern, "gm");
+            const lines = content.split("\n");
+            let lineNumber = 0;
+            for (const line of lines) {
+                lineNumber++;
+                const lineMatches = line.matchAll(regex);
+                for (const match of lineMatches) {
+                    // Get context (2 lines before and after)
+                    const contextStart = Math.max(0, lineNumber - 3);
+                    const contextEnd = Math.min(lines.length, lineNumber + 2);
+                    const context = lines.slice(contextStart, contextEnd).join("\n");
+                    matches.push({
+                        rule,
+                        file: filePath,
+                        line: lineNumber,
+                        matchedText: match[0],
+                        context,
+                    });
+                }
+            }
+        }
+        catch (error) {
+            logger.warn("rules.regex_error", {
+                ruleId: rule.id,
+                pattern: rule.pattern,
+                error: String(error),
+            });
+        }
+    }
+    return matches;
+}
+/**
+ * Convert rule matches to findings
+ */
+export function matchesToFindings(matches) {
+    return matches.map((match, index) => ({
+        id: `${match.rule.id}-${index + 1}`.padEnd(7, "0").slice(0, 7),
+        severity: match.rule.severity,
+        category: match.rule.category || "custom",
+        file: match.file,
+        line: match.line,
+        description: match.rule.message,
+        evidence: `Matched pattern: ${match.matchedText}\n\nContext:\n${match.context}`,
+        confidence: match.rule.confidence || 80,
+        verifications: [],
+        created_at: new Date().toISOString(),
+    }));
+}
+/**
+ * Get all available rule templates
+ */
+export function listRuleTemplates() {
+    return Object.entries(RULE_TEMPLATES).map(([id, template]) => ({
+        id,
+        name: template.name || id,
+        severity: template.severity || "medium",
+        category: template.category || "custom",
+    }));
+}
+/**
+ * Generate a sample rules configuration file
+ */
+export function generateSampleConfig() {
+    return `# Vaspera Hardening - Custom Rules Configuration
+# Place this file in .vaspera/hardening-rules.yaml
+
+version: "1.0"
+
+rules:
+  # Use a built-in template
+  - id: no-hardcoded-secrets
+    enabled: true
+
+  # Custom rule example
+  - id: "trade-001"
+    name: "All trades must use limit orders"
+    pattern: 'submitOrder.*type:\\s*"market"'
+    severity: critical
+    message: "Direct market orders violate trading rules. Use limit orders."
+    category: trading
+    agent: security
+    confidence: 95
+    excludeFiles:
+      - "*.test.ts"
+      - "*.spec.ts"
+
+  - id: "trade-002"
+    name: "Position sizing validation"
+    pattern: "positionSize\\s*=\\s*\\d+\\.?\\d*\\s*\\*"
+    severity: high
+    message: "Direct position sizing without Kelly Criterion validation"
+    category: trading
+    agent: reliability
+`;
+}
+//# sourceMappingURL=rules.js.map

package/dist/certification/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/certification/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAqDtC;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAwC;IACjE,sBAAsB,EAAE;QACtB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,wEAAwE;QACjF,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,+DAA+D;QACxE,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,EAAE;KACf;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,8CAA8C;QACvD,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,8CAA8C;QACvD,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,GAAG;KAChB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,aAAa;QACtB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,yDAAyD;QAClE,QAAQ,EAAE,YAAY;QACtB,KAAK,EAAE,YAAY;QACnB,UAAU,EAAE,EAAE;KACf;IACD,yBAAyB,EAAE;QACzB,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,+DAA+D;QACxE,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,EAAE;KACf;IACD,SAAS,EAAE;QACT,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,+CAA+C;QACxD,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,GAAG;KAChB;IACD,sBAAsB,EAAE;QACtB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,uDAAuD;QAChE,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,qDAAqD;QAC9D,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,EAAE;KACf;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmB;IACvD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,4BAA4B;IAC5B,MAAM,WAAW,GAAG;QAClB,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,sBAAsB,CAAC;QACrD,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