@vorionsys/platform-core 0.1.0

package/dist/security/ai-governance/middleware.js

@@ -0,0 +1,359 @@
+/**
+ * Fastify Middleware for AI Governance
+ * Integrates AI governance controls into Fastify endpoints
+ * Vorion Security Platform
+ */
+import fp from 'fastify-plugin';
+import { ModelRegistry } from './model-registry';
+import { AccessPolicyManager } from './access-policy';
+import { PromptInjectionDetector } from './prompt-injection';
+import { OutputFilter } from './output-filter';
+import { AuditTrail } from './audit-trail';
+import { BiasDetector } from './bias-detection';
+import { AIRateLimiter } from './rate-limiter';
+/**
+ * Default extractors
+ */
+const defaultExtractors = {
+    extractModelId: (request) => {
+        const body = request.body;
+        const params = request.params;
+        return (body?.modelId ||
+            params?.modelId ||
+            request.headers['x-model-id'] ||
+            'default');
+    },
+    extractUserId: (request) => {
+        const user = request.user;
+        return (user?.id ||
+            request.headers['x-user-id'] ||
+            'anonymous');
+    },
+    extractRoles: (request) => {
+        const user = request.user;
+        const headerRoles = request.headers['x-user-roles'];
+        return user?.roles || (headerRoles ? headerRoles.split(',') : ['user']);
+    },
+    extractDepartment: (request) => {
+        const user = request.user;
+        return (user?.department ||
+            request.headers['x-department'] ||
+            'default');
+    },
+    extractPrompt: (request) => {
+        const body = request.body;
+        return (body?.prompt ||
+            body?.message ||
+            body?.input ||
+            '');
+    },
+};
+/**
+ * Create AI Governance middleware plugin
+ */
+const aiGovernancePlugin = (fastify, options, done) => {
+    const { modelRegistry, accessPolicyManager, injectionDetector, outputFilter, auditTrail, biasDetector, rateLimiter, enabled = true, skipPaths = [], extractModelId = defaultExtractors.extractModelId, extractUserId = defaultExtractors.extractUserId, extractRoles = defaultExtractors.extractRoles, extractDepartment = defaultExtractors.extractDepartment, extractPrompt = defaultExtractors.extractPrompt, onAccessDenied, onInjectionDetected, onRateLimitExceeded, } = options;
+    // Pre-handler hook for AI governance checks
+    fastify.addHook('preHandler', async (request, reply) => {
+        if (!enabled)
+            return;
+        // Skip non-AI paths
+        if (skipPaths.some((path) => request.url.startsWith(path))) {
+            return;
+        }
+        // Skip if not an AI endpoint (customize based on your routing)
+        if (!request.url.includes('/ai/') && !request.url.includes('/model/')) {
+            return;
+        }
+        const startTime = Date.now();
+        const modelId = extractModelId(request);
+        const userId = extractUserId(request);
+        const roles = extractRoles(request);
+        const department = extractDepartment(request);
+        const prompt = extractPrompt(request);
+        const sessionId = request.headers['x-session-id'] || generateSessionId();
+        // Initialize governance context
+        request.aiGovernance = {
+            modelId,
+            userId,
+            sessionId,
+            roles,
+            department,
+            auditLevel: 'detailed',
+            startTime,
+        };
+        // Check model exists
+        const model = await modelRegistry.getModel(modelId);
+        if (!model) {
+            await auditTrail.logPolicyViolation({
+                modelId,
+                userId,
+                sessionId,
+                violation: 'Model not found',
+                policyField: 'modelId',
+                ipAddress: request.ip,
+            });
+            if (onAccessDenied) {
+                await onAccessDenied(request, reply, 'Model not found');
+            }
+            else {
+                reply.code(404).send({ error: 'Model not found', modelId });
+            }
+            return;
+        }
+        // Check access policy
+        const accessContext = {
+            userId,
+            modelId,
+            roles,
