@connexum/ai-governance 1.0.0-beta.11

package/dist/retention/policy-matrix.js

@@ -0,0 +1,584 @@
+"use strict";
+/**
+ * PolicyMatrix -- P4-RET-02 Per-tenant per-contract retention resolver.
+ *
+ * Resolves the effective retention policy for a
+ * (tenantId, contractId, dataClass) tuple using strictest-wins semantics
+ * across applicable compliance packs plus optional contract-term overrides.
+ *
+ * Resolution order (AC 5):
+ *   1. Explicit ContractTerm for (tenantId, contractId, dataClass) -- most
+ *      specific; if active, it is the starting point before pack rules apply.
+ *   2. Most-strict pack retention -- for every pack ID in packBinding,
+ *      retentionDays = max(all applicable pack days), action computed per
+ *      strictest-wins rules (see resolveAction()).
+ *   3. Tenant default -- operator-level override above system default.
+ *   4. System default.
+ *
+ * Strictest-wins (AC 5):
+ *   - retentionDays: max of all applicable days (longer = stricter for
+ *     compliance: you must keep data at least this long).
+ *   - action: 'delete' wins when any pack has forceDelete=true.
+ *     Otherwise 'archive' wins when any pack requires archiving.
+ *     Otherwise 'delete'.
+ *   - jurisdiction: union of all pack sovereignty + contract jurisdiction.
+ *   - appliedHoldCheckRequired: true if any applicable pack has
+ *     requiresLegalHoldSupport=true (default: true for all packs,
+ *     per conservative default in pack extension).
+ *
+ * Fail-closed: MissingRetentionPolicyError when no policy source covers
+ * the tuple (no pack, no contract term, no tenant default, no system default).
+ *
+ * Pack-binding primacy (Thomas directive 2026-04-22): pack retention is
+ * read FIRST, then contract-term overrides are applied on top. A contract
+ * term can extend retentionDays (stricter) but cannot shorten below the
+ * max pack requirement.
+ *
+ * Spec: P4-RET-01 Section 2.2, AC 4-6
+ *
+ * @connexum/ai-governance
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyMatrix = void 0;
+const policy_matrix_errors_1 = require("./policy-matrix-errors");
+// ---------------------------------------------------------------------------
+// Key helpers
+// ---------------------------------------------------------------------------
+/**
+ * Build the map key for exact (tenant, contract, dataClass) lookup.
+ */
+function exactKey(tenantId, contractId, dataClass) {
+    return `${tenantId}\0${contractId}\0${dataClass}`;
+}
+/**
+ * Build the map key for wildcard (tenant, contract, any dataClass) lookup.
+ */
+function wildcardKey(tenantId, contractId) {
+    return `${tenantId}\0${contractId}\0*`;
+}
+/**
+ * Check if a ContractTerm is active at the given point in time.
+ */
+function isTermActive(term, at = new Date()) {
+    const from = new Date(term.effectiveFrom).getTime();
+    if (at.getTime() < from)
+        return false;
+    if (term.effectiveTo !== undefined && term.effectiveTo !== null) {
+        const to = new Date(term.effectiveTo).getTime();
+        if (at.getTime() > to)
+            return false;
+    }
+    return true;
+}
+/**
+ * Union two jurisdiction arrays without duplicates.
+ */
+function unionJurisdictions(a, b) {
+    const set = new Set([...a, ...b]);
+    return Array.from(set).sort();
+}
+/**
+ * Resolve the effective action across all pack retention policies.
+ *
+ * Rules (AC 5):
+ *   - If any pack has forceDelete=true, result is 'delete'.
+ *   - Else if any pack has action='archive', result is 'archive'.
+ *   - Else 'delete'.
+ */
+function resolveAction(policies) {
+    if (policies.some((p) => p.forceDelete === true)) {
+        return 'delete';
+    }
+    // Packs don't have an explicit top-level 'action' field in PackRetentionPolicy;
+    // they declare retentionDays per data type. forceDelete controls delete vs archive.
+    // When forceDelete is absent/false and no pack forces delete, we default to 'delete'
+    // (safest: expired data is deleted unless a pack explicitly requires archiving).
+    // A pack requires archiving when forceDelete is explicitly false AND it
+    // also sets requiresLegalHoldSupport=true (indicating records may be needed).
+    // NOTE: The strictest-wins spec says 'archive wins over delete when a pack
+    // explicitly requires retention past the deletion date'. Since our pack
+    // interface signals this via forceDelete=false (explicit), we treat any
+    // pack that has forceDelete explicitly set to false as preferring 'archive'.
+    const anyExplicitlyArchive = policies.some((p) => Object.prototype.hasOwnProperty.call(p, 'forceDelete') && p.forceDelete === false);
+    if (anyExplicitlyArchive) {
+        return 'archive';
+    }
+    return 'delete';
+}
+// ---------------------------------------------------------------------------
+// PolicyMatrix
+// ---------------------------------------------------------------------------
+/**
+ * Resolves the effective retention policy for a
+ * (tenantId, contractId, dataClass) tuple.
+ *
+ * Construction validates all packs and indexes all contract terms.
+ * Resolution is synchronous and fail-closed.
+ */
+class PolicyMatrix {
+    packsById;
+    /**
+     * Index of active contract terms.
+     * Keys: exactKey(tenantId, contractId, dataClass) for class-specific terms,
+     *       wildcardKey(tenantId, contractId) for class-wildcard terms.
+     *
+     * Value: the single active term for that key.