,qBAAqB,CAAC;QACpD,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,sBAAsB,CAAC;KACtD,CAAC;IAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACpD,IAAI,MAAyB,CAAC;YAE9B,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,uCAAuC;gBACvC,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;YAED,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAChC,+BAA+B;oBAC/B,IAAI,IAAI,CAAC,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;wBACvC,KAAK,CAAC,IAAI,CAAC;4BACT,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC1B,GAAG,IAAI;4BACP,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,KAAK;yBAClB,CAAC,CAAC;oBACnB,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,IAAI,CAAC;4BACT,GAAG,IAAI;4BACP,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,KAAK;4BAC/B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;yBAClC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;gBAC1B,UAAU;gBACV,SAAS,EAAE,KAAK,CAAC,MAAM;aACxB,CAAC,CAAC;YAEH,MAAM,CAAC,mCAAmC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAsB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAChD,IAAI,WAAW,GAA+B,IAAI,CAAC;IACnD,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;YACxD,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,gBAAgB;QAChB,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,IAAI,WAAW,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;gBAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAyB,CAAC,CAAC;YAC/C,CAAC;YACD,WAAW,GAAG;gBACZ,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;aACrE,CAAC;YACF,SAAS;QACX,CAAC;QAED,kBAAkB;QAClB,IAAI,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAEtE,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnB,KAAK,MAAM;oBACT,WAAW,CAAC,IAAI,GAAG,KAAK,CAAC;oBACzB,MAAM;gBACR,KAAK,aAAa;oBAChB,WAAW,CAAC,WAAW,GAAG,KAAK,CAAC;oBAChC,MAAM;gBACR,KAAK,SAAS;oBACZ,WAAW,CAAC,OAAO,GAAG,KAAK,CAAC;oBAC5B,MAAM;gBACR,KAAK,UAAU;oBACb,WAAW,CAAC,QAAQ,GAAG,KAAiB,CAAC;oBACzC,MAAM;gBACR,KAAK,SAAS;oBACZ,WAAW,CAAC,OAAO,GAAG,KAAK,CAAC;oBAC5B,MAAM;gBACR,KAAK,UAAU;oBACb,WAAW,CAAC,QAAQ,GAAG,KAAK,CAAC;oBAC7B,MAAM;gBACR,KAAK,OAAO;oBACV,WAAW,CAAC,KAAK,GAAG,KAAkB,CAAC;oBACvC,MAAM;gBACR,KAAK,YAAY;oBACf,WAAW,CAAC,UAAU,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC7C,MAAM;gBACR,KAAK,SAAS;oBACZ,WAAW,CAAC,OAAO,GAAG,KAAK,KAAK,MAAM,CAAC;oBACvC,MAAM;YACV,CAAC;QACH,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,IAAI,WAAW,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAyB,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAgB,EAChB,OAAe,EACf,KAAmB;IAEnB,MAAM,OAAO,GAAgB,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,SAAS;QAE5B,sBAAsB;QACtB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;gBACvD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;gBACvD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,IAAI,aAAa;gBAAE,SAAS;QAC9B,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;gBACvD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;gBACvD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,aAAa;gBAAE,SAAS;QAC/B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,UAAU,EAAE,CAAC;gBACb,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAEzC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;oBAChC,yCAAyC;oBACzC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;oBACjD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;oBAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAEjE,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI;wBACJ,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,UAAU;wBAChB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;wBACrB,OAAO;qBACR,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBAC/B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAoB;IACpD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACpC,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9D,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;QAC7B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;QAC/B,QAAQ,EAAE,oBAAoB,KAAK,CAAC,WAAW,iBAAiB,KAAK,CAAC,OAAO,EAAE;QAC/E,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE;QACvC,aAAa,EAAE,EAAE;QACjB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAM/B,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,EAAE;QACF,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,QAAQ;QACvC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,QAAQ;KACxC,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BR,CAAC;AACF,CAAC"}

package/dist/certification/sarif.d.ts

@@ -0,0 +1,107 @@
+/**
+ * SARIF Export Module
+ *
+ * Exports certification findings to SARIF (Static Analysis Results Interchange Format)
+ * for integration with GitHub Security, SonarQube, and other analysis tools.
