@od-oneapp/ai-platform 0.1.0

package/dist/compliance-wrapper-CrOMHhHN.mjs

@@ -0,0 +1,528 @@
+import { Ht as wrapLanguageModel } from "./ai-runtime-CDzQztTt.mjs";
+import { n as hashInput } from "./crypto-8ABhc3TD.mjs";
+import { i as logRedaction, n as getAuditLogger } from "./audit-logger-CHIP8bRO.mjs";
+import { g as evaluatePolicy, n as redactPHI } from "./redaction-utils-DcQwsiNh.mjs";
+
+//#region src/tools/compliance/compliance-wrapper.ts
+/**
+* @fileoverview Compliance Middleware Wrapper
+* Compliance Middleware Wrapper
+* Wraps LanguageModelV3 with PHI redaction, ABAC, and audit logging
+* Implements the Master Playbook's model-boundary guardrails
+*
+* Note: This is a simplified wrapper due to AI SDK v6 API changes.
+* For production, consider using pre/post-processing hooks instead.
+*/
+const POLICY_VERSION = "1.0.0";
+/**
+* Build a default ABAC context for compliance operations.
+*/
+function createDefaultABACContext(actorId) {
+	return {
+		actor: {
+			id: actorId,
+			roles: [],
+			attributes: {}
+		},
+		environment: {
+			timestamp: /* @__PURE__ */ new Date(),
+			ipAddress: "unknown"
+		},
+		purpose: "treatment"
+	};
+}
+const DEFAULT_COMPLIANCE_OPTIONS = {
+	enablePHIRedaction: true,
+	enableABAC: false,
+	policyVersion: POLICY_VERSION
+};
+const isRecord = (value) => typeof value === "object" && value !== null;
+const redactStringValue = (text, strategy, detections, minConfidence) => {
+	const { redacted, detections: found } = redactPHI(text, strategy, { minConfidence });
+	detections.push(...found);
+	return redacted;
+};
+const redactUnknownValue = (value, strategy, detections, minConfidence) => {
+	if (typeof value === "string") return redactStringValue(value, strategy, detections, minConfidence);
+	if (Array.isArray(value)) return value.map((entry) => redactUnknownValue(entry, strategy, detections, minConfidence));
+	if (isRecord(value)) return Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, redactUnknownValue(entry, strategy, detections, minConfidence)]));
+	return value;
+};
+const redactToolResultOutput = (output, strategy, detections, minConfidence) => {
+	if (output.type === "text") return {
+		type: "text",
+		value: redactStringValue(output.value, strategy, detections, minConfidence),
+		providerOptions: output.providerOptions
+	};
+	if (output.type === "json") return {
+		type: "json",
+		value: redactUnknownValue(output.value, strategy, detections, minConfidence),
+		providerOptions: output.providerOptions
+	};
+	return output;
+};
+const redactPrompt = (prompt, options) => {
+	const detections = [];
+	const strategy = options.redactionStrategy ?? "MASK";
+	return {
+		prompt: prompt.map((message) => {
+			if (message.role === "system") return {
+				...message,
+				content: redactStringValue(message.content, strategy, detections, .6)
+			};
+			if (message.role === "user") {
+				const redactedParts = (Array.isArray(message.content) ? message.content : []).map((part) => {
+					if (part.type === "text") return {
+						...part,
+						text: redactStringValue(part.text, strategy, detections, .6)
+					};
+					return part;
+				});
+				return {
+					...message,
+					content: redactedParts
+				};
+			}
+			if (message.role === "assistant") {
+				const redactedParts = (Array.isArray(message.content) ? message.content : []).map((part) => {
+					if (part.type === "text" || part.type === "reasoning") return {
+						...part,
+						text: redactStringValue(part.text, strategy, detections, .6)
+					};
+					if (part.type === "tool-result") return {
+						...part,
+						output: redactToolResultOutput(part.output, strategy, detections, .6)
+					};
+					if (part.type === "tool-call") {
+						const inputValue = part.input;
+						if (typeof inputValue === "string") {
+							let redactedInput = inputValue;
+							try {
+								const redacted = redactUnknownValue(JSON.parse(inputValue), strategy, detections, .6);
+								redactedInput = JSON.stringify(redacted);
+							} catch {
+								redactedInput = redactStringValue(inputValue, strategy, detections, .6);
+							}
+							return {
+								...part,
+								input: redactedInput
+							};
+						}
+						const redactedInput = redactUnknownValue(inputValue, strategy, detections, .6);
+						return {
+							...part,
+							input: redactedInput
+						};
+					}
+					return part;
+				});
+				return {
+					...message,
+					content: redactedParts
+				};
+			}
+			if (message.role === "tool") {
+				const redactedParts = (Array.isArray(message.content) ? message.content : []).map((part) => {
+					if (part.type === "tool-result") return {
+						...part,
+						output: redactToolResultOutput(part.output, strategy, detections, .6)
+					};
+					return part;
+				});
+				return {
+					...message,
+					content: redactedParts
+				};
+			}
+			return message;
+		}),
+		detections
+	};
+};
+const redactGenerateResult = (result, options) => {
+	const detections = [];
+	const strategy = options.redactionStrategy ?? "MASK";
+	const content = result.content.map((part) => {
+		if (part.type === "text" || part.type === "reasoning") return {
+			...part,
+			text: redactStringValue(part.text, strategy, detections, .7)
+		};
+		if (part.type === "tool-result") {
+			const toolResult = part;
+			const redactedResult = redactUnknownValue(toolResult.result, strategy, detections, .7);
+			return {
+				...toolResult,
+				result: redactedResult
+			};
+		}
+		return part;
+	});
+	return {
+		result: {
+			...result,
+			content
+		},
+		detections
+	};
+};
+const createComplianceStreamTransform = (options, onDetections) => {
+	const detections = [];
+	const strategy = options.redactionStrategy ?? "MASK";
+	const holdBackSize = 64;
+	const buffers = /* @__PURE__ */ new Map();
+	const extractDelta = (part) => {
+		if (part.type === "text-delta" || part.type === "reasoning-delta" || part.type === "tool-input-delta") return part.delta;
+		return null;
+	};
+	const getKey = (part) => {
+		if (part.type === "text-delta" || part.type === "reasoning-delta" || part.type === "tool-input-delta") return `${part.type}:${part.id}`;
+		if (part.type === "text-end" || part.type === "reasoning-end" || part.type === "tool-input-end") return `${part.type.replace("-end", "-delta")}:${part.id}`;
+		if (part.type === "text-start" || part.type === "reasoning-start" || part.type === "tool-input-start") return `${part.type.replace("-start", "-delta")}:${part.id}`;
