@panguard-ai/panguard-guard 0.1.0

package/dist/investigation/index.js

@@ -0,0 +1,570 @@
+/**
+ * Dynamic Reasoning Investigation Engine
+ * 動態推理調查引擎
+ *
+ * Performs multi-step investigation on suspicious events using a variety
+ * of inspection tools. Each tool contributes risk data and may trigger
+ * additional investigation steps based on findings.
+ * 使用多種檢查工具對可疑事件進行多步驟調查。每個工具貢獻風險數據，
+ * 並可能根據發現觸發額外的調查步驟。
+ *
+ * @module @panguard-ai/panguard-guard/investigation
+ */
+import { createLogger, checkThreatIntel } from '@panguard-ai/core';
+const logger = createLogger('panguard-guard:investigation');
+/** Maximum investigation steps to prevent infinite loops / 最大調查步驟數以防止無限循環 */
+const MAX_STEPS = 8;
+/** Max events to keep in the sliding window / 滑動視窗保留的最大事件數 */
+const EVENT_BUFFER_SIZE = 500;
+/** Correlation time window in ms (10 minutes) / 關聯時間視窗（10 分鐘） */
+const CORRELATION_WINDOW_MS = 10 * 60 * 1000;
+/**
+ * Investigation Engine performs dynamic, multi-step reasoning about security events
+ * 調查引擎對安全事件進行動態多步驟推理
+ */
+export class InvestigationEngine {
+    baseline;
+    /** Sliding window of recent events for correlation / 近期事件滑動視窗 */
+    eventBuffer = [];
+    constructor(baseline) {
+        this.baseline = baseline;
+    }
+    /**
+     * Feed an event into the correlation buffer.
+     * Call this for every event processed by the guard engine.
+     */
+    recordEvent(event) {
+        const now = Date.now();
+        this.eventBuffer.push({ event, receivedAt: now });
+        // Trim old events beyond buffer size
+        while (this.eventBuffer.length > EVENT_BUFFER_SIZE) {
+            this.eventBuffer.shift();
+        }
+    }
+    /**
+     * Investigate a security event using dynamic reasoning
+     * 使用動態推理調查安全事件
+     *
+     * Creates an investigation plan based on event characteristics,
+     * executes each tool step, and collects findings. Steps may trigger
+     * additional investigation based on intermediate results.
+     * 根據事件特徵建立調查計畫，執行每個工具步驟並收集發現。
+     * 步驟可能根據中間結果觸發額外調查。
+     *
+     * @param event - The security event to investigate / 要調查的安全事件
+     * @returns Completed investigation plan with all results / 包含所有結果的已完成調查計畫
+     */
+    async investigate(event) {
+        logger.info(`Starting investigation for event ${event.id} / 開始調查事件 ${event.id}`);
+        const plan = this.createPlan(event);
+        const completedSteps = [];
+        for (const step of plan.steps) {
+            if (completedSteps.length >= MAX_STEPS) {
+                logger.info(`Max investigation steps (${MAX_STEPS}) reached / 已達最大調查步驟數`);
+                break;
+            }
+            const startTime = Date.now();
+            const result = await this.executeStep(step.tool, event);
+            const durationMs = Date.now() - startTime;
+            const completedStep = {
+                ...step,
+                result,
+                durationMs,
+            };
+            completedSteps.push(completedStep);
+            logger.info(`Step ${step.tool}: risk=${result.riskContribution}, ` +
+                `needs_more=${result.needsAdditionalInvestigation} / ` +
+                `步驟 ${step.tool}: 風險=${result.riskContribution}`);
+            // Dynamic reasoning: add follow-up steps if needed
+            // 動態推理：如需要則添加後續步驟
+            if (result.needsAdditionalInvestigation) {
+                const followUpTools = this.getFollowUpTools(step.tool, result);
+                for (const followUp of followUpTools) {
+                    if (completedSteps.length < MAX_STEPS &&
+                        !completedSteps.some((s) => s.tool === followUp) &&
+                        !plan.steps.some((s) => s.tool === followUp)) {
+                        const fStart = Date.now();
+                        const fResult = await this.executeStep(followUp, event);
+                        const fDuration = Date.now() - fStart;
+                        completedSteps.push({
+                            tool: followUp,
+                            reason: `Follow-up from ${step.tool}: ${result.finding} / 來自 ${step.tool} 的後續調查`,
+                            result: fResult,
+                            durationMs: fDuration,
+                        });
+                    }
+                }
+            }
+        }
+        return {
+            steps: completedSteps,
+            reasoning: this.buildReasoning(completedSteps),
+        };
+    }
+    /**
+     * Create an initial investigation plan based on event characteristics
+     * 根據事件特徵建立初始調查計畫
+     */
+    createPlan(event) {
+        const steps = [];
+        // Always check time anomaly / 總是檢查時間異常
+        steps.push({
+            tool: 'checkTimeAnomaly',
+            reason: 'Check if event occurred during unusual hours / 檢查事件是否發生在異常時間',
+        });
+        // Network events: check IP and geo / 網路事件：檢查 IP 和地理位置
+        if (event.source === 'network') {
+            steps.push({
+                tool: 'checkIPHistory',
+                reason: 'Check IP reputation and history / 檢查 IP 信譽和歷史',
+            });
+            steps.push({
+                tool: 'checkGeoLocation',
+                reason: 'Verify geographic origin of connection / 驗證連線的地理來源',
+            });
