@od-oneapp/ai-platform 0.1.0

package/dist/audit-logger-CHIP8bRO.mjs

@@ -0,0 +1,596 @@
+import { n as hashInput, t as generateSignature } from "./crypto-8ABhc3TD.mjs";
+import { z } from "zod";
+import { logInfo, logWarn } from "@od-oneapp/shared/logs";
+
+//#region src/governance/versioning/index.ts
+/**
+* Version Control & Configuration Management
+*
+* Manages versioning for AI platform configurations, policies, and schemas.
+* Enables tracking configuration changes, compatibility checking, and migration.
+*
+* @module @od-oneapp/ai-platform/governance/versioning
+*
+* @example
+* ```typescript
+* import {
+*   createVersionRegistry,
+*   getCurrentVersion,
+*   isVersionCompatible,
+*   migrateConfig
+* } from '@od-oneapp/ai-platform/governance/versioning';
+*
+* // Get current platform version
+* const version = getCurrentVersion();
+*
+* // Check compatibility
+* if (isVersionCompatible(config.version, version)) {
+*   // Config is compatible
+* } else {
+*   // Migrate config
+*   const migrated = migrateConfig(config, version);
+* }
+* ```
+*/
+/** Current policy version - increment when making breaking changes */
+const POLICY_VERSION = "2.0.0";
+/** Current schema version for configurations */
+const SCHEMA_VERSION = "1.0.0";
+/** Platform version (synced with package.json) */
+const PLATFORM_VERSION = "1.0.0";
+/**
+* Create a version registry for tracking and managing versions.
+*
+* @example
+* ```typescript
+* const registry = createVersionRegistry();
+*
+* registry.registerVersion({
+*   version: '1.0.0',
+*   releasedAt: new Date('2024-01-01'),
+*   deprecated: false,
+*   features: ['Initial release']
+* });
+*
+* registry.registerVersion({
+*   version: '2.0.0',
+*   releasedAt: new Date('2024-06-01'),
+*   deprecated: false,
+*   breakingChanges: ['Changed policy schema']
+* });
+*
+* registry.registerMigration({
+*   fromVersion: '1.0.0',
+*   toVersion: '2.0.0',
+*   migrate: (config) => ({ ...config, newField: 'default' })
+* });
+* ```
+*/
+function createVersionRegistry(config = {}) {
+	const versions = /* @__PURE__ */ new Map();
+	const migrations = /* @__PURE__ */ new Map();
+	for (const version of config.versions ?? []) versions.set(version.version, version);
+	for (const migration of config.migrations ?? []) {
+		const key = `${migration.fromVersion}->${migration.toVersion}`;
+		migrations.set(key, migration);
+	}
+	function registerVersion(metadata) {
+		versions.set(metadata.version, metadata);
+	}
+	function getVersion(version) {
+		return versions.get(version);
+	}
+	function getAllVersions() {
+		return Array.from(versions.values()).sort((a, b) => compareVersions(a.version, b.version));
+	}
+	function getLatestVersion() {
+		const all = getAllVersions();
+		return all[all.length - 1];
+	}
+	function deprecateVersion(version, migrateToVersion) {
+		const metadata = versions.get(version);
+		if (metadata) {
+			metadata.deprecated = true;
+			metadata.migrateToVersion = migrateToVersion;
+		}
+	}
+	function hasVersion(version) {
+		return versions.has(version);
+	}
+	function registerMigration(migration) {
+		const key = `${migration.fromVersion}->${migration.toVersion}`;
+		migrations.set(key, migration);
+	}
+	function getMigrationPath(fromVersion, toVersion) {
+		const path = [];
+		const visited = /* @__PURE__ */ new Set();
+		const queue = [{
+			version: fromVersion,
+			path: []
+		}];
+		while (queue.length > 0) {
+			const item = queue.shift();
+			if (!item) break;
+			const { version, path: currentPath } = item;
+			if (version === toVersion) return currentPath;
+			if (visited.has(version)) continue;
+			visited.add(version);
+			for (const migration of migrations.values()) if (migration.fromVersion === version && !visited.has(migration.toVersion)) queue.push({
+				version: migration.toVersion,
+				path: [...currentPath, migration]
+			});
+		}
+		return path;
+	}
+	function migrate(config, fromVersion, toVersion) {
+		if (fromVersion === toVersion) return config;
+		const path = getMigrationPath(fromVersion, toVersion);
+		if (path.length === 0) throw new Error(`No migration path from ${fromVersion} to ${toVersion}`);
+		let result = config;
+		for (const migration of path) result = migration.migrate(result);
+		return result;
+	}
+	return {
+		registerVersion,
+		getVersion,
+		getAllVersions,
+		getLatestVersion,
+		deprecateVersion,
+		hasVersion,
+		registerMigration,
+		getMigrationPath,
+		migrate
+	};
+}
+/**
+* Parse a semantic version string.
+*
+* @example
+* ```typescript
+* const { major, minor, patch } = parseVersion('2.1.3');
+* // { major: 2, minor: 1, patch: 3 }
+* ```
+*/
+function parseVersion(version) {
+	const match = version.match(/^(\d+)\.(\d+)\.(\d+)/);
+	if (!match) throw new Error(`Invalid version format: ${version}`);
+	const major = match[1];
+	const minor = match[2];
+	const patch = match[3];
+	if (!major || !minor || !patch) throw new Error(`Invalid version format: ${version}`);
+	return {
+		major: parseInt(major, 10),
+		minor: parseInt(minor, 10),
+		patch: parseInt(patch, 10)
+	};
+}
+/**
+* Compare two version strings.
+* Returns negative if a < b, positive if a > b, 0 if equal.
+*
+* @example
+* ```typescript
+* compareVersions('1.0.0', '2.0.0'); // -1
+* compareVersions('2.0.0', '1.0.0'); // 1
+* compareVersions('1.0.0', '1.0.0'); // 0
+* ```
+*/
+function compareVersions(a, b) {
+	const versionA = parseVersion(a);
+	const versionB = parseVersion(b);
+	if (versionA.major !== versionB.major) return versionA.major - versionB.major;
+	if (versionA.minor !== versionB.minor) return versionA.minor - versionB.minor;
+	return versionA.patch - versionB.patch;
+}
+/**
+* Check if two versions are compatible (same major version).
+*
+* @example
+* ```typescript
+* isVersionCompatible('1.0.0', '1.5.0'); // true
+* isVersionCompatible('1.0.0', '2.0.0'); // false
+* ```
+*/
+function isVersionCompatible(configVersion, targetVersion) {
+	const config = parseVersion(configVersion);
+	const target = parseVersion(targetVersion);
+	return config.major === target.major;
+}
+/**
+* Check if a version satisfies a version range.
+*
+* @example
+* ```typescript
+* satisfiesRange('1.5.0', '>=1.0.0'); // true
+* satisfiesRange('2.0.0', '<2.0.0'); // false
+* satisfiesRange('1.5.0', '>=1.0.0 <2.0.0'); // true
+* ```
+*/
+function satisfiesRange(version, range) {
+	parseVersion(version);
+	const conditions = range.split(/\s+/).filter((c) => c.length > 0);
+	for (const condition of conditions) {
+		const trimmed = condition.trim();
+		const operator = trimmed.startsWith(">=") || trimmed.startsWith("<=") ? trimmed.slice(0, 2) : trimmed.startsWith(">") || trimmed.startsWith("<") || trimmed.startsWith("=") ? trimmed.slice(0, 1) : "=";
+		const targetVersion = trimmed.slice(operator.length);
+		if (!targetVersion) continue;
+		const cmp = compareVersions(version, targetVersion);
+		switch (operator) {
+			case ">=":
+				if (cmp < 0) return false;
+				break;
+			case ">":
+				if (cmp <= 0) return false;
+				break;
+			case "<=":
+				if (cmp > 0) return false;
+				break;
+			case "<":
+				if (cmp >= 0) return false;
+				break;
+			case "=":
+				if (cmp !== 0) return false;
+				break;
+		}
+	}
+	return true;
+}
+/**
+* Get the current platform version.
