@panguard-ai/threat-cloud 1.4.1 → 1.5.5

package/dist/database.d.ts

@@ -6,6 +6,7 @@
  *
  * @module @panguard-ai/threat-cloud/database
  */
+import Database from 'better-sqlite3';
 import type { AnonymizedThreatData, ThreatCloudRule, ThreatStats, ATRProposal, SkillThreatSubmission, SkillBlacklistEntry, ScanEvent, AggregatedMetrics } from './types.js';
 import { AuditLogger } from './audit-logger.js';
 /**
@@ -16,6 +17,12 @@ export declare class ThreatCloudDB {
     private readonly db;
     readonly audit: AuditLogger;
     constructor(dbPath: string);
+    /**
+     * Escape hatch for callers that need direct DB access (e.g. modules
+     * defined outside this class that perform table-specific queries).
+     * Prefer adding a typed method here when the access pattern stabilises.
+     */
+    getRawDb(): Database.Database;
     /** Create tables if they don't exist / 建立資料表 */
     private initialize;
     /** Insert anonymized threat data / 插入匿名化威脅數據 */
@@ -28,6 +35,10 @@ export declare class ThreatCloudDB {
     private extractMetadata;
     /** Insert or update a community rule / 插入或更新社群規則 */
     upsertRule(rule: ThreatCloudRule): void;
+    /** Delete all rules with a given source. Returns number of deleted rows. */
+    deleteRulesBySource(source: string): number;
+    /** Delete rules by a list of rule IDs. Returns number of deleted rows. */
+    deleteRulesByIds(ruleIds: readonly string[]): number;
     /** Fetch rules published after a given timestamp / 取得指定時間後發佈的規則 */
     getRulesSince(since: string, filters?: {
         category?: string;
@@ -63,7 +74,14 @@ export declare class ThreatCloudDB {
         avgRiskScore: number;
         maxRiskLevel: string;
         findings: string[];
+        /** ATR rule IDs that triggered across all reports */
+        atrRuleIds: string[];
     };
+    /** Fetch rule content by IDs. Returns the YAML detection patterns for crystallization. */
+    getRuleContentByIds(ruleIds: string[]): Array<{
+        ruleId: string;
+        ruleContent: string;
+    }>;
     /** Check if an ATR proposal already exists for a pattern hash */
     hasATRProposal(patternHash: string): boolean;
     /** Get an ATR proposal by pattern_hash, returning client_id and confirmations */
@@ -71,12 +89,52 @@ export declare class ThreatCloudDB {
         client_id: string | null;
         confirmations: number;
     } | undefined;
+    /**
+     * Look up a previously-judged payload fingerprint. Caller should call this
+     * BEFORE invoking the LLM drafter; on hit, skip the Anthropic call entirely
+     * and reuse the cached verdict.
+     *
+     * 查詢先前已判斷過的 payload fingerprint。呼叫端應在叫用 LLM drafter 之前查
+     * 這個表;命中時直接跳過 Anthropic 呼叫,回覆之前的結果。
+     */
+    getPayloadFingerprint(fingerprint: string): {
+        result: 'duplicate' | 'novel' | 'rejected';
+        ruleId: string | null;
+        patternHash: string | null;
+        hitCount: number;
+    } | null;
+    /**
+     * Insert or bump a payload fingerprint verdict. UPSERT by fingerprint:
+     * - First time: insert with hit_count=1
+     * - Repeat: increment hit_count, refresh last_seen_at
+     *
+     * 新增或累計 payload fingerprint 判斷結果。
+     */
+    recordPayloadFingerprint(fingerprint: string, result: 'duplicate' | 'novel' | 'rejected', details?: {
+        ruleId?: string;
+        patternHash?: string;
+    }): void;
+    /**
+     * Stats for the fingerprint cache. Surfaced in admin dashboard so you can
+     * see the hit rate and confirm the cost-saving is real.
