vibe-guard 1.1.4 → 1.2.0

package/dist/rules/ai-agent-access-control.js

@@ -6,25 +6,109 @@ class AiAgentAccessControlRule extends types_1.BaseRule {
     constructor() {
         super(...arguments);
         this.name = 'ai-agent-access-control';
-        this.description = 'Detects insecure AI agent access controls and privilege escalation';
+        this.description = 'Detects insecure AI agent access controls and privilege escalation with context-aware analysis';
         this.severity = 'critical';
         this.accessControlPatterns = [
-            // AI Agent with elevated privileges
-            { pattern: /(?:ai[_-]?agent|agent|bot|assistant)\s*[:=]\s*['"`]?(?:admin|root|superuser|sudo)/gi, type: 'Elevated AI Agent Privileges' },
-            { pattern: /(?:permissions?|roles?|access)\s*[:=]\s*['"`]?(?:all|full|unlimited|wildcard)/gi, type: 'Unlimited AI Agent Permissions' },
-            // Missing RBAC for AI agents
-            { pattern: /(?:ai[_-]?agent|agent|bot|assistant)\s*[:=]\s*['"`]?[^'"`]*\b(?:without|no|missing)\s+(?:role|permission|access[_-]?control)/gi, type: 'Missing AI Agent RBAC' },
+            // AI Agent with elevated privileges: Tighter patterns!
+            // Critical severity
+            {
+                pattern: /(?:ai[_-]?agent|agent|bot|assistant)\s*[:=]\s*['"`]?(?:admin|root|superuser|sudo)['"`]?/gi,
+                type: 'Elevated AI Agent Privileges',
+                confidence: 0.95,
+                severity: 'critical',
+                validation: (text) => this.validateElevatedPrivileges(text)
+            },
+            // Critical severity
+            {
+                pattern: /(?:permissions?|roles?|access)\s*[:=]\s*['"`]?(?:all|full|unlimited|wildcard)['"`]?/gi,
+                type: 'Unlimited AI Agent Permissions',
+                confidence: 0.9,
+                severity: 'critical',
+                validation: (text) => this.validateUnlimitedPermissions(text)
+            },
+            // High severity
+            // Authentication bypass patterns
+            {
+                pattern: /(?:auth|authentication)\s*[:=]\s*['"`]?(?:false|no|0|disabled|off)['"`]?/gi,
+                type: 'Disabled AI Agent Authentication',
+                confidence: 0.95,
+                severity: 'critical',
+                validation: (text) => this.validateDisabledAuth(text)
+            },
+            // High severity
+            // Missing RBAC for AI agents: More specific
+            {
+                pattern: /(?:ai[_-]?agent|agent|bot|assistant)\s*[:=]\s*['"`]?[^'"`]*\b(?:without|no|missing)\s+(?:role|permission|access[_-]?control)['"`]?/gi,
+                type: 'Missing AI Agent RBAC',
+                confidence: 0.85,
+                severity: 'high',
+                validation: (text) => this.validateMissingRBAC(text)
+            },
+            // Critical severity
             // AI Agent with persistent elevated access
-            { pattern: /(?:ai[_-]?agent|agent|bot|assistant).*?(?:permanent|persistent|always|forever).*?(?:admin|root|elevated)/gi, type: 'Persistent Elevated AI Access' },
+            {
+                pattern: /(?:ai[_-]?agent|agent|bot|assistant).*?(?:permanent|persistent|always|forever).*?(?:admin|root|elevated)/gi,
+                type: 'Persistent Elevated AI Access',
+                confidence: 0.9,
+                severity: 'critical',
+                validation: (text) => this.validatePersistentAccess(text)
+            },
+            // High severity
             // AI Agent bypassing authentication
-            { pattern: /(?:ai[_-]?agent|agent|bot|assistant).*?(?:bypass|skip|ignore).*?(?:auth|authentication|login)/gi, type: 'AI Agent Auth Bypass' },
+            {
+                pattern: /(?:ai[_-]?agent|agent|bot|assistant).*?(?:bypass|skip|ignore).*?(?:auth|authentication|login)/gi,
+                type: 'AI Agent Auth Bypass',
+                confidence: 0.95,
+                severity: 'critical',
+                validation: (text) => this.validateAuthBypass(text)
+            },
+            // High severity
             // AI Agent with system-level access
-            { pattern: /(?:ai[_-]?agent|agent|bot|assistant).*?(?:system|os|kernel|hardware)/gi, type: 'AI Agent System Access' },
-            // MCP Server insecure access
-            { pattern: /(?:mcp|model[_-]?context[_-]?protocol).*?(?:unrestricted|open|public)/gi, type: 'Insecure MCP Server Access' },
-            { pattern: /(?:mcp[_-]?server|model[_-]?context[_-]?protocol).*?(?:no[_-]?auth|without[_-]?auth)/gi, type: 'MCP Server Without Auth' }
+            {
+                pattern: /(?:ai[_-]?agent|agent|bot|assistant).*?(?:system|os|kernel|hardware)/gi,
+                type: 'AI Agent System Access',
+                confidence: 0.8,
+                severity: 'high',
+                validation: (text) => this.validateSystemAccess(text)
+            },
+            // High severity
+            // MCP Server insecure access: Tighter patterns!
