verification-layer 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (95) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +345 -0
  3. package/dist/audit/evidence.d.ts +25 -0
  4. package/dist/audit/evidence.d.ts.map +1 -0
  5. package/dist/audit/evidence.js +70 -0
  6. package/dist/audit/evidence.js.map +1 -0
  7. package/dist/audit/index.d.ts +54 -0
  8. package/dist/audit/index.d.ts.map +1 -0
  9. package/dist/audit/index.js +159 -0
  10. package/dist/audit/index.js.map +1 -0
  11. package/dist/cli.d.ts +3 -0
  12. package/dist/cli.d.ts.map +1 -0
  13. package/dist/cli.js +199 -0
  14. package/dist/cli.js.map +1 -0
  15. package/dist/config.d.ts +7 -0
  16. package/dist/config.d.ts.map +1 -0
  17. package/dist/config.js +77 -0
  18. package/dist/config.js.map +1 -0
  19. package/dist/fixer/index.d.ts +11 -0
  20. package/dist/fixer/index.d.ts.map +1 -0
  21. package/dist/fixer/index.js +171 -0
  22. package/dist/fixer/index.js.map +1 -0
  23. package/dist/fixer/strategies.d.ts +3 -0
  24. package/dist/fixer/strategies.d.ts.map +1 -0
  25. package/dist/fixer/strategies.js +199 -0
  26. package/dist/fixer/strategies.js.map +1 -0
  27. package/dist/index.d.ts +4 -0
  28. package/dist/index.d.ts.map +1 -0
  29. package/dist/index.js +3 -0
  30. package/dist/index.js.map +1 -0
  31. package/dist/reporters/audit-report.d.ts +13 -0
  32. package/dist/reporters/audit-report.d.ts.map +1 -0
  33. package/dist/reporters/audit-report.js +526 -0
  34. package/dist/reporters/audit-report.js.map +1 -0
  35. package/dist/reporters/fix-report.d.ts +3 -0
  36. package/dist/reporters/fix-report.d.ts.map +1 -0
  37. package/dist/reporters/fix-report.js +70 -0
  38. package/dist/reporters/fix-report.js.map +1 -0
  39. package/dist/reporters/index.d.ts +3 -0
  40. package/dist/reporters/index.d.ts.map +1 -0
  41. package/dist/reporters/index.js +425 -0
  42. package/dist/reporters/index.js.map +1 -0
  43. package/dist/reporters/remediation-guides.d.ts +25 -0
  44. package/dist/reporters/remediation-guides.d.ts.map +1 -0
  45. package/dist/reporters/remediation-guides.js +636 -0
  46. package/dist/reporters/remediation-guides.js.map +1 -0
  47. package/dist/scan.d.ts +3 -0
  48. package/dist/scan.d.ts.map +1 -0
  49. package/dist/scan.js +96 -0
  50. package/dist/scan.js.map +1 -0
  51. package/dist/scanners/access/index.d.ts +3 -0
  52. package/dist/scanners/access/index.d.ts.map +1 -0
  53. package/dist/scanners/access/index.js +102 -0
  54. package/dist/scanners/access/index.js.map +1 -0
  55. package/dist/scanners/audit/index.d.ts +3 -0
  56. package/dist/scanners/audit/index.d.ts.map +1 -0
  57. package/dist/scanners/audit/index.js +94 -0
  58. package/dist/scanners/audit/index.js.map +1 -0
  59. package/dist/scanners/encryption/index.d.ts +3 -0
  60. package/dist/scanners/encryption/index.d.ts.map +1 -0
  61. package/dist/scanners/encryption/index.js +86 -0
  62. package/dist/scanners/encryption/index.js.map +1 -0
  63. package/dist/scanners/phi/index.d.ts +3 -0
  64. package/dist/scanners/phi/index.d.ts.map +1 -0
  65. package/dist/scanners/phi/index.js +47 -0
  66. package/dist/scanners/phi/index.js.map +1 -0
  67. package/dist/scanners/phi/patterns.d.ts +13 -0
  68. package/dist/scanners/phi/patterns.d.ts.map +1 -0
  69. package/dist/scanners/phi/patterns.js +242 -0
  70. package/dist/scanners/phi/patterns.js.map +1 -0
  71. package/dist/scanners/retention/index.d.ts +3 -0
  72. package/dist/scanners/retention/index.d.ts.map +1 -0
  73. package/dist/scanners/retention/index.js +102 -0
  74. package/dist/scanners/retention/index.js.map +1 -0
  75. package/dist/scanners/security/index.d.ts +3 -0
  76. package/dist/scanners/security/index.d.ts.map +1 -0
  77. package/dist/scanners/security/index.js +280 -0
  78. package/dist/scanners/security/index.js.map +1 -0
  79. package/dist/stack-detector/index.d.ts +26 -0
  80. package/dist/stack-detector/index.d.ts.map +1 -0
  81. package/dist/stack-detector/index.js +317 -0
  82. package/dist/stack-detector/index.js.map +1 -0
  83. package/dist/stack-detector/stack-guides.d.ts +16 -0
  84. package/dist/stack-detector/stack-guides.d.ts.map +1 -0
  85. package/dist/stack-detector/stack-guides.js +772 -0
  86. package/dist/stack-detector/stack-guides.js.map +1 -0
  87. package/dist/types.d.ts +143 -0
  88. package/dist/types.d.ts.map +1 -0
  89. package/dist/types.js +2 -0
  90. package/dist/types.js.map +1 -0
  91. package/dist/utils/context.d.ts +3 -0
  92. package/dist/utils/context.d.ts.map +1 -0
  93. package/dist/utils/context.js +14 -0
  94. package/dist/utils/context.js.map +1 -0
  95. package/package.json +76 -0
@@ -0,0 +1,526 @@
1
+ import PDFDocument from 'pdfkit';
2
+ import { createWriteStream } from 'fs';
3
+ import { createHash } from 'crypto';
4
+ const COLORS = {
5
+ primary: '#1e40af',
6
+ secondary: '#6b7280',
7
+ critical: '#dc2626',
8
+ high: '#ea580c',
9
+ medium: '#ca8a04',
10
+ low: '#16a34a',
11
+ info: '#2563eb',
12
+ background: '#f9fafb',
13
+ border: '#e5e7eb',
14
+ };
15
+ const STATUS_LABELS = {
16
+ pending_review: 'Pending Human Review',
17
+ assigned: 'Assigned',
18
+ in_progress: 'In Progress',
19
+ resolved: 'Resolved',
20
+ accepted_risk: 'Risk Accepted',
21
+ };
22
+ /**
23
+ * Generate PDF audit report
24
+ */
25
+ export async function generateAuditReport(trail, options) {
26
+ return new Promise((resolve, reject) => {
27
+ const doc = new PDFDocument({
28
+ size: 'A4',
29
+ margins: { top: 50, bottom: 50, left: 50, right: 50 },
30
+ info: {
31
+ Title: 'HIPAA Compliance Audit Report',
32
+ Author: options.auditorName || 'vlayer',
33
+ Subject: 'Security Audit Evidence',
