@openora/core 0.4.0

package/dist/audit/__tests__/audit.service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=audit.service.test.d.ts.map

package/dist/audit/__tests__/audit.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.service.test.d.ts","sourceRoot":"","sources":["../../../src/audit/__tests__/audit.service.test.ts"],"names":[],"mappings":""}

package/dist/audit/__tests__/audit.service.test.js

@@ -0,0 +1,415 @@
+import { describe, it, expect, vi } from 'vitest';
+import { mock, mockDb } from '../../testing/mock.js';
+import { AuditService, computeHash } from '../service/audit.service.js';
+describe('computeHash canonical form', () => {
+    it('matches the frozen golden vector', () => {
+        expect(computeHash({
+            id: '11111111-1111-1111-1111-111111111111',
+            actorId: null,
+            actorType: 'system',
+            action: 'test.action',
+            resourceType: 'test',
+            resourceId: null,
+            before: null,
+            after: null,
+            result: null,
+            seq: 1,
+            createdAt: '2024-01-01T00:00:00.000Z',
+            prevHash: null,
+        })).toBe('4974d60531e6d9bd960f61a1d86371ac92aa12e31ec24ab3f61130aa6ee1f3ca');
+    });
+    it('changes when before/after/result differ - the mutation payload is in the chain', () => {
+        const base = {
+            id: '11111111-1111-1111-1111-111111111111',
+            actorId: null,
+            actorType: 'system',
+            action: 'test.action',
+            resourceType: 'test',
+            resourceId: null,
+            seq: 1,
+            createdAt: '2024-01-01T00:00:00.000Z',
+            prevHash: null,
+        };
+        const unmodified = computeHash({ ...base, before: null, after: null, result: null });
+        const tamperedAfter = computeHash({
+            ...base,
+            before: null,
+            after: { role: 'admin' },
+            result: null,
+        });
+        const tamperedResult = computeHash({ ...base, before: null, after: null, result: 'success' });
+        expect(tamperedAfter).not.toBe(unmodified);
+        expect(tamperedResult).not.toBe(unmodified);
+    });
+});
+function makeEvents() {
+    return mock({ emit: vi.fn(), on: vi.fn() });
+}
+const CREATED_AT = new Date('2024-01-01T00:00:00.000Z');
+function makeRow(overrides = {}) {
+    return {
+        id: 'row-1',
+        actorId: null,
+        actorType: 'system',
+        action: 'identity.user.registered',
+        resourceType: 'identity',
+        resourceId: null,
+        before: null,
+        after: null,
+        ip: null,
+        userAgent: null,
+        correlationId: null,
+        seq: 1,
+        prevHash: null,
+        hash: 'deadbeef',
+        createdAt: CREATED_AT,
+        ...overrides,
+    };
+}
+function makeManualDrizzle(db) {
+    return mockDb(db);
+}
+function makeChainStore() {
+    const rows = [];
+    let seqCounter = 0;
+    let executeCall = 0;
+    const tx = {
+        execute: vi.fn().mockImplementation(() => {
+            const call = executeCall++;
+            if (call % 2 === 1) {
+                seqCounter += 1;
+                return Promise.resolve({ rows: [{ seq: seqCounter }] });
+            }
+            return Promise.resolve({ rows: [{}] });
+        }),
+        select: vi.fn().mockImplementation(() => {
+            const chain = {
+                from: vi.fn().mockReturnThis(),
+                orderBy: vi.fn().mockReturnThis(),
+                limit: vi.fn().mockImplementation(() => {
+                    const latest = rows[rows.length - 1];
+                    return Promise.resolve(latest ? [{ hash: latest.hash }] : []);
+                }),
+            };
+            return chain;
+        }),
+        insert: vi.fn().mockImplementation(() => ({
+            values: vi.fn().mockImplementation((vals) => ({
+                returning: vi.fn().mockImplementation(() => {
+                    rows.push(vals);
+                    return Promise.resolve([vals]);
+                }),
+            })),
+        })),
+    };
+    const db = {
+        transaction: vi.fn().mockImplementation((cb) => cb(tx)),
+    };
+    return { drizzle: makeManualDrizzle(db), tx, getRows: () => rows };
+}
+describe('AuditService.record()', () => {
+    it('inserts with prevHash=null for the first row and stores a real sha256 hash (no UPDATE)', async () => {
+        const store = makeChainStore();