+            department,
+            mfaVerified: request.headers['x-mfa-verified'] === 'true',
+            ipAddress: request.ip,
+            timestamp: new Date(),
+            requestedOperation: request.method,
+        };
+        const accessDecision = await accessPolicyManager.checkAccess(accessContext);
+        request.aiGovernance.auditLevel = accessDecision.auditLevel;
+        if (!accessDecision.allowed) {
+            await auditTrail.logPolicyViolation({
+                modelId,
+                userId,
+                sessionId,
+                violation: accessDecision.reason,
+                policyField: accessDecision.violations[0]?.policyField || 'unknown',
+                ipAddress: request.ip,
+            });
+            if (onAccessDenied) {
+                await onAccessDenied(request, reply, accessDecision.reason);
+            }
+            else {
+                reply.code(403).send({
+                    error: 'Access denied',
+                    reason: accessDecision.reason,
+                    violations: accessDecision.violations.map((v) => ({
+                        type: v.type,
+                        message: v.message,
+                    })),
+                });
+            }
+            return;
+        }
+        // Check rate limits
+        const estimatedTokens = estimateTokens(prompt);
+        const estimatedCost = estimatedTokens * (model.costPerToken || 0.00001);
+        request.aiGovernance.tokenEstimate = estimatedTokens;
+        const rateLimitResult = await rateLimiter.checkLimit(modelId, userId, estimatedTokens, estimatedCost, department);
+        if (!rateLimitResult.allowed) {
+            await auditTrail.logRateLimitExceeded({
+                modelId,
+                userId,
+                sessionId,
+                limitType: rateLimitResult.violatedRules[0]?.type || 'unknown',
+                currentUsage: rateLimitResult.status.currentUsage.requests,
+                limit: rateLimitResult.violatedRules[0]?.limit || 0,
+            });
+            if (onRateLimitExceeded) {
+                await onRateLimitExceeded(request, reply, {
+                    retryAfterSeconds: rateLimitResult.status.retryAfterSeconds,
+                });
+            }
+            else {
+                reply
+                    .code(429)
+                    .header('Retry-After', String(rateLimitResult.status.retryAfterSeconds || 60))
+                    .send({
+                    error: 'Rate limit exceeded',
+                    retryAfterSeconds: rateLimitResult.status.retryAfterSeconds,
+                    violatedRules: rateLimitResult.violatedRules.map((r) => ({
+                        type: r.type,
+                        limit: r.limit,
+                        window: r.window,
+                    })),
+                });
+            }
+            return;
+        }
+        // Check for prompt injection
+        if (prompt) {
+            const injectionResult = await injectionDetector.analyzeInput(prompt);
+            request.aiGovernance.injectionResult = injectionResult;
+            if (injectionResult.blocked) {
+                await auditTrail.logQuery({
+                    modelId,
+                    userId,
+                    sessionId,
+                    query: {
+                        prompt: injectionResult.originalInput,
+                        sanitizedPrompt: injectionResult.sanitizedInput,
+                        injectionDetectionResult: injectionResult,
+                    },
+                    tokenUsage: { promptTokens: 0, completionTokens: 0, totalTokens: 0 },
+                    auditLevel: request.aiGovernance.auditLevel,
+                    ipAddress: request.ip,
+                    userAgent: request.headers['user-agent'],
+                });
+                if (onInjectionDetected) {
+                    await onInjectionDetected(request, reply, injectionResult);
+                }
+                else {
+                    reply.code(400).send({
+                        error: 'Request blocked',
+                        reason: 'Potential prompt injection detected',
+                        riskScore: injectionResult.riskScore,
