vaspera 2.5.0

package/dist/enterprise/signing/kms.test.js

@@ -0,0 +1,511 @@
+/**
+ * Tests for KMS-backed Signing
+ */
+import { describe, it, expect, beforeEach, vi } from "vitest";
+import { generateKeyPairSync } from "crypto";
+import { AWSKMSClient, GCPKMSClient, VaultClient, LocalKeyClient, KMSClient, createKMSClient, createAWSKMSClient, createGCPKMSClient, createVaultClient, createLocalKeyClient, } from "./kms.js";
+// Mock fetch
+const mockFetch = vi.fn();
+global.fetch = mockFetch;
+// Generate test key pair
+const { privateKey, publicKey } = generateKeyPairSync("rsa", {
+    modulusLength: 2048,
+    publicKeyEncoding: { type: "spki", format: "pem" },
+    privateKeyEncoding: { type: "pkcs8", format: "pem" },
+});
+describe("LocalKeyClient", () => {
+    let client;
+    beforeEach(() => {
+        client = new LocalKeyClient({
+            provider: "local",
+            keyId: "test-key",
+            local: {
+                privateKeyPem: privateKey,
+                publicKeyPem: publicKey,
+            },
+        });
+    });
+    describe("constructor", () => {
+        it("creates client with valid config", () => {
+            expect(client).toBeInstanceOf(LocalKeyClient);
+        });
+        it("throws on wrong provider", () => {
+            expect(() => new LocalKeyClient({
+                provider: "aws",
+                keyId: "test",
+            })).toThrow("LocalKeyClient requires provider: 'local'");
+        });
+        it("throws without keys", () => {
+            expect(() => new LocalKeyClient({
+                provider: "local",
+                keyId: "test",
+            })).toThrow("LocalKeyClient requires privateKeyPem and publicKeyPem");
+        });
+    });
+    describe("sign", () => {
+        it("signs content with RSA-SHA256", async () => {
+            const content = "Hello, World!";
+            const artifact = await client.sign(content);
+            expect(artifact.content).toBe(content);
+            expect(artifact.digest).toBeDefined();
+            expect(artifact.signature).toBeDefined();
+            expect(artifact.provider).toBe("local");
+            expect(artifact.keyId).toBe("test-key");
+            expect(artifact.algorithm).toBe("RSA-SHA256");
+            expect(artifact.signedAt).toBeDefined();
+        });
+        it("generates correct digest", async () => {
+            const content = "Test content";
+            const artifact = await client.sign(content);
+            expect(artifact.digest).toMatch(/^[a-f0-9]{64}$/); // SHA256 hex
+        });
+    });
+    describe("verify", () => {
+        it("verifies valid signature", async () => {
+            const content = "Test content";
+            const artifact = await client.sign(content);
+            const result = await client.verify(artifact);
+            expect(result.valid).toBe(true);
+            expect(result.keyId).toBe("test-key");
+            expect(result.verifiedAt).toBeDefined();
+        });
+        it("rejects tampered content", async () => {
+            const artifact = await client.sign("Original");
+            artifact.content = "Tampered";
+            const result = await client.verify(artifact);
+            expect(result.valid).toBe(false);
+        });
+        it("rejects invalid signature", async () => {
+            const artifact = await client.sign("Test");
+            artifact.signature = "invalid-signature";
+            const result = await client.verify(artifact);
+            // Invalid signatures will either return valid=false or throw an error
+            // depending on how malformed the signature is
+            expect(result.valid).toBe(false);
+        });
+    });
+});
+describe("AWSKMSClient", () => {
+    let client;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        client = new AWSKMSClient({
+            provider: "aws",
+            keyId: "arn:aws:kms:us-east-1:123456789:key/test-key",
+            aws: {
+                region: "us-east-1",
+                accessKeyId: "AKIAIOSFODNN7EXAMPLE",
+                secretAccessKey: "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY",
+            },
+        });
+    });
+    describe("constructor", () => {
+        it("throws on wrong provider", () => {
+            expect(() => new AWSKMSClient({
+                provider: "gcp",
+                keyId: "test",
+            })).toThrow("AWSKMSClient requires provider: 'aws'");
+        });
+    });
+    describe("sign", () => {
+        it("calls AWS KMS Sign API", async () => {
+            mockFetch.mockResolvedValueOnce({
+                ok: true,
+                json: async () => ({
+                    Signature: "base64-signature",
+                    KeyId: "arn:aws:kms:us-east-1:123456789:key/test-key",
+                }),
+            });
+            const artifact = await client.sign("Test content");
+            expect(artifact.signature).toBe("base64-signature");
+            expect(artifact.provider).toBe("aws");
+            expect(artifact.algorithm).toBe("RSASSA_PKCS1_V1_5_SHA_256");
+            expect(mockFetch).toHaveBeenCalledWith(expect.stringContaining("kms.us-east-1.amazonaws.com"), expect.objectContaining({
