@aifabrix/miso-client 1.0.0

package/dist/services/redis.service.js

@@ -0,0 +1,112 @@
+"use strict";
+/**
+ * Redis service for caching and log queuing
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedisService = void 0;
+const ioredis_1 = __importDefault(require("ioredis"));
+class RedisService {
+    constructor(config) {
+        this.connected = false;
+        this.config = config;
+    }
+    async connect() {
+        if (!this.config) {
+            // eslint-disable-next-line no-console
+            console.log('Redis not configured, using controller fallback');
+            return;
+        }
+        try {
+            this.redis = new ioredis_1.default({
+                host: this.config.host,
+                port: this.config.port,
+                password: this.config.password,
+                db: this.config.db || 0,
+                keyPrefix: this.config.keyPrefix || 'miso:',
+                maxRetriesPerRequest: 3,
+                lazyConnect: true
+            });
+            await this.redis.connect();
+            this.connected = true;
+            // eslint-disable-next-line no-console
+            console.log('Connected to Redis');
+        }
+        catch (error) {
+            // eslint-disable-next-line no-console
+            console.error('Failed to connect to Redis:', error);
+            this.connected = false;
+            throw error;
+        }
+    }
+    async disconnect() {
+        if (this.redis) {
+            await this.redis.disconnect();
+            this.connected = false;
+            // eslint-disable-next-line no-console
+            console.log('Disconnected from Redis');
+        }
+    }
+    async get(key) {
+        if (!this.redis || !this.connected) {
+            return null;
+        }
+        try {
+            return await this.redis.get(key);
+        }
+        catch (error) {
+            // eslint-disable-next-line no-console
+            console.error('Redis get error:', error);
+            return null;
+        }
+    }
+    async set(key, value, ttl) {
+        if (!this.redis || !this.connected) {
+            return false;
+        }
+        try {
+            await this.redis.setex(key, ttl, value);
+            return true;
+        }
+        catch (error) {
+            // eslint-disable-next-line no-console
+            console.error('Redis set error:', error);
+            return false;
+        }
+    }
+    async delete(key) {
+        if (!this.redis || !this.connected) {
+            return false;
+        }
+        try {
+            await this.redis.del(key);
+            return true;
+        }
+        catch (error) {
+            // eslint-disable-next-line no-console
+            console.error('Redis delete error:', error);
+            return false;
+        }
+    }
+    async rpush(queue, value) {
+        if (!this.redis || !this.connected) {
+            return false;
+        }
+        try {
+            await this.redis.rpush(queue, value);
+            return true;
+        }
+        catch (error) {
+            // eslint-disable-next-line no-console
+            console.error('Redis rpush error:', error);
+            return false;
+        }
+    }
+    isConnected() {
+        return this.connected;
+    }
+}
+exports.RedisService = RedisService;
+//# sourceMappingURL=redis.service.js.map

package/dist/services/redis.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.service.js","sourceRoot":"","sources":["../../src/services/redis.service.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;AAEH,sDAA4B;AAG5B,MAAa,YAAY;IAKvB,YAAY,MAAoB;QAFxB,cAAS,GAAG,KAAK,CAAC;QAGxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,GAAG,IAAI,iBAAK,CAAC;gBACrB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;gBACvB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO;gBAC3C,oBAAoB,EAAE,CAAC;gBACvB,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,GAAW;QAC/C,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,KAAa;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AA9GD,oCA8GC"}

package/dist/services/role.service.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Role service for user authorization with Redis caching
+ */
+import { RedisService } from './redis.service';
+import { MisoClientConfig } from '../types/config.types';
+export declare class RoleService {
+    private httpClient;
+    private redis;
+    private config;
+    private roleTTL;
+    constructor(config: MisoClientConfig, redis: RedisService);
+    /**
+     * Get user roles with Redis caching
+     */
+    getRoles(token: string): Promise<string[]>;
+    /**
+     * Check if user has specific role
+     */
+    hasRole(token: string, role: string): Promise<boolean>;
+    /**
+     * Check if user has any of the specified roles
+     */
+    hasAnyRole(token: string, roles: string[]): Promise<boolean>;
+    /**
+     * Check if user has all of the specified roles
+     */
+    hasAllRoles(token: string, roles: string[]): Promise<boolean>;
+    /**
+     * Force refresh roles from controller (bypass cache)
+     */
+    refreshRoles(token: string): Promise<string[]>;
+}
+//# sourceMappingURL=role.service.d.ts.map