+                        recommendations: injectionResult.recommendations,
+                    });
+                }
+                return;
+            }
+            // Use sanitized prompt if available
+            if (injectionResult.sanitizedInput !== injectionResult.originalInput) {
+                request.aiGovernance.sanitizedPrompt = injectionResult.sanitizedInput;
+            }
+        }
+        // Record access for rate limiting
+        await accessPolicyManager.recordAccess(userId, modelId);
+    });
+    // Decorate fastify with governance utilities
+    fastify.decorate('aiGovernance', {
+        /**
+         * Process and filter AI model response
+         */
+        async processResponse(request, response) {
+            const ctx = request.aiGovernance;
+            if (!ctx) {
+                throw new Error('AI Governance context not initialized');
+            }
+            const latencyMs = Date.now() - ctx.startTime;
+            // Filter output
+            const filterResult = await outputFilter.filterOutput(response.content);
+            // Log response
+            const auditEntry = await auditTrail.logResponse({
+                modelId: ctx.modelId,
+                userId: ctx.userId,
+                sessionId: ctx.sessionId,
+                response: {
+                    response: response.content,
+                    filteredResponse: filterResult.filteredOutput,
+                    filterResult,
+                    latencyMs,
+                    modelVersion: response.modelVersion,
+                },
+                tokenUsage: response.tokenUsage,
+                auditLevel: ctx.auditLevel,
+            });
+            // Record usage for rate limiting
+            await rateLimiter.recordUsage(ctx.modelId, ctx.userId, response.tokenUsage.totalTokens, response.tokenUsage.totalTokens * 0.00001, // Simplified cost calculation
+            ctx.department);
+            // Record sample for bias detection (if applicable)
+            if (response.metadata?.attributes) {
+                await biasDetector.recordSample({
+                    modelId: ctx.modelId,
+                    timestamp: new Date(),
+                    input: ctx.sanitizedPrompt || '',
+                    output: filterResult.filteredOutput,
+                    attributes: response.metadata.attributes,
+                    userId: ctx.userId,
+                });
+            }
+            return {
+                filteredContent: filterResult.filteredOutput,
+                filterResult,
+                auditEntryId: auditEntry.id,
+            };
+        },
+        /**
+         * Log query manually (for custom implementations)
+         */
+        async logQuery(request, prompt, tokenUsage) {
+            const ctx = request.aiGovernance;
+            if (!ctx) {
+                throw new Error('AI Governance context not initialized');
+            }
+            const entry = await auditTrail.logQuery({
+                modelId: ctx.modelId,
+                userId: ctx.userId,
+                sessionId: ctx.sessionId,
+                query: {
+                    prompt,
+                    sanitizedPrompt: ctx.sanitizedPrompt,
+                    injectionDetectionResult: ctx.injectionResult,
+                },
+                tokenUsage,
+                auditLevel: ctx.auditLevel,
+                ipAddress: request.ip,
+                userAgent: request.headers['user-agent'],
+            });
+            return entry.id;
+        },
+        /**
+         * Get governance context
+         */
+        getContext(request) {
+            return request.aiGovernance;
+        },
+        /**
+         * Check if prompt needs sanitization
+         */
+        getSanitizedPrompt(request) {
+            return request.aiGovernance?.sanitizedPrompt;
+        },
+    });
+    done();
+};
+/**
+ * Generate a unique session ID
+ */
+function generateSessionId() {
+    return `session-${Date.now()}-${Math.random().toString(36).substring(2, 15)}`;
+}
+/**
+ * Estimate token count from text (rough approximation)
+ */
+function estimateTokens(text) {
+    if (!text)
+        return 0;
