@vorionsys/platform-core 0.1.0

package/dist/intent/audit.js

@@ -0,0 +1,463 @@
+/**
+ * INTENT Read Audit Logging
+ *
+ * SOC2 compliant audit logging for read operations in the INTENT module.
+ * Tracks who accessed/viewed data for compliance reporting.
+ *
+ * @packageDocumentation
+ */
+import { randomUUID } from "node:crypto";
+import { eq, and, gte, lte, desc, count } from "drizzle-orm";
+import { auditReads } from "./schema.js";
+import { withCircuitBreaker, withCircuitBreakerResult, CircuitBreakerOpenError, } from "../common/circuit-breaker.js";
+import { getDatabase } from "../common/db.js";
+import { createLogger } from "../common/logger.js";
+import { getRedis } from "../common/redis.js";
+// Dead-letter queue key for audit entries that overflow the in-memory queue
+// SOC2 requires completeness - we must never drop audit entries
+const AUDIT_DLQ_KEY = "audit:dlq";
+// Re-export CircuitBreakerOpenError for consumers
+export { CircuitBreakerOpenError };
+const logger = createLogger({ component: "intent-audit" });
+// =============================================================================
+// ASYNC AUDIT QUEUE
+// =============================================================================
+/**
+ * Simple in-memory queue for fire-and-forget audit logging.
+ * Uses setImmediate to not block the request path.
+ * SOC2 Compliance: Overflowed entries are persisted to Redis DLQ, never dropped.
+ */
+class AuditQueue {
+    queue = [];
+    processing = false;
+    maxBatchSize = 100;
+    flushIntervalMs = 1000;
+    maxQueueSize = 10000;
+    flushTimer = null;
+    dlqFlushTimer = null;
+    constructor() {
+        // Start periodic flush
+        this.startFlushTimer();
+        // Start DLQ recovery timer
+        this.startDlqFlushTimer();
+    }
+    /**
+     * Add an entry to the queue for async processing
+     */
+    async enqueue(entry) {
+        this.queue.push(entry);
+        // If queue is getting large, process immediately
+        if (this.queue.length >= this.maxBatchSize) {
+            try {
+                await this.flush();
+            }
+            catch (error) {
+                logger.error({ error }, "Failed to flush audit queue during enqueue");
+            }
+        }
+    }
+    /**
+     * Start the periodic flush timer
+     */
+    startFlushTimer() {
+        if (this.flushTimer) {
+            clearInterval(this.flushTimer);
+        }
+        this.flushTimer = setInterval(() => {
+            this.flush();
+        }, this.flushIntervalMs);
+    }
+    /**
+     * Start the DLQ recovery timer - tries to recover entries from DLQ periodically
+     */
+    startDlqFlushTimer() {
+        if (this.dlqFlushTimer) {
+            clearInterval(this.dlqFlushTimer);
+        }
+        // Try to recover from DLQ every 30 seconds
+        this.dlqFlushTimer = setInterval(() => {
+            this.recoverFromDlq();
+        }, 30000);
+    }
+    /**
+     * Persist entries to Redis dead-letter queue for SOC2 compliance.
+     * Audit entries must NEVER be dropped - they are persisted to DLQ for later recovery.
