@jazzmind/busibox-app 3.0.18

package/dist/lib/authz/audit.js

@@ -0,0 +1,518 @@
+/**
+ * Audit Client for busibox-app
+ *
+ * Centralized audit logging client that writes to the authz service.
+ * All Busibox applications should use this client for audit logging.
+ *
+ * Usage:
+ * ```typescript
+ * import { logAuditEvent, logUserLogin } from 'busibox-app';
+ *
+ * await logAuditEvent({
+ *   actorId: 'user-123',
+ *   action: 'document.upload',
+ *   resourceType: 'document',
+ *   resourceId: 'doc-456',
+ *   details: { filename: 'report.pdf' },
+ * });
+ * ```
+ */
+const DEFAULT_AUTHZ_URL = process.env.AUTHZ_BASE_URL || process.env.AUTHZ_URL || 'http://authz-api:8010';
+/**
+ * Get authorization header for audit API calls.
+ * Zero Trust: Uses access token (JWT) for authentication.
+ */
+async function getAuthHeader(options) {
+    // Zero Trust: Access token (JWT) takes precedence
+    if (options.accessToken) {
+        return `Bearer ${options.accessToken}`;
+    }
+    // Server-side: use custom token acquisition
+    if (options.getAuthzToken && options.userId) {
+        const token = await options.getAuthzToken(options.userId, 'authz', []);
+        return `Bearer ${token}`;
+    }
+    // No authentication provided (authz audit endpoint may allow unauthenticated writes)
+    return undefined;
+}
+/**
+ * Write audit event to authz service
+ *
+ * @param event - Audit event parameters
+ * @param options - Client options (optional tokenManager for user context)
+ */
+export async function logAuditEvent(event, options = {}) {
+    const baseUrl = options.authzUrl || DEFAULT_AUTHZ_URL;
+    try {
+        const headers = {
+            'Content-Type': 'application/json',
+        };
+        // Add authorization if available
+        const authHeader = await getAuthHeader(options);
+        if (authHeader) {
+            headers['Authorization'] = authHeader;
+        }
+        const response = await fetch(`${baseUrl}/audit/log`, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({
+                actor_id: event.actorId,
+                action: event.action,
+                resource_type: event.resourceType,
+                resource_id: event.resourceId,
+                details: event.details,
+            }),
+        });
+        if (!response.ok) {
+            const errorText = await response.text().catch(() => 'Unknown error');
+            console.error('[AUDIT] Failed to write audit log:', response.status, errorText);
+        }
+    }
+    catch (error) {
+        // Don't throw - audit logging shouldn't break the app
+        console.error('[AUDIT] Failed to write audit log:', error);
+    }
+}
+// ============================================================================
+// Convenience Functions for Common Events
+// ============================================================================
+/**
+ * Log a successful user login
+ */
+export async function logUserLogin(userId, sessionId, options) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'user.login',
+        resourceType: 'session',
+        resourceId: sessionId,
+        details: { method: options?.method || 'magic_link' },
+    }, options);
+}
+/**
+ * Log a user logout
+ */
+export async function logUserLogout(userId, sessionId, options) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'user.logout',
+        resourceType: 'session',
+        resourceId: sessionId,
+    }, options);
+}
+/**
+ * Log a failed login attempt
+ */
+export async function logLoginFailed(email, reason, options) {
+    return logAuditEvent({
+        actorId: 'system',
+        action: 'user.login.failed',
+        resourceType: 'user',
+        details: { email, reason },
+    }, options);
+}
+/**
+ * Log a password reset request
+ */
+export async function logPasswordResetRequest(userId, options) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'user.password_reset.requested',
+        resourceType: 'user',
+        resourceId: userId,
+    }, options);
+}
+/**
+ * Log a password reset completion
+ */
+export async function logPasswordReset(userId, options) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'user.password_reset.completed',
+        resourceType: 'user',
+        resourceId: userId,
+    }, options);
+}
+/**
+ * Log role assignment
+ */
+export async function logRoleAssigned(actorId, targetUserId, roleId, roleName, options) {
+    return logAuditEvent({
+        actorId,
+        action: 'role.assigned',
+        resourceType: 'user_role',
+        resourceId: targetUserId,
+        details: { roleId, roleName, targetUserId },
+    }, options);
+}
+/**
+ * Log role removal
+ */
+export async function logRoleRemoved(actorId, targetUserId, roleId, roleName, options) {
+    return logAuditEvent({
+        actorId,
+        action: 'role.removed',
+        resourceType: 'user_role',
+        resourceId: targetUserId,
+        details: { roleId, roleName, targetUserId },
+    }, options);
+}
+/**
+ * Log user creation
+ */
+export async function logUserCreated(actorId, targetUserId, email, options) {
+    return logAuditEvent({
+        actorId,
+        action: 'user.created',
+        resourceType: 'user',