34
+ Creator: 'vlayer - HIPAA Compliance Scanner',
35
+ },
36
+ });
37
+ const chunks = [];
38
+ doc.on('data', (chunk) => chunks.push(chunk));
39
+ doc.on('end', () => {
40
+ const pdfBuffer = Buffer.concat(chunks);
41
+ const hash = createHash('sha256').update(pdfBuffer).digest('hex');
42
+ resolve({ path: options.outputPath, hash });
43
+ });
44
+ doc.on('error', reject);
45
+ const stream = createWriteStream(options.outputPath);
46
+ doc.pipe(stream);
47
+ // Cover Page
48
+ renderCoverPage(doc, trail, options);
49
+ // Executive Summary
50
+ doc.addPage();
51
+ renderExecutiveSummary(doc, trail);
52
+ // Auto-Fixed Issues (Evidence)
53
+ if (options.includeEvidence !== false && trail.evidence.length > 0) {
54
+ doc.addPage();
55
+ renderEvidenceSection(doc, trail.evidence);
56
+ }
57
+ // Manual Review Items
58
+ if (options.includeManualReviews !== false && trail.manualReviews.length > 0) {
59
+ doc.addPage();
60
+ renderManualReviewSection(doc, trail.manualReviews);
61
+ }
62
+ // Verification Page
63
+ doc.addPage();
64
+ renderVerificationPage(doc, trail);
65
+ doc.end();
66
+ });
67
+ }
68
+ function renderCoverPage(doc, trail, options) {
69
+ const pageWidth = doc.page.width - 100;
70
+ // Header
71
+ doc.rect(0, 0, doc.page.width, 200).fill(COLORS.primary);
72
+ doc.fillColor('#ffffff')
73
+ .fontSize(32)
74
+ .font('Helvetica-Bold')
75
+ .text('HIPAA Compliance', 50, 60, { width: pageWidth })
76
+ .text('Audit Report', 50, 100, { width: pageWidth });
77
+ doc.fontSize(14)
78
+ .font('Helvetica')
79
+ .text('Security Vulnerability Assessment & Remediation Evidence', 50, 150, { width: pageWidth });
80
+ // Project Info Box
81
+ doc.fillColor('#000000');
82
+ const boxY = 250;
83
+ doc.rect(50, boxY, pageWidth, 180)
84
+ .fill(COLORS.background);
85
+ doc.rect(50, boxY, pageWidth, 180)
86
+ .stroke(COLORS.border);
87
+ doc.fillColor(COLORS.primary)
88
+ .fontSize(16)
89
+ .font('Helvetica-Bold')
90
+ .text('Project Information', 70, boxY + 20);
91
+ doc.fillColor('#000000')
92
+ .fontSize(11)
93
+ .font('Helvetica');
94
+ const infoItems = [
95
+ ['Project Name:', trail.projectName],
96
+ ['Project Path:', trail.projectPath],
97
+ ['Scan Date:', new Date(trail.createdAt).toLocaleString()],
98
+ ['Report ID:', trail.id],
99
+ ['Organization:', options.organizationName || 'Not specified'],
100
+ ['Auditor:', options.auditorName || 'vlayer automated scan'],
101
+ ];
102
+ let y = boxY + 50;
103
+ for (const [label, value] of infoItems) {
104
+ doc.font('Helvetica-Bold').text(label, 70, y, { continued: true });
105
+ doc.font('Helvetica').text(` ${value}`, { width: pageWidth - 50 });
106
+ y += 20;
107
+ }
108
+ // Summary Stats
109
+ const statsY = 480;
110
+ doc.fillColor(COLORS.primary)
111
+ .fontSize(16)
112
+ .font('Helvetica-Bold')
113
+ .text('Scan Summary', 70, statsY);
114
+ const stats = [
115
+ { label: 'Files Scanned', value: trail.scannedFiles.toString(), color: COLORS.info },
116
+ { label: 'Total Findings', value: trail.totalFindings.toString(), color: COLORS.critical },
117
+ { label: 'Auto-Fixed', value: trail.autoFixedCount.toString(), color: COLORS.low },
118
+ { label: 'Manual Review', value: trail.manualReviewCount.toString(), color: COLORS.medium },
119
+ ];
120
+ const statWidth = (pageWidth - 30) / 4;
121
+ stats.forEach((stat, i) => {
122
+ const x = 50 + i * (statWidth + 10);
123
+ doc.rect(x, statsY + 30, statWidth, 70).fill(stat.color);
124
+ doc.fillColor('#ffffff')
125
+ .fontSize(24)
126
+ .font('Helvetica-Bold')
127
+ .text(stat.value, x, statsY + 45, { width: statWidth, align: 'center' });
128
+ doc.fontSize(10)
129
+ .font('Helvetica')
130
+ .text(stat.label, x, statsY + 75, { width: statWidth, align: 'center' });
131
+ });
132
+ // Footer
133
+ doc.fillColor(COLORS.secondary)
134
+ .fontSize(10)
135
+ .font('Helvetica')
136
+ .text('Generated by vlayer - HIPAA Compliance Scanner', 50, doc.page.height - 50, {
137
+ width: pageWidth,
138
+ align: 'center',
139
+ });
140
+ }
141
+ function renderExecutiveSummary(doc, trail) {
142
+ const pageWidth = doc.page.width - 100;
143
+ doc.fillColor(COLORS.primary)
144
+ .fontSize(20)
145
+ .font('Helvetica-Bold')
146
+ .text('Executive Summary', 50, 50);
147
+ doc.moveTo(50, 80).lineTo(pageWidth + 50, 80).stroke(COLORS.border);
148
+ let y = 100;
149
+ // Overview
150
+ doc.fillColor('#000000')
151
+ .fontSize(12)
152
+ .font('Helvetica')
153
+ .text(`This report documents the security assessment conducted on ${new Date(trail.createdAt).toLocaleDateString()}. ` +
154
+ `The scan analyzed ${trail.scannedFiles} files and identified ${trail.totalFindings} potential HIPAA compliance issues.`, 50, y, { width: pageWidth });
155
+ y += 60;
156
+ // Remediation Summary
157
+ doc.fillColor(COLORS.primary)
158
+ .fontSize(14)
159
+ .font('Helvetica-Bold')
160
+ .text('Remediation Status', 50, y);
161
+ y += 25;
162
+ const remediationRate = trail.totalFindings > 0
163
+ ? ((trail.autoFixedCount / trail.totalFindings) * 100).toFixed(1)
164
+ : '0';
165
+ doc.fillColor('#000000')
166
+ .fontSize(11)
167
+ .font('Helvetica');
168
+ const bulletPoints = [
169
+ `${trail.autoFixedCount} issues were automatically remediated (${remediationRate}% auto-fix rate)`,
170
+ `${trail.manualReviewCount} issues require manual review and human decision`,
171
+ `All auto-fixes include cryptographic evidence (SHA256 hashes) for verification`,
172
+ `Each fix is mapped to specific HIPAA regulation references`,
173
+ ];
174
+ for (const point of bulletPoints) {
175
+ doc.text(`\u2022 ${point}`, 60, y, { width: pageWidth - 20 });
176
+ y += 20;
177
+ }
178
+ y += 20;
179