package/dist/services/role.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.service.d.ts","sourceRoot":"","sources":["../../src/services/role.service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAc,MAAM,uBAAuB,CAAC;AAErE,qBAAa,WAAW;IACtB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,OAAO,CAAS;gBAEZ,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY;IAOzD;;OAEG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAwDhD;;OAEG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5D;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAKlE;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAKnE;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAyCrD"}

package/dist/services/role.service.js

@@ -0,0 +1,106 @@
+"use strict";
+/**
+ * Role service for user authorization with Redis caching
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoleService = void 0;
+const http_client_1 = require("../utils/http-client");
+class RoleService {
+    constructor(config, redis) {
+        this.config = config;
+        this.redis = redis;
+        this.httpClient = new http_client_1.HttpClient(config);
+        this.roleTTL = config.cache?.roleTTL || 900; // 15 minutes default
+    }
+    /**
+     * Get user roles with Redis caching
+     */
+    async getRoles(token) {
+        try {
+            // First get user info to extract userId
+            const userInfo = await this.httpClient.authenticatedRequest('POST', '/auth/validate', token);
+            if (!userInfo.user?.id) {
+                return [];
+            }
+            const userId = userInfo.user.id;
+            const cacheKey = `roles:${userId}:${this.config.environment}:${this.config.applicationKey}`;
+            // Check Redis cache first
+            if (this.redis.isConnected()) {
+                const cachedRoles = await this.redis.get(cacheKey);
+                if (cachedRoles) {
+                    try {
+                        const parsed = JSON.parse(cachedRoles);
+                        return parsed.roles || [];
+                    }
+                    catch (error) {
+                        // eslint-disable-next-line no-console
+                        console.warn('Failed to parse cached roles:', error);
+                    }
+                }
+            }
+            // Cache miss - fetch from controller
+            const roleResult = await this.httpClient.authenticatedRequest('GET', '/auth/roles', token);
+            const roles = roleResult.roles || [];
+            // Cache the result in Redis
+            if (this.redis.isConnected()) {
+                await this.redis.set(cacheKey, JSON.stringify({ roles, timestamp: Date.now() }), this.roleTTL);
+            }
+            return roles;
+        }
+        catch (error) {
+            // eslint-disable-next-line no-console
+            console.error('Failed to get roles:', error);
+            return [];
+        }
+    }
+    /**
+     * Check if user has specific role
+     */
+    async hasRole(token, role) {
+        const roles = await this.getRoles(token);
+        return roles.includes(role);
+    }
+    /**
+     * Check if user has any of the specified roles
+     */
+    async hasAnyRole(token, roles) {
+        const userRoles = await this.getRoles(token);
+        return roles.some((role) => userRoles.includes(role));
+    }
+    /**
+     * Check if user has all of the specified roles
+     */
+    async hasAllRoles(token, roles) {
+        const userRoles = await this.getRoles(token);
+        return roles.every((role) => userRoles.includes(role));
+    }
+    /**
+     * Force refresh roles from controller (bypass cache)
+     */
+    async refreshRoles(token) {
+        try {
+            // Get user info to extract userId
+            const userInfo = await this.httpClient.authenticatedRequest('POST', '/auth/validate', token);
+            if (!userInfo.user?.id) {
+                return [];
+            }
+            const userId = userInfo.user.id;
+            const cacheKey = `roles:${userId}:${this.config.environment}:${this.config.applicationKey}`;
+            // Fetch fresh roles from controller
+            const roleResult = await this.httpClient.authenticatedRequest('GET', '/auth/roles', token);
+            const roles = roleResult.roles || [];
+            // Update cache with fresh data
+            if (this.redis.isConnected()) {
+                await this.redis.set(cacheKey, JSON.stringify({ roles, timestamp: Date.now() }), this.roleTTL);
+            }
+            return roles;
+        }
+        catch (error) {
+            // eslint-disable-next-line no-console
+            console.error('Failed to refresh roles:', error);
+            return [];
+        }
+    }
+}
+exports.RoleService = RoleService;
+//# sourceMappingURL=role.service.js.map