+            steps.push({
+                tool: 'checkNetworkPattern',
+                reason: 'Analyze network communication patterns / 分析網路通訊模式',
+            });
+        }
+        // Process events: check process tree and file reputation
+        // 程序事件：檢查程序樹和檔案信譽
+        if (event.source === 'process') {
+            steps.push({
+                tool: 'checkProcessTree',
+                reason: 'Examine parent-child process relationships / 檢查父子程序關係',
+            });
+            steps.push({
+                tool: 'checkFileReputation',
+                reason: 'Check executable file reputation / 檢查可執行檔信譽',
+            });
+        }
+        // Auth events: check user privilege and related events
+        // 認證事件：檢查使用者權限和相關事件
+        if (event.category === 'authentication' || event.category === 'authorization') {
+            steps.push({
+                tool: 'checkUserPrivilege',
+                reason: 'Verify user privilege level / 驗證使用者權限等級',
+            });
+            steps.push({
+                tool: 'checkRelatedEvents',
+                reason: 'Look for related suspicious activity / 查找相關可疑活動',
+            });
+        }
+        // File events: check file reputation / 檔案事件：檢查檔案信譽
+        if (event.source === 'file') {
+            steps.push({
+                tool: 'checkFileReputation',
+                reason: 'Analyze file reputation and hash / 分析檔案信譽和雜湊',
+            });
+        }
+        return {
+            steps,
+            reasoning: `Investigation plan for ${event.source}/${event.category} event / ` +
+                `${event.source}/${event.category} 事件的調查計畫`,
+        };
+    }
+    /**
+     * Execute a single investigation step
+     * 執行單一調查步驟
+     */
+    async executeStep(tool, event) {
+        switch (tool) {
+            case 'checkIPHistory':
+                return this.checkIPHistory(event);
+            case 'checkUserPrivilege':
+                return this.checkUserPrivilege(event);
+            case 'checkTimeAnomaly':
+                return this.checkTimeAnomaly(event);
+            case 'checkGeoLocation':
+                return this.checkGeoLocation(event);
+            case 'checkRelatedEvents':
+                return this.checkRelatedEvents(event);
+            case 'checkProcessTree':
+                return this.checkProcessTree(event);
+            case 'checkFileReputation':
+                return this.checkFileReputation(event);
+            case 'checkNetworkPattern':
+                return this.checkNetworkPattern(event);
+            default:
+                return {
+                    finding: `Unknown tool: ${tool} / 未知工具`,
+                    riskContribution: 0,
+                    needsAdditionalInvestigation: false,
+                };
+        }
+    }
+    /**
+     * Determine follow-up investigation tools based on a step's results
+     * 根據步驟結果決定後續調查工具
+     */
+    getFollowUpTools(tool, result) {
+        const followUps = [];
+        if (tool === 'checkIPHistory' && result.riskContribution > 50) {
+            followUps.push('checkGeoLocation', 'checkRelatedEvents');
+        }
+        if (tool === 'checkProcessTree' && result.riskContribution > 40) {
+            followUps.push('checkFileReputation');
+        }
+        if (tool === 'checkTimeAnomaly' && result.riskContribution > 60) {
+            followUps.push('checkUserPrivilege', 'checkRelatedEvents');
+        }
+        if (tool === 'checkUserPrivilege' && result.riskContribution > 50) {
+            followUps.push('checkRelatedEvents');
+        }
+        return followUps;
+    }
+    // ---------------------------------------------------------------------------
+    // Investigation tool implementations / 調查工具實作
+    // ---------------------------------------------------------------------------
+    /** Check IP history against threat intelligence / 檢查 IP 歷史（威脅情報） */
+    checkIPHistory(event) {
+        const ip = event.metadata?.['sourceIP'] ?? event.metadata?.['remoteAddress'];
+        if (!ip) {
+            return {
+                finding: 'No IP address available for lookup / 無可查詢的 IP 地址',
+                riskContribution: 0,
+                needsAdditionalInvestigation: false,
+            };
+        }
+        const threatEntry = checkThreatIntel(ip);
+        if (threatEntry) {
+            return {
+                finding: `IP ${ip} found in threat intel: ${threatEntry.type} (${threatEntry.source}) / ` +
+                    `IP ${ip} 在威脅情報中: ${threatEntry.type} (${threatEntry.source})`,
+                riskContribution: 80,
+                needsAdditionalInvestigation: true,
+                data: { ip, threat: `${threatEntry.type} (${threatEntry.source})`, type: threatEntry.type },
+            };
+        }
+        return {
+            finding: `IP ${ip} not found in threat intel / IP ${ip} 未在威脅情報中`,
+            riskContribution: 0,
+            needsAdditionalInvestigation: false,
+            data: { ip },
+        };
+    }
+    /** Check user privilege level / 檢查使用者權限等級 */
+    checkUserPrivilege(event) {
+        const user = event.metadata?.['user'] ?? event.metadata?.['username'];
+        if (!user) {
+            return {
+                finding: 'No user information available / 無可用的使用者資訊',