+        const svc = new AuditService(store.drizzle, makeEvents());
+        const result = await svc.record({
+            actorType: 'system',
+            action: 'identity.user.registered',
+            resourceType: 'identity',
+        });
+        expect(result.prevHash).toBeNull();
+        const expected = computeHash({
+            id: result.id,
+            actorId: result.actorId ?? null,
+            actorType: result.actorType,
+            action: result.action,
+            resourceType: result.resourceType,
+            resourceId: result.resourceId ?? null,
+            before: result.before ?? null,
+            after: result.after ?? null,
+            result: result.result ?? null,
+            seq: result.seq,
+            createdAt: result.createdAt,
+            prevHash: null,
+        });
+        expect(result.hash).toBe(expected);
+        expect(result.hash).not.toBe('pending');
+        expect('update' in store.tx).toBe(false);
+    });
+    it('chains prevHash from the latest existing row across sequential appends', async () => {
+        const store = makeChainStore();
+        const svc = new AuditService(store.drizzle, makeEvents());
+        const first = await svc.record({
+            actorType: 'system',
+            action: 'identity.user.registered',
+            resourceType: 'identity',
+        });
+        const second = await svc.record({
+            actorType: 'system',
+            action: 'wallet.deposit.completed',
+            resourceType: 'wallet',
+        });
+        expect(first.prevHash).toBeNull();
+        expect(first.seq).toBe(1);
+        expect(second.prevHash).toBe(first.hash);
+        expect(second.seq).toBe(2);
+        const persisted = store.getRows();
+        const verifySvc = new AuditService(makeManualDrizzle({
+            select: vi.fn().mockReturnValue({
+                from: vi.fn().mockReturnThis(),
+                where: vi.fn().mockReturnThis(),
+                orderBy: vi.fn().mockResolvedValueOnce(persisted),
+            }),
+        }), makeEvents());
+        expect(await verifySvc.verifyChain()).toEqual({ valid: true });
+    });
+});
+describe('AuditService.verifyChain()', () => {
+    function makeVerifyDb(rows) {
+        const db = {
+            select: vi.fn().mockReturnValue({
+                from: vi.fn().mockReturnThis(),
+                where: vi.fn().mockReturnThis(),
+                orderBy: vi.fn().mockResolvedValueOnce(rows),
+            }),
+        };
+        return makeManualDrizzle(db);
+    }
+    it('returns valid:true for an empty chain', async () => {
+        const svc = new AuditService(makeVerifyDb([]), makeEvents());
+        expect(await svc.verifyChain()).toEqual({ valid: true });
+    });
+    it('returns valid:true when hash chain is intact across two rows', async () => {
+        const hash1 = computeHash({
+            id: 'r1',
+            actorId: null,
+            actorType: 'system',
+            action: 'identity.user.registered',
+            resourceType: 'identity',
+            resourceId: null,
+            before: null,
+            after: null,
+            result: null,
+            seq: 1,
+            createdAt: CREATED_AT.toISOString(),
+            prevHash: null,
+        });
+        const hash2 = computeHash({
+            id: 'r2',
+            actorId: null,
+            actorType: 'system',
+            action: 'wallet.deposit.completed',
+            resourceType: 'wallet',
+            resourceId: null,
+            before: null,
+            after: null,
+            result: null,
+            seq: 2,
+            createdAt: CREATED_AT.toISOString(),
+            prevHash: hash1,
+        });
+        const rows = [
+            makeRow({ id: 'r1', seq: 1, prevHash: null, hash: hash1 }),
+            makeRow({
+                id: 'r2',
+                seq: 2,
+                action: 'wallet.deposit.completed',
+                resourceType: 'wallet',
+                prevHash: hash1,
+                hash: hash2,
+            }),
+        ];
+        const svc = new AuditService(makeVerifyDb(rows), makeEvents());
+        expect(await svc.verifyChain()).toEqual({ valid: true });
+    });
+    it('detects a tampered row - wrong hash value', async () => {
+        const rows = [makeRow({ id: 'r1', seq: 1, prevHash: null, hash: 'tampered-wrong-hash' })];
+        const svc = new AuditService(makeVerifyDb(rows), makeEvents());
+        const result = await svc.verifyChain();
