@vorionsys/atsf-core 0.1.0 → 0.2.1

package/dist/audit/key-manager.js

@@ -0,0 +1,565 @@
+/**
+ * Key Manager - Secure Key Management for Audit Signing
+ *
+ * Provides secure key generation, storage, loading, and rotation
+ * for Ed25519 cryptographic signing of audit records.
+ *
+ * Supports multiple storage backends:
+ * - Memory (development/testing)
+ * - File (with optional encryption)
+ * - Environment variables
+ * - HSM (Hardware Security Module) - interface only
+ *
+ * @packageDocumentation
+ */
+import { createLogger } from '../common/logger.js';
+const logger = createLogger({ component: 'key-manager' });
+/**
+ * Generate a new Ed25519 key pair using jose library
+ * Note: This uses the jose library which is available in AgentAnchor
+ */
+export async function generateKeyPair(keyId) {
+    // Dynamic import of jose to allow this module to work standalone
+    const jose = await import('jose');
+    const { publicKey, privateKey } = await jose.generateKeyPair('EdDSA', {
+        crv: 'Ed25519',
+        extractable: true, // Required to export keys as JWK
+    });
+    // Export keys to JWK format, then to base64
+    const publicJwk = await jose.exportJWK(publicKey);
+    const privateJwk = await jose.exportJWK(privateKey);
+    const now = new Date().toISOString();
+    const generatedKeyId = keyId ?? `key-${crypto.randomUUID()}`;
+    return {
+        keyId: generatedKeyId,
+        publicKey: Buffer.from(JSON.stringify(publicJwk)).toString('base64'),
+        privateKey: Buffer.from(JSON.stringify(privateJwk)).toString('base64'),
+        algorithm: 'Ed25519',
+        createdAt: now,
+        rotationSequence: 0,
+        active: true,
+    };
+}
+/**
+ * Extract public key info from a key pair
+ */
+export function extractPublicKeyInfo(keyPair) {
+    return {
+        keyId: keyPair.keyId,
+        publicKey: keyPair.publicKey,
+        algorithm: keyPair.algorithm,
+        createdAt: keyPair.createdAt,
+        expiresAt: keyPair.expiresAt,
+        rotationSequence: keyPair.rotationSequence,
+    };
+}
+/**
+ * Key Manager for secure key operations
+ */
+export class KeyManager {
+    keys = new Map();
+    activeKeyId = null;
+    config;
+    hsmProvider = null;
+    constructor(config = { type: 'memory' }) {
+        this.config = config;
+        if (config.hsmProvider) {
+            this.hsmProvider = config.hsmProvider;
+        }
+    }
+    /**
+     * Initialize the key manager
+     */
+    async initialize() {
+        switch (this.config.type) {
+            case 'memory':
+                // Nothing to load for memory storage
+                logger.info('Key manager initialized with memory storage');
+                break;
+            case 'file':
+                await this.loadFromFile();
+                break;
+            case 'env':
+                await this.loadFromEnv();
+                break;
+            case 'hsm':
+                await this.initializeHSM();
+                break;
+            default:
+                throw new Error(`Unknown storage type: ${this.config.type}`);
+        }
+    }
+    /**
+     * Generate and store a new key pair
+     */
+    async generateKey(keyId) {
+        if (this.config.type === 'hsm' && this.hsmProvider) {
+            return this.generateKeyInHSM(keyId);
+        }
+        const keyPair = await generateKeyPair(keyId);
+        await this.storeKey(keyPair);
+        if (!this.activeKeyId) {
+            this.activeKeyId = keyPair.keyId;
+        }
+        logger.info({ keyId: keyPair.keyId }, 'Generated new key pair');
+        return keyPair;
+    }
+    /**
+     * Store a key pair
+     */
+    async storeKey(keyPair) {
+        this.keys.set(keyPair.keyId, keyPair);
+        switch (this.config.type) {
+            case 'file':
+                await this.saveToFile();
+                break;
+            // env storage is read-only
+            // hsm storage is handled separately
+        }
+        logger.debug({ keyId: keyPair.keyId }, 'Key stored');
+    }
+    /**
+     * Get a key pair by ID
+     */
+    async getKey(keyId) {
+        if (this.config.type === 'hsm' && this.hsmProvider) {
+            // HSM keys don't expose private keys, so we return null
+            // Use sign/verify methods directly with HSM
+            return null;
+        }
+        return this.keys.get(keyId) ?? null;
+    }
+    /**
+     * Get public key info by ID
+     */
+    async getPublicKey(keyId) {
+        if (this.config.type === 'hsm' && this.hsmProvider) {
+            return this.hsmProvider.getPublicKey(keyId);
+        }
+        const keyPair = this.keys.get(keyId);
+        if (!keyPair)
+            return null;
+        return extractPublicKeyInfo(keyPair);