+        resourceId: targetUserId,
+        details: { email },
+    }, options);
+}
+/**
+ * Log user deletion
+ */
+export async function logUserDeleted(actorId, targetUserId, email, options) {
+    return logAuditEvent({
+        actorId,
+        action: 'user.deleted',
+        resourceType: 'user',
+        resourceId: targetUserId,
+        details: { email },
+    }, options);
+}
+/**
+ * Log user status change
+ */
+export async function logUserStatusChanged(actorId, targetUserId, oldStatus, newStatus, options) {
+    return logAuditEvent({
+        actorId,
+        action: 'user.status_changed',
+        resourceType: 'user',
+        resourceId: targetUserId,
+        details: { oldStatus, newStatus },
+    }, options);
+}
+/**
+ * Log document upload
+ */
+export async function logDocumentUploaded(userId, documentId, filename, options) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'document.uploaded',
+        resourceType: 'document',
+        resourceId: documentId,
+        details: { filename },
+    }, options);
+}
+/**
+ * Log document deletion
+ */
+export async function logDocumentDeleted(userId, documentId, filename, options) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'document.deleted',
+        resourceType: 'document',
+        resourceId: documentId,
+        details: { filename },
+    }, options);
+}
+/**
+ * Log document access
+ */
+export async function logDocumentAccessed(userId, documentId, filename, options) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'document.accessed',
+        resourceType: 'document',
+        resourceId: documentId,
+        details: { filename },
+    }, options);
+}
+/**
+ * Log configuration change
+ */
+export async function logConfigChanged(actorId, configKey, oldValue, newValue, options) {
+    return logAuditEvent({
+        actorId,
+        action: 'config.changed',
+        resourceType: 'configuration',
+        resourceId: configKey,
+        details: { configKey, oldValue, newValue },
+    }, options);
+}
+/**
+ * Log API key generation
+ */
+export async function logApiKeyGenerated(userId, keyId, keyName, options) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'api_key.generated',
+        resourceType: 'api_key',
+        resourceId: keyId,
+        details: { keyName },
+    }, options);
+}
+/**
+ * Log API key revocation
+ */
+export async function logApiKeyRevoked(userId, keyId, keyName, options) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'api_key.revoked',
+        resourceType: 'api_key',
+        resourceId: keyId,
+        details: { keyName },
+    }, options);
+}
+// ============================================================================
+// App Management Audit Functions
+// ============================================================================
+export async function logAppRegistered(appId, appName, actorId, options = {}) {
+    return logAuditEvent({
+        actorId,
+        action: 'app.registered',
+        resourceType: 'app',
+        resourceId: appId,
+        details: { appName },
+    }, options);
+}
+export async function logAppUpdated(appId, appName, actorId, updates, options = {}) {
+    return logAuditEvent({
+        actorId,
+        action: 'app.updated',
+        resourceType: 'app',
+        resourceId: appId,
+        details: { appName, updates },
+    }, options);
+}
+export async function logAppDeleted(appId, appName, actorId, options = {}) {
+    return logAuditEvent({
+        actorId,
+        action: 'app.deleted',
+        resourceType: 'app',
+        resourceId: appId,
+        details: { appName },
+    }, options);
+}
+// ============================================================================
+// Magic Link & TOTP Audit Functions
+// ============================================================================
+export async function logMagicLinkSent(email, userId, options = {}) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'magic_link.sent',
+        resourceType: 'auth',
+        resourceId: userId,
+        details: { email },
+    }, options);
+}
+export async function logMagicLinkUsed(userId, email, options = {}) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'magic_link.used',
+        resourceType: 'auth',
+        resourceId: userId,
+        details: { email },
+    }, options);
+}
+export async function logMagicLinkExpired(email, options = {}) {
+    return logAuditEvent({
+        actorId: 'system',
+        action: 'magic_link.expired',
+        resourceType: 'auth',
+        details: { email },
+    }, options);
+}
+export async function logTotpCodeSent(email, userId, options = {}) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'totp.code_sent',
+        resourceType: 'auth',
+        resourceId: userId,
+        details: { email },
+    }, options);
+}
+export async function logTotpCodeUsed(userId, email, options = {}) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'totp.code_used',
+        resourceType: 'auth',
+        resourceId: userId,
+        details: { email },
+    }, options);
+}
+export async function logTotpCodeFailed(email, reason, options = {}) {
+    return logAuditEvent({
