@claude-flow/security 3.0.0-alpha.1

package/dist/credential-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-generator.js","sourceRoot":"","sources":["../src/credential-generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAmDjD,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAG/B;IAFlB,YACE,OAAe,EACC,IAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,QAAQ,GAAG;IACf,SAAS,EAAE,4BAA4B;IACvC,SAAS,EAAE,4BAA4B;IACvC,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,4BAA4B;IACrC,mCAAmC;IACnC,QAAQ,EAAE,kEAAkE;IAC5E,6BAA6B;IAC7B,GAAG,EAAE,kBAAkB;CACf,CAAC;AAEX;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,mBAAmB;IACb,MAAM,CAA6B;IAEpD,YAAY,SAA2B,EAAE;QACvC,IAAI,CAAC,MAAM,GAAG;YACZ,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3C,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACrC,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,OAAO;YAC9E,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ;SACzD,CAAC;QAEF,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,cAAc;QACpB,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,wBAAwB,CAChC,gDAAgD,EAChD,yBAAyB,CAC1B,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,wBAAwB,CAChC,+CAA+C,EAC/C,wBAAwB,CACzB,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,wBAAwB,CAChC,8CAA8C,EAC9C,uBAAuB,CACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,oBAAoB,CAAC,MAAc,EAAE,OAAe;QAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAEjC,yDAAyD;QACzD,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,aAAa,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,aAAa,CAAC,CAAC;QAElD,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;YAClB,8DAA8D;YAC9D,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAE3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3D,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;gBAEpC,yDAAyD;gBACzD,IAAI,WAAW,GAAG,aAAa,EAAE,CAAC;oBAChC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,GAAG,aAAa,CAAC,CAAC;oBACjD,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,qDAAqD;YACvD,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,MAAe;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAEjD,wEAAwE;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAE7E,qDAAqD;QACrD,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,iDAAiD;YACjD,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,QAAgB;QAChD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,iCAAiC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpE,OAAO,YAAY,IAAI,YAAY,IAAI,QAAQ,IAAI,UAAU,CAAC;IAChE,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,MAAM,GAAG,KAAK;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CACvC,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,EACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAC1B,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAE3B,OAAO;YACL,GAAG;YACH,MAAM;YACN,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,MAAe;QAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAC/C,8DAA8D;QAC9D,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvE,CAAC;IAED;;;;OAIG;IACH,qBAAqB;QACnB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;OAQG;IACH,+BAA+B,CAAC,cAAuB;QACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,cAAc;YAC9B,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAChE,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,gBAAgB,EAAE;YACtC,eAAe,EAAE,IAAI,CAAC,gBAAgB,EAAE;YACxC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAClC,aAAa,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACtC,aAAa,EAAE,IAAI,CAAC,qBAAqB,EAAE;YAC3C,WAAW,EAAE,GAAG;YAChB,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,oBAAoB;QAClB,OAAO,IAAI,CAAC,oBAAoB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1D,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,aAAa;QACX,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,WAAiC;QAC/C,OAAO;eACI,WAAW,CAAC,WAAW,CAAC,WAAW,EAAE;;;qCAGf,WAAW,CAAC,aAAa;uCACvB,WAAW,CAAC,eAAe;iCACjC,WAAW,CAAC,SAAS;qCACjB,WAAW,CAAC,aAAa;qCACzB,WAAW,CAAC,aAAa;CAC7D,CAAC;IACA,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,WAAiC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,4BAA4B,EAAE,WAAW,CAAC,aAAa;YACvD,8BAA8B,EAAE,WAAW,CAAC,eAAe;YAC3D,wBAAwB,EAAE,WAAW,CAAC,SAAS;YAC/C,4BAA4B,EAAE,WAAW,CAAC,aAAa;YACvD,4BAA4B,EAAE,WAAW,CAAC,aAAa;YACvD,0BAA0B,EAAE,WAAW,CAAC,WAAW,CAAC,WAAW,EAAE;YACjE,wBAAwB,EAAE,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;SACvE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACd,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,mBAAmB,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAC5C,OAAO,SAAS,CAAC,+BAA+B,EAAE,CAAC;AACrD,CAAC"}

