@panguard-ai/panguard-report 0.1.0

package/dist/assessors/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Compliance Assessors - Active system assessment for compliance controls
+ * 合規評估器 - 主動評估系統狀態以判定合規控制項
+ *
+ * Each assessor checks real system state and generates ComplianceFinding objects.
+ * The assessors run actual system commands (same approach as panguard-scan).
+ *
+ * @module @panguard-ai/panguard-report/assessors
+ */
+import type { ComplianceFinding } from '../types.js';
+export declare function assessAccessControl(): Promise<ComplianceFinding[]>;
+export declare function assessFirewallAndNetwork(): Promise<ComplianceFinding[]>;
+export declare function assessEncryption(): Promise<ComplianceFinding[]>;
+export declare function assessMonitoring(): Promise<ComplianceFinding[]>;
+export declare function assessPatching(): Promise<ComplianceFinding[]>;
+export declare function assessIncidentResponse(): Promise<ComplianceFinding[]>;
+/**
+ * Run all assessments for a given framework's control categories.
+ * Returns deduplicated findings.
+ */
+export declare function runAssessment(controlCategories: string[]): Promise<ComplianceFinding[]>;
+/**
+ * Run full system assessment (all assessors).
+ */
+export declare function runFullAssessment(): Promise<ComplianceFinding[]>;
+//# sourceMappingURL=index.d.ts.map

package/dist/assessors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/assessors/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAwCrD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA0GxE;AAMD,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAiG7E;AAMD,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAsErE;AAMD,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA+ErE;AAMD,wBAAsB,cAAc,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA8CnE;AAMD,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAmC3E;AAwCD;;;GAGG;AACH,wBAAsB,aAAa,CAAC,iBAAiB,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA8B7F;AAED;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAGtE"}

package/dist/assessors/index.js

@@ -0,0 +1,408 @@
+/**
+ * Compliance Assessors - Active system assessment for compliance controls
+ * 合規評估器 - 主動評估系統狀態以判定合規控制項
+ *
+ * Each assessor checks real system state and generates ComplianceFinding objects.
+ * The assessors run actual system commands (same approach as panguard-scan).
+ *
+ * @module @panguard-ai/panguard-report/assessors
+ */
+import { execFile } from 'node:child_process';
+import { platform } from 'node:os';
+import { readFileSync, existsSync, readdirSync } from 'node:fs';
+import { createLogger } from '@panguard-ai/core';
+const logger = createLogger('panguard-report:assessors');
+const os = platform();
+// ---------------------------------------------------------------------------
+// Utility
+// ---------------------------------------------------------------------------
+function execPromise(cmd, args, timeout = 10000) {
+    return new Promise((resolve) => {
+        execFile(cmd, args, { timeout }, (error, stdout) => {
+            resolve(error ? '' : stdout.trim());
+        });
+    });
+}
+function makeFinding(id, severity, title, description, category) {
+    return {
+        findingId: id,
+        severity,
+        title,
+        description,
+        category,
+        timestamp: new Date(),
+        source: 'panguard-scan',
+    };
+}
+// ---------------------------------------------------------------------------
+// Access Control Assessor
+// ---------------------------------------------------------------------------
+export async function assessAccessControl() {
+    const findings = [];
+    // Check password policy
+    try {
+        if (os === 'linux') {
+            const pwquality = existsSync('/etc/security/pwquality.conf')
+                ? readFileSync('/etc/security/pwquality.conf', 'utf-8')
+                : '';
+            const pamPassword = existsSync('/etc/pam.d/common-password')
+                ? readFileSync('/etc/pam.d/common-password', 'utf-8')
+                : '';
+            const minLen = pwquality.match(/minlen\s*=\s*(\d+)/);
+            const length = minLen ? parseInt(minLen[1], 10) : 0;
+            if (length < 8) {
+                findings.push(makeFinding('AC-PWD-001', 'high', 'Weak password policy', `Minimum password length is ${length || 'not set'} (should be >= 12). /etc/security/pwquality.conf minlen is inadequate.`, 'password'));
+            }
+            if (!pamPassword.includes('pam_pwquality') && !pwquality.includes('minlen')) {
+                findings.push(makeFinding('AC-PWD-002', 'medium', 'Password quality module not enforced', 'pam_pwquality is not configured in PAM. Password complexity is not enforced.', 'password'));
