@skillsmith/core 0.1.0

package/dist/src/security/AuditLogger.js

@@ -0,0 +1,398 @@
+/**
+ * SMI-733: Audit Logging System
+ *
+ * Provides structured audit logging for security-relevant events.
+ * Stores audit trails in SQLite database for compliance and forensics.
+ *
+ * Schema defined in docs/security/index.md §3.2
+ */
+import { randomUUID } from 'crypto';
+import { createLogger } from '../utils/logger.js';
+const logger = createLogger('AuditLogger');
+/**
+ * Configuration options for AuditLogger
+ */
+/**
+ * Minimum retention period in days (security requirement)
+ */
+export const MIN_RETENTION_DAYS = 1;
+/**
+ * Maximum retention period in days (storage constraint)
+ */
+export const MAX_RETENTION_DAYS = 3650; // 10 years
+/**
+ * Audit Logger implementation with SQLite backend
+ *
+ * @example
+ * ```typescript
+ * const auditLogger = new AuditLogger(db)
+ *
+ * // Log URL fetch
+ * await auditLogger.log({
+ *   event_type: 'url_fetch',
+ *   actor: 'adapter',
+ *   resource: 'https://example.com/skill.yaml',
+ *   action: 'fetch',
+ *   result: 'success',
+ *   metadata: { status: 200, duration: 123 }
+ * })
+ *
+ * // Query audit trail
+ * const recentBlocks = await auditLogger.query({
+ *   result: 'blocked',
+ *   since: new Date(Date.now() - 24 * 60 * 60 * 1000)
+ * })
+ * ```
+ */
+export class AuditLogger {
+    db;
+    config;
+    stmts;
+    constructor(db, config = {}) {
+        this.db = db;
+        this.config = {
+            autoCleanup: config.autoCleanup ?? false,
+            retentionDays: config.retentionDays ?? 90,
+        };
+        this.ensureTableExists();
+        this.prepareStatements();
+        // Validate config retention days early
+        if (this.config.retentionDays !== undefined) {
+            if (this.config.retentionDays < MIN_RETENTION_DAYS ||
+                this.config.retentionDays > MAX_RETENTION_DAYS) {
+                throw new Error(`Invalid retentionDays config: must be between ${MIN_RETENTION_DAYS} and ${MAX_RETENTION_DAYS}, got ${this.config.retentionDays}`);
+            }
+        }
+        // Run auto-cleanup if enabled
+        if (this.config.autoCleanup) {
+            try {
+                const deleted = this.cleanupOldLogs(this.config.retentionDays);
+                if (deleted > 0) {
+                    logger.info('Auto-cleanup completed on initialization', {
+                        deleted,
+                        retentionDays: this.config.retentionDays,
+                    });
+                }
+            }
+            catch (err) {
+                // Log but don't throw - don't fail initialization due to cleanup issues
+                logger.error('Auto-cleanup failed on initialization', err, {
+                    retentionDays: this.config.retentionDays,
+                });
+            }
+        }
+    }
+    /**
+     * Prepare SQL statements for performance
+     */
+    prepareStatements() {
+        this.stmts = {
+            insert: this.db.prepare(`
+        INSERT INTO audit_logs (id, event_type, timestamp, actor, resource, action, result, metadata, created_at)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `),
+            query: this.db.prepare(`
+        SELECT * FROM audit_logs
+        WHERE 1=1
+          AND (? IS NULL OR event_type = ?)
+          AND (? IS NULL OR actor = ?)
+          AND (? IS NULL OR resource LIKE ?)
+          AND (? IS NULL OR result = ?)
+          AND (? IS NULL OR timestamp >= ?)
+          AND (? IS NULL OR timestamp <= ?)
+        ORDER BY timestamp DESC
+        LIMIT ? OFFSET ?