+ // Risk Assessment
180
+ doc.fillColor(COLORS.primary)
181
+ .fontSize(14)
182
+ .font('Helvetica-Bold')
183
+ .text('Risk Assessment', 50, y);
184
+ y += 25;
185
+ // Count by severity
186
+ const severityCounts = trail.manualReviews.reduce((acc, r) => {
187
+ acc[r.finding.severity] = (acc[r.finding.severity] || 0) + 1;
188
+ return acc;
189
+ }, {});
190
+ const severityOrder = ['critical', 'high', 'medium', 'low', 'info'];
191
+ const severityLabels = {
192
+ critical: 'Critical',
193
+ high: 'High',
194
+ medium: 'Medium',
195
+ low: 'Low',
196
+ info: 'Informational',
197
+ };
198
+ doc.fontSize(11).font('Helvetica');
199
+ for (const severity of severityOrder) {
200
+ const count = severityCounts[severity] || 0;
201
+ if (count > 0) {
202
+ doc.fillColor(COLORS[severity] || COLORS.secondary)
203
+ .text(`${severityLabels[severity]}: ${count} issues pending review`, 60, y);
204
+ y += 18;
205
+ }
206
+ }
207
+ y += 30;
208
+ // HIPAA Compliance Note
209
+ doc.rect(50, y, pageWidth, 80).fill('#fef3c7');
210
+ doc.fillColor('#92400e')
211
+ .fontSize(11)
212
+ .font('Helvetica-Bold')
213
+ .text('HIPAA Compliance Note', 60, y + 15);
214
+ doc.font('Helvetica')
215
+ .text('This report provides evidence of security controls and remediation efforts as required by HIPAA ' +
216
+ 'Security Rule (45 CFR Part 164). Organizations should retain this documentation for a minimum of 6 years.', 60, y + 35, { width: pageWidth - 20 });
217
+ }
218
+ function renderEvidenceSection(doc, evidence) {
219
+ const pageWidth = doc.page.width - 100;
220
+ doc.fillColor(COLORS.primary)
221
+ .fontSize(20)
222
+ .font('Helvetica-Bold')
223
+ .text('Automated Fix Evidence', 50, 50);
224
+ doc.moveTo(50, 80).lineTo(pageWidth + 50, 80).stroke(COLORS.border);
225
+ doc.fillColor(COLORS.secondary)
226
+ .fontSize(10)
227
+ .font('Helvetica')
228
+ .text('Each entry below documents an automated security fix with cryptographic verification.', 50, 90);
229
+ let y = 120;
230
+ for (let i = 0; i < evidence.length; i++) {
231
+ const ev = evidence[i];
232
+ // Check if we need a new page
233
+ if (y > doc.page.height - 250) {
234
+ doc.addPage();
235
+ y = 50;
236
+ }
237
+ // Evidence header
238
+ doc.rect(50, y, pageWidth, 25).fill(COLORS.primary);
239
+ doc.fillColor('#ffffff')
240
+ .fontSize(11)
241
+ .font('Helvetica-Bold')
242
+ .text(`Evidence #${i + 1}: ${ev.description}`, 60, y + 7);
243
+ y += 35;
244
+ // Details
245
+ doc.fillColor('#000000').fontSize(9).font('Helvetica');
246
+ const details = [
247
+ ['File:', ev.filePath],
248
+ ['Line:', ev.before.lineNumber.toString()],
249
+ ['Timestamp:', new Date(ev.timestamp).toLocaleString()],
250
+ ['HIPAA Reference:', ev.hipaaReference],
251
+ ['Fix Type:', ev.fixType],
252
+ ];
253
+ for (const [label, value] of details) {
254
+ doc.font('Helvetica-Bold').text(label, 60, y, { continued: true });
255
+ doc.font('Helvetica').text(` ${value}`);
256
+ y += 14;
257
+ }
258
+ y += 5;
259
+ // Code before
260
+ doc.fillColor(COLORS.critical)
261
+ .fontSize(9)
262
+ .font('Helvetica-Bold')
263
+ .text('BEFORE:', 60, y);
264
+ y += 12;
265
+ doc.rect(60, y, pageWidth - 20, 30).fill('#1e1e1e');
266
+ doc.fillColor('#d4d4d4')
267
+ .fontSize(8)
268
+ .font('Courier')
269
+ .text(truncateCode(ev.before.content), 65, y + 8, { width: pageWidth - 30 });
270
+ y += 35;
271
+ // Code after
272
+ doc.fillColor(COLORS.low)
273
+ .fontSize(9)
274
+ .font('Helvetica-Bold')
275
+ .text('AFTER:', 60, y);
276
+ y += 12;
277
+ doc.rect(60, y, pageWidth - 20, 30).fill('#1e1e1e');
278
+ doc.fillColor('#d4d4d4')
279
+ .fontSize(8)
280
+ .font('Courier')
281
+ .text(truncateCode(ev.after.content), 65, y + 8, { width: pageWidth - 30 });
282
+ y += 35;
283
+ // Hashes
284
+ doc.fillColor(COLORS.secondary)
285
+ .fontSize(7)
286
+ .font('Courier')
287
+ .text(`SHA256 Before: ${ev.fileHashBefore}`, 60, y);
288
+ y += 10;
289
+ doc.text(`SHA256 After: ${ev.fileHashAfter}`, 60, y);
290
+ y += 25;
291
+ // Separator
292
+ doc.moveTo(50, y).lineTo(pageWidth + 50, y).stroke(COLORS.border);
293
+ y += 15;
294
+ }
295
+ }
296
+ function renderManualReviewSection(doc, reviews) {
297
+ const pageWidth = doc.page.width - 100;
298
+ doc.fillColor(COLORS.primary)
299
+ .fontSize(20)
300
+ .font('Helvetica-Bold')
301
+ .text('Manual Review Required', 50, 50);
302
+ doc.moveTo(50, 80).lineTo(pageWidth + 50, 80).stroke(COLORS.border);
303
+ doc.fillColor(COLORS.secondary)
304
+ .fontSize(10)
305
+ .font('Helvetica')
306
+ .text('The following issues require human review and decision. Suggested deadlines are based on severity.', 50, 90);
307
+ let y = 120;
308
+ for (let i = 0; i < reviews.length; i++) {
309
+ const review = reviews[i];
310
+ if (y > doc.page.height - 200) {
311
+ doc.addPage();
312
+ y = 50;
313
+ }
314
+ // Severity badge color
315
+ const severityColor = COLORS[review.finding.severity] || COLORS.secondary;
316
+ // Review header
317
+ doc.rect(50, y, pageWidth, 25).fill(severityColor);
318
+ doc.fillColor('#ffffff')
319
+ .fontSize(10)
320
+ .font('Helvetica-Bold')
321
+ .text(`#${i + 1} [${review.finding.severity.toUpperCase()}] ${review.finding.title}`, 60, y + 7, {
322
+ width: pageWidth - 20,
323
+ });
324
+ y += 35;
325
+ doc.fillColor('#000000').fontSize(9).font('Helvetica');
326
+ // Status box
327
+ doc.rect(60, y, 150, 20).fill('#fef2f2');
328
+ doc.fillColor(COLORS.critical)
329
+ .fontSize(9)
330
+ .font('Helvetica-Bold')
331
+ .text(`Status: ${STATUS_LABELS[review.status]}`, 65, y + 5);
332
+ y += 30;
333
+ // Details
334
+ doc.fillColor('#000000').font('Helvetica');
335
+ const details = [
336
