@vorionsys/platform-core 0.1.0

package/dist/security/policy-engine/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/security/policy-engine/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAkB,MAAM,uBAAuB,CAAC;AACjE,OAAO,EACL,kBAAkB,GAGnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,aAAa,GAKd,MAAM,qBAAqB,CAAC;AAiB7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC,CAAC;AA+CrE;;GAEG;AACH,MAAM,OAAO,oBAAoB;IACvB,QAAQ,GAAgC,IAAI,GAAG,EAAE,CAAC;IAClD,cAAc,GAAuC,IAAI,GAAG,EAAE,CAAC;IAC/D,eAAe,GAA2B,EAAE,CAAC;IAC7C,kBAAkB,CAAqB;IACvC,aAAa,CAAgB;IAC7B,mBAAmB,CAAuB;IAC1C,OAAO,CAA8G;IAE7H,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,kBAAkB,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC7E,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QAEvD,IAAI,CAAC,OAAO,GAAG;YACb,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;YAC5C,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,GAAG;YAC3D,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;YAC5C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;YACvC,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,MAAM,EAAE,iCAAiC;YACrF,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI;YAClD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,EAAE;SACzD,CAAC;QAEF,kEAAkE;QAClE,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CACT,EAAE,eAAe,EAAE,OAAO,EAAE,EAC5B,+FAA+F,CAChG,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;YACzC,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB;YACzD,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;SAC9C,EAAE,oCAAoC,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAsB;QACnC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAErC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAEtE,iCAAiC;QACjC,IAAI,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACxD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YAC1F,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC;oBACV,SAAS;oBACT,UAAU;oBACV,SAAS,EAAE,gBAAgB,CAAC,SAAS;iBACtC,EAAE,2BAA2B,CAAC,CAAC;gBAEhC,OAAO,IAAI,CAAC,cAAc,CAAC;oBACzB,EAAE,EAAE,UAAU;oBACd,SAAS;oBACT,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,8BAA8B;oBACtC,OAAO,EAAE,EAAE;oBACX,iBAAiB,EAAE,EAAE;oBACrB,eAAe,EAAE,EAAE;oBACnB,cAAc,EAAE,IAAI;oBACpB,eAAe,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;oBAC9C,QAAQ,EAAE;wBACR,mBAAmB,EAAE,gBAAgB,CAAC,SAAS;wBAC/C,mBAAmB,EAAE,gBAAgB,CAAC,SAAS;qBAChD;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAE/D,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,8BAA8B,CAAC,CAAC;YAExE,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,EAAE,EAAE,UAAU;gBACd,SAAS;gBACT,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACrC,MAAM,EAAE,wBAAwB;gBAChC,OAAO,EAAE,EAAE;gBACX,iBAAiB,EAAE,EAAE;gBACrB,eAAe,EAAE,EAAE;gBACnB,cAAc,EAAE,KAAK;gBACrB,eAAe,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;aAC/C,CAAC,CAAC;QACL,CAAC;QAED,sCAAsC;QACtC,MAAM,iBAAiB,GAA6B,EAAE,CAAC;QACvD,MAAM,eAAe,GAA6B,EAAE,CAAC;QACrD,MAAM,UAAU,GAAmB,EAAE,CAAC;QAEtC,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACrF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC1D,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAE/B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC7B,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBAEnC,mCAAmC;gBACnC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;gBAC5D,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;oBAC/D,MAAM,CAAC,IAAI,CAAC;wBACV,SAAS;wBACT,UAAU;wBACV,QAAQ,EAAE,MAAM,CAAC,EAAE;wBACnB,MAAM,EAAG,UAA6C,EAAE,MAAM;qBAC/D,EAAE,uBAAuB,CAAC,CAAC;oBAE5B,OAAO,IAAI,CAAC,cAAc,CAAC;wBACzB,EAAE,EAAE,UAAU;wBACd,SAAS;wBACT,OAAO,EAAE,MAAM;wBACf,MAAM,EAAG,UAA6C,EAAE,MAAM,IAAI,yBAAyB;wBAC3F,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,iBAAiB;wBACjB,eAAe;wBACf,cAAc,EAAE,KAAK;wBACrB,eAAe,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;qBAC/C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC;YACnC,EAAE,EAAE,UAAU;YACd,SAAS;YACT,OAAO;YACP,MAAM;YACN,OAAO,EAAE,UAAU;YACnB,iBAAiB;YACjB,eAAe;YACf,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;SAC/C,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC;YACV,SAAS;YACT,UAAU;YACV,OAAO;YACP,iBAAiB,EAAE,iBAAiB,CAAC,MAAM;YAC3C,eAAe,EAAE,eAAe,CAAC,MAAM;YACvC,UAAU,EAAE,QAAQ,CAAC,eAAe;SACrC,EAAE,6BAA6B,CAAC,CAAC;QAElC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAAsB;QAC9C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,QAAQ,CACb,0BAA0B,EAC1B,KAAK,EAAE,IAAe,EAAE,EAAE;YACxB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAC3D,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAEvD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;YAChE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAE9C,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;YACvD,IAAI,CAAC,UAAU,CAAC,6BAA6B,CAAC,GAAG,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC;YACnF,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC;YAC/E,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC;YAClE,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC;YAEnE,OAAO,QAAQ,CAAC;QAClB,CAAC,EACD,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAC1C,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CAC1B,MAAsB,EACtB,OAAsB;QAEtB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,sBAAsB;QACtB,MAAM,gBAAgB,GAAgC,EAAE,CAAC;QACzD,IAAI,iBAAiB,GAAG,IAAI,CAAC;QAE7B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACpE,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAE9B