+            {
+                pattern: /(?:mcp|model[_-]?context[_-]?protocol).*?(?:unrestricted|open|public)/gi,
+                type: 'Insecure MCP Server Access',
+                confidence: 0.85,
+                severity: 'high',
+                validation: (text) => this.validateInsecureMCP(text)
+            },
+            // High severity
+            {
+                pattern: /(?:mcp[_-]?server|model[_-]?context[_-]?protocol).*?(?:no[_-]?auth|without[_-]?auth)/gi,
+                type: 'MCP Server Without Auth',
+                confidence: 0.9,
+                severity: 'high',
+                validation: (text) => this.validateMCPNoAuth(text)
+            },
+            // Medium severity
+            // AI Agent with file system access
+            {
+                pattern: /(?:ai[_-]?agent|agent|bot|assistant).*?(?:file|directory|path|fs)/gi,
+                type: 'AI Agent File System Access',
+                confidence: 0.75,
+                severity: 'medium',
+                validation: (text) => this.validateFileSystemAccess(text)
+            },
+            // Medium severity
+            // AI Agent with network access
+            {
+                pattern: /(?:ai[_-]?agent|agent|bot|assistant).*?(?:network|http|https|api|endpoint)/gi,
+                type: 'AI Agent Network Access',
+                confidence: 0.7,
+                severity: 'medium',
+                validation: (text) => this.validateNetworkAccess(text)
+            }
         ];
         this.falsePositivePatterns = [
+            // Development and testing patterns:
             /example/i,
             /demo/i,
             /test/i,
@@ -41,24 +125,314 @@ class AiAgentAccessControlRule extends types_1.BaseRule {
             /development/i,
             /dev/i,
             /staging/i,
-            /localhost/i
+            /localhost/i,
+            // Sandbox and safe environments:
+            /sandbox/i,
+            /isolated/i,
+            /contained/i,
+            /restricted/i,
+            /safe[_-]?mode/i,
+            /demo[_-]?mode/i,
+            /test[_-]?environment/i,
+            // Documentation and examples:
+            /documentation/i,
+            /docs?/i,
+            /readme/i,
+            /example[_-]?config/i,
+            /sample[_-]?config/i,
+            // Security related patterns (likely safe):
+            /secure/i,
+            /protected/i,
+            /guarded/i,
+            /monitored/i,
+            /audited/i,
+            /logged/i,
+            /restricted/i
         ];
     }
     check(fileContent) {
         const issues = [];
-        for (const { pattern, type } of this.accessControlPatterns) {
+        const language = this.detectLanguage(fileContent.path);
+        const framework = this.detectFramework(fileContent.content, language);
+        const hasAuthChecks = this.hasAuthChecks(fileContent.content);
+        const isProtectedEnvironment = this.isProtectedEnvironment(fileContent.content);
+        for (const { pattern, type, confidence, severity, validation } of this.accessControlPatterns) {
             const matches = this.findMatches(fileContent.content, pattern);
-            for (const { line, column, lineContent } of matches) {
-                if (this.isFalsePositive(lineContent)) {
+            for (const { match, line, column, lineContent } of matches) {
+                const matchedText = match[0];
+                const context = this.analyzeContext(fileContent, line, column, language, framework, hasAuthChecks, isProtectedEnvironment);
+                // Skips if in safe context
+                if (this.isSafeContext(context)) {
+                    continue;
+                }
+                // Validates the access control issue
+                if (!validation(matchedText)) {
                     continue;
                 }
-                issues.push(this.createIssue(fileContent.path, line, column, lineContent, `Critical: ${type} detected`, `Implement proper RBAC for AI agents. Use least privilege principle and temporary elevated access only when necessary. Consider using AI agent isolation and sandboxing.`, 'critical'));
+                // Calculates final confidence based on context
+                const finalConfidence = this.calculateConfidence(confidence, context);
+                if (finalConfidence >= 0.5) {
+                    issues.push(this.createIssue(fileContent.path, line, column, lineContent, `${severity.toUpperCase()}: ${type} detected (confidence: ${Math.round(finalConfidence * 100)}%): ${this.getLineContext(lineContent, column)}`, this.generateSuggestion(type, context), severity));
+                }
             }
         }
         return issues;
     }
-    isFalsePositive(lineContent) {
-        return this.falsePositivePatterns.some(pattern => pattern.test(lineContent));
+    analyzeContext(fileContent, line, column, language, framework, hasAuthChecks, isProtectedEnvironment) {
+        const lines = fileContent.lines;
+        const currentLine = lines[line - 1] || '';
+        const surroundingLines = lines.slice(Math.max(0, line - 3), line + 2);
+        return {
+            isInComment: this.isInComment(currentLine, language),
+            isInString: this.isInString(currentLine, column),
+            isInTestFile: this.isInTestFile(fileContent.path),
+            isInDocumentation: this.isInDocumentation(fileContent.path),
+            isInDevelopment: this.isInDevelopment(surroundingLines),
+            isInSandbox: this.isInSandbox(surroundingLines),
+            surroundingCode: surroundingLines.join('\n'),
+            language,
+            framework,
+            hasAuthChecks: hasAuthChecks || false,