+     */
+    async persistToDlq(entries) {
+        try {
+            const redis = getRedis();
+            const serialized = entries.map((e) => JSON.stringify(e));
+            await redis.rpush(AUDIT_DLQ_KEY, ...serialized);
+            logger.warn({ count: entries.length }, "Audit entries persisted to DLQ for SOC2 compliance");
+        }
+        catch (dlqError) {
+            // Last resort: log entries for manual recovery
+            logger.error({ error: dlqError, entries, count: entries.length }, "CRITICAL: Failed to persist audit entries to DLQ - logging for manual recovery");
+        }
+    }
+    /**
+     * Recover entries from DLQ and attempt to flush them
+     */
+    async recoverFromDlq() {
+        if (this.processing)
+            return;
+        try {
+            const redis = getRedis();
+            const dlqLength = await redis.llen(AUDIT_DLQ_KEY);
+            if (dlqLength === 0)
+                return;
+            // Only recover if main queue has capacity
+            if (this.queue.length >= this.maxQueueSize / 2) {
+                logger.debug({ dlqLength }, "DLQ recovery skipped - main queue busy");
+                return;
+            }
+            // Pop a batch from DLQ
+            const batchSize = Math.min(this.maxBatchSize, dlqLength);
+            const entries = [];
+            for (let i = 0; i < batchSize; i++) {
+                const item = await redis.lpop(AUDIT_DLQ_KEY);
+                if (item) {
+                    try {
+                        entries.push(JSON.parse(item));
+                    }
+                    catch {
+                        logger.error({ item }, "Failed to parse DLQ entry");
+                    }
+                }
+            }
+            if (entries.length > 0) {
+                // Add recovered entries to main queue for processing
+                this.queue.unshift(...entries);
+                logger.info({ count: entries.length }, "Recovered entries from DLQ");
+            }
+        }
+        catch (error) {
+            logger.error({ error }, "Failed to recover from DLQ");
+        }
+    }
+    /**
+     * Get the current DLQ size for monitoring
+     */
+    async getDlqSize() {
+        try {
+            const redis = getRedis();
+            return await redis.llen(AUDIT_DLQ_KEY);
+        }
+        catch {
+            return 0;
+        }
+    }
+    /**
+     * Flush the queue to the database.
+     * Uses circuit breaker to prevent cascading failures and avoid
+     * overwhelming the database during outages.
+     */
+    async flush() {
+        if (this.processing || this.queue.length === 0) {
+            return;
+        }
+        this.processing = true;
+        const batch = this.queue.splice(0, this.maxBatchSize);
+        try {
+            // Use withCircuitBreakerResult to avoid throwing on circuit open
+            // since audit logging should never fail the main request
+            const result = await withCircuitBreakerResult("auditService", async () => {
+                const db = getDatabase();
+                const now = new Date();
+                const values = batch.map((entry) => ({
+                    id: randomUUID(),
+                    tenantId: entry.tenantId,
+                    userId: entry.userId,
+                    action: entry.action,
+                    resourceType: entry.resourceType,
+                    resourceId: entry.resourceId,
+                    metadata: entry.metadata ?? null,
+                    ipAddress: entry.ipAddress ?? null,
+                    userAgent: entry.userAgent ?? null,
+                    timestamp: now,
+                }));
+                await db.insert(auditReads).values(values);
+                return batch.length;
+            });
+            if (result.success) {
+                logger.debug({ count: batch.length }, "Audit entries flushed to database");
+            }
+            else if (result.circuitOpen) {
+                // Circuit is open - re-queue for later retry
+                logger.warn({ count: batch.length }, "Audit circuit breaker is open, re-queuing entries for retry");
+                if (this.queue.length < this.maxQueueSize) {
+                    this.queue.unshift(...batch);
+                }
+                else {
+                    // SOC2 compliance: persist to DLQ instead of dropping
+                    await this.persistToDlq(batch);
+                }
+            }
+            else {
+                // Execution failed
+                logger.error({ error: result.error, count: batch.length }, "Failed to flush audit entries");
+                // Re-queue failed entries for retry (with limit to prevent memory issues)
+                if (this.queue.length < this.maxQueueSize) {
+                    this.queue.unshift(...batch);
+                }
+                else {
+                    // SOC2 compliance: persist to DLQ instead of dropping
+                    await this.persistToDlq(batch);
+                }
+            }
+        }
+        catch (error) {
+            // Catch-all for unexpected errors
+            logger.error({ error, count: batch.length }, "Unexpected error flushing audit entries");
+            // Re-queue failed entries for retry
+            if (this.queue.length < this.maxQueueSize) {
+                this.queue.unshift(...batch);
+            }
+            else {
+                // SOC2 compliance: persist to DLQ instead of dropping
+                await this.persistToDlq(batch);
+            }
+        }
+        finally {
+            this.processing = false;
+        }
+    }
+    /**
+     * Force flush and cleanup (for graceful shutdown)
+     */
+    async shutdown() {
+        if (this.flushTimer) {
+            clearInterval(this.flushTimer);
+            this.flushTimer = null;
+        }
+        if (this.dlqFlushTimer) {
+            clearInterval(this.dlqFlushTimer);
+            this.dlqFlushTimer = null;
+        }
+        await this.flush();
+    }
+}
+/**
+ * Get the current audit DLQ size for monitoring/alerting
+ * @returns Number of entries in the DLQ
+ */
+export async function getAuditDlqSize() {
+    return getAuditQueue().getDlqSize();
+}
+// Singleton queue instance
+let auditQueue = null;
+function getAuditQueue() {
+    if (!auditQueue) {
+        auditQueue = new AuditQueue();
+    }
+    return auditQueue;
+}
+// =============================================================================
+// AUDIT FUNCTIONS
+// =============================================================================
+/**
+ * Record an audit entry asynchronously.