+ ['File:', review.finding.file + (review.finding.line ? `:${review.finding.line}` : '')],
337
+ ['Category:', review.finding.category],
338
+ ['HIPAA Ref:', review.finding.hipaaReference || 'N/A'],
339
+ ['Suggested Deadline:', new Date(review.suggestedDeadline).toLocaleDateString()],
340
+ ['Assigned To:', review.assignedTo || '__________________ (fill in)'],
341
+ ];
342
+ for (const [label, value] of details) {
343
+ doc.font('Helvetica-Bold').text(label, 60, y, { continued: true });
344
+ doc.font('Helvetica').text(` ${value}`);
345
+ y += 14;
346
+ }
347
+ y += 5;
348
+ // Description
349
+ doc.fillColor(COLORS.secondary)
350
+ .fontSize(9)
351
+ .text(review.finding.description, 60, y, { width: pageWidth - 20 });
352
+ y += 30;
353
+ // Recommendation
354
+ doc.fillColor('#000000')
355
+ .font('Helvetica-Bold')
356
+ .text('Recommendation:', 60, y);
357
+ y += 12;
358
+ doc.font('Helvetica')
359
+ .text(review.finding.recommendation, 60, y, { width: pageWidth - 20 });
360
+ y += 35;
361
+ // Separator
362
+ doc.moveTo(50, y).lineTo(pageWidth + 50, y).stroke(COLORS.border);
363
+ y += 15;
364
+ }
365
+ }
366
+ function renderVerificationPage(doc, trail) {
367
+ const pageWidth = doc.page.width - 100;
368
+ doc.fillColor(COLORS.primary)
369
+ .fontSize(20)
370
+ .font('Helvetica-Bold')
371
+ .text('Report Verification', 50, 50);
372
+ doc.moveTo(50, 80).lineTo(pageWidth + 50, 80).stroke(COLORS.border);
373
+ let y = 100;
374
+ doc.fillColor('#000000')
375
+ .fontSize(11)
376
+ .font('Helvetica')
377
+ .text('This page provides cryptographic verification of the audit trail integrity. ' +
378
+ 'The hash below can be used to verify that this report has not been tampered with.', 50, y, { width: pageWidth });
379
+ y += 50;
380
+ // Hash box
381
+ doc.rect(50, y, pageWidth, 80).fill('#f0f9ff');
382
+ doc.rect(50, y, pageWidth, 80).stroke(COLORS.primary);
383
+ doc.fillColor(COLORS.primary)
384
+ .fontSize(12)
385
+ .font('Helvetica-Bold')
386
+ .text('Report Verification Hash (SHA256)', 60, y + 15);
387
+ doc.fillColor('#000000')
388
+ .fontSize(10)
389
+ .font('Courier')
390
+ .text(trail.reportHash || 'Hash will be generated on report save', 60, y + 40, {
391
+ width: pageWidth - 20,
392
+ });
393
+ y += 110;
394
+ // Verification instructions
395
+ doc.fillColor(COLORS.primary)
396
+ .fontSize(14)
397
+ .font('Helvetica-Bold')
398
+ .text('How to Verify', 50, y);
399
+ y += 25;
400
+ doc.fillColor('#000000')
401
+ .fontSize(10)
402
+ .font('Helvetica');
403
+ const steps = [
404
+ '1. Locate the audit-trail.json file in the .vlayer directory of the scanned project',
405
+ '2. Compute the SHA256 hash of the evidence array using the same algorithm',
406
+ '3. Compare the computed hash with the hash shown above',
407
+ '4. If hashes match, the audit trail has not been modified since generation',
408
+ ];
409
+ for (const step of steps) {
410
+ doc.text(step, 60, y, { width: pageWidth - 20 });
411
+ y += 20;
412
+ }
413
+ y += 30;
414
+ // Audit Trail Location
415
+ doc.fillColor(COLORS.primary)
416
+ .fontSize(14)
417
+ .font('Helvetica-Bold')
418
+ .text('Audit Trail Location', 50, y);
419
+ y += 25;
420
+ doc.rect(50, y, pageWidth, 40).fill('#1e1e1e');
421
+ doc.fillColor('#d4d4d4')
422
+ .fontSize(10)
423
+ .font('Courier')
424
+ .text(`${trail.projectPath}/.vlayer/audit-trail.json`, 60, y + 12);
425
+ y += 70;
426
+ // Signature lines
427
+ doc.fillColor(COLORS.primary)
428
+ .fontSize(14)
429
+ .font('Helvetica-Bold')
430
+ .text('Signatures', 50, y);
431
+ y += 30;
432
+ doc.fillColor('#000000').fontSize(10).font('Helvetica');
433
+ const signatures = [
434
+ { label: 'Security Officer', line: true },
435
+ { label: 'Date', line: true },
436
+ { label: 'Reviewer', line: true },
437
+ { label: 'Date', line: true },
438
+ ];
439
+ let col = 0;
440
+ for (const sig of signatures) {
441
+ const x = 50 + (col % 2) * (pageWidth / 2 + 10);
442
+ const sigY = y + Math.floor(col / 2) * 50;
443
+ doc.text(`${sig.label}:`, x, sigY);
444
+ doc.moveTo(x + 80, sigY + 10).lineTo(x + pageWidth / 2 - 20, sigY + 10).stroke('#000000');
445
+ col++;
446
+ }
447
+ // Footer
448
+ doc.fillColor(COLORS.secondary)
449
+ .fontSize(8)
450
+ .font('Helvetica')
451
+ .text(`Report generated on ${new Date().toLocaleString()} | Report ID: ${trail.id}`, 50, doc.page.height - 40, { width: pageWidth, align: 'center' });
452
+ }
453
+ function truncateCode(code, maxLength = 100) {
454
+ const cleaned = code.trim();
455
+ if (cleaned.length <= maxLength)
456
+ return cleaned;
457
+ return cleaned.substring(0, maxLength - 3) + '...';
458
+ }
459
+ /**
460
+ * Generate text-based audit report (for environments without PDF support)
461
+ */
462
+ export function generateTextAuditReport(trail) {
463
+ const lines = [];
464
+ const separator = '='.repeat(80);
465
+ const subSeparator = '-'.repeat(80);
466
+ lines.push(separator);
467
+ lines.push('HIPAA COMPLIANCE AUDIT REPORT');
468
+ lines.push(separator);
469
+ lines.push('');
470
+ lines.push(`Project: ${trail.projectName}`);
471
+ lines.push(`Path: ${trail.projectPath}`);
472
+ lines.push(`Date: ${new Date(trail.createdAt).toLocaleString()}`);
473
+ lines.push(`Report ID: ${trail.id}`);
474
+ lines.push('');
475
+ lines.push(subSeparator);
476
+ lines.push('SUMMARY');
477
+ lines.push(subSeparator);
478
+ lines.push(`Files Scanned: ${trail.scannedFiles}`);
479
+ lines.push(`Total Findings: ${trail.totalFindings}`);
480
+ lines.push(`Auto-Fixed: ${trail.autoFixedCount}`);
481
+ lines.push(`Manual Review: ${trail.manualReviewCount}`);
482
+ lines.push('');
483
+ if (trail.evidence.length > 0) {
484
+ lines.push(subSeparator);
485