package/dist/domain/entities/security-context.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Security Context Entity - Domain Layer
+ *
+ * Represents security context for operations with validation and policy enforcement.
+ *
+ * @module v3/security/domain/entities
+ */
+/**
+ * Permission levels
+ */
+export type PermissionLevel = 'read' | 'write' | 'execute' | 'admin';
+/**
+ * Security context properties
+ */
+export interface SecurityContextProps {
+    id?: string;
+    principalId: string;
+    principalType: 'agent' | 'user' | 'system';
+    permissions: PermissionLevel[];
+    allowedPaths?: string[];
+    blockedPaths?: string[];
+    allowedCommands?: string[];
+    blockedCommands?: string[];
+    metadata?: Record<string, unknown>;
+    expiresAt?: Date;
+    createdAt?: Date;
+}
+/**
+ * Security Context - Entity
+ */
+export declare class SecurityContext {
+    private _id;
+    private _principalId;
+    private _principalType;
+    private _permissions;
+    private _allowedPaths;
+    private _blockedPaths;
+    private _allowedCommands;
+    private _blockedCommands;
+    private _metadata;
+    private _expiresAt?;
+    private _createdAt;
+    private constructor();
+    static create(props: SecurityContextProps): SecurityContext;
+    static fromPersistence(props: SecurityContextProps): SecurityContext;
+    get id(): string;
+    get principalId(): string;
+    get principalType(): string;
+    get permissions(): PermissionLevel[];
+    get allowedPaths(): string[];
+    get blockedPaths(): string[];
+    get allowedCommands(): string[];
+    get blockedCommands(): string[];
+    get metadata(): Record<string, unknown>;
+    get expiresAt(): Date | undefined;
+    get createdAt(): Date;
+    hasPermission(level: PermissionLevel): boolean;
+    isExpired(): boolean;
+    canAccessPath(path: string): boolean;
+    canExecuteCommand(command: string): boolean;
+    private matchGlob;
+    grantPermission(level: PermissionLevel): void;
+    revokePermission(level: PermissionLevel): void;
+    addAllowedPath(path: string): void;
+    addBlockedPath(path: string): void;
+    toPersistence(): Record<string, unknown>;
+}
+//# sourceMappingURL=security-context.d.ts.map

package/dist/domain/entities/security-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-context.d.ts","sourceRoot":"","sources":["../../../src/domain/entities/security-context.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAErE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC3C,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,cAAc,CAA8B;IACpD,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,gBAAgB,CAAc;IACtC,OAAO,CAAC,gBAAgB,CAAc;IACtC,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,UAAU,CAAC,CAAO;IAC1B,OAAO,CAAC,UAAU,CAAO;IAEzB,OAAO;IAcP,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,oBAAoB,GAAG,eAAe;IAI3D,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,eAAe;IAIpE,IAAI,EAAE,IAAI,MAAM,CAAqB;IACrC,IAAI,WAAW,IAAI,MAAM,CAA8B;IACvD,IAAI,aAAa,IAAI,MAAM,CAAgC;IAC3D,IAAI,WAAW,IAAI,eAAe,EAAE,CAA0C;IAC9E,IAAI,YAAY,IAAI,MAAM,EAAE,CAA2C;IACvE,IAAI,YAAY,IAAI,MAAM,EAAE,CAA2C;IACvE,IAAI,eAAe,IAAI,MAAM,EAAE,CAA8C;IAC7E,IAAI,eAAe,IAAI,MAAM,EAAE,CAA8C;IAC7E,IAAI,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAkC;IACzE,IAAI,SAAS,IAAI,IAAI,GAAG,SAAS,CAA4B;IAC7D,IAAI,SAAS,IAAI,IAAI,CAAsC;IAI3D,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO;IAI9C,SAAS,IAAI,OAAO;IAKpB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAuBpC,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAiB3C,OAAO,CAAC,SAAS;IAQjB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAI7C,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAI9C,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAIlC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAIlC,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAezC"}