+     * 指紋快取統計。供 admin dashboard 顯示命中率,確認省錢有效。
+     */
+    getPayloadFingerprintStats(): {
+        total: number;
+        novel: number;
+        duplicate: number;
+        rejected: number;
+        totalHits: number;
+        cacheHits: number;
+    };
     /** Get recent skill threats / 取得最近技能威脅 */
     getSkillThreats(limit?: number): unknown[];
     /** Get proposal statistics / 取得提案統計 */
     getProposalStats(): {
         pending: number;
         confirmed: number;
+        canary: number;
+        quarantined: number;
         rejected: number;
         total: number;
     };
@@ -93,7 +151,27 @@ export declare class ThreatCloudDB {
             count: number;
         }>;
     };
+    /** Record a telemetry event / 記錄遙測事件 */
+    recordTelemetryEvent(event: {
+        eventType: string;
+        platform: string;
+        skillCount: number;
+        findingCount: number;
+        severity: string;
+    }): void;
+    /** Get telemetry stats merging raw events + hourly aggregates / 取得遙測統計 */
+    getTelemetryStats(): {
+        totalEvents: number;
+        eventsToday: number;
+        byEventType: Record<string, number>;
+        byPlatform: Record<string, number>;
+        avgFindingCount: number;
+    };
+    /** Aggregate raw telemetry events into hourly buckets, then delete old raw events / 彙總遙測事件 */
+    cleanupTelemetryEvents(): number;
     clearAllRules(): number;
+    /** Get current schema version for health diagnostics */
+    getSchemaVersion(): number;
     getStats(): ThreatStats;
     /** Get confirmed/promoted ATR rules, optionally filtered by date / 取得已確認 ATR 規則 */
     getConfirmedATRRules(since?: string): Array<{
@@ -110,6 +188,37 @@ export declare class ThreatCloudDB {
     upsertIoC(type: string, value: string, reputation: number, source: string): void;
     /** Promote proposals to rules based on community consensus and/or LLM approval / 推廣提案為規則 */
     promoteConfirmedProposals(): number;
+    /**
+     * Self-heal: find proposals that are status='promoted' but have no
+     * corresponding rule in the rules table, and re-upsert them. This
+     * handles historical bugs where promoteCanaryRules set the status but
+     * the upsertRule call failed silently (e.g., during a prior schema or
+     * constraint mismatch). Idempotent — safe to run every promotion cycle.
+     * Returns the number of rules restored.
+     */
+    healOrphanedPromotedProposals(): number;
+    /** Canary period in milliseconds (24 hours) / Canary 觀察期（24 小時） */
+    private static readonly CANARY_PERIOD_MS;
+    /**
+     * Promote canary rules that have survived the 24-hour observation period
+     * without negative feedback. Quarantine rules with negative feedback.
+     * 推廣存活 24 小時且無負面回饋的 canary 規則。隔離有負面回饋的規則。
+     */
+    promoteCanaryRules(): {
+        promoted: number;
+        quarantined: number;
+    };
+    /** Get count of negative feedback for a rule / 取得規則負面回饋數 */
+    getNegativeFeedbackCount(ruleId: string): number;
+    /** Quarantine a proposal / 隔離提案 */
+    quarantineProposal(patternHash: string): void;
+    /** Get canary rules (for 10% client sampling) / 取得 canary 規則（供 10% 客戶端抽樣） */
+    getCanaryATRRules(): Array<{
+        ruleId: string;
+        ruleContent: string;
+        publishedAt: string;
+        source: string;
+    }>;
     /** Reject an ATR proposal / 拒絕 ATR 提案 */
     rejectATRProposal(patternHash: string): void;
     /** Admin: manually approve an ATR proposal and promote to rule */
@@ -127,7 +236,7 @@ export declare class ThreatCloudDB {
     /** Report a safe skill (increment confirmations, auto-confirm at 3+) / 回報安全 skill */
     reportSafeSkill(skillName: string, fingerprintHash?: string): void;
     /** Get confirmed community whitelist / 取得社群白名單 */
-    getSkillWhitelist(): Array<{
+    getSkillWhitelist(since?: string): Array<{
         name: string;
         hash: string | null;
         confirmations: number;
@@ -136,7 +245,7 @@ export declare class ThreatCloudDB {
      * Get skill blacklist: skills reported by 3+ distinct clients with avg risk >= 70
      * 取得技能黑名單：3+ 不同客戶端回報且平均風險 >= 70 的技能
      */
-    getSkillBlacklist(minReports?: number, minAvgRisk?: number): SkillBlacklistEntry[];
+    getSkillBlacklist(minReports?: number, minAvgRisk?: number, since?: string): SkillBlacklistEntry[];
     /** Backfill classification for rules with NULL category / 回填缺少分類的規則 */
     backfillClassification(): number;
     /**
@@ -150,6 +259,32 @@ export declare class ThreatCloudDB {
     }>;
     /** Insert scan event from any source / 插入掃描事件 */
     insertScanEvent(event: ScanEvent): void;
+    /** Record a one-time activation event / 記錄一次性啟動事件 */
+    recordActivation(activation: {