+*/
+function getCurrentVersion() {
+	return PLATFORM_VERSION;
+}
+/**
+* Get the current policy version.
+*/
+function getCurrentPolicyVersion() {
+	return POLICY_VERSION;
+}
+/**
+* Get the current schema version.
+*/
+function getCurrentSchemaVersion() {
+	return SCHEMA_VERSION;
+}
+/**
+* Create a versioned configuration wrapper.
+*
+* @example
+* ```typescript
+* const config = createVersionedConfig(
+*   { apiKey: 'xxx', timeout: 5000 },
+*   '1.0.0'
+* );
+* ```
+*/
+function createVersionedConfig(data, schemaVersion = SCHEMA_VERSION) {
+	const now = /* @__PURE__ */ new Date();
+	return {
+		schemaVersion,
+		data,
+		createdAt: now,
+		updatedAt: now,
+		hash: computeConfigHash(data)
+	};
+}
+/**
+* Update a versioned configuration.
+*
+* @example
+* ```typescript
+* const updated = updateVersionedConfig(config, { timeout: 10000 });
+* ```
+*/
+function updateVersionedConfig(config, updates) {
+	const data = {
+		...config.data,
+		...updates
+	};
+	return {
+		...config,
+		data,
+		updatedAt: /* @__PURE__ */ new Date(),
+		hash: computeConfigHash(data)
+	};
+}
+/**
+* Migrate a versioned configuration to a new schema version.
+*
+* @example
+* ```typescript
+* const registry = createVersionRegistry();
+* const migrated = migrateVersionedConfig(config, '2.0.0', registry);
+* ```
+*/
+function migrateVersionedConfig(config, targetVersion, registry) {
+	if (config.schemaVersion === targetVersion) return config;
+	const migratedData = registry.migrate(config.data, config.schemaVersion, targetVersion);
+	return {
+		...config,
+		schemaVersion: targetVersion,
+		data: migratedData,
+		updatedAt: /* @__PURE__ */ new Date(),
+		hash: computeConfigHash(migratedData)
+	};
+}
+/**
+* Validate a versioned configuration integrity.
+*/
+function validateConfigIntegrity(config) {
+	if (!config.hash) return true;
+	return config.hash === computeConfigHash(config.data);
+}
+/** Default version registry with platform versions */
+const defaultRegistry = createVersionRegistry({
+	versions: [{
+		version: "1.0.0",
+		releasedAt: /* @__PURE__ */ new Date("2024-01-01"),
+		deprecated: false,
+		features: [
+			"Initial release",
+			"Basic policy support",
+			"ABAC compliance"
+		]
+	}, {
+		version: "2.0.0",
+		releasedAt: /* @__PURE__ */ new Date("2024-06-01"),
+		deprecated: false,
+		breakingChanges: ["New policy schema", "Updated compliance validators"],
+		features: [
+			"Advanced guardrails",
+			"Adaptive caching",
+			"Multi-tenant support"
+		]
+	}],
+	migrations: [{
+		fromVersion: "1.0.0",
+		toVersion: "2.0.0",
+		description: "Migrate from v1 to v2 schema",
+		migrate: (config) => {
+			return {
+				...config,
+				policyVersion: "2.0.0",
+				migratedAt: (/* @__PURE__ */ new Date()).toISOString()
+			};
+		}
+	}]
+});
+function computeConfigHash(data) {
+	const str = JSON.stringify(data, Object.keys(data).sort());
+	let hash = 0;
+	for (let i = 0; i < str.length; i++) {
+		const char = str.charCodeAt(i);
+		hash = (hash << 5) - hash + char;
+		hash = hash & hash;
+	}
+	return Math.abs(hash).toString(16).padStart(8, "0");
+}
+
+//#endregion
+//#region src/governance/audit/audit-schema.ts
+/**
+* @fileoverview Audit entry schemas and validation
+* Audit entry schemas and validation
+* Ensures structured, machine-readable audit logs for FDA/SOC2
+*/
+/**
+* Audit action types
+*/
+const AuditActionSchema = z.enum([
+	"generation",
+	"generative_ui",
+	"tool_call",
+	"redaction",
+	"policy_check",
+	"abac_decision",
+	"approval_request",
+	"approval_granted",
+	"approval_denied"
+]);
+/**
+* ABAC decision schema
+*/
+const ABACDecisionSchema = z.object({
+	allowed: z.boolean(),
+	reason: z.string().optional(),
+	conditions: z.array(z.string()).optional(),
+	policyId: z.string()
+});
+/**
+* Core audit entry schema
+*/
+const AuditEntrySchema = z.object({
+	id: z.string().optional(),
+	timestamp: z.string(),
+	actor: z.string(),
+	action: AuditActionSchema,
+	input_hash: z.string(),
+	output_snapshot: z.unknown(),
+	policy_version: z.string(),
+	abac_decision: ABACDecisionSchema.optional(),
+	metadata: z.record(z.string(), z.unknown()).optional(),
+	signature: z.string()
+});
+/**
+* Audit query filter schema
+*/
+const AuditQueryFilterSchema = z.object({
+	actor: z.string().optional(),
+	action: AuditActionSchema.optional(),
+	startDate: z.date().optional(),
+	endDate: z.date().optional(),
+	limit: z.number().positive().max(1e3).default(100),
+	offset: z.number().nonnegative().default(0)
+});
+/**
+* Validate audit entry
+*/
+function validateAuditEntry(entry) {
+	return AuditEntrySchema.parse(entry);
+}
+/**
+* Validate query filter
+*/
+function validateQueryFilter(filter) {
+	return AuditQueryFilterSchema.parse(filter);
+}
+
+//#endregion
+//#region src/governance/audit/audit-logger.ts
+/**
+* @fileoverview Audit Logger Implementation
+* Audit Logger Implementation
+* Creates immutable, cryptographically signed audit trail
+*/
+/**
+* In-memory audit logger (for development)
+* In production, replace with persistent storage (PostgreSQL, Redis, S3)
+*/
+var InMemoryAuditLogger = class {
+	entries = [];
+	maxEntries;
+	constructor(maxEntries = 1e4) {
+		this.maxEntries = maxEntries;
+	}
+	async log(entry) {
+		const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+		const entryWithTimestamp = {
+			...entry,
+			timestamp
+		};
+		const signature = await generateSignature(entryWithTimestamp);
+		const completeEntry = {
+			...entryWithTimestamp,
+			signature
+		};
+		validateAuditEntry(completeEntry);
+		this.entries.push(completeEntry);
+		if (this.entries.length > this.maxEntries) this.entries.shift();
+		if (process.env.NODE_ENV === "development") logInfo("[AUDIT]", {
+			action: completeEntry.action,
+			actor: completeEntry.actor,
+			timestamp: completeEntry.timestamp
+		});
+	}
+	async query(filter) {
+		let results = this.entries.map((entry) => structuredClone(entry));
