@revealui/core 0.0.1-pre.4 → 0.2.1

package/dist/security/gdpr.js

@@ -0,0 +1,465 @@
+/**
+ * GDPR Compliance Utilities
+ *
+ * Data privacy, consent management, data export, and right to be forgotten
+ */
+import { createHash } from 'node:crypto';
+import { logger } from '../observability/logger.js';
+/**
+ * Consent management system
+ */
+export class ConsentManager {
+    consents = new Map();
+    consentVersion = '1.0.0';
+    /**
+     * Grant consent
+     */
+    async grantConsent(userId, type, source = 'explicit', expiresIn) {
+        const consent = {
+            id: crypto.randomUUID(),
+            userId,
+            type,
+            granted: true,
+            timestamp: new Date().toISOString(),
+            expiresAt: expiresIn ? new Date(Date.now() + expiresIn).toISOString() : undefined,
+            source,
+            version: this.consentVersion,
+        };
+        this.consents.set(`${userId}:${type}`, consent);
+        return consent;
+    }
+    /**
+     * Revoke consent
+     */
+    async revokeConsent(userId, type) {
+        const key = `${userId}:${type}`;
+        const existing = this.consents.get(key);
+        if (existing) {
+            existing.granted = false;
+            existing.timestamp = new Date().toISOString();
+        }
+    }
+    /**
+     * Check if consent is granted
+     */
+    hasConsent(userId, type) {
+        const consent = this.consents.get(`${userId}:${type}`);
+        if (!consent?.granted) {
+            return false;
+        }
+        // Check if expired
+        if (consent.expiresAt && new Date(consent.expiresAt) < new Date()) {
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Get all consents for user
+     */
+    getUserConsents(userId) {
+        return Array.from(this.consents.values()).filter((c) => c.userId === userId);
+    }
+    /**
+     * Update consent version
+     */
+    setConsentVersion(version) {
+        this.consentVersion = version;
+    }
+    /**
+     * Check if consent needs renewal
+     */
+    needsRenewal(userId, type, maxAge) {
+        const consent = this.consents.get(`${userId}:${type}`);
+        if (!consent?.granted) {
+            return true;
+        }
+        const age = Date.now() - new Date(consent.timestamp).getTime();
+        return age >= maxAge;
+    }
+    /**
+     * Get consent statistics
+     */
+    getStatistics() {
+        const consents = Array.from(this.consents.values());
+        const now = new Date();
+        const granted = consents.filter((c) => c.granted).length;
+        const revoked = consents.filter((c) => !c.granted).length;
+        const expired = consents.filter((c) => c.expiresAt && new Date(c.expiresAt) < now).length;
+        const byType = consents.reduce((acc, c) => {
+            acc[c.type] = (acc[c.type] || 0) + 1;
+            return acc;
+        }, {});
+        return {
+            total: consents.length,
+            granted,
+            revoked,
+            expired,
+            byType,
+        };
+    }
+}
+/**
+ * Data export system
+ */
+export class DataExportSystem {
+    /**
+     * Export user data
+     */
+    async exportUserData(userId, getUserData, format = 'json') {
+        const data = await getUserData(userId);
+        const exportData = {
+            userId,
+            exportedAt: new Date().toISOString(),
+            data: {
+                profile: data.profile,
+                activities: data.activities,
+                consents: data.consents,
+                dataProcessing: [],
+            },
+            format,
+        };
+        return exportData;
+    }
+    /**
+     * Format export as JSON
+     */
+    formatAsJSON(exportData) {
+        return JSON.stringify(exportData, null, 2);
+    }
+    /**
+     * Format export as CSV
+     */
+    formatAsCSV(exportData) {
+        const lines = [];
+        // Profile data
+        lines.push('Type,Key,Value');
+        Object.entries(exportData.data.profile).forEach(([key, value]) => {
+            lines.push(`Profile,${key},"${value}"`);
+        });
+        // Activities
+        exportData.data.activities.forEach((activity, index) => {
+            Object.entries(activity).forEach(([key, value]) => {