+      `),
+        };
+    }
+    /**
+     * Ensure the audit_logs table exists
+     */
+    ensureTableExists() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS audit_logs (
+        id TEXT PRIMARY KEY,
+        event_type TEXT NOT NULL,
+        timestamp TEXT NOT NULL DEFAULT (datetime('now')),
+        actor TEXT,
+        resource TEXT,
+        action TEXT,
+        result TEXT,
+        metadata TEXT,
+        created_at TEXT NOT NULL DEFAULT (datetime('now'))
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_audit_event_type ON audit_logs(event_type);
+      CREATE INDEX IF NOT EXISTS idx_audit_timestamp ON audit_logs(timestamp);
+      CREATE INDEX IF NOT EXISTS idx_audit_resource ON audit_logs(resource);
+      CREATE INDEX IF NOT EXISTS idx_audit_result ON audit_logs(result);
+      CREATE INDEX IF NOT EXISTS idx_audit_actor ON audit_logs(actor);
+    `);
+    }
+    /**
+     * Log an audit event
+     *
+     * @param entry - Audit log entry (id, timestamp, created_at are auto-generated)
+     */
+    log(entry) {
+        const id = randomUUID();
+        const timestamp = entry.timestamp || new Date().toISOString();
+        const created_at = new Date().toISOString();
+        const metadata = entry.metadata ? JSON.stringify(entry.metadata) : null;
+        try {
+            this.stmts.insert.run(id, entry.event_type, timestamp, entry.actor, entry.resource, entry.action, entry.result, metadata, created_at);
+            logger.debug('Audit log entry created', {
+                id,
+                event_type: entry.event_type,
+                resource: entry.resource,
+            });
+        }
+        catch (err) {
+            logger.error('Failed to write audit log', err, { entry });
+            throw err;
+        }
+    }
+    /**
+     * Query audit logs with filters
+     *
+     * @param filter - Query filters
+     * @returns Array of matching audit log entries
+     */
+    query(filter = {}) {
+        const { event_type, actor, resource, result, since, until, limit = 100, offset = 0 } = filter;
+        const resourcePattern = resource ? `%${resource}%` : null;
+        const sinceIso = since?.toISOString() || null;
+        const untilIso = until?.toISOString() || null;
+        try {
+            const rows = this.stmts.query.all(event_type || null, event_type || null, actor || null, actor || null, resourcePattern, resourcePattern, result || null, result || null, sinceIso, sinceIso, untilIso, untilIso, limit, offset);
+            return rows.map((row) => ({
+                ...row,
+                metadata: row.metadata ? JSON.parse(row.metadata) : undefined,
+            }));
+        }
+        catch (err) {
+            logger.error('Failed to query audit logs', err, { filter });
+            throw err;
+        }
+    }
+    /**
+     * Get audit statistics
+     *
+     * @returns Statistics about audit log entries
+     */
+    getStats() {
+        try {
+            // Total events
+            const totalResult = this.db.prepare('SELECT COUNT(*) as count FROM audit_logs').get();
+            // Events by type
+            const typeResults = this.db
+                .prepare(`SELECT event_type, COUNT(*) as count FROM audit_logs GROUP BY event_type`)
+                .all();
+            const events_by_type = typeResults.reduce((acc, row) => {
+                acc[row.event_type] = row.count;
+                return acc;
+            }, {});
+            // Events by result
+            const resultResults = this.db
+                .prepare(`SELECT result, COUNT(*) as count FROM audit_logs GROUP BY result`)
+                .all();
+            const events_by_result = resultResults.reduce((acc, row) => {
+                acc[row.result] = row.count;
+                return acc;
+            }, {});
+            // Blocked events
+            const blockedResult = this.db
+                .prepare(`SELECT COUNT(*) as count FROM audit_logs WHERE result = 'blocked'`)
+                .get();
+            // Error events
+            const errorResult = this.db
+                .prepare(`SELECT COUNT(*) as count FROM audit_logs WHERE result = 'error'`)
+                .get();
+            // Oldest and newest events
+            const rangeResult = this.db
+                .prepare(`SELECT MIN(timestamp) as oldest, MAX(timestamp) as newest FROM audit_logs`)
+                .get();
+            return {
+                total_events: totalResult.count,
+                events_by_type,
+                events_by_result,
+                blocked_events: blockedResult.count,
+                error_events: errorResult.count,
+                oldest_event: rangeResult.oldest,
+                newest_event: rangeResult.newest,
+            };
+        }
+        catch (err) {
+            logger.error('Failed to get audit stats', err);
+            throw err;