package/dist/services/role.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.service.js","sourceRoot":"","sources":["../../src/services/role.service.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,sDAAkD;AAIlD,MAAa,WAAW;IAMtB,YAAY,MAAwB,EAAE,KAAmB;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,IAAI,wBAAU,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,qBAAqB;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,IAAI,CAAC;YACH,wCAAwC;YACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CACzD,MAAM,EACN,gBAAgB,EAChB,KAAK,CACN,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;gBACvB,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,SAAS,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAE5F,0BAA0B;YAC1B,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC7B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACnD,IAAI,WAAW,EAAE,CAAC;oBAChB,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;wBACvC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,sCAAsC;wBACtC,OAAO,CAAC,IAAI,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,qCAAqC;YACrC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAC3D,KAAK,EACL,aAAa,EACb,KAAK,CACN,CAAC;YAEF,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;YAErC,4BAA4B;YAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAClB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,EAChD,IAAI,CAAC,OAAO,CACb,CAAC;YACJ,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,IAAY;QACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,KAAe;QAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,KAAe;QAC9C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CACzD,MAAM,EACN,gBAAgB,EAChB,KAAK,CACN,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;gBACvB,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,SAAS,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAE5F,oCAAoC;YACpC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAC3D,KAAK,EACL,aAAa,EACb,KAAK,CACN,CAAC;YAEF,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;YAErC,+BAA+B;YAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAClB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,EAChD,IAAI,CAAC,OAAO,CACb,CAAC;YACJ,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YACjD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AA5ID,kCA4IC"}

package/dist/types/config.types.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Configuration types for MisoClient
+ */
+export interface RedisConfig {
+    host: string;
+    port: number;
+    password?: string;
+    db?: number;
+    keyPrefix?: string;
+}
+export interface MisoClientConfig {
+    controllerUrl: string;
+    environment: 'dev' | 'tst' | 'pro';
+    applicationKey: string;
+    applicationId: string;
+    apiKey?: string;
+    redis?: RedisConfig;
+    logLevel?: 'debug' | 'info' | 'warn' | 'error';
+    cache?: {
+        roleTTL?: number;
+        permissionTTL?: number;
+    };
+}
+export interface UserInfo {
+    id: string;
+    username: string;
+    email?: string;
+    firstName?: string;
+    lastName?: string;
+    roles?: string[];
+}
+export interface AuthResult {
+    authenticated: boolean;
+    user?: UserInfo;
+    error?: string;
+}
+export interface LogEntry {
+    timestamp: string;
+    level: 'error' | 'audit' | 'info' | 'debug';
+    environment: string;
+    application: string;
+    applicationId: string;
+    userId?: string;
+    message: string;
+    context?: Record<string, unknown>;
+    ipAddress?: string;
+    userAgent?: string;
+    hostname?: string;
+    requestId?: string;
+    sessionId?: string;
+    correlationId?: string;
+    stackTrace?: string;
+}
+export interface RoleResult {
+    userId: string;
+    roles: string[];
+    environment: string;
+    application: string;
+}
+export interface PermissionResult {
+    userId: string;
+    permissions: string[];
+    environment: string;
+    application: string;
+}
+//# sourceMappingURL=config.types.d.ts.map

package/dist/types/config.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.types.d.ts","sourceRoot":"","sources":["../../src/types/config.types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC/C,KAAK,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAGlC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/types/config.types.js