+            }
+        }
+        else if (os === 'darwin') {
+            const policy = await execPromise('/usr/bin/pwpolicy', ['getaccountpolicies']);
+            if (!policy.includes('policyAttributePassword')) {
+                findings.push(makeFinding('AC-PWD-003', 'medium', 'No password policy configured', 'macOS password policy is not configured via pwpolicy.', 'password'));
+            }
+        }
+    }
+    catch {
+        logger.warn('Password policy check failed');
+    }
+    // Check for accounts without passwords (Linux)
+    if (os === 'linux') {
+        try {
+            const shadow = existsSync('/etc/shadow') ? readFileSync('/etc/shadow', 'utf-8') : '';
+            const emptyPasswords = shadow
+                .split('\n')
+                .filter((line) => {
+                const parts = line.split(':');
+                return parts[1] === '' || parts[1] === '!';
+            })
+                .map((line) => line.split(':')[0]);
+            if (emptyPasswords.length > 0) {
+                findings.push(makeFinding('AC-PWD-004', 'critical', 'Accounts without passwords', `Found ${emptyPasswords.length} account(s) with empty or disabled passwords: ${emptyPasswords.slice(0, 5).join(', ')}`, 'authentication'));
+            }
+        }
+        catch {
+            // May not have permission to read shadow
+        }
+    }
+    // Check sudo configuration
+    if (os !== 'win32') {
+        try {
+            const sudoers = existsSync('/etc/sudoers') ? readFileSync('/etc/sudoers', 'utf-8') : '';
+            if (sudoers.includes('NOPASSWD: ALL')) {
+                findings.push(makeFinding('AC-SUDO-001', 'high', 'NOPASSWD sudo access found', 'One or more users have NOPASSWD:ALL in sudoers, allowing passwordless root access.', 'access'));
+            }
+        }
+        catch {
+            // May not have permission
+        }
+    }
+    return findings;
+}
+// ---------------------------------------------------------------------------
+// Firewall & Network Assessor
+// ---------------------------------------------------------------------------
+export async function assessFirewallAndNetwork() {
+    const findings = [];
+    // Check firewall status
+    try {
+        if (os === 'darwin') {
+            const fwStatus = await execPromise('/usr/libexec/ApplicationFirewall/socketfilterfw', [
+                '--getglobalstate',
+            ]);
+            if (fwStatus.includes('disabled')) {
+                findings.push(makeFinding('FW-001', 'high', 'Firewall disabled', 'macOS Application Firewall is disabled. System is exposed to inbound connections.', 'firewall'));
+            }
+        }
+        else if (os === 'linux') {
+            const iptables = await execPromise('/sbin/iptables', ['-L', '-n']);
+            const ufw = await execPromise('/usr/sbin/ufw', ['status']);
+            const hasRules = iptables.split('\n').length > 8; // More than default chain headers
+            const ufwActive = ufw.includes('active');
+            if (!hasRules && !ufwActive) {
+                findings.push(makeFinding('FW-002', 'high', 'No firewall rules configured', 'Neither iptables rules nor UFW are active. System has no inbound traffic filtering.', 'firewall'));
+            }
+        }
+    }
+    catch {
+        logger.warn('Firewall status check failed');
+    }
+    // Check for exposed services on common risky ports
+    try {
+        let openPorts = [];
+        if (os === 'darwin') {
+            const lsof = await execPromise('/usr/sbin/lsof', ['-iTCP', '-sTCP:LISTEN', '-P', '-n']);
+            openPorts = lsof
+                .split('\n')
+                .filter((l) => l.includes('LISTEN'))
+                .map((l) => {
+                const match = l.match(/:(\d+)\s/);
+                return match ? match[1] : '';
+            })
+                .filter(Boolean);
+        }
+        else if (os === 'linux') {
+            const ss = await execPromise('/usr/bin/ss', ['-tlnp']);
+            openPorts = ss
+                .split('\n')
+                .filter((l) => l.includes('LISTEN'))
+                .map((l) => {
+                const match = l.match(/:(\d+)\s/);
+                return match ? match[1] : '';
+            })
+                .filter(Boolean);
+        }
+        const riskyPorts = {
+            '21': 'FTP',
+            '23': 'Telnet',
+            '445': 'SMB',
+            '3306': 'MySQL',
+            '5432': 'PostgreSQL',
+            '6379': 'Redis',
+            '27017': 'MongoDB',
+            '11211': 'Memcached',
+        };
+        const exposedRisky = openPorts.filter((p) => riskyPorts[p]);
+        if (exposedRisky.length > 0) {