+    }
+    /**
+     * Get the active key pair
+     */
+    async getActiveKey() {
+        if (!this.activeKeyId)
+            return null;
+        return this.getKey(this.activeKeyId);
+    }
+    /**
+     * Get the active key ID
+     */
+    getActiveKeyId() {
+        return this.activeKeyId;
+    }
+    /**
+     * Set the active key
+     */
+    setActiveKey(keyId) {
+        if (!this.keys.has(keyId)) {
+            throw new Error(`Key not found: ${keyId}`);
+        }
+        this.activeKeyId = keyId;
+        logger.info({ keyId }, 'Active key changed');
+    }
+    /**
+     * Rotate keys - generate new key and deactivate old
+     */
+    async rotateKey(request) {
+        const previousKeyId = this.activeKeyId;
+        if (!previousKeyId) {
+            return {
+                success: false,
+                chainId: request.chainId,
+                previousKeyId: '',
+                newKeyId: '',
+                rotationSequence: 0,
+                rotatedAt: new Date().toISOString(),
+                issues: ['No active key to rotate'],
+            };
+        }
+        const previousKey = await this.getKey(previousKeyId);
+        const previousSequence = previousKey?.rotationSequence ?? 0;
+        // Generate or use provided new key
+        let newKeyPair;
+        if (request.newKeyPair) {
+            newKeyPair = {
+                ...request.newKeyPair,
+                rotationSequence: previousSequence + 1,
+                active: true,
+            };
+        }
+        else {
+            newKeyPair = await generateKeyPair();
+            newKeyPair.rotationSequence = previousSequence + 1;
+        }
+        // Deactivate old key
+        if (previousKey) {
+            previousKey.active = false;
+            await this.storeKey(previousKey);
+        }
+        // Store and activate new key
+        await this.storeKey(newKeyPair);
+        this.activeKeyId = newKeyPair.keyId;
+        logger.info({
+            previousKeyId,
+            newKeyId: newKeyPair.keyId,
+            rotationSequence: newKeyPair.rotationSequence,
+            reason: request.reason,
+        }, 'Key rotated');
+        return {
+            success: true,
+            chainId: request.chainId,
+            previousKeyId,
+            newKeyId: newKeyPair.keyId,
+            rotationSequence: newKeyPair.rotationSequence,
+            rotatedAt: new Date().toISOString(),
+        };
+    }
+    /**
+     * List all key IDs
+     */
+    async listKeys() {
+        if (this.config.type === 'hsm' && this.hsmProvider) {
+            return this.hsmProvider.listKeys();
+        }
+        return Array.from(this.keys.keys());
+    }
+    /**
+     * List all public keys
+     */
+    async listPublicKeys() {
+        const keyIds = await this.listKeys();
+        const publicKeys = [];
+        for (const keyId of keyIds) {
+            const pubKey = await this.getPublicKey(keyId);
+            if (pubKey) {
+                publicKeys.push(pubKey);
+            }
+        }
+        return publicKeys;
+    }
+    /**
+     * Delete a key
+     */
+    async deleteKey(keyId) {
+        if (this.config.type === 'hsm' && this.hsmProvider) {
+            return this.hsmProvider.deleteKey(keyId);
+        }
+        const deleted = this.keys.delete(keyId);
+        if (deleted && this.activeKeyId === keyId) {
+            this.activeKeyId = null;
+        }
+        if (this.config.type === 'file') {
+            await this.saveToFile();
+        }
+        logger.info({ keyId, deleted }, 'Key deletion attempted');
+        return deleted;
+    }
+    /**
+     * Check if a key exists
+     */
+    async hasKey(keyId) {
+        if (this.config.type === 'hsm' && this.hsmProvider) {
+            const keys = await this.hsmProvider.listKeys();
+            return keys.includes(keyId);
+        }
+        return this.keys.has(keyId);
+    }
+    /**
+     * Sign data with the active key (or specified key)
+     */
+    async sign(data, keyId) {
+        const targetKeyId = keyId ?? this.activeKeyId;
+        if (!targetKeyId) {
+            throw new Error('No key available for signing');
+        }
+        if (this.config.type === 'hsm' && this.hsmProvider) {
+            return this.hsmProvider.sign(targetKeyId, data);
+        }
+        const keyPair = await this.getKey(targetKeyId);
+        if (!keyPair) {
+            throw new Error(`Key not found: ${targetKeyId}`);
+        }
+        const jose = await import('jose');
+        const privateJwk = JSON.parse(Buffer.from(keyPair.privateKey, 'base64').toString());
+        const privateKey = await jose.importJWK(privateJwk, 'EdDSA');
+        // Create a compact JWS