+ * Uses a queue to batch writes and avoid blocking the request path.
+ *
+ * @param entry - The audit entry to record (without id and timestamp)
+ */
+export async function recordAudit(entry) {
+    // Fire and forget - enqueue for async processing
+    setImmediate(() => {
+        try {
+            getAuditQueue().enqueue(entry);
+        }
+        catch (error) {
+            // Log but don't throw - audit logging should never fail requests
+            logger.error({ error, entry }, "Failed to enqueue audit entry");
+        }
+    });
+}
+/**
+ * Record an audit entry synchronously (for testing or critical paths).
+ * Prefer recordAudit() for production use.
+ * Protected by circuit breaker to prevent cascading failures.
+ *
+ * @param entry - The audit entry to record
+ * @returns The created audit entry with id and timestamp
+ * @throws CircuitBreakerOpenError if the audit service circuit breaker is open
+ */
+export async function recordAuditSync(entry) {
+    return withCircuitBreaker("auditService", async () => {
+        const db = getDatabase();
+        const now = new Date();
+        const id = randomUUID();
+        const [row] = await db
+            .insert(auditReads)
+            .values({
+            id,
+            tenantId: entry.tenantId,
+            userId: entry.userId,
+            action: entry.action,
+            resourceType: entry.resourceType,
+            resourceId: entry.resourceId,
+            metadata: entry.metadata ?? null,
+            ipAddress: entry.ipAddress ?? null,
+            userAgent: entry.userAgent ?? null,
+            timestamp: now,
+        })
+            .returning();
+        logger.debug({
+            auditId: row.id,
+            action: entry.action,
+            resourceType: entry.resourceType,
+        }, "Audit entry recorded");
+        return {
+            id: row.id,
+            tenantId: row.tenantId,
+            userId: row.userId,
+            action: row.action,
+            resourceType: row.resourceType,
+            resourceId: row.resourceId,
+            metadata: row.metadata,
+            ipAddress: row.ipAddress ?? undefined,
+            userAgent: row.userAgent ?? undefined,
+            timestamp: row.timestamp,
+        };
+    });
+}
+// =============================================================================
+// AUDIT QUERY FUNCTIONS
+// =============================================================================
+/**
+ * Query audit log entries for compliance reporting.
+ * Supports filtering by user, action, resource, and time range.
+ * Protected by circuit breaker to prevent cascading failures.