+            isProtectedEnvironment: isProtectedEnvironment || false
+        };
+    }
+    isSafeContext(context) {
+        if (context.isInComment)
+            return true;
+        if (context.isInTestFile)
+            return true;
+        if (context.isInDocumentation)
+            return true;
+        if (context.isInDevelopment)
+            return true;
+        if (context.isInSandbox)
+            return true;
+        if (this.falsePositivePatterns.some(pattern => pattern.test(context.surroundingCode))) {
+            return true;
+        }
+        if (context.hasAuthChecks)
+            return true;
+        if (context.isProtectedEnvironment)
+            return true;
+        return false;
+    }
+    detectLanguage(filePath) {
+        const ext = filePath.split('.').pop()?.toLowerCase();
+        const languageMap = {
+            'js': 'javascript',
+            'jsx': 'javascript',
+            'ts': 'typescript',
+            'tsx': 'typescript',
+            'py': 'python',
+            'php': 'php',
+            'rb': 'ruby',
+            'go': 'go',
+            'java': 'java',
+            'cs': 'csharp'
+        };
+        return languageMap[ext || ''] || 'unknown';
+    }
+    detectFramework(content, language) {
+        if (language === 'javascript' || language === 'typescript') {
+            if (content.includes('openai') || content.includes('OpenAI'))
+                return 'openai';
+            if (content.includes('anthropic') || content.includes('Anthropic'))
+                return 'anthropic';
+            if (content.includes('langchain') || content.includes('LangChain'))
+                return 'langchain';
+            if (content.includes('llama') || content.includes('Llama'))
+                return 'llama';
+        }
+        if (language === 'python') {
+            if (content.includes('openai') || content.includes('OpenAI'))
+                return 'openai';
+            if (content.includes('anthropic') || content.includes('Anthropic'))
+                return 'anthropic';
+            if (content.includes('langchain') || content.includes('LangChain'))
+                return 'langchain';
+            if (content.includes('transformers') || content.includes('Transformers'))
+                return 'transformers';
+        }
+        return undefined;
+    }
+    isInComment(line, language) {
+        const trimmed = line.trim();
+        if (language === 'javascript' || language === 'typescript') {
+            return trimmed.startsWith('//') || trimmed.startsWith('/*') || trimmed.startsWith('*');
+        }
+        if (language === 'python') {
+            return trimmed.startsWith('#');
+        }
+        if (language === 'php') {
+            return trimmed.startsWith('//') || trimmed.startsWith('/*') || trimmed.startsWith('#');
+        }
+        return false;
+    }
+    isInString(line, column) {
+        const before = line.substring(0, column);
+        const quotes = (before.match(/['"`]/g) || []).length;
+        return quotes % 2 === 1;
+    }
+    isInTestFile(filePath) {
+        return filePath.includes('test') || filePath.includes('spec') || filePath.includes('mock');
+    }
+    isInDocumentation(filePath) {
+        const docPatterns = [
+            /docs?\//i,
+            /documentation/i,
+            /examples?/i,
+            /samples?/i,
+            /tutorials?/i,
+            /guides?/i,
+            /readme/i,
+            /\.md$/i,
+            /\.rst$/i,
+            /\.txt$/i
+        ];
+        return docPatterns.some(pattern => pattern.test(filePath));
+    }
+    isInDevelopment(lines) {
+        return lines.some(line => line.includes('development') ||
+            line.includes('dev') ||
+            line.includes('staging') ||
+            line.includes('localhost') ||
+            line.includes('127.0.0.1') ||
+            line.includes('NODE_ENV') ||
+            line.includes('DEBUG'));
+    }
+    isInSandbox(lines) {
+        return lines.some(line => line.includes('sandbox') ||
+            line.includes('isolated') ||
+            line.includes('contained') ||
+            line.includes('restricted') ||
+            line.includes('safe[_-]?mode') ||
+            line.includes('demo[_-]?mode'));
+    }
+    hasAuthChecks(content) {
+        const authPatterns = [
+            /auth/i,
+            /authentication/i,
+            /authorization/i,
+            /permission/i,
+            /role/i,
+            /access[_-]?control/i,
+            /rbac/i,
+            /middleware/i,
+            /guard/i,
+            /protect/i,
+            /secure/i
+        ];
+        return authPatterns.some(pattern => pattern.test(content));
+    }
+    isProtectedEnvironment(content) {
+        const protectedPatterns = [
+            /sandbox/i,
+            /isolated/i,
+            /contained/i,
+            /restricted/i,
+            /monitored/i,
+            /audited/i,
+            /logged/i,
+            /safe/i,
+            /protected/i
+        ];
+        return protectedPatterns.some(pattern => pattern.test(content));
+    }
+    calculateConfidence(baseConfidence, context) {
+        let confidence = baseConfidence;
+        // Adjusts confidence based on context
+        if (context.hasAuthChecks)
+            confidence *= 0.6; // Reduces if auth checks present
+        if (context.isProtectedEnvironment)
+            confidence *= 0.7; // Reduces if in protected environment
+        if (context.framework)
+            confidence *= 1.1; // Increases for known frameworks
+        return Math.min(confidence, 1.0);
+    }
+    // Validation methods for different access control issues!