+    // Rough estimate: ~4 characters per token for English
+    return Math.ceil(text.length / 4);
+}
+/**
+ * Create pre-configured AI Governance middleware
+ */
+export function createAIGovernanceMiddleware(options = {}) {
+    // Create default components if not provided
+    const modelRegistry = options.modelRegistry || new ModelRegistry();
+    const accessPolicyManager = options.accessPolicyManager || new AccessPolicyManager();
+    const injectionDetector = options.injectionDetector || new PromptInjectionDetector();
+    const outputFilter = options.outputFilter || new OutputFilter();
+    const auditTrail = options.auditTrail || new AuditTrail();
+    const biasDetector = options.biasDetector || new BiasDetector();
+    const rateLimiter = options.rateLimiter || new AIRateLimiter();
+    const fullOptions = {
+        modelRegistry,
+        accessPolicyManager,
+        injectionDetector,
+        outputFilter,
+        auditTrail,
+        biasDetector,
+        rateLimiter,
+        ...options,
+    };
+    return {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        plugin: fp(aiGovernancePlugin, {
+            name: 'ai-governance',
+            fastify: '>=4.x',
+        }),
+        components: {
+            modelRegistry,
+            accessPolicyManager,
+            injectionDetector,
+            outputFilter,
+            auditTrail,
+            biasDetector,
+            rateLimiter,
+        },
+    };
+}
+export { aiGovernancePlugin };
+export default createAIGovernanceMiddleware;
+//# sourceMappingURL=middleware.js.map

package/dist/security/ai-governance/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/security/ai-governance/middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAwB,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AA0E/C;;GAEG;AACH,MAAM,iBAAiB,GAAG;IACxB,cAAc,EAAE,CAAC,OAAuB,EAAU,EAAE;QAClD,MAAM,IAAI,GAAG,OAAO,CAAC,IAA2C,CAAC;QACjE,MAAM,MAAM,GAAG,OAAO,CAAC,MAA6C,CAAC;QACrE,OAAO,CACJ,IAAI,EAAE,OAAkB;YACxB,MAAM,EAAE,OAAkB;YAC1B,OAAO,CAAC,OAAO,CAAC,YAAY,CAAY;YACzC,SAAS,CACV,CAAC;IACJ,CAAC;IACD,aAAa,EAAE,CAAC,OAAuB,EAAU,EAAE;QACjD,MAAM,IAAI,GAAI,OAAiD,CAAC,IAAI,CAAC;QACrE,OAAO,CACL,IAAI,EAAE,EAAE;YACP,OAAO,CAAC,OAAO,CAAC,WAAW,CAAY;YACxC,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,YAAY,EAAE,CAAC,OAAuB,EAAY,EAAE;QAClD,MAAM,IAAI,GAAI,OAAsD,CAAC,IAAI,CAAC;QAC1E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAW,CAAC;QAC9D,OAAO,IAAI,EAAE,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,iBAAiB,EAAE,CAAC,OAAuB,EAAU,EAAE;QACrD,MAAM,IAAI,GAAI,OAAyD,CAAC,IAAI,CAAC;QAC7E,OAAO,CACL,IAAI,EAAE,UAAU;YACf,OAAO,CAAC,OAAO,CAAC,cAAc,CAAY;YAC3C,SAAS,CACV,CAAC;IACJ,CAAC;IACD,aAAa,EAAE,CAAC,OAAuB,EAAU,EAAE;QACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAA2C,CAAC;QACjE,OAAO,CACJ,IAAI,EAAE,MAAiB;YACvB,IAAI,EAAE,OAAkB;YACxB,IAAI,EAAE,KAAgB;YACvB,EAAE,CACH,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,kBAAkB,GAAyD,CAC/E,OAAwB,EACxB,OAAsC,EACtC,IAAgB,EAChB,EAAE;IACF,MAAM,EACJ,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,WAAW,EACX,OAAO,GAAG,IAAI,EACd,SAAS,GAAG,EAAE,EACd,cAAc,GAAG,iBAAiB,CAAC,cAAc,EACjD,aAAa,GAAG,iBAAiB,CAAC,aAAa,EAC/C,YAAY,GAAG,iBAAiB,CAAC,YAAY,EAC7C,iBAAiB,GAAG,iBAAiB,CAAC,iBAAiB,EACvD,aAAa,GAAG,iBAAiB,CAAC,aAAa,EAC/C,cAAc,EACd,mBAAmB,EACnB,mBAAmB,GACpB,GAAG,OAAO,CAAC;IAEZ,4CAA4C;IAC5C,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QACnF,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,oBAAoB;QACpB,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,SAAS,GAAI,OAAO,CAAC,OAAO,CAAC,cAAc,CAAY,IAAI,iBAAiB,EAAE,CAAC;QAErF,gCAAgC;QAChC,OAAO,CAAC,YAAY,GAAG;YACrB,OAAO;YACP,MAAM;YACN,SAAS;YACT,KAAK;YACL,UAAU;YACV,UAAU,EAAE,UAAU;YACtB,SAAS;SACV,CAAC;QAEF,qBAAqB;QACrB,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,UAAU,CAAC,kBAAkB,CAAC;gBAClC,OAAO;gBACP,MAAM;gBACN,SAAS;gBACT,SAAS,EAAE,iBAAiB;gBAC5B,WAAW,EAAE,SAAS;gBACtB,SAAS,EAAE,OAAO,CAAC,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO;QACT,CAAC;QAED,sBAAsB;QACtB,MAAM,aAAa,GAAyB;YAC1C,MAAM;YACN,OAAO;YACP,KAAK;YACL,UAAU;YACV,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,MAAM;YACzD,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,kBAAkB,EAAE,OAAO,CAAC,MAAM;SACnC,CAAC;QAEF,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC5E,OAAO,CAAC,YAAY,CAAC,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC;QAE5D,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,UAAU,CAAC,kBAAkB,CAAC;gBAClC,OAAO;gBACP,MAAM;gBACN,SAAS;gBACT,SAAS,EAAE,cAAc,CAAC,MAAM;gBAChC,WAAW,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,SAAS;gBACnE,SAAS,EAAE,OAAO,CAAC,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,eAAe;oBACtB,MAAM,EAAE,cAAc,CAAC,MAAM;oBAC7B,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAChD,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;qBACnB,CAAC,CAAC;iBACJ,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QAED,oBAAoB;QACpB,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,eAAe,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC;QACxE,OAAO,CAAC,YAAY,CAAC,aAAa,GAAG,eAAe,CAAC;QAErD,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,UAAU,CAClD,OAAO,EACP,MAAM,EACN,eAAe,EACf,aAAa,EACb,UAAU,CACX,CAAC;QAEF,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,UAAU,CAAC,oBAAoB,CAAC;gBACpC,OAAO;gBACP,MAAM;gBACN,SAAS;gBACT,SAAS,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS;gBAC9D,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ;gBAC1D,KAAK,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC;aACpD,CAAC,CAAC;YAEH,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE;oBACxC,iBAAiB,EAAE,eAAe,CAAC,MAAM,CAAC,iBAAiB;iBAC5D,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,KAAK;qBACF,IAAI,CAAC,GAAG,CAAC;qBACT,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;qBAC7E,IAAI,CAAC;oBACJ,KAAK,EAAE,qBAAqB;oBAC5B,iBAAiB,EAAE,eAAe,CAAC,MAAM,CAAC,iBAAiB;oBAC3D,aAAa,EAAE,eAAe,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACvD,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,MAAM,EAAE,CAAC,CAAC,MAAM;qBACjB,CAAC,CAAC;iBACJ,CAAC,CAAC;YACP,CAAC;YACD,OAAO;QACT,CAAC;QAED,6BAA6B;QAC7B,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACrE,OAAO,CAAC,YAAY,CAAC,eAAe,GAAG,eAAe,CAAC;YAEvD,IAAI,eAAe,CAAC,OAAO,EAAE,CAAC;gBAC5B,MAAM,UAAU,CAAC,QAAQ,CAAC;oBACxB,OAAO;oBACP,MAAM;oBACN,SAAS;oBACT,KAAK,EAAE;wBACL,MAAM,EAAE,eAAe,CAAC,aAAa;wBACrC,eAAe,EAAE,eAAe,CAAC,cAAc;wBAC/C,wBAAwB,EAAE,eAAe;qBAC1C;oBACD,UAAU,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE;oBACpE,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,UAAU;oBAC3C,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;iBACzC,CAAC,CAAC;gBAEH,IAAI,mBAAmB,EAAE,CAAC;oBACxB,MAAM,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;gBAC7D,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,KAAK,EAAE,iBAAiB;wBACxB,MAAM,EAAE,qCAAqC;wBAC7C,SAAS,EAAE,eAAe,CAAC,SAAS;wBACpC,eAAe,EAAE,eAAe,CAAC,eAAe;qBACjD,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO;YACT,CAAC;YAED,oCAAoC;YACpC,IAAI,eAAe,CAAC,cAAc,KAAK,eAAe,CAAC,aAAa,EAAE,CAAC;gBACrE,OAAO,CAAC,YAAY,CAAC,eAAe,GAAG,eAAe,CAAC,cAAc,CAAC;YACxE,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,MAAM,mBAAmB,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,6CAA6C;IAC7C,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE;QAC/B;;WAEG;QACH,KAAK,CAAC,eAAe,CACnB,OAAuB,EACvB,QAAyB;YAMzB,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC;YACjC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;YAE7C,gBAAgB;YAChB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEvE,eAAe;YACf,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC;gBAC9C,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,QAAQ,EAAE;oBACR,QAAQ,EAAE,QAAQ,CAAC,OAAO;oBAC1B,gBAAgB,EAAE,YAAY,CAAC,cAAc;oBAC7C,YAAY;oBACZ,SAAS;oBACT,YAAY,EAAE,QAAQ,CAAC,YAAY;iBACpC;gBACD,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,UAAU,EAAE,GAAG,CAAC,UAAU;aAC3B,CAAC,CAAC;YAEH,iCAAiC;YACjC,MAAM,WAAW,CAAC,WAAW,CAC3B,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,MAAM,EACV,QAAQ,CAAC,UAAU,CAAC,WAAW,EAC/B,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,OAAO,EAAE,8BAA8B;YACzE,GAAG,CAAC,UAAU,CACf,CAAC;YAEF,mDAAmD;YACnD,IAAI,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;gBAClC,MAAM,YAAY,CAAC,YAAY,CAAC;oBAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,KAAK,EAAE,GAAG,CAAC,eAAe,IAAI,EAAE;oBAChC,MAAM,EAAE,YAAY,CAAC,cAAc;oBACnC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAoC;oBAClE,MAAM,EAAE,GAAG,CAAC,MAAM;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