+                riskContribution: 0,
+                needsAdditionalInvestigation: false,
+            };
+        }
+        // Check if root/admin / 檢查是否為 root/admin
+        const isPrivileged = [
+            'root',
+            'admin',
+            'administrator',
+            'system',
+            'nt authority\\system',
+        ].includes(user.toLowerCase());
+        if (isPrivileged) {
+            return {
+                finding: `Privileged user activity: ${user} / 特權使用者活動: ${user}`,
+                riskContribution: 60,
+                needsAdditionalInvestigation: true,
+                data: { user, privileged: true },
+            };
+        }
+        // Check if user is in baseline / 檢查使用者是否在基線中
+        const knownUser = this.baseline.normalLoginPatterns.some((l) => l.username === user);
+        if (!knownUser) {
+            return {
+                finding: `Unknown user: ${user} (not in baseline) / 未知使用者: ${user}`,
+                riskContribution: 45,
+                needsAdditionalInvestigation: true,
+                data: { user, known: false },
+            };
+        }
+        return {
+            finding: `Known user: ${user} / 已知使用者: ${user}`,
+            riskContribution: 0,
+            needsAdditionalInvestigation: false,
+            data: { user, known: true },
+        };
+    }
+    /** Check time anomaly / 檢查時間異常 */
+    checkTimeAnomaly(event) {
+        const eventTime = event.timestamp instanceof Date ? event.timestamp : new Date(event.timestamp);
+        const hour = eventTime.getHours();
+        // Business hours: 6-22 / 營業時間: 6-22
+        const outsideBusinessHours = hour < 6 || hour > 22;
+        if (outsideBusinessHours) {
+            // Check if this user normally operates at this hour
+            // 檢查該使用者是否通常在此時間操作
+            const user = event.metadata?.['user'] ?? event.metadata?.['username'];
+            const hasNightPattern = user
+                ? this.baseline.normalLoginPatterns.some((l) => l.username === user && (l.hourOfDay < 6 || l.hourOfDay > 22))
+                : false;
+            if (hasNightPattern) {
+                return {
+                    finding: `Off-hours activity (${hour}:00) but user has night pattern / ` +
+                        `非工作時間活動但使用者有夜間模式`,
+                    riskContribution: 15,
+                    needsAdditionalInvestigation: false,
+                    data: { hour, outsideBusinessHours: true, hasNightPattern: true },
+                };
+            }
+            return {
+                finding: `Activity at unusual hour (${hour}:00) / 在異常時間活動 (${hour}:00)`,
+                riskContribution: 40,
+                needsAdditionalInvestigation: true,
+                data: { hour, outsideBusinessHours: true, hasNightPattern: false },
+            };
+        }
+        return {
+            finding: `Activity during normal hours (${hour}:00) / 正常時間活動`,
+            riskContribution: 0,
+            needsAdditionalInvestigation: false,
+            data: { hour, outsideBusinessHours: false },
+        };
+    }
+    /** Check geographic location / 檢查地理位置 */
+    checkGeoLocation(event) {
+        const ip = event.metadata?.['sourceIP'] ?? event.metadata?.['remoteAddress'];
+        if (!ip) {
+            return {
+                finding: 'No IP for geolocation / 無可查詢的 IP',
+                riskContribution: 0,
+                needsAdditionalInvestigation: false,
+            };
+        }
+        // Check if from known baseline connections / 檢查是否來自已知基線連線
+        const knownConnection = this.baseline.normalConnections.some((c) => c.remoteAddress === ip);
+        if (!knownConnection) {
+            return {
+                finding: `Connection from new IP: ${ip} (not in baseline) / ` +
+                    `來自新 IP 的連線: ${ip} (不在基線中)`,
+                riskContribution: 35,
+                needsAdditionalInvestigation: true,
+                data: { ip, known: false },
+            };
+        }
+        return {
+            finding: `Connection from known IP: ${ip} / 來自已知 IP 的連線`,
+            riskContribution: 0,
+            needsAdditionalInvestigation: false,
+            data: { ip, known: true },
+        };
+    }
+    /** Check related events using the sliding window buffer / 使用滑動視窗緩衝區檢查相關事件 */
+    checkRelatedEvents(event) {
+        const now = Date.now();
+        const cutoff = now - CORRELATION_WINDOW_MS;
+        // Extract correlation keys from the current event
+        const eventIP = event.metadata?.['sourceIP'] ?? event.metadata?.['remoteAddress'];
+        const eventUser = event.metadata?.['user'] ?? event.metadata?.['username'];
+        const eventProcess = event.metadata?.['processName'];
+        // Find related events in the time window (excluding the event itself)
+        const related = [];
+        for (const stored of this.eventBuffer) {
+            if (stored.receivedAt < cutoff)
+                continue;
+            if (stored.event.id === event.id)
+                continue;
+            const storedIP = stored.event.metadata?.['sourceIP'] ??
+                stored.event.metadata?.['remoteAddress'];
+            const storedUser = stored.event.metadata?.['user'] ??