+ lines.push('AUTOMATED FIX EVIDENCE');
486
+ lines.push(subSeparator);
487
+ for (let i = 0; i < trail.evidence.length; i++) {
488
+ const ev = trail.evidence[i];
489
+ lines.push('');
490
+ lines.push(`[${i + 1}] ${ev.description}`);
491
+ lines.push(` File: ${ev.filePath}:${ev.before.lineNumber}`);
492
+ lines.push(` Time: ${new Date(ev.timestamp).toLocaleString()}`);
493
+ lines.push(` HIPAA: ${ev.hipaaReference}`);
494
+ lines.push(` BEFORE: ${ev.before.content.trim()}`);
495
+ lines.push(` AFTER: ${ev.after.content.trim()}`);
496
+ lines.push(` Hash Before: ${ev.fileHashBefore}`);
497
+ lines.push(` Hash After: ${ev.fileHashAfter}`);
498
+ }
499
+ lines.push('');
500
+ }
501
+ if (trail.manualReviews.length > 0) {
502
+ lines.push(subSeparator);
503
+ lines.push('MANUAL REVIEW REQUIRED');
504
+ lines.push(subSeparator);
505
+ for (let i = 0; i < trail.manualReviews.length; i++) {
506
+ const review = trail.manualReviews[i];
507
+ lines.push('');
508
+ lines.push(`[${i + 1}] [${review.finding.severity.toUpperCase()}] ${review.finding.title}`);
509
+ lines.push(` Status: ${STATUS_LABELS[review.status]}`);
510
+ lines.push(` File: ${review.finding.file}${review.finding.line ? `:${review.finding.line}` : ''}`);
511
+ lines.push(` Deadline: ${new Date(review.suggestedDeadline).toLocaleDateString()}`);
512
+ lines.push(` Assigned: ${review.assignedTo || '(unassigned)'}`);
513
+ lines.push(` ${review.finding.description}`);
514
+ }
515
+ lines.push('');
516
+ }
517
+ lines.push(subSeparator);
518
+ lines.push('VERIFICATION');
519
+ lines.push(subSeparator);
520
+ lines.push(`Report Hash: ${trail.reportHash || 'N/A'}`);
521
+ lines.push(`Audit Trail: ${trail.projectPath}/.vlayer/audit-trail.json`);
522
+ lines.push('');
523
+ lines.push(separator);
524
+ return lines.join('\n');
525
+ }
526
+ //# sourceMappingURL=audit-report.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"audit-report.js","sourceRoot":"","sources":["../../src/reporters/audit-report.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGpC,MAAM,MAAM,GAAG;IACb,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,SAAS;IACpB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,SAAS;IACf,UAAU,EAAE,SAAS;IACrB,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF,MAAM,aAAa,GAA2B;IAC5C,cAAc,EAAE,sBAAsB;IACtC,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,eAAe;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAiB,EACjB,OAA2B;IAE3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC;YAC1B,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YACrD,IAAI,EAAE;gBACJ,KAAK,EAAE,+BAA+B;gBACtC,MAAM,EAAE,OAAO,CAAC,WAAW,IAAI,QAAQ;gBACvC,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,mCAAmC;aAC7C;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAExB,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEjB,aAAa;QACb,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAErC,oBAAoB;QACpB,GAAG,CAAC,OAAO,EAAE,CAAC;QACd,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAEnC,+BAA+B;QAC/B,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QAED,sBAAsB;QACtB,IAAI,OAAO,CAAC,oBAAoB,KAAK,KAAK,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,yBAAyB,CAAC,GAAG,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QACtD,CAAC;QAED,oBAAoB;QACpB,GAAG,CAAC,OAAO,EAAE,CAAC;QACd,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAEnC,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,GAAuB,EAAE,KAAiB,EAAE,OAA2B;IAC9F,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IAEvC,SAAS;IACT,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEzD,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;SACrB,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;SACtD,IAAI,CAAC,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAEvD,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;SACb,IAAI,CAAC,WAAW,CAAC;SACjB,IAAI,CAAC,0DAA0D,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAEnG,mBAAmB;IACnB,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,GAAG,CAAC;IAEjB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC;SAC/B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAE3B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC;SAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEzB,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,qBAAqB,EAAE,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAE9C,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;SACrB,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,WAAW,CAAC,CAAC;IAErB,MAAM,SAAS,GAAG;QAChB,CAAC,eAAe,EAAE,KAAK,CAAC,WAAW,CAAC;QACpC,CAAC,eAAe,EAAE,KAAK,CAAC,WAAW,CAAC;QACpC,CAAC,YAAY,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC;QAC1D,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC;QACxB,CAAC,eAAe,EAAE,OAAO,CAAC,gBAAgB,IAAI,eAAe,CAAC;QAC9D,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,uBAAuB,CAAC;KAC7D,CAAC;IAEF,IAAI,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;IAClB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC,IAAI,EAAE,CAAC;IACV,CAAC;IAED,gBAAgB;IAChB,MAAM,MAAM,GAAG,GAAG,CAAC;IACnB,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAEpC,MAAM,KAAK,GAAG;QACZ,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE;QACpF,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE;QAC1F,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE;QAClF,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;KAC5F,CAAC;IAEF,MAAM,SAAS,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;IACvC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;aACrB,QAAQ,CAAC,EAAE,CAAC;aACZ,IAAI,CAAC,gBAAgB,CAAC;aACtB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;aACb,IAAI,CAAC,WAAW,CAAC