,eAAe,EAAE,YAAY,CAAC,cAAc;gBAC5C,YAAY;gBACZ,YAAY,EAAE,UAAU,CAAC,EAAE;aAC5B,CAAC;QACJ,CAAC;QAED;;WAEG;QACH,KAAK,CAAC,QAAQ,CACZ,OAAuB,EACvB,MAAc,EACd,UAAsB;YAEtB,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC;YACjC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC;gBACtC,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE;oBACL,MAAM;oBACN,eAAe,EAAE,GAAG,CAAC,eAAe;oBACpC,wBAAwB,EAAE,GAAG,CAAC,eAAe;iBAC9C;gBACD,UAAU;gBACV,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;aACzC,CAAC,CAAC;YAEH,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,CAAC;QAED;;WAEG;QACH,UAAU,CAAC,OAAuB;YAChC,OAAO,OAAO,CAAC,YAAY,CAAC;QAC9B,CAAC;QAED;;WAEG;QACH,kBAAkB,CAAC,OAAuB;YACxC,OAAO,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC;QAC/C,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AAEF;;GAEG;AACH,SAAS,iBAAiB;IACxB,OAAO,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAChF,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC;IACpB,sDAAsD;IACtD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAAkD,EAAE;IAapD,4CAA4C;IAC5C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,aAAa,EAAE,CAAC;IACnE,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,IAAI,mBAAmB,EAAE,CAAC;IACrF,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,IAAI,uBAAuB,EAAE,CAAC;IACrF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,YAAY,EAAE,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,UAAU,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,YAAY,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,aAAa,EAAE,CAAC;IAE/D,MAAM,WAAW,GAAkC;QACjD,aAAa;QACb,mBAAmB;QACnB,iBAAiB;QACjB,YAAY;QACZ,UAAU;QACV,YAAY;QACZ,WAAW;QACX,GAAG,OAAO;KACX,CAAC;IAEF,OAAO;QACL,8DAA8D;QAC9D,MAAM,EAAE,EAAE,CAAC,kBAAyB,EAAE;YACpC,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,OAAO;SACjB,CAAC;QACF,UAAU,EAAE;YACV,aAAa;YACb,mBAAmB;YACnB,iBAAiB;YACjB,YAAY;YACZ,UAAU;YACV,YAAY;YACZ,WAAW;SACZ;KACF,CAAC;AACJ,CAAC;AAuBD,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAC9B,eAAe,4BAA4B,CAAC"}

package/dist/security/ai-governance/model-registry.d.ts

@@ -0,0 +1,229 @@
+/**
+ * AI Model Registry
+ * Manages AI model inventory, versioning, and risk classification
+ * Vorion Security Platform
+ */
+import { EventEmitter } from 'events';
+import { AIModelMetadata, RiskLevel, DeploymentStatus, DataClassification, TrainingDataInfo } from './types';
+/**
+ * Model registration options
+ */
+export interface ModelRegistrationOptions {
+    id: string;
+    name: string;
+    provider: string;
+    version: string;
+    capabilities?: string[];
+    riskLevel?: RiskLevel;
+    dataCategories?: string[];
+    description?: string;
+    owner?: string;
+    team?: string;
+    tags?: string[];
+    endpoints?: string[];
+    maxTokens?: number;
+    costPerToken?: number;
+    deploymentStatus?: DeploymentStatus;
+    complianceFrameworks?: string[];
+    dataSensitivity?: DataClassification;
+    retentionPolicy?: string;
+    modelType?: AIModelMetadata['modelType'];
+    trainingDataInfo?: TrainingDataInfo;
+}
+/**
+ * Model search criteria
+ */
+export interface ModelSearchCriteria {
+    provider?: string;
+    riskLevel?: RiskLevel | RiskLevel[];
+    deploymentStatus?: DeploymentStatus | DeploymentStatus[];
+    dataSensitivity?: DataClassification | DataClassification[];
+    capabilities?: string[];
+    tags?: string[];
+    owner?: string;
+    team?: string;
+    modelType?: AIModelMetadata['modelType'];
+}
+/**
+ * Model version history entry
+ */
+export interface ModelVersionEntry {
+    version: string;
+    registeredAt: Date;
+    registeredBy: string;
+    changes: string[];
+    metadata: Partial<AIModelMetadata>;
+    deprecated: boolean;
+    deprecatedAt?: Date;
+    deprecationReason?: string;
+}
+/**
+ * Risk assessment result
+ */
+export interface RiskAssessmentResult {
+    modelId: string;
+    assessedAt: Date;
+    assessedBy: string;
+    riskLevel: RiskLevel;
+    riskScore: number;
+    factors: RiskFactor[];
+    recommendations: string[];
+    nextReviewDate: Date;
+}
+/**
+ * Risk factor
+ */
+export interface RiskFactor {
+    category: string;
+    factor: string;
+    weight: number;
+    score: number;
+    description: string;
+}
+/**