+        clientId: string;
+        platform: string;
+        osType: string;
+        panguardVersion: string;
+        nodeVersion: string;
+    }): boolean;
+    /** Get activation stats / 取得啟動統計 */
+    getActivationStats(): {
+        total: number;
+        byPlatform: Array<{
+            platform: string;
+            count: number;
+        }>;
+        byOs: Array<{
+            osType: string;
+            count: number;
+        }>;
+        recent: Array<{
+            activatedAt: string;
+            platform: string;
+            osType: string;
+            panguardVersion: string;
+        }>;
+    };
     /** Get contributor leaderboard (hashed IDs, no PII) / 取得貢獻者排行榜 */
     getContributorLeaderboard(limit?: number): Array<{
         contributorHash: string;
@@ -159,6 +294,123 @@ export declare class ThreatCloudDB {
     }>;
     /** Get aggregated metrics across all sources / 取得所有來源的聚合指標 */
     getAggregatedMetrics(): AggregatedMetrics;
+    /** Look up a cached verdict by content hash. Returns null if miss or expired. */
+    getVerdictCache(contentHash: string): {
+        readonly contentHash: string;
+        readonly skillName: string;
+        readonly verdict: string;
+        readonly scannedAt: string;
+        readonly scanCount: number;
+    } | null;
+    /** Insert or replace a verdict cache entry with 30-day TTL. */
+    insertVerdictCache(entry: {
+        readonly contentHash: string;
+        readonly skillName: string;
+        readonly verdict: string;
+    }): void;
+    /** Delete a specific cache entry. Returns true if a row was deleted. */
+    invalidateVerdictCache(contentHash: string): boolean;
+    /** Purge all expired cache entries. Returns count deleted. */
+    purgeExpiredVerdictCache(): number;
+    /** Get the latest (non-superseded) hash entry for a skill. */
+    getLatestSkillHash(skillName: string): {
+        readonly contentHash: string;
+        readonly scanVerdict: string | null;
+    } | null;
+    /** Record a skill hash observation. Creates or updates last_seen. */
+    recordSkillHash(entry: {
+        readonly skillName: string;
+        readonly contentHash: string;
+        readonly scanVerdict?: string;
+        readonly rugPullFlag?: boolean;
+    }): void;
+    /** Mark a previous hash as superseded by a new hash. */
+    markSkillHashSuperseded(skillName: string, oldHash: string, newHash: string): void;
+    /** Get full hash history for a skill (audit trail). */
+    getSkillHashHistory(skillName: string): ReadonlyArray<{
+        readonly contentHash: string;
+        readonly firstSeen: string;
+        readonly lastSeen: string;
+        readonly scanVerdict: string | null;
+        readonly supersededBy: string | null;
+        readonly rugPullFlag: boolean;
+    }>;
+    /** Create an organization / 建立組織 */
+    createOrg(id: string, name: string): void;
+    /** Get org by ID / 取得組織 */
+    getOrg(id: string): {
+        id: string;
+        name: string;
+        created_at: string;
+    } | undefined;
+    /** Upsert device heartbeat / 更新裝置心跳
+     *  Threat Model: Fleet view (#6 Scope Escalation — org-level visibility) */
+    upsertDevice(data: {
+        deviceId: string;
+        orgId: string;
+        hostname?: string;
+        osType?: string;
+        agentCount?: number;
+        guardVersion?: string;
+    }): void;
+    /** List devices for an org / 列出組織下的裝置
+     *  Threat Model: Fleet view (#6) */
+    getDevicesByOrg(orgId: string, limit?: number, offset?: number): ReadonlyArray<{
+        id: string;
+        hostname: string | null;
+        os_type: string | null;
+        agent_count: number;
+        guard_version: string | null;
+        last_seen: string;
+        created_at: string;
+    }>;
+    /** Get device count for an org / 取得組織裝置數 */
+    getDeviceCount(orgId: string): number;
+    /** Set org policy / 設定組織策略
+     *  Threat Model: Policy engine (#1 Supply Chain, #6 Scope Escalation) */
+    setOrgPolicy(orgId: string, category: string, action: 'allow' | 'block'): void;
+    /** Get org policies / 取得組織策略 */
+    getOrgPolicies(orgId: string): ReadonlyArray<{
+        category: string;
+        action: string;
+        created_at: string;
+    }>;
+    /** Delete org policy / 刪除組織策略 */
+    deleteOrgPolicy(orgId: string, category: string): boolean;
+    /** Register a new client key. Returns the raw key (only time it's visible). */
+    registerClientKey(clientId: string, ipAddress: string | null): {
+        clientKey: string;
+    };
+    /** Validate a raw client key. Updates last_used_at on success. */
+    validateClientKey(rawKey: string): boolean;
+    /**
+     * Look up role + clientId for a raw client key. Returns null if invalid/revoked.