@@ -0,0 +1,6 @@
+"use strict";
+/**
+ * Configuration types for MisoClient
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=config.types.js.map

package/dist/types/config.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.types.js","sourceRoot":"","sources":["../../src/types/config.types.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/dist/utils/data-masker.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Data masker utility for client-side sensitive data protection
+ * Implements ISO 27001 data protection controls
+ */
+export declare class DataMasker {
+    private static readonly MASKED_VALUE;
+    private static readonly sensitiveFields;
+    /**
+     * Check if a field name indicates sensitive data
+     */
+    static isSensitiveField(key: string): boolean;
+    /**
+     * Mask sensitive data in objects, arrays, or primitives
+     * Returns a masked copy without modifying the original
+     */
+    static maskSensitiveData(data: unknown): unknown;
+    /**
+     * Mask specific value (useful for masking individual strings)
+     */
+    static maskValue(value: string, showFirst?: number, showLast?: number): string;
+    /**
+     * Check if data contains sensitive information
+     */
+    static containsSensitiveData(data: unknown): boolean;
+}
+//# sourceMappingURL=data-masker.d.ts.map

package/dist/utils/data-masker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-masker.d.ts","sourceRoot":"","sources":["../../src/utils/data-masker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAkB;IAEtD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAsBpC;IAEH;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAkB7C;;;OAGG;IACH,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO;IAkChD;;OAEG;IACH,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,GAAE,MAAU,EAAE,QAAQ,GAAE,MAAU,GAAG,MAAM;IAYpF;;OAEG;IACH,MAAM,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO;CAsBrD"}

package/dist/utils/data-masker.js

@@ -0,0 +1,121 @@
+"use strict";
+/**
+ * Data masker utility for client-side sensitive data protection
+ * Implements ISO 27001 data protection controls
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DataMasker = void 0;
+class DataMasker {
+    /**
+     * Check if a field name indicates sensitive data
+     */
+    static isSensitiveField(key) {
+        const lowerKey = key.toLowerCase().replace(/[_-]/g, '');
+        // Check exact match
+        if (this.sensitiveFields.has(lowerKey)) {
+            return true;
+        }
+        // Check if field contains sensitive keywords
+        for (const sensitiveField of this.sensitiveFields) {
+            if (lowerKey.includes(sensitiveField)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * Mask sensitive data in objects, arrays, or primitives
+     * Returns a masked copy without modifying the original
+     */
+    static maskSensitiveData(data) {
+        // Handle null and undefined
+        if (data === null || data === undefined) {
+            return data;
+        }
+        // Handle primitives (string, number, boolean)
+        if (typeof data !== 'object') {
+            return data;
+        }
+        // Handle arrays
+        if (Array.isArray(data)) {
+            return data.map((item) => this.maskSensitiveData(item));
+        }
+        // Handle objects
+        const masked = {};
+        for (const [key, value] of Object.entries(data)) {
+            if (this.isSensitiveField(key)) {
+                // Mask sensitive field
+                masked[key] = this.MASKED_VALUE;
+            }
+            else if (typeof value === 'object' && value !== null) {
+                // Recursively mask nested objects
+                masked[key] = this.maskSensitiveData(value);
+            }
+            else {
+                // Keep non-sensitive value as-is
+                masked[key] = value;
+            }
+        }
+        return masked;
+    }
+    /**
+     * Mask specific value (useful for masking individual strings)
+     */
+    static maskValue(value, showFirst = 0, showLast = 0) {
+        if (!value || value.length <= showFirst + showLast) {
+            return this.MASKED_VALUE;
+        }
+        const first = value.substring(0, showFirst);
+        const last = value.substring(value.length - showLast);
+        const masked = '*'.repeat(Math.min(8, value.length - showFirst - showLast));
+        return `${first}${masked}${last}`;
+    }
+    /**
+     * Check if data contains sensitive information
+     */
+    static containsSensitiveData(data) {
+        if (data === null || data === undefined || typeof data !== 'object') {
+            return false;
+        }
+        if (Array.isArray(data)) {
+            return data.some((item) => this.containsSensitiveData(item));
+        }
+        for (const [key, value] of Object.entries(data)) {
+            if (this.isSensitiveField(key)) {
+                return true;
+            }
+            if (typeof value === 'object' && value !== null) {
+                if (this.containsSensitiveData(value)) {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
+}
+exports.DataMasker = DataMasker;
+DataMasker.MASKED_VALUE = '***MASKED***';
+DataMasker.sensitiveFields = new Set([
+    'password',
+    'passwd',
+    'pwd',
+    'secret',
+    'token',
+    'key',
+    'auth',
+    'authorization',
+    'cookie',
+    'session',
+    'ssn',
+    'creditcard',
+    'cc',
+    'cvv',
+    'pin',
+    'otp',
+    'apikey',
+    'accesstoken',
+    'refreshtoken',
+    'privatekey',
+    'secretkey'
+]);
+//# sourceMappingURL=data-masker.js.map