+ * Storage interface for model registry persistence
+ */
+export interface ModelRegistryStorage {
+    save(model: AIModelMetadata): Promise<void>;
+    get(modelId: string): Promise<AIModelMetadata | null>;
+    delete(modelId: string): Promise<void>;
+    list(): Promise<AIModelMetadata[]>;
+    search(criteria: ModelSearchCriteria): Promise<AIModelMetadata[]>;
+    saveVersionHistory(modelId: string, versions: ModelVersionEntry[]): Promise<void>;
+    getVersionHistory(modelId: string): Promise<ModelVersionEntry[]>;
+    saveRiskAssessment(assessment: RiskAssessmentResult): Promise<void>;
+    getRiskAssessments(modelId: string): Promise<RiskAssessmentResult[]>;
+}
+/**
+ * In-memory storage implementation
+ */
+export declare class InMemoryModelRegistryStorage implements ModelRegistryStorage {
+    private models;
+    private versionHistory;
+    private riskAssessments;
+    save(model: AIModelMetadata): Promise<void>;
+    get(modelId: string): Promise<AIModelMetadata | null>;
+    delete(modelId: string): Promise<void>;
+    list(): Promise<AIModelMetadata[]>;
+    search(criteria: ModelSearchCriteria): Promise<AIModelMetadata[]>;
+    saveVersionHistory(modelId: string, versions: ModelVersionEntry[]): Promise<void>;
+    getVersionHistory(modelId: string): Promise<ModelVersionEntry[]>;
+    saveRiskAssessment(assessment: RiskAssessmentResult): Promise<void>;
+    getRiskAssessments(modelId: string): Promise<RiskAssessmentResult[]>;
+}
+/**
+ * AI Model Registry
+ * Central repository for AI model inventory and management
+ */
+export declare class ModelRegistry extends EventEmitter {
+    private storage;
+    private riskWeights;
+    constructor(storage?: ModelRegistryStorage);
+    /**
+     * Initialize default risk weights for assessment
+     */
+    private initializeRiskWeights;
+    /**
+     * Register a new AI model
+     */
+    registerModel(options: ModelRegistrationOptions, registeredBy: string): Promise<AIModelMetadata>;
+    /**
+     * Update an existing model
+     */
+    updateModel(modelId: string, updates: Partial<Omit<AIModelMetadata, 'id' | 'deployedAt'>>, updatedBy: string, changeDescription: string[]): Promise<AIModelMetadata>;
+    /**
+     * Get a model by ID
+     */
+    getModel(modelId: string): Promise<AIModelMetadata | null>;
+    /**
+     * List all models
+     */
+    listModels(): Promise<AIModelMetadata[]>;
+    /**
+     * Search models by criteria
+     */
+    searchModels(criteria: ModelSearchCriteria): Promise<AIModelMetadata[]>;
+    /**
+     * Get version history for a model
+     */
+    getVersionHistory(modelId: string): Promise<ModelVersionEntry[]>;
+    /**
+     * Deprecate a model version
+     */
+    deprecateVersion(modelId: string, version: string, reason: string, deprecatedBy: string): Promise<void>;
+    /**
+     * Update deployment status
+     */
+    updateDeploymentStatus(modelId: string, status: DeploymentStatus, updatedBy: string): Promise<AIModelMetadata>;
+    /**
+     * Perform risk assessment for a model
+     */
+    assessRisk(modelId: string, assessedBy: string): Promise<RiskAssessmentResult>;
+    /**
+     * Get risk assessments for a model
+     */
+    getRiskAssessments(modelId: string): Promise<RiskAssessmentResult[]>;
+    /**
+     * Mark model as audited
+     */
+    markAudited(modelId: string, auditedBy: string): Promise<AIModelMetadata>;
+    /**
+     * Get models requiring audit
+     */
+    getModelsRequiringAudit(maxDaysSinceAudit?: number): Promise<AIModelMetadata[]>;
+    /**
+     * Get high-risk models
+     */
+    getHighRiskModels(): Promise<AIModelMetadata[]>;
+    /**
+     * Calculate data sensitivity score (0-1)
+     */
+    private calculateDataSensitivityScore;
+    /**
+     * Calculate PII handling score (0-1)
+     */
+    private calculatePIIScore;
+    /**
+     * Calculate external access score (0-1)
+     */
+    private calculateExternalAccessScore;
+    /**
+     * Calculate complexity score (0-1)
+     */
+    private calculateComplexityScore;
+    /**
+     * Calculate audit coverage score (0-1)
+     */
+    private calculateAuditCoverageScore;
+    /**
+     * Calculate compliance score (0-1)
+     */
+    private calculateComplianceScore;