+        expect(result.valid).toBe(false);
+        if (!result.valid) {
+            expect(result.rowId).toBe('r1');
+            expect(result.firstBrokenSeq).toBe(1);
+        }
+    });
+    it('detects a rewritten before/after/result - not just the id/action/actor fields', async () => {
+        const hash1 = computeHash({
+            id: 'r1',
+            actorId: 'admin-1',
+            actorType: 'admin',
+            action: 'admin.user.updated',
+            resourceType: 'user',
+            resourceId: 'user-9',
+            before: { role: 'player' },
+            after: { role: 'player' },
+            result: 'success',
+            seq: 1,
+            createdAt: CREATED_AT.toISOString(),
+            prevHash: null,
+        });
+        // A rogue DBA rewrites `after` to hide a role escalation, but leaves the
+        // original hash in place - this must now fail verification.
+        const rows = [
+            makeRow({
+                id: 'r1',
+                actorId: 'admin-1',
+                actorType: 'admin',
+                action: 'admin.user.updated',
+                resourceType: 'user',
+                resourceId: 'user-9',
+                before: { role: 'player' },
+                after: { role: 'admin' },
+                seq: 1,
+                prevHash: null,
+                hash: hash1,
+            }),
+        ];
+        const svc = new AuditService(makeVerifyDb(rows), makeEvents());
+        const result = await svc.verifyChain();
+        expect(result.valid).toBe(false);
+        if (!result.valid) {
+            expect(result.rowId).toBe('r1');
+        }
+    });
+    it('detects a broken prevHash link between rows', async () => {
+        const hash1 = computeHash({
+            id: 'r1',
+            actorId: null,
+            actorType: 'system',
+            action: 'identity.user.registered',
+            resourceType: 'identity',
+            resourceId: null,
+            before: null,
+            after: null,
+            result: null,
+            seq: 1,
+            createdAt: CREATED_AT.toISOString(),
+            prevHash: null,
+        });
+        const rows = [
+            makeRow({ id: 'r1', seq: 1, prevHash: null, hash: hash1 }),
+            makeRow({ id: 'r2', seq: 2, prevHash: 'wrong-prev-hash', hash: 'anything' }),
+        ];
+        const svc = new AuditService(makeVerifyDb(rows), makeEvents());
+        const result = await svc.verifyChain();
+        expect(result.valid).toBe(false);
+        if (!result.valid) {
+            expect(result.rowId).toBe('r2');
+            expect(result.firstBrokenSeq).toBe(2);
+        }
+    });
+});
+describe('AuditService.list()', () => {
+    function makeListDb(rows, count) {
+        let selectCall = 0;
+        const db = {
+            select: vi.fn().mockImplementation(() => {
+                const call = selectCall++;
+                if (call === 0) {
+                    return {
+                        from: vi.fn().mockReturnThis(),
+                        where: vi.fn().mockReturnThis(),
+                        orderBy: vi.fn().mockReturnThis(),
+                        limit: vi.fn().mockReturnThis(),
+                        offset: vi.fn().mockResolvedValueOnce(rows),
+                    };
+                }
+                return {
+                    from: vi.fn().mockReturnThis(),
+                    where: vi.fn().mockResolvedValueOnce([{ count }]),
+                };
+            }),
+        };
+        return makeManualDrizzle(db);
+    }
+    it('returns paginated items with total', async () => {
+        const rows = [makeRow(), makeRow({ id: 'row-2', seq: 2 })];
+        const svc = new AuditService(makeListDb(rows, 2), makeEvents());
+        const result = await svc.list({ page: 1, limit: 10 });
+        expect(result.items).toHaveLength(2);
+        expect(result.total).toBe(2);
+        expect(result.page).toBe(1);
+        expect(result.limit).toBe(10);
+    });
+    it('applies actorId filter and returns empty result when no match', async () => {
+        const svc = new AuditService(makeListDb([], 0), makeEvents());
+        const result = await svc.list({ actorId: 'user-xyz', page: 1, limit: 10 });
+        expect(result.items).toHaveLength(0);
+        expect(result.total).toBe(0);
+    });
+    it('q matches a row by actorId', async () => {
+        const rows = [makeRow({ actorId: 'subject-1', actorType: 'player' })];