package/dist/domain/entities/security-context.js

@@ -0,0 +1,132 @@
+/**
+ * Security Context Entity - Domain Layer
+ *
+ * Represents security context for operations with validation and policy enforcement.
+ *
+ * @module v3/security/domain/entities
+ */
+import { randomUUID } from 'crypto';
+/**
+ * Security Context - Entity
+ */
+export class SecurityContext {
+    _id;
+    _principalId;
+    _principalType;
+    _permissions;
+    _allowedPaths;
+    _blockedPaths;
+    _allowedCommands;
+    _blockedCommands;
+    _metadata;
+    _expiresAt;
+    _createdAt;
+    constructor(props) {
+        this._id = props.id ?? randomUUID();
+        this._principalId = props.principalId;
+        this._principalType = props.principalType;
+        this._permissions = new Set(props.permissions);
+        this._allowedPaths = new Set(props.allowedPaths ?? []);
+        this._blockedPaths = new Set(props.blockedPaths ?? []);
+        this._allowedCommands = new Set(props.allowedCommands ?? []);
+        this._blockedCommands = new Set(props.blockedCommands ?? []);
+        this._metadata = props.metadata ?? {};
+        this._expiresAt = props.expiresAt;
+        this._createdAt = props.createdAt ?? new Date();
+    }
+    static create(props) {
+        return new SecurityContext(props);
+    }
+    static fromPersistence(props) {
+        return new SecurityContext(props);
+    }
+    get id() { return this._id; }
+    get principalId() { return this._principalId; }
+    get principalType() { return this._principalType; }
+    get permissions() { return Array.from(this._permissions); }
+    get allowedPaths() { return Array.from(this._allowedPaths); }
+    get blockedPaths() { return Array.from(this._blockedPaths); }
+    get allowedCommands() { return Array.from(this._allowedCommands); }
+    get blockedCommands() { return Array.from(this._blockedCommands); }
+    get metadata() { return { ...this._metadata }; }
+    get expiresAt() { return this._expiresAt; }
+    get createdAt() { return new Date(this._createdAt); }
+    // Business Logic
+    hasPermission(level) {
+        return this._permissions.has(level) || this._permissions.has('admin');
+    }
+    isExpired() {
+        if (!this._expiresAt)
+            return false;
+        return Date.now() > this._expiresAt.getTime();
+    }
+    canAccessPath(path) {
+        if (this.isExpired())
+            return false;
+        // Check blocked paths first
+        for (const blocked of this._blockedPaths) {
+            if (path.startsWith(blocked) || this.matchGlob(path, blocked)) {
+                return false;
+            }
+        }
+        // If no allowed paths specified, allow all non-blocked
+        if (this._allowedPaths.size === 0)
+            return true;
+        // Check allowed paths
+        for (const allowed of this._allowedPaths) {
+            if (path.startsWith(allowed) || this.matchGlob(path, allowed)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    canExecuteCommand(command) {
+        if (this.isExpired())
+            return false;
+        const cmdBase = command.split(' ')[0];
+        // Check blocked commands first
+        if (this._blockedCommands.has(cmdBase) || this._blockedCommands.has(command)) {
+            return false;
+        }
+        // If no allowed commands specified, allow all non-blocked
+        if (this._allowedCommands.size === 0)
+            return true;
+        // Check allowed commands
+        return this._allowedCommands.has(cmdBase) || this._allowedCommands.has(command);
+    }
+    matchGlob(path, pattern) {
+        const regex = pattern
+            .replace(/\*\*/g, '.*')
+            .replace(/\*/g, '[^/]*')
+            .replace(/\?/g, '.');
+        return new RegExp(`^${regex}$`).test(path);
+    }
+    grantPermission(level) {
+        this._permissions.add(level);
+    }
+    revokePermission(level) {
+        this._permissions.delete(level);
+    }
+    addAllowedPath(path) {
+        this._allowedPaths.add(path);
+    }
+    addBlockedPath(path) {
+        this._blockedPaths.add(path);
+    }
+    toPersistence() {
+        return {
+            id: this._id,
+            principalId: this._principalId,
+            principalType: this._principalType,
+            permissions: Array.from(this._permissions),
+            allowedPaths: Array.from(this._allowedPaths),
+            blockedPaths: Array.from(this._blockedPaths),
+            allowedCommands: Array.from(this._allowedCommands),
+            blockedCommands: Array.from(this._blockedCommands),
+            metadata: this._metadata,
+            expiresAt: this._expiresAt?.toISOString(),
+            createdAt: this._createdAt.toISOString(),
+        };
+    }
+}
+//# sourceMappingURL=security-context.js.map