+        const jws = await new jose.CompactSign(data)
+            .setProtectedHeader({ alg: 'EdDSA' })
+            .sign(privateKey);
+        // Extract just the signature part
+        const parts = jws.split('.');
+        const signature = parts[2];
+        return Buffer.from(signature, 'base64url');
+    }
+    /**
+     * Verify a signature
+     */
+    async verify(data, signature, keyId) {
+        if (this.config.type === 'hsm' && this.hsmProvider) {
+            return this.hsmProvider.verify(keyId, data, signature);
+        }
+        const keyPair = await this.getKey(keyId);
+        if (!keyPair) {
+            throw new Error(`Key not found: ${keyId}`);
+        }
+        try {
+            const jose = await import('jose');
+            const publicJwk = JSON.parse(Buffer.from(keyPair.publicKey, 'base64').toString());
+            const publicKey = await jose.importJWK(publicJwk, 'EdDSA');
+            // Reconstruct the JWS for verification
+            const header = Buffer.from(JSON.stringify({ alg: 'EdDSA' })).toString('base64url');
+            const payload = Buffer.from(data).toString('base64url');
+            const sig = Buffer.from(signature).toString('base64url');
+            const jws = `${header}.${payload}.${sig}`;
+            await jose.compactVerify(jws, publicKey);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Get storage configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+    /**
+     * Check if using HSM
+     */
+    isUsingHSM() {
+        return this.config.type === 'hsm' && this.hsmProvider !== null;
+    }
+    // Private methods for file storage
+    async loadFromFile() {
+        if (!this.config.filePath) {
+            throw new Error('File path not configured');
+        }
+        try {
+            const fs = await import('node:fs/promises');
+            const exists = await fs.access(this.config.filePath).then(() => true).catch(() => false);
+            if (!exists) {
+                logger.info({ filePath: this.config.filePath }, 'Key file does not exist, starting fresh');
+                return;
+            }
+            let content = await fs.readFile(this.config.filePath, 'utf-8');
+            // Decrypt if encryption is enabled
+            if (this.config.encryptAtRest && this.config.encryptionKey) {
+                content = await this.decrypt(content);
+            }
+            const data = JSON.parse(content);
+            this.activeKeyId = data.activeKeyId;
+            for (const key of data.keys) {
+                this.keys.set(key.keyId, key);
+            }
+            logger.info({ filePath: this.config.filePath, keyCount: this.keys.size }, 'Keys loaded from file');
+        }
+        catch (error) {
+            logger.error({ error, filePath: this.config.filePath }, 'Failed to load keys from file');
+            throw error;
+        }
+    }
+    async saveToFile() {
+        if (!this.config.filePath) {
+            throw new Error('File path not configured');
+        }
+        try {
+            const fs = await import('node:fs/promises');
+            const path = await import('node:path');
+            const data = {
+                activeKeyId: this.activeKeyId,
+                keys: Array.from(this.keys.values()),
+            };
+            let content = JSON.stringify(data, null, 2);
+            // Encrypt if encryption is enabled
+            if (this.config.encryptAtRest && this.config.encryptionKey) {
+                content = await this.encrypt(content);
+            }
+            // Ensure directory exists
+            const dir = path.dirname(this.config.filePath);
+            await fs.mkdir(dir, { recursive: true });
+            await fs.writeFile(this.config.filePath, content, 'utf-8');
+            logger.debug({ filePath: this.config.filePath }, 'Keys saved to file');
+        }
+        catch (error) {
+            logger.error({ error, filePath: this.config.filePath }, 'Failed to save keys to file');
+            throw error;
+        }
+    }
+    async loadFromEnv() {
+        const prefix = this.config.envPrefix ?? 'AUDIT_KEY';
+        // Look for AUDIT_KEY_PRIVATE and AUDIT_KEY_PUBLIC
+        const privateKeyEnv = process.env[`${prefix}_PRIVATE`];
+        const publicKeyEnv = process.env[`${prefix}_PUBLIC`];
+        const keyIdEnv = process.env[`${prefix}_ID`] ?? 'env-key';
+        if (privateKeyEnv && publicKeyEnv) {
+            const keyPair = {
+                keyId: keyIdEnv,
+                publicKey: publicKeyEnv,
+                privateKey: privateKeyEnv,
+                algorithm: 'Ed25519',
+                createdAt: new Date().toISOString(),
+                rotationSequence: 0,
+                active: true,