package/dist/utils/data-masker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-masker.js","sourceRoot":"","sources":["../../src/utils/data-masker.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,MAAa,UAAU;IA2BrB;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAW;QACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAExD,oBAAoB;QACpB,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6CAA6C;QAC7C,KAAK,MAAM,cAAc,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAClD,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,iBAAiB,CAAC,IAAa;QACpC,4BAA4B;QAC5B,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,8CAA8C;QAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,gBAAgB;QAChB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,iBAAiB;QACjB,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;YAC3E,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,uBAAuB;gBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;YAClC,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACvD,kCAAkC;gBAClC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,iCAAiC;gBACjC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,SAAS,CAAC,KAAa,EAAE,YAAoB,CAAC,EAAE,WAAmB,CAAC;QACzE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC;QAE5E,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,qBAAqB,CAAC,IAAa;QACxC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;YAC3E,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,IAAI,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;oBACtC,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;;AA7HH,gCA8HC;AA7HyB,uBAAY,GAAG,cAAc,CAAC;AAE9B,0BAAe,GAAG,IAAI,GAAG,CAAC;IAChD,UAAU;IACV,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,OAAO;IACP,KAAK;IACL,MAAM;IACN,eAAe;IACf,QAAQ;IACR,SAAS;IACT,KAAK;IACL,YAAY;IACZ,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,QAAQ;IACR,aAAa;IACb,cAAc;IACd,YAAY;IACZ,WAAW;CACZ,CAAC,CAAC"}

package/dist/utils/http-client.d.ts

@@ -0,0 +1,16 @@
+/**
+ * HTTP client utility for controller communication
+ */
+import { AxiosRequestConfig } from 'axios';
+import { MisoClientConfig } from '../types/config.types';
+export declare class HttpClient {
+    private axios;
+    private config;
+    constructor(config: MisoClientConfig);
+    get<T>(url: string, config?: AxiosRequestConfig): Promise<T>;
+    post<T>(url: string, data?: unknown, config?: AxiosRequestConfig): Promise<T>;
+    put<T>(url: string, data?: unknown, config?: AxiosRequestConfig): Promise<T>;
+    delete<T>(url: string, config?: AxiosRequestConfig): Promise<T>;
+    authenticatedRequest<T>(method: 'GET' | 'POST' | 'PUT' | 'DELETE', url: string, token: string, data?: unknown, config?: AxiosRequestConfig): Promise<T>;
+}
+//# sourceMappingURL=http-client.d.ts.map

package/dist/utils/http-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.d.ts","sourceRoot":"","sources":["../../src/utils/http-client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAc,EAEZ,kBAAkB,EAInB,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,MAAM,CAAmB;gBAErB,MAAM,EAAE,gBAAgB;IAqC9B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAK5D,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAK7E,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAK5E,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;IAM/D,oBAAoB,CAAC,CAAC,EAC1B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,EACzC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,CAAC,CAAC;CAsBd"}