+		if (filter.actor) results = results.filter((e) => e.actor === filter.actor);
+		if (filter.action) results = results.filter((e) => e.action === filter.action);
+		const { startDate, endDate } = filter;
+		if (startDate) results = results.filter((e) => new Date(e.timestamp) >= startDate);
+		if (endDate) results = results.filter((e) => new Date(e.timestamp) <= endDate);
+		const limit = filter.limit ?? 100;
+		return results.slice(0, limit);
+	}
+	/**
+	* Get all entries (for development/testing)
+	*/
+	async getAll() {
+		return this.entries.map((entry) => structuredClone(entry));
+	}
+	/**
+	* Clear all entries (for testing only)
+	*/
+	async clear() {
+		this.entries = [];
+	}
+};
+/**
+* Console-only audit logger (for demos)
+*/
+var ConsoleAuditLogger = class {
+	async log(entry) {
+		const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+		const signature = await generateSignature({
+			...entry,
+			timestamp
+		});
+		logInfo("[AUDIT LOG]", { entry: {
+			...entry,
+			timestamp,
+			signature
+		} });
+	}
+	async query(filter) {
+		logWarn("[AUDIT] ConsoleAuditLogger does not support querying");
+		return [];
+	}
+};
+/**
+* Create an audit logger instance
+*/
+function createAuditLogger(type = "memory") {
+	switch (type) {
+		case "console": return new ConsoleAuditLogger();
+		default: return new InMemoryAuditLogger();
+	}
+}
+/**
+* Global audit logger instance
+*/
+let globalLogger = null;
+/**
+* Get or create global audit logger
+*/
+function getAuditLogger() {
+	if (!globalLogger) globalLogger = createAuditLogger("memory");
+	return globalLogger;
+}
+/**
+* Set global audit logger
+*/
+function setAuditLogger(logger) {
+	globalLogger = logger;
+}
+/**
+* Helper to log a generation event
+*/
+async function logGeneration(actor, input, output, metadata) {
+	const logger = getAuditLogger();
+	const input_hash = await hashInput(input);
+	await logger.log({
+		actor,
+		action: "generation",
+		input_hash,
+		output_snapshot: output,
+		policy_version: POLICY_VERSION,
+		metadata
+	});
+}
+/**
+* Helper to log a tool call event
+*/
+async function logToolCall(actor, toolName, args, result, metadata) {
+	const logger = getAuditLogger();
+	const input_hash = await hashInput(JSON.stringify(args));
+	await logger.log({
+		actor,
+		action: "tool_call",
+		input_hash,
+		output_snapshot: {
+			tool: toolName,
+			args,
+			result
+		},
+		policy_version: POLICY_VERSION,
+		metadata
+	});
+}
+/**
+* Helper to log a redaction event
+*/
+async function logRedaction(actor, detections, metadata) {
+	await getAuditLogger().log({
+		actor,
+		action: "redaction",
+		input_hash: "n/a",
+		output_snapshot: { detections },
+		policy_version: POLICY_VERSION,
+		metadata
+	});
+}
+
+//#endregion
+export { isVersionCompatible as C, updateVersionedConfig as D, satisfiesRange as E, validateConfigIntegrity as O, getCurrentVersion as S, parseVersion as T, createVersionRegistry as _, logToolCall as a, getCurrentPolicyVersion as b, AuditActionSchema as c, validateAuditEntry as d, validateQueryFilter as f, compareVersions as g, SCHEMA_VERSION as h, logRedaction as i, AuditEntrySchema as l, POLICY_VERSION as m, getAuditLogger as n, setAuditLogger as o, PLATFORM_VERSION as p, logGeneration as r, ABACDecisionSchema as s, createAuditLogger as t, AuditQueryFilterSchema as u, createVersionedConfig as v, migrateVersionedConfig as w, getCurrentSchemaVersion as x, defaultRegistry as y };
+//# sourceMappingURL=audit-logger-CHIP8bRO.mjs.map

package/dist/audit-logger-CHIP8bRO.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logger-CHIP8bRO.mjs","names":[],"sources":["../src/governance/versioning/index.ts","../src/governance/audit/audit-schema.ts","../src/governance/audit/audit-logger.ts"],"sourcesContent":["/**\n * Version Control & Configuration Management\n *\n * Manages versioning for AI platform configurations, policies, and schemas.\n * Enables tracking configuration changes, compatibility checking, and migration.\n *\n * @module @od-oneapp/ai-platform/governance/versioning\n *\n * @example\n * ```typescript\n * import {\n *   createVersionRegistry,\n *   getCurrentVersion,\n *   isVersionCompatible,\n *   migrateConfig\n * } from '@od-oneapp/ai-platform/governance/versioning';\n *\n * // Get current platform version\n * const version = getCurrentVersion();\n *\n * // Check compatibility\n * if (isVersionCompatible(config.version, version)) {\n *   // Config is compatible\n * } else {\n *   // Migrate config\n *   const migrated = migrateConfig(config, version);\n * }\n * ```\n */\n\n// -----------------------------------------------------------------------------\n// Constants\n// -----------------------------------------------------------------------------\n\n/** Current policy version - increment when making breaking changes */\nexport const POLICY_VERSION = '2.0.0' as const;\n\n/** Current schema version for configurations */\nexport const SCHEMA_VERSION = '1.0.0' as const;\n\n/** Platform version (synced with package.json) */\nexport const PLATFORM_VERSION = '1.0.0' as const;\n\n// -----------------------------------------------------------------------------\n// Types\n// -----------------------------------------------------------------------------\n\n/** Semantic version string */\nexport type SemVer = `${number}.${number}.