+                method: "POST",
+                headers: expect.objectContaining({
+                    "X-Amz-Target": "TrentService.Sign",
+                }),
+            }));
+        });
+        it("throws on missing region", async () => {
+            const clientNoRegion = new AWSKMSClient({
+                provider: "aws",
+                keyId: "test-key",
+                aws: {},
+            });
+            await expect(clientNoRegion.sign("Test")).rejects.toThrow("AWS region required");
+        });
+        it("throws on API error", async () => {
+            mockFetch.mockResolvedValueOnce({
+                ok: false,
+                text: async () => "AccessDeniedException",
+            });
+            await expect(client.sign("Test")).rejects.toThrow("AWS KMS error");
+        });
+    });
+    describe("verify", () => {
+        it("calls AWS KMS Verify API", async () => {
+            mockFetch.mockResolvedValueOnce({
+                ok: true,
+                json: async () => ({
+                    SignatureValid: true,
+                }),
+            });
+            const artifact = {
+                content: "Test",
+                digest: "digest",
+                signature: "signature",
+                provider: "aws",
+                keyId: "test-key",
+                signedAt: new Date().toISOString(),
+                algorithm: "RSASSA_PKCS1_V1_5_SHA_256",
+            };
+            const result = await client.verify(artifact);
+            expect(result.valid).toBe(true);
+            expect(mockFetch).toHaveBeenCalledWith(expect.any(String), expect.objectContaining({
+                headers: expect.objectContaining({
+                    "X-Amz-Target": "TrentService.Verify",
+                }),
+            }));
+        });
+        it("handles verification failure", async () => {
+            mockFetch.mockResolvedValueOnce({
+                ok: true,
+                json: async () => ({
+                    SignatureValid: false,
+                }),
+            });
+            const artifact = {
+                content: "Test",
+                digest: "digest",
+                signature: "invalid",
+                provider: "aws",
+                keyId: "test-key",
+                signedAt: new Date().toISOString(),
+                algorithm: "RSASSA_PKCS1_V1_5_SHA_256",
+            };
+            const result = await client.verify(artifact);
+            expect(result.valid).toBe(false);
+        });
+        it("handles API errors gracefully", async () => {
+            mockFetch.mockRejectedValueOnce(new Error("Network error"));
+            const artifact = {
+                content: "Test",
+                digest: "digest",
+                signature: "signature",
+                provider: "aws",
+                keyId: "test-key",
+                signedAt: new Date().toISOString(),
+                algorithm: "RSASSA_PKCS1_V1_5_SHA_256",
+            };
+            const result = await client.verify(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.error).toContain("Network error");
+        });
+    });
+});
+describe("GCPKMSClient", () => {
+    let client;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        client = new GCPKMSClient({
+            provider: "gcp",
+            keyId: "my-key",
+            gcp: {
+                projectId: "my-project",
+                locationId: "us-central1",
+                keyRingId: "my-keyring",
+            },
+        });
+    });
+    describe("constructor", () => {
+        it("throws on wrong provider", () => {
+            expect(() => new GCPKMSClient({
+                provider: "aws",
+                keyId: "test",
+            })).toThrow("GCPKMSClient requires provider: 'gcp'");
+        });
+    });
+    describe("sign", () => {
+        it("calls GCP KMS API", async () => {
+            // Mock metadata server for auth
+            mockFetch.mockResolvedValueOnce({
+                ok: true,
+                json: async () => ({ access_token: "test-token" }),
+            });
+            // Mock sign request
+            mockFetch.mockResolvedValueOnce({
+                ok: true,
+                json: async () => ({ signature: "gcp-signature" }),
+            });
+            const artifact = await client.sign("Test content");
+            expect(artifact.signature).toBe("gcp-signature");
+            expect(artifact.provider).toBe("gcp");
+            expect(artifact.algorithm).toBe("RSA_SIGN_PKCS1_256");
+        });
+        it("handles authentication failure", async () => {
+            mockFetch.mockRejectedValueOnce(new Error("No credentials"));
+            await expect(client.sign("Test")).rejects.toThrow();
+        });
+    });
+    describe("verify", () => {
+        it("calls GCP KMS verify API", async () => {
+            // Mock metadata server for auth
+            mockFetch.mockResolvedValueOnce({
+                ok: true,
+                json: async () => ({ access_token: "test-token" }),
+            });
+            // Mock verify request
+            mockFetch.mockResolvedValueOnce({
