@connexum/ai-governance 1.0.0-beta.11

package/dist/esm/audit-bots/pcidss.js

@@ -0,0 +1,361 @@
+/**
+ * PCIDSSAuditBot -- Automated PCI DSS v4.0.1 compliance auditing.
+ *
+ * Requirements 1-12: cardholder data environment controls, encryption,
+ * network segmentation, access management, logging, and vulnerability
+ * management. Does NOT call external APIs.
+ *
+ * Narrative writing is delegated to an injectable NarrativeWriter
+ * interface so callers can swap in a real LLM implementation. The
+ * default stub returns deterministic text suitable for tests.
+ *
+ * P2A-05
+ *
+ * @connexum/ai-governance
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { computeAuditScore, } from './scheduler.js';
+export class StubNarrativeWriter {
+    write(controlId, context) {
+        return `[PCI DSS] Control ${controlId} narrative: ${context.slice(0, 120)}`;
+    }
+}
+// ---------------------------------------------------------------------------
+// Main bot
+// ---------------------------------------------------------------------------
+export class PCIDSSAuditBot {
+    logDir;
+    governanceDir;
+    narrativeWriter;
+    constructor(config) {
+        this.logDir = config.logDir;
+        this.governanceDir = config.governanceDir;
+        this.narrativeWriter = config.narrativeWriter ?? new StubNarrativeWriter();
+    }
+    runAudit() {
+        const checks = [
+            // Req 1-2: Network security controls
+            this.checkNetworkSegmentation(),
+            this.checkDefaultPasswords(),
+            // Req 3-4: Protect account data
+            this.checkPANDetector(),
+            this.checkEncryption(),
+            // Req 5-6: Vulnerability management
+            this.checkVulnerabilityScans(),
+            this.checkSecureDevelopment(),
+            // Req 7-8: Access control
+            this.checkAccessControl(),
+            this.checkUserAuthentication(),
+            // Req 9: Physical access
+            this.checkPhysicalAccessPolicy(),
+            // Req 10: Logging and monitoring
+            this.checkAuditLogging(),
+            this.checkLogIntegrity(),
+            // Req 11: Testing security systems
+            this.checkPenetrationTestEvidence(),
+            this.checkASVScanEvidence(),
+            // Req 12: Policies
+            this.checkSecurityPolicy(),
+            this.checkIncidentResponse(),
+        ];
+        const { score, passed, failed, warnings } = computeAuditScore(checks);
+        return {
+            auditId: '',
+            packId: 'pcidss',
+            timestamp: new Date().toISOString(),
+            checks,
+            score,
+            passed,
+            failed,
+            warnings,
+        };
+    }
+    // --- Req 1: Network segmentation ---
+    checkNetworkSegmentation() {
+        const segFile = path.join(this.governanceDir, 'network-segmentation.json');
+        const permFile = path.join(this.governanceDir, 'permissions.json');
+        const exists = fs.existsSync(segFile) || fs.existsSync(permFile);
+        return {
+            id: 'pcidss-req1-segmentation',
+            title: 'Req 1: Network security controls / segmentation',
+            status: exists ? 'pass' : 'fail',
+            detail: exists
+                ? 'Network segmentation or permissions configuration found'
+                : 'No network-segmentation.json or permissions.json -- CDE isolation not documented',
+            evidence: exists
+                ? [segFile, permFile].filter((f) => fs.existsSync(f)).join(', ')
+                : undefined,
+        };
+    }
+    // --- Req 2: Default passwords ---
+    checkDefaultPasswords() {
+        const authFile = path.join(this.governanceDir, 'agent-auth.json');
+        const exists = fs.existsSync(authFile);
+        return {
+            id: 'pcidss-req2-credentials',
+            title: 'Req 2: No vendor-supplied defaults',
+            status: exists ? 'pass' : 'fail',
+            detail: exists
+                ? 'Authentication configuration found; default credentials policy implied'
+                : 'No agent-auth.json -- default credential management not configured',
