vaspera 2.8.0 → 2.9.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +109 -7
- package/README.md +111 -7
- package/dist/__tests__/agents/adversary/tactics/api.test.d.ts +5 -0
- package/dist/__tests__/agents/adversary/tactics/api.test.d.ts.map +1 -0
- package/dist/__tests__/agents/adversary/tactics/api.test.js +369 -0
- package/dist/__tests__/agents/adversary/tactics/api.test.js.map +1 -0
- package/dist/__tests__/agents/adversary/tactics/llm.test.d.ts +5 -0
- package/dist/__tests__/agents/adversary/tactics/llm.test.d.ts.map +1 -0
- package/dist/__tests__/agents/adversary/tactics/llm.test.js +409 -0
- package/dist/__tests__/agents/adversary/tactics/llm.test.js.map +1 -0
- package/dist/__tests__/agents/adversary/tactics/registry.test.d.ts +7 -0
- package/dist/__tests__/agents/adversary/tactics/registry.test.d.ts.map +1 -0
- package/dist/__tests__/agents/adversary/tactics/registry.test.js +74 -0
- package/dist/__tests__/agents/adversary/tactics/registry.test.js.map +1 -0
- package/dist/__tests__/agents/adversary/tactics/web-app.test.d.ts +7 -0
- package/dist/__tests__/agents/adversary/tactics/web-app.test.d.ts.map +1 -0
- package/dist/__tests__/agents/adversary/tactics/web-app.test.js +374 -0
- package/dist/__tests__/agents/adversary/tactics/web-app.test.js.map +1 -0
- package/dist/__tests__/compliance-bundle.test.d.ts +9 -0
- package/dist/__tests__/compliance-bundle.test.d.ts.map +1 -0
- package/dist/__tests__/compliance-bundle.test.js +344 -0
- package/dist/__tests__/compliance-bundle.test.js.map +1 -0
- package/dist/__tests__/healthcare-compliance.test.d.ts +9 -0
- package/dist/__tests__/healthcare-compliance.test.d.ts.map +1 -0
- package/dist/__tests__/healthcare-compliance.test.js +233 -0
- package/dist/__tests__/healthcare-compliance.test.js.map +1 -0
- package/dist/action/diff-mode.d.ts +124 -8
- package/dist/action/diff-mode.d.ts.map +1 -1
- package/dist/action/diff-mode.js +384 -65
- package/dist/action/diff-mode.js.map +1 -1
- package/dist/action/diff-mode.test.js +3 -3
- package/dist/action/diff-mode.test.js.map +1 -1
- package/dist/action/pr-comment.test.js +1 -0
- package/dist/action/pr-comment.test.js.map +1 -1
- package/dist/action/sarif-upload.test.js +1 -0
- package/dist/action/sarif-upload.test.js.map +1 -1
- package/dist/agents/adversary/config.d.ts +25 -4
- package/dist/agents/adversary/config.d.ts.map +1 -1
- package/dist/agents/adversary/config.js +38 -8
- package/dist/agents/adversary/config.js.map +1 -1
- package/dist/agents/adversary/index.d.ts +7 -0
- package/dist/agents/adversary/index.d.ts.map +1 -1
- package/dist/agents/adversary/index.js +83 -1
- package/dist/agents/adversary/index.js.map +1 -1
- package/dist/agents/adversary/reporting/compliance-mapper.d.ts +108 -0
- package/dist/agents/adversary/reporting/compliance-mapper.d.ts.map +1 -0
- package/dist/agents/adversary/reporting/compliance-mapper.js +391 -0
- package/dist/agents/adversary/reporting/compliance-mapper.js.map +1 -0
- package/dist/agents/adversary/reporting/index.d.ts +10 -0
- package/dist/agents/adversary/reporting/index.d.ts.map +1 -0
- package/dist/agents/adversary/reporting/index.js +10 -0
- package/dist/agents/adversary/reporting/index.js.map +1 -0
- package/dist/agents/adversary/reporting/poc-generator.d.ts +44 -0
- package/dist/agents/adversary/reporting/poc-generator.d.ts.map +1 -0
- package/dist/agents/adversary/reporting/poc-generator.js +308 -0
- package/dist/agents/adversary/reporting/poc-generator.js.map +1 -0
- package/dist/agents/adversary/tactics/api.d.ts +13 -0
- package/dist/agents/adversary/tactics/api.d.ts.map +1 -0
- package/dist/agents/adversary/tactics/api.js +815 -0
- package/dist/agents/adversary/tactics/api.js.map +1 -0
- package/dist/agents/adversary/tactics/auth.d.ts +13 -0
- package/dist/agents/adversary/tactics/auth.d.ts.map +1 -0
- package/dist/agents/adversary/tactics/auth.js +676 -0
- package/dist/agents/adversary/tactics/auth.js.map +1 -0
- package/dist/agents/adversary/tactics/index.d.ts +129 -0
- package/dist/agents/adversary/tactics/index.d.ts.map +1 -0
- package/dist/agents/adversary/tactics/index.js +199 -0
- package/dist/agents/adversary/tactics/index.js.map +1 -0
- package/dist/agents/adversary/tactics/infra.d.ts +13 -0
- package/dist/agents/adversary/tactics/infra.d.ts.map +1 -0
- package/dist/agents/adversary/tactics/infra.js +827 -0
- package/dist/agents/adversary/tactics/infra.js.map +1 -0
- package/dist/agents/adversary/tactics/injection.d.ts +12 -0
- package/dist/agents/adversary/tactics/injection.d.ts.map +1 -0
- package/dist/agents/adversary/tactics/injection.js +549 -0
- package/dist/agents/adversary/tactics/injection.js.map +1 -0
- package/dist/agents/adversary/tactics/llm.d.ts +13 -0
- package/dist/agents/adversary/tactics/llm.d.ts.map +1 -0
- package/dist/agents/adversary/tactics/llm.js +767 -0
- package/dist/agents/adversary/tactics/llm.js.map +1 -0
- package/dist/agents/adversary/tactics/web-app.d.ts +13 -0
- package/dist/agents/adversary/tactics/web-app.d.ts.map +1 -0
- package/dist/agents/adversary/tactics/web-app.js +717 -0
- package/dist/agents/adversary/tactics/web-app.js.map +1 -0
- package/dist/agents/adversary/types.d.ts +66 -10
- package/dist/agents/adversary/types.d.ts.map +1 -1
- package/dist/agents/zero-day-hunter.d.ts +1 -1
- package/dist/agents/zero-day-hunter.d.ts.map +1 -1
- package/dist/analysis/data-flow.d.ts +154 -0
- package/dist/analysis/data-flow.d.ts.map +1 -0
- package/dist/analysis/data-flow.js +393 -0
- package/dist/analysis/data-flow.js.map +1 -0
- package/dist/analysis/index.d.ts +9 -0
- package/dist/analysis/index.d.ts.map +1 -0
- package/dist/analysis/index.js +9 -0
- package/dist/analysis/index.js.map +1 -0
- package/dist/badge-service/index.d.ts +144 -0
- package/dist/badge-service/index.d.ts.map +1 -0
- package/dist/badge-service/index.js +206 -0
- package/dist/badge-service/index.js.map +1 -0
- package/dist/certification/types.d.ts +1 -1
- package/dist/certification/types.d.ts.map +1 -1
- package/dist/certification/types.js.map +1 -1
- package/dist/commands/certification/certify.d.ts.map +1 -1
- package/dist/commands/certification/certify.js +18 -4
- package/dist/commands/certification/certify.js.map +1 -1
- package/dist/compliance/attestation.d.ts +39 -0
- package/dist/compliance/attestation.d.ts.map +1 -0
- package/dist/compliance/attestation.js +364 -0