+                ok: true,
+                json: async () => ({ success: true }),
+            });
+            const artifact = {
+                content: "Test",
+                digest: "digest",
+                signature: "signature",
+                provider: "gcp",
+                keyId: "projects/my-project/locations/us-central1/keyRings/my-keyring/cryptoKeys/my-key/cryptoKeyVersions/1",
+                signedAt: new Date().toISOString(),
+                algorithm: "RSA_SIGN_PKCS1_256",
+            };
+            const result = await client.verify(artifact);
+            expect(result.valid).toBe(true);
+        });
+    });
+});
+describe("VaultClient", () => {
+    let client;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        client = new VaultClient({
+            provider: "vault",
+            keyId: "my-signing-key",
+            vault: {
+                address: "https://vault.example.com",
+                token: "s.xxxxxxxxxxxxx",
+                namespace: "admin",
+            },
+        });
+    });
+    describe("constructor", () => {
+        it("throws on wrong provider", () => {
+            expect(() => new VaultClient({
+                provider: "aws",
+                keyId: "test",
+            })).toThrow("VaultClient requires provider: 'vault'");
+        });
+    });
+    describe("sign", () => {
+        it("calls Vault Transit sign API", async () => {
+            mockFetch.mockResolvedValueOnce({
+                ok: true,
+                json: async () => ({
+                    data: {
+                        signature: "vault:v1:signature-data",
+                        key_version: 1,
+                    },
+                }),
+            });
+            const artifact = await client.sign("Test content");
+            expect(artifact.signature).toBe("vault:v1:signature-data");
+            expect(artifact.provider).toBe("vault");
+            expect(artifact.keyVersion).toBe("1");
+            expect(mockFetch).toHaveBeenCalledWith(expect.stringContaining("vault.example.com/v1/transit/sign/my-signing-key"), expect.objectContaining({
+                headers: expect.objectContaining({
+                    "X-Vault-Token": "s.xxxxxxxxxxxxx",
+                    "X-Vault-Namespace": "admin",
+                }),
+            }));
+        });
+        it("handles Vault errors", async () => {
+            mockFetch.mockResolvedValueOnce({
+                ok: false,
+                text: async () => "permission denied",
+            });
+            await expect(client.sign("Test")).rejects.toThrow("Vault error");
+        });
+    });
+    describe("verify", () => {
+        it("calls Vault Transit verify API", async () => {
+            mockFetch.mockResolvedValueOnce({
+                ok: true,
+                json: async () => ({
+                    data: { valid: true },
+                }),
+            });
+            const artifact = {
+                content: "Test",
+                digest: "digest",
+                signature: "vault:v1:signature",
+                provider: "vault",
+                keyId: "my-signing-key",
+                signedAt: new Date().toISOString(),
+                algorithm: "sha2-256",
+            };
+            const result = await client.verify(artifact);
+            expect(result.valid).toBe(true);
+        });
+        it("handles verification failure", async () => {
+            mockFetch.mockResolvedValueOnce({
+                ok: false,
+                text: async () => "verification failed",
+            });
+            const artifact = {
+                content: "Test",
+                digest: "digest",
+                signature: "invalid",
+                provider: "vault",
+                keyId: "my-signing-key",
+                signedAt: new Date().toISOString(),
+                algorithm: "sha2-256",
+            };
+            const result = await client.verify(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.error).toBeDefined();
+        });
+    });
+});
+describe("KMSClient", () => {
+    describe("constructor", () => {
+        it("creates AWS client for aws provider", () => {
+            const client = new KMSClient({
+                provider: "aws",
+                keyId: "test-key",
+                aws: { region: "us-east-1" },
+            });
+            expect(client.getProvider()).toBe("aws");
+        });
+        it("creates GCP client for gcp provider", () => {
+            const client = new KMSClient({
+                provider: "gcp",
+                keyId: "test-key",
+                gcp: {
+                    projectId: "project",
+                    locationId: "us-central1",
+                    keyRingId: "keyring",
+                },
+            });
+            expect(client.getProvider()).toBe("gcp");
+        });
+        it("creates Vault client for vault provider", () => {
+            const client = new KMSClient({
+                provider: "vault",
+                keyId: "test-key",
+                vault: {
+                    address: "https://vault.example.com",
+                    token: "token",