+            };
+            this.keys.set(keyPair.keyId, keyPair);
+            this.activeKeyId = keyPair.keyId;
+            logger.info({ keyId: keyPair.keyId }, 'Key loaded from environment');
+        }
+        else {
+            logger.warn({ prefix }, 'No keys found in environment variables');
+        }
+    }
+    async initializeHSM() {
+        if (!this.hsmProvider) {
+            throw new Error('HSM provider not configured');
+        }
+        const connected = await this.hsmProvider.isConnected();
+        if (!connected) {
+            throw new Error('HSM is not connected');
+        }
+        const keys = await this.hsmProvider.listKeys();
+        if (keys.length > 0) {
+            this.activeKeyId = keys[0] ?? null;
+        }
+        logger.info({ provider: this.hsmProvider.name, keyCount: keys.length }, 'HSM initialized');
+    }
+    async generateKeyInHSM(keyId) {
+        if (!this.hsmProvider) {
+            throw new Error('HSM provider not configured');
+        }
+        const generatedKeyId = keyId ?? `hsm-key-${crypto.randomUUID()}`;
+        const publicKeyInfo = await this.hsmProvider.generateKeyPair(generatedKeyId);
+        // For HSM, we don't have direct access to private key
+        const keyPair = {
+            keyId: publicKeyInfo.keyId,
+            publicKey: publicKeyInfo.publicKey,
+            privateKey: '', // HSM-managed, not exposed
+            algorithm: 'Ed25519',
+            createdAt: publicKeyInfo.createdAt,
+            expiresAt: publicKeyInfo.expiresAt,
+            rotationSequence: publicKeyInfo.rotationSequence,
+            active: true,
+        };
+        if (!this.activeKeyId) {
+            this.activeKeyId = keyPair.keyId;
+        }
+        logger.info({ keyId: keyPair.keyId }, 'Generated key in HSM');
+        return keyPair;
+    }
+    // Simple encryption/decryption for file storage (uses AES-256-GCM)
+    async encrypt(data) {
+        if (!this.config.encryptionKey) {
+            throw new Error('Encryption key not configured');
+        }
+        // Derive a key from the encryption key
+        const keyMaterial = new TextEncoder().encode(this.config.encryptionKey);
+        const hashBuffer = await crypto.subtle.digest('SHA-256', keyMaterial);
+        const key = await crypto.subtle.importKey('raw', hashBuffer, { name: 'AES-GCM' }, false, ['encrypt']);
+        const iv = crypto.getRandomValues(new Uint8Array(12));
+        const encrypted = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, key, new TextEncoder().encode(data));
+        // Combine IV and ciphertext
+        const combined = new Uint8Array(iv.length + encrypted.byteLength);
+        combined.set(iv);
+        combined.set(new Uint8Array(encrypted), iv.length);
+        return Buffer.from(combined).toString('base64');
+    }
+    async decrypt(data) {
+        if (!this.config.encryptionKey) {
+            throw new Error('Encryption key not configured');
+        }
+        // Derive a key from the encryption key
+        const keyMaterial = new TextEncoder().encode(this.config.encryptionKey);
+        const hashBuffer = await crypto.subtle.digest('SHA-256', keyMaterial);
+        const key = await crypto.subtle.importKey('raw', hashBuffer, { name: 'AES-GCM' }, false, ['decrypt']);
+        const combined = Buffer.from(data, 'base64');
+        const iv = combined.slice(0, 12);
+        const ciphertext = combined.slice(12);
+        const decrypted = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, key, ciphertext);
+        return new TextDecoder().decode(decrypted);
+    }
+}
+/**
+ * Create a new key manager instance
+ */
+export function createKeyManager(config) {
+    return new KeyManager(config);
+}
+/**
+ * Create a mock HSM provider for testing
+ */
+export function createMockHSMProvider() {
+    const keys = new Map();
+    return {
+        name: 'MockHSM',
+        async isConnected() {
+            return true;
+        },
+        async generateKeyPair(keyId) {
+            const keyPair = await generateKeyPair(keyId);
+            keys.set(keyId, {
+                public: keyPair.publicKey,
+                private: keyPair.privateKey,
+            });
+            return extractPublicKeyInfo(keyPair);
+        },
+        async sign(keyId, data) {
+            const keyData = keys.get(keyId);
+            if (!keyData) {
+                throw new Error(`Key not found in HSM: ${keyId}`);
+            }
+            const jose = await import('jose');
+            const privateJwk = JSON.parse(Buffer.from(keyData.private, 'base64').toString());
+            const privateKey = await jose.importJWK(privateJwk, 'EdDSA');
+            const jws = await new jose.CompactSign(data)