+     * ConflictingContractTermsError thrown at construction if two active terms
+     * share the same key.
+     */
+    exactTermIndex;
+    wildcardTermIndex;
+    /** Tenant defaults indexed by tenantId. */
+    tenantDefaultsById;
+    systemDefaults;
+    allPacks;
+    constructor(config) {
+        // Validate and index packs.
+        this.packsById = new Map();
+        for (const pack of config.packs) {
+            this.validatePackRetention(pack);
+            this.packsById.set(pack.id, pack);
+        }
+        // Build contract term indexes. Throw on conflicts.
+        this.exactTermIndex = new Map();
+        this.wildcardTermIndex = new Map();
+        const now = new Date();
+        for (const term of config.contractTerms) {
+            if (!isTermActive(term, now))
+                continue;
+            if (term.dataClass !== undefined && term.dataClass !== null && term.dataClass !== '') {
+                const key = exactKey(term.tenantId, term.contractId, term.dataClass);
+                const existing = this.exactTermIndex.get(key);
+                if (existing) {
+                    throw new policy_matrix_errors_1.ConflictingContractTermsError(term.tenantId, term.contractId, term.dataClass, existing, term);
+                }
+                this.exactTermIndex.set(key, term);
+            }
+            else {
+                const key = wildcardKey(term.tenantId, term.contractId);
+                const existing = this.wildcardTermIndex.get(key);
+                if (existing) {
+                    throw new policy_matrix_errors_1.ConflictingContractTermsError(term.tenantId, term.contractId, '', existing, term);
+                }
+                this.wildcardTermIndex.set(key, term);
+            }
+        }
+        // Tenant defaults.
+        this.tenantDefaultsById = new Map();
+        for (const td of config.tenantDefaults ?? []) {
+            this.tenantDefaultsById.set(td.tenantId, td);
+        }
+        this.systemDefaults = config.systemDefaults;
+        this.allPacks = config.packs;
+    }
+    // -------------------------------------------------------------------------
+    // resolve()
+    // -------------------------------------------------------------------------
+    /**
+     * Resolve the effective retention for (tenantId, contractId, dataClass, packBinding).
+     *
+     * Resolution order (strictest-wins):
+     *   1. Pack retention across all bound packs (primary -- pack binding primacy).
+     *   2. Contract term override applied on top of pack floor.
+     *   3. Tenant default if no pack or contract term applies.
+     *   4. System default if nothing else applies.
+     *
+     * Throws MissingRetentionPolicyError if no source covers the tuple.
+     * Throws UnboundDataError (via resolveForRecord) if packBinding is empty.
+     *
+     * @param input The tuple to resolve.
+     * @returns The effective ResolvedRetention.
+     */
+    resolve(input) {
+        const { tenantId, contractId, dataClass, packBinding } = input;
+        // Collect applicable packs.
+        const applicablePacks = [];
+        for (const packId of packBinding) {
+            const pack = this.packsById.get(packId);
+            if (pack)
+                applicablePacks.push(pack);
+            // Packs not in the matrix config are silently skipped (the pack may
+            // not declare a retentionPolicy row, but the binding still stands).
+        }
+        // --- Step 1: Pack floor (strictest-wins across all bound packs) ---
+        let packRetentionDays = 0;
+        let packAction = 'delete';
+        let packJurisdiction = [];
+        let holdCheckRequired = false;
+        const drivingPackIds = [];
+        let hasPackPolicy = false;
+        if (applicablePacks.length > 0) {
+            const policies = applicablePacks.map((p) => p.retentionPolicy);
+            // Max retention across all packs (longest window = strictest).
+            const maxDays = Math.max(...policies.map((p) => Math.max(p.auditLogRetentionDays ?? 0, p.sessionRetentionDays ?? 0, p.incidentRetentionDays ?? 0)));
+            packRetentionDays = maxDays;
+            packAction = resolveAction(policies);
+            // Jurisdiction union from pack sovereignty.
+            for (const policy of policies) {
+                if (policy.sovereignty) {
+                    packJurisdiction = unionJurisdictions(packJurisdiction, policy.sovereignty);
+                }
+            }
+            // Hold check: true if ANY pack requires it.
+            // Default is true (conservative) when field is absent.
+            holdCheckRequired = policies.some((p) => p.requiresLegalHoldSupport !== false);
+            // Track which packs drove the max retentionDays.
+            for (const pack of applicablePacks) {
+                const p = pack.retentionPolicy;
+                const days = Math.max(p.auditLogRetentionDays ?? 0, p.sessionRetentionDays ?? 0, p.incidentRetentionDays ?? 0);
+                if (days === maxDays) {
+                    drivingPackIds.push(pack.id);
+                }
+                // Also include any forceDelete pack in strictestBoundBy.
+                if (p.forceDelete === true && !drivingPackIds.includes(pack.id)) {
+                    drivingPackIds.push(pack.id);
+                }
+            }
+            hasPackPolicy = maxDays > 0 || packBinding.length > 0;
+        }
+        // --- Step 2: Contract term override ---
+        // Exact class-specific term takes precedence over wildcard term.