+                },
+            });
+            expect(client.getProvider()).toBe("vault");
+        });
+        it("creates local client for local provider", () => {
+            const client = new KMSClient({
+                provider: "local",
+                keyId: "test-key",
+                local: {
+                    privateKeyPem: privateKey,
+                    publicKeyPem: publicKey,
+                },
+            });
+            expect(client.getProvider()).toBe("local");
+        });
+        it("throws for unsupported provider", () => {
+            expect(() => new KMSClient({
+                provider: "unsupported",
+                keyId: "test",
+            })).toThrow("Unsupported KMS provider");
+        });
+    });
+    describe("sign and verify", () => {
+        it("delegates to underlying client", async () => {
+            const client = new KMSClient({
+                provider: "local",
+                keyId: "test-key",
+                local: {
+                    privateKeyPem: privateKey,
+                    publicKeyPem: publicKey,
+                },
+            });
+            const artifact = await client.sign("Test content");
+            const result = await client.verify(artifact);
+            expect(result.valid).toBe(true);
+        });
+    });
+});
+describe("Factory Functions", () => {
+    describe("createKMSClient", () => {
+        it("creates unified KMS client", () => {
+            const client = createKMSClient({
+                provider: "local",
+                keyId: "test",
+                local: {
+                    privateKeyPem: privateKey,
+                    publicKeyPem: publicKey,
+                },
+            });
+            expect(client).toBeInstanceOf(KMSClient);
+        });
+    });
+    describe("createAWSKMSClient", () => {
+        it("creates AWS KMS client", () => {
+            const client = createAWSKMSClient("key-arn", { region: "us-east-1" });
+            expect(client).toBeInstanceOf(AWSKMSClient);
+        });
+    });
+    describe("createGCPKMSClient", () => {
+        it("creates GCP KMS client", () => {
+            const client = createGCPKMSClient("key-id", {
+                projectId: "project",
+                locationId: "location",
+                keyRingId: "keyring",
+            });
+            expect(client).toBeInstanceOf(GCPKMSClient);
+        });
+    });
+    describe("createVaultClient", () => {
+        it("creates Vault client", () => {
+            const client = createVaultClient("key-name", {
+                address: "https://vault.example.com",
+                token: "token",
+            });
+            expect(client).toBeInstanceOf(VaultClient);
+        });
+    });
+    describe("createLocalKeyClient", () => {
+        it("creates local key client", () => {
+            const client = createLocalKeyClient("key-id", privateKey, publicKey);
+            expect(client).toBeInstanceOf(LocalKeyClient);
+        });
+    });
+});
+describe("End-to-end signing flow", () => {
+    it("signs and verifies with local keys", async () => {
+        const client = new KMSClient({
+            provider: "local",
+            keyId: "e2e-test-key",
+            local: {
+                privateKeyPem: privateKey,
+                publicKeyPem: publicKey,
+            },
+        });
+        const content = JSON.stringify({
+            certificationId: "cert-123",
+            findings: ["f1", "f2"],
+            timestamp: new Date().toISOString(),
+        });
+        // Sign
+        const artifact = await client.sign(content);
+        expect(artifact.content).toBe(content);
+        expect(artifact.digest).toBeDefined();
+        expect(artifact.signature).toBeDefined();
+        // Verify
+        const result = await client.verify(artifact);
+        expect(result.valid).toBe(true);
+        // Tamper and verify fails
+        artifact.content = JSON.stringify({ tampered: true });
+        const tamperedResult = await client.verify(artifact);
+        expect(tamperedResult.valid).toBe(false);
+    });
+});
+//# sourceMappingURL=kms.test.js.map

package/dist/enterprise/signing/kms.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kms.test.js","sourceRoot":"","sources":["../../../src/enterprise/signing/kms.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,cAAc,EACd,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,GAErB,MAAM,UAAU,CAAC;AAElB,aAAa;AACb,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1B,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;AAEzB,yBAAyB;AACzB,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE;IAC3D,aAAa,EAAE,IAAI;IACnB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;CACrD,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,MAAsB,CAAC;IAE3B,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,IAAI,cAAc,CAAC;YAC1B,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE;gBACL,aAAa,EAAE,UAAoB;gBACnC,YAAY,EAAE,SAAmB;aAClC;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,CACJ,GAAG,EAAE,CACH,IAAI,cAAc,CAAC;gBACjB,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,MAAM;aACP,CAAC,CACZ,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,CACJ,GAAG,EAAE,CACH,IAAI,cAAc,CAAC;gBACjB,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,MAAM;aACd,CAAC,CACL,CAAC,OAAO,CAAC,wDAAwD,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,OAAO,GAAG,eAAe,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC9C,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,OAAO,GAAG,cAAc,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa;QAClE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,OAAO,GAAG,cAAc,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,QAAQ,CAAC,OAAO,GAAG,UAAU,CAAC;YAE9B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,QAAQ,CAAC,SAAS,GAAG,mBAAmB,CAAC;YAEzC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7C,sEAAsE;YACtE,8CAA8C;YAC9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,MAAoB,CAAC;IAEzB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,GAAG,IAAI,YAAY,CAAC;YACxB,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,8CAA8C;YACrD,GAAG,EAAE;gBACH,MAAM,EAAE,WAAW;gBACnB,WAAW,EAAE,sBAAsB;gBACnC,eAAe,EAAE,0CAA0C;aAC5D;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,CACJ,GAAG,EAAE,CACH,IAAI,YAAY,CAAC;gBACf,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,MAAM;aACP,CAAC,CACZ,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;YACtC,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBACjB,SAAS,EAAE,kBAAkB;oBAC7B,KAAK,EAAE,8CAA8C;iBACtD,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAEnD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC7D,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,MAAM,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,EACtD,MAAM,CAAC,gBAAgB,CAAC;gBACtB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC;oBAC/B,cAAc,EAAE,mBAAmB;iBACpC,CAAC;aACH,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,cAAc,GAAG,IAAI,YAAY,CAAC;gBACtC,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,UAAU;gBACjB,GAAG,EAAE,EAAS;aACf,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvD,qBAAqB,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;YACnC,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAuB;aAC1C,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBACjB,cAAc,EAAE,IAAI;iBACrB,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,KAAc;gBACxB,KAAK,EAAE,UAAU;gBACjB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClC,SAAS,EAAE,2BAA2B;aACvC,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAClB,MAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC;oBAC/B,cAAc,EAAE,qBAAqB;iBACtC,CAAC;aACH,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBACjB,cAAc,EAAE,KAAK;iBACtB,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,KAAc;gBACxB,KAAK,EAAE,UAAU;gBACjB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClC,SAAS,EAAE,2BAA2B;aACvC,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,SAAS,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YAE5D,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,KAAc;gBACxB,KAAK,EAAE,UAAU;gBACjB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClC,SAAS,EAAE,2BAA2B;aACvC,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,MAAoB,CAAC;IAEzB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,GAAG,IAAI,YAAY,CAAC;YACxB,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE;gBACH,SAAS,EAAE,YAAY;gBACvB,UAAU,EAAE,aAAa;gBACzB,SAAS,EAAE,YAAY;aACxB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,CACJ,GAAG,EAAE,CACH,IAAI,YAAY,CAAC;gBACf,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,MAAM;aACP,CAAC,CACZ,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;YACjC,gCAAgC;YAChC,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;aACnD,CAAC,CAAC;YAEH,oBAAoB;YACpB,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;aACnD,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAEnD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,SAAS,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAE7D,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,gCAAgC;YAChC,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;aACnD,CAAC,CAAC;YAEH,sBAAsB;YACtB,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;aACtC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,KAAc;gBACxB,KAAK,EAAE,qGAAqG;gBAC5G,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClC,SAAS,EAAE,oBAAoB;aAChC,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,MAAmB,CAAC;IAExB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,GAAG,IAAI,WAAW,CAAC;YACvB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE;gBACL,OAAO,EAAE,2BAA2B;gBACpC,KAAK,EAAE,iBAAiB;gBACxB,SAAS,EAAE,OAAO;aACnB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,CACJ,GAAG,EAAE,CACH,IAAI,WAAW,CAAC;gBACd,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,MAAM;aACP,CAAC,CACZ,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBACjB,IAAI,EAAE;wBACJ,SAAS,EAAE,yBAAyB;wBACpC,WAAW,EAAE,CAAC;qBACf;iBACF,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAEnD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC3D,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,MAAM,CAAC,gBAAgB,CAAC,kDAAkD,CAAC,EAC3E,MAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC;oBAC/B,eAAe,EAAE,iBAAiB;oBAClC,mBAAmB,EAAE,OAAO;iBAC7B,CAAC;aACH,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;YACpC,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,mBAAmB;aACtC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBACjB,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACtB,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,oBAAoB;gBAC/B,QAAQ,EAAE,OAAgB;gBAC1B,KAAK,EAAE,gBAAgB;gBACvB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClC,SAAS,EAAE,UAAU;aACtB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,SAAS,CAAC,qBAAqB,CAAC;gBAC9B,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,qBAAqB;aACxC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG;gBACf,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,OAAgB;gBAC1B,KAAK,EAAE,gBAAgB;gBACvB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClC,SAAS,EAAE,UAAU;aACtB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;gBAC3B,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,UAAU;gBACjB,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;aAC7B,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;gBAC3B,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,UAAU;gBACjB,GAAG,EAAE;oBACH,SAAS,EAAE,SAAS;oBACpB,UAAU,EAAE,aAAa;oBACzB,SAAS,EAAE,SAAS;iBACrB;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE;oBACL,OAAO,EAAE,2BAA2B;oBACpC,KAAK,EAAE,OAAO;iBACf;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE;oBACL,aAAa,EAAE,UAAoB;oBACnC,YAAY,EAAE,SAAmB;iBAClC;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,CACJ,GAAG,EAAE,CACH,IAAI,SAAS,CAAC;gBACZ,QAAQ,EAAE,aAAoB;gBAC9B,KAAK,EAAE,MAAM;aACd,CAAC,CACL,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE;oBACL,aAAa,EAAE,UAAoB;oBACnC,YAAY,EAAE,SAAmB;iBAClC;aACF,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,MAAM,GAAG,eAAe,CAAC;gBAC7B,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE;oBACL,aAAa,EAAE,UAAoB;oBACnC,YAAY,EAAE,SAAmB;iBAClC;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;YAChC,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAEtE,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;YAChC,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE;gBAC1C,SAAS,EAAE,SAAS;gBACpB,UAAU,EAAE,UAAU;gBACtB,SAAS,EAAE,SAAS;aACrB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,EAAE;gBAC3C,OAAO,EAAE,2BAA2B;gBACpC,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,MAAM,GAAG,oBAAoB,CACjC,QAAQ,EACR,UAAoB,EACpB,SAAmB,CACpB,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC3B,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,cAAc;YACrB,KAAK,EAAE;gBACL,aAAa,EAAE,UAAoB;gBACnC,YAAY,EAAE,SAAmB;aAClC;SACF,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,eAAe,EAAE,UAAU;YAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QAEH,OAAO;QACP,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE5C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAEzC,SAAS;QACT,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhC,0BAA0B;QAC1B,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/eval/fixtures.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Test Fixtures
+ *
+ * Labeled test cases for evaluating scanner precision and recall.
+ * Each fixture contains vulnerable code with ground truth labels.
+ *
+ * @module eval/fixtures
+ */
+import type { TestFixture } from "./types.js";
+/**
+ * SQL Injection Fixtures
+ */
+export declare const sqlInjectionFixtures: TestFixture[];
+/**
+ * XSS Fixtures
+ */
+export declare const xssFixtures: TestFixture[];
+/**
+ * Secrets Fixtures
+ */
+export declare const secretsFixtures: TestFixture[];
+/**
+ * Type Safety Fixtures
+ */
+export declare const typeSafetyFixtures: TestFixture[];
+/**
+ * Auth/RLS Bypass Fixtures
+ */
+export declare const authFixtures: TestFixture[];
+/**
+ * Path Traversal Fixtures
+ */
+export declare const pathTraversalFixtures: TestFixture[];
+/**
+ * All fixtures combined
+ */
+export declare const ALL_FIXTURES: TestFixture[];
+/**
+ * Get fixtures by category
+ */
+export declare function getFixturesByCategory(category: string): TestFixture[];
+/**
+ * Get fixtures by tag
+ */
+export declare function getFixturesByTag(tag: string): TestFixture[];
+/**
+ * Get fixture by ID
+ */
+export declare function getFixtureById(id: string): TestFixture | undefined;
+/**
+ * Get fixture statistics
+ */
+export declare function getFixtureStats(): {
+    total: number;
+    byCategory: Record<string, number>;
+    totalExpected: number;
+};
+//# sourceMappingURL=fixtures.d.ts.map

package/dist/eval/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../src/eval/fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,EA0F7C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,EA2GpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,EAmGxC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,EA+F3C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,WAAW,EA6CrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,EAyD9C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,WAAW,EAOrC,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE,CAErE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAE3D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAElE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;CACvB,CAcA"}