+            const services = exposedRisky.map((p) => `${riskyPorts[p]} (${p})`).join(', ');
+            findings.push(makeFinding('NET-PORT-001', 'high', 'Risky services exposed', `The following services are listening on network interfaces: ${services}. These should be firewalled or disabled.`, 'network'));
+        }
+    }
+    catch {
+        logger.warn('Open port check failed');
+    }
+    return findings;
+}
+// ---------------------------------------------------------------------------
+// Encryption & Certificate Assessor
+// ---------------------------------------------------------------------------
+export async function assessEncryption() {
+    const findings = [];
+    // Check disk encryption
+    try {
+        if (os === 'darwin') {
+            const fdesetup = await execPromise('/usr/bin/fdesetup', ['status']);
+            if (!fdesetup.includes('On')) {
+                findings.push(makeFinding('ENC-DISK-001', 'high', 'Disk encryption not enabled', 'FileVault is not enabled. Data at rest is not encrypted.', 'encryption'));
+            }
+        }
+        else if (os === 'linux') {
+            const lsblk = await execPromise('/bin/lsblk', ['-o', 'NAME,TYPE,FSTYPE']);
+            if (!lsblk.includes('crypt') && !lsblk.includes('luks')) {
+                findings.push(makeFinding('ENC-DISK-002', 'medium', 'No LUKS encryption detected', 'No LUKS-encrypted partitions found. Data at rest may not be encrypted.', 'encryption'));
+            }
+        }
+    }
+    catch {
+        logger.warn('Disk encryption check failed');
+    }
+    // Check SSH key security
+    try {
+        const sshDir = `${process.env['HOME']}/.ssh`;
+        if (existsSync(sshDir)) {
+            const files = readdirSync(sshDir);
+            const privateKeys = files.filter((f) => f.startsWith('id_') && !f.endsWith('.pub') && !f.includes('known_hosts'));
+            for (const keyFile of privateKeys) {
+                const keyPath = `${sshDir}/${keyFile}`;
+                try {
+                    const content = readFileSync(keyPath, 'utf-8');
+                    if (content.includes('BEGIN RSA PRIVATE KEY') && !content.includes('ENCRYPTED')) {
+                        findings.push(makeFinding(`ENC-SSH-${keyFile}`, 'medium', `Unencrypted SSH private key: ${keyFile}`, `SSH private key ${keyPath} is not passphrase-protected.`, 'encryption'));
+                    }
+                }
+                catch {
+                    // Permission denied is fine
+                }
+            }
+        }
+    }
+    catch {
+        logger.warn('SSH key check failed');
+    }
+    return findings;
+}
+// ---------------------------------------------------------------------------
+// Monitoring & Logging Assessor
+// ---------------------------------------------------------------------------
+export async function assessMonitoring() {
+    const findings = [];
+    // Check syslog / journald
+    try {
+        if (os === 'linux') {
+            const journalctl = await execPromise('/bin/journalctl', ['--disk-usage']);
+            if (!journalctl || journalctl.includes('No journal files')) {
+                findings.push(makeFinding('MON-LOG-001', 'high', 'No system logging configured', 'journald has no journal files. System events are not being recorded.', 'logging'));
+            }
+        }
+        else if (os === 'darwin') {
+            // macOS always has system logging via unified log
+            const logStats = await execPromise('/usr/bin/log', ['stats']);
+            if (!logStats) {
+                findings.push(makeFinding('MON-LOG-002', 'medium', 'System logging may be impaired', 'Could not verify macOS unified log status.', 'logging'));
+            }
+        }
+    }
+    catch {
+        logger.warn('Logging check failed');
+    }
+    // Check if audit daemon is running (Linux)
+    if (os === 'linux') {
+        try {
+            const auditd = await execPromise('/bin/systemctl', ['is-active', 'auditd']);
+            if (auditd !== 'active') {
+                findings.push(makeFinding('MON-AUDIT-001', 'medium', 'Audit daemon not active', 'auditd is not running. System call auditing is not enabled.', 'audit'));
+            }
+        }
+        catch {
+            // auditd may not be installed
+        }
+    }
+    // Check if Panguard Guard is running
+    try {
+        const processes = await execPromise(os === 'win32' ? 'tasklist' : '/bin/ps', [
+            os === 'win32' ? '/FI' : 'aux',
+            ...(os === 'win32' ? ['"IMAGENAME eq node.exe"'] : []),
+        ]);
+        if (!processes.includes('panguard') && !processes.includes('guard')) {