+ *
+ * SARIF Spec: https://docs.oasis-open.org/sarif/sarif/v2.1.0/sarif-v2.1.0.html
+ *
+ * @module certification/sarif
+ */
+import { Certification } from "./types.js";
+/**
+ * SARIF severity levels
+ */
+type SarifLevel = "error" | "warning" | "note" | "none";
+/**
+ * SARIF report structure (simplified for common use)
+ */
+export interface SarifReport {
+    $schema: string;
+    version: string;
+    runs: SarifRun[];
+}
+export interface SarifRun {
+    tool: {
+        driver: {
+            name: string;
+            version: string;
+            informationUri: string;
+            rules: SarifRule[];
+        };
+    };
+    results: SarifResult[];
+    invocations: SarifInvocation[];
+}
+export interface SarifRule {
+    id: string;
+    name: string;
+    shortDescription: {
+        text: string;
+    };
+    fullDescription?: {
+        text: string;
+    };
+    help?: {
+        text: string;
+    };
+    defaultConfiguration: {
+        level: SarifLevel;
+    };
+    properties?: {
+        tags?: string[];
+        "security-severity"?: string;
+    };
+}
+export interface SarifResult {
+    ruleId: string;
+    level: SarifLevel;
+    message: {
+        text: string;
+    };
+    locations: SarifLocation[];
+    partialFingerprints?: Record<string, string>;
+    properties?: {
+        confidence?: number;
+        agent?: string;
+        category?: string;
+        instances?: number;
+    };
+}
+export interface SarifLocation {
+    physicalLocation: {
+        artifactLocation: {
+            uri: string;
+            uriBaseId?: string;
+        };
+        region?: {
+            startLine: number;
+            startColumn?: number;
+            endLine?: number;
+            endColumn?: number;
+        };
+    };
+}
+export interface SarifInvocation {
+    executionSuccessful: boolean;
+    startTimeUtc?: string;
+    endTimeUtc?: string;
+}
+/**
+ * Generate a SARIF report from certification data
+ */
+export declare function generateSarifReport(certification: Certification): SarifReport;
+/**
+ * Export certification to SARIF file
+ */
+export declare function exportToSarif(projectPath: string, certification: Certification, outputFilename?: string): Promise<string>;
+/**
+ * Export to GitHub Code Scanning format (compatible with SARIF upload action)
+ */
+export declare function exportForGitHub(projectPath: string, certification: Certification): Promise<string>;
+/**
+ * Export to SonarQube format (subset of SARIF)
+ */
+export declare function exportForSonarQube(projectPath: string, certification: Certification): Promise<string>;
+export {};
+//# sourceMappingURL=sarif.d.ts.map

package/dist/certification/sarif.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.d.ts","sourceRoot":"","sources":["../../src/certification/sarif.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,aAAa,EAAgC,MAAM,YAAY,CAAC;AAGzE;;GAEG;AACH,KAAK,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAaxD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE;QACJ,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;YAChB,cAAc,EAAE,MAAM,CAAC;YACvB,KAAK,EAAE,SAAS,EAAE,CAAC;SACpB,CAAC;KACH,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,eAAe,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,oBAAoB,EAAE;QACpB,KAAK,EAAE,UAAU,CAAC;KACnB,CAAC;IACF,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,UAAU,CAAC,EAAE;QACX,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE;QAChB,gBAAgB,EAAE;YAChB,GAAG,EAAE,MAAM,CAAC;YACZ,SAAS,CAAC,EAAE,MAAM,CAAC;SACpB,CAAC;QACF,MAAM,CAAC,EAAE;YACP,SAAS,EAAE,MAAM,CAAC;YAClB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,SAAS,CAAC,EAAE,MAAM,CAAC;SACpB,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,GAAG,WAAW,CAsD7E;AAoGD;;GAEG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,aAAa,EAC5B,cAAc,GAAE,MAAiC,GAChD,OAAO,CAAC,MAAM,CAAC,CAcjB;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,MAAM,CAAC,CAGjB"}

package/dist/certification/sarif.js

@@ -0,0 +1,191 @@
+/**
+ * SARIF Export Module
+ *
+ * Exports certification findings to SARIF (Static Analysis Results Interchange Format)
+ * for integration with GitHub Security, SonarQube, and other analysis tools.