+		return null;
+	};
+	const getDeltaType = (part) => {
+		if (part.type === "text-delta" || part.type === "reasoning-delta" || part.type === "tool-input-delta") return part.type;
+		if (part.type === "text-start" || part.type === "reasoning-start" || part.type === "tool-input-start") return part.type.replace("-start", "-delta");
+		if (part.type === "text-end" || part.type === "reasoning-end" || part.type === "tool-input-end") return part.type.replace("-end", "-delta");
+		return null;
+	};
+	return new TransformStream({
+		transform(part, controller) {
+			const delta = extractDelta(part);
+			const key = getKey(part);
+			const deltaType = getDeltaType(part);
+			if (delta && key && deltaType) {
+				const state = buffers.get(key) ?? {
+					pending: "",
+					deltaType
+				};
+				const pending = state.pending + delta;
+				if (pending.length <= holdBackSize) {
+					buffers.set(key, {
+						...state,
+						pending
+					});
+					return;
+				}
+				const redactedPrefix = redactStringValue(pending.slice(0, pending.length - holdBackSize), strategy, detections, .7);
+				buffers.set(key, {
+					...state,
+					pending: pending.slice(pending.length - holdBackSize)
+				});
+				if (redactedPrefix.length > 0) controller.enqueue({
+					...part,
+					delta: redactedPrefix
+				});
+				return;
+			}
+			if (part.type === "text-end" || part.type === "reasoning-end" || part.type === "tool-input-end") {
+				if (key) {
+					const state = buffers.get(key);
+					if (state && state.pending.length > 0) {
+						const redactedTail = redactStringValue(state.pending, strategy, detections, .7);
+						if (redactedTail.length > 0 && deltaType) controller.enqueue({
+							type: deltaType,
+							id: part.id,
+							delta: redactedTail,
+							providerMetadata: "providerMetadata" in part ? part.providerMetadata : void 0
+						});
+					}
+					buffers.delete(key);
+				}
+				controller.enqueue(part);
+				return;
+			}
+			if (part.type === "text-start" || part.type === "reasoning-start" || part.type === "tool-input-start") {
+				if (key && deltaType && !buffers.has(key)) buffers.set(key, {
+					pending: "",
+					deltaType
+				});
+				controller.enqueue(part);
+				return;
+			}
+			controller.enqueue(part);
+		},
+		async flush(controller) {
+			for (const [key, state] of buffers.entries()) if (state.pending.length > 0) {
+				const redactedTail = redactStringValue(state.pending, strategy, detections, .7);
+				if (redactedTail.length > 0) controller.enqueue({
+					type: state.deltaType,
+					id: key.split(":").slice(1).join(":"),
+					delta: redactedTail
+				});
+			}
+			buffers.clear();
+			await onDetections(detections);
+			controller.terminate();
+		}
+	});
+};
+const buildDefaultResource = (context) => ({
+	id: "ai-generation",
+	type: "ai-generation",
+	sensitivity: "confidential",
+	ownerId: context?.actor.id
+});
+const enforceABAC = async (options) => {
+	if (!options.enableABAC) return;
+	const context = options.abacContext;
+	if (!context) throw new Error("ABAC enforcement requires abacContext");
+	const evaluation = await evaluatePolicy(context, options.resource ?? buildDefaultResource(context), "execute");
+	if (!evaluation.decision.allowed) throw new Error(evaluation.decision.reason ?? `ABAC denied by policy ${evaluation.decision.policyId}`);
+};
+const logGenerationEvent = async (options, params, output) => {
+	const logger = options.auditLogger ?? getAuditLogger();
+	const inputHash = await hashInput(JSON.stringify(params.prompt ?? []));
+	await logger.log({
+		actor: options.abacContext?.actor.id ?? "system",
+		action: "generation",
+		input_hash: inputHash,
+		output_snapshot: output,
+		policy_version: options.policyVersion ?? POLICY_VERSION,
+		metadata: {
+			phiRedaction: options.enablePHIRedaction,
+			abacEnabled: options.enableABAC
+		}
+	});
+};
+/**
+* Wrap a language model with compliance middleware
+*
+* @param model - Base LanguageModelV3 to wrap
+* @param options - Compliance configuration
+* @returns Wrapped model with compliance guardrails
+*
+* @example
+* ```ts
+* import { openai } from '@ai-sdk/openai';
+* import { wrapWithCompliance } from '#/lib/ai-onedigital';
+*
+* const complianceModel = wrapWithCompliance(
+*   openai('gpt-5.1-thinking'),
+*   {
+*     enablePHIRedaction: true,
+*     enableABAC: true,
+*     policyVersion: 'v2.0',
+*   }
+* );
+* ```
+*/
+function wrapWithCompliance(model, options) {
+	const complianceOptions = {
+		...DEFAULT_COMPLIANCE_OPTIONS,
+		...options
+	};
+	return wrapLanguageModel({
+		model,
+		middleware: {
+			specificationVersion: "v3",
+			transformParams: async ({ params }) => {
+				if (!complianceOptions.enablePHIRedaction) return params;
+				const { prompt, detections } = redactPrompt(params.prompt, complianceOptions);
+				if (detections.length > 0 && complianceOptions.abacContext) await logRedaction(complianceOptions.abacContext.actor.id, detections, {
+					count: detections.length,
+					location: "input"
+				});
+				return {
+					...params,
+					prompt
+				};
+			},
+			wrapGenerate: async ({ doGenerate, params }) => {
+				await enforceABAC(complianceOptions);
+				const result = await doGenerate();
+				if (!complianceOptions.enablePHIRedaction) {
+					await logGenerationEvent(complianceOptions, params, result.content);
+					return result;
+				}
+				const { result: redactedResult, detections } = redactGenerateResult(result, complianceOptions);
+				if (detections.length > 0 && complianceOptions.abacContext) await logRedaction(complianceOptions.abacContext.actor.id, detections, {
+					count: detections.length,
+					location: "output"
+				});
+				await logGenerationEvent(complianceOptions, params, redactedResult.content);
+				return redactedResult;
+			},
+			wrapStream: async ({ doStream, params }) => {
+				await enforceABAC(complianceOptions);
+				const result = await doStream();
+				if (!complianceOptions.enablePHIRedaction) return result;
+				const stream = result.stream.pipeThrough(createComplianceStreamTransform(complianceOptions, async (detections) => {
+					if (detections.length > 0 && complianceOptions.abacContext) await logRedaction(complianceOptions.abacContext.actor.id, detections, {
+						count: detections.length,
+						location: "output"
+					});
+					await logGenerationEvent(complianceOptions, params, { streamCompleted: true });