+        const exactTerm = this.exactTermIndex.get(exactKey(tenantId, contractId, dataClass));
+        const wildcardTerm = this.wildcardTermIndex.get(wildcardKey(tenantId, contractId));
+        const contractTerm = exactTerm ?? wildcardTerm;
+        let contractRetentionDays = 0;
+        let contractAction = null;
+        let contractJurisdiction = [];
+        let contractTermId = null;
+        if (contractTerm) {
+            contractRetentionDays = contractTerm.retentionDays;
+            contractAction = contractTerm.action;
+            contractJurisdiction = contractTerm.jurisdiction ?? [];
+            contractTermId = contractTerm.termId;
+        }
+        // --- Merge pack floor + contract term ---
+        let finalRetentionDays;
+        let finalAction;
+        let finalJurisdiction;
+        let policySource;
+        const strictestBoundBy = [];
+        if (hasPackPolicy || contractTerm) {
+            // Pack-binding primacy: start from pack floor.
+            // Contract term can only increase retentionDays (stricter), not decrease.
+            finalRetentionDays = packRetentionDays;
+            finalAction = packAction;
+            finalJurisdiction = [...packJurisdiction];
+            strictestBoundBy.push(...drivingPackIds);
+            if (contractTerm) {
+                // Contract can extend the floor but not shorten it.
+                if (contractRetentionDays > finalRetentionDays) {
+                    finalRetentionDays = contractRetentionDays;
+                    // Contract action only takes effect if it is stricter than pack action.
+                    // 'delete' is stricter than 'archive' when the pack doesn't require delete.
+                    // If pack already requires delete (forceDelete=true), delete stays.
+                    if (finalAction !== 'delete') {
+                        finalAction = contractAction ?? finalAction;
+                    }
+                    strictestBoundBy.push(contractTermId);
+                }
+                else if (contractRetentionDays === finalRetentionDays) {
+                    // Same days -- merge action and mark contract term as a driver.
+                    if (contractAction === 'delete') {
+                        finalAction = 'delete';
+                    }
+                    if (contractTermId && !strictestBoundBy.includes(contractTermId)) {
+                        strictestBoundBy.push(contractTermId);
+                    }
+                }
+                finalJurisdiction = unionJurisdictions(finalJurisdiction, contractJurisdiction);
+                policySource = 'contract';
+            }
+            else {
+                policySource = 'pack';
+            }
+        }
+        else {
+            // No pack or contract term. Try tenant default, then system default.
+            const tenantDefault = this.tenantDefaultsById.get(tenantId);
+            if (tenantDefault) {
+                finalRetentionDays = tenantDefault.retentionDays;
+                finalAction = tenantDefault.action;
+                finalJurisdiction = [];
+                policySource = 'default';
+                strictestBoundBy.push(`tenant-default:${tenantId}`);
+            }
+            else if (this.systemDefaults.retentionDays > 0) {
+                // Only use system default when it specifies a meaningful (> 0) retention window.
+                // A system default of 0 days is treated as "no policy configured" -- fail closed.
+                finalRetentionDays = this.systemDefaults.retentionDays;
+                finalAction = this.systemDefaults.action;
+                finalJurisdiction = [];
+                policySource = 'default';
+                strictestBoundBy.push('system-default');
+            }
+            else {
+                // Fail-closed: no policy covers this tuple.
+                // systemDefaults.retentionDays is 0 (or negative) = operator has not configured
+                // a meaningful default. Retention engine refuses to proceed without an explicit policy.
+                throw new policy_matrix_errors_1.MissingRetentionPolicyError(tenantId, contractId, dataClass);
+            }
+        }
+        return {
+            retentionDays: finalRetentionDays,
+            action: finalAction,
+            archiveZone: finalAction === 'archive'
+                ? (finalJurisdiction[0] ?? undefined)
+                : undefined,
+            jurisdiction: finalJurisdiction,
+            policySource,
+            strictestBoundBy,
+            appliedHoldCheckRequired: holdCheckRequired,
+        };
+    }
+    // -------------------------------------------------------------------------
+    // resolveForRecord()
+    // -------------------------------------------------------------------------
+    /**
+     * Convenience wrapper that reads tenantId, contractId, dataClass, and
+     * packBinding directly off a DataClassTag.
+     *
+     * Throws UnboundDataError (re-thrown from caller) if tag.packBinding is
+     * empty, since an unbound tag is a classification invariant violation.
+     *
+     * @param tag  A DataClassTag stamped at ingestion time.
+     * @returns    The effective ResolvedRetention.
+     */
+    resolveForRecord(tag) {
+        if (tag.packBinding.length === 0) {
+            // Import the error class at call-site to avoid circular deps.
+            // We throw the same error class that classifier.ts throws for empty bindings.
+            const { UnboundDataError } = require('./classifier');
+            throw new UnboundDataError('policy-matrix:resolveForRecord', tag.tenantId);
+        }
+        return this.resolve({
+            tenantId: tag.tenantId,
+            contractId: tag.contractId,
+            dataClass: tag.dataClass,
+            packBinding: tag.packBinding,
+        });
+    }
+    // -------------------------------------------------------------------------
+    // explain()
+    // -------------------------------------------------------------------------
+    /**
+     * Auditor-facing method. Returns the resolved retention AND a step-by-step
+     * rationale chain showing every source consulted and its contribution to
+     * the final resolution.
+     *
+     * Each ExplainStep records: the source, the rule applied, and the
+     * cumulative effect on retentionDays, action, jurisdiction, holdCheck.
+     *
+     * @param input  Same tuple as resolve().
+     * @returns      { resolved, rationale } where rationale is ordered 1..N.