+        actorId: 'system',
+        action: 'totp.code_failed',
+        resourceType: 'auth',
+        details: { email, reason },
+    }, options);
+}
+// ============================================================================
+// Passkey (WebAuthn) Audit Functions
+// ============================================================================
+export async function logPasskeyRegistered(userId, email, options = {}) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'passkey.registered',
+        resourceType: 'passkey',
+        resourceId: userId,
+        details: { email },
+    }, options);
+}
+export async function logPasskeyRemoved(userId, passkeyId, passkeyName, options = {}) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'passkey.removed',
+        resourceType: 'passkey',
+        resourceId: passkeyId,
+        details: { userId, passkeyName },
+    }, options);
+}
+export async function logPasskeyLogin(userId, passkeyId, sessionId, ipAddress, userAgent, options = {}) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'passkey.login',
+        resourceType: 'session',
+        resourceId: sessionId,
+        details: { userId, passkeyId, ipAddress, userAgent },
+    }, options);
+}
+export async function logPasskeyLoginFailed(email, reason, ipAddress, userAgent, options = {}) {
+    return logAuditEvent({
+        actorId: 'system',
+        action: 'passkey.login_failed',
+        resourceType: 'auth',
+        details: { email, reason, ipAddress, userAgent },
+    }, options);
+}
+// ============================================================================
+// OAuth Audit Functions
+// ============================================================================
+export async function logOAuthTokenGenerated(userId, clientId, options = {}) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'oauth.token_generated',
+        resourceType: 'oauth_token',
+        details: { clientId },
+    }, options);
+}
+export async function logOAuthTokenValidated(userId, clientId, options = {}) {
+    return logAuditEvent({
+        actorId: userId,
+        action: 'oauth.token_validated',
+        resourceType: 'oauth_token',
+        details: { clientId },
+    }, options);
+}
+export async function logOAuthTokenRejected(clientId, reason, options = {}) {
+    return logAuditEvent({
+        actorId: 'system',
+        action: 'oauth.token_rejected',
+        resourceType: 'oauth_token',
+        details: { clientId, reason },
+    }, options);
+}
+// ============================================================================
+// Role & Permission Audit Functions
+// ============================================================================
+export async function logRoleCreated(roleId, roleName, actorId, options = {}) {
+    return logAuditEvent({
+        actorId,
+        action: 'role.created',
+        resourceType: 'role',
+        resourceId: roleId,
+        details: { roleName },
+    }, options);
+}
+export async function logRoleUpdated(roleId, roleName, actorId, updates, options = {}) {
+    return logAuditEvent({
+        actorId,
+        action: 'role.updated',
+        resourceType: 'role',
+        resourceId: roleId,
+        details: { roleName, updates },
+    }, options);
+}
+export async function logRoleDeleted(roleId, roleName, actorId, options = {}) {
+    return logAuditEvent({
+        actorId,
+        action: 'role.deleted',
+        resourceType: 'role',
+        resourceId: roleId,
+        details: { roleName },
+    }, options);
+}
+export async function logPermissionGranted(roleId, roleName, appId, appName, actorId, options = {}) {
+    return logAuditEvent({
+        actorId,
+        action: 'permission.granted',
+        resourceType: 'permission',
+        resourceId: `${roleId}:${appId}`,
+        details: { roleId, roleName, appId, appName },
+    }, options);
+}
+export async function logPermissionRevoked(roleId, roleName, appId, appName, actorId, options = {}) {
+    return logAuditEvent({
+        actorId,
+        action: 'permission.revoked',
+        resourceType: 'permission',
+        resourceId: `${roleId}:${appId}`,
+        details: { roleId, roleName, appId, appName },
+    }, options);
+}
+// ============================================================================
+// User Status Audit Functions
+// ============================================================================
+export async function logUserActivated(userId, email, actorId, options = {}) {
+    return logAuditEvent({
+        actorId: actorId || userId,
+        action: 'user.activated',
+        resourceType: 'user',
+        resourceId: userId,
+        details: { email },
+    }, options);
+}
+export async function logUserDeactivated(userId, email, actorId, options = {}) {
+    return logAuditEvent({
+        actorId,
+        action: 'user.deactivated',
+        resourceType: 'user',
+        resourceId: userId,
+        details: { email },
+    }, options);
+}
+/**
+ * Log a security or audit event
+ *
+ * This function provides backward compatibility with the old Prisma-based
+ * audit logging. It now writes directly to the authz service.