+                lines.push(`Activity ${index + 1},${key},"${value}"`);
+            });
+        });
+        return lines.join('\n');
+    }
+    /**
+     * Create download link
+     */
+    createDownloadLink(content, _filename, mimeType) {
+        const blob = new Blob([content], { type: mimeType });
+        return URL.createObjectURL(blob);
+    }
+}
+/**
+ * Data deletion system (Right to be Forgotten)
+ */
+export class DataDeletionSystem {
+    requests = new Map();
+    /**
+     * Request data deletion
+     */
+    async requestDeletion(userId, dataCategories, reason) {
+        const request = {
+            id: crypto.randomUUID(),
+            userId,
+            requestedAt: new Date().toISOString(),
+            status: 'pending',
+            dataCategories,
+            reason,
+        };
+        this.requests.set(request.id, request);
+        return request;
+    }
+    /**
+     * Process deletion request
+     */
+    async processDeletion(requestId, deleteData) {
+        const request = this.requests.get(requestId);
+        if (!request) {
+            throw new Error('Deletion request not found');
+        }
+        request.status = 'processing';
+        try {
+            const result = await deleteData(request.userId, request.dataCategories);
+            request.status = 'completed';
+            request.processedAt = new Date().toISOString();
+            request.deletedData = result.deleted;
+            request.retainedData = result.retained;
+        }
+        catch (error) {
+            request.status = 'failed';
+            throw error;
+        }
+    }
+    /**
+     * Get deletion request
+     */
+    getRequest(requestId) {
+        return this.requests.get(requestId);
+    }
+    /**
+     * Get user deletion requests
+     */
+    getUserRequests(userId) {
+        return Array.from(this.requests.values()).filter((r) => r.userId === userId);
+    }
+    /**
+     * Check if data can be deleted
+     */
+    canDelete(_dataCategory, legalBasis) {
+        // Data with legal obligation or vital interest cannot be deleted
+        if (legalBasis === 'legal_obligation' || legalBasis === 'vital_interest') {
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Calculate retention period
+     */
+    calculateRetentionEnd(createdAt, retentionPeriod) {
+        return new Date(createdAt.getTime() + retentionPeriod * 24 * 60 * 60 * 1000);
+    }
+    /**
+     * Check if data should be deleted (retention period expired)
+     */
+    shouldDelete(createdAt, retentionPeriod) {
+        const retentionEnd = this.calculateRetentionEnd(createdAt, retentionPeriod);
+        return new Date() > retentionEnd;
+    }
+}
+/**
+ * Data anonymization utilities
+ */
+export class DataAnonymization {
+    /**
+     * Anonymize user data
+     */
+    static anonymizeUser(user) {
+        return {
+            ...user,
+            email: DataAnonymization.hashValue(user.email),
+            name: 'Anonymous User',
+            phone: undefined,
+            address: undefined,
+            ip: undefined,
+        };
+    }
+    /**
+     * Pseudonymize data (reversible)
+     */
+    static pseudonymize(value, key) {
+        // Simple pseudonymization (use proper crypto in production)
+        return `pseudo_${DataAnonymization.hashValue(value + key).substring(0, 16)}`;
+    }
+    /**
+     * Hash value (irreversible) using SHA-256
+     */
+    static hashValue(value) {
+        const digest = createHash('sha256').update(value).digest('hex');
+        return `hash_${digest}`;
+    }
+    /**
+     * Anonymize dataset
+     */
+    static anonymizeDataset(data, sensitiveFields) {
+        return data.map((item) => {
+            const anonymized = { ...item };
+            sensitiveFields.forEach((field) => {
+                if (field in anonymized && typeof anonymized[field] === 'string') {
+                    anonymized[field] = DataAnonymization.hashValue(anonymized[field]);
+                }
+            });
+            return anonymized;
+        });
+    }
+    /**
+     * K-anonymity check
+     */
+    static checkKAnonymity(data, quasiIdentifiers, k) {
+        // Group by quasi-identifiers
+        const groups = new Map();