+            findings.push(makeFinding('MON-GUARD-001', 'medium', 'Panguard Guard not running', 'Panguard Guard monitoring daemon is not detected. Real-time threat monitoring is inactive.', 'monitoring'));
+        }
+    }
+    catch {
+        logger.warn('Process check failed');
+    }
+    return findings;
+}
+// ---------------------------------------------------------------------------
+// Vulnerability & Patch Assessment
+// ---------------------------------------------------------------------------
+export async function assessPatching() {
+    const findings = [];
+    // Check for available system updates
+    try {
+        if (os === 'darwin') {
+            const updates = await execPromise('/usr/sbin/softwareupdate', ['-l'], 30000);
+            const updateCount = (updates.match(/\*/g) || []).length;
+            if (updateCount > 0) {
+                findings.push(makeFinding('PATCH-001', updateCount > 5 ? 'high' : 'medium', `${updateCount} pending system updates`, `There are ${updateCount} pending macOS software updates. Security patches should be applied promptly.`, 'vulnerability'));
+            }
+        }
+        else if (os === 'linux') {
+            // Check apt (Debian/Ubuntu)
+            if (existsSync('/usr/bin/apt')) {
+                const aptList = await execPromise('/usr/bin/apt', ['list', '--upgradable'], 30000);
+                const updateLines = aptList.split('\n').filter((l) => l.includes('upgradable'));
+                const secUpdates = updateLines.filter((l) => l.includes('security') || l.includes('-security'));
+                if (secUpdates.length > 0) {
+                    findings.push(makeFinding('PATCH-002', secUpdates.length > 10 ? 'critical' : 'high', `${secUpdates.length} security updates pending`, `There are ${secUpdates.length} pending security updates. Apply them with: apt upgrade`, 'vulnerability'));
+                }
+            }
+        }
+    }
+    catch {
+        logger.warn('Patch check failed');
+    }
+    return findings;
+}
+// ---------------------------------------------------------------------------
+// Incident Response Assessment
+// ---------------------------------------------------------------------------
+export async function assessIncidentResponse() {
+    const findings = [];
+    // Check if notification channels are configured in Panguard
+    const panguardConfig = `${process.env['HOME']}/.panguard/config.json`;
+    try {
+        if (existsSync(panguardConfig)) {
+            const config = JSON.parse(readFileSync(panguardConfig, 'utf-8'));
+            if (!config.notifications || Object.keys(config.notifications).length === 0) {
+                findings.push(makeFinding('IR-NOTIFY-001', 'medium', 'No notification channels configured', 'Panguard has no notification channels (Telegram/Slack/Email) configured. Incident alerts cannot be delivered.', 'incident'));
+            }
+        }
+        else {
+            findings.push(makeFinding('IR-CONFIG-001', 'low', 'Panguard not configured', 'No Panguard configuration found at ~/.panguard/config.json. Run `panguard init` to set up.', 'incident'));
+        }
+    }
+    catch {
+        // Config may not exist
+    }
+    return findings;
+}
+// ---------------------------------------------------------------------------
+// Master Assessment Runner
+// ---------------------------------------------------------------------------
+/** Category → Assessor function mapping */
+const CATEGORY_ASSESSORS = {
+    // TCSA categories
+    access_control: assessAccessControl,
+    authentication: assessAccessControl,
+    system_protection: assessFirewallAndNetwork,
+    network_security: assessFirewallAndNetwork,
+    encryption: assessEncryption,
+    monitoring: assessMonitoring,
+    incident_response: assessIncidentResponse,
+    asset_management: assessPatching,
+    patch_management: assessPatching,
+    audit: assessMonitoring,
+    // SOC 2 categories
+    logical_access: assessAccessControl,
+    credentials: assessAccessControl,
+    access_management: assessAccessControl,
+    boundary_protection: assessFirewallAndNetwork,
+    data_transmission: assessEncryption,
+    anomaly_detection: assessMonitoring,
+    incident_evaluation: assessMonitoring,
+    change_management: assessPatching,
+    // ISO 27001 categories
+    technology: assessAccessControl,
+    malware: assessMonitoring,
+    vulnerability: assessPatching,
+    configuration: assessFirewallAndNetwork,
+    data_protection: assessEncryption,
+    logging: assessMonitoring,
+    network: assessFirewallAndNetwork,
+    cryptography: assessEncryption,
+    incident: assessIncidentResponse,
+};
+/**
+ * Run all assessments for a given framework's control categories.