- package/dist/compliance/attestation.js.map +1 -0
- package/dist/compliance/cfr42-part2.d.ts +42 -0
- package/dist/compliance/cfr42-part2.d.ts.map +1 -0
- package/dist/compliance/cfr42-part2.js +408 -0
- package/dist/compliance/cfr42-part2.js.map +1 -0
- package/dist/compliance/compliance-bundle.d.ts +100 -0
- package/dist/compliance/compliance-bundle.d.ts.map +1 -0
- package/dist/compliance/compliance-bundle.js +210 -0
- package/dist/compliance/compliance-bundle.js.map +1 -0
- package/dist/compliance/healthcare-bundle.d.ts +68 -0
- package/dist/compliance/healthcare-bundle.d.ts.map +1 -0
- package/dist/compliance/healthcare-bundle.js +104 -0
- package/dist/compliance/healthcare-bundle.js.map +1 -0
- package/dist/compliance/hipaa.d.ts.map +1 -1
- package/dist/compliance/hipaa.js +14 -11
- package/dist/compliance/hipaa.js.map +1 -1
- package/dist/compliance/index.d.ts +10 -2
- package/dist/compliance/index.d.ts.map +1 -1
- package/dist/compliance/index.js +9 -3
- package/dist/compliance/index.js.map +1 -1
- package/dist/compliance/mapper.d.ts.map +1 -1
- package/dist/compliance/mapper.js +3 -17
- package/dist/compliance/mapper.js.map +1 -1
- package/dist/compliance/nist-800-53.d.ts +22 -6
- package/dist/compliance/nist-800-53.d.ts.map +1 -1
- package/dist/compliance/nist-800-53.js +264 -272
- package/dist/compliance/nist-800-53.js.map +1 -1
- package/dist/compliance/report.d.ts +31 -2
- package/dist/compliance/report.d.ts.map +1 -1
- package/dist/compliance/report.js +255 -4
- package/dist/compliance/report.js.map +1 -1
- package/dist/compliance/types.d.ts +1 -1
- package/dist/compliance/types.d.ts.map +1 -1
- package/dist/config/flags.d.ts +12 -12
- package/dist/cost/index.d.ts +1 -1
- package/dist/cost/index.d.ts.map +1 -1
- package/dist/cost/index.js +1 -1
- package/dist/cost/index.js.map +1 -1
- package/dist/cost/tracker.d.ts +64 -0
- package/dist/cost/tracker.d.ts.map +1 -1
- package/dist/cost/tracker.js +165 -0
- package/dist/cost/tracker.js.map +1 -1
- package/dist/eval/fixtures/healthcare/audit-gaps.d.ts +28 -0
- package/dist/eval/fixtures/healthcare/audit-gaps.d.ts.map +1 -0
- package/dist/eval/fixtures/healthcare/audit-gaps.js +90 -0
- package/dist/eval/fixtures/healthcare/audit-gaps.js.map +1 -0
- package/dist/eval/fixtures/healthcare/consent-bypass.d.ts +31 -0
- package/dist/eval/fixtures/healthcare/consent-bypass.d.ts.map +1 -0
- package/dist/eval/fixtures/healthcare/consent-bypass.js +61 -0
- package/dist/eval/fixtures/healthcare/consent-bypass.js.map +1 -0
- package/dist/eval/fixtures/healthcare/phi-in-logs.d.ts +24 -0
- package/dist/eval/fixtures/healthcare/phi-in-logs.d.ts.map +1 -0
- package/dist/eval/fixtures/healthcare/phi-in-logs.js +41 -0
- package/dist/eval/fixtures/healthcare/phi-in-logs.js.map +1 -0
- package/dist/evidence/collector.d.ts +21 -0
- package/dist/evidence/collector.d.ts.map +1 -0
- package/dist/evidence/collector.js +340 -0
- package/dist/evidence/collector.js.map +1 -0
- package/dist/evidence/index.d.ts +11 -0
- package/dist/evidence/index.d.ts.map +1 -0
- package/dist/evidence/index.js +12 -0
- package/dist/evidence/index.js.map +1 -0
- package/dist/evidence/store.d.ts +39 -0
- package/dist/evidence/store.d.ts.map +1 -0
- package/dist/evidence/store.js +173 -0
- package/dist/evidence/store.js.map +1 -0
- package/dist/evidence/types.d.ts +175 -0
- package/dist/evidence/types.d.ts.map +1 -0
- package/dist/evidence/types.js +9 -0
- package/dist/evidence/types.js.map +1 -0
- package/dist/exporters/checkmarx.d.ts +18 -0
- package/dist/exporters/checkmarx.d.ts.map +1 -0
- package/dist/exporters/checkmarx.js +203 -0
- package/dist/exporters/checkmarx.js.map +1 -0
- package/dist/exporters/index.d.ts +22 -0
- package/dist/exporters/index.d.ts.map +1 -0
- package/dist/exporters/index.js +41 -0
- package/dist/exporters/index.js.map +1 -0
- package/dist/exporters/snyk.d.ts +18 -0
- package/dist/exporters/snyk.d.ts.map +1 -0
- package/dist/exporters/snyk.js +119 -0
- package/dist/exporters/snyk.js.map +1 -0
- package/dist/exporters/sonarqube.d.ts +18 -0
- package/dist/exporters/sonarqube.d.ts.map +1 -0
- package/dist/exporters/sonarqube.js +125 -0
- package/dist/exporters/sonarqube.js.map +1 -0
- package/dist/exporters/types.d.ts +190 -0
- package/dist/exporters/types.d.ts.map +1 -0
- package/dist/exporters/types.js +9 -0
- package/dist/exporters/types.js.map +1 -0
- package/dist/frontier/index.d.ts +12 -0
- package/dist/frontier/index.d.ts.map +1 -0
- package/dist/frontier/index.js +12 -0
- package/dist/frontier/index.js.map +1 -0
- package/dist/frontier/orchestrator.d.ts +73 -0
- package/dist/frontier/orchestrator.d.ts.map +1 -0
- package/dist/frontier/orchestrator.js +312 -0
- package/dist/frontier/orchestrator.js.map +1 -0
- package/dist/frontier/providers/stub.d.ts +32 -0
- package/dist/frontier/providers/stub.d.ts.map +1 -0
- package/dist/frontier/providers/stub.js +66 -0
- package/dist/frontier/providers/stub.js.map +1 -0
- package/dist/frontier/types.d.ts +318 -0
- package/dist/frontier/types.d.ts.map +1 -0
- package/dist/frontier/types.js +27 -0
- package/dist/frontier/types.js.map +1 -0
- package/dist/history/index.d.ts +13 -0
- package/dist/history/index.d.ts.map +1 -0
- package/dist/history/index.js +15 -0
- package/dist/history/index.js.map +1 -0
- package/dist/history/store.d.ts +74 -0
- package/dist/history/store.d.ts.map +1 -0
- package/dist/history/store.js +399 -0
- package/dist/history/store.js.map +1 -0
- package/dist/history/types.d.ts +282 -0
- package/dist/history/types.d.ts.map +1 -0
- package/dist/history/types.js +41 -0
- package/dist/history/types.js.map +1 -0
- package/dist/history/verify.d.ts +44 -0
- package/dist/history/verify.d.ts.map +1 -0
- package/dist/history/verify.js +230 -0
- package/dist/history/verify.js.map +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +515 -19
- package/dist/index.js.map +1 -1
- package/dist/multimodel/index.d.ts +1 -0
- package/dist/multimodel/index.d.ts.map +1 -1
- package/dist/multimodel/index.js +2 -0
- package/dist/multimodel/index.js.map +1 -1
- package/dist/multimodel/leaderboard.d.ts +116 -0
- package/dist/multimodel/leaderboard.d.ts.map +1 -0
- package/dist/multimodel/leaderboard.js +262 -0
- package/dist/multimodel/leaderboard.js.map +1 -0
- package/dist/observability/otel.d.ts.map +1 -1