+     * Does NOT update last_used_at (caller should use validateClientKey for that).
+     * Used by L5 partner-sync endpoints to enforce role-based access.
+     */
+    getClientKeyInfo(rawKey: string): {
+        clientId: string;
+        role: string;
+    } | null;
+    /**
+     * Issue a partner key. Partner keys are manually issued by admin and can
+     * access L5 live-sync endpoints (e.g. /api/atr-rules/live). Returns the
+     * raw key once — caller must store it securely.
+     */
+    registerPartnerKey(partnerName: string, issuedBy: string): {
+        clientKey: string;
+    };
+    /** Revoke all keys for a client. Returns number of keys revoked. */
+    revokeClientKey(clientId: string): number;
+    /** List client keys (admin). Never returns raw keys. */
+    listClientKeys(limit?: number, offset?: number): Array<{
+        id: number;
+        clientId: string;
+        createdAt: string;
+        lastUsedAt: string | null;
+        revoked: boolean;
+        ipAddress: string | null;
+    }>;
     /** Close the database / 關閉資料庫 */
     close(): void;
 }

package/dist/database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../src/database.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EACf,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,mBAAmB,EACnB,SAAS,EACT,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;GAGG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;gBAEhB,MAAM,EAAE,MAAM;IAQ1B,gDAAgD;IAChD,OAAO,CAAC,UAAU;IA6HlB,gDAAgD;IAChD,YAAY,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI;IAgB9C,qDAAqD;IACrD,UAAU,CAAC,KAAK,GAAE,MAAW,EAAE,MAAM,GAAE,MAAU,GAAG,OAAO,EAAE;IAM7D,sCAAsC;IACtC,cAAc,IAAI,MAAM;IAKxB,uEAAuE;IACvE,OAAO,CAAC,eAAe;IAiJvB,oDAAoD;IACpD,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IAiCvC,mEAAmE;IACnE,aAAa,CACX,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAClE,eAAe,EAAE;IAuBpB,+CAA+C;IAC/C,WAAW,CACT,KAAK,SAAO,EACZ,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAClE,eAAe,EAAE;IAwBpB,6CAA6C;IAC7C,iBAAiB,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI;IAe9C,mEAAmE;IACnE,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE;IAS3C,6EAA6E;IAC7E,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAc7C,6DAA6D;IAC7D,0BAA0B,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAUtE,sCAAsC;IACtC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAUnF,+CAA+C;IAC/C,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE;IAkBtF,gDAAgD;IAChD,iBAAiB,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI;IAe1D,iFAAiF;IACjF,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG;QAC5C,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB;IAsCD,iEAAiE;IACjE,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAO5C,iFAAiF;IACjF,oBAAoB,CAClB,WAAW,EAAE,MAAM,GAClB;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;IAMlE,0CAA0C;IAC1C,eAAe,CAAC,KAAK,GAAE,MAAW,GAAG,OAAO,EAAE;IAM9C,uCAAuC;IACvC,gBAAgB,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAsB3F,qCAAqC;IAKrC,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAM7F,aAAa,IAAI;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACpD;IA8BD,aAAa,IAAI,MAAM;IAMvB,QAAQ,IAAI,WAAW;IAyFvB,mFAAmF;IACnF,oBAAoB,CAClB,KAAK,CAAC,EAAE,MAAM,GACb,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAyCtF,gFAAgF;IAChF,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE;IA+B/C,uDAAuD;IACvD,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE;IAcnD,yCAAyC;IACzC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAgBhF,4FAA4F;IAC5F,yBAAyB,IAAI,MAAM;IA+DnC,yCAAyC;IACzC,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAW5C,kEAAkE;IAClE,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAyBhD,2CAA2C;IAC3C,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAQ/C,iEAAiE;IACjE,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAWvD,0EAA0E;IAC1E,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAO/C,mEAAmE;IACnE,sBAAsB,IAAI,OAAO,EAAE;IASnC,sEAAsE;IACtE,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE;IA2BnE,qFAAqF;IACrF,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI;IAiBlE,kDAAkD;IAClD,iBAAiB,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAaxF;;;OAGG;IACH,iBAAiB,CAAC,UAAU,GAAE,MAAU,EAAE,UAAU,GAAE,MAAW,GAAG,mBAAmB,EAAE;IAqBzF,uEAAuE;IACvE,sBAAsB,IAAI,MAAM;IAmBhC;;;;OAIG;IACH,sBAAsB,CAAC,KAAK,GAAE,MAAU,GAAG,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAmB9F,iDAAiD;IACjD,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI;IAkBvC,kEAAkE;IAClE,yBAAyB,CAAC,KAAK,GAAE,MAAW,GAAG,KAAK,CAAC;QACnD,eAAe,EAAE,MAAM,CAAC;QACxB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC;IAoDF,8DAA8D;IAC9D,oBAAoB,IAAI,iBAAiB;IAsEzC,iCAAiC;IACjC,KAAK,IAAI,IAAI;CAGd"}