+    validateElevatedPrivileges(text) {
+        const privilegeKeywords = ['admin', 'root', 'superuser', 'sudo'];
+        return privilegeKeywords.some(keyword => text.toLowerCase().includes(keyword));
+    }
+    validateUnlimitedPermissions(text) {
+        const unlimitedKeywords = ['all', 'full', 'unlimited', 'wildcard'];
+        return unlimitedKeywords.some(keyword => text.toLowerCase().includes(keyword));
+    }
+    validateDisabledAuth(text) {
+        const disabledKeywords = ['false', 'no', '0', 'disabled', 'off'];
+        return disabledKeywords.some(keyword => text.toLowerCase().includes(keyword));
+    }
+    validateMissingRBAC(text) {
+        const missingKeywords = ['without', 'no', 'missing'];
+        const rbacKeywords = ['role', 'permission', 'access[_-]?control'];
+        return missingKeywords.some(missing => text.toLowerCase().includes(missing)) &&
+            rbacKeywords.some(rbac => text.toLowerCase().includes(rbac));
+    }
+    validatePersistentAccess(text) {
+        const persistentKeywords = ['permanent', 'persistent', 'always', 'forever'];
+        const elevatedKeywords = ['admin', 'root', 'elevated'];
+        return persistentKeywords.some(persistent => text.toLowerCase().includes(persistent)) &&
+            elevatedKeywords.some(elevated => text.toLowerCase().includes(elevated));
+    }
+    validateAuthBypass(text) {
+        const bypassKeywords = ['bypass', 'skip', 'ignore'];
+        const authKeywords = ['auth', 'authentication', 'login'];
+        return bypassKeywords.some(bypass => text.toLowerCase().includes(bypass)) &&
+            authKeywords.some(auth => text.toLowerCase().includes(auth));
+    }
+    validateSystemAccess(text) {
+        const systemKeywords = ['system', 'os', 'kernel', 'hardware'];
+        return systemKeywords.some(keyword => text.toLowerCase().includes(keyword));
+    }
+    validateInsecureMCP(text) {
+        const insecureKeywords = ['unrestricted', 'open', 'public'];
+        return insecureKeywords.some(keyword => text.toLowerCase().includes(keyword));
+    }
+    validateMCPNoAuth(text) {
+        const noAuthKeywords = ['no[_-]?auth', 'without[_-]?auth'];
+        return noAuthKeywords.some(keyword => text.toLowerCase().includes(keyword));
+    }
+    validateFileSystemAccess(text) {
+        const fsKeywords = ['file', 'directory', 'path', 'fs'];
+        return fsKeywords.some(keyword => text.toLowerCase().includes(keyword));
+    }
+    validateNetworkAccess(text) {
+        const networkKeywords = ['network', 'http', 'https', 'api', 'endpoint'];
+        return networkKeywords.some(keyword => text.toLowerCase().includes(keyword));
+    }
+    getLineContext(lineContent, column) {
+        const start = Math.max(0, column - 20);
+        const end = Math.min(lineContent.length, column + 20);
+        return lineContent.substring(start, end).trim();
+    }
+    generateSuggestion(type, context) {
+        const suggestions = {
+            'Elevated AI Agent Privileges': 'Implement least privilege principle. Use role-based access control (RBAC) and temporary elevated access only when necessary.',
+            'Unlimited AI Agent Permissions': 'Define specific, limited permissions for AI agents. Use principle of least privilege and granular access controls.',
+            'Disabled AI Agent Authentication': 'Enable authentication for all AI agents. Use secure authentication mechanisms and never disable auth in production.',
+            'Missing AI Agent RBAC': 'Implement role-based access control for AI agents. Define specific roles and permissions based on agent capabilities.',
+            'Persistent Elevated AI Access': 'Use temporary elevated access with time limits. Implement just-in-time access and automatic privilege revocation.',
+            'AI Agent Auth Bypass': 'Remove any authentication bypass mechanisms. Implement proper authentication and authorization for all AI agent interactions.',
+            'AI Agent System Access': 'Restrict AI agent access to system resources. Use sandboxing and isolation techniques to limit system access.',
+            'Insecure MCP Server Access': 'Secure MCP server access with authentication and authorization. Use network isolation and access controls.',
+            'MCP Server Without Auth': 'Implement authentication for MCP servers. Use secure authentication mechanisms and access controls.',
+            'AI Agent File System Access': 'Limit AI agent file system access to specific directories. Use read-only access where possible and implement access controls.',
+            'AI Agent Network Access': 'Restrict AI agent network access to specific endpoints. Use network segmentation and access controls.'