- package/dist/observability/otel.js +1 -3
- package/dist/observability/otel.js.map +1 -1
- package/dist/plugins/loader.js +1 -1
- package/dist/plugins/loader.js.map +1 -1
- package/dist/scanners/agent/agent-chain-analysis.d.ts +152 -0
- package/dist/scanners/agent/agent-chain-analysis.d.ts.map +1 -0
- package/dist/scanners/agent/agent-chain-analysis.js +438 -0
- package/dist/scanners/agent/agent-chain-analysis.js.map +1 -0
- package/dist/scanners/agent/payloads/index.d.ts +2 -1
- package/dist/scanners/agent/payloads/index.d.ts.map +1 -1
- package/dist/scanners/agent/payloads/index.js +25 -6
- package/dist/scanners/agent/payloads/index.js.map +1 -1
- package/dist/scanners/agent/prompt-injection-fuzzer.d.ts.map +1 -1
- package/dist/scanners/agent/prompt-injection-fuzzer.js +14 -0
- package/dist/scanners/agent/prompt-injection-fuzzer.js.map +1 -1
- package/dist/scanners/agent/types.d.ts +5 -5
- package/dist/scanners/agent/types.d.ts.map +1 -1
- package/dist/scanners/agent/types.js.map +1 -1
- package/dist/scanners/cache.d.ts +156 -0
- package/dist/scanners/cache.d.ts.map +1 -0
- package/dist/scanners/cache.js +462 -0
- package/dist/scanners/cache.js.map +1 -0
- package/dist/scanners/dependencies.js +4 -4
- package/dist/scanners/dependencies.js.map +1 -1
- package/dist/scanners/gosec.d.ts.map +1 -1
- package/dist/scanners/gosec.js +47 -9
- package/dist/scanners/gosec.js.map +1 -1
- package/dist/scanners/healthcare.d.ts +29 -0
- package/dist/scanners/healthcare.d.ts.map +1 -0
- package/dist/scanners/healthcare.js +526 -0
- package/dist/scanners/healthcare.js.map +1 -0
- package/dist/scanners/index.d.ts +1 -0
- package/dist/scanners/index.d.ts.map +1 -1
- package/dist/scanners/index.js +33 -0
- package/dist/scanners/index.js.map +1 -1
- package/dist/scanners/index.test.js +6 -6
- package/dist/scanners/index.test.js.map +1 -1
- package/dist/scanners/secrets.js +4 -4
- package/dist/scanners/secrets.js.map +1 -1
- package/dist/scanners/semgrep.js +5 -5
- package/dist/scanners/semgrep.js.map +1 -1
- package/dist/scanners/types.d.ts +1 -1
- package/dist/scanners/types.d.ts.map +1 -1
- package/dist/scanners/types.js +1 -0
- package/dist/scanners/types.js.map +1 -1
- package/dist/scanners/typescript.test.js +1 -1
- package/dist/scanners/typescript.test.js.map +1 -1
- package/dist/telemetry/index.d.ts +10 -0
- package/dist/telemetry/index.d.ts.map +1 -0
- package/dist/telemetry/index.js +10 -0
- package/dist/telemetry/index.js.map +1 -0
- package/dist/telemetry/registry.d.ts +178 -0
- package/dist/telemetry/registry.d.ts.map +1 -0
- package/dist/telemetry/registry.js +297 -0
- package/dist/telemetry/registry.js.map +1 -0
- package/dist/telemetry/usage.d.ts +197 -0
- package/dist/telemetry/usage.d.ts.map +1 -0
- package/dist/telemetry/usage.js +252 -0
- package/dist/telemetry/usage.js.map +1 -0
- package/package.json +2 -6
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"web-app.js","sourceRoot":"","sources":["../../../../src/agents/adversary/tactics/web-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,EACL,cAAc,EACd,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E,MAAM,mBAAmB,GAA2B;IAClD;QACE,EAAE,EAAE,oCAAoC;QACxC,IAAI,EAAE,wCAAwC;QAC9C,WAAW,EAAE,yEAAyE;QACtF,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,2IAA2I;KACnJ;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,yDAAyD;QACtE,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,yGAAyG;KACjH;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,kEAAkE;QAC/E,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,yEAAyE;KACjF;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,IAAI,EAAE,uCAAuC;QAC7C,WAAW,EAAE,2DAA2D;QACxE,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0EAA0E;KAClF;CACF,CAAC;AAEF,MAAM,sBAAsB,GAA2B;IACrD;QACE,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,wDAAwD;QACrE,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,0GAA0G;KAClH;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,kDAAkD;QAC/D,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,4EAA4E;KACpF;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,IAAI,EAAE,kCAAkC;QACxC,WAAW,EAAE,qDAAqD;QAClE,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,oFAAoF;KAC5F;CACF,CAAC;AAEF,MAAM,gBAAgB,GAA2B;IAC/C;QACE,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,qDAAqD;QAClE,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,yFAAyF;KACjG;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,6CAA6C;QAC1D,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,2FAA2F;KACnG;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,6DAA6D;QAC1E,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,4HAA4H;KACpI;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,4CAA4C;QACzD,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,+FAA+F;KACvG;CACF,CAAC;AAEF,MAAM,aAAa,GAA2B;IAC5C;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,uDAAuD;QACpE,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,+GAA+G;KACvH;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,qCAAqC;QAClD,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,oEAAoE;KAC5E;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,sDAAsD;QACnE,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,iCAAiC;KACzC;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,kCAAkC;QACxC,WAAW,EAAE,kDAAkD;QAC/D,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,8GAA8G;KACtH;CACF,CAAC;AAEF,MAAM,qBAAqB,GAA2B;IACpD;QACE,EAAE,EAAE,+BAA+B;QACnC,IAAI,EAAE,uCAAuC;QAC7C,WAAW,EAAE,yDAAyD;QACtE,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,0GAA0G;KAClH;IACD;QACE,EAAE,EAAE,qCAAqC;QACzC,IAAI,EAAE,wCAAwC;QAC9C,WAAW,EAAE,gDAAgD;QAC7D,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,yDAAyD;KACjE;CACF,CAAC;AAEF,MAAM,sBAAsB,GAA2B;IACrD;QACE,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,8DAA8D;QAC3E,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,wKAAwK;KAChL;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,yCAAyC;QAC/C,WAAW,EAAE,4CAA4C;QACzD,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,4FAA4F;KACpG;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,IAAI,EAAE,kCAAkC;QACxC,WAAW,EAAE,4CAA4C;QACzD,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,+HAA+H;KACvI;CACF,CAAC;AAEF,MAAM,aAAa,GAA2B;IAC5C;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,oDAAoD;QACjE,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