+     */
+    explain(input) {
+        const { tenantId, contractId, dataClass, packBinding } = input;
+        const steps = [];
+        let runningDays = 0;
+        let runningAction = this.systemDefaults.action;
+        let runningJurisdiction = [];
+        let runningHoldCheck = false;
+        // --- Step 1: System default (always the baseline) ---
+        runningDays = this.systemDefaults.retentionDays;
+        runningAction = this.systemDefaults.action;
+        steps.push({
+            step: 1,
+            source: 'system-default',
+            sourceId: 'system',
+            rule: `System default: retain ${runningDays} days, action=${runningAction}`,
+            retentionDaysAfterStep: runningDays,
+            actionAfterStep: runningAction,
+            jurisdictionAfterStep: [],
+            holdCheckRequiredAfterStep: false,
+        });
+        // --- Step 2: Tenant default (if present) ---
+        const tenantDefault = this.tenantDefaultsById.get(tenantId);
+        if (tenantDefault) {
+            if (tenantDefault.retentionDays > runningDays) {
+                runningDays = tenantDefault.retentionDays;
+            }
+            runningAction = tenantDefault.action;
+            steps.push({
+                step: steps.length + 1,
+                source: 'tenant-default',
+                sourceId: tenantId,
+                rule: `Tenant default for "${tenantId}": retain ${tenantDefault.retentionDays} days, action=${tenantDefault.action}`,
+                retentionDaysAfterStep: runningDays,
+                actionAfterStep: runningAction,
+                jurisdictionAfterStep: [...runningJurisdiction],
+                holdCheckRequiredAfterStep: runningHoldCheck,
+            });
+        }
+        // --- Step 3: Each pack in packBinding ---
+        for (const packId of packBinding) {
+            const pack = this.packsById.get(packId);
+            if (!pack) {
+                steps.push({
+                    step: steps.length + 1,
+                    source: 'pack',
+                    sourceId: packId,
+                    rule: `Pack "${packId}" not found in PolicyMatrix config; skipped.`,
+                    retentionDaysAfterStep: runningDays,
+                    actionAfterStep: runningAction,
+                    jurisdictionAfterStep: [...runningJurisdiction],
+                    holdCheckRequiredAfterStep: runningHoldCheck,
+                });
+                continue;
+            }
+            const policy = pack.retentionPolicy;
+            const packMaxDays = Math.max(policy.auditLogRetentionDays ?? 0, policy.sessionRetentionDays ?? 0, policy.incidentRetentionDays ?? 0);
+            const prevDays = runningDays;
+            const prevAction = runningAction;
+            if (packMaxDays > runningDays) {
+                runningDays = packMaxDays;
+            }
+            // Resolve action with this pack included.
+            if (policy.forceDelete === true) {
+                runningAction = 'delete';
+            }
+            else if (Object.prototype.hasOwnProperty.call(policy, 'forceDelete') &&
+                policy.forceDelete === false &&
+                runningAction !== 'delete') {
+                runningAction = 'archive';
+            }
+            // Merge jurisdiction.
+            if (policy.sovereignty) {
+                runningJurisdiction = unionJurisdictions(runningJurisdiction, policy.sovereignty);
+            }
+            // Hold check: conservative default.
+            if (policy.requiresLegalHoldSupport !== false) {
+                runningHoldCheck = true;
+            }
+            const daysChanged = packMaxDays > prevDays;
+            const actionChanged = runningAction !== prevAction;
+            steps.push({
+                step: steps.length + 1,
+                source: 'pack',
+                sourceId: packId,
+                rule: `Pack "${packId}" (${pack.name}): ` +
+                    `max retention=${packMaxDays} days ` +
+                    `(auditLog=${policy.auditLogRetentionDays}, session=${policy.sessionRetentionDays}, incident=${policy.incidentRetentionDays}), ` +
+                    `forceDelete=${policy.forceDelete ?? 'unset'}, ` +
+                    `requiresLegalHoldSupport=${policy.requiresLegalHoldSupport ?? 'unset (default true)'}. ` +
+                    (daysChanged ? `Raised retention floor to ${runningDays} days. ` : '') +
+                    (actionChanged ? `Changed action to "${runningAction}". ` : '') +
+                    (policy.sovereignty ? `Added jurisdictions: ${policy.sovereignty.join(', ')}.` : ''),
+                retentionDaysAfterStep: runningDays,
+                actionAfterStep: runningAction,
+                jurisdictionAfterStep: [...runningJurisdiction],
+                holdCheckRequiredAfterStep: runningHoldCheck,
+            });
+        }
+        // --- Step 4: Contract term ---
+        const exactTerm = this.exactTermIndex.get(exactKey(tenantId, contractId, dataClass));
+        const wildcardTerm = this.wildcardTermIndex.get(wildcardKey(tenantId, contractId));
+        const contractTerm = exactTerm ?? wildcardTerm;
+        if (contractTerm) {
+            const prevDays = runningDays;
+            const contractDays = contractTerm.retentionDays;
+            const contractJurisdiction = contractTerm.jurisdiction ?? [];
+            if (contractDays > runningDays) {
+                runningDays = contractDays;
+                if (runningAction !== 'delete') {
+                    runningAction = contractTerm.action;
+                }
+            }
+            else if (contractTerm.action === 'delete') {
+                runningAction = 'delete';
+            }
+            runningJurisdiction = unionJurisdictions(runningJurisdiction, contractJurisdiction);
+            const termScope = contractTerm.dataClass
+                ? `(specific to dataClass="${contractTerm.dataClass}")`
+                : `(wildcard, applies to all data classes)`;
+            steps.push({
+                step: steps.length + 1,
+                source: 'contract-term',
+                sourceId: contractTerm.termId,
+                rule: `ContractTerm "${contractTerm.termId}" for tenant "${tenantId}", contract "${contractId}" ${termScope}: ` +
+                    `retentionDays=${contractDays}, action=${contractTerm.action}, ` +
+                    `jurisdiction=[${contractJurisdiction.join(', ')}]. ` +
+                    (contractDays > prevDays
+                        ? `Extended retention floor from ${prevDays} to ${runningDays} days. `
+                        : `Pack floor (${prevDays} days) exceeds contract term (${contractDays} days); pack floor retained. `) +
+                    `Final jurisdiction union: [${runningJurisdiction.join(', ')}].`,
+                retentionDaysAfterStep: runningDays,
+                actionAfterStep: runningAction,
+                jurisdictionAfterStep: [...runningJurisdiction],
+                holdCheckRequiredAfterStep: runningHoldCheck,
+            });
+        }
+        // Get the resolved retention (re-use resolve() to ensure consistency).