+        }
+    }
+    /**
+     * Clean up old audit logs (internal implementation)
+     *
+     * @param olderThan - Delete logs older than this date
+     * @param skipMetaLog - Skip meta-logging (used internally to prevent recursion)
+     * @returns Number of deleted entries
+     */
+    cleanupInternal(olderThan, skipMetaLog = false) {
+        const olderThanIso = olderThan.toISOString();
+        try {
+            const result = this.db.prepare(`DELETE FROM audit_logs WHERE timestamp < ?`).run(olderThanIso);
+            logger.info('Audit logs cleaned up', {
+                deleted: result.changes,
+                olderThan: olderThanIso,
+            });
+            // Meta-log the cleanup operation (unless skipped to prevent recursion)
+            if (!skipMetaLog && result.changes > 0) {
+                try {
+                    this.log({
+                        event_type: 'config_change',
+                        actor: 'system',
+                        resource: 'audit_logs',
+                        action: 'cleanup_internal',
+                        result: 'success',
+                        metadata: {
+                            cutoffDate: olderThanIso,
+                            deletedCount: result.changes,
+                        },
+                    });
+                }
+                catch {
+                    // Meta-logging failure should not affect cleanup result
+                    logger.warn('Failed to meta-log cleanup operation');
+                }
+            }
+            return result.changes;
+        }
+        catch (err) {
+            logger.error('Failed to cleanup audit logs', err, {
+                olderThan: olderThan.toISOString(),
+            });
+            throw err;
+        }
+    }
+    /**
+     * Clean up old audit logs
+     *
+     * @deprecated Use cleanupOldLogs() instead for validated retention-based cleanup
+     * @param olderThan - Delete logs older than this date
+     * @returns Number of deleted entries
+     */
+    cleanup(olderThan) {
+        return this.cleanupInternal(olderThan);
+    }
+    /**
+     * Validate retention days parameter
+     *
+     * @param retentionDays - Number of days to validate
+     * @throws Error if retentionDays is invalid
+     */
+    validateRetentionDays(retentionDays) {
+        if (!Number.isFinite(retentionDays)) {
+            throw new Error(`Invalid retention days: must be a finite number, got ${retentionDays}`);
+        }
+        if (!Number.isInteger(retentionDays)) {
+            throw new Error(`Invalid retention days: must be an integer, got ${retentionDays}`);
+        }
+        if (retentionDays < MIN_RETENTION_DAYS) {
+            throw new Error(`Invalid retention days: minimum is ${MIN_RETENTION_DAYS} day(s), got ${retentionDays}`);
+        }
+        if (retentionDays > MAX_RETENTION_DAYS) {
+            throw new Error(`Invalid retention days: maximum is ${MAX_RETENTION_DAYS} days, got ${retentionDays}`);
+        }
+    }
+    /**
+     * Clean up old audit logs based on retention policy
+     *
+     * SMI-1012: Audit log retention policy with input validation
+     *
+     * @param retentionDays - Number of days to retain logs (default: 90, min: 1, max: 3650)
+     * @returns Number of deleted rows
+     * @throws Error if retentionDays is invalid (< 1, > 3650, or non-integer)
+     *
+     * @example
+     * ```typescript
+     * // Delete logs older than 90 days (default)
+     * const deleted = auditLogger.cleanupOldLogs()
+     *
+     * // Delete logs older than 30 days
+     * const deleted = auditLogger.cleanupOldLogs(30)
+     *
+     * // These will throw errors:
+     * auditLogger.cleanupOldLogs(0)  // Error: minimum is 1 day
+     * auditLogger.cleanupOldLogs(-5) // Error: minimum is 1 day
+     * ```
+     */
+    cleanupOldLogs(retentionDays = 90) {
+        // Validate input to prevent accidental data loss
+        this.validateRetentionDays(retentionDays);
+        const cutoffDate = new Date(Date.now() - retentionDays * 24 * 60 * 60 * 1000);
+        const originalError = null;
+        try {
+            // Use internal cleanup to skip double meta-logging
+            const deleted = this.cleanupInternal(cutoffDate, true);
+            // Meta-logging: Log the cleanup operation using the audit logger itself
+            try {
+                this.log({
+                    event_type: 'config_change',
+                    actor: 'system',
+                    resource: 'audit_logs',
+                    action: 'cleanup',
+                    result: 'success',
+                    metadata: {
+                        retentionDays,
+                        cutoffDate: cutoffDate.toISOString(),
+                        deletedCount: deleted,
+                    },
+                });
+            }
+            catch (metaLogErr) {