+ *
+ * @param filters - Query filters
+ * @returns Paginated audit entries
+ * @throws CircuitBreakerOpenError if the audit service circuit breaker is open
+ */
+export async function queryAuditLog(filters) {
+    return withCircuitBreaker("auditService", async () => {
+        const db = getDatabase();
+        const limit = Math.min(filters.limit ?? 50, 1000);
+        const offset = filters.offset ?? 0;
+        const conditions = [eq(auditReads.tenantId, filters.tenantId)];
+        if (filters.userId) {
+            conditions.push(eq(auditReads.userId, filters.userId));
+        }
+        if (filters.action) {
+            conditions.push(eq(auditReads.action, filters.action));
+        }
+        if (filters.resourceType) {
+            conditions.push(eq(auditReads.resourceType, filters.resourceType));
+        }
+        if (filters.resourceId) {
+            conditions.push(eq(auditReads.resourceId, filters.resourceId));
+        }
+        if (filters.from) {
+            conditions.push(gte(auditReads.timestamp, filters.from));
+        }
+        if (filters.to) {
+            conditions.push(lte(auditReads.timestamp, filters.to));
+        }
+        // Get total count using COUNT(*) - avoids OOM on large tables
+        const countResult = await db
+            .select({ count: count() })
+            .from(auditReads)
+            .where(and(...conditions));
+        const total = countResult[0]?.count ?? 0;
+        // Get paginated results
+        const rows = await db
+            .select()
+            .from(auditReads)
+            .where(and(...conditions))
+            .orderBy(desc(auditReads.timestamp))
+            .limit(limit)
+            .offset(offset);
+        const entries = rows.map((row) => ({
+            id: row.id,
+            tenantId: row.tenantId,
+            userId: row.userId,
+            action: row.action,
+            resourceType: row.resourceType,
+            resourceId: row.resourceId,
+            metadata: row.metadata,
+            ipAddress: row.ipAddress ?? undefined,
+            userAgent: row.userAgent ?? undefined,
+            timestamp: row.timestamp,
+        }));
+        return {
+            entries,
+            total,
+            hasMore: offset + entries.length < total,
+        };
+    });
+}
+/**
+ * Get audit entries for a specific resource.
+ * Useful for showing access history on a detail page.
+ *
+ * @param tenantId - Tenant identifier
+ * @param resourceType - Type of resource
+ * @param resourceId - Resource identifier
+ * @param limit - Maximum entries to return
+ * @returns Recent audit entries for the resource
+ */
+export async function getResourceAuditHistory(tenantId, resourceType, resourceId, limit = 100) {
+    const result = await queryAuditLog({
+        tenantId,
+        resourceType,
+        resourceId,
+        limit,
+    });
+    return result.entries;
+}
+/**
+ * Get audit entries for a specific user.
+ * Useful for user activity reports and compliance audits.
+ *
+ * @param tenantId - Tenant identifier
+ * @param userId - User identifier
+ * @param options - Query options
+ * @returns Audit entries for the user
+ */
+export async function getUserAuditHistory(tenantId, userId, options) {
+    const result = await queryAuditLog({
+        tenantId,
+        userId,
+        from: options?.from,
+        to: options?.to,
+        limit: options?.limit,
+    });
+    return result.entries;
+}
+// =============================================================================
+// CLEANUP & SHUTDOWN
+// =============================================================================
+/**
+ * Gracefully shutdown the audit system.
+ * Flushes any pending entries before returning.
+ */
+export async function shutdownAuditSystem() {
+    if (auditQueue) {
+        await auditQueue.shutdown();
+        auditQueue = null;
+    }
+}
+// =============================================================================
+// HELPER FUNCTIONS FOR ROUTES
+// =============================================================================
+/**
+ * Extract request metadata for audit logging.
+ * Helper function to standardize metadata extraction from requests.