+        let resolved;
+        try {
+            resolved = this.resolve(input);
+        }
+        catch (err) {
+            // If resolve() throws MissingRetentionPolicyError, re-throw with the
+            // rationale steps attached so the auditor can see what was consulted.
+            throw err;
+        }
+        return { resolved, rationale: steps };
+    }
+    // -------------------------------------------------------------------------
+    // resolveAll()
+    // -------------------------------------------------------------------------
+    /**
+     * Resolve the full matrix for a tenant+contract combination:
+     * one row per DataClass for the given packBinding.
+     *
+     * Returns an array of { dataClass, resolved } tuples. Used by the
+     * GET /api/v1/retention/matrix endpoint.
+     *
+     * @param tenantId    Tenant to resolve for.
+     * @param contractId  Contract to resolve for.
+     * @param packBinding Active packs for this tenant's contract.
+     */
+    resolveAll(tenantId, contractId, packBinding) {
+        // Import DataClass enum to iterate all known classes.
+        const { DataClass } = require('./data-class');
+        const results = [];
+        for (const dc of Object.values(DataClass)) {
+            try {
+                const resolved = this.resolve({
+                    tenantId,
+                    contractId,
+                    dataClass: dc,
+                    packBinding,
+                });
+                results.push({ dataClass: dc, resolved });
+            }
+            catch (err) {
+                const e = err;
+                results.push({ dataClass: dc, resolved: null, error: e.message });
+            }
+        }
+        return results;
+    }
+    // -------------------------------------------------------------------------
+    // Private: validatePackRetention()
+    // -------------------------------------------------------------------------
+    /**
+     * Validate that a pack's retentionPolicy is well-formed at construction
+     * time. Throws InvalidPackRetentionError on any malformed value.
+     */
+    validatePackRetention(pack) {
+        const p = pack.retentionPolicy;
+        if (!p) {
+            throw new policy_matrix_errors_1.InvalidPackRetentionError(pack.id, 'retentionPolicy is missing');
+        }
+        if (p.auditLogRetentionDays !== undefined &&
+            (typeof p.auditLogRetentionDays !== 'number' || p.auditLogRetentionDays < 0)) {
+            throw new policy_matrix_errors_1.InvalidPackRetentionError(pack.id, `auditLogRetentionDays must be a non-negative number, got ${p.auditLogRetentionDays}`);
+        }
+        if (p.sessionRetentionDays !== undefined &&
+            (typeof p.sessionRetentionDays !== 'number' || p.sessionRetentionDays < 0)) {
+            throw new policy_matrix_errors_1.InvalidPackRetentionError(pack.id, `sessionRetentionDays must be a non-negative number, got ${p.sessionRetentionDays}`);
+        }
+        if (p.incidentRetentionDays !== undefined &&
+            (typeof p.incidentRetentionDays !== 'number' || p.incidentRetentionDays < 0)) {
+            throw new policy_matrix_errors_1.InvalidPackRetentionError(pack.id, `incidentRetentionDays must be a non-negative number, got ${p.incidentRetentionDays}`);
+        }
+    }
+}
+exports.PolicyMatrix = PolicyMatrix;
+//# sourceMappingURL=policy-matrix.js.map

package/dist/retention/policy-matrix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-matrix.js","sourceRoot":"","sources":["../../src/retention/policy-matrix.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;;;AAIH,iEAIgC;AAgLhC,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;GAEG;AACH,SAAS,QAAQ,CAAC,QAAgB,EAAE,UAAkB,EAAE,SAAiB;IACvE,OAAO,GAAG,QAAQ,KAAK,UAAU,KAAK,SAAS,EAAE,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,QAAgB,EAAE,UAAkB;IACvD,OAAO,GAAG,QAAQ,KAAK,UAAU,KAAK,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,IAAkB,EAAE,KAAW,IAAI,IAAI,EAAE;IAC7D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC;IACpD,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAChE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;QAChD,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,CAAW,EAAE,CAAW;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