;aACjB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,SAAS;IACT,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;SAC5B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,WAAW,CAAC;SACjB,IAAI,CAAC,gDAAgD,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE;QAChF,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC;AACP,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAuB,EAAE,KAAiB;IACxE,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IAEvC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,mBAAmB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAErC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpE,IAAI,CAAC,GAAG,GAAG,CAAC;IAEZ,WAAW;IACX,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;SACrB,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,WAAW,CAAC;SACjB,IAAI,CACH,8DAA8D,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,IAAI;QAChH,qBAAqB,KAAK,CAAC,YAAY,yBAAyB,KAAK,CAAC,aAAa,qCAAqC,EACxH,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAC5B,CAAC;IAEJ,CAAC,IAAI,EAAE,CAAC;IAER,sBAAsB;IACtB,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAErC,CAAC,IAAI,EAAE,CAAC;IAER,MAAM,eAAe,GAAG,KAAK,CAAC,aAAa,GAAG,CAAC;QAC7C,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,GAAG,CAAC;IAER,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;SACrB,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,WAAW,CAAC,CAAC;IAErB,MAAM,YAAY,GAAG;QACnB,GAAG,KAAK,CAAC,cAAc,0CAA0C,eAAe,kBAAkB;QAClG,GAAG,KAAK,CAAC,iBAAiB,kDAAkD;QAC5E,gFAAgF;QAChF,4DAA4D;KAC7D,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC,IAAI,EAAE,CAAC;IACV,CAAC;IAED,CAAC,IAAI,EAAE,CAAC;IAER,kBAAkB;IAClB,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAElC,CAAC,IAAI,EAAE,CAAC;IAER,oBAAoB;IACpB,MAAM,cAAc,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QAC3D,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAA4B,CAAC,CAAC;IAEjC,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,cAAc,GAA2B;QAC7C,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,QAAQ;QAChB,GAAG,EAAE,KAAK;QACV,IAAI,EAAE,eAAe;KACtB,CAAC;IAEF,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEnC,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,QAA+B,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC;iBACvE,IAAI,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,KAAK,wBAAwB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9E,CAAC,IAAI,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IAED,CAAC,IAAI,EAAE,CAAC;IAER,wBAAwB;IACxB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE/C,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;SACrB,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,uBAAuB,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAE7C,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;SAClB,IAAI,CACH,kGAAkG;QAClG,2GAA2G,EAC3G,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,EAAE,CACtC,CAAC;AACN,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAuB,EAAE,QAAyB;IAC/E,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IAEvC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAE1C,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;SAC5B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,WAAW,CAAC;SACjB,IAAI,CACH,uFAAuF,EACvF,EAAE,EAAE,EAAE,CACP,CAAC;IAEJ,IAAI,CAAC,GAAG,GAAG,CAAC;IAEZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAEvB,8BAA8B;QAC9B,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC9B,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,CAAC,GAAG,EAAE,CAAC;QACT,CAAC;QAED,kBAAkB;QAClB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;aACrB,QAAQ,CAAC,EAAE,CAAC;aACZ,IAAI,CAAC,gBAAgB,CAAC;aACtB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAE5D,CAAC,IAAI,EAAE,CAAC;QAER,UAAU;QACV,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG;YACd,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC;YACtB,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC1C,CAAC,YAAY,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC;YACvD,CAAC,kBAAkB,EAAE,EAAE,CAAC,cAAc,CAAC;YACvC,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC;SAC1B,CAAC;QAEF,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;YACxC,CAAC,IAAI,EAAE,CAAC;QACV,CAAC;QAED,CAAC,IAAI,CAAC,CAAC;QAEP,cAAc;QACd,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;aAC3B,QAAQ,CAAC,CAAC,CAAC;aACX,IAAI,CAAC,gBAAgB,CAAC;aACtB,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAE1B,CAAC,IAAI,EAAE,CAAC;QAER,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;aACrB,QAAQ,CAAC,CAAC,CAAC;aACX,IAAI,CAAC,SAAS,CAAC;aACf,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,EAAE,CAAC,CAAC;QAE/E,CAAC,IAAI,EAAE,CAAC;QAER,aAAa;QACb,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;aACtB,QAAQ,CAAC,CAAC,CAAC;aACX,IAAI,CAAC,gBAAgB,CAAC;aACtB,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAEzB,CAAC,IAAI,EAAE,CAAC;QAER,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;aACrB,QAAQ,CAAC,CAAC,CAAC;aACX,IAAI,CAAC,SAAS,CAAC;aACf,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,EAAE,CAAC,CAAC;QAE9E,CAAC,IAAI,EAAE,CAAC;QAER,SAAS;QACT,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;aAC5B,QAAQ,CAAC,CAAC,CAAC;aACX,IAAI,CAAC,SAAS,CAAC;aACf,IAAI,CAAC,kBAAkB,EAAE,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAEtD,CAAC,IAAI,EAAE,CAAC;QAER,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAEtD,CAAC,IAAI,EAAE,CAAC;QAER,YAAY;QACZ,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC,IAAI,EAAE,CAAC;IACV,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAuB,EAAE,OAA2B;IACrF,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IAEvC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAE1C,