+        const svc = new AuditService(makeListDb(rows, 1), makeEvents());
+        const result = await svc.list({ q: 'subject-1', page: 1, limit: 10 });
+        expect(result.items).toHaveLength(1);
+        expect(result.items[0]?.actorId).toBe('subject-1');
+        expect(result.total).toBe(1);
+    });
+    it('q matches a row by resourceId', async () => {
+        const rows = [makeRow({ resourceType: 'transaction', resourceId: 'txn-9' })];
+        const svc = new AuditService(makeListDb(rows, 1), makeEvents());
+        const result = await svc.list({ q: 'txn-9', page: 1, limit: 10 });
+        expect(result.items).toHaveLength(1);
+        expect(result.items[0]?.resourceId).toBe('txn-9');
+        expect(result.total).toBe(1);
+    });
+    it('applies explicit resourceId filter', async () => {
+        const rows = [makeRow({ resourceType: 'transaction', resourceId: 'txn-42' })];
+        const svc = new AuditService(makeListDb(rows, 1), makeEvents());
+        const result = await svc.list({ resourceId: 'txn-42', page: 1, limit: 10 });
+        expect(result.items).toHaveLength(1);
+        expect(result.items[0]?.resourceId).toBe('txn-42');
+    });
+    it('q combined with actorType still ANDs correctly', async () => {
+        const rows = [makeRow({ actorId: 'subject-1', actorType: 'player' })];
+        const svc = new AuditService(makeListDb(rows, 1), makeEvents());
+        const result = await svc.list({ q: 'subject-1', actorType: 'player', page: 1, limit: 10 });
+        expect(result.items).toHaveLength(1);
+        expect(result.items[0]?.actorType).toBe('player');
+    });
+    it('respects page and limit for offset calculation', async () => {
+        const svc = new AuditService(makeListDb([], 50), makeEvents());
+        const result = await svc.list({ page: 3, limit: 10 });
+        expect(result.page).toBe(3);
+        expect(result.limit).toBe(10);
+        expect(result.total).toBe(50);
+    });
+});
+describe('AuditService.exportCsv()', () => {
+    function makeExportDb(rows) {
+        const db = {
+            select: vi.fn().mockReturnValue({
+                from: vi.fn().mockReturnThis(),
+                where: vi.fn().mockReturnThis(),
+                orderBy: vi.fn().mockReturnThis(),
+                limit: vi.fn().mockResolvedValueOnce(rows),
+            }),
+        };
+        return makeManualDrizzle(db);
+    }
+    it('emits a header row followed by one data row per result', async () => {
+        const rows = [
+            makeRow({ actorId: 'u1', actorType: 'player' }),
+            makeRow({ id: 'row-2', seq: 2 }),
+        ];
+        const svc = new AuditService(makeExportDb(rows), makeEvents());
+        const csv = await svc.exportCsv({});
+        const lines = csv.split('\n').filter(Boolean);
+        expect(lines).toHaveLength(3); // 1 header + 2 data
+        expect(lines[0]).toContain('id');
+        expect(lines[0]).toContain('hash');
+    });
+    it('includes correct field values in data rows', async () => {
+        const rows = [makeRow({ actorId: 'u1', actorType: 'player' })];
+        const svc = new AuditService(makeExportDb(rows), makeEvents());
+        const csv = await svc.exportCsv({});
+        expect(csv).toContain('row-1');
+        expect(csv).toContain('player');
+    });
+    it('escapes double-quotes in field values', async () => {
+        const rows = [makeRow({ action: 'has "quotes"' })];
+        const svc = new AuditService(makeExportDb(rows), makeEvents());
+        const csv = await svc.exportCsv({});
+        expect(csv).toContain('has ""quotes""');
+    });
+});
+//# sourceMappingURL=audit.service.test.js.map

package/dist/audit/__tests__/audit.service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.service.test.js","sourceRoot":"","sources":["../../../src/audit/__tests__/audit.service.