${number}`;\n\n/** Version metadata */\nexport interface VersionMetadata {\n  /** Version string */\n  version: SemVer;\n  /** When this version was released */\n  releasedAt: Date;\n  /** Whether this version is deprecated */\n  deprecated: boolean;\n  /** Version to migrate to if deprecated */\n  migrateToVersion?: SemVer;\n  /** Breaking changes in this version */\n  breakingChanges?: string[];\n  /** New features in this version */\n  features?: string[];\n  /** Bug fixes in this version */\n  bugFixes?: string[];\n  /** Additional metadata */\n  metadata?: Record<string, unknown>;\n}\n\n/** Version change record */\nexport interface VersionChange {\n  /** ID of the change */\n  id: string;\n  /** Type of change */\n  type: 'breaking' | 'feature' | 'fix' | 'deprecation';\n  /** Description of the change */\n  description: string;\n  /** Affected components */\n  affectedComponents: string[];\n  /** Migration guide if applicable */\n  migrationGuide?: string;\n}\n\n/** Versioned configuration */\nexport interface VersionedConfig<T = unknown> {\n  /** Schema version */\n  schemaVersion: SemVer;\n  /** Configuration data */\n  data: T;\n  /** When the config was created */\n  createdAt: Date;\n  /** When the config was last updated */\n  updatedAt: Date;\n  /** Configuration hash for integrity checking */\n  hash?: string;\n}\n\n/** Migration function type */\nexport type MigrationFn<TFrom = unknown, TTo = unknown> = (config: TFrom) => TTo;\n\n/** Migration definition */\nexport interface Migration {\n  /** Source version */\n  fromVersion: SemVer;\n  /** Target version */\n  toVersion: SemVer;\n  /** Migration function */\n  migrate: MigrationFn;\n  /** Description of the migration */\n  description?: string;\n}\n\n/** Version registry interface */\nexport interface VersionRegistry {\n  /** Register a version */\n  registerVersion(metadata: VersionMetadata): void;\n  /** Get version metadata */\n  getVersion(version: SemVer): VersionMetadata | undefined;\n  /** Get all versions */\n  getAllVersions(): VersionMetadata[];\n  /** Get latest version */\n  getLatestVersion(): VersionMetadata | undefined;\n  /** Deprecate a version */\n  deprecateVersion(version: SemVer, migrateToVersion: SemVer): void;\n  /** Check if version exists */\n  hasVersion(version: SemVer): boolean;\n  /** Register a migration */\n  registerMigration(migration: Migration): void;\n  /** Get migration path */\n  getMigrationPath(fromVersion: SemVer, toVersion: SemVer): Migration[];\n  /** Execute migration */\n  migrate<T>(config: T, fromVersion: SemVer, toVersion: SemVer): T;\n}\n\n/** Version registry configuration */\nexport interface VersionRegistryConfig {\n  /** Initial versions to register */\n  versions?: VersionMetadata[];\n  /** Initial migrations to register */\n  migrations?: Migration[];\n}\n\n// -----------------------------------------------------------------------------\n// Version Registry Implementation\n// -----------------------------------------------------------------------------\n\n/**\n * Create a version registry for tracking and managing versions.\n *\n * @example\n * ```typescript\n * const registry = createVersionRegistry();\n *\n * registry.registerVersion({\n *   version: '1.0.0',\n *   releasedAt: new Date('2024-01-01'),\n *   deprecated: false,\n *   features: ['Initial release']\n * });\n *\n * registry.registerVersion({\n *   version: '2.0.0',\n *   releasedAt: new Date('2024-06-01'),\n *   deprecated: false,\n *   breakingChanges: ['Changed policy schema']\n * });\n *\n * registry.registerMigration({\n *   fromVersion: '1.0.0',\n *   toVersion: '2.0.0',\n *   migrate: (config) => ({ ...config, newField: 'default' })\n * });\n * ```\n */\nexport function createVersionRegistry(config: VersionRegistryConfig = {}): VersionRegistry {\n  const versions = new Map<SemVer, VersionMetadata>();\n  const migrations = new Map<string, Migration>();\n\n  // Register initial versions\n  for (const version of config.versions ?? []) {\n    versions.set(version.version, version);\n  }\n\n  // Register initial migrations\n  for (const migration of config.migrations ?? []) {\n    const key = `${migration.fromVersion}->${migration.toVersion}`;\n    migrations.set(key, migration);\n  }\n\n  function registerVersion(metadata: VersionMetadata): void {\n    versions.set(metadata.version, metadata);\n  }\n\n  function getVersion(version: SemVer): VersionMetadata | undefined {\n    return versions.get(version);\n  }\n\n  function getAllVersions(): VersionMetadata[] {\n    return Array.from(versions.values()).sort((a, b) => compareVersions(a.version, b.version));\n  }\n\n  function getLatestVersion(): VersionMetadata | undefined {\n    const all = getAllVersions();\n    return all[all.length - 1];\n  }\n\n  function deprecateVersion(version: SemVer, migrateToVersion: SemVer): void {\n    const metadata = versions.get(version);\n    if (metadata) {\n      metadata.deprecated = true;\n      metadata.migrateToVersion = migrateToVersion;\n    }\n  }\n\n  function hasVersion(version: SemVer): boolean {\n    return versions.has(version);\n  }\n\n  function registerMigration(migration: Migration): void {\n    const key = `${migration.fromVersion}->${migration.toVersion}`;\n    migrations.set(key, migration);\n  }\n\n  function getMigrationPath(fromVersion: SemVer, toVersion: SemVer): Migration[] {\n    const path: Migration[] = [];\n\n    // Simple BFS to find path\n    const visited = new Set<SemVer>();\n    const queue: Array<{ version: SemVer; path: Migration[] }> = [\n      { version: fromVersion, path: [] },\n    ];\n\n    while (queue.length > 0) {\n      const item = queue.shift();\n      if (!item) {\n        break;\n      }\n      const { version, path: currentPath } = item;\n\n      if (version === toVersion) {\n        return currentPath;\n      }\n\n      if (visited.has(version)) continue;\n      visited.add(version);\n\n      // Find all migrations from this version\n      for (const migration of migrations.values()) {\n        if (migration.fromVersion === version && !visited.has(migration.toVersion)) {\n          queue.push({\n            version: migration.toVersion,\n            path: [...currentPath, migration],\n          });\n        }\n      }\n    }\n\n    return path; // Empty if no path found\n  }\n\n  function migrate<T>(config: T, fromVersion: SemVer, toVersion: SemVer): T {\n    if (fromVersion === toVersion) return config;\n\n    const path = getMigrationPath(fromVersion, toVersion);\n    if (path.length === 0) {\n      throw new Error(`No migration path from ${fromVersion} to ${toVersion}`);\n    }\n\n    let result: unknown = config;\n    for (const migration of path) {\n      result = migration.migrate(result);\n    }\n\n    return result as T;\n  }\n\n  return {\n    registerVersion,\n    getVersion,\n    getAllVersions,\n    getLatestVersion,\n    deprecateVersion,\n    hasVersion,\n    registerMigration,\n    getMigrationPath,\n    migrate,\n  };\n}\n\n// -----------------------------------------------------------------------------\n// Version Utilities\n// -----------------------------------------------------------------------------\n\n/**\n * Parse a semantic version string.