+				}));
+				return {
+					...result,
+					stream
+				};
+			}
+		}
+	});
+}
+/**
+* Quick helper to create a compliance-wrapped model with defaults
+*/
+function createCompliantModel(model, actorId = "anonymous", options = {}) {
+	return wrapWithCompliance(model, {
+		enablePHIRedaction: true,
+		enableABAC: false,
+		policyVersion: POLICY_VERSION,
+		abacContext: options.abacContext ?? createDefaultABACContext(actorId),
+		...options
+	});
+}
+/**
+* Helper to pre-process messages for PHI redaction
+* Use this in your route handlers before calling streamText/generateText
+*/
+async function preprocessMessages(messages, options = DEFAULT_COMPLIANCE_OPTIONS) {
+	const { enablePHIRedaction, redactionStrategy = "MASK", abacContext } = options;
+	if (!enablePHIRedaction) return {
+		messages,
+		detections: []
+	};
+	const allDetections = [];
+	const isUserPart = (part) => part.type === "text";
+	const processedMessages = messages.map((msg) => {
+		if (msg.role === "tool") {
+			if (typeof msg.content === "string") {
+				const { redacted, detections } = redactPHI(msg.content, redactionStrategy, { minConfidence: .6 });
+				allDetections.push(...detections);
+				const toolResult = {
+					type: "tool-result",
+					toolCallId: "unknown",
+					toolName: "unknown",
+					output: {
+						type: "text",
+						value: redacted
+					}
+				};
+				return {
+					...msg,
+					content: [toolResult]
+				};
+			}
+			if (Array.isArray(msg.content)) {
+				const updatedToolContent = msg.content.map((part) => {
+					if (part.type === "tool-result") {
+						if (part.output.type === "text" || part.output.type === "error-text") {
+							const { redacted, detections } = redactPHI(part.output.value, redactionStrategy, { minConfidence: .6 });
+							allDetections.push(...detections);
+							return {
+								...part,
+								output: {
+									...part.output,
+									value: redacted
+								}
+							};
+						}
+						return part;
+					}
+					return part;
+				});
+				return {
+					...msg,
+					content: updatedToolContent
+				};
+			}
+			return msg;
+		}
+		if (msg.role === "system") {
+			if (typeof msg.content === "string") {
+				const { redacted, detections } = redactPHI(msg.content, redactionStrategy, { minConfidence: .6 });
+				allDetections.push(...detections);
+				return {
+					...msg,
+					content: redacted
+				};
+			}
+			return msg;
+		}
+		if (msg.role === "user") {
+			if (typeof msg.content === "string") {
+				const { redacted, detections } = redactPHI(msg.content, redactionStrategy, { minConfidence: .6 });
+				allDetections.push(...detections);
+				return {
+					...msg,
+					content: redacted
+				};
+			}
+			if (Array.isArray(msg.content)) {
+				const updatedParts = msg.content.map((part) => {
+					if (isUserPart(part)) {
+						const { redacted, detections } = redactPHI(part.text, redactionStrategy, { minConfidence: .6 });
+						allDetections.push(...detections);
+						return {
+							...part,
+							text: redacted
+						};
+					}
+					return part;
+				});
+				return {
+					...msg,
+					content: updatedParts
+				};
+			}
+			return msg;
+		}
+		if (typeof msg.content === "string") {
+			const { redacted, detections } = redactPHI(msg.content, redactionStrategy, { minConfidence: .6 });
+			allDetections.push(...detections);
+			return {
+				...msg,
+				content: redacted
+			};
+		}
+		if (Array.isArray(msg.content)) {
+			const updatedParts = msg.content.map((part) => {
+				if (part && typeof part === "object" && "type" in part && part.type === "text") {
+					const textPart = part;
+					const { redacted, detections } = redactPHI(textPart.text, redactionStrategy, { minConfidence: .6 });
+					allDetections.push(...detections);
+					return {
+						...textPart,
+						text: redacted
+					};
+				}
+				return part;
+			});
+			return {
+				...msg,
+				content: updatedParts
+			};
+		}
+		return msg;
+	});
+	if (allDetections.length > 0 && abacContext) await logRedaction(abacContext.actor.id, allDetections, { count: allDetections.length });
+	return {
+		messages: processedMessages,
+		detections: allDetections
+	};
+}
+/**
+* Helper to post-process text output for PHI redaction
+*/
+async function postprocessText(text, options = DEFAULT_COMPLIANCE_OPTIONS) {
+	const { enablePHIRedaction, redactionStrategy = "MASK", abacContext } = options;
+	if (!enablePHIRedaction) return {
+		text,
+		detections: []
+	};
+	const { redacted, detections } = redactPHI(text, redactionStrategy, { minConfidence: .7 });
+	if (detections.length > 0 && abacContext) await logRedaction(abacContext.actor.id, detections, {
+		location: "output",
+		count: detections.length
+	});
+	return {
+		text: redacted,
+		detections
+	};
+}
+
+//#endregion
+export { wrapWithCompliance as i, postprocessText as n, preprocessMessages as r, createCompliantModel as t };
+//# sourceMappingURL=compliance-wrapper-CrOMHhHN.mjs.map

package/dist/compliance-wrapper-CrOMHhHN.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-wrapper-CrOMHhHN.mjs","names":[],"sources":["../src/tools/compliance/compliance-wrapper.ts"],"sourcesContent":["/**\n * @fileoverview Compliance Middleware Wrapper\n * Compliance Middleware Wrapper\n * Wraps LanguageModelV3 with PHI redaction, ABAC, and audit logging\n * Implements the Master Playbook's model-boundary guardrails\n *\n * Note: This is a simplified wrapper due to AI SDK v6 API changes.\n * For production, consider using pre/post-processing hooks instead.\n */\n\nimport {\n  logGeneration as auditLogGeneration,\n  getAuditLogger,\n  logRedaction,\n} from '../../governance/audit/audit-logger';\nimport { evaluatePolicy } from '../../governance/compliance/abac/policy-engine';\nimport { redactPHI } from '../../governance/compliance/validators/redaction-utils';\nimport { hashInput } from '../../server/cache/crypto';\nimport { wrapLanguageModel } from '../../shared';\n\nimport type {\n  ABACContext,\n  ComplianceOptions,\n  PHIDetection,\n  Resource,\n} from '../../governance/compliance/types';\nimport type { WrapGenerateArgs, WrapStreamArgs } from '../../sdk/middleware/model-middleware';\nimport type {\n  SDKLanguageModelV3CallOptions as LanguageModelV3CallOptions,\n  SDKLanguageModelV3Content as LanguageModelV3Content,\n  SDKLanguageModelV3GenerateResult as LanguageModelV3GenerateResult,\n  SDKLanguageModelV3Message as LanguageModelV3Message,\n  SDKLanguageModelV3Prompt as LanguageModelV3Prompt,\n  SDKLanguageModelV3StreamPart as LanguageModelV3StreamPart,\n  SDKLanguageModelV3ToolResult as LanguageModelV3ToolResult,\n  SDKLanguageModelV3ToolResultOutput as LanguageModelV3ToolResultOutput,\n\n  SDKFilePart,\n  SDKImagePart,\n  SDKLanguageModelV3,\n  SDKLanguageModelV3Middleware,\n  SDKModelMessage,\n  SDKTextPart,\n  SDKToolResultPart} from '../../shared';\n\n\n\n// Define POLICY_VERSION locally since it doesn't exist in config\nconst POLICY_VERSION = '1.0.0';\n\n/**\n * Build a default ABAC context for compliance operations.