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAExE,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CACJ,WAAW,CAAC;YACV,EAAE,EAAE,sCAAsC;YAC1C,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,aAAa;YACrB,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,GAAG,EAAE,CAAC;YACN,SAAS,EAAE,0BAA0B;YACrC,QAAQ,EAAE,IAAI;SACf,CAAC,CACH,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,IAAI,GAAG;YACX,EAAE,EAAE,sCAAsC;YAC1C,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,QAAiB;YAC5B,MAAM,EAAE,aAAa;YACrB,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,IAAI;YAChB,GAAG,EAAE,CAAC;YACN,SAAS,EAAE,0BAA0B;YACrC,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,aAAa,GAAG,WAAW,CAAC;YAChC,GAAG,IAAI;YACP,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YACxB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAE9F,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,UAAU;IACjB,OAAO,IAAI,CAA0C,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAExD,SAAS,OAAO,CACd,YAgBI,EAAE;IAEN,OAAO;QACL,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,QAAiB;QAC5B,MAAM,EAAE,0BAA0B;QAClC,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,IAAI;QACX,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,GAAG,EAAE,CAAC;QACN,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,UAAU;QACrB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,EAA2B;IAE3B,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,IAAI,GAAiC,EAAE,CAAC;IAC9C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,MAAM,EAAE,GAAG;QACT,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;YACvC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;YAC3B,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnB,UAAU,IAAI,CAAC,CAAC;gBAChB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC;QACF,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;YACtC,MAAM,KAAK,GAAG;gBACZ,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAC9B,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBACjC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;oBACrC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBACrC,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAChE,CAAC,CAAC;aACH,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;YACxC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAgC,EAAE,EAAE,CAAC,CAAC;gBACxE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;oBACzC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChB,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjC,CAAC,CAAC;aACH,CAAC,CAAC;SACJ,CAAC,CAAC;KACJ,CAAC;IAEF,MAAM,EAAE,GAAG;QACT,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAsC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;KAC5F,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;AACrE,CAAC;AAED,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC9B,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,0BAA0B;YAClC,YAAY,EAAE,UAAU;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEnC,MAAM,QAAQ,GAAG,WAAW,CAAC;YAC3B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACrC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC7B,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,0BAA0B;YAClC,YAAY,EAAE,UAAU;SACzB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YAC9B,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,0BAA0B;YAClC,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE3B,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,YAAY,CAChC,iBAAiB,CAAC;YAChB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC;gBAC9B,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAC9B,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAC/B,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,SAAS,CAAC;aAClD,CAAC;SACH,CAAC,EACF,UAAU,EAAE,CACb,CAAC;QACF,MAAM,CAAC,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,SAAS,YAAY,CAAC,IAAkC;QACtD,MAAM,EAAE,GAAG;YACT,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC;gBAC9B,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAC9B,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAC/B,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;aAC7C,CAAC;SACH,CAAC;QACF,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,0BAA0B;YAClC,YAAY,EAAE,UAAU;YACxB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,GAAG,EAAE,CAAC;YACN,SAAS,EAAE,UAAU,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,0BAA0B;YAClC,YAAY,EAAE,QAAQ;YACtB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,GAAG,EAAE,CAAC;YACN,SAAS,EAAE,UAAU,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG;YACX,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC1D,OAAO,CAAC;gBACN,EAAE,EAAE,IAAI;gBACR,GAAG,EAAE,CAAC;gBACN,MAAM,EAAE,0BAA0B;gBAClC,YAAY,EAAE,QAAQ;gBACtB,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,KAAK;aACZ,CAAC;SACH,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;QAE1F,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;QAEvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,OAAO;YAClB,MAAM,EAAE,oBAAoB;YAC5B,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,QAAQ;YACpB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,CAAC;