vaspera 2.5.0

package/dist/eval/fixtures.js

@@ -0,0 +1,571 @@
+/**
+ * Test Fixtures
+ *
+ * Labeled test cases for evaluating scanner precision and recall.
+ * Each fixture contains vulnerable code with ground truth labels.
+ *
+ * @module eval/fixtures
+ */
+/**
+ * SQL Injection Fixtures
+ */
+export const sqlInjectionFixtures = [
+    {
+        id: "sql-001",
+        name: "String Concatenation SQL Injection",
+        description: "Classic SQL injection via string concatenation",
+        category: "sql-injection",
+        source: "OWASP",
+        files: [
+            {
+                path: "db.ts",
+                language: "typescript",
+                content: `import { Pool } from 'pg';
+
+const pool = new Pool();
+
+// VULNERABLE: SQL injection via string concatenation
+export async function getUserByName(name: string) {
+  const query = "SELECT * FROM users WHERE name = '" + name + "'";
+  return pool.query(query);
+}
+
+// SAFE: Parameterized query
+export async function getUserById(id: number) {
+  const query = "SELECT * FROM users WHERE id = $1";
+  return pool.query(query, [id]);
+}
+`,
+            },
+        ],
+        expectedFindings: [
+            {
+                file: "db.ts",
+                line: 7,
+                severity: "critical",
+                category: "sql-injection",
+                cweId: "CWE-89",
+                description: "SQL injection via string concatenation",
+                isVulnerable: true,
+            },
+        ],
+        tags: ["owasp-top-10", "injection"],
+    },
+    {
+        id: "sql-002",
+        name: "Template Literal SQL Injection",
+        description: "SQL injection via template literals",
+        category: "sql-injection",
+        source: "custom",
+        files: [
+            {
+                path: "search.ts",
+                language: "typescript",
+                content: `import { db } from './connection';
+
+// VULNERABLE: Template literal injection
+export async function searchProducts(term: string) {
+  const sql = \`SELECT * FROM products WHERE name LIKE '%\${term}%'\`;
+  return db.query(sql);
+}
+
+// VULNERABLE: Dynamic ORDER BY
+export async function listUsers(sortBy: string) {
+  const sql = \`SELECT * FROM users ORDER BY \${sortBy}\`;
+  return db.query(sql);
+}
+`,
+            },
+        ],
+        expectedFindings: [
+            {
+                file: "search.ts",
+                line: 5,
+                severity: "critical",
+                category: "sql-injection",
+                cweId: "CWE-89",
+                description: "SQL injection via template literal",
+                isVulnerable: true,
+            },
+            {
+                file: "search.ts",
+                line: 11,
+                severity: "high",
+                category: "sql-injection",
+                cweId: "CWE-89",
+                description: "SQL injection in ORDER BY clause",
+                isVulnerable: true,
+            },
+        ],
+        tags: ["injection", "template-literal"],
+    },
+];
+/**
+ * XSS Fixtures
+ */
+export const xssFixtures = [
+    {
+        id: "xss-001",
+        name: "React dangerouslySetInnerHTML",
+        description: "XSS via dangerouslySetInnerHTML with user input",
+        category: "xss",
+        source: "OWASP",
+        files: [
+            {
+                path: "UserProfile.tsx",
+                language: "tsx",
+                content: `import React from 'react';
+
+interface Props {
+  bio: string; // User-controlled content
+}
+
+// VULNERABLE: User input passed to dangerouslySetInnerHTML
+export function UserProfile({ bio }: Props) {
+  return (
+    <div>
+      <h1>Profile</h1>
+      <div dangerouslySetInnerHTML={{ __html: bio }} />
+    </div>
+  );
+}
+
+// SAFE: Text content, not HTML
+export function SafeProfile({ bio }: Props) {
+  return (
+    <div>
+      <h1>Profile</h1>
+      <div>{bio}</div>
+    </div>
+  );
+}
+`,
+            },
+        ],
+        expectedFindings: [
+            {
+                file: "UserProfile.tsx",
+                line: 12,
+                severity: "high",
+                category: "xss",
+                cweId: "CWE-79",
+                description: "XSS via dangerouslySetInnerHTML",
+                isVulnerable: true,
+            },
+        ],
+        tags: ["owasp-top-10", "react", "xss"],
+    },
+    {
+        id: "xss-002",