+        data.forEach((item) => {
+            const key = quasiIdentifiers.map((field) => String(item[field])).join('|');
+            groups.set(key, (groups.get(key) || 0) + 1);
+        });
+        // Check if all groups have at least k members
+        return Array.from(groups.values()).every((count) => count >= k);
+    }
+}
+/**
+ * Privacy policy manager
+ */
+export class PrivacyPolicyManager {
+    policies = new Map();
+    currentVersion = '1.0.0';
+    /**
+     * Add policy version
+     */
+    addPolicy(version, content, effectiveDate) {
+        this.policies.set(version, { version, content, effectiveDate });
+        this.currentVersion = version;
+    }
+    /**
+     * Get current policy
+     */
+    getCurrentPolicy() {
+        return this.policies.get(this.currentVersion);
+    }
+    /**
+     * Get policy by version
+     */
+    getPolicy(version) {
+        return this.policies.get(version);
+    }
+    /**
+     * Check if user accepted current policy
+     */
+    hasAcceptedCurrent(userAcceptedVersion) {
+        return userAcceptedVersion === this.currentVersion;
+    }
+    /**
+     * Get all versions
+     */
+    getAllVersions() {
+        return Array.from(this.policies.keys());
+    }
+}
+export class CookieConsentManager {
+    config = {
+        necessary: true,
+        functional: false,
+        analytics: false,
+        marketing: false,
+    };
+    /**
+     * Set consent configuration
+     */
+    setConsent(config) {
+        this.config = { ...this.config, ...config };
+        this.saveToStorage();
+    }
+    /**
+     * Get consent configuration
+     */
+    getConsent() {
+        return { ...this.config };
+    }
+    /**
+     * Check if specific consent is granted
+     */
+    hasConsent(type) {
+        return this.config[type];
+    }
+    /**
+     * Save to storage
+     */
+    saveToStorage() {
+        if (typeof localStorage !== 'undefined') {
+            localStorage.setItem('cookie-consent', JSON.stringify(this.config));
+        }
+    }
+    /**
+     * Load from storage
+     */
+    loadFromStorage() {
+        if (typeof localStorage !== 'undefined') {
+            const stored = localStorage.getItem('cookie-consent');
+            if (stored) {
+                try {
+                    this.config = JSON.parse(stored);
+                }
+                catch {
+                    // Ignore parse errors
+                }
+            }
+        }
+    }
+    /**
+     * Clear consent
+     */
+    clearConsent() {
+        this.config = {
+            necessary: true,
+            functional: false,
+            analytics: false,
+            marketing: false,
+        };
+        if (typeof localStorage !== 'undefined') {
+            localStorage.removeItem('cookie-consent');
+        }
+    }
+}
+export class DataBreachManager {
+    breaches = new Map();
+    /**
+     * Report data breach
+     */
+    async reportBreach(breach) {
+        const fullBreach = {
+            ...breach,
+            id: crypto.randomUUID(),
+            detectedAt: new Date().toISOString(),
+            status: 'detected',
+        };
+        this.breaches.set(fullBreach.id, fullBreach);
+        // Auto-notify if critical
+        if (fullBreach.severity === 'critical') {
+            await this.notifyAuthorities(fullBreach);
+        }
+        return fullBreach;
+    }
+    /**
+     * Notify authorities (required within 72 hours under GDPR)
+     */
+    async notifyAuthorities(breach) {
+        breach.reportedAt = new Date().toISOString();
+        breach.status = 'notified';
+        // In production, integrate with data protection authority API
+        logger.info('Breach reported to authorities', { breachId: breach.id });
+    }
+    /**
+     * Notify affected users
+     */
+    async notifyAffectedUsers(breachId, notifyFn) {
+        const breach = this.breaches.get(breachId);
+        if (!breach) {
+            throw new Error('Breach not found');
+        }
+        for (const userId of breach.affectedUsers) {
+            await notifyFn(userId, breach);
+        }
+    }
+    /**
+     * Check if breach notification is required
+     */
+    requiresNotification(breach) {