YACN,SAAS,EAAE,UAAU,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,yEAAyE;QACzE,4DAA4D;QAC5D,MAAM,IAAI,GAAG;YACX,OAAO,CAAC;gBACN,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,OAAO;gBAClB,MAAM,EAAE,oBAAoB;gBAC5B,YAAY,EAAE,MAAM;gBACpB,UAAU,EAAE,QAAQ;gBACpB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;gBACxB,GAAG,EAAE,CAAC;gBACN,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,KAAK;aACZ,CAAC;SACH,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;QAEvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,GAAG,WAAW,CAAC;YACxB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,0BAA0B;YAClC,YAAY,EAAE,UAAU;YACxB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,GAAG,EAAE,CAAC;YACN,SAAS,EAAE,UAAU,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG;YACX,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC1D,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;SAC7E,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;QAEvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,SAAS,UAAU,CAAC,IAAkC,EAAE,KAAa;QACnE,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,EAAE,GAAG;YACT,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;gBACtC,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;gBAC1B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO;wBACL,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;wBAC9B,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;wBAC/B,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;wBACjC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;wBAC/B,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;qBAC5C,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;oBAC9B,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;iBAClD,CAAC;YACJ,CAAC,CAAC;SACH,CAAC;QACF,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAE3E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAElE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAE5E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAE3F,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,SAAS,YAAY,CAAC,IAAkC;QACtD,MAAM,EAAE,GAAG;YACT,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC;gBAC9B,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAC9B,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAC/B,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBACjC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;aAC3C,CAAC;SACH,CAAC;QACF,OAAO,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG;YACX,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;YAC/C,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;SACjC,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAEpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAEpC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAEpC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/audit/contract/index.d.ts

@@ -0,0 +1,128 @@
+import * as z from 'zod';
+export declare const ACTOR_TYPES: readonly ["player", "admin", "system"];
+export declare const AuditActorTypeSchema: z.ZodEnum<{
+    system: "system";
+    admin: "admin";
+    player: "player";
+}>;
+export type AuditActorType = z.infer<typeof AuditActorTypeSchema>;
+export declare const AuditLogEntrySchema: z.ZodObject<{
+    id: z.ZodUUID;
+    actorId: z.ZodNullable<z.ZodString>;
+    actorType: z.ZodEnum<{
+        system: "system";
+        admin: "admin";
+        player: "player";
+    }>;
+    action: z.ZodString;
+    resourceType: z.ZodString;
+    resourceId: z.ZodNullable<z.ZodString>;
+    before: z.ZodNullable<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodArray<z.ZodUnknown>]>>;
+    after: z.ZodNullable<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodArray<z.ZodUnknown>]>>;
+    ip: z.ZodNullable<z.ZodString>;
+    userAgent: z.ZodNullable<z.ZodString>;
+    correlationId: z.ZodNullable<z.ZodString>;
+    result: z.ZodNullable<z.ZodString>;
+    seq: z.ZodNumber;
+    prevHash: z.ZodNullable<z.ZodString>;
+    hash: z.ZodString;
+    createdAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type AuditLogEntry = z.infer<typeof AuditLogEntrySchema>;
+export declare const AuditListFiltersSchema: z.ZodObject<{
+    page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    actorId: z.ZodOptional<z.ZodString>;
+    actorType: z.ZodOptional<z.ZodEnum<{
+        system: "system";
+        admin: "admin";
+        player: "player";
+    }>>;
+    action: z.ZodOptional<z.ZodString>;
+    actionPrefix: z.ZodOptional<z.ZodString>;