+            evidence: exists ? authFile : undefined,
+        };
+    }
+    // --- Req 3: PAN detection ---
+    checkPANDetector() {
+        const classifierFile = path.join(this.governanceDir, 'data-classifier.json');
+        const exists = fs.existsSync(classifierFile);
+        if (!exists) {
+            return {
+                id: 'pcidss-req3-pan',
+                title: 'Req 3: PAN / cardholder data detection',
+                status: 'fail',
+                detail: 'No data-classifier.json -- PAN detection not configured (Luhn / BIN classifier required)',
+            };
+        }
+        try {
+            const cfg = JSON.parse(fs.readFileSync(classifierFile, 'utf-8'));
+            const hasPAN = cfg.patterns?.includes('PAN') || cfg.patterns?.includes('TRACK_DATA');
+            return {
+                id: 'pcidss-req3-pan',
+                title: 'Req 3: PAN / cardholder data detection',
+                status: hasPAN ? 'pass' : 'warning',
+                detail: hasPAN
+                    ? 'PAN / cardholder data classifier configured per Req 3.4'
+                    : 'data-classifier.json exists but PAN pattern not listed',
+                evidence: classifierFile,
+            };
+        }
+        catch {
+            return {
+                id: 'pcidss-req3-pan',
+                title: 'Req 3: PAN / cardholder data detection',
+                status: 'fail',
+                detail: 'data-classifier.json is invalid JSON',
+                evidence: classifierFile,
+            };
+        }
+    }
+    // --- Req 4: Encryption ---
+    checkEncryption() {
+        const encFile = path.join(this.governanceDir, 'encryption.json');
+        const exists = fs.existsSync(encFile);
+        return {
+            id: 'pcidss-req4-encryption',
+            title: 'Req 4: Encryption in transit and at rest',
+            status: exists ? 'pass' : 'fail',
+            detail: exists
+                ? 'Encryption configuration found per Req 4'
+                : 'No encryption.json -- cardholder data encryption not configured',
+            evidence: exists ? encFile : undefined,
+        };
+    }
+    // --- Req 5-6: Vulnerability management ---
+    checkVulnerabilityScans() {
+        const scanDir = this.logDir;
+        const hasScanLogs = fs.existsSync(scanDir) &&
+            fs.readdirSync(scanDir).some((f) => f.includes('scan') || f.includes('vuln'));
+        const anomalyFile = path.join(this.governanceDir, 'anomaly-detection.json');
+        const exists = hasScanLogs || fs.existsSync(anomalyFile);
+        return {
+            id: 'pcidss-req5-vuln-scans',
+            title: 'Req 5-6: Vulnerability scanning evidence',
+            status: exists ? 'pass' : 'warning',
+            detail: exists
+                ? 'Vulnerability scan or anomaly detection evidence found'
+                : 'No scan logs or anomaly-detection.json -- quarterly ASV scans not evidenced',
+            evidence: exists
+                ? [anomalyFile].filter((f) => fs.existsSync(f)).join(', ') || scanDir
+                : undefined,
+        };
+    }
+    checkSecureDevelopment() {
+        const sdlcFile = path.join(this.governanceDir, 'sdlc-policy.json');
+        const govFile = path.join(this.governanceDir, 'governance.json');
+        const exists = fs.existsSync(sdlcFile) || fs.existsSync(govFile);
+        return {
+            id: 'pcidss-req6-sdlc',
+            title: 'Req 6: Secure development practices',
+            status: exists ? 'pass' : 'warning',
+            detail: exists
+                ? 'Governance / SDLC policy found per Req 6'
+                : 'No sdlc-policy.json or governance.json -- secure coding policy not documented',
+            evidence: exists
+                ? [sdlcFile, govFile].filter((f) => fs.existsSync(f)).join(', ')
+                : undefined,
+        };
+    }
+    // --- Req 7-8: Access control ---
+    checkAccessControl() {
+        const rolesFile = path.join(this.governanceDir, 'roles.json');
+        const permFile = path.join(this.governanceDir, 'permissions.json');
+        const exists = fs.existsSync(rolesFile) || fs.existsSync(permFile);