+ *
+ * @param params - Audit log parameters
+ */
+export async function logEvent(params) {
+    try {
+        await logAuditEvent({
+            actorId: params.userId || 'system',
+            action: params.action,
+            resourceType: params.eventType,
+            resourceId: params.targetUserId || params.targetRoleId || params.targetAppId || undefined,
+            details: {
+                ...params.details,
+                targetUserId: params.targetUserId,
+                targetRoleId: params.targetRoleId,
+                targetAppId: params.targetAppId,
+                ipAddress: params.ipAddress,
+                userAgent: params.userAgent,
+                success: params.success ?? true,
+                errorMessage: params.errorMessage,
+            },
+        });
+    }
+    catch (error) {
+        // Log to console if write fails (don't throw - audit logging shouldn't break the app)
+        console.error('[AUDIT] Failed to write audit log:', error);
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/lib/authz/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/lib/authz/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,uBAAuB,CAAC;AA0BzG;;;GAGG;AACH,KAAK,UAAU,aAAa,CAAC,OAA2B;IACtD,kDAAkD;IAClD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,UAAU,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC;IAED,4CAA4C;IAC5C,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO,UAAU,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,qFAAqF;IACrF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAuB,EACvB,UAA8B,EAAE;IAEhC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IAEtD,IAAI,CAAC;QACH,MAAM,OAAO,GAAgB;YAC3B,cAAc,EAAE,kBAAkB;SACnC,CAAC;QAEF,iCAAiC;QACjC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC;QACxC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,YAAY,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,QAAQ,EAAE,KAAK,CAAC,OAAO;gBACvB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,aAAa,EAAE,KAAK,CAAC,YAAY;gBACjC,WAAW,EAAE,KAAK,CAAC,UAAU;gBAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAC;YACrE,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sDAAsD;QACtD,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,0CAA0C;AAC1C,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,SAAiB,EACjB,OAAkD;IAElD,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,YAAY;QACpB,YAAY,EAAE,SAAS;QACvB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE;KACrD,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,SAAiB,EACjB,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,aAAa;QACrB,YAAY,EAAE,SAAS;QACvB,UAAU,EAAE,SAAS;KACtB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,MAAc,EACd,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,mBAAmB;QAC3B,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;KAC3B,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,+BAA+B;QACvC,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,MAAM;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,+BAA+B;QACvC,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,MAAM;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,YAAoB,EACpB,MAAc,EACd,QAAgB,EAChB,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,eAAe;QACvB,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;KAC5C,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,YAAoB,EACpB,MAAc,EACd,QAAgB,EAChB,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,cAAc;QACtB,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;KAC5C,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,YAAoB,EACpB,KAAa,EACb,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,cAAc;QACtB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,YAAoB,EACpB,KAAa,EACb,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,cAAc;QACtB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAe,EACf,YAAoB,EACpB,SAAiB,EACjB,SAAiB,EACjB,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,qBAAqB;QAC7B,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;KAClC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,UAAkB,EAClB,QAAgB,EAChB,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,mBAAmB;QAC3B,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,EAAE,QAAQ,EAAE;KACtB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,UAAkB,EAClB,QAAgB,EAChB,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,kBAAkB;QAC1B,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,EAAE,QAAQ,EAAE;KACtB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,UAAkB,EAClB,QAAgB,EAChB,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,mBAAmB;QAC3B,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,EAAE,QAAQ,EAAE;KACtB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,SAAiB,EACjB,QAAiB,EACjB,QAAiB,EACjB,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,gBAAgB;QACxB,YAAY,EAAE,eAAe;QAC7B,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE;KAC3C,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,KAAa,EACb,OAAe,EACf,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,mBAAmB;QAC3B,YAAY,EAAE,SAAS;QACvB,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,EAAE,OAAO,EAAE;KACrB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,KAAa,EACb,OAAe,EACf,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,iBAAiB;QACzB,YAAY,EAAE,SAAS;QACvB,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,EAAE,OAAO,EAAE;KACrB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,OAAe,EACf,OAAe,EACf,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,gBAAgB;QACxB,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,EAAE,OAAO,EAAE;KACrB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAa,EACb,OAAe,EACf,OAAe,EACf,OAAiC,EACjC,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,aAAa;QACrB,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;KAC9B,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAa,EACb,OAAe,EACf,OAAe,EACf,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,aAAa;QACrB,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,EAAE,OAAO,EAAE;KACrB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,MAAc,EACd,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,iBAAiB;QACzB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,KAAa,EACb,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,iBAAiB;QACzB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,oBAAoB;QAC5B,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,MAAc,EACd,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,gBAAgB;QACxB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,KAAa,EACb,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,gBAAgB;QACxB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,MAAc,EACd,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,kBAAkB;QAC1B,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;KAC3B,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,qCAAqC;AACrC,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,KAAa,EACb,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,oBAAoB;QAC5B,YAAY,EAAE,SAAS;QACvB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,SAAiB,EACjB,WAAoB,EACpB,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,iBAAiB;QACzB,YAAY,EAAE,SAAS;QACvB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;KACjC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,SAAiB,EACjB,SAAiB,EACjB,SAAkB,EAClB,SAAkB,EAClB,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,eAAe;QACvB,YAAY,EAAE,SAAS;QACvB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;KACrD,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAa,EACb,MAAc,EACd,SAAkB,EAClB,SAAkB,EAClB,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,sBAAsB;QAC9B,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE;KACjD,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,QAAgB,EAChB,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,uBAAuB;QAC/B,YAAY,EAAE,aAAa;QAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE;KACtB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,QAAgB,EAChB,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,uBAAuB;QAC/B,YAAY,EAAE,aAAa;QAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE;KACtB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAgB,EAChB,MAAc,EACd,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,sBAAsB;QAC9B,YAAY,EAAE,aAAa;QAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;KAC9B,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,QAAgB,EAChB,OAAe,EACf,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,cAAc;QACtB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,QAAQ,EAAE;KACtB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,QAAgB,EAChB,OAAe,EACf,OAAiC,EACjC,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,cAAc;QACtB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;KAC/B,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,QAAgB,EAChB,OAAe,EACf,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,cAAc;QACtB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,QAAQ,EAAE;KACtB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,QAAgB,EAChB,KAAa,EACb,OAAe,EACf,OAAe,EACf,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,oBAAoB;QAC5B,YAAY,EAAE,YAAY;QAC1B,UAAU,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE;QAChC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;KAC9C,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,QAAgB,EAChB,KAAa,EACb,OAAe,EACf,OAAe,EACf,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,oBAAoB;QAC5B,YAAY,EAAE,YAAY;QAC1B,UAAU,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE;QAChC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;KAC9C,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,KAAa,EACb,OAAgB,EAChB,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,OAAO,IAAI,MAAM;QAC1B,MAAM,EAAE,gBAAgB;QACxB,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,KAAa,EACb,OAAe,EACf,UAA8B,EAAE;IAEhC,OAAO,aAAa,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,kBAAkB;QAC1B,YAAY,EAAE,MAAM;QACpB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAqED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAsB;IACnD,IAAI,CAAC;QACH,MAAM,aAAa,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,QAAQ;YAClC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,SAAS;YAC9B,UAAU,EAAE,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,WAAW,IAAI,SAAS;YACzF,OAAO,EAAE;gBACP,GAAG,MAAM,CAAC,OAAO;gBACjB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;gBAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sFAAsF;QACtF,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC"}