package/dist/domain/entities/security-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-context.js","sourceRoot":"","sources":["../../../src/domain/entities/security-context.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAwBpC;;GAEG;AACH,MAAM,OAAO,eAAe;IAClB,GAAG,CAAS;IACZ,YAAY,CAAS;IACrB,cAAc,CAA8B;IAC5C,YAAY,CAAuB;IACnC,aAAa,CAAc;IAC3B,aAAa,CAAc;IAC3B,gBAAgB,CAAc;IAC9B,gBAAgB,CAAc;IAC9B,SAAS,CAA0B;IACnC,UAAU,CAAQ;IAClB,UAAU,CAAO;IAEzB,YAAoB,KAA2B;QAC7C,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,KAA2B;QACvC,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,KAA2B;QAChD,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,EAAE,KAAa,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,WAAW,KAAa,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACvD,IAAI,aAAa,KAAa,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC3D,IAAI,WAAW,KAAwB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,YAAY,KAAe,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,YAAY,KAAe,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,eAAe,KAAe,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,eAAe,KAAe,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,QAAQ,KAA8B,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACzE,IAAI,SAAS,KAAuB,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,IAAI,SAAS,KAAW,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAE3D,iBAAiB;IAEjB,aAAa,CAAC,KAAsB;QAClC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,SAAS;QACP,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IAChD,CAAC;IAED,aAAa,CAAC,IAAY;QACxB,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,KAAK,CAAC;QAEnC,4BAA4B;QAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC9D,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE/C,sBAAsB;QACtB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC9D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iBAAiB,CAAC,OAAe;QAC/B,IAAI,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,KAAK,CAAC;QAEnC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEtC,+BAA+B;QAC/B,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,0DAA0D;QAC1D,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAElD,yBAAyB;QACzB,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClF,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,OAAe;QAC7C,MAAM,KAAK,GAAG,OAAO;aAClB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;aACtB,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;aACvB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvB,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,eAAe,CAAC,KAAsB;QACpC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,gBAAgB,CAAC,KAAsB;QACrC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,cAAc,CAAC,IAAY;QACzB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,cAAc,CAAC,IAAY;QACzB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,aAAa;QACX,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,GAAG;YACZ,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,aAAa,EAAE,IAAI,CAAC,cAAc;YAClC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;YAC1C,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YAC5C,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;YAC5C,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;YAClD,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;YAClD,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE;YACzC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;SACzC,CAAC;IACJ,CAAC;CACF"}

package/dist/domain/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Security Domain Layer - Public Exports
+ *
+ * @module v3/security/domain
+ */
+export { SecurityContext, type PermissionLevel, type SecurityContextProps, } from './entities/security-context.js';
+export { SecurityDomainService, type ValidationResult, type ThreatDetectionResult, } from './services/security-domain-service.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/domain/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/domain/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,oBAAoB,GAC1B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,GAC3B,MAAM,uCAAuC,CAAC"}

package/dist/domain/index.js

@@ -0,0 +1,8 @@
+/**
+ * Security Domain Layer - Public Exports
+ *
+ * @module v3/security/domain
+ */
+export { SecurityContext, } from './entities/security-context.js';
+export { SecurityDomainService, } from './services/security-domain-service.js';
+//# sourceMappingURL=index.js.map

package/dist/domain/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/domain/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,GAGhB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,qBAAqB,GAGtB,MAAM,uCAAuC,CAAC"}

package/dist/domain/services/security-domain-service.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Security Domain Service - Domain Layer
+ *
+ * Contains security logic for validation, policy enforcement, and threat detection.
+ *
+ * @module v3/security/domain/services
+ */
+import { SecurityContext } from '../entities/security-context.js';
+/**
+ * Validation result
+ */
+export interface ValidationResult {
+    valid: boolean;
+    errors: string[];
+    warnings: string[];
+    sanitized?: string;
+}
+/**
+ * Threat detection result
+ */
+export interface ThreatDetectionResult {
+    safe: boolean;
+    threats: Array<{
+        type: string;
+        severity: 'low' | 'medium' | 'high' | 'critical';
+        description: string;
+        location?: string;
+    }>;
+}
+/**
+ * Security Domain Service
+ */
+export declare class SecurityDomainService {
+    private static readonly PATH_TRAVERSAL_PATTERNS;
+    private static readonly DANGEROUS_COMMANDS;
+    private static readonly SQL_INJECTION_PATTERNS;
+    private static readonly XSS_PATTERNS;
+    /**
+     * Validate a file path
+     */
+    validatePath(path: string, context: SecurityContext): ValidationResult;
+    /**
+     * Validate a command
+     */
+    validateCommand(command: string, context: SecurityContext): ValidationResult;
+    /**
+     * Validate user input
+     */
+    validateInput(input: string): ValidationResult;
+    /**
+     * Detect threats in content
+     */
+    detectThreats(content: string): ThreatDetectionResult;
+    /**
+     * Sanitize path
+     */
+    private sanitizePath;
+    /**
+     * Sanitize command
+     */
+    private sanitizeCommand;
+    /**
+     * Sanitize user input
+     */
+    private sanitizeInput;
+    /**
+     * Create security context for agent
+     */
+    createAgentContext(agentId: string, role: string, customPaths?: string[]): SecurityContext;
+}
+//# sourceMappingURL=security-domain-service.d.ts.map