,6FAA6F;KACrG;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,4CAA4C;QACzD,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,wDAAwD;KAChE;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,4CAA4C;QACzD,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,uDAAuD;KAC/D;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,+BAA+B;QACrC,WAAW,EAAE,2CAA2C;QACxD,GAAG,EAAE,SAAS;QACd,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,uEAAuE;KAC/E;CACF,CAAC;AAEF,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,MAAM,YAAY,GAAiB;IACjC,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,0EAA0E;IAEvF,QAAQ,EAAE;QACR,GAAG,mBAAmB;QACtB,GAAG,sBAAsB;QACzB,GAAG,gBAAgB;QACnB,GAAG,aAAa;QAChB,GAAG,qBAAqB;QACxB,GAAG,sBAAsB;QACzB,GAAG,aAAa;KACjB;IAED,KAAK,CAAC,WAAW,CAAC,IAAiB,EAAE,MAAuB;QAC1D,MAAM,QAAQ,GAAoB,EAAE,CAAC;QAErC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,KAAK;gBAAE,SAAS;YAE7B,oBAAoB;YACpB,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YAE5B,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3D,wBAAwB;gBACxB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBAE5D,qBAAqB;gBACrB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3C,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,SAAS;gBACX,CAAC;gBAED,6BAA6B;gBAC7B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;oBAChD,SAAS;gBACX,CAAC;gBAED,MAAM,OAAO,GAAkB;oBAC7B,EAAE,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;oBACxE,UAAU,EAAE,SAAS;oBACrB,SAAS,EAAE,SAAS;oBACpB,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,IAAI,EAAE,IAAI,CAAC,YAAY;oBACvB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,WAAW,EAAE;oBAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,UAAU,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC;oBACxD,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oBACpC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;oBACrB,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjC,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;iBAC1C,CAAC;gBAEF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAsB;QACtC,MAAM,MAAM,GAAyC;YACnD,oCAAoC,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,+BAA+B,CAAC;YAClG,sBAAsB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC;YAChE,mBAAmB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC;YAC9D,2BAA2B,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;YAC3D,wBAAwB,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;YACxD,uBAAuB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;YAClE,yBAAyB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC;YACtE,qBAAqB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;YAC9D,oBAAoB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5C,eAAe,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YACvC,+BAA+B,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;YAC/D,2BAA2B,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;YAC3D,0BAA0B,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC;YAC1D,qBAAqB,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC;YACtD,2BAA2B,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC;SAC7D,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,oBAAoB;QAClB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2DAmCgD,CAAC;IAC1D,CAAC;IAED,uBAAuB;QACrB,OAAO;YACL,kBAAkB;YAClB,aAAa;YACb,aAAa;YACb,iBAAiB;YACjB,WAAW;YACX,cAAc;YACd,mBAAmB;YACnB,kBAAkB;YAClB,UAAU;YACV,UAAU;YACV,UAAU;YACV,aAAa;YACb,WAAW;YACX,SAAS;YACT,SAAS;SACV,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,SAAiB,EAAE,IAAiB;IAC1E,kBAAkB;IAClB,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qCAAqC;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uCAAuC;IACvC,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,OAA6B,EAAE,IAAiB;IAC1F,IAAI,UAAU,GAAG,EAAE,CAAC;IAEpB,iDAAiD;IACjD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAClH,UAAU,IAAI,EAAE,CAAC;IACnB,CAAC;IAED,0CAA0C;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACpC,UAAU,IAAI,EAAE,CAAC;IACnB,CAAC;IAED,uCAAuC;IACvC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtF,UAAU,IAAI,EAAE,CAAC;IACnB,CAAC;IAED,4CAA4C;IAC5C,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,UAAU,IAAI,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACpC,MAAM,OAAO,GAA6B;QACxC,oCAAoC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QACxD,sBAAsB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1C,2BAA2B,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC/C,uBAAuB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC3C,oBAAoB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QACxC,+BAA+B,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QACnD,2BAA2B,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAC/C,qBAAqB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;KAC1C,CAAC;IACF,OAAO,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,MAAM,KAAK,GAA2B;QACpC,oCAAoC,EAAE,0HAA0H;QAChK,sBAAsB,EAAE,oEAAoE;QAC5F,mBAAmB,EAAE,kFAAkF;QACvG,2BAA2B,EAAE,4FAA4F;QACzH,wBAAwB,EAAE,mGAAmG;QAC7H,uBAAuB,EAAE,2FAA2F;QACpH,qBAAqB,EAAE,2EAA2E;QAClG,oBAAoB,EAAE,iGAAiG;QACvH,eAAe,EAAE,qDAAqD;QACtE,oBAAoB,EAAE,2FAA2F;QACjH,+BAA+B,EAAE,6EAA6E;QAC9G,qCAAqC,EAAE,0EAA0E;QACjH,2BAA2B,EAAE,4FAA4F;QACzH,0BAA0B,EAAE,oEAAoE;QAChG,qBAAqB,EAAE,oFAAoF;QAC3G,kBAAkB,EAAE,6DAA6D;QACjF,2BAA2B,EAAE,mFAAmF;QAChH,mBAAmB,EAAE,4EAA4E;KAClG,CAAC;IACF,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,kEAAkE,CAAC;AAChG,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,SAAS,YAAY,CAAC,OAAsB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAiB;QAC1B;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,0CAA0C;YACvD,OAAO,EAAE,UAAU,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,0DAA0D;YACzG,cAAc,EAAE,gEAAgE;SACjF;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,iCAAiC;YAC9C,OAAO,EAAE,iDAAiD;YAC1D,cAAc,EAAE,4CAA4C;SAC7D;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,cAAc;YACtB,WAAW,EAAE,+BAA+B;YAC5C,OAAO,EAAE,sFAAsF;YAC/F,cAAc,EAAE,gEAAgE;SACjF;KACF,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,OAAO,CAAC,EAAE,EAAE;QACvB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,aAAa,EAAE;YACb,qCAAqC;YACrC,qCAAqC,IAAI,EAAE;SAC5C;QACD,KAAK;QACL,OAAO,EAAE,4CAA4C;QACrD,cAAc,EAAE,yCAAyC;QACzD,oBAAoB,EAAE,2HAA2H;KAClJ,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAsB;IAC7C,MAAM,KAAK,GAAiB;QAC1B;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