+        };
+        let suggestion = suggestions[type] || 'Implement proper access controls for AI agents. Use least privilege principle and secure authentication.';
+        if (context.framework) {
+            suggestion += ` For ${context.framework}, consider using framework-specific security features and access control patterns.`;
+            if (context.framework === 'openai') {
+                suggestion += ' Use OpenAI API key restrictions and content filtering.';
+            }
+            else if (context.framework === 'anthropic') {
+                suggestion += ' Use Anthropic safety features and content filtering.';
+            }
+            else if (context.framework === 'langchain') {
+                suggestion += ' Use LangChain security features and agent isolation.';
+            }
+        }
+        return suggestion;
     }
 }
 exports.AiAgentAccessControlRule = AiAgentAccessControlRule;

package/dist/rules/ai-agent-access-control.js.map

@@ -1 +1 @@
-{"version":3,"file":"ai-agent-access-control.js","sourceRoot":"","sources":["../../src/rules/ai-agent-access-control.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAEhE,MAAa,wBAAyB,SAAQ,gBAAQ;IAAtD;;QACW,SAAI,GAAG,yBAAyB,CAAC;QACjC,gBAAW,GAAG,oEAAoE,CAAC;QACnF,aAAQ,GAAG,UAAmB,CAAC;QAEvB,0BAAqB,GAAG;YACvC,oCAAoC;YACpC,EAAE,OAAO,EAAE,qFAAqF,EAAE,IAAI,EAAE,8BAA8B,EAAE;YACxI,EAAE,OAAO,EAAE,iFAAiF,EAAE,IAAI,EAAE,gCAAgC,EAAE;YAEtI,6BAA6B;YAC7B,EAAE,OAAO,EAAE,gIAAgI,EAAE,IAAI,EAAE,uBAAuB,EAAE;YAE5K,2CAA2C;YAC3C,EAAE,OAAO,EAAE,4GAA4G,EAAE,IAAI,EAAE,+BAA+B,EAAE;YAEhK,oCAAoC;YACpC,EAAE,OAAO,EAAE,iGAAiG,EAAE,IAAI,EAAE,sBAAsB,EAAE;YAE5I,oCAAoC;YACpC,EAAE,OAAO,EAAE,wEAAwE,EAAE,IAAI,EAAE,wBAAwB,EAAE;YAErH,6BAA6B;YAC7B,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,4BAA4B,EAAE;YAC1H,EAAE,OAAO,EAAE,wFAAwF,EAAE,IAAI,EAAE,yBAAyB,EAAE;SACvI,CAAC;QAEe,0BAAqB,GAAG;YACvC,UAAU;YACV,OAAO;YACP,OAAO;YACP,OAAO;YACP,SAAS;YACT,cAAc;YACd,UAAU;YACV,OAAO;YACP,QAAQ;YACR,SAAS;YACT,MAAM;YACN,aAAa;YACb,YAAY;YACZ,cAAc;YACd,MAAM;YACN,UAAU;YACV,YAAY;SACb,CAAC;IA+BJ,CAAC;IA7BC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBACpD,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;oBACtC,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,aAAa,IAAI,WAAW,EAC5B,yKAAyK,EACzK,UAAU,CACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,eAAe,CAAC,WAAmB;QACzC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/E,CAAC;CACF;AA5ED,4DA4EC"}
+{"version":3,"file":"ai-agent-access-control.js","sourceRoot":"","sources":["../../src/rules/ai-agent-access-control.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAgBhE,MAAa,wBAAyB,SAAQ,gBAAQ;IAAtD;;QACW,SAAI,GAAG,yBAAyB,CAAC;QACjC,gBAAW,GAAG,gGAAgG,CAAC;QAC/G,aAAQ,GAAG,UAAmB,CAAC;QAEvB,0BAAqB,GAAG;YACvC,uDAAuD;YACvD,oBAAoB;YACpB;gBACE,OAAO,EAAE,2FAA2F;gBACpG,IAAI,EAAE,8BAA8B;gBACpC,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,UAAmB;gBAC7B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC;aACpE;YACD,oBAAoB;YACpB;gBACE,OAAO,EAAE,uFAAuF;gBAChG,IAAI,EAAE,gCAAgC;gBACtC,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE,UAAmB;gBAC7B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC;aACtE;YACD,gBAAgB;YAChB,iCAAiC;YACjC;gBACE,OAAO,EAAE,4EAA4E;gBACrF,IAAI,EAAE,kCAAkC;gBACxC,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,UAAmB;gBAC7B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;aAC9D;YACD,gBAAgB;YAChB,4CAA4C;YAC5C;gBACE,OAAO,EAAE,sIAAsI;gBAC/I,IAAI,EAAE,uBAAuB;gBAC7B,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,MAAe;gBACzB,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;aAC7D;YACD,oBAAoB;YACpB,2CAA2C;YAC3C;gBACE,OAAO,EAAE,4GAA4G;gBACrH,IAAI,EAAE,+BAA+B;gBACrC,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE,UAAmB;gBAC7B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC;aAClE;YACD,gBAAgB;YAChB,oCAAoC;YACpC;gBACE,OAAO,EAAE,iGAAiG;gBAC1G,IAAI,EAAE,sBAAsB;gBAC5B,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,UAAmB;gBAC7B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