+ *
+ * @param request - Fastify request object
+ * @returns Metadata object with IP and user agent
+ */
+export function extractRequestMetadata(request) {
+    const userAgentHeader = request.headers?.["user-agent"];
+    return {
+        ipAddress: request.ip,
+        userAgent: Array.isArray(userAgentHeader)
+            ? userAgentHeader[0]
+            : userAgentHeader,
+    };
+}
+//# sourceMappingURL=audit.js.map

package/dist/intent/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/intent/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAI9C,4EAA4E;AAC5E,gEAAgE;AAChE,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC,kDAAkD;AAClD,OAAO,EAAE,uBAAuB,EAAE,CAAC;AAEnC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;AAyE3D,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,UAAU;IACN,KAAK,GAAuB,EAAE,CAAC;IAC/B,UAAU,GAAG,KAAK,CAAC;IACV,YAAY,GAAG,GAAG,CAAC;IACnB,eAAe,GAAG,IAAI,CAAC;IACvB,YAAY,GAAG,KAAK,CAAC;IAC9B,UAAU,GAAyC,IAAI,CAAC;IACxD,aAAa,GAAyC,IAAI,CAAC;IAEnE;QACE,uBAAuB;QACvB,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,2BAA2B;QAC3B,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,KAAuB;QACnC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEvB,iDAAiD;QACjD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,4CAA4C,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,kBAAkB;QACxB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpC,CAAC;QACD,2CAA2C;QAC3C,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,YAAY,CAAC,OAA2B;QACpD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,UAAU,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EACzB,oDAAoD,CACrD,CAAC;QACJ,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;YAClB,+CAA+C;YAC/C,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EACnD,gFAAgF,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc;QAC1B,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAE5B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAElD,IAAI,SAAS,KAAK,CAAC;gBAAE,OAAO;YAE5B,0CAA0C;YAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,wCAAwC,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;YAED,uBAAuB;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YACzD,MAAM,OAAO,GAAuB,EAAE,CAAC;YAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7C,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC,CAAC;oBACrD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,2BAA2B,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,qDAAqD;gBACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,4BAA4B,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;YACzB,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,KAAK;QACjB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtD,IAAI,CAAC;YACH,iEAAiE;YACjE,yDAAyD;YACzD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAC3C,cAAc,EACd,KAAK,IAAI,EAAE;gBACT,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;gBAEvB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACnC,EAAE,EAAE,UAAU,EAAE;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;oBAChC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;oBAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;oBAClC,SAAS,EAAE,GAAG;iBACf,CAAC,CAAC,CAAC;gBAEJ,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3C,OAAO,KAAK,CAAC,MAAM,CAAC;YACtB,CAAC,CACF,CAAC;YAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EACvB,mCAAmC,CACpC,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC9B,6CAA6C;gBAC7C,MAAM,CAAC,IAAI,CACT,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EACvB,6DAA6D,CAC9D,CAAC;gBACF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;oBAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;gBAC/B,CAAC;qBAAM,CAAC;oBACN,sDAAsD;oBACtD,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,mBAAmB;gBACnB,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAC5C,+BAA+B,CAChC,CAAC;gBACF,0EAA0E;gBAC1E,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;oBAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;gBAC/B,CAAC;qBAAM,CAAC;oBACN,sDAAsD;oBACtD,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kCAAkC;YAClC,MAAM,CAAC,KAAK,CACV,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAC9B,yCAAyC,CAC1C,CAAC;YAEF,oCAAoC;YACpC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,sDAAsD;gBACtD,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,OAAO,aAAa,EAAE,CAAC,UAAU,EAAE,CAAC;AACtC,CAAC;AAED,2BAA2B;AAC3B,IAAI,UAAU,GAAsB,IAAI,CAAC;AAEzC,SAAS,aAAa;IACpB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAuB;IACvD,iDAAiD;IACjD,YAAY,CAAC,GAAG,EAAE;QAChB,IAAI,CAAC;YACH,aAAa,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iEAAiE;YACjE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,+BAA+B,