+        return {
+            id: 'pcidss-req7-access',
+            title: 'Req 7: Restrict access by business need',
+            status: exists ? 'pass' : 'fail',
+            detail: exists
+                ? 'Role / permission definitions enforce least-privilege per Req 7'
+                : 'No roles.json or permissions.json -- need-to-know access not defined',
+            evidence: exists
+                ? [rolesFile, permFile].filter((f) => fs.existsSync(f)).join(', ')
+                : undefined,
+        };
+    }
+    checkUserAuthentication() {
+        const authFile = path.join(this.governanceDir, 'agent-auth.json');
+        const exists = fs.existsSync(authFile);
+        return {
+            id: 'pcidss-req8-auth',
+            title: 'Req 8: User identification and authentication (MFA)',
+            status: exists ? 'pass' : 'fail',
+            detail: exists
+                ? 'Agent authentication configuration found per Req 8'
+                : 'No agent-auth.json -- MFA / unique ID enforcement not configured',
+            evidence: exists ? authFile : undefined,
+        };
+    }
+    // --- Req 9: Physical ---
+    checkPhysicalAccessPolicy() {
+        const physFile = path.join(this.governanceDir, 'physical-access.json');
+        const govFile = path.join(this.governanceDir, 'governance.json');
+        const exists = fs.existsSync(physFile) || fs.existsSync(govFile);
+        return {
+            id: 'pcidss-req9-physical',
+            title: 'Req 9: Physical access restrictions',
+            status: exists ? 'pass' : 'warning',
+            detail: exists
+                ? 'Physical access policy or governance file found'
+                : 'No physical-access.json -- physical CDE access controls not documented',
+            evidence: exists
+                ? [physFile, govFile].filter((f) => fs.existsSync(f)).join(', ')
+                : undefined,
+        };
+    }
+    // --- Req 10: Logging ---
+    checkAuditLogging() {
+        const hasLogs = fs.existsSync(this.logDir) &&
+            fs.readdirSync(this.logDir).some((f) => f.endsWith('.jsonl'));
+        return {
+            id: 'pcidss-req10-logging',
+            title: 'Req 10: Log and monitor all CDE access',
+            status: hasLogs ? 'pass' : 'fail',
+            detail: hasLogs
+                ? 'JSONL audit logs present per Req 10'
+                : 'No JSONL audit logs -- CDE access logging not operational',
+            evidence: hasLogs ? this.logDir : undefined,
+        };
+    }
+    checkLogIntegrity() {
+        const hashFile = path.join(this.governanceDir, 'hash-manifest.json');
+        const exists = fs.existsSync(hashFile);
+        return {
+            id: 'pcidss-req10-log-integrity',
+            title: 'Req 10: Audit log integrity protection',
+            status: exists ? 'pass' : 'fail',
+            detail: exists
+                ? 'Hash manifest provides log integrity per Req 10.5'
+                : 'No hash-manifest.json -- log tampering prevention not configured',
+            evidence: exists ? hashFile : undefined,
+        };
+    }
+    // --- Req 11: Testing ---
+    checkPenetrationTestEvidence() {
+        const penTestFile = path.join(this.governanceDir, 'pentest-results.json');
+        const hasLog = fs.existsSync(this.logDir) &&
+            fs.readdirSync(this.logDir).some((f) => f.includes('pentest') || f.includes('pen-test'));
+        const exists = fs.existsSync(penTestFile) || hasLog;
+        return {
+            id: 'pcidss-req11-pentest',
+            title: 'Req 11: Penetration testing evidence',
+            status: exists ? 'pass' : 'warning',
+            detail: exists
+                ? 'Penetration test evidence found per Req 11.3'
+                : 'No pentest evidence -- annual penetration test not documented',
+            evidence: exists ? (fs.existsSync(penTestFile) ? penTestFile : this.logDir) : undefined,
+        };
+    }
+    checkASVScanEvidence() {
+        const asvFile = path.join(this.governanceDir, 'asv-scan.json');
+        const exists = fs.existsSync(asvFile);
+        return {