+        // Notification required for high risk breaches
+        return (breach.severity === 'high' ||
+            breach.severity === 'critical' ||
+            breach.dataCategories.includes('sensitive') ||
+            breach.dataCategories.includes('financial'));
+    }
+    /**
+     * Get breach
+     */
+    getBreach(id) {
+        return this.breaches.get(id);
+    }
+    /**
+     * Get all breaches
+     */
+    getAllBreaches() {
+        return Array.from(this.breaches.values());
+    }
+}
+/**
+ * Global instances
+ */
+export const consentManager = new ConsentManager();
+export const dataExportSystem = new DataExportSystem();
+export const dataDeletionSystem = new DataDeletionSystem();
+export const privacyPolicyManager = new PrivacyPolicyManager();
+export const cookieConsentManager = new CookieConsentManager();
+export const dataBreachManager = new DataBreachManager();

package/dist/security/headers.d.ts

@@ -0,0 +1,182 @@
+/**
+ * Security Headers and CORS Configuration
+ *
+ * HTTP security headers and CORS policy management
+ */
+export interface SecurityHeadersConfig {
+    contentSecurityPolicy?: string | ContentSecurityPolicyConfig;
+    strictTransportSecurity?: boolean | HSTSConfig;
+    xFrameOptions?: 'DENY' | 'SAMEORIGIN' | string;
+    xContentTypeOptions?: boolean;
+    referrerPolicy?: ReferrerPolicyValue;
+    permissionsPolicy?: string | PermissionsPolicyConfig;
+    crossOriginEmbedderPolicy?: 'require-corp' | 'credentialless';
+    crossOriginOpenerPolicy?: 'same-origin' | 'same-origin-allow-popups' | 'unsafe-none';
+    crossOriginResourcePolicy?: 'same-origin' | 'same-site' | 'cross-origin';
+}
+export interface ContentSecurityPolicyConfig {
+    defaultSrc?: string[];
+    scriptSrc?: string[];
+    styleSrc?: string[];
+    imgSrc?: string[];
+    fontSrc?: string[];
+    connectSrc?: string[];
+    frameSrc?: string[];
+    objectSrc?: string[];
+    mediaSrc?: string[];
+    workerSrc?: string[];
+    childSrc?: string[];
+    formAction?: string[];
+    frameAncestors?: string[];
+    baseUri?: string[];
+    manifestSrc?: string[];
+    upgradeInsecureRequests?: boolean;
+    blockAllMixedContent?: boolean;
+    reportUri?: string;
+    reportTo?: string;
+}
+export interface HSTSConfig {
+    maxAge: number;
+    includeSubDomains?: boolean;
+    preload?: boolean;
+}
+export type ReferrerPolicyValue = 'no-referrer' | 'no-referrer-when-downgrade' | 'origin' | 'origin-when-cross-origin' | 'same-origin' | 'strict-origin' | 'strict-origin-when-cross-origin' | 'unsafe-url';
+export interface PermissionsPolicyConfig {
+    accelerometer?: string[];
+    ambientLightSensor?: string[];
+    autoplay?: string[];
+    battery?: string[];
+    camera?: string[];
+    displayCapture?: string[];
+    documentDomain?: string[];
+    encryptedMedia?: string[];
+    fullscreen?: string[];
+    geolocation?: string[];
+    gyroscope?: string[];
+    magnetometer?: string[];
+    microphone?: string[];
+    midi?: string[];
+    payment?: string[];
+    pictureInPicture?: string[];
+    publicKeyCredentials?: string[];
+    screenWakeLock?: string[];
+    syncXhr?: string[];
+    usb?: string[];
+    webShare?: string[];
+    xrSpatialTracking?: string[];
+}
+export interface CORSConfig {
+    origin?: string | string[] | ((origin: string) => boolean);
+    methods?: string[];
+    allowedHeaders?: string[];
+    exposedHeaders?: string[];
+    credentials?: boolean;
+    maxAge?: number;
+    preflightContinue?: boolean;
+    optionsSuccessStatus?: number;
+}
+/**
+ * Security headers manager
+ */
+export declare class SecurityHeaders {
+    private config;
+    constructor(config?: SecurityHeadersConfig);
+    /**
+     * Get all security headers
+     */
+    getHeaders(): Record<string, string>;
+    /**
+     * Build Content Security Policy header
+     */
+    private buildCSP;
+    /**
+     * Build HSTS header
+     */
+    private buildHSTS;
+    /**
+     * Build Permissions-Policy header
+     */
+    private buildPermissionsPolicy;
+    /**
+     * Apply headers to response
+     */
+    applyHeaders(response: Response): Response;
+}
+/**
+ * CORS manager
+ */
+export declare class CORSManager {
+    private config;