+                stored.event.metadata?.['username'];
+            const storedProcess = stored.event.metadata?.['processName'];
+            // Same source IP
+            if (eventIP && storedIP && eventIP === storedIP) {
+                related.push({ event: stored.event, reason: `same_ip:${eventIP}` });
+                continue;
+            }
+            // Same user
+            if (eventUser && storedUser && eventUser === storedUser) {
+                related.push({ event: stored.event, reason: `same_user:${eventUser}` });
+                continue;
+            }
+            // Same process
+            if (eventProcess && storedProcess && eventProcess === storedProcess) {
+                related.push({ event: stored.event, reason: `same_process:${eventProcess}` });
+                continue;
+            }
+            // Same category (e.g. multiple auth failures)
+            if (event.category === stored.event.category && event.severity !== 'info') {
+                related.push({ event: stored.event, reason: `same_category:${event.category}` });
+            }
+        }
+        if (related.length === 0) {
+            return {
+                finding: 'No related events found in the last 10 minutes / 最近 10 分鐘內無相關事件',
+                riskContribution: 0,
+                needsAdditionalInvestigation: false,
+                data: { relatedCount: 0 },
+            };
+        }
+        // Count unique correlation reasons
+        const reasons = new Map();
+        for (const r of related) {
+            const key = r.reason.split(':')[0];
+            reasons.set(key, (reasons.get(key) ?? 0) + 1);
+        }
+        // Risk scoring: more related events = higher risk
+        const count = related.length;
+        let risk;
+        if (count >= 10)
+            risk = 80;
+        else if (count >= 5)
+            risk = 60;
+        else if (count >= 3)
+            risk = 40;
+        else
+            risk = 20;
+        // Boost risk if multiple correlation types (e.g. same IP AND same user)
+        if (reasons.size >= 2) {
+            risk = Math.min(95, risk + 15);
+        }
+        const reasonSummary = Array.from(reasons.entries())
+            .map(([key, cnt]) => `${key}(${cnt})`)
+            .join(', ');
+        return {
+            finding: `Found ${count} related event(s) within 10 min: ${reasonSummary} / ` +
+                `在 10 分鐘內找到 ${count} 個相關事件: ${reasonSummary}`,
+            riskContribution: risk,
+            needsAdditionalInvestigation: count >= 5,
+            data: {
+                relatedCount: count,
+                correlationTypes: Object.fromEntries(reasons),
+                sampleEventIds: related.slice(0, 5).map((r) => r.event.id),
+            },
+        };
+    }
+    /** Check process tree / 檢查程序樹 */
+    checkProcessTree(event) {
+        const processName = event.metadata?.['processName'];
+        const parentProcess = event.metadata?.['parentProcess'];
+        if (!processName) {
+            return {
+                finding: 'No process information available / 無可用的程序資訊',
+                riskContribution: 0,
+                needsAdditionalInvestigation: false,
+            };
+        }
+        // Check if process is in baseline / 檢查程序是否在基線中
+        const knownProcess = this.baseline.normalProcesses.some((p) => p.name === processName);
+        if (!knownProcess) {
+            // Suspicious parent processes / 可疑的父程序
+            const suspiciousParents = [
+                'cmd.exe',
+                'powershell.exe',
+                'bash',
+                'sh',
+                'python',
+                'python3',
+                'perl',
+                'ruby',
+            ];
+            const hasSuspiciousParent = parentProcess
+                ? suspiciousParents.some((sp) => parentProcess.toLowerCase().includes(sp))
+                : false;
+            return {
+                finding: `New process: ${processName}${hasSuspiciousParent ? ` (suspicious parent: ${parentProcess})` : ''} / ` +
+                    `新程序: ${processName}`,
+                riskContribution: hasSuspiciousParent ? 65 : 40,
+                needsAdditionalInvestigation: hasSuspiciousParent,
+                data: { processName, parentProcess, known: false, suspiciousParent: hasSuspiciousParent },
+            };
+        }
+        return {
+            finding: `Known process: ${processName} / 已知程序: ${processName}`,
+            riskContribution: 0,
+            needsAdditionalInvestigation: false,
+            data: { processName, known: true },
+        };
+    }
+    /** Check file reputation / 檢查檔案信譽 */
+    checkFileReputation(event) {
+        const filePath = event.metadata?.['filePath'] ?? event.metadata?.['processPath'];
+        if (!filePath) {
+            return {
+                finding: 'No file path available for reputation check / 無可用的檔案路徑',
+                riskContribution: 0,
+                needsAdditionalInvestigation: false,
+            };
+        }
+        // Check for suspicious file locations / 檢查可疑檔案位置
+        const suspiciousLocations = ['/tmp/', '/dev/shm/', '\\Temp\\', '\\AppData\\Local\\Temp\\'];
+        const inSuspiciousLocation = suspiciousLocations.some((loc) => filePath.includes(loc));
+        // Check for suspicious extensions / 檢查可疑副檔名
+        const suspiciousExtensions = ['.ps1', '.vbs', '.bat', '.cmd', '.scr', '.pif', '.hta'];
+        const hasSuspiciousExt = suspiciousExtensions.some((ext) => filePath.toLowerCase().endsWith(ext));
+        if (inSuspiciousLocation || hasSuspiciousExt) {
+            return {
+                finding: `Suspicious file: ${filePath}` +
+                    `${inSuspiciousLocation ? ' (temp directory)' : ''}` +
+                    `${hasSuspiciousExt ? ' (suspicious extension)' : ''} / ` +
+                    `可疑檔案: ${filePath}`,
+                riskContribution: inSuspiciousLocation && hasSuspiciousExt ? 70 : 45,
+                needsAdditionalInvestigation: true,
+                data: {
+                    filePath,
+                    suspiciousLocation: inSuspiciousLocation,
+                    suspiciousExtension: hasSuspiciousExt,
+                },
+            };
+        }
+        return {
+            finding: `File appears normal: ${filePath} / 檔案看起來正常`,
+            riskContribution: 0,
+            needsAdditionalInvestigation: false,
+            data: { filePath },
+        };
+    }
+    /** Check network communication pattern / 檢查網路通訊模式 */
+    checkNetworkPattern(event) {
+        const remoteAddr = event.metadata?.['remoteAddress'] ??