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,iBAAiB,GAAG,KAAK,CAAC;gBAC1B,MAAM,CAAC,gCAAgC;YACzC,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,aAAa,EAAE,MAAM,CAAC,OAAO;gBAC7B,OAAO,EAAE,KAAK;gBACd,gBAAgB;gBAChB,WAAW,EAAE,EAAE;gBACf,OAAO,EAAE,EAAE;gBACX,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;gBACzC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAEhF,yCAAyC;QACzC,MAAM,cAAc,GAAG,WAAW;aAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACvB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAExB,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,OAAO,EAAE,iBAAiB;YAC1B,gBAAgB;YAChB,WAAW;YACX,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC;YACzF,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;YACzC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,oBAAoB,CAC1B,WAAmC,EACnC,MAAsB;QAEtB,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAErE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,sCAAsC;YACtC,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC5B,KAAK,aAAa;oBAChB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,WAAW;wBACjB,MAAM,EAAE,KAAK;wBACb,OAAO,EAAG,UAAU,CAAC,QAAQ,EAAE,OAAkB,IAAI,GAAG;qBACzD,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,kBAAkB;oBACrB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,WAAW;wBACjB,MAAM,EAAE,UAAU;wBAClB,OAAO,EAAG,UAAU,CAAC,QAAQ,EAAE,OAAkB,IAAI,IAAI;qBAC1D,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,cAAc;oBACjB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,gBAAgB;wBAC7C,SAAS,EAAG,UAAU,CAAC,QAAQ,EAAE,SAAoB,IAAI,gBAAgB;qBAC1E,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,YAAY;oBACf,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,qBAAqB;wBAC7B,SAAS,EAAE,qBAAqB;wBAChC,UAAU,EAAE,GAAG;wBACf,SAAS,EAAE,IAAI;wBACf,UAAU,EAAG,UAAU,CAAC,QAAQ,EAAE,UAAqB,IAAI,EAAE;qBAC9D,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,cAAc;oBACjB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,WAAW;wBACjB,MAAM,EAAG,UAAU,CAAC,QAAQ,EAAE,MAA6B,IAAI,KAAK;wBACpE,OAAO,EAAG,UAAU,CAAC,QAAQ,EAAE,OAAkB,IAAI,GAAG;qBACzD,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,iBAAiB;oBACpB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,WAAW;wBACjB,MAAM,EAAE,UAAU;wBAClB,OAAO,EAAE,GAAG;qBACb,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,iBAAiB;oBACpB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,iBAAiB;wBAC9C,SAAS,EAAE,gBAAgB;qBAC5B,CAAC,CAAC;oBACH,MAAM;gBACR;oBACE,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,oBAAoB;wBACjD,SAAS,EAAE,aAAa;qBACzB,CAAC,CAAC;YACP,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAEhC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,eAAyC,EACzC,UAA0B;QAE1B,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;QACtC,CAAC;QAED,6BAA6B;QAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,8BAA8B;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;YACjD,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,4CAA4C;QAC5C,MAAM,kBAAkB,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAClD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACrB,CAAC,CAAC,QAAQ,KAAK,kBAAkB,IAAI,CAAC,CAAC,CAAC,MAAM,CAC/C,CACF,CAAC;QAEF,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,OAAwB,EACxB,eAAyC;QAEzC,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,MAAM;gBACT,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC1C,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CACvC,CAAC;gBACF,OAAO,UAAU;oBACf,CAAC,CAAC,qBAAqB,UAAU,CAAC,UAAU,EAAE;oBAC9C,CAAC,CAAC,eAAe,CAAC;YAEtB,KAAK,WAAW;gBACd,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC/C,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAC5C,CAAC;gBACF,OAAO,eAAe;oBACpB,CAAC,CAAC,iCAAiC,eAAe,CAAC,UAAU,EAAE;oBAC/D,CAAC,CAAC,kCAAkC,CAAC;YAEzC,KAAK,SAAS;gBACZ,OAAO,mBAAmB,CAAC;YAE7B,KAAK,OAAO;gBACV,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC;oBAC/B,CAAC,CAAC,cAAc,eAAe,CAAC,MAAM,WAAW;oBACjD,CAAC,CAAC,iBAAiB,CAAC;YAExB;gBACE,OAAO,kBAAkB,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,MAWtB;QACC,OAAO;YACL,GAAG,MAAM;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAAsB;QAC1C,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAEpD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,SAAS;YAE9B,0CAA0C;YAC1C,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC7C,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,MAAsB,EAAE,OAAsB;QACvE,iDAAiD;QACjD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0CAA0C;QAC1C,4CAA4C;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gFAAgF;IAChF,oBAAoB;IACpB,gFAAgF;IAEhF;;OAEG;IACH,SAAS,CAAC,MAAsB;QAC9B,kBAAkB;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,mBAAmB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAErC,gBAAgB;QAChB,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAClC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;QAC9E,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,QAAgB;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE/C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,gBAAgB,CAAC,CAAC;YAC5C,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,QAAgB,EAAE,OAAgC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAmB;YAC9B,GAAG,QAAQ;YACX,GAAG,OAAO;YACV,EAAE,EAAE,QAAQ,EAAE,2BAA2B;YACzC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,0BAA0B,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAErC,gBAAgB;QAChB,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAClC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;QACtE,