+        name: "DOM Manipulation XSS",
+        description: "XSS via innerHTML assignment",
+        category: "xss",
+        source: "custom",
+        files: [
+            {
+                path: "comment.ts",
+                language: "typescript",
+                content: `// VULNERABLE: innerHTML with user input
+export function renderComment(userComment: string) {
+  const container = document.getElementById('comments');
+  if (container) {
+    container.innerHTML = userComment;
+  }
+}
+
+// VULNERABLE: document.write
+export function writeMessage(message: string) {
+  document.write('<div>' + message + '</div>');
+}
+
+// SAFE: textContent
+export function renderSafeComment(userComment: string) {
+  const container = document.getElementById('comments');
+  if (container) {
+    container.textContent = userComment;
+  }
+}
+`,
+            },
+        ],
+        expectedFindings: [
+            {
+                file: "comment.ts",
+                line: 5,
+                severity: "high",
+                category: "xss",
+                cweId: "CWE-79",
+                description: "XSS via innerHTML",
+                isVulnerable: true,
+            },
+            {
+                file: "comment.ts",
+                line: 11,
+                severity: "high",
+                category: "xss",
+                cweId: "CWE-79",
+                description: "XSS via document.write",
+                isVulnerable: true,
+            },
+        ],
+        tags: ["dom-xss"],
+    },
+];
+/**
+ * Secrets Fixtures
+ */
+export const secretsFixtures = [
+    {
+        id: "secrets-001",
+        name: "Hardcoded API Keys",
+        description: "Various hardcoded API keys and secrets",
+        category: "secrets",
+        source: "custom",
+        files: [
+            {
+                path: "config.ts",
+                language: "typescript",
+                content: `// VULNERABLE: Hardcoded AWS key
+export const AWS_ACCESS_KEY = 'AKIAIOSFODNN7EXAMPLE';
+export const AWS_SECRET_KEY = 'wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY';
+
+// VULNERABLE: Hardcoded API key
+export const STRIPE_SECRET_KEY = 'sk_live_4eC39HqLyjWDarjtT1zdp7dc';
+
+// VULNERABLE: Hardcoded GitHub token
+export const GITHUB_TOKEN = 'ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx';
+
+// SAFE: Environment variable
+export const DATABASE_URL = process.env.DATABASE_URL;
+`,
+            },
+        ],
+        expectedFindings: [
+            {
+                file: "config.ts",
+                line: 2,
+                severity: "critical",
+                category: "secrets",
+                cweId: "CWE-798",
+                description: "Hardcoded AWS access key",
+                isVulnerable: true,
+            },
+            {
+                file: "config.ts",
+                line: 6,
+                severity: "critical",
+                category: "secrets",
+                cweId: "CWE-798",
+                description: "Hardcoded Stripe secret key",
+                isVulnerable: true,
+            },
+            {
+                file: "config.ts",
+                line: 9,
+                severity: "critical",
+                category: "secrets",
+                cweId: "CWE-798",
+                description: "Hardcoded GitHub token",
+                isVulnerable: true,
+            },
+        ],
+        tags: ["secrets", "credentials"],
+    },
+    {
+        id: "secrets-002",
+        name: "Private Keys",
+        description: "Hardcoded private keys",
+        category: "secrets",
+        source: "custom",
+        files: [
+            {
+                path: "keys.ts",
+                language: "typescript",
+                content: `// VULNERABLE: Hardcoded private key
+export const PRIVATE_KEY = \`-----BEGIN RSA PRIVATE KEY-----
+MIIEpQIBAAKCAQEA0Z3VS5JJcds3xfn/ygWyD8YQH3h7ygZdXcBxkN8wF8k
+-----END RSA PRIVATE KEY-----\`;
+
+// VULNERABLE: JWT secret
+export const JWT_SECRET = 'super-secret-jwt-key-12345';
+`,
+            },
+        ],
+        expectedFindings: [
+            {
+                file: "keys.ts",
+                line: 2,
+                severity: "critical",
+                category: "secrets",
+                cweId: "CWE-798",
+                description: "Hardcoded private key",
+                isVulnerable: true,
+            },
+            {
+                file: "keys.ts",