,qBAAqB;YAC7B,WAAW,EAAE,kCAAkC;YAC/C,OAAO,EAAE,UAAU,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,2BAA2B;YAC1E,cAAc,EAAE,0DAA0D;SAC3E;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,iBAAiB;YACzB,WAAW,EAAE,2BAA2B;YACxC,OAAO,EAAE,wCAAwC;YACjD,cAAc,EAAE,4DAA4D;SAC7E;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE,mBAAmB;YAChC,OAAO,EAAE,+DAA+D;YACxE,cAAc,EAAE,6CAA6C;SAC9D;KACF,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,OAAO,CAAC,EAAE,EAAE;QACvB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,aAAa,EAAE;YACb,oCAAoC;YACpC,0CAA0C;SAC3C;QACD,KAAK;QACL,OAAO,EAAE,4CAA4C;QACrD,cAAc,EAAE,uDAAuD;QACvE,oBAAoB,EAAE,uFAAuF;KAC9G,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,OAAsB,EAAE,MAAc;IACvD,MAAM,QAAQ,GAA2B;QACvC,eAAe,EAAE,6CAA6C;QAC9D,iBAAiB,EAAE,qCAAqC;QACxD,aAAa,EAAE,yDAAyD;KACzE,CAAC;IAEF,MAAM,KAAK,GAAiB;QAC1B;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,eAAe,MAAM,sBAAsB;YACxD,OAAO,EAAE,UAAU,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,gBAAgB;YAC/D,cAAc,EAAE,GAAG,MAAM,8CAA8C;SACxE;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,cAAc;YACtB,WAAW,EAAE,kBAAkB;YAC/B,OAAO,EAAE,mCAAmC,QAAQ,CAAC,MAAM,CAAC,IAAI,SAAS,EAAE;YAC3E,cAAc,EAAE,wCAAwC;SACzD;KACF,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,OAAO,CAAC,EAAE,EAAE;QACvB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,aAAa,EAAE;YACb,yBAAyB,MAAM,cAAc;YAC7C,qCAAqC;SACtC;QACD,KAAK;QACL,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,8BAA8B;QAC3D,cAAc,EAAE,kCAAkC;QAClD,oBAAoB,EAAE,2FAA2F;KAClH,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,OAAsB;IACrC,MAAM,KAAK,GAAiB;QAC1B;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,mBAAmB;YAC3B,WAAW,EAAE,0DAA0D;YACvE,OAAO,EAAE,UAAU,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,gCAAgC;YAC/E,cAAc,EAAE,4DAA4D;SAC7E;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,2BAA2B;YACxC,OAAO,EAAE;;;;4CAI6B;YACtC,cAAc,EAAE,4BAA4B;SAC7C;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,8BAA8B;YAC3C,OAAO,EAAE,iEAAiE;YAC1E,cAAc,EAAE,uDAAuD;SACxE;KACF,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,OAAO,CAAC,EAAE,EAAE;QACvB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,aAAa,EAAE;YACb,iDAAiD;YACjD,8BAA8B;SAC/B;QACD,KAAK;QACL,OAAO,EAAE,+IAA+I;QACxJ,cAAc,EAAE,kDAAkD;QAClE,oBAAoB,EAAE,yFAAyF;KAChH,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAsB;IAC7C,MAAM,KAAK,GAAiB;QAC1B;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EAAE,qCAAqC;YAClD,OAAO,EAAE,4DAA4D;YACrE,cAAc,EAAE,mCAAmC;SACpD;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE,4BAA4B;YACzC,OAAO,EAAE;;iFAEkE;YAC3E,cAAc,EAAE,8CAA8C;SAC/D;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,+BAA+B;YAC5C,OAAO,EAAE,oDAAoD;YAC7D,cAAc,EAAE,0DAA0D;SAC3E;KACF,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,OAAO,CAAC,EAAE,EAAE;QACvB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,aAAa,EAAE;YACb,wCAAwC;YACxC,0CAA0C;SAC3C;QACD,KAAK;QACL,OAAO,EAAE,wEAAwE;QACjF,cAAc,EAAE,8CAA8C;QAC9D,oBAAoB,EAAE,kEAAkE;KACzF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAsB;IAC7C,MAAM,KAAK,GAAiB;QAC1B;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,6BAA6B;YAC1C,OAAO,EAAE,UAAU,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,qBAAqB;YACpE,cAAc,EAAE,2DAA2D;SAC5E;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE,oBAAoB;YACjC,OAAO,EAAE,2DAA2D;YACpE,cAAc,EAAE,4CAA4C;SAC7D;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,+BAA+B;YAC5C,OAAO,EAAE,2EAA2E;YACpF,cAAc,EAAE,gDAAgD;SACjE;KACF,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,OAAO,CAAC,EAAE,EAAE;QACvB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,aAAa,EAAE;YACb,iDAAiD;YACjD,6BAA6B;SAC9B;QACD,KAAK;QACL,OAAO,EAAE,0CAA0C;QACnD,cAAc,EAAE,0DAA0D;QAC1E,oBAAoB,EAAE,oFAAoF;KAC3G,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAsB;IAC9C,MAAM,KAAK,GAAiB;QAC1B;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,aAAa;YACrB,WAAW,EAAE,8BAA8B;YAC3C,OAAO,EAAE,iEAAiE;YAC1E,cAAc,EAAE,2DAA2D;SAC5E;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE,oCAAoC;YACjD,OAAO,EAAE;;;;;;UAML;YACJ,cAAc,EAAE,yCAAyC;SAC1D;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,cAAc;YACtB,WAAW,EAAE,uCAAuC;YACpD,OAAO,EAAE,2DAA2D;YACpE,cAAc,EAAE,8CAA8C;SAC/D;KACF,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,OAAO,OAAO,CAAC,EAAE,EAAE;QACvB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,aAAa,EAAE;YACb,kDAAkD;YAClD,+CAA+C;SAChD;QACD,KAAK;QACL,OAAO,EAAE,2DAA2D;QACpE,cAAc,EAAE,kDAAkD;QAClE,oBAAoB,EAAE,6GAA6G;KACpI,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,cAAc,CAAC,YAAY,CAAC,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,CAAC"}
|
|
@@ -10,9 +10,17 @@
|
|
|
10
10
|
*/
|
|
11
11
|
import type { Severity, FindingCategory } from "../../certification/types.js";
|
|
12
12
|
/**
|
|
13
|
-
* Claude model
|
|
13
|
+
* Claude model for adversary analysis
|
|
14
|
+
*
|
|
15
|
+
* Accepts any valid Claude model ID. Configure via environment variables:
|
|
16
|
+
* ADVERSARY_SONNET_MODEL - Pro tier model
|
|
17
|
+
* ADVERSARY_OPUS_MODEL - Enterprise tier model
|
|
18
|
+
*
|
|
19
|
+
* Common models:
|
|
20
|
+
* claude-sonnet-4-20250514 (default Pro)
|
|
21
|
+
* claude-opus-4-20250514 (default Enterprise)
|
|
14
22
|
*/
|
|
15
|
-
export type AdversaryModel =
|
|
23
|
+
export type AdversaryModel = string;
|
|
16
24
|
/**
|
|
17
25
|
* Aggressiveness level determines depth and risk of analysis
|
|
18
26
|
*/
|
|
@@ -25,7 +33,7 @@ export type AttackFocusArea = "web-app" | "api" | "auth" | "injection" | "llm" |
|
|
|
25
33
|
* Configuration for the adversary agent
|
|
26
34
|
*/
|
|
27
35
|
export interface AdversaryConfig {
|
|
28
|
-
/** Claude model to use (Pro gets
|
|
36
|
+
/** Claude model to use (Pro gets Sonnet 4, Enterprise gets Opus 4) */
|
|
29
37
|
model: AdversaryModel;
|
|
30
38
|
/** Analysis aggressiveness level */
|
|
31
39
|
aggressiveness: AggressivenessLevel;
|
|
@@ -54,14 +62,20 @@ export type Exploitability = "trivial" | "easy" | "moderate" | "hard" | "expert"
|
|
|
54
62
|
* Attack step in a proof of concept
|
|
55
63
|
*/
|
|
56
64
|
export interface AttackStep {
|
|
57
|
-
/** Step number */
|
|
58
|
-
|
|
59
|
-
/** Action
|
|
65
|
+
/** Step order number */
|
|
66
|
+
order: number;
|
|
67
|
+
/** Action identifier */
|
|
60
68
|
action: string;
|
|
69
|
+