package/dist/domain/services/security-domain-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-domain-service.d.ts","sourceRoot":"","sources":["../../../src/domain/services/security-domain-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAmB,MAAM,iCAAiC,CAAC;AAEnF;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;QACjD,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;CACJ;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAEhC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAQ7C;IAGF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAYxC;IAGF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAO5C;IAGF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAOlC;IAEF;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,gBAAgB;IA6BtE;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,gBAAgB;IAiC5E;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB;IAiC9C;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,qBAAqB;IA0CrD;;OAEG;IACH,OAAO,CAAC,YAAY;IAQpB;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,aAAa;IASrB;;OAEG;IACH,kBAAkB,CAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM,EAAE,GACrB,eAAe;CAuBnB"}

package/dist/domain/services/security-domain-service.js

@@ -0,0 +1,237 @@
+/**
+ * Security Domain Service - Domain Layer
+ *
+ * Contains security logic for validation, policy enforcement, and threat detection.
+ *
+ * @module v3/security/domain/services
+ */
+import { SecurityContext } from '../entities/security-context.js';
+/**
+ * Security Domain Service
+ */
+export class SecurityDomainService {
+    // Dangerous patterns for path traversal
+    static PATH_TRAVERSAL_PATTERNS = [
+        /\.\./,
+        /~\//,
+        /^\/etc\//,
+        /^\/tmp\//,
+        /^\/var\/log\//,
+        /^C:\\Windows/i,
+        /^C:\\Users\\[^\\]+\\AppData/i,
+    ];
+    // Dangerous command patterns
+    static DANGEROUS_COMMANDS = [
+        /^rm\s+-rf\s+\//,
+        /^rm\s+-rf\s+\*/,
+        /^dd\s+if=/,
+        /^mkfs\./,
+        /^format\s+/i,
+        /^del\s+\/s\s+\/q/i,
+        />\s*\/dev\/sd[a-z]/,
+        /\|\s*bash$/,
+        /\|\s*sh$/,
+        /eval\s*\(/,
+        /exec\s*\(/,
+    ];
+    // SQL injection patterns
+    static SQL_INJECTION_PATTERNS = [
+        /'\s*OR\s+'1'\s*=\s*'1/i,
+        /'\s*OR\s+1\s*=\s*1/i,
+        /;\s*DROP\s+TABLE/i,
+        /;\s*DELETE\s+FROM/i,
+        /UNION\s+SELECT/i,
+        /--\s*$/,
+    ];
+    // XSS patterns
+    static XSS_PATTERNS = [
+        /<script[\s>]/i,
+        /javascript:/i,
+        /on\w+\s*=/i,
+        /<iframe/i,
+        /<object/i,
+        /<embed/i,
+    ];
+    /**
+     * Validate a file path
+     */
+    validatePath(path, context) {
+        const errors = [];
+        const warnings = [];
+        // Check path traversal
+        for (const pattern of SecurityDomainService.PATH_TRAVERSAL_PATTERNS) {
+            if (pattern.test(path)) {
+                errors.push(`Path traversal detected: ${pattern.source}`);
+            }
+        }
+        // Check context permissions
+        if (!context.canAccessPath(path)) {
+            errors.push(`Access denied to path: ${path}`);
+        }
+        // Check for suspicious paths
+        if (path.includes('..')) {
+            warnings.push('Path contains parent directory reference');
+        }
+        return {
+            valid: errors.length === 0,
+            errors,
+            warnings,
+            sanitized: this.sanitizePath(path),
+        };
+    }
+    /**
+     * Validate a command
+     */
+    validateCommand(command, context) {
+        const errors = [];
+        const warnings = [];
+        // Check dangerous commands
+        for (const pattern of SecurityDomainService.DANGEROUS_COMMANDS) {
+            if (pattern.test(command)) {
+                errors.push(`Dangerous command pattern detected: ${pattern.source}`);
+            }
+        }
+        // Check context permissions
+        if (!context.canExecuteCommand(command)) {
+            errors.push(`Command execution denied: ${command}`);
+        }
+        if (!context.hasPermission('execute')) {
+            errors.push('Execute permission required');
+        }
+        // Check for shell injection
+        if (/[;&|`$(){}]/.test(command)) {