+            id: 'pcidss-req11-asv',
+            title: 'Req 11: ASV scan results',
+            status: exists ? 'pass' : 'warning',
+            detail: exists
+                ? 'ASV scan results file found per Req 11.2'
+                : 'No asv-scan.json -- quarterly ASV scan results not recorded',
+            evidence: exists ? asvFile : undefined,
+        };
+    }
+    // --- Req 12: Policy ---
+    checkSecurityPolicy() {
+        const policyFile = path.join(this.governanceDir, 'security-policy.json');
+        const govFile = path.join(this.governanceDir, 'governance.json');
+        const exists = fs.existsSync(policyFile) || fs.existsSync(govFile);
+        return {
+            id: 'pcidss-req12-policy',
+            title: 'Req 12: Information security policy',
+            status: exists ? 'pass' : 'fail',
+            detail: exists
+                ? 'Security policy or governance configuration found per Req 12'
+                : 'No security-policy.json or governance.json -- information security policy not documented',
+            evidence: exists
+                ? [policyFile, govFile].filter((f) => fs.existsSync(f)).join(', ')
+                : undefined,
+        };
+    }
+    checkIncidentResponse() {
+        const irFile = path.join(this.governanceDir, 'incident-response.json');
+        const exists = fs.existsSync(irFile);
+        return {
+            id: 'pcidss-req12-ir',
+            title: 'Req 12: Incident response plan',
+            status: exists ? 'pass' : 'fail',
+            detail: exists
+                ? 'Incident response plan found per Req 12.10'
+                : 'No incident-response.json -- incident response plan not configured',
+            evidence: exists ? irFile : undefined,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Gap analysis
+    // ---------------------------------------------------------------------------
+    analyzeGaps(result) {
+        return result.checks
+            .filter((c) => c.status === 'fail' || c.status === 'warning')
+            .map((c) => ({
+            requirement: c.id,
+            title: c.title,
+            detail: c.detail,
+        }));
+    }
+    // ---------------------------------------------------------------------------
+    // Report generation
+    // ---------------------------------------------------------------------------
+    generateReport(result, outputDir) {
+        if (!fs.existsSync(outputDir))
+            fs.mkdirSync(outputDir, { recursive: true });
+        const gaps = this.analyzeGaps(result);
+        const narrative = this.narrativeWriter.write('PCI-DSS-4.0.1', `Score: ${result.score}/100. ${result.passed} controls passed, ${result.failed} failed, ${result.warnings} warnings.`);
+        const report = {
+            framework: 'PCI DSS v4.0.1',
+            generatedAt: new Date().toISOString(),
+            auditId: result.auditId,
+            score: result.score,
+            passed: result.passed,
+            failed: result.failed,
+            warnings: result.warnings,
+            narrative,
+            gaps,
+            checks: result.checks,
+            saqIndicator: result.score >= 80 ? 'SAQ-A eligible (review scope)' : 'Full ROC may be required',
+        };
+        const filename = `pcidss-report-${Date.now()}.json`;
+        const filePath = path.join(outputDir, filename);
+        fs.writeFileSync(filePath, JSON.stringify(report, null, 2));
+        return filePath;
+    }
+}
+//# sourceMappingURL=pcidss.js.map

package/dist/esm/audit-bots/pcidss.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pcidss.js","sourceRoot":"","sources":["../../../src/audit-bots/pcidss.