,QAAuC;IAC5D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,gFAAgF;IAChF,oFAAoF;IACpF,qFAAqF;IACrF,iFAAiF;IACjF,wEAAwE;IACxE,8EAA8E;IAC9E,2EAA2E;IAC3E,wEAAwE;IACxE,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,oBAAoB,GAAG,QAAQ,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,KAAK,CACzF,CAAC;IACF,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAa,YAAY;IACN,SAAS,CAA8B;IACxD;;;;;;;;OAQG;IACc,cAAc,CAA4B;IAC1C,iBAAiB,CAA4B;IAC9D,2CAA2C;IAC1B,kBAAkB,CAA6B;IAC/C,cAAc,CAAuC;IACrD,QAAQ,CAAmB;IAE5C,YAAY,MAA0B;QACpC,4BAA4B;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;QAChC,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACxC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC;gBAAE,SAAS;YAEvC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;gBACrF,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC9C,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,oDAA6B,CACrC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,SAAS,EACd,QAAQ,EACR,IAAI,CACL,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;gBACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACjD,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,oDAA6B,CACrC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,EACf,EAAE,EACF,QAAQ,EACR,IAAI,CACL,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,kBAAkB,GAAG,IAAI,GAAG,EAAE,CAAC;QACpC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;IAC/B,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAE5E;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,KAKP;QACC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QAE/D,4BAA4B;QAC5B,MAAM,eAAe,GAAqB,EAAE,CAAC;QAC7C,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,IAAI;gBAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,oEAAoE;YACpE,oEAAoE;QACtE,CAAC;QAED,qEAAqE;QACrE,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,IAAI,UAAU,GAAyB,QAAQ,CAAC;QAChD,IAAI,gBAAgB,GAAa,EAAE,CAAC;QACpC,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,IAAI,aAAa,GAAG,KAAK,CAAC;QAE1B,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAA8C,CACxD,CAAC;YAEF,+DAA+D;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACtB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,IAAI,CAAC,GAAG,CACN,CAAC,CAAC,qBAAqB,IAAI,CAAC,EAC5B,CAAC,CAAC,oBAAoB,IAAI,CAAC,EAC3B,CAAC,CAAC,qBAAqB,IAAI,CAAC,CAC7B,CACF,CACF,CAAC;YAEF,iBAAiB,GAAG,OAAO,CAAC;YAC5B,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YAErC,4CAA4C;YAC5C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,gBAAgB,GAAG,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;YAED,4CAA4C;YAC5C,uDAAuD;YACvD,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB,KAAK,KAAK,CAC5C,CAAC;YAEF,iDAAiD;YACjD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,IAAI,CAAC,eAA8C,CAAC;gBAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CACnB,CAAC,CAAC,qBAAqB,IAAI,CAAC,EAC5B,CAAC,CAAC,oBAAoB,IAAI,CAAC,EAC3B,CAAC,CAAC,qBAAqB,IAAI,CAAC,CAC7B,CAAC;gBACF,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;oBACrB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC/B,CAAC;gBACD,yDAAyD;gBACzD,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;oBAChE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAED,aAAa,GAAG,OAAO,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;QACxD,CAAC;QAED,yCAAyC;QACzC,iEAAiE;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CACvC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAC1C,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAC7C,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAClC,CAAC;QACF,MAAM,YAAY,GAAG,SAAS,IAAI,YAAY,CAAC;QAE/C,IAAI,qBAAqB,GAAG,CAAC,CAAC;QAC9B,IAAI,cAAc,GAAgC,IAAI,CAAC;QACvD,IAAI,oBAAoB,GAAa,EAAE,CAAC;QACxC,IAAI,cAAc,GAAkB,IAAI,CAAC;QAEzC,IAAI,YAAY,EAAE,CAAC;YACjB,qBAAqB,GAAG,YAAY,CAAC,aAAa,CAAC;YACnD,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC;YACrC,oBAAoB,GAAG,YAAY,CAAC,YAAY,IAAI,EAAE,CAAC;YACvD,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC;QACvC,CAAC;QAED,2CAA2C;QAC3C,IAAI,kBAA0B,CAAC;QAC/B,IAAI,WAAiC,CAAC;QACtC,IAAI,iBAA2B,CAAC;QAChC,IAAI,YAA+C,CAAC;QACpD,MAAM,gBAAgB,GAAa,EAAE,CAAC;QAEtC,IAAI,aAAa,IAAI,YAAY,EAAE,CAAC;YAClC,+CAA+C;YAC/C,0EAA0E;YAC1E,kBAAkB,GAAG,iBAAiB,CAAC;YACvC,WAAW,GAAG,UAAU,CAAC;YACzB,iBAAiB,GAAG,CAAC,GAAG,gBAAgB,CAAC,CAAC;YAC1C,gBAAgB,