\n *\n * @example\n * ```typescript\n * const { major, minor, patch } = parseVersion('2.1.3');\n * // { major: 2, minor: 1, patch: 3 }\n * ```\n */\nexport function parseVersion(version: string): { major: number; minor: number; patch: number } {\n  const match = version.match(/^(\\d+)\\.(\\d+)\\.(\\d+)/);\n  if (!match) {\n    throw new Error(`Invalid version format: ${version}`);\n  }\n  const major = match[1];\n  const minor = match[2];\n  const patch = match[3];\n  if (!major || !minor || !patch) {\n    throw new Error(`Invalid version format: ${version}`);\n  }\n  return {\n    major: parseInt(major, 10),\n    minor: parseInt(minor, 10),\n    patch: parseInt(patch, 10),\n  };\n}\n\n/**\n * Compare two version strings.\n * Returns negative if a < b, positive if a > b, 0 if equal.\n *\n * @example\n * ```typescript\n * compareVersions('1.0.0', '2.0.0'); // -1\n * compareVersions('2.0.0', '1.0.0'); // 1\n * compareVersions('1.0.0', '1.0.0'); // 0\n * ```\n */\nexport function compareVersions(a: string, b: string): number {\n  const versionA = parseVersion(a);\n  const versionB = parseVersion(b);\n\n  if (versionA.major !== versionB.major) {\n    return versionA.major - versionB.major;\n  }\n  if (versionA.minor !== versionB.minor) {\n    return versionA.minor - versionB.minor;\n  }\n  return versionA.patch - versionB.patch;\n}\n\n/**\n * Check if two versions are compatible (same major version).\n *\n * @example\n * ```typescript\n * isVersionCompatible('1.0.0', '1.5.0'); // true\n * isVersionCompatible('1.0.0', '2.0.0'); // false\n * ```\n */\nexport function isVersionCompatible(configVersion: string, targetVersion: string): boolean {\n  const config = parseVersion(configVersion);\n  const target = parseVersion(targetVersion);\n\n  // Same major version = compatible\n  return config.major === target.major;\n}\n\n/**\n * Check if a version satisfies a version range.\n *\n * @example\n * ```typescript\n * satisfiesRange('1.5.0', '>=1.0.0'); // true\n * satisfiesRange('2.0.0', '<2.0.0'); // false\n * satisfiesRange('1.5.0', '>=1.0.0 <2.0.0'); // true\n * ```\n */\nexport function satisfiesRange(version: string, range: string): boolean {\n  parseVersion(version);\n\n  // Parse range conditions\n  const conditions = range.split(/\\s+/).filter(c => c.length > 0);\n\n  for (const condition of conditions) {\n    const trimmed = condition.trim();\n    const operator =\n      trimmed.startsWith('>=') || trimmed.startsWith('<=')\n        ? trimmed.slice(0, 2)\n        : trimmed.startsWith('>') || trimmed.startsWith('<') || trimmed.startsWith('=')\n          ? trimmed.slice(0, 1)\n          : '=';\n    const targetVersion = trimmed.slice(operator.length);\n    if (!targetVersion) continue;\n    const cmp = compareVersions(version, targetVersion);\n\n    switch (operator) {\n      case '>=':\n        if (cmp < 0) return false;\n        break;\n      case '>':\n        if (cmp <= 0) return false;\n        break;\n      case '<=':\n        if (cmp > 0) return false;\n        break;\n      case '<':\n        if (cmp >= 0) return false;\n        break;\n      case '=':\n        if (cmp !== 0) return false;\n        break;\n    }\n  }\n\n  return true;\n}\n\n/**\n * Get the current platform version.\n */\nexport function getCurrentVersion(): SemVer {\n  return PLATFORM_VERSION;\n}\n\n/**\n * Get the current policy version.\n */\nexport function getCurrentPolicyVersion(): SemVer {\n  return POLICY_VERSION as SemVer;\n}\n\n/**\n * Get the current schema version.\n */\nexport function getCurrentSchemaVersion(): SemVer {\n  return SCHEMA_VERSION;\n}\n\n// -----------------------------------------------------------------------------\n// Configuration Versioning Utilities\n// -----------------------------------------------------------------------------\n\n/**\n * Create a versioned configuration wrapper.\n *\n * @example\n * ```typescript\n * const config = createVersionedConfig(\n *   { apiKey: 'xxx', timeout: 5000 },\n *   '1.0.0'\n * );\n * ```\n */\nexport function createVersionedConfig<T>(\n  data: T,\n  schemaVersion: SemVer = SCHEMA_VERSION,\n): VersionedConfig<T> {\n  const now = new Date();\n  return {\n    schemaVersion,\n    data,\n    createdAt: now,\n    updatedAt: now,\n    hash: computeConfigHash(data),\n  };\n}\n\n/**\n * Update a versioned configuration.\n *\n * @example\n * ```typescript\n * const updated = updateVersionedConfig(config, { timeout: 10000 });\n * ```\n */\nexport function updateVersionedConfig<T>(\n  config: VersionedConfig<T>,\n  updates: Partial<T>,\n): VersionedConfig<T> {\n  const data = { ...config.data, ...updates };\n  return {\n    ...config,\n    data,\n    updatedAt: new Date(),\n    hash: computeConfigHash(data),\n  };\n}\n\n/**\n * Migrate a versioned configuration to a new schema version.\n *\n * @example\n * ```typescript\n * const registry = createVersionRegistry();\n * const migrated = migrateVersionedConfig(config, '2.0.0', registry);\n * ```\n */\nexport function migrateVersionedConfig<T>(\n  config: VersionedConfig<T>,\n  targetVersion: SemVer,\n  registry: VersionRegistry,\n): VersionedConfig<T> {\n  if (config.schemaVersion === targetVersion) {\n    return config;\n  }\n\n  const migratedData = registry.migrate<T>(config.data, config.schemaVersion, targetVersion);\n\n  return {\n    ...config,\n    schemaVersion: targetVersion,\n    data: migratedData,\n    updatedAt: new Date(),\n    hash: computeConfigHash(migratedData),\n  };\n}\n\n/**\n * Validate a versioned configuration integrity.