+                line: 7,
+                severity: "critical",
+                category: "secrets",
+                cweId: "CWE-798",
+                description: "Hardcoded JWT secret",
+                isVulnerable: true,
+            },
+        ],
+        tags: ["secrets", "private-key"],
+    },
+];
+/**
+ * Type Safety Fixtures
+ */
+export const typeSafetyFixtures = [
+    {
+        id: "type-001",
+        name: "Explicit Any Usage",
+        description: "Using 'any' type reduces type safety",
+        category: "type-safety",
+        source: "custom",
+        files: [
+            {
+                path: "handlers.ts",
+                language: "typescript",
+                content: `// VULNERABLE: Explicit any type
+export function processData(data: any) {
+  return data.map((item: any) => item.value);
+}
+
+// VULNERABLE: Type assertion to any
+export function unsafeConvert(input: string) {
+  return (input as any).toNumber();
+}
+
+// SAFE: Proper typing
+interface DataItem {
+  value: number;
+}
+
+export function processTypedData(data: DataItem[]) {
+  return data.map(item => item.value);
+}
+`,
+            },
+        ],
+        expectedFindings: [
+            {
+                file: "handlers.ts",
+                line: 2,
+                severity: "medium",
+                category: "type-safety",
+                description: "Explicit 'any' type reduces type safety",
+                isVulnerable: true,
+            },
+            {
+                file: "handlers.ts",
+                line: 8,
+                severity: "medium",
+                category: "type-safety",
+                description: "Unsafe type assertion to any",
+                isVulnerable: true,
+            },
+        ],
+        tags: ["typescript", "type-safety"],
+    },
+    {
+        id: "type-002",
+        name: "TypeScript Suppressions",
+        description: "@ts-ignore and @ts-expect-error usage",
+        category: "type-safety",
+        source: "custom",
+        files: [
+            {
+                path: "legacy.ts",
+                language: "typescript",
+                content: `// VULNERABLE: @ts-ignore suppresses errors
+// @ts-ignore
+const value: number = 'not a number';
+
+// VULNERABLE: @ts-expect-error
+// @ts-expect-error intentionally wrong
+const result: string = 42;
+
+// SAFE: Proper type handling
+const safeValue: number = parseInt('42', 10);
+`,
+            },
+        ],
+        expectedFindings: [
+            {
+                file: "legacy.ts",
+                line: 2,
+                severity: "low",
+                category: "type-safety",
+                description: "@ts-ignore suppresses type errors",
+                isVulnerable: true,
+            },
+            {
+                file: "legacy.ts",
+                line: 6,
+                severity: "low",
+                category: "type-safety",
+                description: "@ts-expect-error suppresses type errors",
+                isVulnerable: true,
+            },
+        ],
+        tags: ["typescript", "suppressions"],
+    },
+];
+/**
+ * Auth/RLS Bypass Fixtures
+ */
+export const authFixtures = [
+    {
+        id: "auth-001",
+        name: "Missing Authentication Check",
+        description: "API endpoint without authentication",
+        category: "auth-bypass",
+        source: "custom",
+        files: [
+            {
+                path: "api/users.ts",
+                language: "typescript",
+                content: `import { Request, Response } from 'express';
+
+// VULNERABLE: No auth check
+export async function deleteUser(req: Request, res: Response) {
+  const userId = req.params.id;
+  await db.query('DELETE FROM users WHERE id = $1', [userId]);
+  res.json({ success: true });
+}
+
+// SAFE: Auth check present
+export async function deleteUserSecure(req: Request, res: Response) {
+  if (!req.user?.isAdmin) {
+    return res.status(403).json({ error: 'Forbidden' });
+  }
+  const userId = req.params.id;
+  await db.query('DELETE FROM users WHERE id = $1', [userId]);
+  res.json({ success: true });
+}
+`,
+            },
+        ],
+        expectedFindings: [
+            {
+                file: "api/users.ts",
+                line: 4,
+                severity: "high",
+                category: "auth-bypass",
+                cweId: "CWE-862",
+                description: "Missing authentication check on sensitive operation",