;aAC5D;YACD,gBAAgB;YAChB,oCAAoC;YACpC;gBACE,OAAO,EAAE,wEAAwE;gBACjF,IAAI,EAAE,wBAAwB;gBAC9B,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE,MAAe;gBACzB,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;aAC9D;YACD,gBAAgB;YAChB,gDAAgD;YAChD;gBACE,OAAO,EAAE,yEAAyE;gBAClF,IAAI,EAAE,4BAA4B;gBAClC,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,MAAe;gBACzB,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;aAC7D;YACD,gBAAgB;YAChB;gBACE,OAAO,EAAE,wFAAwF;gBACjG,IAAI,EAAE,yBAAyB;gBAC/B,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE,MAAe;gBACzB,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;aAC3D;YACD,kBAAkB;YAClB,mCAAmC;YACnC;gBACE,OAAO,EAAE,qEAAqE;gBAC9E,IAAI,EAAE,6BAA6B;gBACnC,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,QAAiB;gBAC3B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC;aAClE;YACD,kBAAkB;YAClB,+BAA+B;YAC/B;gBACE,OAAO,EAAE,8EAA8E;gBACvF,IAAI,EAAE,yBAAyB;gBAC/B,UAAU,EAAE,GAAG;gBACf,QAAQ,EAAE,QAAiB;gBAC3B,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;aAC/D;SACF,CAAC;QAEe,0BAAqB,GAAG;YACvC,oCAAoC;YACpC,UAAU;YACV,OAAO;YACP,OAAO;YACP,OAAO;YACP,SAAS;YACT,cAAc;YACd,UAAU;YACV,OAAO;YACP,QAAQ;YACR,SAAS;YACT,MAAM;YACN,aAAa;YACb,YAAY;YACZ,cAAc;YACd,MAAM;YACN,UAAU;YACV,YAAY;YAEZ,iCAAiC;YACjC,UAAU;YACV,WAAW;YACX,YAAY;YACZ,aAAa;YACb,gBAAgB;YAChB,gBAAgB;YAChB,uBAAuB;YAEvB,8BAA8B;YAC9B,gBAAgB;YAChB,QAAQ;YACR,SAAS;YACT,qBAAqB;YACrB,oBAAoB;YAEpB,2CAA2C;YAC3C,SAAS;YACT,YAAY;YACZ,UAAU;YACV,YAAY;YACZ,UAAU;YACV,SAAS;YACT,aAAa;SACd,CAAC;IA8UJ,CAAC;IA5UC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAEhF,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;gBAE3H,2BAA2B;gBAC3B,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;oBAChC,SAAS;gBACX,CAAC;gBAED,qCAAqC;gBACrC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC7B,SAAS;gBACX,CAAC;gBAED,+CAA+C;gBAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBAEtE,IAAI,eAAe,IAAI,GAAG,EAAE,CAAC;oBAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACT,GAAG,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,0BAA0B,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAC9I,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,EACtC,QAAQ,CACT,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,cAAc,CAAC,WAAwB,EAAE,IAAY,EAAE,MAAc,EAAE,QAAgB,EAAE,SAAkB,EAAE,aAAuB,EAAE,sBAAgC;QAC5K,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;QAChC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,gBAAgB,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QAEtE,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC;YACpD,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC;YAChD,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC;YACjD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC;YAC3D,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC;YACvD,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC;YAC/C,eAAe,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,QAAQ;YACR,SAAS;YACT,aAAa,EAAE,aAAa,IAAI,KAAK;YACrC,sBAAsB,EAAE,sBAAsB,IAAI,KAAK;SACxD,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,OAAuB;QAE3C,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAGrC,IAAI,OAAO,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAGtC,IAAI,OAAO,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAG3C,IAAI,OAAO,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAGzC,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAGrC,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACtF,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,IAAI,OAAO,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAGvC,IAAI,OAAO,CAAC,sBAAsB;YAAE,OAAO,IAAI,CAAC;QAEhD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,cAAc,CAAC,QAAgB;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC;QACrD,MAAM,WAAW,GAA2B;YAC1C,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,QAAQ;SACf,CAAC;QACF,OAAO,WAAW,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,SAAS,CAAC;IAC7C,CAAC;IAEO,eAAe,CAAC,OAAe,EAAE,QAAgB;QACvD,