/** Step description */
|
|
70
|
+
description: string;
|
|
71
|
+
/** Command to execute if applicable */
|
|
72
|
+
command?: string;
|
|
61
73
|
/** Expected outcome */
|
|
62
|
-
|
|
74
|
+
expectedResult?: string;
|
|
63
75
|
/** Payload or data if applicable */
|
|
64
76
|
payload?: string;
|
|
77
|
+
/** Additional notes */
|
|
78
|
+
note?: string;
|
|
65
79
|
/** Target URL/endpoint if applicable */
|
|
66
80
|
target?: string;
|
|
67
81
|
/** HTTP method if applicable */
|
|
@@ -88,7 +102,7 @@ export interface ProofOfConcept {
|
|
|
88
102
|
/** Instructions for safe testing */
|
|
89
103
|
safeTestInstructions: string;
|
|
90
104
|
/** Whether this PoC was validated */
|
|
91
|
-
validated
|
|
105
|
+
validated?: boolean;
|
|
92
106
|
}
|
|
93
107
|
/**
|
|
94
108
|
* Adversary finding with attack narrative and PoC
|
|
@@ -134,8 +148,50 @@ export interface AdversaryFinding {
|
|
|
134
148
|
recommendation: string;
|
|
135
149
|
/** AI reasoning that led to this finding */
|
|
136
150
|
aiReasoning: string;
|
|
137
|
-
/** Claude model that found this */
|
|
138
|
-
modelUsed: AdversaryModel;
|
|
151
|
+
/** Claude model that found this (or "deterministic" for pattern-based) */
|
|
152
|
+
modelUsed: AdversaryModel | "deterministic";
|
|
153
|
+
/** Compliance framework mappings */
|
|
154
|
+
complianceMapping?: {
|
|
155
|
+
owaspLlm?: {
|
|
156
|
+
id: string;
|
|
157
|
+
name: string;
|
|
158
|
+
description: string;
|
|
159
|
+
severity: string;
|
|
160
|
+
};
|
|
161
|
+
mitreAtlas?: {
|
|
162
|
+
technique: string;
|
|
163
|
+
tactic: string;
|
|
164
|
+
description: string;
|
|
165
|
+
};
|
|
166
|
+
mitreAttack?: {
|
|
167
|
+
technique: string;
|
|
168
|
+
tactic: string;
|
|
169
|
+
description: string;
|
|
170
|
+
};
|
|
171
|
+
cwe?: {
|
|
172
|
+
id: string;
|
|
173
|
+
name: string;
|
|
174
|
+
description: string;
|
|
175
|
+
};
|
|
176
|
+
soc2?: {
|
|
177
|
+
criteria: string;
|
|
178
|
+
control: string;
|
|
179
|
+
description: string;
|
|
180
|
+
};
|
|
181
|
+
iso27001?: {
|
|
182
|
+
control: string;
|
|
183
|
+
annex: string;
|
|
184
|
+
description: string;
|
|
185
|
+
};
|
|
186
|
+
pciDss?: {
|
|
187
|
+
requirement: string;
|
|
188
|
+
description: string;
|
|
189
|
+
};
|
|
190
|
+
gdpr?: {
|
|
191
|
+
article: string;
|
|
192
|
+
description: string;
|
|
193
|
+
};
|
|
194
|
+
};
|
|
139
195
|
}
|
|
140
196
|
/**
|
|
141
197
|
* Technology detection result
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/agents/adversary/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAM9E
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/agents/adversary/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAM9E;;;;;;;;;;GAUG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAC3B,SAAS,GACT,QAAQ,GACR,YAAY,CAAC;AAEjB;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,KAAK,GACL,MAAM,GACN,WAAW,GACX,KAAK,GACL,OAAO,GACP,QAAQ,GACR,WAAW,GACX,cAAc,CAAC;AAEnB;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,KAAK,EAAE,cAAc,CAAC;IAEtB,oCAAoC;IACpC,cAAc,EAAE,mBAAmB,CAAC;IAEpC,oCAAoC;IACpC,UAAU,EAAE,eAAe,EAAE,CAAC;IAE9B,gDAAgD;IAChD,eAAe,EAAE,MAAM,CAAC;IAExB,oDAAoD;IACpD,WAAW,EAAE,OAAO,CAAC;IAErB,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B,0CAA0C;IAC1C,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B,uDAAuD;IACvD,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACvC;AAMD;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,SAAS,GACT,MAAM,GACN,UAAU,GACV,MAAM,GACN,QAAQ,CAAC;AAEb;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IAEd,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IAEf,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IAEpB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uBAAuB;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uBAAuB;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,gCAAgC;IAChC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IAErD,4BAA4B;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAC;IAEX,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAElB,yCAAyC;IACzC,aAAa,EAAE,MAAM,EAAE,CAAC;IAExB,yBAAyB;IACzB,KAAK,EAAE,UAAU,EAAE,CAAC;IAEpB,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,kDAAkD;IAClD,cAAc,EAAE,MAAM,CAAC;IAEvB,oCAAoC;IACpC,oBAAoB,EAAE,MAAM,CAAC;IAE7B,qCAAqC;IACrC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IAEX,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IAEd,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IAEpB,qBAAqB;IACrB,QAAQ,EAAE,QAAQ,CAAC;IAEnB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IAEnB,uBAAuB;IACvB,QAAQ,EAAE,eAAe,CAAC;IAE1B,wBAAwB;IACxB,SAAS,EAAE,eAAe,CAAC;IAE3B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IAEb,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,6BAA6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IAEpB,oCAAoC;IACpC,cAAc,EAAE,MAAM,CAAC;IAEvB,+BAA+B;IAC/B,cAAc,EAAE,cAAc,CAAC;IAE/B,oCAAoC;IACpC,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC,oDAAoD;IACpD,cAAc,EAAE,MAAM,EAAE,CAAC;IAEzB,iCAAiC;IACjC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAEhC,sBAAsB;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IAEjB,mCAAmC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,iCAAiC;IACjC,cAAc,EAAE,MAAM,CAAC;IAEvB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IAEpB,0EAA0E;IAC1E,SAAS,EAAE,cAAc,GAAG,eAAe,CAAC;IAE5C,oCAAoC;IACpC,iBAAiB,CAAC,EAAE;QAClB,QAAQ,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/E,UAAU,CAAC,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACxE,WAAW,CAAC,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACzE,GAAG,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACxD,IAAI,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QAClE,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACnE,MAAM,CAAC,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;KACjD,CAAC;CACH;AAMD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC;CACtD;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,0BAA0B;IAC1B,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;IAEtE,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IAEb,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IAEb,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,8BAA8B;IAC9B,YAAY,EAAE,OAAO,CAAC;IAEtB,uBAAuB;IACvB,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;QACxD,SAAS,EAAE,OAAO,CAAC;KACpB,EAAE,CAAC;IAEJ,uBAAuB;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IAEb,kBAAkB;IAClB,WAAW,EAAE,MAAM,CAAC;IAEpB,oCAAoC;IACpC,WAAW,EAAE,MAAM,EAAE,CAAC;IAEtB,wCAAwC;IACxC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAEnB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,SAAS,EAAE,eAAe,CAAC;IAE3B,4BAA4B;IAC5B,aAAa,EAAE,MAAM,EAAE,CAAC;IAExB,8BAA8B;IAC9B,WAAW,EAAE,UAAU,EAAE,CAAC;IAE1B,kCAAkC;IAClC,eAAe,EAAE,aAAa,EAAE,CAAC;IAEjC,+BAA+B;IAC/B,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;QAChC,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACtC,EAAE,CAAC;IAEJ,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,mCAAmC;IACnC,WAAW,EAAE,UAAU,EAAE,CAAC;IAE1B,8CAA8C;IAC9C,aAAa,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,EAAE,CAAC;IAEJ,wCAAwC;IACxC,SAAS,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,SAAS,EAAE,OAAO,CAAC;KACpB,EAAE,CAAC;IAEJ,4BAA4B;IAC5B,oBAAoB,EAAE;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,EAAE,CAAC;IAEJ,eAAe;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,iCAAiC;IACjC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAE7B,8BAA8B;IAC9B,aAAa,EAAE,MAAM,CAAC;IAEtB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IAEnB,eAAe;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,eAAe;IACf,EAAE,EAAE,MAAM,CAAC;IAEX,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IAEb,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IAEpB,iCAAiC;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB,0CAA0C;IAC1C,gBAAgB,EAAE,QAAQ,CAAC;IAE3B,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IAEf,6CAA6C;IAC7C,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB,wCAAwC;IACxC,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,MAAM,EAAE,YAAY,EAAE,CAAC;IAEvB,+CAA+C;IAC/C,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAE3B,eAAe;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IAEjB,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC;IAEnB,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC;IAEpB,yBAAyB;IACzB,MAAM,EAAE,eAAe,CAAC;IAExB,6BAA6B;IAC7B,KAAK,CAAC,EAAE,WAAW,CAAC;IAEpB,6BAA6B;IAC7B,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAEpC,2BAA2B;IAC3B,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAElC,uBAAuB;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAE1B,kCAAkC;IAClC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAE7B,4BAA4B;IAC5B,MAAM,EAAE,YAAY,EAAE,CAAC;IAEvB,wBAAwB;IACxB,eAAe,EAAE,MAAM,CAAC;IAExB,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAC;IAEtB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,8BAA8B;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,UAAU,GAAG,YAAY,GAAG,eAAe,CAAC;CACzD;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAC;IAErB,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAC;IAEpB,qCAAqC;IACrC,YAAY,EAAE,MAAM,CAAC;IAErB,6BAA6B;IAC7B,YAAY,EAAE,MAAM,CAAC;CACtB"}
|
|
@@ -18,7 +18,7 @@ import type { Severity, Finding } from "../certification/types.js";
|
|
|
18
18
|
* Configuration for zero-day hunter
|
|
19
19
|
*/
|
|
20
20
|
export interface ZeroDayHunterConfig {
|
|
21
|
-
model?: "claude-sonnet-4" | "claude-opus-4" | "claude-haiku";
|
|
21
|
+
model?: "claude-sonnet-4-20250514" | "claude-opus-4-20250514" | "claude-3-5-haiku-20241022";
|
|
22
22
|
analysisDepth: "quick" | "standard" | "thorough";
|
|
23
23
|
focusAreas: ZeroDayFocusArea[];
|
|
24
24
|
maxFilesToAnalyze?: number;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"zero-day-hunter.d.ts","sourceRoot":"","sources":["../../src/agents/zero-day-hunter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAmB,MAAM,2BAA2B,CAAC;AAMpF;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,
|
|
1
|
+
{"version":3,"file":"zero-day-hunter.d.ts","sourceRoot":"","sources":["../../src/agents/zero-day-hunter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAmB,MAAM,2BAA2B,CAAC;AAMpF;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,0BAA0B,GAAG,wBAAwB,GAAG,2BAA2B,CAAC;IAC5F,aAAa,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;IACjD,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,QAAQ,GACR,WAAW,GACX,OAAO,GACP,OAAO,GACP,gBAAgB,GAChB,iBAAiB,GACjB,SAAS,GACT,KAAK,CAAC;AAEV;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,aAAa,CAAC;IACjE,WAAW,EAAE,MAAM,CAAC;CACrB;AAeD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AA8iBD;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,mBAAmB,CAAC,CA6D9B;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,EAAE,CAkBxE"}
|
|
@@ -0,0 +1,154 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Data Flow Analysis Module
|
|
3
|
+
*
|
|
4
|
+
* Tracks data flow from sources (user input, API responses) to sinks
|
|
5
|
+
* (database writes, command execution) to identify potential vulnerabilities.
|
|
6
|
+
*
|
|
7
|
+
* This module provides the foundation for semantic vulnerability detection
|
|
8
|
+
* by identifying risky data flows that bypass sanitization.
|
|
9
|
+
*
|
|
10
|
+
* @module analysis/data-flow
|
|
11
|
+
*/
|
|
12
|
+
import type { Severity } from "../certification/types.js";
|
|
13
|
+
/**
|
|
14
|
+
* Trust level of a data source
|
|
15
|
+
*/
|
|
16
|
+
export type TrustLevel = "untrusted" | "semi-trusted" | "trusted";
|
|
17
|
+
/**
|
|
18
|
+
* Types of data sources
|
|
19
|
+
*/
|
|
20
|
+
export type DataSourceType = "user-input" | "api-response" | "file-read" | "env-var" | "database" | "url-param" | "form-data" | "header" | "cookie";
|
|
21
|
+
/**
|
|
22
|
+
* Types of data sinks (dangerous operations)
|
|
23
|
+
*/
|
|
24
|
+
export type DataSinkType = "sql-query" | "command-exec" | "file-write" | "network-request" | "eval" | "template-render" | "html-render" | "redirect" | "log-output" | "response-body";
|
|
25
|
+
/**
|
|
26
|
+
* Risk level of a sink
|
|
27
|
+
*/
|
|
28
|
+
export type SinkRiskLevel = "critical" | "high" | "medium" | "low";
|
|
29
|
+
/**
|
|
30
|
+
* File location reference
|
|
31
|
+
*/
|
|
32
|
+
export interface FileLocation {
|
|
33
|
+
/** File path */
|
|
34
|
+
file: string;
|
|
35
|
+
/** Line number */
|
|
36
|
+
line: number;
|
|
37
|
+
/** Column number (optional) */
|
|
38
|
+
column?: number;
|
|
39
|
+
/** Code snippet */
|
|
40
|
+
snippet?: string;
|
|
41
|
+
}
|
|
42
|
+
/**
|
|
43
|
+
* A data source (entry point for potentially tainted data)
|
|
44
|
+
*/
|
|
45
|
+
export interface DataSource {
|
|
46
|
+