\n */\nexport function validateConfigIntegrity<T>(config: VersionedConfig<T>): boolean {\n  if (!config.hash) return true; // No hash to validate\n  return config.hash === computeConfigHash(config.data);\n}\n\n// -----------------------------------------------------------------------------\n// Default Registry\n// -----------------------------------------------------------------------------\n\n/** Default version registry with platform versions */\nexport const defaultRegistry = createVersionRegistry({\n  versions: [\n    {\n      version: '1.0.0',\n      releasedAt: new Date('2024-01-01'),\n      deprecated: false,\n      features: ['Initial release', 'Basic policy support', 'ABAC compliance'],\n    },\n    {\n      version: '2.0.0',\n      releasedAt: new Date('2024-06-01'),\n      deprecated: false,\n      breakingChanges: ['New policy schema', 'Updated compliance validators'],\n      features: ['Advanced guardrails', 'Adaptive caching', 'Multi-tenant support'],\n    },\n  ],\n  migrations: [\n    {\n      fromVersion: '1.0.0',\n      toVersion: '2.0.0',\n      description: 'Migrate from v1 to v2 schema',\n      migrate: (config: unknown) => {\n        // Default migration - adds default values for new fields\n        return {\n          ...(config as object),\n          policyVersion: '2.0.0',\n          migratedAt: new Date().toISOString(),\n        };\n      },\n    },\n  ],\n});\n\n// -----------------------------------------------------------------------------\n// Utility Functions\n// -----------------------------------------------------------------------------\n\nfunction computeConfigHash(data: unknown): string {\n  // Simple hash for integrity checking\n  const str = JSON.stringify(data, Object.keys(data as object).sort());\n  let hash = 0;\n  for (let i = 0; i < str.length; i++) {\n    const char = str.charCodeAt(i);\n    hash = (hash << 5) - hash + char;\n    hash = hash & hash; // Convert to 32-bit integer\n  }\n  return Math.abs(hash).toString(16).padStart(8, '0');\n}\n","/**\n * @fileoverview Audit entry schemas and validation\n * Audit entry schemas and validation\n * Ensures structured, machine-readable audit logs for FDA/SOC2\n */\n\nimport { z } from 'zod';\n\n/**\n * Audit action types\n */\nexport const AuditActionSchema = z.enum([\n  'generation',\n  'generative_ui',\n  'tool_call',\n  'redaction',\n  'policy_check',\n  'abac_decision',\n  'approval_request',\n  'approval_granted',\n  'approval_denied',\n]);\n\n/**\n * ABAC decision schema\n */\nexport const ABACDecisionSchema = z.object({\n  allowed: z.boolean(),\n  reason: z.string().optional(),\n  conditions: z.array(z.string()).optional(),\n  policyId: z.string(),\n});\n\n/**\n * Core audit entry schema\n */\nexport const AuditEntrySchema = z.object({\n  id: z.string().optional(), // Generated by logger\n  timestamp: z.string(), // ISO 8601\n  actor: z.string(), // User/Agent ID\n  action: AuditActionSchema,\n  input_hash: z.string(), // SHA-256 hash\n  output_snapshot: z.unknown(), // Flexible structured output\n  policy_version: z.string(),\n  abac_decision: ABACDecisionSchema.optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n  signature: z.string(), // HMAC signature\n});\n\n/**\n * Audit query filter schema\n */\nexport const AuditQueryFilterSchema = z.object({\n  actor: z.string().optional(),\n  action: AuditActionSchema.optional(),\n  startDate: z.date().optional(),\n  endDate: z.date().optional(),\n  limit: z.number().positive().max(1000).default(100),\n  offset: z.number().nonnegative().default(0),\n});\n\n/**\n * Type exports\n */\nexport type AuditAction = z.infer<typeof AuditActionSchema>;\nexport type ABACDecision = z.infer<typeof ABACDecisionSchema>;\nexport type AuditEntry = z.infer<typeof AuditEntrySchema>;\nexport type AuditQueryFilter = z.infer<typeof AuditQueryFilterSchema>;\n\n/**\n * Validate audit entry\n */\nexport function validateAuditEntry(entry: unknown): AuditEntry {\n  return AuditEntrySchema.parse(entry);\n}\n\n/**\n * Validate query filter\n */\nexport function validateQueryFilter(filter: unknown): AuditQueryFilter {\n  return AuditQueryFilterSchema.parse(filter);\n}\n","/**\n * @fileoverview Audit Logger Implementation\n * Audit Logger Implementation\n * Creates immutable, cryptographically signed audit trail\n */\n\nimport { logInfo, logWarn } from '@repo/shared/logs';\n\nimport { generateSignature, hashInput } from '../../server/cache/crypto';\nimport { POLICY_VERSION } from '../versioning';\n\nimport { validateAuditEntry } from './audit-schema';\n\nimport type { AuditEntry, AuditLogger, AuditQueryFilter } from '../types';\n\n/**\n * In-memory audit logger (for development)\n * In production, replace with persistent storage (PostgreSQL, Redis, S3)\n */\nclass InMemoryAuditLogger implements AuditLogger {\n  private entries: AuditEntry[] = [];\n  private readonly maxEntries: number;\n\n  constructor(maxEntries: number = 10000) {\n    this.maxEntries = maxEntries;\n  }\n\n  async log(entry: Omit<AuditEntry, 'timestamp' | 'signature'>): Promise<void> {\n    const timestamp = new Date().toISOString();\n\n    // Create entry with timestamp\n    const entryWithTimestamp = {\n      ...entry,\n      timestamp,\n    };\n\n    // Generate signature\n    const signature = await generateSignature(entryWithTimestamp);\n\n    // Complete entry\n    const completeEntry: AuditEntry = {\n      ...entryWithTimestamp,\n      signature,\n    };\n\n    // Validate\n    validateAuditEntry(completeEntry);\n\n    // Store (append-only)\n    this.entries.push(completeEntry);\n\n    // Enforce retention limit (in production, use proper