+                // Meta-logging failure should not affect cleanup result
+                logger.warn('Failed to meta-log successful cleanup', {
+                    error: metaLogErr.message,
+                    deleted,
+                });
+            }
+            return deleted;
+        }
+        catch (err) {
+            // Store original error before attempting meta-logging
+            const cleanupError = err;
+            // Try to log failed cleanup attempt (best effort)
+            try {
+                this.log({
+                    event_type: 'config_change',
+                    actor: 'system',
+                    resource: 'audit_logs',
+                    action: 'cleanup',
+                    result: 'error',
+                    metadata: {
+                        retentionDays,
+                        cutoffDate: cutoffDate.toISOString(),
+                        error: cleanupError.message,
+                    },
+                });
+            }
+            catch (metaLogErr) {
+                // Log meta-logging failure but preserve original error
+                logger.warn('Failed to meta-log cleanup error', {
+                    originalError: cleanupError.message,
+                    metaLogError: metaLogErr.message,
+                });
+            }
+            // Always throw the original cleanup error
+            throw cleanupError;
+        }
+    }
+    /**
+     * Export audit logs to JSON
+     *
+     * @param filter - Query filters
+     * @returns JSON string of audit logs
+     */
+    export(filter = {}) {
+        const logs = this.query({ ...filter, limit: filter.limit || 10000 });
+        return JSON.stringify(logs, null, 2);
+    }
+}
+//# sourceMappingURL=AuditLogger.js.map

package/dist/src/security/AuditLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditLogger.js","sourceRoot":"","sources":["../../../src/security/AuditLogger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjD,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;AAqE1C;;GAEG;AACH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAA;AAEnC;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAA,CAAC,WAAW;AA8BlD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,WAAW;IACd,EAAE,CAAc;IAChB,MAAM,CAAmB;IACzB,KAAK,CAGZ;IAED,YAAY,EAAgB,EAAE,SAA4B,EAAE;QAC1D,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC,MAAM,GAAG;YACZ,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,KAAK;YACxC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;SAC1C,CAAA;QACD,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxB,IAAI,CAAC,iBAAiB,EAAE,CAAA;QAExB,uCAAuC;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC5C,IACE,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,kBAAkB;gBAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,kBAAkB,EAC9C,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,iDAAiD,kBAAkB,QAAQ,kBAAkB,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAClI,CAAA;YACH,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,aAAc,CAAC,CAAA;gBAC/D,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;wBACtD,OAAO;wBACP,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;qBACzC,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,wEAAwE;gBACxE,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAY,EAAE;oBAClE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;iBACzC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,KAAK,GAAG;YACX,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;OAGvB,CAAwC;YAEzC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;OAWtB,CAAuC;SACzC,CAAA;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;KAkBZ,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACH,GAAG,CACD,KAEC;QAED,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;QACvB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC7D,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAEvE,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CACnB,EAAE,EACF,KAAK,CAAC,UAAU,EAChB,SAAS,EACT,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,MAAM,EACZ,QAAQ,EACR,UAAU,CACX,CAAA;YAED,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACtC,EAAE;gBACF,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAY,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;YAClE,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAA2B,EAAE;QACjC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,GAAG,EAAE,MAAM,GAAG,CAAC,EAAE,GAAG,MAAM,CAAA;QAE7F,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QACzD,MAAM,QAAQ,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,CAAA;QAC7C,MAAM,QAAQ,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,CAAA;QAE7C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAC/B,UAAU,IAAI,IAAI,EAClB,UAAU,IAAI,IAAI,EAClB,KAAK,IAAI,IAAI,EACb,KAAK,IAAI,IAAI,EACb,eAAe,EACf,eAAe,EACf,MAAM,IAAI,IAAI,EACd,MAAM,IAAI,IAAI,EACd,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