+    resourceType: z.ZodOptional<z.ZodString>;
+    resourceId: z.ZodOptional<z.ZodString>;
+    q: z.ZodOptional<z.ZodString>;
+    fromDate: z.ZodOptional<z.ZodString>;
+    toDate: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuditListFilters = z.infer<typeof AuditListFiltersSchema>;
+export declare const AuditExportFiltersSchema: z.ZodObject<{
+    actorId: z.ZodOptional<z.ZodString>;
+    action: z.ZodOptional<z.ZodString>;
+    actorType: z.ZodOptional<z.ZodEnum<{
+        system: "system";
+        admin: "admin";
+        player: "player";
+    }>>;
+    resourceType: z.ZodOptional<z.ZodString>;
+    resourceId: z.ZodOptional<z.ZodString>;
+    actionPrefix: z.ZodOptional<z.ZodString>;
+    q: z.ZodOptional<z.ZodString>;
+    fromDate: z.ZodOptional<z.ZodString>;
+    toDate: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuditExportFilters = z.infer<typeof AuditExportFiltersSchema>;
+export declare const auditContract: {
+    list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+        limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+        actorId: z.ZodOptional<z.ZodString>;
+        actorType: z.ZodOptional<z.ZodEnum<{
+            system: "system";
+            admin: "admin";
+            player: "player";
+        }>>;
+        action: z.ZodOptional<z.ZodString>;
+        actionPrefix: z.ZodOptional<z.ZodString>;
+        resourceType: z.ZodOptional<z.ZodString>;
+        resourceId: z.ZodOptional<z.ZodString>;
+        q: z.ZodOptional<z.ZodString>;
+        fromDate: z.ZodOptional<z.ZodString>;
+        toDate: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        items: z.ZodArray<z.ZodObject<{
+            id: z.ZodUUID;
+            actorId: z.ZodNullable<z.ZodString>;
+            actorType: z.ZodEnum<{
+                system: "system";
+                admin: "admin";
+                player: "player";
+            }>;
+            action: z.ZodString;
+            resourceType: z.ZodString;
+            resourceId: z.ZodNullable<z.ZodString>;
+            before: z.ZodNullable<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodArray<z.ZodUnknown>]>>;
+            after: z.ZodNullable<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodArray<z.ZodUnknown>]>>;
+            ip: z.ZodNullable<z.ZodString>;
+            userAgent: z.ZodNullable<z.ZodString>;
+            correlationId: z.ZodNullable<z.ZodString>;
+            result: z.ZodNullable<z.ZodString>;
+            seq: z.ZodNumber;
+            prevHash: z.ZodNullable<z.ZodString>;
+            hash: z.ZodString;
+            createdAt: z.ZodISODateTime;
+        }, z.core.$strip>>;
+        total: z.ZodNumber;
+        page: z.ZodNumber;
+        limit: z.ZodNumber;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    exportCsv: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        actorId: z.ZodOptional<z.ZodString>;
+        action: z.ZodOptional<z.ZodString>;
+        actorType: z.ZodOptional<z.ZodEnum<{
+            system: "system";
+            admin: "admin";
+            player: "player";
+        }>>;
+        resourceType: z.ZodOptional<z.ZodString>;
+        resourceId: z.ZodOptional<z.ZodString>;
+        actionPrefix: z.ZodOptional<z.ZodString>;
+        q: z.ZodOptional<z.ZodString>;
+        fromDate: z.ZodOptional<z.ZodString>;
+        toDate: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        csv: z.ZodString;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/audit/contract/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/audit/contract/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAOzB,eAAO,MAAM,WAAW,wCAAyC,CAAC;AAClE,eAAO,MAAM,oBAAoB;;;;EAAsB,CAAC;AACxD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AASlE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;iBAiB9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;iBAYjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;iBAA2D,CAAC;AACjG,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAUzB,CAAC"}

package/dist/audit/contract/index.js

@@ -0,0 +1,58 @@
+import { oc } from '@orpc/contract';
+import * as z from 'zod';
+import { TimestampSchema, UuidSchema } from '@openora/core/contracts';
+import { PageQuerySchema, paginated } from '@openora/core/contracts/kit';
+// The value tuple is the single source of truth: `z.enum` derives the contract here
+// and the Drizzle `pgEnum` in audit/schema derives the DB enum from the same tuple,
+// so the two can never drift.