\n */\nfunction createDefaultABACContext(actorId: string): ABACContext {\n  return {\n    actor: {\n      id: actorId,\n      roles: [],\n      attributes: {},\n    },\n    environment: {\n      timestamp: new Date(),\n      ipAddress: 'unknown',\n    },\n    purpose: 'treatment',\n  };\n}\n\n// Re-export for use in other modules\nexport { auditLogGeneration as logGeneration };\n\n// Default compliance options (unicorn/no-object-as-default-parameter requires this pattern)\nconst DEFAULT_COMPLIANCE_OPTIONS: ComplianceOptions = {\n  enablePHIRedaction: true,\n  enableABAC: false,\n  policyVersion: POLICY_VERSION,\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null;\n\nconst redactStringValue = (\n  text: string,\n  strategy: ComplianceOptions['redactionStrategy'],\n  detections: PHIDetection[],\n  minConfidence: number,\n): string => {\n  const { redacted, detections: found } = redactPHI(text, strategy, { minConfidence });\n  detections.push(...found);\n  return redacted;\n};\n\nconst redactUnknownValue = (\n  value: unknown,\n  strategy: ComplianceOptions['redactionStrategy'],\n  detections: PHIDetection[],\n  minConfidence: number,\n): unknown => {\n  if (typeof value === 'string') {\n    return redactStringValue(value, strategy, detections, minConfidence);\n  }\n\n  if (Array.isArray(value)) {\n    return value.map(entry => redactUnknownValue(entry, strategy, detections, minConfidence));\n  }\n\n  if (isRecord(value)) {\n    return Object.fromEntries(\n      Object.entries(value).map(([key, entry]) => [\n        key,\n        redactUnknownValue(entry, strategy, detections, minConfidence),\n      ]),\n    );\n  }\n\n  return value;\n};\n\nconst redactToolResultOutput = (\n  output: LanguageModelV3ToolResultOutput,\n  strategy: ComplianceOptions['redactionStrategy'],\n  detections: PHIDetection[],\n  minConfidence: number,\n): LanguageModelV3ToolResultOutput => {\n  if (output.type === 'text') {\n    return {\n      type: 'text',\n      value: redactStringValue(output.value, strategy, detections, minConfidence),\n      providerOptions: output.providerOptions,\n    };\n  }\n\n  if (output.type === 'json') {\n    return {\n      type: 'json',\n      value: redactUnknownValue(output.value, strategy, detections, minConfidence) as NonNullable<\n        typeof output.value\n      >,\n      providerOptions: output.providerOptions,\n    };\n  }\n\n  return output;\n};\n\nconst redactPrompt = (\n  prompt: LanguageModelV3Prompt,\n  options: ComplianceOptions,\n): { prompt: LanguageModelV3Prompt; detections: PHIDetection[] } => {\n  const detections: PHIDetection[] = [];\n  const strategy = options.redactionStrategy ?? 'MASK';\n\n  const processedPrompt = prompt.map(message => {\n    if (message.role === 'system') {\n      return {\n        ...message,\n        content: redactStringValue(message.content, strategy, detections, 0.6),\n      } satisfies LanguageModelV3Message;\n    }\n\n    if (message.role === 'user') {\n      const parts = Array.isArray(message.content) ? message.content : [];\n      const redactedParts = parts.map(part => {\n        if (part.type === 'text') {\n          return {\n            ...part,\n            text: redactStringValue(part.text, strategy, detections, 0.6),\n          };\n        }\n        return part;\n      });\n      return {\n        ...message,\n        content: redactedParts,\n      } satisfies LanguageModelV3Message;\n    }\n\n    if (message.role === 'assistant') {\n      const parts = Array.isArray(message.content) ? message.content : [];\n      const redactedParts = parts.map(part => {\n        if (part.type === 'text' || part.type === 'reasoning') {\n          return {\n            ...part,\n            text: redactStringValue(part.text, strategy, detections, 0.6),\n          };\n        }\n\n        if (part.type === 'tool-result') {\n          return {\n            ...part,\n            output: redactToolResultOutput(part.output, strategy, detections, 0.6),\n          };\n        }\n\n        if (part.type === 'tool-call') {\n          const inputValue = part.input;\n          if (typeof inputValue === 'string') {\n            let redactedInput = inputValue;\n            try {\n              const parsed = JSON.parse(inputValue) as unknown;\n              const redacted = redactUnknownValue(parsed, strategy, detections, 0.6);\n              redactedInput = JSON.stringify(redacted);\n            } catch {\n              redactedInput = redactStringValue(inputValue, strategy, detections, 0.6);\n            }\n            return { ...part, input: redactedInput };\n          }\n\n          const redactedInput = redactUnknownValue(inputValue, strategy, detections, 0.6);\n          return { ...part, input: redactedInput };\n        }\n\n        return part;\n      });\n      return {\n        ...message,\n        content: redactedParts,\n      } satisfies LanguageModelV3Message;\n    }\n\n    if (message.role === 'tool') {\n      const parts = Array.isArray(message.content) ? message.content : [];\n      const redactedParts = parts.map(part => {\n        if (part.type === 'tool-result') {\n          return {\n            ...part,\n            output: redactToolResultOutput(part.output, strategy, detections, 0.6),\n          };\n        }\n        return part;\n      });\n      return {\n        ...message,\n        content: redactedParts,\n      } satisfies LanguageModelV3Message;\n    }\n\n    return message;\n  });\n\n  return { prompt: processedPrompt, detections };\n};\n\nconst redactGenerateResult = (\n  result: LanguageModelV3GenerateResult,\n  options: ComplianceOptions,\n): { result: LanguageModelV3GenerateResult; detections: PHIDetection[] } => {\n  const detections: PHIDetection[] = [];\n  const strategy = options.redactionStrategy ?? 