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAuB;IAEvB,OAAO,kBAAkB,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QAExB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,UAAU,CAAC;aAClB,MAAM,CAAC;YACN,EAAE;YACF,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,SAAS,EAAE,GAAG;SACf,CAAC;aACD,SAAS,EAAE,CAAC;QAEf,MAAM,CAAC,KAAK,CACV;YACE,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,EACD,sBAAsB,CACvB,CAAC;QAEF,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAqB;YACjC,YAAY,EAAE,GAAG,CAAC,YAAiC;YACnD,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,QAAQ,EAAE,GAAG,CAAC,QAA+C;YAC7D,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA0B;IAE1B,OAAO,kBAAkB,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAEnC,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE/D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,8DAA8D;QAC9D,MAAM,WAAW,GAAG,MAAM,EAAE;aACzB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;QAE7B,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QAEzC,wBAAwB;QACxB,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;aACzB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;aACnC,KAAK,CAAC,KAAK,CAAC;aACZ,MAAM,CAAC,MAAM,CAAC,CAAC;QAElB,MAAM,OAAO,GAAiB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/C,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAqB;YACjC,YAAY,EAAE,GAAG,CAAC,YAAiC;YACnD,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,QAAQ,EAAE,GAAG,CAAC,QAA+C;YAC7D,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,OAAO;YACP,KAAK;YACL,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK;SACzC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAY,EACZ,YAA+B,EAC/B,UAAkB,EAClB,KAAK,GAAG,GAAG;IAEX,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;QACjC,QAAQ;QACR,YAAY;QACZ,UAAU;QACV,KAAK;KACN,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAY,EACZ,MAAc,EACd,OAAoD;IAEpD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;QACjC,QAAQ;QACR,MAAM;QACN,IAAI,EAAE,OAAO,EAAE,IAAI;QACnB,EAAE,EAAE,OAAO,EAAE,EAAE;QACf,KAAK,EAAE,OAAO,EAAE,KAAK;KACtB,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5B,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAGtC;IACC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;IACxD,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;YACvC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YACpB,CAAC,CAAC,eAAe;KACpB,CAAC;AACJ,CAAC"}

package/dist/intent/classifier/index.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Intent Classification System
+ *
+ * Provides rule-based classification for intents in the Vorion AI Governance Platform.
+ * Classifies intents by category, risk level, and required approvals.
+ *
+ * Architecture:
+ * - IntentClassifier: Main entry point for classification
+ * - RiskAssessor: Calculates risk scores and required approvals
+ * - Patterns: Action patterns and resource sensitivity mappings
+ */
+import { RiskAssessor, type CreateIntent, type RiskAssessment, type HistoricalPattern, type RiskAssessorConfig } from './risk.js';
+import { type IntentCategory, type RiskTier } from './patterns.js';
+/**
+ * Approval requirement type
+ */
+export type ApprovalType = 'none' | 'auto' | 'human' | 'manager' | 'security' | 'multi-party';
+/**
+ * Classification result containing category, risk, and approval information
+ */
+export interface Classification {
+    /** Intent category */
+    category: IntentCategory;
+    /** Risk level classification */
+    riskLevel: RiskTier;
+    /** Risk score (0-100) */
+    riskScore: number;
+    /** Required approval types */
+    requiredApprovals: ApprovalType[];
+    /** Minimum trust level required */
+    minTrustLevel: number;
+    /** Whether auto-approval is possible */
+    canAutoApprove: boolean;
+    /** Action pattern that was matched (if any) */
+    matchedPattern?: string;
+    /** Classification confidence (0-1) */
+    confidence: number;
+    /** Full risk assessment details */
+    riskAssessment: RiskAssessment;
+    /** Classification timestamp */
+    classifiedAt: string;
+}
+/**
+ * Configuration for the IntentClassifier
+ */
+export interface IntentClassifierConfig {
+    /** Risk assessor configuration */
+    riskConfig?: Partial<RiskAssessorConfig>;
+    /** Trust level threshold for auto-approval (default: 3) */
+    autoApprovalTrustThreshold: number;
+    /** Risk score threshold for auto-approval (default: 30) */
+    autoApprovalRiskThreshold: number;
+    /** Enable strict classification mode (default: false) */
+    strictMode: boolean;
+}
+/**
+ * IntentClassifier for categorizing and assessing intents
+ *
+ * Provides rule-based classification without external ML dependencies.