+                .setProtectedHeader({ alg: 'EdDSA' })
+                .sign(privateKey);
+            const parts = jws.split('.');
+            return Buffer.from(parts[2], 'base64url');
+        },
+        async verify(keyId, data, signature) {
+            const keyData = keys.get(keyId);
+            if (!keyData) {
+                throw new Error(`Key not found in HSM: ${keyId}`);
+            }
+            try {
+                const jose = await import('jose');
+                const publicJwk = JSON.parse(Buffer.from(keyData.public, 'base64').toString());
+                const publicKey = await jose.importJWK(publicJwk, 'EdDSA');
+                const header = Buffer.from(JSON.stringify({ alg: 'EdDSA' })).toString('base64url');
+                const payload = Buffer.from(data).toString('base64url');
+                const sig = Buffer.from(signature).toString('base64url');
+                const jws = `${header}.${payload}.${sig}`;
+                await jose.compactVerify(jws, publicKey);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        },
+        async getPublicKey(keyId) {
+            const keyData = keys.get(keyId);
+            if (!keyData)
+                return null;
+            return {
+                keyId,
+                publicKey: keyData.public,
+                algorithm: 'Ed25519',
+                createdAt: new Date().toISOString(),
+                rotationSequence: 0,
+            };
+        },
+        async deleteKey(keyId) {
+            return keys.delete(keyId);
+        },
+        async listKeys() {
+            return Array.from(keys.keys());
+        },
+    };
+}
+//# sourceMappingURL=key-manager.js.map

package/dist/audit/key-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-manager.js","sourceRoot":"","sources":["../../src/audit/key-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAUnD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;AAE1D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAc;IAClD,iEAAiE;IACjE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAElC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE;QACpE,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,IAAI,EAAE,iCAAiC;KACrD,CAAC,CAAC;IAEH,4CAA4C;IAC5C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAEpD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,cAAc,GAAG,KAAK,IAAI,OAAO,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IAE7D,OAAO;QACL,KAAK,EAAE,cAAc;QACrB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtE,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,GAAG;QACd,gBAAgB,EAAE,CAAC;QACnB,MAAM,EAAE,IAAI;KACb,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAqB;IACxD,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,UAAU;IACb,IAAI,GAA8B,IAAI,GAAG,EAAE,CAAC;IAC5C,WAAW,GAAkB,IAAI,CAAC;IAClC,MAAM,CAAmB;IACzB,WAAW,GAAuB,IAAI,CAAC;IAE/C,YAAY,SAA2B,EAAE,IAAI,EAAE,QAAQ,EAAE;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,qCAAqC;gBACrC,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBAC3D,MAAM;YAER,KAAK,MAAM;gBACT,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM;YAER,KAAK,KAAK;gBACR,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM;YAER,KAAK,KAAK;gBACR,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC3B,MAAM;YAER;gBACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,KAAc;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;QACnC,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAChE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAqB;QAClC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAEtC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,MAAM;gBACT,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;gBACxB,MAAM;YACR,2BAA2B;YAC3B,oCAAoC;QACtC,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,wDAAwD;YACxD,4CAA4C;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAa;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,OAA2B;QACzC,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,EAAE;gBACjB,QAAQ,EAAE,EAAE;gBACZ,gBAAgB,EAAE,CAAC;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,CAAC,yBAAyB,CAAC;aACpC,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACrD,MAAM,gBAAgB,GAAG,WAAW,EAAE,gBAAgB,IAAI,CAAC,CAAC;QAE5D,mCAAmC;QACnC,IAAI,UAAwB,CAAC;QAC7B,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,UAAU,GAAG;gBACX,GAAG,OAAO,CAAC,UAAU;gBACrB,gBAAgB,EAAE,gBAAgB,GAAG,CAAC;gBACtC,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,MAAM,eAAe,EAAE,CAAC;YACrC,UAAU,CAAC,gBAAgB,GAAG,gBAAgB,GAAG,CAAC,CAAC;QACrD,CAAC;QAED,qBAAqB;QACrB,IAAI,WAAW,EAAE,CAAC;YAChB,WAAW,CAAC,MAAM,GAAG,KAAK,CAAC;YAC3B,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;QAED,6BAA6B;QAC7B,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC;QAEpC,MAAM,CAAC,IAAI,CACT;YACE,aAAa;YACb,QAAQ,EAAE,UAAU,CAAC,KAAK;YAC1B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;YAC7C,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,EACD,aAAa,CACd,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa;YACb,QAAQ,EAAE,UAAU,CAAC,KAAK;YAC1B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;YAC7C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QACrC,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,UAAU,GAAoB,EAAE,CAAC;QAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,MAAM,EAAE,CAAC;gBACX,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,OAAO,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,IAAgB,EAAE,KAAc;QACzC,MAAM,WAAW,GAAG,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC;QAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,kBAAkB,WAAW,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAE7D,uBAAuB;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;aACzC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACpC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEpB,kCAAkC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAE3B,OAAO,MAAM,CAAC,IAAI,CAAC,SAAU,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAAgB,EAAE,SAAqB,EAAE,KAAa;QACjE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAE3D,uCAAuC;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACnF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;YAE1C,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC;IACjE,CAAC;IAED,mCAAmC;IAE3B,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YAEzF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,yCAAyC,CAAC,CAAC;gBAC3F,OAAO;YACT,CAAC;YAED,IAAI,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAE/D,mCAAmC;YACnC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC3D,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAG9B,CAAC;YAEF,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAChC,CAAC;YAED,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAC5D,uBAAuB,CACxB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,+BAA+B,CAAC,CAAC;YACzF,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAEvC,MAAM,IAAI,GAAG;gBACX,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;aACrC,CAAC;YAEF,IAAI,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAE5C,mCAAmC;YACnC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC3D,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,CAAC;YAED,0BAA0B;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEzC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAE3D,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,oBAAoB,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,6BAA6B,CAAC,CAAC;YACvF,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,WAAW,CAAC;QAEpD,kDAAkD;QAClD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC;QAE1D,IAAI,aAAa,IAAI,YAAY,EAAE,CAAC;YAClC,MAAM,OAAO,GAAiB;gBAC5B,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,YAAY;gBACvB,UAAU,EAAE,aAAa;gBACzB,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,gBAAgB,EAAE,CAAC;gBACnB,MAAM,EAAE,IAAI;aACb,CAAC;YAEF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACtC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;YAEjC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,6BAA6B,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,wCAAwC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACrC,CAAC;QAED,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,EAC1D,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,KAAc;QAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,cAAc,GAAG,KAAK,IAAI,WAAW,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QACjE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;QAE7E,sDAAsD;QACtD,MAAM,OAAO,GAAiB;YAC5B,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,UAAU,EAAE,EAAE,EAAE,2BAA2B;YAC3C,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;YAChD,MAAM,EAAE,IAAI;SACb,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;QACnC,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC9D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mEAAmE;IAC3D,KAAK,CAAC,OAAO,CAAC,IAAY;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,uCAAuC;QACvC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,UAAU,EACV,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QAEF,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EACvB,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/B,CAAC;QAEF,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAClE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjB,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAEnD,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,uCAAuC;QACvC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,UAAU,EACV,