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAIL,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAUrB,MAAM,OAAO,mBAAmB;IAC9B,KAAK,CAAC,SAAiB,EAAE,OAAe;QACtC,OAAO,qBAAqB,SAAS,eAAe,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC9E,CAAC;CACF;AAsBD,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,OAAO,cAAc;IACjB,MAAM,CAAS;IACf,aAAa,CAAS;IACtB,eAAe,CAAkB;IAEzC,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,mBAAmB,EAAE,CAAC;IAC7E,CAAC;IAED,QAAQ;QACN,MAAM,MAAM,GAAkB;YAC5B,qCAAqC;YACrC,IAAI,CAAC,wBAAwB,EAAE;YAC/B,IAAI,CAAC,qBAAqB,EAAE;YAC5B,gCAAgC;YAChC,IAAI,CAAC,gBAAgB,EAAE;YACvB,IAAI,CAAC,eAAe,EAAE;YACtB,oCAAoC;YACpC,IAAI,CAAC,uBAAuB,EAAE;YAC9B,IAAI,CAAC,sBAAsB,EAAE;YAC7B,0BAA0B;YAC1B,IAAI,CAAC,kBAAkB,EAAE;YACzB,IAAI,CAAC,uBAAuB,EAAE;YAC9B,yBAAyB;YACzB,IAAI,CAAC,yBAAyB,EAAE;YAChC,iCAAiC;YACjC,IAAI,CAAC,iBAAiB,EAAE;YACxB,IAAI,CAAC,iBAAiB,EAAE;YACxB,mCAAmC;YACnC,IAAI,CAAC,4BAA4B,EAAE;YACnC,IAAI,CAAC,oBAAoB,EAAE;YAC3B,mBAAmB;YACnB,IAAI,CAAC,mBAAmB,EAAE;YAC1B,IAAI,CAAC,qBAAqB,EAAE;SAC7B,CAAC;QAEF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAEtE,OAAO;YACL,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM;YACN,KAAK;YACL,MAAM;YACN,MAAM;YACN,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,sCAAsC;IAE9B,wBAAwB;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,0BAA0B;YAC9B,KAAK,EAAE,iDAAiD;YACxD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,yDAAyD;gBAC3D,CAAC,CAAC,kFAAkF;YACtF,QAAQ,EAAE,MAAM;gBACd,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAChE,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED,mCAAmC;IAE3B,qBAAqB;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,yBAAyB;YAC7B,KAAK,EAAE,oCAAoC;YAC3C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,wEAAwE;gBAC1E,CAAC,CAAC,oEAAoE;YACxE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACxC,CAAC;IACJ,CAAC;IAED,+BAA+B;IAEvB,gBAAgB;QACtB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,iBAAiB;gBACrB,KAAK,EAAE,wCAAwC;gBAC/C,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,0FAA0F;aACnG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;YACrF,OAAO;gBACL,EAAE,EAAE,iBAAiB;gBACrB,KAAK,EAAE,wCAAwC;gBAC/C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACnC,MAAM,EAAE,MAAM;oBACZ,CAAC,CAAC,yDAAyD;oBAC3D,CAAC,CAAC,wDAAwD;gBAC5D,QAAQ,EAAE,cAAc;aACzB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,iBAAiB;gBACrB,KAAK,EAAE,wCAAwC;gBAC/C,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,sCAAsC;gBAC9C,QAAQ,EAAE,cAAc;aACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4BAA4B;IAEpB,eAAe;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO;YACL,EAAE,EAAE,wBAAwB;YAC5B,KAAK,EAAE,0CAA0C;YACjD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,0CAA0C;gBAC5C,CAAC,CAAC,iEAAiE;YACrE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACvC,CAAC;IACJ,CAAC;IAED,4CAA4C;IAEpC,uBAAuB;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5B,MAAM,WAAW,GACf,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YACtB,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,WAAW,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACzD,OAAO;YACL,EAAE,EAAE,wBAAwB;YAC5B,KAAK,EAAE,0CAA0C;YACjD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACnC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,wDAAwD;gBAC1D,CAAC,CAAC,6EAA6E;YACjF,QAAQ,EAAE,MAAM;gBACd,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO;gBACrE,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAEO,sBAAsB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,qCAAqC;YAC5C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACnC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,0CAA0C;gBAC5C,CAAC,CAAC,+EAA+E;YACnF,QAAQ,EAAE,MAAM;gBACd,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAChE,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED,kCAAkC;IAE1B,kBAAkB;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACnE,OAAO;YACL,EAAE,EAAE,oBAAoB;YACxB,KAAK,EAAE,yCAAyC;YAChD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,iEAAiE;gBACnE,CAAC,CAAC,sEAAsE;YAC1E,QAAQ,EAAE,MAAM;gBACd,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClE,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAEO,uBAAuB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,qDAAqD;YAC5D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,oDAAoD;gBACtD,CAAC,CAAC,kEAAkE;YACtE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACxC,CAAC;IACJ,CAAC;IAED,0BAA0B;IAElB,yBAAyB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,sBAAsB;YAC1B,KAAK,EAAE,qCAAqC;YAC5C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACnC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,iDAAiD;gBACnD,CAAC,CAAC,wEAAwE;YAC5E,QAAQ,EAAE,MAAM;gBACd,