+                isVulnerable: true,
+            },
+        ],
+        tags: ["auth", "access-control"],
+    },
+];
+/**
+ * Path Traversal Fixtures
+ */
+export const pathTraversalFixtures = [
+    {
+        id: "path-001",
+        name: "Path Traversal in File Read",
+        description: "User input used directly in file path",
+        category: "path-traversal",
+        source: "OWASP",
+        files: [
+            {
+                path: "files.ts",
+                language: "typescript",
+                content: `import { readFile } from 'fs/promises';
+import { join } from 'path';
+
+// VULNERABLE: Direct user input in path
+export async function getFile(filename: string) {
+  const content = await readFile(filename, 'utf-8');
+  return content;
+}
+
+// VULNERABLE: Path traversal possible
+export async function getDocument(docName: string) {
+  const path = './documents/' + docName;
+  return readFile(path, 'utf-8');
+}
+
+// SAFE: Basename extraction and validation
+export async function getFileSecure(filename: string) {
+  const basename = require('path').basename(filename);
+  const safePath = join('./uploads', basename);
+  return readFile(safePath, 'utf-8');
+}
+`,
+            },
+        ],
+        expectedFindings: [
+            {
+                file: "files.ts",
+                line: 6,
+                severity: "high",
+                category: "path-traversal",
+                cweId: "CWE-22",
+                description: "Path traversal via direct user input",
+                isVulnerable: true,
+            },
+            {
+                file: "files.ts",
+                line: 12,
+                severity: "high",
+                category: "path-traversal",
+                cweId: "CWE-22",
+                description: "Path traversal via string concatenation",
+                isVulnerable: true,
+            },
+        ],
+        tags: ["owasp-top-10", "path-traversal"],
+    },
+];
+/**
+ * All fixtures combined
+ */
+export const ALL_FIXTURES = [
+    ...sqlInjectionFixtures,
+    ...xssFixtures,
+    ...secretsFixtures,
+    ...typeSafetyFixtures,
+    ...authFixtures,
+    ...pathTraversalFixtures,
+];
+/**
+ * Get fixtures by category
+ */
+export function getFixturesByCategory(category) {
+    return ALL_FIXTURES.filter((f) => f.category === category);
+}
+/**
+ * Get fixtures by tag
+ */
+export function getFixturesByTag(tag) {
+    return ALL_FIXTURES.filter((f) => f.tags?.includes(tag));
+}
+/**
+ * Get fixture by ID
+ */
+export function getFixtureById(id) {
+    return ALL_FIXTURES.find((f) => f.id === id);
+}
+/**
+ * Get fixture statistics
+ */
+export function getFixtureStats() {
+    const byCategory = {};
+    let totalExpected = 0;
+    for (const fixture of ALL_FIXTURES) {
+        byCategory[fixture.category] = (byCategory[fixture.category] || 0) + 1;
+        totalExpected += fixture.expectedFindings.length;
+    }
+    return {
+        total: ALL_FIXTURES.length,
+        byCategory,
+        totalExpected,
+    };
+}
+//# sourceMappingURL=fixtures.js.map

package/dist/eval/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../src/eval/fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAkB;IACjD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,OAAO;QACf,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;;;;;;;;;;;;;;;CAehB;aACM;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,wCAAwC;gBACrD,YAAY,EAAE,IAAI;aACnB;SACF;QACD,IAAI,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;KACpC;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,qCAAqC;QAClD,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;;;;;;;;;;;;;CAahB;aACM;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,oCAAoC;gBACjD,YAAY,EAAE,IAAI;aACnB;YACD;gBACE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,EAAE;gBACR,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,kCAAkC;gBAC/C,YAAY,EAAE,IAAI;aACnB;SACF;QACD,IAAI,EAAE,CAAC,WAAW,EAAE,kBAAkB,CAAC;KACxC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAkB;IACxC;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,+BAA+B;QACrC,WAAW,EAAE,iDAAiD;QAC9D,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,OAAO;QACf,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;CAyBhB;aACM;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,EAAE;gBACR,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,iCAAiC;gBAC9C,YAAY,EAAE,IAAI;aACnB;SACF;QACD,IAAI,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC;KACvC;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;CAoBhB;aACM;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,mBAAmB;gBAChC,YAAY,EAAE,IAAI;aACnB;YACD;gBACE,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,EAAE;gBACR,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,wBAAwB;gBACrC,YAAY,EAAE,IAAI;aACnB;SACF;QACD,IAAI,EAAE,CAAC,SAAS,CAAC;KAClB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAkB;IAC5C;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,wCAAwC;QACrD,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;;;;;;;;;;;;CAYhB;aACM;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,0BAA0B;gBACvC,YAAY,EAAE,IAAI;aACnB;YACD;gBACE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,6BAA6B;gBAC1C,YAAY,EAAE,IAAI;aACnB;YACD;gBACE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,wBAAwB;gBACrC,YAAY,EAAE,IAAI;aACnB;SACF;QACD,IAAI,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;KACjC;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,wBAAwB;QACrC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;;;;;;;CAOhB;aACM;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,uBAAuB;gBACpC,YAAY,EAAE,IAAI;aACnB;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,UAAU;gBACpB,QAAQ,EAAE,SAAS;gBACnB,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,sBAAsB;gBACnC,YAAY,EAAE,IAAI;aACnB;SACF;QACD,IAAI,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;KACjC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAkB;IAC/C;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,sCAAsC;QACnD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;;;;;;;;;;;;;;;;;;CAkBhB;aACM;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,aAAa;gBACvB,WAAW,EAAE,yCAAyC;gBACtD,YAAY,EAAE,IAAI;aACnB;YACD;gBACE,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,aAAa;gBACvB,WAAW,EAAE,8BAA8B;gBAC3C,YAAY,EAAE,IAAI;aACnB;SACF;QACD,IAAI,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;KACpC;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,uCAAuC;QACpD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;;;;;;;;;;CAUhB;aACM;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,aAAa;gBACvB,WAAW,EAAE,mCAAmC;gBAChD,YAAY,EAAE,IAAI;aACnB;YACD;gBACE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,aAAa;gBACvB,WAAW,EAAE,yCAAyC;gBACtD,YAAY,EAAE,IAAI;aACnB;SACF;QACD,IAAI,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;KACrC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAkB;IACzC;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,qCAAqC;QAClD,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;;;;;;;;;;;;;;;;;;CAkBhB;aACM;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,aAAa;gBACvB,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,qDAAqD;gBAClE,YAAY,EAAE,IAAI;aACnB;SACF;QACD,IAAI,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC;KACjC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAkB;IAClD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,uCAAuC;QACpD,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,OAAO;QACf,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;CAqBhB;aACM;SACF;QACD,gBAAgB,EAAE;YAChB;gBACE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,gBAAgB;gBAC1B,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,sCAAsC;gBACnD,YAAY,EAAE,IAAI;aACnB;YACD;gBACE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,EAAE;gBACR,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,gBAAgB;gBAC1B,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,yCAAyC;gBACtD,YAAY,EAAE,IAAI;aACnB;SACF;QACD,IAAI,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC;KACzC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAkB;IACzC,GAAG,oBAAoB;IACvB,GAAG,WAAW;IACd,GAAG,eAAe;IAClB,GAAG,kBAAkB;IACrB,GAAG,YAAY;IACf,GAAG,qBAAqB;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAK7B,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvE,aAAa,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC;IACnD,CAAC;IAED,OAAO;QACL,KAAK,EAAE,YAAY,CAAC,MAAM;QAC1B,UAAU;QACV,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/eval/fixtures.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for evaluation fixtures
+ */
+export {};
+//# sourceMappingURL=fixtures.test.d.ts.map

package/dist/eval/fixtures.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.test.d.ts","sourceRoot":"","sources":["../../src/eval/fixtures.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}