+            warnings.push('Command contains shell metacharacters');
+        }
+        return {
+            valid: errors.length === 0,
+            errors,
+            warnings,
+            sanitized: this.sanitizeCommand(command),
+        };
+    }
+    /**
+     * Validate user input
+     */
+    validateInput(input) {
+        const errors = [];
+        const warnings = [];
+        // Check for SQL injection
+        for (const pattern of SecurityDomainService.SQL_INJECTION_PATTERNS) {
+            if (pattern.test(input)) {
+                errors.push(`SQL injection pattern detected`);
+                break;
+            }
+        }
+        // Check for XSS
+        for (const pattern of SecurityDomainService.XSS_PATTERNS) {
+            if (pattern.test(input)) {
+                errors.push(`XSS pattern detected`);
+                break;
+            }
+        }
+        // Check length
+        if (input.length > 10000) {
+            warnings.push('Input exceeds recommended length');
+        }
+        return {
+            valid: errors.length === 0,
+            errors,
+            warnings,
+            sanitized: this.sanitizeInput(input),
+        };
+    }
+    /**
+     * Detect threats in content
+     */
+    detectThreats(content) {
+        const threats = [];
+        // Check for various threat patterns
+        if (/<script/i.test(content)) {
+            threats.push({
+                type: 'xss',
+                severity: 'high',
+                description: 'Script tag detected',
+            });
+        }
+        if (/password\s*[:=]\s*["'][^"']+["']/i.test(content)) {
+            threats.push({
+                type: 'credential-exposure',
+                severity: 'critical',
+                description: 'Hardcoded password detected',
+            });
+        }
+        if (/api[_-]?key\s*[:=]\s*["'][^"']+["']/i.test(content)) {
+            threats.push({
+                type: 'credential-exposure',
+                severity: 'critical',
+                description: 'API key detected',
+            });
+        }
+        if (/eval\s*\(/.test(content)) {
+            threats.push({
+                type: 'code-injection',
+                severity: 'high',
+                description: 'Eval statement detected',
+            });
+        }
+        return {
+            safe: threats.length === 0,
+            threats,
+        };
+    }
+    /**
+     * Sanitize path
+     */
+    sanitizePath(path) {
+        return path
+            .replace(/\.\./g, '')
+            .replace(/\/\//g, '/')
+            .replace(/^~\//, '')
+            .trim();
+    }
+    /**
+     * Sanitize command
+     */
+    sanitizeCommand(command) {
+        return command
+            .replace(/[;&|`$]/g, '')
+            .replace(/\$\([^)]*\)/g, '')
+            .trim();
+    }
+    /**
+     * Sanitize user input
+     */
+    sanitizeInput(input) {
+        return input
+            .replace(/</g, '&lt;')
+            .replace(/>/g, '&gt;')
+            .replace(/"/g, '&quot;')
+            .replace(/'/g, '&#x27;')
+            .replace(/\//g, '&#x2F;');
+    }
+    /**
+     * Create security context for agent
+     */
+    createAgentContext(agentId, role, customPaths) {
+        // Default permissions based on role
+        const rolePermissions = {
+            'queen-coordinator': ['read', 'write', 'execute', 'admin'],
+            'security-architect': ['read', 'write', 'execute', 'admin'],
+            'coder': ['read', 'write', 'execute'],
+            'reviewer': ['read'],
+            'tester': ['read', 'execute'],
+            default: ['read'],
+        };
+        const permissions = rolePermissions[role] ?? rolePermissions.default;
+        return SecurityContext.create({
+            principalId: agentId,
+            principalType: 'agent',
+            permissions,
+            allowedPaths: customPaths ?? ['./src', './tests', './docs'],
+            blockedPaths: ['/etc', '/var', '~/', '../'],
+            allowedCommands: ['npm', 'npx', 'node', 'git', 'vitest'],
+            blockedCommands: ['rm -rf /', 'dd', 'mkfs', 'format'],
+        });
+    }
+}
+//# sourceMappingURL=security-domain-service.js.map