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAChE,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED,0BAA0B;IAElB,iBAAiB;QACvB,MAAM,OAAO,GACX,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;YAC1B,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,sBAAsB;YAC1B,KAAK,EAAE,wCAAwC;YAC/C,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACjC,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,2DAA2D;YAC/D,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SAC5C,CAAC;IACJ,CAAC;IAEO,iBAAiB;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,4BAA4B;YAChC,KAAK,EAAE,wCAAwC;YAC/C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,mDAAmD;gBACrD,CAAC,CAAC,kEAAkE;YACtE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACxC,CAAC;IACJ,CAAC;IAED,0BAA0B;IAElB,4BAA4B;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;QAC1E,MAAM,MAAM,GACV,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;YAC1B,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC;QACpD,OAAO;YACL,EAAE,EAAE,sBAAsB;YAC1B,KAAK,EAAE,sCAAsC;YAC7C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACnC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,8CAA8C;gBAChD,CAAC,CAAC,+DAA+D;YACnE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SACxF,CAAC;IACJ,CAAC;IAEO,oBAAoB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO;YACL,EAAE,EAAE,kBAAkB;YACtB,KAAK,EAAE,0BAA0B;YACjC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACnC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,0CAA0C;gBAC5C,CAAC,CAAC,6DAA6D;YACjE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACvC,CAAC;IACJ,CAAC;IAED,yBAAyB;IAEjB,mBAAmB;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACnE,OAAO;YACL,EAAE,EAAE,qBAAqB;YACzB,KAAK,EAAE,qCAAqC;YAC5C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,8DAA8D;gBAChE,CAAC,CAAC,0FAA0F;YAC9F,QAAQ,EAAE,MAAM;gBACd,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClE,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAEO,qBAAqB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,iBAAiB;YACrB,KAAK,EAAE,gCAAgC;YACvC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,oEAAoE;YACxE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SACtC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAE9E,WAAW,CAAC,MAAsB;QAChC,OAAO,MAAM,CAAC,MAAM;aACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;aAC5D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,WAAW,EAAE,CAAC,CAAC,EAAE;YACjB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC,CAAC;IACR,CAAC;IAED,8EAA8E;IAC9E,oBAAoB;IACpB,8EAA8E;IAE9E,cAAc,CAAC,MAAsB,EAAE,SAAiB;QACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAC1C,eAAe,EACf,UAAU,MAAM,CAAC,KAAK,SAAS,MAAM,CAAC,MAAM,qBAAqB,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,QAAQ,YAAY,CACtH,CAAC;QAEF,MAAM,MAAM,GAAG;YACb,SAAS,EAAE,gBAAgB;YAC3B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS;YACT,IAAI;YACJ,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,0BAA0B;SAChG,CAAC;QAEF,MAAM,QAAQ,GAAG,iBAAiB,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/esm/audit-bots/scheduler.js

@@ -0,0 +1,137 @@
+/**
+ * AuditScheduler -- Schedules and executes compliance audit runs.
+ *
+ * Manages recurring audit configurations, persists schedule to disk,
+ * and orchestrates audit execution across compliance bots.
+ *
+ * GATE 11: Compliance Audit Bot System (T-153)
+ *
+ * @connexum/ai-governance
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import * as crypto from 'crypto';
+export class AuditScheduler {
+    logDir;
+    packs;
+    schedules = new Map();
+    lastRuns = new Map();
+    runners = new Map();
+    scheduleFile;
+    constructor(config) {
+        this.logDir = config.logDir;
+        this.packs = config.packs || [];
+        this.scheduleFile = path.join(this.logDir, 'audit-schedule.json');
+        if (!fs.existsSync(this.logDir)) {
+            fs.mkdirSync(this.logDir, { recursive: true });
+        }
+        this.loadSchedule();
+    }
+    /**
+     * Register an audit runner for a given pack ID.
+     */
+    registerRunner(packId, runner) {
+        this.runners.set(packId, runner);
+    }
+    /**
+     * Schedule a new audit. Returns the audit ID.