+    /**
+     * Convert score to risk level
+     */
+    private scoreToRiskLevel;
+    /**
+     * Calculate next review date based on risk level
+     */
+    private calculateNextReviewDate;
+    /**
+     * Generate risk recommendations
+     */
+    private generateRiskRecommendations;
+    /**
+     * Export model inventory for compliance
+     */
+    exportInventory(): Promise<{
+        exportedAt: Date;
+        modelCount: number;
+        models: AIModelMetadata[];
+        summary: {
+            byRiskLevel: Record<RiskLevel, number>;
+            byStatus: Record<DeploymentStatus, number>;
+            byProvider: Record<string, number>;
+        };
+    }>;
+}
+export default ModelRegistry;
+//# sourceMappingURL=model-registry.d.ts.map

package/dist/security/ai-governance/model-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-registry.d.ts","sourceRoot":"","sources":["../../../src/security/ai-governance/model-registry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EACL,eAAe,EACf,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IACzC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CAAC;IACzD,eAAe,CAAC,EAAE,kBAAkB,GAAG,kBAAkB,EAAE,CAAC;IAC5D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,IAAI,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACnC,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACtD,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACnC,MAAM,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAClE,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACjE,kBAAkB,CAAC,UAAU,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;CACtE;AAED;;GAEG;AACH,qBAAa,4BAA6B,YAAW,oBAAoB;IACvE,OAAO,CAAC,MAAM,CAA2C;IACzD,OAAO,CAAC,cAAc,CAA+C;IACrE,OAAO,CAAC,eAAe,CAAkD;IAEnE,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAKrD,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAIlC,MAAM,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAiCjE,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjF,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAIhE,kBAAkB,CAAC,UAAU,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnE,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;CAG3E;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,YAAY;IAC7C,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,WAAW,CAAsB;gBAE7B,OAAO,CAAC,EAAE,oBAAoB;IAM1C;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAY7B;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAgDtG;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,YAAY,CAAC,CAAC,EAC5D,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,EAAE,GAC1B,OAAO,CAAC,eAAe,CAAC;IAkC3B;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAIhE;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAI9C;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAI7E;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAItE;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAgBhB;;OAEG;IACG,sBAAsB,CAC1B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,gBAAgB,EACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC;IAM3B;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAoHpF;;OAEG;IACG,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAI1E;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAS/E;;OAEG;IACG,uBAAuB,CAAC,iBAAiB,GAAE,MAAW,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAYzF;;OAEG;IACG,iBAAiB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAIrD;;OAEG;IACH,OAAO,CAAC,6BAA6B;IAWrC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAQzB;;OAEG;IACH,OAAO,CAAC,4BAA4B;IAQpC;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAYhC;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAWnC;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAQhC;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAY/B;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAqCnC;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC;QAC/B,UAAU,EAAE,IAAI,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,eAAe,EAAE,CAAC;QAC1B,OAAO,EAAE;YACP,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACvC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;YAC3C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACpC,CAAC;KACH,CAAC;CAqCH;AAED,eAAe,aAAa,CAAC"}