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;YAEzC,IAAI,YAAY,EAAE,CAAC;gBACjB,oDAAoD;gBACpD,IAAI,qBAAqB,GAAG,kBAAkB,EAAE,CAAC;oBAC/C,kBAAkB,GAAG,qBAAqB,CAAC;oBAC3C,wEAAwE;oBACxE,4EAA4E;oBAC5E,oEAAoE;oBACpE,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;wBAC7B,WAAW,GAAG,cAAc,IAAI,WAAW,CAAC;oBAC9C,CAAC;oBACD,gBAAgB,CAAC,IAAI,CAAC,cAAe,CAAC,CAAC;gBACzC,CAAC;qBAAM,IAAI,qBAAqB,KAAK,kBAAkB,EAAE,CAAC;oBACxD,gEAAgE;oBAChE,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;wBAChC,WAAW,GAAG,QAAQ,CAAC;oBACzB,CAAC;oBACD,IAAI,cAAc,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;wBACjE,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACxC,CAAC;gBACH,CAAC;gBACD,iBAAiB,GAAG,kBAAkB,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;gBAChF,YAAY,GAAG,UAAU,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,YAAY,GAAG,MAAM,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE5D,IAAI,aAAa,EAAE,CAAC;gBAClB,kBAAkB,GAAG,aAAa,CAAC,aAAa,CAAC;gBACjD,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC;gBACnC,iBAAiB,GAAG,EAAE,CAAC;gBACvB,YAAY,GAAG,SAAS,CAAC;gBACzB,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC;YACtD,CAAC;iBAAM,IAAI,IAAI,CAAC,cAAc,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;gBACjD,iFAAiF;gBACjF,kFAAkF;gBAClF,kBAAkB,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;gBACvD,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBACzC,iBAAiB,GAAG,EAAE,CAAC;gBACvB,YAAY,GAAG,SAAS,CAAC;gBACzB,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,4CAA4C;gBAC5C,gFAAgF;gBAChF,wFAAwF;gBACxF,MAAM,IAAI,kDAA2B,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,OAAO;YACL,aAAa,EAAE,kBAAkB;YACjC,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,WAAW,KAAK,SAAS;gBACpC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;gBACrC,CAAC,CAAC,SAAS;YACb,YAAY,EAAE,iBAAiB;YAC/B,YAAY;YACZ,gBAAgB;YAChB,wBAAwB,EAAE,iBAAiB;SAC5C,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,qBAAqB;IACrB,4EAA4E;IAE5E;;;;;;;;;OASG;IACH,gBAAgB,CAAC,GAAiB;QAChC,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,8DAA8D;YAC9D,8EAA8E;YAC9E,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,cAAc,CAAkC,CAAC;YACtF,MAAM,IAAI,gBAAgB,CAAC,gCAAgC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,SAAS,EAAE,GAAG,CAAC,SAAmB;YAClC,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAE5E;;;;;;;;;;OAUG;IACH,OAAO,CAAC,KAKP;QACC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QAC/D,MAAM,KAAK,GAAkB,EAAE,CAAC;QAEhC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,aAAa,GAAyB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QACrE,IAAI,mBAAmB,GAAa,EAAE,CAAC;QACvC,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAE7B,uDAAuD;QACvD,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;QAChD,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,0BAA0B,WAAW,iBAAiB,aAAa,EAAE;YAC3E,sBAAsB,EAAE,WAAW;YACnC,eAAe,EAAE,aAAa;YAC9B,qBAAqB,EAAE,EAAE;YACzB,0BAA0B,EAAE,KAAK;SAClC,CAAC,CAAC;QAEH,8CAA8C;QAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,aAAa,CAAC,aAAa,GAAG,WAAW,EAAE,CAAC;gBAC9C,WAAW,GAAG,aAAa,CAAC,aAAa,CAAC;YAC5C,CAAC;YACD,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;gBACtB,MAAM,EAAE,gBAAgB;gBACxB,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,uBAAuB,QAAQ,aAAa,aAAa,CAAC,aAAa,iBAAiB,aAAa,CAAC,MAAM,EAAE;gBACpH,sBAAsB,EAAE,WAAW;gBACnC,eAAe,EAAE,aAAa;gBAC9B,qBAAqB,EAAE,CAAC,GAAG,mBAAmB,CAAC;gBAC/C,0BAA0B,EAAE,gBAAgB;aAC7C,CAAC,CAAC;QACL,CAAC;QAED,2CAA2C;QAC3C,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;oBACtB,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,SAAS,MAAM,8CAA8C;oBACnE,sBAAsB,EAAE,WAAW;oBACnC,eAAe,EAAE,aAAa;oBAC9B,qBAAqB,EAAE,CAAC,GAAG,mBAAmB,CAAC;oBAC/C,0BAA0B,EAAE,gBAAgB;iBAC7C,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,eAA8C,CAAC;YACnE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAC1B,MAAM,CAAC,qBAAqB,IAAI,CAAC,EACjC,MAAM,CAAC,oBAAoB,IAAI,CAAC,EAChC,MAAM,CAAC,qBAAqB,IAAI,CAAC,CAClC,CAAC;YAEF,MAAM,QAAQ,GAAG,WAAW,CAAC;YAC7B,MAAM,UAAU,GAAG,aAAa,CAAC;YAEjC,IAAI,WAAW,GAAG,WAAW,EAAE,CAAC;gBAC9B,WAAW,GAAG,WAAW,CAAC;YAC5B,CAAC;YAED,0CAA0C;YAC1C,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAChC,aAAa,GAAG,QAAQ,CAAC;YAC3B,CAAC;iBAAM,IACL,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC;gBAC3D,MAAM,CAAC,WAAW,KAAK,KAAK;gBAC5B,aAAa,KAAK,QAAQ,EAC1B,CAAC;gBACD,aAAa,GAAG,SAAS,CAAC;YAC5B,CAAC;YAED,sBAAsB;YACtB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,mBAAmB,GAAG,kBAAkB,CAAC,mBAAmB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACpF,CAAC;YAED,oCAAoC;YACpC,IAAI,MAAM,CAAC,wBAAwB,KAAK,KAAK,EAAE,CAAC;gBAC9C,gBAAgB,GAAG,IAAI,CAAC;YAC1B,CAAC;YAED,MAAM,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;YAC3C,MAAM,aAAa,GAAG,aAAa,KAAK,UAAU,CAAC;YAEnD,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;gBACtB,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,MAAM;gBAChB,IAAI,EACF,SAAS,MAAM,MAAM,IAAI,CAAC,IAAI,KAAK;oBACnC,iBAAiB,WAAW,QAAQ;oBACpC,aAAa,MAAM,CAAC,qBAAqB,aAAa,MAAM,CAAC,oBAAoB,cAAc,MAAM,CAAC,qBAAqB,KAAK;oBAChI,eAAe,MAAM,CAAC,WAAW,IAAI,OAAO,IAAI;oBAChD,4BAA4B,MAAM,CAAC,wBAAwB,IAAI,sBAAsB,IAAI;oBACzF,CAAC,WAAW,CAAC,CAAC,CAAC,6BAA6B,WAAW,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,CAAC,aAAa,CAAC,CAAC,CAAC,sBAAsB,aAAa,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/D,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,wBAAwB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,sBAAsB,EAAE,WAAW;gBACnC,eAAe,EAAE,aAAa;gBAC9B,qBAAqB,EAAE,CAAC,GAAG,mBAAmB,CAAC;gBAC/C,0BAA0B,EAAE,gBAAgB;aAC7C,CAAC,CAAC;QACL,CAAC;QAED,gCAAgC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;QACrF,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;QACnF,MAAM,YAAY,GAAG,SAAS,IAAI,YAAY,CAAC;QAE/C,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,WAAW,CAAC;YAC7B,MAAM,YAAY,GAAG,YAAY,CAAC,aAAa,CAAC;YAChD,MAAM,oBAAoB,GAAG,YAAY,CAAC,YAAY,IAAI,EAAE,CAAC;YAE7D,IAAI,YAAY,GAAG,WAAW,EAAE,CAAC;gBAC/B,WAAW,GAAG,YAAY,CAAC;gBAC3B,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;oBAC/B,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC;gBACtC,CAAC;YACH,CAAC;iBAAM,IAAI,YAAY,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC5C,aAAa,GAAG,QAAQ,CAAC;YAC3B,CAAC;YAED,mBAAmB,GAAG,kBAAkB,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;YAEpF,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS;gBACtC,CAAC,CAAC,2BAA2B,YAAY,CAAC,SAAS,IAAI;gBACvD,CAAC,CAAC,yCAAyC,CAAC;YAE9C,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;gBACtB,MAAM,EAAE,eAAe;gBACvB,QAAQ,EAAE,YAAY,CAAC,MAAM;gBAC7B,IAAI,EACF,iBAAiB,YAAY,CAAC,MAAM,iBAAiB,QAAQ,gBAAgB,UAAU,KAAK,SAAS,IAAI;oBACzG,iBAAiB,YAAY,YAAY,YAAY,CAAC,MAAM,IAAI;oBAChE,iBAAiB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;oBACrD,CAAC,YAAY,GAAG,QAAQ;wBACtB,CAAC,CAAC,iCAAiC,QAAQ,OAAO,WAAW,SAAS;wBACtE,CAAC,CAAC,eAAe,QAAQ,iCAAiC,YAAY,+BAA+B,CAAC;oBACxG,8BAA8B,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAClE,sBAAsB,EAAE,WAAW;gBACnC,eAAe,EAAE,aAAa;gBAC9B,qBAAqB,EAAE,CAAC,GAAG,mBAAmB,CAAC;gBAC/C,0BAA0B,EAAE,gBAAgB;aAC7C,CAAC,CAAC;QACL,CAAC;QAED,uEAAuE;QACvE,IAAI,QAA2B,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,sEAAsE;YACtE,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IAED,4EAA4E;IAC5E,eAAe;IACf,4EAA4E;IAE5E;;;;;;;;;;OAUG;IACH,UAAU,CACR,QAAgB,EAChB,UAAkB,EAClB,WAAqB;QAErB,sDAAsD;QACtD,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,cAAc,CAAkC,CAAC;QAC/E,MAAM,OAAO,GAAqF,EAAE,CAAC;QAErG,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC5B,QAAQ;oBACR,UAAU;oBACV,SAAS,EAAE,EAAE;oBACb,WAAW;iBACZ,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAAY,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,mCAAmC;IACnC,4EAA4E;IAE5E;;;OAGG;IACK,qBAAqB,CAAC,IAAoB;QAChD,MAAM,CAAC,GAAG,IAAI,CAAC,eAA8C,CAAC;QAC9D,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,gDAAyB,CAAC,IAAI,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAC7E,CAAC;QAED,IACE,CAAC,CAAC,qBAAqB,KAAK,SAAS;YACrC,CAAC,OAAO,CAAC,CAAC,qBAAqB,KAAK,QAAQ,IAAI,CAAC,CAAC,qBAAqB,GAAG,CAAC,CAAC,EAC5E,CAAC;YACD,MAAM,IAAI,gDAAyB,CACjC,IAAI,CAAC,EAAE,EACP,4DAA4D,CAAC,CAAC,qBAAqB,EAAE,CACtF,CAAC;QACJ,CAAC;QAED,IACE,CAAC,CAAC,oBAAoB,KAAK,SAAS;YACpC,CAAC,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ,IAAI,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,EAC1E,CAAC;YACD,MAAM,IAAI,gDAAyB,CACjC,IAAI,CAAC,EAAE,EACP,2DAA2D,CAAC,CAAC,oBAAoB,EAAE,CACpF,CAAC;QACJ,CAAC;QAED,IACE,CAAC,CAAC,qBAAqB,KAAK,SAAS;YACrC,CAAC,OAAO,CAAC,CAAC,qBAAqB,KAAK,QAAQ,IAAI,CAAC,CAAC,qBAAqB,GAAG,CAAC,CAAC,EAC5E,CAAC;YACD,MAAM,IAAI,gDAAyB,CACjC,IAAI,CAAC,EAAE,EACP,4DAA4D,CAAC,CAAC,qBAAqB,EAAE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAnkBD,oCAmkBC"}