,KAAK,EACL,MAAM,CACP,CAAA;YAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,GAAG,GAAG;gBACN,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;aAC9D,CAAC,CAAC,CAAA;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAY,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YACpE,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,IAAI,CAAC;YACH,eAAe;YACf,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,EAElF,CAAA;YAED,iBAAiB;YACjB,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;iBACxB,OAAO,CAAC,0EAA0E,CAAC;iBACnF,GAAG,EAA0D,CAAA;YAEhE,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CACvC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACX,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,KAAK,CAAA;gBAC/B,OAAO,GAAG,CAAA;YACZ,CAAC,EACD,EAAoC,CACrC,CAAA;YAED,mBAAmB;YACnB,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE;iBAC1B,OAAO,CAAC,kEAAkE,CAAC;iBAC3E,GAAG,EAAmD,CAAA;YAEzD,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAC3C,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACX,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAA;gBAC3B,OAAO,GAAG,CAAA;YACZ,CAAC,EACD,EAAiC,CAClC,CAAA;YAED,iBAAiB;YACjB,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE;iBAC1B,OAAO,CAAC,mEAAmE,CAAC;iBAC5E,GAAG,EAAuB,CAAA;YAE7B,eAAe;YACf,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;iBACxB,OAAO,CAAC,iEAAiE,CAAC;iBAC1E,GAAG,EAAuB,CAAA;YAE7B,2BAA2B;YAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;iBACxB,OAAO,CAAC,2EAA2E,CAAC;iBACpF,GAAG,EAAsD,CAAA;YAE5D,OAAO;gBACL,YAAY,EAAE,WAAW,CAAC,KAAK;gBAC/B,cAAc;gBACd,gBAAgB;gBAChB,cAAc,EAAE,aAAa,CAAC,KAAK;gBACnC,YAAY,EAAE,WAAW,CAAC,KAAK;gBAC/B,YAAY,EAAE,WAAW,CAAC,MAAM;gBAChC,YAAY,EAAE,WAAW,CAAC,MAAM;aACjC,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAY,CAAC,CAAA;YACvD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,eAAe,CAAC,SAAe,EAAE,WAAW,GAAG,KAAK;QAC1D,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,EAAE,CAAA;QAE5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;YAE9F,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACnC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,YAAY;aACxB,CAAC,CAAA;YAEF,uEAAuE;YACvE,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC;oBACH,IAAI,CAAC,GAAG,CAAC;wBACP,UAAU,EAAE,eAAe;wBAC3B,KAAK,EAAE,QAAQ;wBACf,QAAQ,EAAE,YAAY;wBACtB,MAAM,EAAE,kBAAkB;wBAC1B,MAAM,EAAE,SAAS;wBACjB,QAAQ,EAAE;4BACR,UAAU,EAAE,YAAY;4BACxB,YAAY,EAAE,MAAM,CAAC,OAAO;yBAC7B;qBACF,CAAC,CAAA;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,wDAAwD;oBACxD,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;gBACrD,CAAC;YACH,CAAC;YAED,OAAO,MAAM,CAAC,OAAO,CAAA;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAY,EAAE;gBACzD,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;aACnC,CAAC,CAAA;YACF,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,SAAe;QACrB,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,aAAqB;QACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,wDAAwD,aAAa,EAAE,CAAC,CAAA;QAC1F,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,mDAAmD,aAAa,EAAE,CAAC,CAAA;QACrF,CAAC;QACD,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,sCAAsC,kBAAkB,gBAAgB,aAAa,EAAE,CACxF,CAAA;QACH,CAAC;QACD,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,sCAAsC,kBAAkB,cAAc,aAAa,EAAE,CACtF,CAAA;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,cAAc,CAAC,gBAAwB,EAAE;QACvC,iDAAiD;QACjD,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAA;QAEzC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QAC7E,MAAM,aAAa,GAAiB,IAAI,CAAA;QAExC,IAAI,CAAC;YACH,mDAAmD;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YAEtD,wEAAwE;YACxE,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC;oBACP,UAAU,EAAE,eAAe;oBAC3B,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE;wBACR,aAAa;wBACb,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE;wBACpC,YAAY,EAAE,OAAO;qBACtB;iBACF,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,wDAAwD;gBACxD,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACnD,KAAK,EAAG,UAAoB,CAAC,OAAO;oBACpC,OAAO;iBACR,CAAC,CAAA;YACJ,CAAC;YAED,OAAO,OAAO,CAAA;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sDAAsD;YACtD,MAAM,YAAY,GAAG,GAAY,CAAA;YAEjC,kDAAkD;YAClD,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC;oBACP,UAAU,EAAE,eAAe;oBAC3B,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE;wBACR,aAAa;wBACb,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE;wBACpC,KAAK,EAAE,YAAY,CAAC,OAAO;qBAC5B;iBACF,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,uDAAuD;gBACvD,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;oBAC9C,aAAa,EAAE,YAAY,CAAC,OAAO;oBACnC,YAAY,EAAG,UAAoB,CAAC,OAAO;iBAC5C,CAAC,CAAA;YACJ,CAAC;YAED,0CAA0C;YAC1C,MAAM,YAAY,CAAA;QACpB,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,SAA2B,EAAE;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAA;QACpE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACtC,CAAC;CACF"}