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,SAAS,CAAC,CACZ,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEtC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EACvB,GAAG,EACH,UAAU,CACX,CAAC;QAEF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB;IACxD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAA+C,CAAC;IAEpE,OAAO;QACL,IAAI,EAAE,SAAS;QAEf,KAAK,CAAC,WAAW;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,KAAa;YACjC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE;gBACd,MAAM,EAAE,OAAO,CAAC,SAAS;gBACzB,OAAO,EAAE,OAAO,CAAC,UAAU;aAC5B,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,IAAgB;YACxC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAE7D,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;iBACzC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;iBACpC,IAAI,CAAC,UAAU,CAAC,CAAC;YAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,IAAgB,EAAE,SAAqB;YACjE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC/E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAE3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACnF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACzD,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;gBAE1C,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACzC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,KAAa;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAE1B,OAAO;gBACL,KAAK;gBACL,SAAS,EAAE,OAAO,CAAC,MAAM;gBACzB,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,gBAAgB,EAAE,CAAC;aACpB,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAa;YAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,QAAQ;YACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/basis/evaluator.d.ts

@@ -43,8 +43,39 @@ export declare class RuleEvaluator {
     private evaluateRule;
     /**
      * Evaluate a condition expression string
+     * Supports: boolean literals, field comparisons, logical operators (AND, OR, NOT)
+     * Examples:
+     *   - "true", "false"
+     *   - "entity.trustScore > 300"
+     *   - "intent.context.amount <= 1000"
+     *   - "entity.type == 'agent' AND entity.trustScore >= 500"
+     *   - "NOT intent.context.restricted"
      */
     private evaluateExpression;
+    /**
+     * Tokenize expression string
+     */
+    private tokenize;
+    /**
+     * Parse OR expression (lowest precedence)
+     */
+    private parseOrExpression;
+    /**
+     * Parse AND expression
+     */
+    private parseAndExpression;
+    /**
+     * Parse NOT expression
+     */
+    private parseNotExpression;
+    /**
+     * Parse comparison expression
+     */
+    private parseComparison;
+    /**
+     * Parse a value (field path, literal, or number)
+     */
+    private parseValue;
     /**
      * Determine the final action from all rule results
      */

package/dist/basis/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../src/basis/evaluator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAEV,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAKpB;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,UAAU,CAAyC;IAE3D;;OAEG;IACH,iBAAiB,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI;IAKjD;;OAEG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAKvC;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAqDrE;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAe1B;;OAEG;IACH,OAAO,CAAC,WAAW;IAmCnB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAoCzB;;OAEG;IACH,OAAO,CAAC,YAAY;IAcpB;;OAEG;YACW,YAAY;IAqC1B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAc1B;;OAEG;IACH,OAAO,CAAC,oBAAoB;CAwB7B;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,aAAa,CAE/C"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../src/basis/evaluator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAEV,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAKpB;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,UAAU,CAAyC;IAE3D;;OAEG;IACH,iBAAiB,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI;IAKjD;;OAEG;IACH,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAKvC;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAqDrE;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAe1B;;OAEG;IACH,OAAO,CAAC,WAAW;IAmCnB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAoCzB;;OAEG;IACH,OAAO,CAAC,YAAY;IAcpB;;OAEG;YACW,YAAY;IAmC1B;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;OAEG;IACH,OAAO,CAAC,QAAQ;IAsDhB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAqBzB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAqB1B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAc1B;;OAEG;IACH,OAAO,CAAC,eAAe;IA8DvB;;OAEG;IACH,OAAO,CAAC,UAAU;IA6BlB;;OAEG;IACH,OAAO,CAAC,oBAAoB;CAwB7B;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,aAAa,CAE/C"}