+    constructor(config?: CORSConfig);
+    /**
+     * Check if origin is allowed
+     */
+    isOriginAllowed(origin: string): boolean;
+    /**
+     * Get CORS headers
+     */
+    getCORSHeaders(origin: string): Record<string, string>;
+    /**
+     * Get preflight headers
+     */
+    getPreflightHeaders(origin: string): Record<string, string>;
+    /**
+     * Handle CORS request
+     */
+    handleRequest(request: Request): Response | null;
+    /**
+     * Handle preflight request
+     */
+    handlePreflight(_request: Request, origin: string): Response;
+    /**
+     * Apply CORS headers to response
+     */
+    applyHeaders(response: Response, origin: string): Response;
+}
+/**
+ * Common security header presets
+ */
+export declare const SecurityPresets: {
+    /**
+     * Strict security (recommended for production)
+     */
+    strict: () => SecurityHeadersConfig;
+    /**
+     * Moderate security (balanced)
+     */
+    moderate: () => SecurityHeadersConfig;
+    /**
+     * Development (permissive)
+     */
+    development: () => SecurityHeadersConfig;
+};
+/**
+ * Common CORS presets
+ */
+export declare const CORSPresets: {
+    /**
+     * Strict CORS (same origin only)
+     */
+    strict: () => CORSConfig;
+    /**
+     * Moderate CORS (specific origins)
+     */
+    moderate: (allowedOrigins: string[]) => CORSConfig;
+    /**
+     * Permissive CORS (all origins)
+     */
+    permissive: () => CORSConfig;
+    /**
+     * API CORS (for public APIs)
+     */
+    api: () => CORSConfig;
+};
+/**
+ * Security middleware creator
+ */
+export declare function createSecurityMiddleware(securityConfig?: SecurityHeadersConfig, corsConfig?: CORSConfig): (request: Request, next: () => Promise<Response>) => Promise<Response>;
+/**
+ * Rate limiting headers
+ */
+export declare function setRateLimitHeaders(response: Response, limit: number, remaining: number, reset: number): void;
+//# sourceMappingURL=headers.d.ts.map

package/dist/security/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/security/headers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,qBAAqB;IACpC,qBAAqB,CAAC,EAAE,MAAM,GAAG,2BAA2B,CAAA;IAC5D,uBAAuB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;IAC9C,aAAa,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,MAAM,CAAA;IAC9C,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,cAAc,CAAC,EAAE,mBAAmB,CAAA;IACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,uBAAuB,CAAA;IACpD,yBAAyB,CAAC,EAAE,cAAc,GAAG,gBAAgB,CAAA;IAC7D,uBAAuB,CAAC,EAAE,aAAa,GAAG,0BAA0B,GAAG,aAAa,CAAA;IACpF,yBAAyB,CAAC,EAAE,aAAa,GAAG,WAAW,GAAG,cAAc,CAAA;CACzE;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,MAAM,mBAAmB,GAC3B,aAAa,GACb,4BAA4B,GAC5B,QAAQ,GACR,0BAA0B,GAC1B,aAAa,GACb,eAAe,GACf,iCAAiC,GACjC,YAAY,CAAA;AAEhB,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,CAAA;IAC1D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAuB;gBAEzB,MAAM,GAAE,qBAA0B;IAI9C;;OAEG;IACH,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAiDpC;;OAEG;IACH,OAAO,CAAC,QAAQ;IAgDhB;;OAEG;IACH,OAAO,CAAC,SAAS;IAuBjB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqB9B;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ;CAS3C;AAED;;GAEG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAsB;gBAExB,MAAM,GAAE,UAAe;IAanC;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAsBxC;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAqBtD;;OAEG;IACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAe3D;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI;IAehD;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ;IAa5D;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ;CAa3D;AAED;;GAEG;AACH,eAAO,MAAM,eAAe;IAC1B;;OAEG;kBACS,qBAAqB;IA4BjC;;OAEG;oBACW,qBAAqB;IAmBnC;;OAEG;uBACc,qBAAqB;CAIvC,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,WAAW;IACtB;;OAEG;kBACS,UAAU;IAQtB;;OAEG;+BACwB,MAAM,EAAE,KAAG,UAAU;IAShD;;OAEG;sBACa,UAAU;IAQ1B;;OAEG;eACM,UAAU;CAQpB,CAAA;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,cAAc,CAAC,EAAE,qBAAqB,EACtC,UAAU,CAAC,EAAE,UAAU,IAKT,SAAS,OAAO,EAAE,MAAM,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAG,OAAO,CAAC,QAAQ,CAAC,CAwBlF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,IAAI,CAIN"}