+export const ACTOR_TYPES = ['player', 'admin', 'system'];
+export const AuditActorTypeSchema = z.enum(ACTOR_TYPES);
+// before/after are jsonb snapshots and may hold an object OR an array (eg a role's
+// permission list), so allow both - constraining to a record 500s the list output
+// validation whenever an array snapshot exists.
+const AuditSnapshotSchema = z
+    .union([z.record(z.string(), z.unknown()), z.array(z.unknown())])
+    .nullable();
+export const AuditLogEntrySchema = z.object({
+    id: UuidSchema,
+    actorId: z.string().nullable(),
+    actorType: AuditActorTypeSchema,
+    action: z.string(),
+    resourceType: z.string(),
+    resourceId: z.string().nullable(),
+    before: AuditSnapshotSchema,
+    after: AuditSnapshotSchema,
+    ip: z.string().nullable(),
+    userAgent: z.string().nullable(),
+    correlationId: z.string().nullable(),
+    result: z.string().nullable(),
+    seq: z.number(),
+    prevHash: z.string().nullable(),
+    hash: z.string(),
+    createdAt: TimestampSchema,
+});
+export const AuditListFiltersSchema = PageQuerySchema.extend({
+    actorId: z.string().optional(),
+    actorType: AuditActorTypeSchema.optional(),
+    action: z.string().optional(),
+    // Prefix match on action (eg 'rg.' for the RG activity log / change history).
+    actionPrefix: z.string().trim().min(1).optional(),
+    resourceType: z.string().optional(),
+    resourceId: z.string().optional(),
+    // Single search box: exact-match the subject against actorId OR resourceId.
+    q: z.string().trim().min(1).optional(),
+    fromDate: z.string().optional(),
+    toDate: z.string().optional(),
+});
+export const AuditExportFiltersSchema = AuditListFiltersSchema.omit({ page: true, limit: true });
+export const auditContract = {
+    list: oc
+        .route({ method: 'GET', path: '/audit/logs' })
+        .input(AuditListFiltersSchema)
+        .output(paginated(AuditLogEntrySchema)),
+    exportCsv: oc
+        .route({ method: 'GET', path: '/audit/export' })
+        .input(AuditExportFiltersSchema)
+        .output(z.object({ csv: z.string() })),
+};
+//# sourceMappingURL=index.js.map

package/dist/audit/contract/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/audit/contract/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAEzE,oFAAoF;AACpF,oFAAoF;AACpF,8BAA8B;AAC9B,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAGxD,mFAAmF;AACnF,kFAAkF;AAClF,gDAAgD;AAChD,MAAM,mBAAmB,GAAG,CAAC;KAC1B,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;KAChE,QAAQ,EAAE,CAAC;AAEd,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,UAAU;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,oBAAoB;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,mBAAmB;IAC3B,KAAK,EAAE,mBAAmB;IAC1B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC,MAAM,CAAC;IAC3D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,8EAA8E;IAC9E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,4EAA4E;IAC5E,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAGjG,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI,EAAE,EAAE;SACL,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;SAC7C,KAAK,CAAC,sBAAsB,CAAC;SAC7B,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAEzC,SAAS,EAAE,EAAE;SACV,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;SAC/C,KAAK,CAAC,wBAAwB,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;CACzC,CAAC"}