+ *
+ * SARIF Spec: https://docs.oasis-open.org/sarif/sarif/v2.1.0/sarif-v2.1.0.html
+ *
+ * @module certification/sarif
+ */
+import { writeFile } from "fs/promises";
+import { join } from "path";
+import { logger } from "../logger.js";
+/**
+ * Map vaspera severity to SARIF level
+ */
+const SEVERITY_TO_SARIF = {
+    critical: "error",
+    high: "error",
+    medium: "warning",
+    low: "note",
+    info: "none",
+};
+/**
+ * Generate a SARIF report from certification data
+ */
+export function generateSarifReport(certification) {
+    const rules = [];
+    const results = [];
+    const seenRules = new Set();
+    // Collect all findings from all agents
+    for (const [agent, agentData] of Object.entries(certification.agents)) {
+        if (!agentData)
+            continue;
+        for (const finding of agentData.findings) {
+            // Add rule if not seen
+            if (!seenRules.has(finding.id)) {
+                seenRules.add(finding.id);
+                rules.push(createRule(finding, agent));
+            }
+            // Add result
+            results.push(createResult(finding, agent));
+            // Add results for instances
+            if (finding.instances) {
+                for (const instance of finding.instances) {
+                    results.push(createInstanceResult(finding, instance, agent));
+                }
+            }
+        }
+    }
+    const report = {
+        $schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
+        version: "2.1.0",
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: "vaspera-hardening",
+                        version: "1.0.0",
+                        informationUri: "https://github.com/RCOLKITT/hardening-mcp",
+                        rules,
+                    },
+                },
+                results,
+                invocations: [
+                    {
+                        executionSuccessful: true,
+                        startTimeUtc: certification.metadata.started_at,
+                        endTimeUtc: certification.metadata.completed_at,
+                    },
+                ],
+            },
+        ],
+    };
+    return report;
+}
+function createRule(finding, agent) {
+    const securitySeverity = {
+        critical: "9.0",
+        high: "7.0",
+        medium: "4.0",
+        low: "2.0",
+        info: "0.0",
+    };
+    return {
+        id: finding.id,
+        name: `${finding.category}/${finding.id}`,
+        shortDescription: { text: finding.description.slice(0, 200) },
+        fullDescription: { text: finding.description },
+        help: { text: finding.evidence },
+        defaultConfiguration: {
+            level: SEVERITY_TO_SARIF[finding.severity],
+        },
+        properties: {
+            tags: [agent, finding.category, finding.severity],
+            "security-severity": securitySeverity[finding.severity],
+        },
+    };
+}
+function createResult(finding, agent) {
+    const locations = [];
+    if (finding.file) {
+        locations.push({
+            physicalLocation: {
+                artifactLocation: {
+                    uri: finding.file,
+                    uriBaseId: "%SRCROOT%",
+                },
+                region: finding.line
+                    ? {
+                        startLine: finding.line,
+                    }
+                    : undefined,
+            },
+        });
+    }
+    const result = {
+        ruleId: finding.id,
+        level: SEVERITY_TO_SARIF[finding.severity],
+        message: { text: finding.description },
+        locations,
+        properties: {
+            confidence: finding.confidence,
+            agent,
+            category: finding.category,
+            instances: finding.instances ? finding.instances.length + 1 : 1,
+        },
+    };
+    if (finding.file) {
+        result.partialFingerprints = {
+            primaryLocationLineHash: Buffer.from(`${finding.file}:${finding.line || 0}`).toString("base64"),
+        };
+    }
+    return result;
+}
+function createInstanceResult(finding, instance, agent) {
+    return {
+        ruleId: finding.id,
+        level: SEVERITY_TO_SARIF[finding.severity],
+        message: { text: instance.evidence || finding.description },
+        locations: [
+            {
+                physicalLocation: {
+                    artifactLocation: {
+                        uri: instance.file,
+                        uriBaseId: "%SRCROOT%",
+                    },
+                    region: instance.line
+                        ? {
+                            startLine: instance.line,
+                        }
+                        : undefined,
+                },
+            },
+        ],
+        properties: {
+            confidence: finding.confidence,
+            agent,
+            category: finding.category,
+        },
+    };
+}
+/**
+ * Export certification to SARIF file
+ */
+export async function exportToSarif(projectPath, certification, outputFilename = "vaspera-findings.sarif") {