package/dist/utils/http-client.js

@@ -0,0 +1,79 @@
+"use strict";
+/**
+ * HTTP client utility for controller communication
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpClient = void 0;
+const axios_1 = __importDefault(require("axios"));
+class HttpClient {
+    constructor(config) {
+        this.config = config;
+        this.axios = axios_1.default.create({
+            baseURL: config.controllerUrl,
+            timeout: 30000,
+            headers: {
+                'Content-Type': 'application/json',
+                'X-Environment': config.environment,
+                'X-Application': config.applicationKey
+            }
+        });
+        // Add request interceptor for automatic headers
+        this.axios.interceptors.request.use((config) => {
+            config.headers = config.headers || {};
+            config.headers['X-Environment'] = this.config.environment;
+            config.headers['X-Application'] = this.config.applicationKey;
+            return config;
+        }, (error) => Promise.reject(error));
+        // Add response interceptor for error handling
+        this.axios.interceptors.response.use((response) => response, (error) => {
+            if (error.response?.status === 401) {
+                // Enhance error with authentication context
+                error.message = 'Authentication failed - token may be invalid';
+            }
+            return Promise.reject(error);
+        });
+    }
+    async get(url, config) {
+        const response = await this.axios.get(url, config);
+        return response.data;
+    }
+    async post(url, data, config) {
+        const response = await this.axios.post(url, data, config);
+        return response.data;
+    }
+    async put(url, data, config) {
+        const response = await this.axios.put(url, data, config);
+        return response.data;
+    }
+    async delete(url, config) {
+        const response = await this.axios.delete(url, config);
+        return response.data;
+    }
+    // Method for requests that need Authorization header
+    async authenticatedRequest(method, url, token, data, config) {
+        const requestConfig = {
+            ...config,
+            headers: {
+                ...config?.headers,
+                Authorization: `Bearer ${token}`
+            }
+        };
+        switch (method) {
+            case 'GET':
+                return this.get(url, requestConfig);
+            case 'POST':
+                return this.post(url, data, requestConfig);
+            case 'PUT':
+                return this.put(url, data, requestConfig);
+            case 'DELETE':
+                return this.delete(url, requestConfig);
+            default:
+                throw new Error(`Unsupported HTTP method: ${method}`);
+        }
+    }
+}
+exports.HttpClient = HttpClient;
+//# sourceMappingURL=http-client.js.map

package/dist/utils/http-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.js","sourceRoot":"","sources":["../../src/utils/http-client.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;AAEH,kDAMe;AAGf,MAAa,UAAU;IAIrB,YAAY,MAAwB;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,IAAI,CAAC,KAAK,GAAG,eAAK,CAAC,MAAM,CAAC;YACxB,OAAO,EAAE,MAAM,CAAC,aAAa;YAC7B,OAAO,EAAE,KAAK;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,MAAM,CAAC,WAAW;gBACnC,eAAe,EAAE,MAAM,CAAC,cAAc;aACvC;SACF,CAAC,CAAC;QAEH,gDAAgD;QAChD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CACjC,CAAC,MAAkC,EAAE,EAAE;YACrC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC1D,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC7D,OAAO,MAAM,CAAC;QAChB,CAAC,EACD,CAAC,KAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAC7C,CAAC;QAEF,8CAA8C;QAC9C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAClC,CAAC,QAAuB,EAAE,EAAE,CAAC,QAAQ,EACrC,CAAC,KAAiB,EAAE,EAAE;YACpB,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnC,4CAA4C;gBAC5C,KAAK,CAAC,OAAO,GAAG,8CAA8C,CAAC;YACjE,CAAC;YACD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,GAAW,EAAE,MAA2B;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAI,GAAG,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,GAAW,EAAE,IAAc,EAAE,MAA2B;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAI,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,GAAW,EAAE,IAAc,EAAE,MAA2B;QACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAI,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAI,GAAW,EAAE,MAA2B;QACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAI,GAAG,EAAE,MAAM,CAAC,CAAC;QACzD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,oBAAoB,CACxB,MAAyC,EACzC,GAAW,EACX,KAAa,EACb,IAAc,EACd,MAA2B;QAE3B,MAAM,aAAa,GAAG;YACpB,GAAG,MAAM;YACT,OAAO,EAAE;gBACP,GAAG,MAAM,EAAE,OAAO;gBAClB,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;SACF,CAAC;QAEF,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,GAAG,CAAI,GAAG,EAAE,aAAa,CAAC,CAAC;YACzC,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,IAAI,CAAI,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAChD,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,GAAG,CAAI,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAC/C,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,MAAM,CAAI,GAAG,EAAE,aAAa,CAAC,CAAC;YAC5C;gBACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;CACF;AA1FD,gCA0FC"}