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;SAC5B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,WAAW,CAAC;SACjB,IAAI,CACH,oGAAoG,EACpG,EAAE,EAAE,EAAE,CACP,CAAC;IAEJ,IAAI,CAAC,GAAG,GAAG,CAAC;IAEZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE1B,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC9B,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,CAAC,GAAG,EAAE,CAAC;QACT,CAAC;QAED,uBAAuB;QACvB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAA+B,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC;QAEjG,gBAAgB;QAChB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;aACrB,QAAQ,CAAC,EAAE,CAAC;aACZ,IAAI,CAAC,gBAAgB,CAAC;aACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE;YAC/F,KAAK,EAAE,SAAS,GAAG,EAAE;SACtB,CAAC,CAAC;QAEL,CAAC,IAAI,EAAE,CAAC;QAER,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEvD,aAAa;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;aAC3B,QAAQ,CAAC,CAAC,CAAC;aACX,IAAI,CAAC,gBAAgB,CAAC;aACtB,IAAI,CAAC,WAAW,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAE9D,CAAC,IAAI,EAAE,CAAC;QAER,UAAU;QACV,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE3C,MAAM,OAAO,GAAG;YACd,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvF,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;YACtC,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;YACtD,CAAC,qBAAqB,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,kBAAkB,EAAE,CAAC;YAChF,CAAC,cAAc,EAAE,MAAM,CAAC,UAAU,IAAI,8BAA8B,CAAC;SACtE,CAAC;QAEF,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;YACxC,CAAC,IAAI,EAAE,CAAC;QACV,CAAC;QAED,CAAC,IAAI,CAAC,CAAC;QAEP,cAAc;QACd,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;aAC5B,QAAQ,CAAC,CAAC,CAAC;aACX,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,EAAE,CAAC,CAAC;QAEtE,CAAC,IAAI,EAAE,CAAC;QAER,iBAAiB;QACjB,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;aACrB,IAAI,CAAC,gBAAgB,CAAC;aACtB,IAAI,CAAC,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAElC,CAAC,IAAI,EAAE,CAAC;QAER,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;aAClB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,EAAE,CAAC,CAAC;QAEzE,CAAC,IAAI,EAAE,CAAC;QAER,YAAY;QACZ,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC,IAAI,EAAE,CAAC;IACV,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAuB,EAAE,KAAiB;IACxE,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IAEvC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAEvC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpE,IAAI,CAAC,GAAG,GAAG,CAAC;IAEZ,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;SACrB,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,WAAW,CAAC;SACjB,IAAI,CACH,8EAA8E;QAC9E,mFAAmF,EACnF,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAC5B,CAAC;IAEJ,CAAC,IAAI,EAAE,CAAC;IAER,WAAW;IACX,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEtD,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,mCAAmC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAEzD,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;SACrB,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,SAAS,CAAC;SACf,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,uCAAuC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QAC7E,KAAK,EAAE,SAAS,GAAG,EAAE;KACtB,CAAC,CAAC;IAEL,CAAC,IAAI,GAAG,CAAC;IAET,4BAA4B;IAC5B,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAEhC,CAAC,IAAI,EAAE,CAAC;IAER,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;SACrB,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,WAAW,CAAC,CAAC;IAErB,MAAM,KAAK,GAAG;QACZ,qFAAqF;QACrF,2EAA2E;QAC3E,wDAAwD;QACxD,4EAA4E;KAC7E,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC,IAAI,EAAE,CAAC;IACV,CAAC;IAED,CAAC,IAAI,EAAE,CAAC;IAER,uBAAuB;IACvB,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,sBAAsB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAEvC,CAAC,IAAI,EAAE,CAAC;IAER,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/C,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;SACrB,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,SAAS,CAAC;SACf,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,2BAA2B,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAErE,CAAC,IAAI,EAAE,CAAC;IAER,kBAAkB;IAClB,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,EAAE,CAAC;SACZ,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAE7B,CAAC,IAAI,EAAE,CAAC;IAER,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAExD,MAAM,UAAU,GAAG;QACjB,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE;QACzC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;QAC7B,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE;QACjC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;KAC9B,CAAC;IAEF,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAE1C,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE1F,GAAG,EAAE,CAAC;IACR,CAAC;IAED,SAAS;IACT,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;SAC5B,QAAQ,CAAC,CAAC,CAAC;SACX,IAAI,CAAC,WAAW,CAAC;SACjB,IAAI,CACH,uBAAuB,IAAI,IAAI,EAAE,CAAC,cAAc,EAAE,iBAAiB,KAAK,CAAC,EAAE,EAAE,EAC7E,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,EACxB,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CACtC,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,YAAoB,GAAG;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAiB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAEpC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/D,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5F,KAAK,CAAC,IAAI,CAAC,eAAe,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtG,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACvF,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,UAAU,IAAI,cAAc,EAAE,CAAC,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,UAAU,IAAI,KAAK,EAAE,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,WAAW,2BAA2B,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEtB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