+    const report = generateSarifReport(certification);
+    const outputPath = join(projectPath, outputFilename);
+    await writeFile(outputPath, JSON.stringify(report, null, 2), "utf-8");
+    logger.info("sarif.exported", {
+        certId: certification.metadata.id,
+        outputPath,
+        resultCount: report.runs[0].results.length,
+        ruleCount: report.runs[0].tool.driver.rules.length,
+    });
+    return outputPath;
+}
+/**
+ * Export to GitHub Code Scanning format (compatible with SARIF upload action)
+ */
+export async function exportForGitHub(projectPath, certification) {
+    return exportToSarif(projectPath, certification, "github-code-scanning.sarif");
+}
+/**
+ * Export to SonarQube format (subset of SARIF)
+ */
+export async function exportForSonarQube(projectPath, certification) {
+    // SonarQube uses a similar SARIF format
+    return exportToSarif(projectPath, certification, "sonarqube-issues.sarif");
+}
+//# sourceMappingURL=sarif.js.map

package/dist/certification/sarif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../src/certification/sarif.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAOtC;;GAEG;AACH,MAAM,iBAAiB,GAAiC;IACtD,QAAQ,EAAE,OAAO;IACjB,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,MAAM;IACX,IAAI,EAAE,MAAM;CACb,CAAC;AA0EF;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,aAA4B;IAC9D,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,uCAAuC;IACvC,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,SAAS;YAAE,SAAS;QAEzB,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACzC,uBAAuB;YACvB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC/B,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAkB,CAAC,CAAC,CAAC;YACtD,CAAC;YAED,aAAa;YACb,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAkB,CAAC,CAAC,CAAC;YAExD,4BAA4B;YAC5B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;oBACzC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAkB,CAAC,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAgB;QAC1B,OAAO,EAAE,gGAAgG;QACzG,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,mBAAmB;wBACzB,OAAO,EAAE,OAAO;wBAChB,cAAc,EAAE,2CAA2C;wBAC3D,KAAK;qBACN;iBACF;gBACD,OAAO;gBACP,WAAW,EAAE;oBACX;wBACE,mBAAmB,EAAE,IAAI;wBACzB,YAAY,EAAE,aAAa,CAAC,QAAQ,CAAC,UAAU;wBAC/C,UAAU,EAAE,aAAa,CAAC,QAAQ,CAAC,YAAY;qBAChD;iBACF;aACF;SACF;KACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB,EAAE,KAAgB;IACpD,MAAM,gBAAgB,GAAG;QACvB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,KAAK;QACV,IAAI,EAAE,KAAK;KACZ,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE,EAAE;QACzC,gBAAgB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;QAC7D,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE;QAC9C,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE;QAChC,oBAAoB,EAAE;YACpB,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC;SAC3C;QACD,UAAU,EAAE;YACV,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;YACjD,mBAAmB,EAAE,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC;SACxD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB,EAAE,KAAgB;IACtD,MAAM,SAAS,GAAoB,EAAE,CAAC;IAEtC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,SAAS,CAAC,IAAI,CAAC;YACb,gBAAgB,EAAE;gBAChB,gBAAgB,EAAE;oBAChB,GAAG,EAAE,OAAO,CAAC,IAAI;oBACjB,SAAS,EAAE,WAAW;iBACvB;gBACD,MAAM,EAAE,OAAO,CAAC,IAAI;oBAClB,CAAC,CAAC;wBACE,SAAS,EAAE,OAAO,CAAC,IAAI;qBACxB;oBACH,CAAC,CAAC,SAAS;aACd;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAgB;QAC1B,MAAM,EAAE,OAAO,CAAC,EAAE;QAClB,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE;QACtC,SAAS;QACT,UAAU,EAAE;YACV,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK;YACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;SAChE;KACF,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,mBAAmB,GAAG;YAC3B,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAChG,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAAgB,EAChB,QAA4D,EAC5D,KAAgB;IAEhB,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,EAAE;QAClB,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE;QAC3D,SAAS,EAAE;YACT;gBACE,gBAAgB,EAAE;oBAChB,gBAAgB,EAAE;wBAChB,GAAG,EAAE,QAAQ,CAAC,IAAI;wBAClB,SAAS,EAAE,WAAW;qBACvB;oBACD,MAAM,EAAE,QAAQ,CAAC,IAAI;wBACnB,CAAC,CAAC;4BACE,SAAS,EAAE,QAAQ,CAAC,IAAI;yBACzB;wBACH,CAAC,CAAC,SAAS;iBACd;aACF;SACF;QACD,UAAU,EAAE;YACV,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK;YACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAmB,EACnB,aAA4B,EAC5B,iBAAyB,wBAAwB;IAEjD,MAAM,MAAM,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAErD,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEtE,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE;QAC5B,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE;QACjC,UAAU;QACV,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;QAC1C,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;KACnD,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB,EACnB,aAA4B;IAE5B,OAAO,aAAa,CAAC,WAAW,EAAE,aAAa,EAAE,4BAA4B,CAAC,CAAC;AACjF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,aAA4B;IAE5B,wCAAwC;IACxC,OAAO,aAAa,CAAC,WAAW,EAAE,aAAa,EAAE,wBAAwB,CAAC,CAAC;AAC7E,CAAC"}