+     */
+    scheduleAudit(config) {
+        const id = crypto.randomBytes(8).toString('hex');
+        const scheduled = {
+            id,
+            config,
+            createdAt: new Date().toISOString(),
+            active: true,
+        };
+        this.schedules.set(id, scheduled);
+        this.persistSchedule();
+        return id;
+    }
+    /**
+     * Execute a scheduled audit immediately. Returns the run result.
+     */
+    runAudit(auditId) {
+        const scheduled = this.schedules.get(auditId);
+        if (!scheduled) {
+            throw new Error(`Audit ${auditId} not found`);
+        }
+        if (!scheduled.active) {
+            throw new Error(`Audit ${auditId} is cancelled`);
+        }
+        const runner = this.runners.get(scheduled.config.packId);
+        if (runner) {
+            const result = runner.runAudit();
+            result.auditId = auditId;
+            this.lastRuns.set(auditId, result);
+            return result;
+        }
+        // No runner registered -- return an empty result
+        const result = {
+            auditId,
+            packId: scheduled.config.packId,
+            timestamp: new Date().toISOString(),
+            checks: [],
+            score: 0,
+            passed: 0,
+            failed: 0,
+            warnings: 0,
+        };
+        this.lastRuns.set(auditId, result);
+        return result;
+    }
+    /**
+     * List all scheduled audits.
+     */
+    getSchedule() {
+        return Array.from(this.schedules.values());
+    }
+    /**
+     * Cancel a scheduled audit.
+     */
+    cancelAudit(auditId) {
+        const scheduled = this.schedules.get(auditId);
+        if (!scheduled)
+            return false;
+        scheduled.active = false;
+        this.persistSchedule();
+        return true;
+    }
+    /**
+     * Get the result of the most recent run for an audit.
+     */
+    getLastRun(auditId) {
+        return this.lastRuns.get(auditId) || null;
+    }
+    // --- Persistence ---
+    persistSchedule() {
+        const data = Array.from(this.schedules.values());
+        fs.writeFileSync(this.scheduleFile, JSON.stringify(data, null, 2));
+    }
+    loadSchedule() {
+        if (!fs.existsSync(this.scheduleFile))
+            return;
+        try {
+            const raw = fs.readFileSync(this.scheduleFile, 'utf-8');
+            const data = JSON.parse(raw);
+            for (const entry of data) {
+                this.schedules.set(entry.id, entry);
+            }
+        }
+        catch {
+            // Corrupted schedule file -- start fresh
+        }
+    }
+}
+/**
+ * Compute score and counts from an array of CheckResults.
+ */
+export function computeAuditScore(checks) {
+    const passed = checks.filter((c) => c.status === 'pass').length;
+    const failed = checks.filter((c) => c.status === 'fail').length;
+    const warnings = checks.filter((c) => c.status === 'warning').length;
+    const scorable = checks.filter((c) => c.status !== 'skip').length;
+    const score = scorable > 0 ? Math.round((passed / scorable) * 100) : 0;
+    return { score, passed, failed, warnings };
+}
+//# sourceMappingURL=scheduler.js.map

package/dist/esm/audit-bots/scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../../src/audit-bots/scheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AA6DjC,MAAM,OAAO,cAAc;IACjB,MAAM,CAAS;IACf,KAAK,CAAW;IAChB,SAAS,GAAgC,IAAI,GAAG,EAAE,CAAC;IACnD,QAAQ,GAAgC,IAAI,GAAG,EAAE,CAAC;IAClD,OAAO,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC9C,YAAY,CAAS;IAE7B,YAAY,MAA4C;QACtD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;QAElE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAc,EAAE,MAAmB;QAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,MAA2B;QACvC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,SAAS,GAAmB;YAChC,EAAE;YACF,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,IAAI;SACb,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAClC,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,OAAe;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,YAAY,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,eAAe,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,iDAAiD;QACjD,MAAM,MAAM,GAAmB;YAC7B,OAAO;YACP,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM;YAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,CAAC;YACT,QAAQ,EAAE,CAAC;SACZ,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAe;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAAe;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAC5C,CAAC;IAED,sBAAsB;IAEd,eAAe;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO;QAE9C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,IAAI,GAAqB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAqB;IAMrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,KAAK,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC7C,CAAC"}