/** Unique identifier */
|
|
47
|
+
id: string;
|
|
48
|
+
/** Type of source */
|
|
49
|
+
type: DataSourceType;
|
|
50
|
+
/** Location in code */
|
|
51
|
+
location: FileLocation;
|
|
52
|
+
/** Variable or expression that holds the data */
|
|
53
|
+
variable: string;
|
|
54
|
+
/** Trust level */
|
|
55
|
+
trustLevel: TrustLevel;
|
|
56
|
+
/** Description */
|
|
57
|
+
description: string;
|
|
58
|
+
/** Framework-specific pattern that matched */
|
|
59
|
+
pattern?: string;
|
|
60
|
+
}
|
|
61
|
+
/**
|
|
62
|
+
* A data sink (potentially dangerous operation)
|
|
63
|
+
*/
|
|
64
|
+
export interface DataSink {
|
|
65
|
+
/** Unique identifier */
|
|
66
|
+
id: string;
|
|
67
|
+
/** Type of sink */
|
|
68
|
+
type: DataSinkType;
|
|
69
|
+
/** Location in code */
|
|
70
|
+
location: FileLocation;
|
|
71
|
+
/** Function or method call */
|
|
72
|
+
function: string;
|
|
73
|
+
/** Risk level */
|
|
74
|
+
riskLevel: SinkRiskLevel;
|
|
75
|
+
/** Description */
|
|
76
|
+
description: string;
|
|
77
|
+
/** Parameters that are dangerous */
|
|
78
|
+
dangerousParams?: string[];
|
|
79
|
+
/** Framework-specific pattern that matched */
|
|
80
|
+
pattern?: string;
|
|
81
|
+
}
|
|
82
|
+
/**
|
|
83
|
+
* A sanitizer that can make data safe
|
|
84
|
+
*/
|
|
85
|
+
export interface Sanitizer {
|
|
86
|
+
/** Unique identifier */
|
|
87
|
+
id: string;
|
|
88
|
+
/** Function or method name */
|
|
89
|
+
function: string;
|
|
90
|
+
/** Location in code */
|
|
91
|
+
location: FileLocation;
|
|
92
|
+
/** What sink types this sanitizes for */
|
|
93
|
+
sanitizesFor: DataSinkType[];
|
|
94
|
+
/** Description */
|
|
95
|
+
description: string;
|
|
96
|
+
}
|
|
97
|
+
/**
|
|
98
|
+
* A path from a source to a sink
|
|
99
|
+
*/
|
|
100
|
+
export interface DataFlowPath {
|
|
101
|
+
/** Source of the data */
|
|
102
|
+
source: DataSource;
|
|
103
|
+
/** Sink where the data ends up */
|
|
104
|
+
sink: DataSink;
|
|
105
|
+
/** Intermediate locations in the path */
|
|
106
|
+
path: FileLocation[];
|
|
107
|
+
/** Whether the flow passes through a sanitizer */
|
|
108
|
+
passesThroughSanitizer: boolean;
|
|
109
|
+
/** Sanitizer locations if any */
|
|
110
|
+
sanitizerLocations?: FileLocation[];
|
|
111
|
+
/** Overall risk assessment */
|
|
112
|
+
riskLevel: Severity;
|
|
113
|
+
/** Description of the vulnerability */
|
|
114
|
+
description: string;
|
|
115
|
+
}
|
|
116
|
+
/**
|
|
117
|
+
* Complete data flow context for a project
|
|
118
|
+
*/
|
|
119
|
+
export interface DataFlowContext {
|
|
120
|
+
/** All identified sources */
|
|
121
|
+
sources: DataSource[];
|
|
122
|
+
/** All identified sinks */
|
|
123
|
+
sinks: DataSink[];
|
|
124
|
+
/** All identified sanitizers */
|
|
125
|
+
sanitizers: Sanitizer[];
|
|
126
|
+
/** All data flow paths */
|
|
127
|
+
flows: DataFlowPath[];
|
|
128
|
+
/** Statistics */
|
|
129
|
+
stats: {
|
|
130
|
+
totalSources: number;
|
|
131
|
+
totalSinks: number;
|
|
132
|
+
totalSanitizers: number;
|
|
133
|
+
totalFlows: number;
|
|
134
|
+
riskyFlows: number;
|
|
135
|
+
sanitizedFlows: number;
|
|
136
|
+
};
|
|
137
|
+
}
|
|
138
|
+
/**
|
|
139
|
+
* Build data flow context for a project
|
|
140
|
+
*/
|
|
141
|
+
export declare function buildDataFlowContext(projectPath: string, files?: string[]): Promise<DataFlowContext>;
|
|
142
|
+
/**
|
|
143
|
+
* Get only risky (unsanitized) flows
|
|
144
|
+
*/
|
|
145
|
+
export declare function getRiskyFlows(context: DataFlowContext): DataFlowPath[];
|
|
146
|
+
/**
|
|
147
|
+
* Get flows by severity
|
|
148
|
+
*/
|
|
149
|
+
export declare function getFlowsBySeverity(context: DataFlowContext, severity: Severity): DataFlowPath[];
|
|
150
|
+
/**
|
|
151
|
+
* Format context for LLM analysis
|
|
152
|
+
*/
|
|
153
|
+
export declare function formatContextForLLM(riskyFlows: DataFlowPath[], maxFlows?: number): string;
|
|
154
|
+
//# sourceMappingURL=data-flow.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"data-flow.d.ts","sourceRoot":"","sources":["../../src/analysis/data-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAO1D;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,cAAc,GAAG,SAAS,CAAC;AAElE;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,YAAY,GACZ,cAAc,GACd,WAAW,GACX,SAAS,GACT,UAAU,GACV,WAAW,GACX,WAAW,GACX,QAAQ,GACR,QAAQ,CAAC;AAEb;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,WAAW,GACX,cAAc,GACd,YAAY,GACZ,iBAAiB,GACjB,MAAM,GACN,iBAAiB,GACjB,aAAa,GACb,UAAU,GACV,YAAY,GACZ,eAAe,CAAC;AAEpB;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IAEb,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,mBAAmB;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IAEX,qBAAqB;IACrB,IAAI,EAAE,cAAc,CAAC;IAErB,uBAAuB;IACvB,QAAQ,EAAE,YAAY,CAAC;IAEvB,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IAEjB,kBAAkB;IAClB,UAAU,EAAE,UAAU,CAAC;IAEvB,kBAAkB;IAClB,WAAW,EAAE,MAAM,CAAC;IAEpB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IAEX,mBAAmB;IACnB,IAAI,EAAE,YAAY,CAAC;IAEnB,uBAAuB;IACvB,QAAQ,EAAE,YAAY,CAAC;IAEvB,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IAEjB,iBAAiB;IACjB,SAAS,EAAE,aAAa,CAAC;IAEzB,kBAAkB;IAClB,WAAW,EAAE,MAAM,CAAC;IAEpB,oCAAoC;IACpC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IAEX,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IAEjB,uBAAuB;IACvB,QAAQ,EAAE,YAAY,CAAC;IAEvB,yCAAyC;IACzC,YAAY,EAAE,YAAY,EAAE,CAAC;IAE7B,kBAAkB;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,yBAAyB;IACzB,MAAM,EAAE,UAAU,CAAC;IAEnB,kCAAkC;IAClC,IAAI,EAAE,QAAQ,CAAC;IAEf,yCAAyC;IACzC,IAAI,EAAE,YAAY,EAAE,CAAC;IAErB,kDAAkD;IAClD,sBAAsB,EAAE,OAAO,CAAC;IAEhC,iCAAiC;IACjC,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC;IAEpC,8BAA8B;IAC9B,SAAS,EAAE,QAAQ,CAAC;IAEpB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6BAA6B;IAC7B,OAAO,EAAE,UAAU,EAAE,CAAC;IAEtB,2BAA2B;IAC3B,KAAK,EAAE,QAAQ,EAAE,CAAC;IAElB,gCAAgC;IAChC,UAAU,EAAE,SAAS,EAAE,CAAC;IAExB,0BAA0B;IAC1B,KAAK,EAAE,YAAY,EAAE,CAAC;IAEtB,iBAAiB;IACjB,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AA6WD;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,eAAe,CAAC,CA+C1B;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,YAAY,EAAE,CAEtE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,QAAQ,GACjB,YAAY,EAAE,CAEhB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,YAAY,EAAE,EAC1B,QAAQ,SAAK,GACZ,MAAM,CAgBR"}
|