package/dist/domain/services/security-domain-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-domain-service.js","sourceRoot":"","sources":["../../../src/domain/services/security-domain-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAmB,MAAM,iCAAiC,CAAC;AAyBnF;;GAEG;AACH,MAAM,OAAO,qBAAqB;IAChC,wCAAwC;IAChC,MAAM,CAAU,uBAAuB,GAAG;QAChD,MAAM;QACN,KAAK;QACL,UAAU;QACV,UAAU;QACV,eAAe;QACf,eAAe;QACf,8BAA8B;KAC/B,CAAC;IAEF,6BAA6B;IACrB,MAAM,CAAU,kBAAkB,GAAG;QAC3C,gBAAgB;QAChB,gBAAgB;QAChB,WAAW;QACX,SAAS;QACT,aAAa;QACb,mBAAmB;QACnB,oBAAoB;QACpB,YAAY;QACZ,UAAU;QACV,WAAW;QACX,WAAW;KACZ,CAAC;IAEF,yBAAyB;IACjB,MAAM,CAAU,sBAAsB,GAAG;QAC/C,wBAAwB;QACxB,qBAAqB;QACrB,mBAAmB;QACnB,oBAAoB;QACpB,iBAAiB;QACjB,QAAQ;KACT,CAAC;IAEF,eAAe;IACP,MAAM,CAAU,YAAY,GAAG;QACrC,eAAe;QACf,cAAc;QACd,YAAY;QACZ,UAAU;QACV,UAAU;QACV,SAAS;KACV,CAAC;IAEF;;OAEG;IACH,YAAY,CAAC,IAAY,EAAE,OAAwB;QACjD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,uBAAuB;QACvB,KAAK,MAAM,OAAO,IAAI,qBAAqB,CAAC,uBAAuB,EAAE,CAAC;YACpE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,4BAA4B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM;YACN,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;SACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAe,EAAE,OAAwB;QACvD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,2BAA2B;QAC3B,KAAK,MAAM,OAAO,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,CAAC;YAC/D,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,uCAAuC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC7C,CAAC;QAED,4BAA4B;QAC5B,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACzD,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM;YACN,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAa;QACzB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,0BAA0B;QAC1B,KAAK,MAAM,OAAO,IAAI,qBAAqB,CAAC,sBAAsB,EAAE,CAAC;YACnE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBAC9C,MAAM;YACR,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,KAAK,MAAM,OAAO,IAAI,qBAAqB,CAAC,YAAY,EAAE,CAAC;YACzD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACpC,MAAM;YACR,CAAC;QACH,CAAC;QAED,eAAe;QACf,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACpD,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM;YACN,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,OAAe;QAC3B,MAAM,OAAO,GAAqC,EAAE,CAAC;QAErD,oCAAoC;QACpC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,qBAAqB;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,6BAA6B;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,kBAAkB;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,yBAAyB;aACvC,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;YAC1B,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,IAAY;QAC/B,OAAO,IAAI;aACR,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;aACpB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;aACrB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;aACnB,IAAI,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,OAAe;QACrC,OAAO,OAAO;aACX,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;aACvB,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;aAC3B,IAAI,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAa;QACjC,OAAO,KAAK;aACT,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;aACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;aACvB,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,kBAAkB,CAChB,OAAe,EACf,IAAY,EACZ,WAAsB;QAEtB,oCAAoC;QACpC,MAAM,eAAe,GAAsC;YACzD,mBAAmB,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;YAC1D,oBAAoB,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;YAC3D,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;YACrC,UAAU,EAAE,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;YAC7B,OAAO,EAAE,CAAC,MAAM,CAAC;SAClB,CAAC;QAEF,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC;QAErE,OAAO,eAAe,CAAC,MAAM,CAAC;YAC5B,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,OAAO;YACtB,WAAW;YACX,YAAY,EAAE,WAAW,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;YAC3D,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;YAC3C,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC;YACxD,eAAe,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC;SACtD,CAAC,CAAC;IACL,CAAC"}