archival)\n    if (this.entries.length > this.maxEntries) {\n      this.entries.shift(); // Remove oldest\n    }\n\n    // Log to console in development\n    if (process.env.NODE_ENV === 'development') {\n      logInfo('[AUDIT]', {\n        action: completeEntry.action,\n        actor: completeEntry.actor,\n        timestamp: completeEntry.timestamp,\n      });\n    }\n  }\n\n  async query(filter: AuditQueryFilter): Promise<AuditEntry[]> {\n    // Clone entries to prevent external mutation\n    let results = this.entries.map(entry => structuredClone(entry));\n\n    // Filter by actor\n    if (filter.actor) {\n      results = results.filter(e => e.actor === filter.actor);\n    }\n\n    // Filter by action\n    if (filter.action) {\n      results = results.filter(e => e.action === filter.action);\n    }\n\n    // Filter by date range\n    const { startDate, endDate } = filter;\n    if (startDate) {\n      results = results.filter(e => new Date(e.timestamp) >= startDate);\n    }\n    if (endDate) {\n      results = results.filter(e => new Date(e.timestamp) <= endDate);\n    }\n\n    // Apply limit\n    const limit = filter.limit ?? 100;\n    return results.slice(0, limit);\n  }\n\n  /**\n   * Get all entries (for development/testing)\n   */\n  async getAll(): Promise<AuditEntry[]> {\n    // Return deep clones to prevent external mutation\n    return this.entries.map(entry => structuredClone(entry));\n  }\n\n  /**\n   * Clear all entries (for testing only)\n   */\n  async clear(): Promise<void> {\n    this.entries = [];\n  }\n}\n\n/**\n * Console-only audit logger (for demos)\n */\nclass ConsoleAuditLogger implements AuditLogger {\n  async log(entry: Omit<AuditEntry, 'timestamp' | 'signature'>): Promise<void> {\n    const timestamp = new Date().toISOString();\n    const signature = await generateSignature({ ...entry, timestamp });\n\n    const completeEntry = {\n      ...entry,\n      timestamp,\n      signature,\n    };\n\n    logInfo('[AUDIT LOG]', { entry: completeEntry });\n  }\n\n  async query(filter: AuditQueryFilter): Promise<AuditEntry[]> {\n    void filter;\n    logWarn('[AUDIT] ConsoleAuditLogger does not support querying');\n    return [];\n  }\n}\n\n/**\n * Create an audit logger instance\n */\nexport function createAuditLogger(type: 'memory' | 'console' = 'memory'): AuditLogger {\n  switch (type) {\n    case 'console':\n      return new ConsoleAuditLogger();\n    case 'memory':\n    default:\n      return new InMemoryAuditLogger();\n  }\n}\n\n/**\n * Global audit logger instance\n */\nlet globalLogger: AuditLogger | null = null;\n\n/**\n * Get or create global audit logger\n */\nexport function getAuditLogger(): AuditLogger {\n  if (!globalLogger) {\n    globalLogger = createAuditLogger('memory');\n  }\n  return globalLogger;\n}\n\n/**\n * Set global audit logger\n */\nexport function setAuditLogger(logger: AuditLogger): void {\n  globalLogger = logger;\n}\n\n/**\n * Helper to log a generation event\n */\nexport async function logGeneration(\n  actor: string,\n  input: string,\n  output: unknown,\n  metadata?: Record<string, unknown>,\n): Promise<void> {\n  const logger = getAuditLogger();\n  const input_hash = await hashInput(input);\n\n  await logger.log({\n    actor,\n    action: 'generation',\n    input_hash,\n    output_snapshot: output,\n    policy_version: POLICY_VERSION,\n    metadata,\n  });\n}\n\n/**\n * Helper to log a tool call event\n */\nexport async function logToolCall(\n  actor: string,\n  toolName: string,\n  args: unknown,\n  result: unknown,\n  metadata?: Record<string, unknown>,\n): Promise<void> {\n  const logger = getAuditLogger();\n  const input_hash = await hashInput(JSON.stringify(args));\n\n  await logger.log({\n    actor,\n    action: 'tool_call',\n    input_hash,\n    output_snapshot: {\n      tool: toolName,\n      args,\n      result,\n    },\n    policy_version: POLICY_VERSION,\n    metadata,\n  });\n}\n\n/**\n * Helper to log a redaction event\n */\nexport async function logRedaction(\n  actor: string,\n  detections: unknown,\n  metadata?: Record<string, unknown>,\n): Promise<void> {\n  const logger = getAuditLogger();\n\n  await logger.log({\n    actor,\n    action: 'redaction',\n    input_hash: 'n/a', // Don't hash PHI\n    output_snapshot: {\n      detections,\n    },\n    policy_version: POLICY_VERSION,\n    metadata,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,MAAa,iBAAiB;;AAG9B,MAAa,iBAAiB;;AAG9B,MAAa,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsIhC,SAAgB,sBAAsB,SAAgC,EAAE,EAAmB;CACzF,MAAM,2BAAW,IAAI,KAA8B;CACnD,MAAM,6BAAa,IAAI,KAAwB;AAG/C,MAAK,MAAM,WAAW,OAAO,YAAY,EAAE,CACzC,UAAS,IAAI,QAAQ,SAAS,QAAQ;AAIxC,MAAK,MAAM,aAAa,OAAO,cAAc,EAAE,EAAE;EAC/C,MAAM,MAAM,GAAG,UAAU,YAAY,IAAI,UAAU;AACnD,aAAW,IAAI,KAAK,UAAU;;CAGhC,SAAS,gBAAgB,UAAiC;AACxD,WAAS,IAAI,SAAS,SAAS,SAAS;;CAG1C,SAAS,WAAW,SAA8C;AAChE,SAAO,SAAS,IAAI,QAAQ;;CAG9B,SAAS,iBAAoC;AAC3C,SAAO,MAAM,KAAK,SAAS,QAAQ,CAAC,CAAC,MAAM,GAAG,MAAM,gBAAgB,EAAE,SAAS,EAAE,QAAQ,CAAC;;CAG5F,SAAS,mBAAgD;EACvD,MAAM,MAAM,gBAAgB;AAC5B,SAAO,IAAI,IAAI,SAAS;;CAG1B,SAAS,iBAAiB,SAAiB,kBAAgC;EACzE,MAAM,WAAW,SAAS,IAAI,QAAQ;AACtC,MAAI,UAAU;AACZ,YAAS,aAAa;AACtB,YAAS,mBAAmB;;;CAIhC,SAAS,WAAW,SAA0B;AAC5C,SAAO,SAAS,IAAI,QAAQ;;CAG9B,SAAS,kBAAkB,WAA4B;EACrD,MAAM,MAAM,GAAG,UAAU,YAAY,IAAI,UAAU;AACnD,aAAW,IAAI,KAAK,UAAU;;CAGhC,SAAS,iBAAiB,aAAqB,WAAgC;EAC7E,MAAM,OAAoB,EAAE;EAG5B,MAAM,0BAAU,IAAI,KAAa;EACjC,MAAM,QAAuD,CAC3D;GAAE,SAAS;GAAa,MAAM,EAAE;GAAE,CACnC;AAED,SAAO,MAAM,SAAS,GAAG;GACvB,MAAM,OAAO,MAAM,OAAO;AAC1B,OAAI,CAAC,KACH;GAEF,MAAM,EAAE,SAAS,MAAM,gBAAgB;AAEvC,OAAI,YAAY,UACd,QAAO;AAGT,OAAI,QAAQ,IAAI,QAAQ,CAAE;AAC1B,WAAQ,IAAI,QAAQ;AAGpB,QAAK,MAAM,aAAa,WAAW,QAAQ,CACzC,KAAI,UAAU,gBAAgB,WAAW,CAAC,QAAQ,IAAI,UAAU,UAAU,CACxE,OAAM,KAAK;IACT,SAAS,UAAU;IACnB,MAAM,CAAC,GAAG,aAAa,UAAU;IAClC,CAAC;;AAKR,SAAO;;CAGT,SAAS,QAAW,QAAW,aAAqB,WAAsB;AACxE,MAAI,gBAAgB,UAAW,QAAO;EAEtC,MAAM,OAAO,iBAAiB,aAAa,UAAU;AACrD,MAAI,KAAK,WAAW,EAClB,OAAM,IAAI,MAAM,0BAA0B,YAAY,MAAM,YAAY;EAG1E,IAAI,SAAkB;AACtB,OAAK,MAAM,aAAa,KACtB,UAAS,UAAU,QAAQ,OAAO;AAGpC,SAAO;;AAGT,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;;;;;;;;;;;AAgBH,SAAgB,aAAa,SAAkE;CAC7F,MAAM,QAAQ,QAAQ,MAAM,uBAAuB;AACnD,KAAI,CAAC,MACH,OAAM,IAAI,MAAM,2BAA2B,UAAU;CAEvD,MAAM,QAAQ,MAAM;CACpB,MAAM,QAAQ,MAAM;CACpB,MAAM,QAAQ,MAAM;AACpB,KAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MACvB,OAAM,IAAI,MAAM,2BAA2B,UAAU;AAEvD,QAAO;EACL,OAAO,SAAS,OAAO,GAAG;EAC1B,OAAO,SAAS,OAAO,GAAG;EAC1B,OAAO,SAAS,OAAO,GAAG;EAC3B;;;;;;;;;;;;;AAcH,SAAgB,gBAAgB,GAAW,GAAmB;CAC5D,MAAM,WAAW,aAAa,EAAE;CAChC,MAAM,WAAW,aAAa,EAAE;AAEhC,KAAI,SAAS,UAAU,SAAS,MAC9B,QAAO,SAAS,QAAQ,SAAS;AAEnC,KAAI,SAAS,UAAU,SAAS,MAC9B,QAAO,SAAS,QAAQ,SAAS;AAEnC,QAAO,SAAS,QAAQ,SAAS;;;;;;;;;;;AAYnC,SAAgB,oBAAoB,eAAuB,eAAgC;CACzF,MAAM,SAAS,aAAa,cAAc;CAC1C,MAAM,SAAS,aAAa,cAAc;AAG1C,QAAO,OAAO,UAAU,OAAO;;;;;;;;;;;;AAajC,SAAgB,eAAe,SAAiB,OAAwB;AACtE,cAAa,QAAQ;CAGrB,MAAM,aAAa,MAAM,MAAM,MAAM,CAAC,QAAO,MAAK,EAAE,SAAS,EAAE;AAE/D,MAAK,MAAM,aAAa,YAAY;EAClC,MAAM,UAAU,UAAU,MAAM;EAChC,MAAM,WACJ,QAAQ,WAAW,KAAK,IAAI,QAAQ,WAAW,KAAK,GAChD,QAAQ,MAAM,GAAG,EAAE,GACnB,QAAQ,WAAW,IAAI,IAAI,QAAQ,WAAW,IAAI,IAAI,QAAQ,WAAW,IAAI,GAC3E,QAAQ,MAAM,GAAG,EAAE,GACnB;EACR,MAAM,gBAAgB,QAAQ,MAAM,SAAS,OAAO;AACpD,MAAI,CAAC,cAAe;EACpB,MAAM,MAAM,gBAAgB,SAAS,cAAc;AAEnD,UAAQ,UAAR;GACE,KAAK;AACH,QAAI,MAAM,EAAG,QAAO;AACpB;GACF,KAAK;AACH,QAAI,OAAO,EAAG,QAAO;AACrB;GACF,KAAK;AACH,QAAI,MAAM,EAAG,QAAO;AACpB;GACF,KAAK;AACH,QAAI,OAAO,EAAG,QAAO;AACrB;GACF,KAAK;AACH,QAAI,QAAQ,EAAG,QAAO;AACtB;;;AAIN,QAAO;;;;;AAMT,SAAgB,oBAA4B;AAC1C,QAAO;;;;;AAMT,SAAgB,0BAAkC;AAChD,QAAO;;;;;AAMT,SAAgB,0BAAkC;AAChD,QAAO;;;;;;;;;;;;;AAkBT,SAAgB,sBACd,MACA,gBAAwB,gBACJ;CACpB,MAAM,sBAAM,IAAI,MAAM;AACtB,QAAO;EACL;EACA;EACA,WAAW;EACX,WAAW;EACX,MAAM,kBAAkB,KAAK;EAC9B;;;;;;;;;;AAWH,SAAgB,sBACd,QACA,SACoB;CACpB,MAAM,OAAO;EAAE,GAAG,OAAO;EAAM,GAAG;EAAS;AAC3C,QAAO;EACL,GAAG;EACH;EACA,2BAAW,IAAI,MAAM;EACrB,MAAM,kBAAkB,KAAK;EAC9B;;;;;;;;;;;AAYH,SAAgB,uBACd,QACA,eACA,UACoB;AACpB,KAAI,OAAO,kBAAkB,cAC3B,QAAO;CAGT,MAAM,eAAe,SAAS,QAAW,OAAO,MAAM,OAAO,eAAe,cAAc;AAE1F,QAAO;EACL,GAAG;EACH,eAAe;EACf,MAAM;EACN,2BAAW,IAAI,MAAM;EACrB,MAAM,kBAAkB,aAAa;EACtC;;;;;AAMH,SAAgB,wBAA2B,QAAqC;AAC9E,KAAI,CAAC,OAAO,KAAM,QAAO;AACzB,QAAO,OAAO,SAAS,kBAAkB,OAAO,KAAK;;;AAQvD,MAAa,kBAAkB,sBAAsB;CACnD,UAAU,CACR;EACE,SAAS;EACT,4BAAY,IAAI,KAAK,aAAa;EAClC,YAAY;EACZ,UAAU;GAAC;GAAmB;GAAwB;GAAkB;EACzE,EACD;EACE,SAAS;EACT,4BAAY,IAAI,KAAK,aAAa;EAClC,YAAY;EACZ,iBAAiB,CAAC,qBAAqB,gCAAgC;EACvE,UAAU;GAAC;GAAuB;GAAoB;GAAuB;EAC9E,CACF;CACD,YAAY,CACV;EACE,aAAa;EACb,WAAW;EACX,aAAa;EACb,UAAU,WAAoB;AAE5B,UAAO;IACL,GAAI;IACJ,eAAe;IACf,6BAAY,IAAI,MAAM,EAAC,aAAa;IACrC;;EAEJ,CACF;CACF,CAAC;AAMF,SAAS,kBAAkB,MAAuB;CAEhD,MAAM,MAAM,KAAK,UAAU,MAAM,OAAO,KAAK,KAAe,CAAC,MAAM,CAAC;CACpE,IAAI,OAAO;AACX,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;EACnC,MAAM,OAAO,IAAI,WAAW,EAAE;AAC9B,UAAQ,QAAQ,KAAK,OAAO;AAC5B,SAAO,OAAO;;AAEhB,QAAO,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;;;;;;;;;;;;;AChjBrD,MAAa,oBAAoB,EAAE,KAAK;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;;;;AAKF,MAAa,qBAAqB,EAAE,OAAO;CACzC,SAAS,EAAE,SAAS;CACpB,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC1C,UAAU,EAAE,QAAQ;CACrB,CAAC;;;;AAKF,MAAa,mBAAmB,EAAE,OAAO;CACvC,IAAI,EAAE,QAAQ,CAAC,UAAU;CACzB,WAAW,EAAE,QAAQ;CACrB,OAAO,EAAE,QAAQ;CACjB,QAAQ;CACR,YAAY,EAAE,QAAQ;CACtB,iBAAiB,EAAE,SAAS;CAC5B,gBAAgB,EAAE,QAAQ;CAC1B,eAAe,mBAAmB,UAAU;CAC5C,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,UAAU;CACtD,WAAW,EAAE,QAAQ;CACtB,CAAC;;;;AAKF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,QAAQ,kBAAkB,UAAU;CACpC,WAAW,EAAE,MAAM,CAAC,UAAU;CAC9B,SAAS,EAAE,MAAM,CAAC,UAAU;CAC5B,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAK,CAAC,QAAQ,IAAI;CACnD,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE;CAC5C,CAAC;;;;AAaF,SAAgB,mBAAmB,OAA4B;AAC7D,QAAO,iBAAiB,MAAM,MAAM;;;;;AAMtC,SAAgB,oBAAoB,QAAmC;AACrE,QAAO,uBAAuB,MAAM,OAAO;;;;;;;;;;;;;;AC7D7C,IAAM,sBAAN,MAAiD;CAC/C,AAAQ,UAAwB,EAAE;CAClC,AAAiB;CAEjB,YAAY,aAAqB,KAAO;AACtC,OAAK,aAAa;;CAGpB,MAAM,IAAI,OAAmE;EAC3E,MAAM,6BAAY,IAAI,MAAM,EAAC,aAAa;EAG1C,MAAM,qBAAqB;GACzB,GAAG;GACH;GACD;EAGD,MAAM,YAAY,MAAM,kBAAkB,mBAAmB;EAG7D,MAAM,gBAA4B;GAChC,GAAG;GACH;GACD;AAGD,qBAAmB,cAAc;AAGjC,OAAK,QAAQ,KAAK,cAAc;AAGhC,MAAI,KAAK,QAAQ,SAAS,KAAK,WAC7B,MAAK,QAAQ,OAAO;AAItB,MAAI,QAAQ,IAAI,aAAa,cAC3B,SAAQ,WAAW;GACjB,QAAQ,cAAc;GACtB,OAAO,cAAc;GACrB,WAAW,cAAc;GAC1B,CAAC;;CAIN,MAAM,MAAM,QAAiD;EAE3D,IAAI,UAAU,KAAK,QAAQ,KAAI,UAAS,gBAAgB,MAAM,CAAC;AAG/D,MAAI,OAAO,MACT,WAAU,QAAQ,QAAO,MAAK,EAAE,UAAU,OAAO,MAAM;AAIzD,MAAI,OAAO,OACT,WAAU,QAAQ,QAAO,MAAK,EAAE,WAAW,OAAO,OAAO;EAI3D,MAAM,EAAE,WAAW,YAAY;AAC/B,MAAI,UACF,WAAU,QAAQ,QAAO,MAAK,IAAI,KAAK,EAAE,UAAU,IAAI,UAAU;AAEnE,MAAI,QACF,WAAU,QAAQ,QAAO,MAAK,IAAI,KAAK,EAAE,UAAU,IAAI,QAAQ;EAIjE,MAAM,QAAQ,OAAO,SAAS;AAC9B,SAAO,QAAQ,MAAM,GAAG,MAAM;;;;;CAMhC,MAAM,SAAgC;AAEpC,SAAO,KAAK,QAAQ,KAAI,UAAS,gBAAgB,MAAM,CAAC;;;;;CAM1D,MAAM,QAAuB;AAC3B,OAAK,UAAU,EAAE;;;;;;AAOrB,IAAM,qBAAN,MAAgD;CAC9C,MAAM,IAAI,OAAmE;EAC3E,MAAM,6BAAY,IAAI,MAAM,EAAC,aAAa;EAC1C,MAAM,YAAY,MAAM,kBAAkB;GAAE,GAAG;GAAO;GAAW,CAAC;AAQlE,UAAQ,eAAe,EAAE,OANH;GACpB,GAAG;GACH;GACA;GACD,EAE8C,CAAC;;CAGlD,MAAM,MAAM,QAAiD;AAE3D,UAAQ,uDAAuD;AAC/D,SAAO,EAAE;;;;;;AAOb,SAAgB,kBAAkB,OAA6B,UAAuB;AACpF,SAAQ,MAAR;EACE,KAAK,UACH,QAAO,IAAI,oBAAoB;EAEjC,QACE,QAAO,IAAI,qBAAqB;;;;;;AAOtC,IAAI,eAAmC;;;;AAKvC,SAAgB,iBAA8B;AAC5C,KAAI,CAAC,aACH,gBAAe,kBAAkB,SAAS;AAE5C,QAAO;;;;;AAMT,SAAgB,eAAe,QAA2B;AACxD,gBAAe;;;;;AAMjB,eAAsB,cACpB,OACA,OACA,QACA,UACe;CACf,MAAM,SAAS,gBAAgB;CAC/B,MAAM,aAAa,MAAM,UAAU,MAAM;AAEzC,OAAM,OAAO,IAAI;EACf;EACA,QAAQ;EACR;EACA,iBAAiB;EACjB,gBAAgB;EAChB;EACD,CAAC;;;;;AAMJ,eAAsB,YACpB,OACA,UACA,MACA,QACA,UACe;CACf,MAAM,SAAS,gBAAgB;CAC/B,MAAM,aAAa,MAAM,UAAU,KAAK,UAAU,KAAK,CAAC;AAExD,OAAM,OAAO,IAAI;EACf;EACA,QAAQ;EACR;EACA,iBAAiB;GACf,MAAM;GACN;GACA;GACD;EACD,gBAAgB;EAChB;EACD,CAAC;;;;;AAMJ,eAAsB,aACpB,OACA,YACA,UACe;AAGf,OAFe,gBAAgB,CAElB,IAAI;EACf;EACA,QAAQ;EACR,YAAY;EACZ,iBAAiB,EACf,YACD;EACD,gBAAgB;EAChB;EACD,CAAC"}