'MASK';\n\n  const content = result.content.map(part => {\n    if (part.type === 'text' || part.type === 'reasoning') {\n      return {\n        ...part,\n        text: redactStringValue(part.text, strategy, detections, 0.7),\n      };\n    }\n\n    if (part.type === 'tool-result') {\n      const toolResult = part;\n      const redactedResult = redactUnknownValue(toolResult.result, strategy, detections, 0.7);\n      return { ...toolResult, result: redactedResult as LanguageModelV3ToolResult['result'] };\n    }\n\n    return part;\n  });\n\n  return {\n    result: {\n      ...result,\n      content: content as LanguageModelV3Content[],\n    },\n    detections,\n  };\n};\n\nconst createComplianceStreamTransform = (\n  options: ComplianceOptions,\n  onDetections: (detections: PHIDetection[]) => Promise<void>,\n): TransformStream<LanguageModelV3StreamPart, LanguageModelV3StreamPart> => {\n  const detections: PHIDetection[] = [];\n  const strategy = options.redactionStrategy ?? 'MASK';\n  const holdBackSize = 64;\n  const buffers = new Map<string, { pending: string; deltaType: string }>();\n\n  const extractDelta = (part: LanguageModelV3StreamPart): string | null => {\n    if (\n      part.type === 'text-delta' ||\n      part.type === 'reasoning-delta' ||\n      part.type === 'tool-input-delta'\n    ) {\n      return part.delta;\n    }\n    return null;\n  };\n\n  const getKey = (part: LanguageModelV3StreamPart): string | null => {\n    if (\n      part.type === 'text-delta' ||\n      part.type === 'reasoning-delta' ||\n      part.type === 'tool-input-delta'\n    ) {\n      return `${part.type}:${part.id}`;\n    }\n    if (\n      part.type === 'text-end' ||\n      part.type === 'reasoning-end' ||\n      part.type === 'tool-input-end'\n    ) {\n      const deltaType = part.type.replace('-end', '-delta');\n      return `${deltaType}:${part.id}`;\n    }\n    if (\n      part.type === 'text-start' ||\n      part.type === 'reasoning-start' ||\n      part.type === 'tool-input-start'\n    ) {\n      const deltaType = part.type.replace('-start', '-delta');\n      return `${deltaType}:${part.id}`;\n    }\n    return null;\n  };\n\n  const getDeltaType = (part: LanguageModelV3StreamPart): string | null => {\n    if (\n      part.type === 'text-delta' ||\n      part.type === 'reasoning-delta' ||\n      part.type === 'tool-input-delta'\n    ) {\n      return part.type;\n    }\n    if (\n      part.type === 'text-start' ||\n      part.type === 'reasoning-start' ||\n      part.type === 'tool-input-start'\n    ) {\n      return part.type.replace('-start', '-delta');\n    }\n    if (\n      part.type === 'text-end' ||\n      part.type === 'reasoning-end' ||\n      part.type === 'tool-input-end'\n    ) {\n      return part.type.replace('-end', '-delta');\n    }\n    return null;\n  };\n\n  return new TransformStream<LanguageModelV3StreamPart, LanguageModelV3StreamPart>({\n    transform(part, controller) {\n      const delta = extractDelta(part);\n      const key = getKey(part);\n      const deltaType = getDeltaType(part);\n\n      if (delta && key && deltaType) {\n        const state = buffers.get(key) ?? { pending: '', deltaType };\n        const pending = state.pending + delta;\n\n        if (pending.length <= holdBackSize) {\n          buffers.set(key, { ...state, pending });\n          return;\n        }\n\n        const safePrefix = pending.slice(0, pending.length - holdBackSize);\n        const redactedPrefix = redactStringValue(safePrefix, strategy, detections, 0.7);\n        buffers.set(key, { ...state, pending: pending.slice(pending.length - holdBackSize) });\n\n        if (redactedPrefix.length > 0) {\n          controller.enqueue({\n            ...part,\n            delta: redactedPrefix,\n          } as LanguageModelV3StreamPart);\n        }\n        return;\n      }\n\n      if (\n        part.type === 'text-end' ||\n        part.type === 'reasoning-end' ||\n        part.type === 'tool-input-end'\n      ) {\n        if (key) {\n          const state = buffers.get(key);\n          if (state && state.pending.length > 0) {\n            const redactedTail = redactStringValue(state.pending, strategy, detections, 0.7);\n            if (redactedTail.length > 0 && deltaType) {\n              controller.enqueue({\n                type: deltaType as LanguageModelV3StreamPart['type'],\n                id: part.id,\n                delta: redactedTail,\n                providerMetadata: 'providerMetadata' in part ? part.providerMetadata : undefined,\n              } as LanguageModelV3StreamPart);\n            }\n          }\n          buffers.delete(key);\n        }\n        controller.enqueue(part);\n        return;\n      }\n\n      if (\n        part.type === 'text-start' ||\n        part.type === 'reasoning-start' ||\n        part.type === 'tool-input-start'\n      ) {\n        if (key && deltaType && !buffers.has(key)) {\n          buffers.set(key, { pending: '', deltaType });\n        }\n        controller.enqueue(part);\n        return;\n      }\n\n      controller.enqueue(part);\n    },\n    async flush(controller) {\n      for (const [key, state] of buffers.entries()) {\n        if (state.pending.length > 0) {\n          const redactedTail = redactStringValue(state.pending, strategy, detections, 0.7);\n          if (redactedTail.length > 0) {\n            controller.enqueue({\n              type: state.deltaType as LanguageModelV3StreamPart['type'],\n              id: key.split(':').slice(1).join(':'),\n              delta: redactedTail,\n            } as LanguageModelV3StreamPart);\n          }\n        }\n      }\n      buffers.clear();\n      await onDetections(detections);\n      controller.terminate();\n    },\n  });\n};\n\nconst buildDefaultResource = (context: ABACContext | undefined): Resource => ({\n  id: 'ai-generation',\n  type: 'ai-generation',\n  sensitivity: 'confidential',\n  ownerId: context?.actor.id,\n});\n\nconst enforceABAC = async (options: ComplianceOptions): Promise<void> => {\n  if (!options.enableABAC) {\n    return;\n  }\n\n  const context = options.abacContext;\n  if (!context) {\n    throw new Error('ABAC enforcement requires abacContext');\n  }\n\n  const resource = options.resource ?? buildDefaultResource(context);\n  const evaluation = await evaluatePolicy(context, resource, 'execute');\n\n  if (!evaluation.decision.allowed) {\n    throw new Error(\n      evaluation.decision.reason ?? `ABAC denied by policy ${evaluation.decision.policyId}`,\n    );\n  }\n};\n\nconst logGenerationEvent = async (\n  options: ComplianceOptions,\n  params: LanguageModelV3CallOptions,\n  output: unknown,\n): Promise<void> => {\n  const logger = options.auditLogger ?? getAuditLogger();\n  const inputHash = await hashInput(JSON.stringify(params.prompt ?? []));\n  await logger.log({\n    actor: options.abacContext?.actor.id ?? 