+ * Returns deduplicated findings.
+ */
+export async function runAssessment(controlCategories) {
+    const allFindings = [];
+    const ranAssessors = new Set();
+    for (const category of controlCategories) {
+        const assessor = CATEGORY_ASSESSORS[category];
+        if (!assessor)
+            continue;
+        // Deduplicate: don't run the same assessor function twice
+        const assessorName = assessor.name;
+        if (ranAssessors.has(assessorName))
+            continue;
+        ranAssessors.add(assessorName);
+        logger.info(`Running assessor: ${assessorName} for category: ${category}`);
+        try {
+            const findings = await assessor();
+            allFindings.push(...findings);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.error(`Assessor ${assessorName} failed: ${msg}`);
+        }
+    }
+    // Deduplicate by findingId
+    const seen = new Set();
+    return allFindings.filter((f) => {
+        if (seen.has(f.findingId))
+            return false;
+        seen.add(f.findingId);
+        return true;
+    });
+}
+/**
+ * Run full system assessment (all assessors).
+ */
+export async function runFullAssessment() {
+    const allCategories = Object.keys(CATEGORY_ASSESSORS);
+    return runAssessment(allCategories);
+}
+//# sourceMappingURL=index.js.map

package/dist/assessors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/assessors/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,MAAM,MAAM,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAC;AAEzD,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;AAEtB,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,WAAW,CAAC,GAAW,EAAE,IAAc,EAAE,OAAO,GAAG,KAAK;IAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACjD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,EAAU,EACV,QAAuC,EACvC,KAAa,EACb,WAAmB,EACnB,QAAgB;IAEhB,OAAO;QACL,SAAS,EAAE,EAAE;QACb,QAAQ;QACR,KAAK;QACL,WAAW;QACX,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,MAAM,EAAE,eAAe;KACxB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,wBAAwB;IACxB,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,UAAU,CAAC,8BAA8B,CAAC;gBAC1D,CAAC,CAAC,YAAY,CAAC,8BAA8B,EAAE,OAAO,CAAC;gBACvD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,WAAW,GAAG,UAAU,CAAC,4BAA4B,CAAC;gBAC1D,CAAC,CAAC,YAAY,CAAC,4BAA4B,EAAE,OAAO,CAAC;gBACrD,CAAC,CAAC,EAAE,CAAC;YAEP,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAErD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,YAAY,EACZ,MAAM,EACN,sBAAsB,EACtB,8BAA8B,MAAM,IAAI,SAAS,wEAAwE,EACzH,UAAU,CACX,CACF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5E,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,YAAY,EACZ,QAAQ,EACR,sCAAsC,EACtC,8EAA8E,EAC9E,UAAU,CACX,CACF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,mBAAmB,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAC9E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBAChD,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,YAAY,EACZ,QAAQ,EACR,+BAA+B,EAC/B,uDAAuD,EACvD,UAAU,CACX,CACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IAED,+CAA+C;IAC/C,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,cAAc,GAAG,MAAM;iBAC1B,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBACf,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC9B,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;YAC7C,CAAC,CAAC;iBACD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAErC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,YAAY,EACZ,UAAU,EACV,4BAA4B,EAC5B,SAAS,cAAc,CAAC,MAAM,iDAAiD,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACtH,gBAAgB,CACjB,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,aAAa,EACb,MAAM,EACN,4BAA4B,EAC5B,oFAAoF,EACpF,QAAQ,CACT,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,wBAAwB;IACxB,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,iDAAiD,EAAE;gBACpF,kBAAkB;aACnB,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClC,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,QAAQ,EACR,MAAM,EACN,mBAAmB,EACnB,mFAAmF,EACnF,UAAU,CACX,CACF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACnE,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAE3D,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,kCAAkC;YACpF,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEzC,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,QAAQ,EACR,MAAM,EACN,8BAA8B,EAC9B,qFAAqF,EACrF,UAAU,CACX,CACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC;QACH,IAAI,SAAS,GAAa,EAAE,CAAC;QAC7B,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACxF,SAAS,GAAG,IAAI;iBACb,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;iBACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAClC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,CAAC,CAAC;iBACD,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YACvD,SAAS,GAAG,EAAE;iBACX,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;iBACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAClC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,CAAC,CAAC;iBACD,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,UAAU,GAA2B;YACzC,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,WAAW;SACrB,CAAC;QAEF,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/E,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,cAAc,EACd,MAAM,EACN,wBAAwB,EACxB,+DAA+D,QAAQ,2CAA2C,EAClH,SAAS,CACV,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,wBAAwB;IACxB,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,mBAAmB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,cAAc,EACd,MAAM,EACN,6BAA6B,EAC7B,0DAA0D,EAC1D,YAAY,CACb,CACF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,cAAc,EACd,QAAQ,EACR,6BAA6B,EAC7B,wEAAwE,EACxE,YAAY,CACb,CACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAC7C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAChF,CAAC;YAEF,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;gBACvC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC/C,IAAI,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBAChF,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,WAAW,OAAO,EAAE,EACpB,QAAQ,EACR,gCAAgC,OAAO,EAAE,EACzC,mBAAmB,OAAO,+BAA+B,EACzD,YAAY,CACb,CACF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,4BAA4B;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,0BAA0B;IAC1B,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,iBAAiB,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC3D,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,aAAa,EACb,MAAM,EACN,8BAA8B,EAC9B,sEAAsE,EACtE,SAAS,CACV,CACF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC3B,kDAAkD;YAClD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,aAAa,EACb,QAAQ,EACR,gCAAgC,EAChC,4CAA4C,EAC5C,SAAS,CACV,CACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,2CAA2C;IAC3C,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5E,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,eAAe,EACf,QAAQ,EACR,yBAAyB,EACzB,6DAA6D,EAC7D,OAAO,CACR,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE;YAC3E,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;YAC9B,GAAG,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACpE,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,eAAe,EACf,QAAQ,EACR,4BAA4B,EAC5B,4FAA4F,EAC5F,YAAY,CACb,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,qCAAqC;IACrC,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,0BAA0B,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7E,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACxD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,WAAW,EACX,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EACnC,GAAG,WAAW,yBAAyB,EACvC,aAAa,WAAW,+EAA+E,EACvG,eAAe,CAChB,CACF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,4BAA4B;YAC5B,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC;gBACnF,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;gBAChF,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CACzD,CAAC;gBAEF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,WAAW,EACX,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAC5C,GAAG,UAAU,CAAC,