@@ -0,0 +1,3 @@
1
+ import type { FixReport } from '../types.js';
2
+ export declare function generateFixReport(report: FixReport): string;
3
+ //# sourceMappingURL=fix-report.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"fix-report.d.ts","sourceRoot":"","sources":["../../src/reporters/fix-report.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAsB,MAAM,aAAa,CAAC;AAyCjE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CA8C3D"}
@@ -0,0 +1,70 @@
1
+ import chalk from 'chalk';
2
+ const FIX_TYPE_DESCRIPTIONS = {
3
+ 'sql-injection-template': 'SQL injection -> parameterized query',
4
+ 'sql-injection-concat': 'SQL injection -> parameterized query',
5
+ 'hardcoded-password': 'Hardcoded password -> process.env',
6
+ 'hardcoded-secret': 'Hardcoded secret -> process.env',
7
+ 'api-key-exposed': 'Exposed API key -> process.env',
8
+ 'phi-console-log': 'PHI in console.log -> commented out',
9
+ 'http-url': 'HTTP URL -> HTTPS',
10
+ 'innerhtml-unsanitized': 'innerHTML -> textContent',
11
+ 'phi-localstorage': 'PHI in localStorage -> encrypted storage',
12
+ 'phi-url-param': 'PHI in URL -> removed from URL',
13
+ 'phi-log-unredacted': 'Unredacted PHI in log -> redactPHI()',
14
+ 'cookie-insecure': 'Insecure cookie -> secure cookie options',
15
+ 'backup-unencrypted': 'Unencrypted backup -> encrypted backup',
16
+ };
17
+ function groupFixesByFile(fixes) {
18
+ const groups = new Map();
19
+ for (const fix of fixes) {
20
+ const filePath = fix.finding.file;
21
+ const existing = groups.get(filePath) ?? [];
22
+ existing.push(fix);
23
+ groups.set(filePath, existing);
24
+ }
25
+ return Array.from(groups.entries())
26
+ .map(([filePath, fixes]) => ({
27
+ filePath,
28
+ fixes: fixes.sort((a, b) => (a.finding.line ?? 0) - (b.finding.line ?? 0)),
29
+ }))
30
+ .sort((a, b) => a.filePath.localeCompare(b.filePath));
31
+ }
32
+ export function generateFixReport(report) {
33
+ const lines = [
34
+ '',
35
+ chalk.bold.cyan('=== vlayer Fix Report ==='),
36
+ '',
37
+ ];
38
+ // Summary line
39
+ if (report.fixedCount > 0) {
40
+ lines.push(chalk.green(`Fixed ${report.fixedCount} of ${report.totalFindings} issues`));
41
+ }
42
+ else {
43
+ lines.push(chalk.yellow(`No issues were auto-fixed (${report.totalFindings} total issues)`));
44
+ }
45
+ lines.push('');
46
+ // Group fixes by file
47
+ const appliedFixes = report.fixes.filter(f => f.fixed);
48
+ const skippedFixes = report.fixes.filter(f => !f.fixed);
49
+ if (appliedFixes.length > 0) {
50
+ lines.push(chalk.bold('Changes by file:'));
51
+ const fileGroups = groupFixesByFile(appliedFixes);
52
+ for (const group of fileGroups) {
53
+ lines.push(chalk.blue(` ${group.filePath}`));
54
+ for (const fix of group.fixes) {
55
+ const lineNum = fix.finding.line ?? '?';
56
+ const description = FIX_TYPE_DESCRIPTIONS[fix.fixType] || fix.fixType;
57
+ lines.push(chalk.gray(` Line ${lineNum}: ${description}`));
58
+ }
59
+ lines.push('');
60
+ }
61
+ }
62
+ // Skipped fixes requiring manual review
63
+ if (skippedFixes.length > 0 || report.skippedCount > report.fixes.filter(f => !f.fixed).length) {
64
+ lines.push(chalk.bold('Skipped (manual review needed):'));
65
+ lines.push(chalk.gray(` - ${report.skippedCount} issues require manual intervention`));
66
+ lines.push('');
67
+ }
68
+ return lines.join('\n');
69
+ }
70
+ //# sourceMappingURL=fix-report.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"fix-report.js","sourceRoot":"","sources":["../../src/reporters/fix-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,qBAAqB,GAA4B;IACrD,wBAAwB,EAAE,sCAAsC;IAChE,sBAAsB,EAAE,sCAAsC;IAC9D,oBAAoB,EAAE,mCAAmC;IACzD,kBAAkB,EAAE,iCAAiC;IACrD,iBAAiB,EAAE,gCAAgC;IACnD,iBAAiB,EAAE,qCAAqC;IACxD,UAAU,EAAE,mBAAmB;IAC/B,uBAAuB,EAAE,0BAA0B;IACnD,kBAAkB,EAAE,0CAA0C;IAC9D,eAAe,EAAE,gCAAgC;IACjD,oBAAoB,EAAE,sCAAsC;IAC5D,iBAAiB,EAAE,0CAA0C;IAC7D,oBAAoB,EAAE,wCAAwC;CAC/D,CAAC;AAOF,SAAS,gBAAgB,CAAC,KAAkB;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE9C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3B,QAAQ;QACR,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;KAC3E,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,MAAM,KAAK,GAAa;QACtB,EAAE;QACF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC;QAC5C,EAAE;KACH,CAAC;IAEF,eAAe;IACf,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,UAAU,OAAO,MAAM,CAAC,aAAa,SAAS,CAAC,CAC5E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,MAAM,CAAC,8BAA8B,MAAM,CAAC,aAAa,gBAAgB,CAAC,CACjF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,sBAAsB;IACtB,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAExD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAElD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC;gBACxC,MAAM,WAAW,GAAG,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC;gBACtE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/F,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,YAAY,qCAAqC,CAAC,CAAC,CAAC;QACxF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
@@ -0,0 +1,3 @@
1
+ import type { ScanResult, ReportOptions } from '../types.js';
2
+ export declare function generateReport(result: ScanResult, targetPath: string, options: ReportOptions): Promise<void>;
3
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/reporters/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAU,aAAa,EAAmC,MAAM,aAAa,CAAC;AA4atG,wBAAsB,cAAc,CAClC,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CA6Bf"}