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../src/database.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EACf,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,mBAAmB,EACnB,SAAS,EACT,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;GAGG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;gBAEhB,MAAM,EAAE,MAAM;IAQ1B;;;;OAIG;IACH,QAAQ,IAAI,QAAQ,CAAC,QAAQ;IAI7B,gDAAgD;IAChD,OAAO,CAAC,UAAU;IAmMlB,gDAAgD;IAChD,YAAY,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI;IAgB9C,qDAAqD;IACrD,UAAU,CAAC,KAAK,GAAE,MAAW,EAAE,MAAM,GAAE,MAAU,GAAG,OAAO,EAAE;IAM7D,sCAAsC;IACtC,cAAc,IAAI,MAAM;IAKxB,uEAAuE;IACvE,OAAO,CAAC,eAAe;IAiJvB,oDAAoD;IACpD,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IAiCvC,4EAA4E;IAC5E,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAM3C,0EAA0E;IAC1E,gBAAgB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM;IAOpD,mEAAmE;IACnE,aAAa,CACX,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAClE,eAAe,EAAE;IAuBpB,+CAA+C;IAC/C,WAAW,CACT,KAAK,SAAO,EACZ,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAClE,eAAe,EAAE;IAwBpB,6CAA6C;IAC7C,iBAAiB,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI;IAe9C,mEAAmE;IACnE,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE;IAS3C,6EAA6E;IAC7E,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAc7C,6DAA6D;IAC7D,0BAA0B,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAUtE,sCAAsC;IACtC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAUnF,+CAA+C;IAC/C,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE;IAkBtF,gDAAgD;IAChD,iBAAiB,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI;IAe1D,iFAAiF;IACjF,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG;QAC5C,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,qDAAqD;QACrD,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB;IAgDD,0FAA0F;IAC1F,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAStF,iEAAiE;IACjE,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAO5C,iFAAiF;IACjF,oBAAoB,CAClB,WAAW,EAAE,MAAM,GAClB;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;IAYlE;;;;;;;OAOG;IACH,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG;QAC1C,MAAM,EAAE,WAAW,GAAG,OAAO,GAAG,UAAU,CAAC;QAC3C,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,IAAI;IAyBR;;;;;;OAMG;IACH,wBAAwB,CACtB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,WAAW,GAAG,OAAO,GAAG,UAAU,EAC1C,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAClD,IAAI;IAaP;;;;OAIG;IACH,0BAA0B,IAAI;QAC5B,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB;IA4BD,0CAA0C;IAC1C,eAAe,CAAC,KAAK,GAAE,MAAW,GAAG,OAAO,EAAE;IAM9C,uCAAuC;IACvC,gBAAgB,IAAI;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;KACf;IAsBD,qCAAqC;IAKrC,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAM7F,aAAa,IAAI;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACpD;IAoDD,wCAAwC;IACxC,oBAAoB,CAAC,KAAK,EAAE;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,IAAI;IAQR,0EAA0E;IAC1E,iBAAiB,IAAI;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,eAAe,EAAE,MAAM,CAAC;KACzB;IAkED,8FAA8F;IAC9F,sBAAsB,IAAI,MAAM;IAkChC,aAAa,IAAI,MAAM;IAMvB,wDAAwD;IACxD,gBAAgB,IAAI,MAAM;IAW1B,QAAQ,IAAI,WAAW;IAyFvB,mFAAmF;IACnF,oBAAoB,CAClB,KAAK,CAAC,EAAE,MAAM,GACb,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAyCtF,gFAAgF;IAChF,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE;IA+B/C,uDAAuD;IACvD,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE;IAcnD,yCAAyC;IACzC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAgBhF,4FAA4F;IAC5F,yBAAyB,IAAI,MAAM;IAkEnC;;;;;;;OAOG;IACH,6BAA6B,IAAI,MAAM;IA6BvC,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAuB;IAE/D;;;;OAIG;IACH,kBAAkB,IAAI;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE;IAuD/D,4DAA4D;IAC5D,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAUhD,mCAAmC;IACnC,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAS7C,6EAA6E;IAC7E,iBAAiB,IAAI,KAAK,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IAWF,yCAAyC;IACzC,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAW5C,kEAAkE;IAClE,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAmChD,2CAA2C;IAC3C,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAY/C,iEAAiE;IACjE,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAevD,0EAA0E;IAC1E,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAW/C,mEAAmE;IACnE,sBAAsB,IAAI,OAAO,EAAE;IAanC,sEAAsE;IACtE,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE;IA2BnE,qFAAqF;IACrF,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI;IAiBlE,kDAAkD;IAClD,iBAAiB,CACf,KAAK,CAAC,EAAE,MAAM,GACb,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAqBtE;;;OAGG;IACH,iBAAiB,CACf,UAAU,GAAE,MAAU,EACtB,UAAU,GAAE,MAAW,EACvB,KAAK,CAAC,EAAE,MAAM,GACb,mBAAmB,EAAE;IAsCxB,uEAAuE;IACvE,sBAAsB,IAAI,MAAM;IAmBhC;;;;OAIG;IACH,sBAAsB,CAAC,KAAK,GAAE,MAAU,GAAG,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAuB9F,iDAAiD;IACjD,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI;IAkBvC,qDAAqD;IACrD,gBAAgB,CAAC,UAAU,EAAE;QAC3B,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO;IAoBX,oCAAoC;IACpC,kBAAkB,IAAI;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,KAAK,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACvD,IAAI,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,KAAK,CAAC;YACZ,WAAW,EAAE,MAAM,CAAC;YACpB,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;YACf,eAAe,EAAE,MAAM,CAAC;SACzB,CAAC,CAAC;KACJ;IAgCD,kEAAkE;IAClE,yBAAyB,CAAC,KAAK,GAAE,MAAW,GAAG,KAAK,CAAC;QACnD,eAAe,EAAE,MAAM,CAAC;QACxB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC;IAoDF,8DAA8D;IAC9D,oBAAoB,IAAI,iBAAiB;IAkFzC,iFAAiF;IACjF,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG;QACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,GAAG,IAAI;IAiCR,+DAA+D;IAC/D,kBAAkB,CAAC,KAAK,EAAE;QACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,IAAI;IASR,wEAAwE;IACxE,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAOpD,8DAA8D;IAC9D,wBAAwB,IAAI,MAAM;IASlC,8DAA8D;IAC9D,kBAAkB,CAChB,SAAS,EAAE,MAAM,GAChB;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAe/E,qEAAqE;IACrE,eAAe,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;KAChC,GAAG,IAAI;IAiBR,wDAAwD;IACxD,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAUlF,uDAAuD;IACvD,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAAC;QACpD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QACrC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;KAC/B,CAAC;IA6BF,oCAAoC;IACpC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAIzC,2BAA2B;IAC3B,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;IAMhF;gFAC4E;IAC5E,YAAY,CAAC,IAAI,EAAE;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,IAAI;IAuBR;wCACoC;IACpC,eAAe,CACb,KAAK,EAAE,MAAM,EACb,KAAK,GAAE,MAAY,EACnB,MAAM,GAAE,MAAU,GACjB,aAAa,CAAC;QACf,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IAgBF,4CAA4C;IAC5C,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAQrC;6EACyE;IACzE,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI;IAU9E,gCAAgC;IAChC,cAAc,CACZ,KAAK,EAAE,MAAM,GACZ,aAAa,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ1E,iCAAiC;IACjC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAWzD,+EAA+E;IAC/E,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE;IAuBpF,kEAAkE;IAClE,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAY1C;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAU3E;;;;OAIG;IACH,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE;IAYhF,oEAAoE;IACpE,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IASzC,wDAAwD;IACxD,cAAc,CACZ,KAAK,SAAK,EACV,MAAM,SAAI,GACT,KAAK,CAAC;QACP,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;IAuBF,iCAAiC;IACjC,KAAK,IAAI,IAAI;CAGd"}