+            event.metadata?.['destinationIP'];
+        const remotePort = event.metadata?.['remotePort'];
+        if (!remoteAddr) {
+            return {
+                finding: 'No network destination available / 無可用的網路目的地',
+                riskContribution: 0,
+                needsAdditionalInvestigation: false,
+            };
+        }
+        // Check against baseline connections / 與基線連線比較
+        const knownConnection = this.baseline.normalConnections.some((c) => c.remoteAddress === remoteAddr && (!remotePort || c.remotePort === remotePort));
+        // Check for suspicious ports / 檢查可疑埠
+        const suspiciousPorts = [4444, 5555, 8888, 1337, 31337, 6666, 6667, 9001];
+        const isSuspiciousPort = remotePort ? suspiciousPorts.includes(remotePort) : false;
+        if (!knownConnection) {
+            return {
+                finding: `New network connection: ${remoteAddr}:${remotePort ?? 'unknown'}` +
+                    `${isSuspiciousPort ? ' (suspicious port)' : ''} / ` +
+                    `新網路連線: ${remoteAddr}:${remotePort ?? 'unknown'}`,
+                riskContribution: isSuspiciousPort ? 75 : 30,
+                needsAdditionalInvestigation: isSuspiciousPort,
+                data: { remoteAddr, remotePort, known: false, suspiciousPort: isSuspiciousPort },
+            };
+        }
+        return {
+            finding: `Known network pattern: ${remoteAddr}:${remotePort ?? 'unknown'} / 已知網路模式`,
+            riskContribution: 0,
+            needsAdditionalInvestigation: false,
+            data: { remoteAddr, remotePort, known: true },
+        };
+    }
+    /**
+     * Build human-readable reasoning from investigation steps
+     * 從調查步驟建立人類可讀的推理
+     */
+    buildReasoning(steps) {
+        const parts = ['Investigation Summary / 調查摘要:'];
+        for (const step of steps) {
+            if (step.result) {
+                parts.push(`  [${step.tool}] ${step.result.finding} (risk: ${step.result.riskContribution}%)`);
+            }
+        }
+        const totalRisk = steps.reduce((sum, s) => sum + (s.result?.riskContribution ?? 0), 0);
+        const avgRisk = steps.length > 0 ? Math.round(totalRisk / steps.length) : 0;
+        parts.push(`Average risk contribution: ${avgRisk}% / 平均風險貢獻: ${avgRisk}%`);
+        return parts.join('\n');
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/investigation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/investigation/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAUnE,MAAM,MAAM,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAE5D,6EAA6E;AAC7E,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAQ7C;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACb,QAAQ,CAAsB;IAE/C,iEAAiE;IAChD,WAAW,GAAkB,EAAE,CAAC;IAEjD,YAAY,QAA6B;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,KAAoB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAElD,qCAAqC;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACnD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,WAAW,CAAC,KAAoB;QACpC,MAAM,CAAC,IAAI,CAAC,oCAAoC,KAAK,CAAC,EAAE,aAAa,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAEjF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,cAAc,GAAwB,EAAE,CAAC;QAE/C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,cAAc,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;gBACvC,MAAM,CAAC,IAAI,CAAC,4BAA4B,SAAS,uBAAuB,CAAC,CAAC;gBAC1E,MAAM;YACR,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE1C,MAAM,aAAa,GAAsB;gBACvC,GAAG,IAAI;gBACP,MAAM;gBACN,UAAU;aACX,CAAC;YACF,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAEnC,MAAM,CAAC,IAAI,CACT,QAAQ,IAAI,CAAC,IAAI,UAAU,MAAM,CAAC,gBAAgB,IAAI;gBACpD,cAAc,MAAM,CAAC,4BAA4B,KAAK;gBACtD,MAAM,IAAI,CAAC,IAAI,QAAQ,MAAM,CAAC,gBAAgB,EAAE,CACnD,CAAC;YAEF,mDAAmD;YACnD,kBAAkB;YAClB,IAAI,MAAM,CAAC,4BAA4B,EAAE,CAAC;gBACxC,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC/D,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;oBACrC,IACE,cAAc,CAAC,MAAM,GAAG,SAAS;wBACjC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;wBAChD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAC5C,CAAC;wBACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;wBACxD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;wBACtC,cAAc,CAAC,IAAI,CAAC;4BAClB,IAAI,EAAE,QAAQ;4BACd,MAAM,EAAE,kBAAkB,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,SAAS,IAAI,CAAC,IAAI,QAAQ;4BAChF,MAAM,EAAE,OAAO;4BACf,UAAU,EAAE,SAAS;yBACtB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,cAAc;YACrB,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,UAAU,CAAC,KAAoB;QACrC,MAAM,KAAK,GAAwB,EAAE,CAAC;QAEtC,uCAAuC;QACvC,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,8DAA8D;SACvE,CAAC,CAAC;QAEH,sDAAsD;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,+CAA+C;aACxD,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,oDAAoD;aAC7D,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