'system',\n    action: 'generation',\n    input_hash: inputHash,\n    output_snapshot: output,\n    policy_version: options.policyVersion ?? POLICY_VERSION,\n    metadata: {\n      phiRedaction: options.enablePHIRedaction,\n      abacEnabled: options.enableABAC,\n    },\n  });\n};\n\n/**\n * Wrap a language model with compliance middleware\n *\n * @param model - Base LanguageModelV3 to wrap\n * @param options - Compliance configuration\n * @returns Wrapped model with compliance guardrails\n *\n * @example\n * ```ts\n * import { openai } from '@ai-sdk/openai';\n * import { wrapWithCompliance } from '#/lib/ai-onedigital';\n *\n * const complianceModel = wrapWithCompliance(\n *   openai('gpt-5.1-thinking'),\n *   {\n *     enablePHIRedaction: true,\n *     enableABAC: true,\n *     policyVersion: 'v2.0',\n *   }\n * );\n * ```\n */\nexport function wrapWithCompliance(\n  model: SDKLanguageModelV3,\n  options: ComplianceOptions,\n): SDKLanguageModelV3 {\n  const complianceOptions: ComplianceOptions = {\n    ...DEFAULT_COMPLIANCE_OPTIONS,\n    ...options,\n  };\n\n  const middleware: SDKLanguageModelV3Middleware = {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      if (!complianceOptions.enablePHIRedaction) {\n        return params;\n      }\n\n      const { prompt, detections } = redactPrompt(params.prompt, complianceOptions);\n      if (detections.length > 0 && complianceOptions.abacContext) {\n        await logRedaction(complianceOptions.abacContext.actor.id, detections, {\n          count: detections.length,\n          location: 'input',\n        });\n      }\n      return {\n        ...params,\n        prompt,\n      };\n    },\n    wrapGenerate: async ({ doGenerate, params }: WrapGenerateArgs) => {\n      await enforceABAC(complianceOptions);\n      const result = await doGenerate();\n\n      if (!complianceOptions.enablePHIRedaction) {\n        await logGenerationEvent(complianceOptions, params, result.content);\n        return result;\n      }\n\n      const { result: redactedResult, detections } = redactGenerateResult(\n        result,\n        complianceOptions,\n      );\n      if (detections.length > 0 && complianceOptions.abacContext) {\n        await logRedaction(complianceOptions.abacContext.actor.id, detections, {\n          count: detections.length,\n          location: 'output',\n        });\n      }\n      await logGenerationEvent(complianceOptions, params, redactedResult.content);\n\n      return redactedResult;\n    },\n    wrapStream: async ({ doStream, params }: WrapStreamArgs) => {\n      await enforceABAC(complianceOptions);\n      const result = await doStream();\n\n      if (!complianceOptions.enablePHIRedaction) {\n        return result;\n      }\n\n      const stream = result.stream.pipeThrough(\n        createComplianceStreamTransform(complianceOptions, async detections => {\n          if (detections.length > 0 && complianceOptions.abacContext) {\n            await logRedaction(complianceOptions.abacContext.actor.id, detections, {\n              count: detections.length,\n              location: 'output',\n            });\n          }\n          await logGenerationEvent(complianceOptions, params, {\n            streamCompleted: true,\n          });\n        }),\n      );\n\n      return {\n        ...result,\n        stream,\n      };\n    },\n  };\n\n  return wrapLanguageModel({\n    model,\n    middleware,\n  });\n}\n\n/**\n * Quick helper to create a compliance-wrapped model with defaults\n */\nexport function createCompliantModel(\n  model: SDKLanguageModelV3,\n  actorId: string = 'anonymous',\n  options: Partial<ComplianceOptions> = {},\n): SDKLanguageModelV3 {\n  return wrapWithCompliance(model, {\n    enablePHIRedaction: true,\n    enableABAC: false, // Disabled by default for simplicity\n    policyVersion: POLICY_VERSION,\n    abacContext: options.abacContext ?? createDefaultABACContext(actorId),\n    ...options,\n  });\n}\n\n/**\n * Helper to pre-process messages for PHI redaction\n * Use this in your route handlers before calling streamText/generateText\n */\nexport async function preprocessMessages(\n  messages: SDKModelMessage[],\n  options: ComplianceOptions = DEFAULT_COMPLIANCE_OPTIONS,\n): Promise<{\n  messages: SDKModelMessage[];\n  detections: PHIDetection[];\n}> {\n  const { enablePHIRedaction, redactionStrategy = 'MASK', abacContext } = options;\n\n  if (!enablePHIRedaction) {\n    return { messages, detections: [] };\n  }\n\n  const allDetections: PHIDetection[] = [];\n\n  const isUserPart = (part: SDKTextPart | SDKFilePart | SDKImagePart): part is SDKTextPart =>\n    part.type === 'text';\n\n  const processedMessages = messages.map(msg => {\n    if (msg.role === 'tool') {\n      if (typeof msg.content === 'string') {\n        const { redacted, detections } = redactPHI(msg.content, redactionStrategy, {\n          minConfidence: 0.6,\n        });\n        allDetections.push(...detections);\n        const toolResult: SDKToolResultPart = {\n          type: 'tool-result',\n          toolCallId: 'unknown',\n          toolName: 'unknown',\n          output: { type: 'text', value: redacted },\n        };\n        return {\n          ...msg,\n          content: [toolResult],\n        };\n      }\n\n      if (Array.isArray(msg.content)) {\n        const updatedToolContent = msg.content.map(part => {\n          if (part.type === 'tool-result') {\n            if (part.output.type === 'text' || part.output.type === 'error-text') {\n              const { redacted, detections } = redactPHI(part.output.value, redactionStrategy, {\n                minConfidence: 0.6,\n              });\n              allDetections.push(...detections);\n              return {\n                ...part,\n                output: { ...part.output, value: redacted },\n              };\n            }\n            return part;\n          }\n          return part;\n        });\n\n        return {\n          ...msg,\n          content: updatedToolContent,\n        };\n      }\n\n      return msg;\n    }\n\n    if (msg.role === 'system') {\n      if (typeof msg.content === 'string') {\n        const { redacted, detections } = redactPHI(msg.content, redactionStrategy, {\n          minConfidence: 0.6,\n        });\n        allDetections.push(...detections);\n        return { ...msg, content: redacted };\n      }\n      return msg;\n    }\n\n    if (msg.role === 'user') {\n      if (typeof msg.content === 'string') {\n        const { redacted, detections } = redactPHI(msg.content, redactionStrategy, {\n          minConfidence: 0.6,\n        });\n        allDetections.push(...detections);\n        return { ...msg, content: redacted };\n      }\n\n      if (Array.isArray(msg.content)) {\n        const updatedParts = msg.content.map(part => {\n          if (isUserPart(part)) {\n            const { redacted, detections } = redactPHI(part.text, redactionStrategy, {\n              minConfidence: 0.6,\n            });\n            allDetections.push(...detections);\n            return { ...part, text: redacted };\n          }\n          return part;\n        });\n\n        return {\n          ...msg,\n          content: updatedParts,\n        };\n      }\n\n      return msg;\n    }\n\n    if (typeof msg.content === 'string') {\n      const { redacted, detections } = redactPHI(msg.content, redactionStrategy, {\n        minConfidence: 0.6,\n      });\n\n      allDetections.push(...detections);\n\n      return {\n        ...msg,\n        content: redacted,\n      };\n    }\n    if (Array.isArray(msg.content)) {\n      const updatedParts = msg.content.map(part => {\n        if (part && typeof part === 'object' && 'type' in part && part.type === 'text') {\n          const textPart = part;\n          const { redacted, detections } = redactPHI(textPart.text, redactionStrategy, {\n            minConfidence: 0.6,\n          });\n          allDetections.push(...detections);\n          return { ...textPart, text: redacted };\n        }\n        return part;\n      });\n\n      return {\n        ...msg,\n        content: updatedParts,\n      };\n    }\n\n    return msg;\n  });\n\n  // Log redactions if any\n  if (allDetections.length > 0 && abacContext) {\n    await logRedaction(abacContext.actor.id, allDetections, {\n      count: allDetections.length,\n    });\n  }\n\n  return { messages: processedMessages, detections: allDetections };\n}\n\n/**\n * Helper to post-process text output for PHI redaction\n */\nexport async function postprocessText(\n  text: string,\n  options: ComplianceOptions = DEFAULT_COMPLIANCE_OPTIONS,\n): Promise<{\n  text: string;\n  detections: PHIDetection[];\n}> {\n  const { enablePHIRedaction, redactionStrategy = 'MASK', abacContext } = options;\n\n  if (!enablePHIRedaction) {\n    return { text, detections: [] };\n  }\n\n  const { redacted, detections } = redactPHI(text, redactionStrategy, {\n    minConfidence: 0.7,\n  });\n\n  // Log redactions if any\n  if (detections.length > 0 && abacContext) {\n    await logRedaction(abacContext.actor.id, detections, {\n      location: 'output',\n      count: detections.length,\n    });\n  }\n\n  return { text: redacted, detections };\n}\n"],"mappings":";;;;;;;;;;;;;;;AAgDA,MAAM,iBAAiB;;;;AAKvB,SAAS,yBAAyB,SAA8B;AAC9D,QAAO;EACL,OAAO;GACL,IAAI;GACJ,OAAO,EAAE;GACT,YAAY,EAAE;GACf;EACD,aAAa;GACX,2BAAW,IAAI,MAAM;GACrB,WAAW;GACZ;EACD,SAAS;EACV;;AAOH,MAAM,6BAAgD;CACpD,oBAAoB;CACpB,YAAY;CACZ,eAAe;CAChB;AAED,MAAM,YAAY,UAChB,OAAO,UAAU,YAAY,UAAU;AAEzC,MAAM,qBACJ,MACA,UACA,YACA,kBACW;CACX,MAAM,EAAE,UAAU,YAAY,UAAU,UAAU,MAAM,UAAU,EAAE,eAAe,CAAC;AACpF,YAAW,KAAK,GAAG,MAAM;AACzB,QAAO;;AAGT,MAAM,sBACJ,OACA,UACA,YACA,kBACY;AACZ,KAAI,OAAO,UAAU,SACnB,QAAO,kBAAkB,OAAO,UAAU,YAAY,cAAc;AAGtE,KAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAI,UAAS,mBAAmB,OAAO,UAAU,YAAY,cAAc,CAAC;AAG3F,KAAI,SAAS,MAAM,CACjB,QAAO,OAAO,YACZ,OAAO,QAAQ,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,CAC1C,KACA,mBAAmB,OAAO,UAAU,YAAY,cAAc,CAC/D,CAAC,CACH;AAGH,QAAO;;AAGT,MAAM,0BACJ,QACA,UACA,YACA,kBACoC;AACpC,KAAI,OAAO,SAAS,OAClB,QAAO;EACL,MAAM;EACN,OAAO,kBAAkB,OAAO,OAAO,UAAU,YAAY,cAAc;EAC3E,iBAAiB,OAAO;EACzB;AAGH,KAAI,OAAO,SAAS,OAClB,QAAO;EACL,MAAM;EACN,OAAO,mBAAmB,OAAO,OAAO,UAAU,YAAY,cAAc;EAG5E,iBAAiB,OAAO;EACzB;AAGH,QAAO;;AAGT,MAAM,gBACJ,QACA,YACkE;CAClE,MAAM,aAA6B,EAAE;CACrC,MAAM,WAAW,QAAQ,qBAAqB;AA0F9C,QAAO;EAAE,QAxFe,OAAO,KAAI,YAAW;AAC5C,OAAI,QAAQ,SAAS,SACnB,QAAO;IACL,GAAG;IACH,SAAS,kBAAkB,QAAQ,SAAS,UAAU,YAAY,GAAI;IACvE;AAGH,OAAI,QAAQ,SAAS,QAAQ;IAE3B,MAAM,iBADQ,MAAM,QAAQ,QAAQ,QAAQ,GAAG,QAAQ,UAAU,EAAE,EACvC,KAAI,SAAQ;AACtC,SAAI,KAAK,SAAS,OAChB,QAAO;MACL,GAAG;MACH,MAAM,kBAAkB,KAAK,MAAM,UAAU,YAAY,GAAI;MAC9D;AAEH,YAAO;MACP;AACF,WAAO;KACL,GAAG;KACH,SAAS;KACV;;AAGH,OAAI,QAAQ,SAAS,aAAa;IAEhC,MAAM,iBADQ,MAAM,QAAQ,QAAQ,QAAQ,GAAG,QAAQ,UAAU,EAAE,EACvC,KAAI,SAAQ;AACtC,SAAI,KAAK,SAAS,UAAU,KAAK,SAAS,YACxC,QAAO;MACL,GAAG;MACH,MAAM,kBAAkB,KAAK,MAAM,UAAU,YAAY,GAAI;MAC9D;AAGH,SAAI,KAAK,SAAS,cAChB,QAAO;MACL,GAAG;MACH,QAAQ,uBAAuB,KAAK,QAAQ,UAAU,YAAY,GAAI;MACvE;AAGH,SAAI,KAAK,SAAS,aAAa;MAC7B,MAAM,aAAa,KAAK;AACxB,UAAI,OAAO,eAAe,UAAU;OAClC,IAAI,gBAAgB;AACpB,WAAI;QAEF,MAAM,WAAW,mBADF,KAAK,MAAM,WAAW,EACO,UAAU,YAAY,GAAI;AACtE,wBAAgB,KAAK,UAAU,SAAS;eAClC;AACN,wBAAgB,kBAAkB,YAAY,UAAU,YAAY,GAAI;;AAE1E,cAAO;QAAE,GAAG;QAAM,OAAO;QAAe;;MAG1C,MAAM,gBAAgB,mBAAmB,YAAY,UAAU,YAAY,GAAI;AAC/E,aAAO;OAAE,GAAG;OAAM,OAAO;OAAe;;AAG1C,YAAO;MACP;AACF,WAAO;KACL,GAAG;KACH,SAAS;KACV;;AAGH,OAAI,QAAQ,SAAS,QAAQ;IAE3B,MAAM,iBADQ,MAAM,QAAQ,QAAQ,QAAQ,GAAG,QAAQ,UAAU,EAAE,EACvC,KAAI,SAAQ;AACtC,SAAI,KAAK,SAAS,cAChB,QAAO;MACL,GAAG;MACH,QAAQ,uBAAuB,KAAK,QAAQ,UAAU,YAAY,GAAI;MACvE;AAEH,YAAO;MACP;AACF,WAAO;KACL,GAAG;KACH,SAAS;KACV;;AAGH,UAAO;IACP;EAEgC;EAAY;;AAGhD,MAAM,wBACJ,QACA,YAC0E;CAC1E,MAAM,aAA6B,EAAE;CACrC,MAAM,WAAW,QAAQ,qBAAqB;CAE9C,MAAM,UAAU,OAAO,QAAQ,KAAI,SAAQ;AACzC,MAAI,KAAK,SAAS,UAAU,KAAK,SAAS,YACxC,QAAO;GACL,GAAG;GACH,MAAM,kBAAkB,KAAK,MAAM,UAAU,YAAY,GAAI;GAC9D;AAGH,MAAI,KAAK,SAAS,eAAe;GAC/B,MAAM,aAAa;GACnB,MAAM,iBAAiB,mBAAmB,WAAW,QAAQ,UAAU,YAAY,GAAI;AACvF,UAAO;IAAE,GAAG;IAAY,QAAQ;IAAuD;;AAGzF,SAAO;GACP;AAEF,QAAO;EACL,QAAQ;GACN,GAAG;GACM;GACV;EACD;EACD;;AAGH,MAAM,mCACJ,SACA,iBAC0E;CAC1E,MAAM,aAA6B,EAAE;CACrC,MAAM,WAAW,QAAQ,qBAAqB;CAC9C,MAAM,eAAe;CACrB,MAAM,0BAAU,IAAI,KAAqD;CAEzE,MAAM,gBAAgB,SAAmD;AACvE,MACE,KAAK,SAAS,gBACd,KAAK,SAAS,qBACd,KAAK,SAAS,mBAEd,QAAO,KAAK;AAEd,SAAO;;CAGT,MAAM,UAAU,SAAmD;AACjE,MACE,KAAK,SAAS,gBACd,KAAK,SAAS,qBACd,KAAK,SAAS,mBAEd,QAAO,GAAG,KAAK,KAAK,GAAG,KAAK;AAE9B,MACE,KAAK,SAAS,cACd,KAAK,SAAS,mBACd,KAAK,SAAS,iBAGd,QAAO,GADW,KAAK,KAAK,QAAQ,QAAQ,SAAS,CACjC,GAAG,KAAK;AAE9B,MACE,KAAK,SAAS,gBACd,KAAK,SAAS,qBACd,KAAK,SAAS,mBAGd,QAAO,GADW,KAAK,KAAK,QAAQ,UAAU,SAAS,CACnC,GAAG,KAAK;AAE9B,SAAO;;CAGT,MAAM,gBAAgB,SAAmD;AACvE,MACE,KAAK,SAAS,gBACd,KAAK,SAAS,qBACd,KAAK,SAAS,mBAEd,QAAO,KAAK;AAEd,MACE,KAAK,SAAS,gBACd,KAAK,SAAS,qBACd,KAAK,SAAS,mBAEd,QAAO,KAAK,KAAK,QAAQ,UAAU,SAAS;AAE9C,MACE,KAAK,SAAS,cACd,KAAK,SAAS,mBACd,KAAK,SAAS,iBAEd,QAAO,KAAK,KAAK,QAAQ,QAAQ,SAAS;AAE5C,SAAO;;AAGT,QAAO,IAAI,gBAAsE;EAC/E,UAAU,MAAM,YAAY;GAC1B,MAAM,QAAQ,aAAa,KAAK;GAChC,MAAM,MAAM,OAAO,KAAK;GACxB,MAAM,YAAY,aAAa,KAAK;AAEpC,OAAI,SAAS,OAAO,WAAW;IAC7B,MAAM,QAAQ,QAAQ,IAAI,IAAI,IAAI;KAAE,SAAS;KAAI;KAAW;IAC5D,MAAM,UAAU,MAAM,UAAU;AAEhC,QAAI,QAAQ,UAAU,cAAc;AAClC,aAAQ,IAAI,KAAK;MAAE,GAAG;MAAO;MAAS,CAAC;AACvC;;IAIF,MAAM,iBAAiB,kBADJ,QAAQ,MAAM,GAAG,QAAQ,SAAS,aAAa,EACb,UAAU,YAAY,GAAI;AAC/E,YAAQ,IAAI,KAAK;KAAE,GAAG;KAAO,SAAS,QAAQ,MAAM,QAAQ,SAAS,aAAa;KAAE,CAAC;AAErF,QAAI,eAAe,SAAS,EAC1B,YAAW,QAAQ;KACjB,GAAG;KACH,OAAO;KACR,CAA8B;AAEjC;;AAGF,OACE,KAAK,SAAS,cACd,KAAK,SAAS,mBACd,KAAK,SAAS,kBACd;AACA,QAAI,KAAK;KACP,MAAM,QAAQ,QAAQ,IAAI,IAAI;AAC9B,SAAI,SAAS,MAAM,QAAQ,SAAS,GAAG;MACrC,MAAM,eAAe,kBAAkB,MAAM,SAAS,UAAU,YAAY,GAAI;AAChF,UAAI,aAAa,SAAS,KAAK,UAC7B,YAAW,QAAQ;OACjB,MAAM;OACN,IAAI,KAAK;OACT,OAAO;OACP,kBAAkB,sBAAsB,OAAO,KAAK,mBAAmB;OACxE,CAA8B;;AAGnC,aAAQ,OAAO,IAAI;;AAErB,eAAW,QAAQ,KAAK;AACxB;;AAGF,OACE,KAAK,SAAS,gBACd,KAAK,SAAS,qBACd,KAAK,SAAS,oBACd;AACA,QAAI,OAAO,aAAa,CAAC,QAAQ,IAAI,IAAI,CACvC,SAAQ,IAAI,KAAK;KAAE,SAAS;KAAI;KAAW,CAAC;AAE9C,eAAW,QAAQ,KAAK;AACxB;;AAGF,cAAW,QAAQ,KAAK;;EAE1B,MAAM,MAAM,YAAY;AACtB,QAAK,MAAM,CAAC,KAAK,UAAU,QAAQ,SAAS,CAC1C,KAAI,MAAM,QAAQ,SAAS,GAAG;IAC5B,MAAM,eAAe,kBAAkB,MAAM,SAAS,UAAU,YAAY,GAAI;AAChF,QAAI,aAAa,SAAS,EACxB,YAAW,QAAQ;KACjB,MAAM,MAAM;KACZ,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,IAAI;KACrC,OAAO;KACR,CAA8B;;AAIrC,WAAQ,OAAO;AACf,SAAM,aAAa,WAAW;AAC9B,cAAW,WAAW;;EAEzB,CAAC;;AAGJ,MAAM,wBAAwB,aAAgD;CAC5E,IAAI;CACJ,MAAM;CACN,aAAa;CACb,SAAS,SAAS,MAAM;CACzB;AAED,MAAM,cAAc,OAAO,YAA8C;AACvE,KAAI,CAAC,QAAQ,WACX;CAGF,MAAM,UAAU,QAAQ;AACxB,KAAI,CAAC,QACH,OAAM,IAAI,MAAM,wCAAwC;CAI1D,MAAM,aAAa,MAAM,eAAe,SADvB,QAAQ,YAAY,qBAAqB,QAAQ,EACP,UAAU;AAErE,KAAI,CAAC,WAAW,SAAS,QACvB,OAAM,IAAI,MACR,WAAW,SAAS,UAAU,yBAAyB,WAAW,SAAS,WAC5E;;AAIL,MAAM,qBAAqB,OACzB,SACA,QACA,WACkB;CAClB,MAAM,SAAS,QAAQ,eAAe,gBAAgB;CACtD,MAAM,YAAY,MAAM,UAAU,KAAK,UAAU,OAAO,UAAU,EAAE,CAAC,CAAC;AACtE,OAAM,OAAO,IAAI;EACf,OAAO,QAAQ,aAAa,MAAM,MAAM;EACxC,QAAQ;EACR,YAAY;EACZ,iBAAiB;EACjB,gBAAgB,QAAQ,iBAAiB;EACzC,UAAU;GACR,cAAc,QAAQ;GACtB,aAAa,QAAQ;GACtB;EACF,CAAC;;;;;;;;;;;;;;;;;;;;;;;;AAyBJ,SAAgB,mBACd,OACA,SACoB;CACpB,MAAM,oBAAuC;EAC3C,GAAG;EACH,GAAG;EACJ;AAyED,QAAO,kBAAkB;EACvB;EACA,YAzE+C;GAC/C,sBAAsB;GACtB,iBAAiB,OAAO,EAAE,aAAa;AACrC,QAAI,CAAC,kBAAkB,mBACrB,QAAO;IAGT,MAAM,EAAE,QAAQ,eAAe,aAAa,OAAO,QAAQ,kBAAkB;AAC7E,QAAI,WAAW,SAAS,KAAK,kBAAkB,YAC7C,OAAM,aAAa,kBAAkB,YAAY,MAAM,IAAI,YAAY;KACrE,OAAO,WAAW;KAClB,UAAU;KACX,CAAC;AAEJ,WAAO;KACL,GAAG;KACH;KACD;;GAEH,cAAc,OAAO,EAAE,YAAY,aAA+B;AAChE,UAAM,YAAY,kBAAkB;IACpC,MAAM,SAAS,MAAM,YAAY;AAEjC,QAAI,CAAC,kBAAkB,oBAAoB;AACzC,WAAM,mBAAmB,mBAAmB,QAAQ,OAAO,QAAQ;AACnE,YAAO;;IAGT,MAAM,EAAE,QAAQ,gBAAgB,eAAe,qBAC7C,QACA,kBACD;AACD,QAAI,WAAW,SAAS,KAAK,kBAAkB,YAC7C,OAAM,aAAa,kBAAkB,YAAY,MAAM,IAAI,YAAY;KACrE,OAAO,WAAW;KAClB,UAAU;KACX,CAAC;AAEJ,UAAM,mBAAmB,mBAAmB,QAAQ,eAAe,QAAQ;AAE3E,WAAO;;GAET,YAAY,OAAO,EAAE,UAAU,aAA6B;AAC1D,UAAM,YAAY,kBAAkB;IACpC,MAAM,SAAS,MAAM,UAAU;AAE/B,QAAI,CAAC,kBAAkB,mBACrB,QAAO;IAGT,MAAM,SAAS,OAAO,OAAO,YAC3B,gCAAgC,mBAAmB,OAAM,eAAc;AACrE,SAAI,WAAW,SAAS,KAAK,kBAAkB,YAC7C,OAAM,aAAa,kBAAkB,YAAY,MAAM,IAAI,YAAY;MACrE,OAAO,WAAW;MAClB,UAAU;MACX,CAAC;AAEJ,WAAM,mBAAmB,mBAAmB,QAAQ,EAClD,iBAAiB,MAClB,CAAC;MACF,CACH;AAED,WAAO;KACL,GAAG;KACH;KACD;;GAEJ;EAKA,CAAC;;;;;AAMJ,SAAgB,qBACd,OACA,UAAkB,aAClB,UAAsC,EAAE,EACpB;AACpB,QAAO,mBAAmB,OAAO;EAC/B,oBAAoB;EACpB,YAAY;EACZ,eAAe;EACf,aAAa,QAAQ,eAAe,yBAAyB,QAAQ;EACrE,GAAG;EACJ,CAAC;;;;;;AAOJ,eAAsB,mBACpB,UACA,UAA6B,4BAI5B;CACD,MAAM,EAAE,oBAAoB,oBAAoB,QAAQ,gBAAgB;AAExE,KAAI,CAAC,mBACH,QAAO;EAAE;EAAU,YAAY,EAAE;EAAE;CAGrC,MAAM,gBAAgC,EAAE;CAExC,MAAM,cAAc,SAClB,KAAK,SAAS;CAEhB,MAAM,oBAAoB,SAAS,KAAI,QAAO;AAC5C,MAAI,IAAI,SAAS,QAAQ;AACvB,OAAI,OAAO,IAAI,YAAY,UAAU;IACnC,MAAM,EAAE,UAAU,eAAe,UAAU,IAAI,SAAS,mBAAmB,EACzE,eAAe,IAChB,CAAC;AACF,kBAAc,KAAK,GAAG,WAAW;IACjC,MAAM,aAAgC;KACpC,MAAM;KACN,YAAY;KACZ,UAAU;KACV,QAAQ;MAAE,MAAM;MAAQ,OAAO;MAAU;KAC1C;AACD,WAAO;KACL,GAAG;KACH,SAAS,CAAC,WAAW;KACtB;;AAGH,OAAI,MAAM,QAAQ,IAAI,QAAQ,EAAE;IAC9B,MAAM,qBAAqB,IAAI,QAAQ,KAAI,SAAQ;AACjD,SAAI,KAAK,SAAS,eAAe;AAC/B,UAAI,KAAK,OAAO,SAAS,UAAU,KAAK,OAAO,SAAS,cAAc;OACpE,MAAM,EAAE,UAAU,eAAe,UAAU,KAAK,OAAO,OAAO,mBAAmB,EAC/E,eAAe,IAChB,CAAC;AACF,qBAAc,KAAK,GAAG,WAAW;AACjC,cAAO;QACL,GAAG;QACH,QAAQ;SAAE,GAAG,KAAK;SAAQ,OAAO;SAAU;QAC5C;;AAEH,aAAO;;AAET,YAAO;MACP;AAEF,WAAO;KACL,GAAG;KACH,SAAS;KACV;;AAGH,UAAO;;AAGT,MAAI,IAAI,SAAS,UAAU;AACzB,OAAI,OAAO,IAAI,YAAY,UAAU;IACnC,MAAM,EAAE,UAAU,eAAe,UAAU,IAAI,SAAS,mBAAmB,EACzE,eAAe,IAChB,CAAC;AACF,kBAAc,KAAK,GAAG,WAAW;AACjC,WAAO;KAAE,GAAG;KAAK,SAAS;KAAU;;AAEtC,UAAO;;AAGT,MAAI,IAAI,SAAS,QAAQ;AACvB,OAAI,OAAO,IAAI,YAAY,UAAU;IACnC,MAAM,EAAE,UAAU,eAAe,UAAU,IAAI,SAAS,mBAAmB,EACzE,eAAe,IAChB,CAAC;AACF,kBAAc,KAAK,GAAG,WAAW;AACjC,WAAO;KAAE,GAAG;KAAK,SAAS;KAAU;;AAGtC,OAAI,MAAM,QAAQ,IAAI,QAAQ,EAAE;IAC9B,MAAM,eAAe,IAAI,QAAQ,KAAI,SAAQ;AAC3C,SAAI,WAAW,KAAK,EAAE;MACpB,MAAM,EAAE,UAAU,eAAe,UAAU,KAAK,MAAM,mBAAmB,EACvE,eAAe,IAChB,CAAC;AACF,oBAAc,KAAK,GAAG,WAAW;AACjC,aAAO;OAAE,GAAG;OAAM,MAAM;OAAU;;AAEpC,YAAO;MACP;AAEF,WAAO;KACL,GAAG;KACH,SAAS;KACV;;AAGH,UAAO;;AAGT,MAAI,OAAO,IAAI,YAAY,UAAU;GACnC,MAAM,EAAE,UAAU,eAAe,UAAU,IAAI,SAAS,mBAAmB,EACzE,eAAe,IAChB,CAAC;AAEF,iBAAc,KAAK,GAAG,WAAW;AAEjC,UAAO;IACL,GAAG;IACH,SAAS;IACV;;AAEH,MAAI,MAAM,QAAQ,IAAI,QAAQ,EAAE;GAC9B,MAAM,eAAe,IAAI,QAAQ,KAAI,SAAQ;AAC3C,QAAI,QAAQ,OAAO,SAAS,YAAY,UAAU,QAAQ,KAAK,SAAS,QAAQ;KAC9E,MAAM,WAAW;KACjB,MAAM,EAAE,UAAU,eAAe,UAAU,SAAS,MAAM,mBAAmB,EAC3E,eAAe,IAChB,CAAC;AACF,mBAAc,KAAK,GAAG,WAAW;AACjC,YAAO;MAAE,GAAG;MAAU,MAAM;MAAU;;AAExC,WAAO;KACP;AAEF,UAAO;IACL,GAAG;IACH,SAAS;IACV;;AAGH,SAAO;GACP;AAGF,KAAI,cAAc,SAAS,KAAK,YAC9B,OAAM,aAAa,YAAY,MAAM,IAAI,eAAe,EACtD,OAAO,cAAc,QACtB,CAAC;AAGJ,QAAO;EAAE,UAAU;EAAmB,YAAY;EAAe;;;;;AAMnE,eAAsB,gBACpB,MACA,UAA6B,4BAI5B;CACD,MAAM,EAAE,oBAAoB,oBAAoB,QAAQ,gBAAgB;AAExE,KAAI,CAAC,mBACH,QAAO;EAAE;EAAM,YAAY,EAAE;EAAE;CAGjC,MAAM,EAAE,UAAU,eAAe,UAAU,MAAM,mBAAmB,EAClE,eAAe,IAChB,CAAC;AAGF,KAAI,WAAW,SAAS,KAAK,YAC3B,OAAM,aAAa,YAAY,MAAM,IAAI,YAAY;EACnD,UAAU;EACV,OAAO,WAAW;EACnB,CAAC;AAGJ,QAAO;EAAE,MAAM;EAAU;EAAY"}