+ * Classification includes:
+ * - Category (data-access, model-operation, external-integration, system-config, user-action)
+ * - Risk level (low, medium, high, critical)
+ * - Required approvals
+ * - Auto-approval eligibility
+ */
+export declare class IntentClassifier {
+    private config;
+    private riskAssessor;
+    constructor(config?: Partial<IntentClassifierConfig>);
+    /**
+     * Classify an intent
+     *
+     * @param intent - The intent to classify
+     * @param historicalPattern - Optional historical pattern data for risk assessment
+     * @returns Complete classification result
+     */
+    classifyIntent(intent: CreateIntent, historicalPattern?: HistoricalPattern | null): Promise<Classification>;
+    /**
+     * Calculate classification confidence
+     *
+     * Confidence is based on:
+     * - Pattern match: +0.5 if action matches known pattern
+     * - Resource specificity: +0.3 if resource is non-empty
+     * - Parameters presence: +0.2 if parameters are provided
+     */
+    private calculateConfidence;
+    /**
+     * Determine approval types based on risk assessment
+     */
+    private determineApprovalTypes;
+    /**
+     * Determine if an intent can be auto-approved
+     *
+     * Auto-approval is possible when:
+     * - Risk score is below the auto-approval threshold
+     * - No human, manager, or security review is required
+     * - Trust level requirement is met by the auto-approval trust threshold
+     */
+    private canAutoApprove;
+    /**
+     * Get the configured risk assessor
+     */
+    getRiskAssessor(): RiskAssessor;
+    /**
+     * Check if an action is known/recognized
+     */
+    isKnownAction(action: string): boolean;
+    /**
+     * Get the category for an action
+     */
+    getCategoryForAction(action: string): IntentCategory;
+}
+/**
+ * Create a new IntentClassifier instance with optional configuration
+ */
+export declare function createIntentClassifier(config?: Partial<IntentClassifierConfig>): IntentClassifier;
+export type { CreateIntent, RiskAssessment, HistoricalPattern, RiskAssessorConfig, RiskFactor, RequiredApprovals, } from './risk.js';
+export { RiskAssessor, createRiskAssessor, } from './risk.js';
+export type { IntentCategory, RiskTier, ActionPattern, ResourceSensitivity, } from './patterns.js';
+export { ACTION_PATTERNS, RESOURCE_SENSITIVITY, matchActionPattern, matchResourceSensitivity, getResourceSensitivityLevel, getResourceRiskTier, inferCategoryFromAction, scoreToTier, tierToMinScore, requiresApproval, } from './patterns.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/intent/classifier/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/intent/classifier/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,EACL,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,QAAQ,EAKd,MAAM,eAAe,CAAC;AAavB;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,aAAa,CAAC;AAE9F;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,sBAAsB;IACtB,QAAQ,EAAE,cAAc,CAAC;IACzB,gCAAgC;IAChC,SAAS,EAAE,QAAQ,CAAC;IACpB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,8BAA8B;IAC9B,iBAAiB,EAAE,YAAY,EAAE,CAAC;IAClC,mCAAmC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,cAAc,EAAE,OAAO,CAAC;IACxB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,cAAc,EAAE,cAAc,CAAC;IAC/B,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,kCAAkC;IAClC,UAAU,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzC,2DAA2D;IAC3D,0BAA0B,EAAE,MAAM,CAAC;IACnC,2DAA2D;IAC3D,yBAAyB,EAAE,MAAM,CAAC;IAClC,yDAAyD;IACzD,UAAU,EAAE,OAAO,CAAC;CACrB;AAQD;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,YAAY,CAAe;gBAEvB,MAAM,GAAE,OAAO,CAAC,sBAAsB,CAAM;IAKxD;;;;;;OAMG;IACG,cAAc,CAClB,MAAM,EAAE,YAAY,EACpB,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAC3C,OAAO,CAAC,cAAc,CAAC;IA0E1B;;;;;;;OAOG;IACH,OAAO,CAAC,mBAAmB;IA2B3B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAwC9B;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;IAuBtB;;OAEG;IACH,eAAe,IAAI,YAAY;IAI/B;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAItC;;OAEG;IACH,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc;CAIrD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,GACvC,gBAAgB,CAElB;AAGD,YAAY,EACV,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,iBAAiB,GAClB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,YAAY,EACZ,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAEnB,YAAY,EACV,cAAc,EACd,QAAQ,EACR,aAAa,EACb,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EACxB,2BAA2B,EAC3B,mBAAmB,EACnB,uBAAuB,EACvB,WAAW,EACX,cAAc,EACd,gBAAgB,GACjB,MAAM,eAAe,CAAC"}