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC3D,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC9E,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO,WAAW,CAAC;YACvF,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO,WAAW,CAAC;YACvF,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO,OAAO,CAAC;QAC7E,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC9E,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO,WAAW,CAAC;YACvF,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO,WAAW,CAAC;YACvF,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAAE,OAAO,cAAc,CAAC;QAClG,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,WAAW,CAAC,IAAY,EAAE,QAAgB;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC3D,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,UAAU,CAAC,IAAY,EAAE,MAAc;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACrD,OAAO,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAEO,YAAY,CAAC,QAAgB;QACnC,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7F,CAAC;IAEO,iBAAiB,CAAC,QAAgB;QACxC,MAAM,WAAW,GAAG;YAClB,UAAU;YACV,gBAAgB;YAChB,YAAY;YACZ,WAAW;YACX,aAAa;YACb,UAAU;YACV,SAAS;YACT,QAAQ;YACR,SAAS;YACT,SAAS;SACV,CAAC;QACF,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;IAEO,eAAe,CAAC,KAAe;QACrC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvB,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CACvB,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,KAAe;QACjC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAC/B,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,OAAe;QACnC,MAAM,YAAY,GAAG;YACnB,OAAO;YACP,iBAAiB;YACjB,gBAAgB;YAChB,aAAa;YACb,OAAO;YACP,qBAAqB;YACrB,OAAO;YACP,aAAa;YACb,QAAQ;YACR,UAAU;YACV,SAAS;SACV,CAAC;QACF,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,CAAC;IAEO,sBAAsB,CAAC,OAAe;QAC5C,MAAM,iBAAiB,GAAG;YACxB,UAAU;YACV,WAAW;YACX,YAAY;YACZ,aAAa;YACb,YAAY;YACZ,UAAU;YACV,SAAS;YACT,OAAO;YACP,YAAY;SACb,CAAC;QACF,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,CAAC;IAEO,mBAAmB,CAAC,cAAsB,EAAE,OAAuB;QACzE,IAAI,UAAU,GAAG,cAAc,CAAC;QAEhC,sCAAsC;QACtC,IAAI,OAAO,CAAC,aAAa;YAAE,UAAU,IAAI,GAAG,CAAC,CAAC,iCAAiC;QAC/E,IAAI,OAAO,CAAC,sBAAsB;YAAE,UAAU,IAAI,GAAG,CAAC,CAAC,sCAAsC;QAC7F,IAAI,OAAO,CAAC,SAAS;YAAE,UAAU,IAAI,GAAG,CAAC,CAAC,iCAAiC;QAE3E,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,0DAA0D;IAClD,0BAA0B,CAAC,IAAY;QAC7C,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACjE,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACjF,CAAC;IAEO,4BAA4B,CAAC,IAAY;QAC/C,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QACnE,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACjF,CAAC;IAEO,oBAAoB,CAAC,IAAY;QACvC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,mBAAmB,CAAC,IAAY;QACtC,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC;QAClE,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAEO,wBAAwB,CAAC,IAAY;QAC3C,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5E,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACvD,OAAO,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC9E,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClF,CAAC;IAEO,kBAAkB,CAAC,IAAY;QACrC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAEO,oBAAoB,CAAC,IAAY;QACvC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC9D,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,mBAAmB,CAAC,IAAY;QACtC,MAAM,gBAAgB,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5D,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;QAC3D,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,wBAAwB,CAAC,IAAY;QAC3C,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACvD,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;IAEO,qBAAqB,CAAC,IAAY;QACxC,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACxE,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/E,CAAC;IAEO,cAAc,CAAC,WAAmB,EAAE,MAAc;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;QACtD,OAAO,WAAW,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,CAAC;IAEO,kBAAkB,CAAC,IAAY,EAAE,OAAuB;QAC9D,MAAM,WAAW,GAAG;YAClB,8BAA8B,EAAE,8HAA8H;YAC9J,gCAAgC,EAAE,oHAAoH;YACtJ,kCAAkC,EAAE,qHAAqH;YACzJ,uBAAuB,EAAE,uHAAuH;YAChJ,+BAA+B,EAAE,mHAAmH;YACpJ,sBAAsB,EAAE,+HAA+H;YACvJ,wBAAwB,EAAE,+GAA+G;YACzI,4BAA4B,EAAE,4GAA4G;YAC1I,yBAAyB,EAAE,qGAAqG;YAChI,6BAA6B,EAAE,+HAA+H;YAC9J,yBAAyB,EAAE,uGAAuG;SACnI,CAAC;QAEF,IAAI,UAAU,GAAG,WAAW,CAAC,IAAgC,CAAC,IAAI,0GAA0G,CAAC;QAE7K,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,UAAU,IAAI,QAAQ,OAAO,CAAC,SAAS,oFAAoF,CAAC;YAE5H,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACnC,UAAU,IAAI,yDAAyD,CAAC;YAC1E,CAAC;iBAAM,IAAI,OAAO,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;gBAC7C,UAAU,IAAI,uDAAuD,CAAC;YACxE,CAAC;iBAAM,IAAI,OAAO,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;gBAC7C,UAAU,IAAI,uDAAuD,CAAC;YACxE,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAneD,4DAmeC"}

package/dist/rules/ai-data-leakage-prevention.d.ts

@@ -1,11 +1,34 @@
 import { BaseRule, FileContent, SecurityIssue } from '../types';
 export declare class AiDataLeakagePreventionRule extends BaseRule {
     readonly name = "ai-data-leakage-prevention";
-    readonly description = "Detects potential data leakage in AI systems and training data exposure";
+    readonly description = "Detects potential data leakage in AI systems and training data exposure with context-aware analysis";
     readonly severity: "high";
     private readonly leakagePatterns;
     private readonly falsePositivePatterns;
     check(fileContent: FileContent): SecurityIssue[];
-    private isFalsePositive;
+    private analyzeContext;
+    private isSafeContext;
+    private detectLanguage;
+    private detectFramework;
+    private isInComment;
+    private isInString;
+    private isInTestFile;
+    private isInDocumentation;
+    private isInDevelopment;
+    private hasDataProtection;
+    private isProtectedEnvironment;
+    private calculateConfidence;
+    private validateTrainingDataExposure;
+    private validateSensitiveTrainingData;
+    private validateSensitiveOutput;
+    private validateUnfilteredOutput;
+    private validateClassificationBypass;
+    private validateSensitiveModel;
+    private validateUnencryptedArtifacts;
+    private validateSensitiveLogging;
+    private validateUnfilteredExport;
+    private validateUnsanitizedResponse;
+    private getLineContext;
+    private generateSuggestion;
 }
 //# sourceMappingURL=ai-data-leakage-prevention.d.ts.map

package/dist/rules/ai-data-leakage-prevention.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai-data-leakage-prevention.d.ts","sourceRoot":"","sources":["../../src/rules/ai-data-leakage-prevention.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,2BAA4B,SAAQ,QAAQ;IACvD,QAAQ,CAAC,IAAI,gCAAgC;IAC7C,QAAQ,CAAC,WAAW,6EAA6E;IACjG,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAmB9B;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAsBpC;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IA0BhD,OAAO,CAAC,eAAe;CAGxB"}
+{"version":3,"file":"ai-data-leakage-prevention.d.ts","sourceRoot":"","sources":["../../src/rules/ai-data-leakage-prevention.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAehE,qBAAa,2BAA4B,SAAQ,QAAQ;IACvD,QAAQ,CAAC,IAAI,gCAAgC;IAC7C,QAAQ,CAAC,WAAW,yGAAyG;IAC7H,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,eAAe,CA0F9B;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAoDpC;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IA4ChD,OAAO,CAAC,cAAc;IAmBtB,OAAO,CAAC,aAAa;IAqBrB,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,eAAe;IAkBvB,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,iBAAiB;IAmBzB,OAAO,CAAC,sBAAsB;IAe9B,OAAO,CAAC,mBAAmB;IAY3B,OAAO,CAAC,4BAA4B;IAOpC,OAAO,CAAC,6BAA6B;IAOrC,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,wBAAwB;IAShC,OAAO,CAAC,4BAA4B;IAOpC,OAAO,CAAC,sBAAsB;IAS9B,OAAO,CAAC,4BAA4B;IAOpC,OAAO,CAAC,wBAAwB;IAOhC,OAAO,CAAC,wBAAwB;IAShC,OAAO,CAAC,2BAA2B;IASnC,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,kBAAkB;CAgC3B"}