,mDAAmD;aAC5D,CAAC,CAAC;QACL,CAAC;QAED,yDAAyD;QACzD,kBAAkB;QAClB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,uDAAuD;aAChE,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,6CAA6C;aACtD,CAAC,CAAC;QACL,CAAC;QAED,uDAAuD;QACvD,oBAAoB;QACpB,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,IAAI,KAAK,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;YAC9E,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,yCAAyC;aAClD,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,iDAAiD;aAC1D,CAAC,CAAC;QACL,CAAC;QAED,mDAAmD;QACnD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,8CAA8C;aACvD,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,KAAK;YACL,SAAS,EACP,0BAA0B,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,WAAW;gBACnE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,UAAU;SAC9C,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,WAAW,CACvB,IAAuB,EACvB,KAAoB;QAEpB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACpC,KAAK,oBAAoB;gBACvB,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACxC,KAAK,kBAAkB;gBACrB,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,kBAAkB;gBACrB,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,oBAAoB;gBACvB,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACxC,KAAK,kBAAkB;gBACrB,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,qBAAqB;gBACxB,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACzC,KAAK,qBAAqB;gBACxB,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACzC;gBACE,OAAO;oBACL,OAAO,EAAE,iBAAiB,IAAI,SAAS;oBACvC,gBAAgB,EAAE,CAAC;oBACnB,4BAA4B,EAAE,KAAK;iBACpC,CAAC;QACN,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,gBAAgB,CACtB,IAAuB,EACvB,MAA2B;QAE3B,MAAM,SAAS,GAAwB,EAAE,CAAC;QAE1C,IAAI,IAAI,KAAK,gBAAgB,IAAI,MAAM,CAAC,gBAAgB,GAAG,EAAE,EAAE,CAAC;YAC9D,SAAS,CAAC,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,gBAAgB,GAAG,EAAE,EAAE,CAAC;YAChE,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,gBAAgB,GAAG,EAAE,EAAE,CAAC;YAChE,SAAS,CAAC,IAAI,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,IAAI,KAAK,oBAAoB,IAAI,MAAM,CAAC,gBAAgB,GAAG,EAAE,EAAE,CAAC;YAClE,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,8EAA8E;IAC9E,8CAA8C;IAC9C,8EAA8E;IAE9E,oEAAoE;IAC5D,cAAc,CAAC,KAAoB;QACzC,MAAM,EAAE,GACL,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY,IAAK,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY,CAAC;QAC5F,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO;gBACL,OAAO,EAAE,kDAAkD;gBAC3D,gBAAgB,EAAE,CAAC;gBACnB,4BAA4B,EAAE,KAAK;aACpC,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EACL,MAAM,EAAE,2BAA2B,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,MAAM;oBAChF,MAAM,EAAE,YAAY,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,GAAG;gBAChE,gBAAgB,EAAE,EAAE;gBACpB,4BAA4B,EAAE,IAAI;gBAClC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE;aAC5F,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,MAAM,EAAE,mCAAmC,EAAE,UAAU;YAChE,gBAAgB,EAAE,CAAC;YACnB,4BAA4B,EAAE,KAAK;YACnC,IAAI,EAAE,EAAE,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,6CAA6C;IACrC,kBAAkB,CAAC,KAAoB;QAC7C,MAAM,IAAI,GAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAY,IAAK,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY,CAAC;QAC9F,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE,2CAA2C;gBACpD,gBAAgB,EAAE,CAAC;gBACnB,4BAA4B,EAAE,KAAK;aACpC,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,MAAM,YAAY,GAAG;YACnB,MAAM;YACN,OAAO;YACP,eAAe;YACf,QAAQ;YACR,sBAAsB;SACvB,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAE/B,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,6BAA6B,IAAI,eAAe,IAAI,EAAE;gBAC/D,gBAAgB,EAAE,EAAE;gBACpB,4BAA4B,EAAE,IAAI;gBAClC,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;aACjC,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;QACrF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,iBAAiB,IAAI,+BAA+B,IAAI,EAAE;gBACnE,gBAAgB,EAAE,EAAE;gBACpB,4BAA4B,EAAE,IAAI;gBAClC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,eAAe,IAAI,aAAa,IAAI,EAAE;YAC/C,gBAAgB,EAAE,CAAC;YACnB,4BAA4B,EAAE,KAAK;YACnC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;SAC5B,CAAC;IACJ,CAAC;IAED,kCAAkC;IAC1B,gBAAgB,CAAC,KAAoB;QAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;QAElC,oCAAoC;QACpC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAEnD,IAAI,oBAAoB,EAAE,CAAC;YACzB,oDAAoD;YACpD,mBAAmB;YACnB,MAAM,IAAI,GAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAY,IAAK,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY,CAAC;YAC9F,MAAM,eAAe,GAAG,IAAI;gBAC1B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC,CACpE;gBACH,CAAC,CAAC,KAAK,CAAC;YAEV,IAAI,eAAe,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EACL,uBAAuB,IAAI,oCAAoC;wBAC/D,kBAAkB;oBACpB,gBAAgB,EAAE,EAAE;oBACpB,4BAA4B,EAAE,KAAK;oBACnC,IAAI,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE;iBAClE,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,6BAA6B,IAAI,mBAAmB,IAAI,MAAM;gBACvE,gBAAgB,EAAE,EAAE;gBACpB,4BAA4B,EAAE,IAAI;gBAClC,IAAI,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE;aACnE,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,iCAAiC,IAAI,eAAe;YAC7D,gBAAgB,EAAE,CAAC;YACnB,4BAA4B,EAAE,KAAK;YACnC,IAAI,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED,yCAAyC;IACjC,gBAAgB,CAAC,KAAoB;QAC3C,MAAM,EAAE,GACL,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY,IAAK,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY,CAAC;QAC5F,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO;gBACL,OAAO,EAAE,kCAAkC;gBAC3C,gBAAgB,EAAE,CAAC;gBACnB,4BAA4B,EAAE,KAAK;aACpC,CAAC;QACJ,CAAC;QAED,0DAA0D;QAC1D,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;QAE5F,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EACL,2BAA2B,EAAE,uBAAuB;oBACpD,eAAe,EAAE,UAAU;gBAC7B,gBAAgB,EAAE,EAAE;gBACpB,4BAA4B,EAAE,IAAI;gBAClC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;aAC3B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,6BAA6B,EAAE,gBAAgB;YACxD,gBAAgB,EAAE,CAAC;YACnB,4BAA4B,EAAE,KAAK;YACnC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;SAC1B,CAAC;IACJ,CAAC;IAED,6EAA6E;IACrE,kBAAkB,CAAC,KAAoB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,qBAAqB,CAAC;QAE3C,kDAAkD;QAClD,MAAM,OAAO,GACV,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY,IAAK,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY,CAAC;QAC5F,MAAM,SAAS,GACZ,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAY,IAAK,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY,CAAC;QACnF,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAW,CAAC;QAE/D,sEAAsE;QACtE,MAAM,OAAO,GAA+C,EAAE,CAAC;QAE/D,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,UAAU,GAAG,MAAM;gBAAE,SAAS;YACzC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;gBAAE,SAAS;YAE3C,MAAM,QAAQ,GACX,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY;gBAC9C,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY,CAAC;YACvD,MAAM,UAAU,GACb,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAY;gBAC1C,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY,CAAC;YAClD,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAW,CAAC;YAEvE,iBAAiB;YACjB,IAAI,OAAO,IAAI,QAAQ,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,OAAO,EAAE,EAAE,CAAC,CAAC;gBACpE,SAAS;YACX,CAAC;YAED,YAAY;YACZ,IAAI,SAAS,IAAI,UAAU,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;gBACxD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,SAAS,EAAE,EAAE,CAAC,CAAC;gBACxE,SAAS;YACX,CAAC;YAED,eAAe;YACf,IAAI,YAAY,IAAI,aAAa,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,YAAY,EAAE,EAAE,CAAC,CAAC;gBAC9E,SAAS;YACX,CAAC;YAED,8CAA8C;YAC9C,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC1E,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,OAAO,EAAE,iEAAiE;gBAC1E,gBAAgB,EAAE,CAAC;gBACnB,4BAA4B,EAAE,KAAK;gBACnC,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE;aAC1B,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;QAED,kDAAkD;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,IAAY,CAAC;QACjB,IAAI,KAAK,IAAI,EAAE;YAAE,IAAI,GAAG,EAAE,CAAC;aACtB,IAAI,KAAK,IAAI,CAAC;YAAE,IAAI,GAAG,EAAE,CAAC;aAC1B,IAAI,KAAK,IAAI,CAAC;YAAE,IAAI,GAAG,EAAE,CAAC;;YAC1B,IAAI,GAAG,EAAE,CAAC;QAEf,wEAAwE;QACxE,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;aAChD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,GAAG,GAAG,CAAC;aACrC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,OAAO;YACL,OAAO,EACL,SAAS,KAAK,oCAAoC,aAAa,KAAK;gBACpE,cAAc,KAAK,WAAW,aAAa,EAAE;YAC/C,gBAAgB,EAAE,IAAI;YACtB,4BAA4B,EAAE,KAAK,IAAI,CAAC;YACxC,IAAI,EAAE;gBACJ,YAAY,EAAE,KAAK;gBACnB,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;gBAC7C,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;aAC3D;SACF,CAAC;IACJ,CAAC;IAED,iCAAiC;IACzB,gBAAgB,CAAC,KAAoB;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAW,CAAC;QAC9D,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAW,CAAC;QAElE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,6CAA6C;gBACtD,gBAAgB,EAAE,CAAC;gBACnB,4BAA4B,EAAE,KAAK;aACpC,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QAEvF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,uCAAuC;YACvC,MAAM,iBAAiB,GAAG;gBACxB,SAAS;gBACT,gBAAgB;gBAChB,MAAM;gBACN,IAAI;gBACJ,QAAQ;gBACR,SAAS;gBACT,MAAM;gBACN,MAAM;aACP,CAAC;YACF,MAAM,mBAAmB,GAAG,aAAa;gBACvC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC1E,CAAC,CAAC,KAAK,CAAC;YAEV,OAAO;gBACL,OAAO,EACL,gBAAgB,WAAW,GAAG,mBAAmB,CAAC,CAAC,CAAC,wBAAwB,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK;oBACtG,QAAQ,WAAW,EAAE;gBACvB,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;gBAC/C,4BAA4B,EAAE,mBAAmB;gBACjD,IAAI,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE;aAC1F,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,kBAAkB,WAAW,YAAY,WAAW,EAAE;YAC/D,gBAAgB,EAAE,CAAC;YACnB,4BAA4B,EAAE,KAAK;YACnC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE;SACnC,CAAC;IACJ,CAAC;IAED,qCAAqC;IAC7B,mBAAmB,CAAC,KAAoB;QAC9C,MAAM,QAAQ,GACX,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAY,IAAK,KAAK,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAY,CAAC;QAC1F,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,wDAAwD;gBACjE,gBAAgB,EAAE,CAAC;gBACnB,4BAA4B,EAAE,KAAK;aACpC,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;QAC3F,MAAM,oBAAoB,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAEvF,4CAA4C;QAC5C,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACtF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACzD,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CACrC,CAAC;QAEF,IAAI,oBAAoB,IAAI,gBAAgB,EAAE,CAAC;YAC7C,OAAO;gBACL,OAAO,EACL,oBAAoB,QAAQ,EAAE;oBAC9B,GAAG,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE;oBACpD,GAAG,gBAAgB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,KAAK;oBACzD,SAAS,QAAQ,EAAE;gBACrB,gBAAgB,EAAE,oBAAoB,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;gBACpE,4BAA4B,EAAE,IAAI;gBAClC,IAAI,EAAE;oBACJ,QAAQ;oBACR,kBAAkB,EAAE,oBAAoB;oBACxC,mBAAmB,EAAE,gBAAgB;iBACtC;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,wBAAwB,QAAQ,YAAY;YACrD,gBAAgB,EAAE,CAAC;YACnB,4BAA4B,EAAE,KAAK;YACnC,IAAI,EAAE,EAAE,QAAQ,EAAE;SACnB,CAAC;IACJ,CAAC;IAED,qDAAqD;IAC7C,mBAAmB,CAAC,KAAoB;QAC9C,MAAM,UAAU,GACb,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY;YAC5C,KAAK,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAY,CAAC;QAChD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAuB,CAAC;QAExE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,8CAA8C;gBACvD,gBAAgB,EAAE,CAAC;gBACnB,4BAA4B,EAAE,KAAK;aACpC,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAC1D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,UAAU,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CACtF,CAAC;QAEF,qCAAqC;QACrC,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1E,MAAM,gBAAgB,GAAG,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAEnF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EACL,2BAA2B,UAAU,IAAI,UAAU,IAAI,SAAS,EAAE;oBAClE,GAAG,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,KAAK;oBACpD,UAAU,UAAU,IAAI,UAAU,IAAI,SAAS,EAAE;gBACnD,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;gBAC5C,4BAA4B,EAAE,gBAAgB;gBAC9C,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE;aACjF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,0BAA0B,UAAU,IAAI,UAAU,IAAI,SAAS,WAAW;YACnF,gBAAgB,EAAE,CAAC;YACnB,4BAA4B,EAAE,KAAK;YACnC,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,KAA0B;QAC/C,MAAM,KAAK,GAAa,CAAC,+BAA+B,CAAC,CAAC;QAE1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,KAAK,CAAC,IAAI,CACR,MAAM,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,WAAW,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,gBAAgB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,8BAA8B,OAAO,eAAe,OAAO,GAAG,CAAC,CAAC;QAE3E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/license/index.d.ts

@@ -0,0 +1,46 @@
+/**
+ * License Key Validation and Feature Gating
+ * 授權金鑰驗證與功能閘
+ *
+ * Validates license keys in the format CLAW-TIER-XXXX-XXXX-XXXX,
+ * determines tier (Free/Pro/Enterprise), and gates features accordingly.
+ * 驗證格式為 CLAW-TIER-XXXX-XXXX-XXXX 的授權金鑰，
+ * 判定等級（Free/Pro/Enterprise），並據此控制功能閘。
+ *
+ * @module @panguard-ai/panguard-guard/license
+ */
+import type { LicenseTier, LicenseInfo } from '../types.js';
+/**
+ * Validate a license key and return license information
+ * 驗證授權金鑰並回傳授權資訊
+ *
+ * Key format: CLAW-{TIER}-{XXXX}-{XXXX}-{XXXX}
+ * - TIER: FREE, PRO, or ENT
+ * - X: Alphanumeric characters
+ * - Last 4 characters contain a checksum
+ *
+ * @param key - The license key to validate / 要驗證的授權金鑰
+ * @returns License information / 授權資訊
+ */
+export declare function validateLicense(key: string | undefined): LicenseInfo;
+/**
+ * Check if a feature is available for the given license
+ * 檢查功能是否適用於給定的授權
+ *
+ * @param license - License information / 授權資訊
+ * @param feature - Feature name to check / 要檢查的功能名稱
+ * @returns True if feature is available / 功能可用時回傳 true
+ */
+export declare function hasFeature(license: LicenseInfo, feature: string): boolean;
+/**
+ * Get all features for a tier / 取得等級的所有功能
+ */
+export declare function getTierFeatures(tier: LicenseTier): string[];
+/**
+ * Generate a license key for testing / 產生測試用授權金鑰
+ *
+ * @param tier - The tier to generate for / 要產生的等級
+ * @returns A valid license key / 有效的授權金鑰
+ */
+export declare function generateTestLicenseKey(tier: LicenseTier): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/license/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/license/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAe5D;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAyDpE;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAEzE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,EAAE,CAE3D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAehE"}