MAAM,2BAA2B,EAC/C,aAAa,UAAU,CAAC,MAAM,yDAAyD,EACvF,eAAe,CAChB,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,4DAA4D;IAC5D,MAAM,cAAc,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC;IACtE,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5E,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,eAAe,EACf,QAAQ,EACR,qCAAqC,EACrC,+GAA+G,EAC/G,UAAU,CACX,CACF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CACX,WAAW,CACT,eAAe,EACf,KAAK,EACL,yBAAyB,EACzB,4FAA4F,EAC5F,UAAU,CACX,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,2CAA2C;AAC3C,MAAM,kBAAkB,GAAuD;IAC7E,kBAAkB;IAClB,cAAc,EAAE,mBAAmB;IACnC,cAAc,EAAE,mBAAmB;IACnC,iBAAiB,EAAE,wBAAwB;IAC3C,gBAAgB,EAAE,wBAAwB;IAC1C,UAAU,EAAE,gBAAgB;IAC5B,UAAU,EAAE,gBAAgB;IAC5B,iBAAiB,EAAE,sBAAsB;IACzC,gBAAgB,EAAE,cAAc;IAChC,gBAAgB,EAAE,cAAc;IAChC,KAAK,EAAE,gBAAgB;IACvB,mBAAmB;IACnB,cAAc,EAAE,mBAAmB;IACnC,WAAW,EAAE,mBAAmB;IAChC,iBAAiB,EAAE,mBAAmB;IACtC,mBAAmB,EAAE,wBAAwB;IAC7C,iBAAiB,EAAE,gBAAgB;IACnC,iBAAiB,EAAE,gBAAgB;IACnC,mBAAmB,EAAE,gBAAgB;IACrC,iBAAiB,EAAE,cAAc;IACjC,uBAAuB;IACvB,UAAU,EAAE,mBAAmB;IAC/B,OAAO,EAAE,gBAAgB;IACzB,aAAa,EAAE,cAAc;IAC7B,aAAa,EAAE,wBAAwB;IACvC,eAAe,EAAE,gBAAgB;IACjC,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,wBAAwB;IACjC,YAAY,EAAE,gBAAgB;IAC9B,QAAQ,EAAE,sBAAsB;CACjC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,iBAA2B;IAC7D,MAAM,WAAW,GAAwB,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,0DAA0D;QAC1D,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC;QACnC,IAAI,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,SAAS;QAC7C,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE/B,MAAM,CAAC,IAAI,CAAC,qBAAqB,YAAY,kBAAkB,QAAQ,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,EAAE,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,YAAY,YAAY,YAAY,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACtD,OAAO,aAAa,CAAC,aAAa,CAAC,CAAC;AACtC,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+/**
+ * PanguardReport CLI
+ * PanguardReport 命令列介面
+ *
+ * @module @panguard-ai/panguard-report/cli
+ */
+import type { ComplianceFramework, ReportConfig, ReportFormat, ReportLanguage } from '../types.js';
+/** Available CLI commands / 可用的 CLI 命令 */
+export type ReportCliCommand = 'generate' | 'list-frameworks' | 'validate' | 'summary' | 'config' | 'help';
+/** CLI options / CLI 選項 */
+export interface ReportCliOptions {
+    command: ReportCliCommand;
+    framework?: ComplianceFramework;
+    language?: ReportLanguage;
+    format?: ReportFormat;
+    outputDir?: string;
+    organizationName?: string;
+    inputFile?: string;
+    verbose?: boolean;
+    /** Run live system assessment / 執行即時系統評估 */
+    assess?: boolean;
+}
+/**
+ * Parse CLI arguments
+ * 解析 CLI 參數
+ */
+export declare function parseCliArgs(args: string[]): ReportCliOptions;
+/**
+ * Build report config from CLI options
+ * 從 CLI 選項建立報告配置
+ */
+export declare function buildConfigFromOptions(options: ReportCliOptions): ReportConfig;
+/**
+ * Format config for display
+ * 格式化配置以供顯示
+ */
+export declare function formatConfig(config: ReportConfig): string;
+/**
+ * Format framework list for display
+ * 格式化框架列表以供顯示
+ */
+export declare function formatFrameworkList(): string;
+/**
+ * Get help text
+ * 取得說明文字
+ */
+export declare function getHelpText(): string;
+/**
+ * Execute CLI command
+ * 執行 CLI 命令
+ */
+export declare function executeCli(args: string[]): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,mBAAmB,EAEnB,YAAY,EACZ,YAAY,EACZ,cAAc,EACf,MAAM,aAAa,CAAC;AASrB,0CAA0C;AAC1C,MAAM,MAAM,gBAAgB,GACxB,UAAU,GACV,iBAAiB,GACjB,UAAU,GACV,SAAS,GACT,QAAQ,GACR,MAAM,CAAC;AAEX,2BAA2B;AAC3B,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAgC7D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,gBAAgB,GAAG,YAAY,CAoB9E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAgBzD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAU5C;AAED;;;GAGG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAkCpC;AA6CD;;;GAGG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuG9D"}