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAElD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,QAAgB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,QAAgB;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gFAAgF;IAChF,oBAAoB;IACpB,gFAAgF;IAEhF;;OAEG;IACK,gBAAgB,CAAC,MAAsB;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAE1D,MAAM,aAAa,GAAwB;YACzC,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;YAC/C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE7B,yBAAyB;QACzB,OAAO,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAC3D,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,QAAgB,EAAE,SAAiB;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,UAAU,GAAmB;YACjC,GAAG,OAAO,CAAC,MAAM;YACjB,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YACtD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAElC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC3F,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAErD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QAEvC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;IAC5C,CAAC;IAED,gFAAgF;IAChF,aAAa;IACb,gFAAgF;IAEhF;;OAEG;IACH,cAAc,CAAC,MAAe;QAC5B,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC;YACH,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;gBAChD,MAAM,QAAQ,GAAG,KAA0E,CAAC;gBAC5F,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACpC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,IAAI,EAAE,kBAAkB;qBACzB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,EAAE;oBACR,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B;oBAC5E,IAAI,EAAE,eAAe;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,CAAC,GAAG,MAAwB,CAAC;QAEnC,gCAAgC;QAChC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;YACvD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACtF,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM;YACN,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,aAAa;IACb,gFAAgF;IAEhF;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAgC;QAC7C,2BAA2B;QAC3B,IAAI,kBAAoC,CAAC;QAEzC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,kBAAkB,GAAG,OAAO,CAAC,QAAQ;iBAClC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;iBAChC,MAAM,CAAC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,kBAAkB,GAAG,OAAO,CAAC,eAAe;gBAC1C,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE;gBACvB,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAChC,CAAC;QAED,gCAAgC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEtD,yBAAyB;QACzB,MAAM,MAAM,GAAqC,EAAE,CAAC;QAEpD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,mCAAmC;YACnC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;gBAC9C,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;gBACpE,IAAI,eAAe,EAAE,CAAC;oBACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAE,CAAC,OAAO,GAAG,KAAK,CAAC;oBACpD,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;oBAClD,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC7E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAE,CAAC,OAAO,GAAG,IAAI,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChC,eAAe,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,eAAe,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC1F,CAAC;QAED,OAAO;YACL,QAAQ;YACR,MAAM;YACN,eAAe;SAChB,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,mBAAmB;IACnB,gFAAgF;IAEhF;;OAEG;IACH,cAAc,CAAC,QAA8B;QAC3C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,GAAG,EAAE;YACV,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,QAAgB,EAChB,MAAmC,EACnC,MAAuB;QAEvB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBACzE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,8BAA8B,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,gBAAgB;IAChB,gFAAgF;IAEhF;;OAEG;IACH,0BAA0B,CAAC,QAAgB,EAAE,SAAoC;QAC/E,IAAI,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,IAAY,EAAE,OAA0B;QAC1D,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,WAAwB;QACrC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,QAA6B;QAClD,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,SAA8B;QACnD,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC;IACvC,CAAC;IAED,gFAAgF;IAChF,aAAa;IACb,gFAAgF;IAEhF;;OAEG;IACH,QAAQ;QAMN,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;YACnC,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC;QACnC,CAAC;QAED,MAAM,aAAa,GAA2B,EAAE,CAAC;QACjD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;gBACpC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACjC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;YAC1D,aAAa;YACb,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAChD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAqC;IAC9E,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC"}

package/dist/security/policy-engine/index.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Security Policy Engine
+ *
+ * A flexible security policy engine for dynamic security rules.
+ * Provides policy evaluation, management, and enforcement capabilities.
+ *
+ * Features:
+ * - Dynamic policy conditions (user, request, time, risk, resource)
+ * - Flexible rules (MFA, approval, block, rate-limit, encryption, audit)
+ * - Configurable actions (allow, deny, challenge, notify, escalate, quarantine)
+ * - JSON-based Policy DSL
+ * - Fastify middleware integration
+ * - Management API for CRUD operations
+ * - Policy versioning and rollback
+ * - Dry-run/simulation mode
+ * - Break-glass override support
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   createSecurityPolicyEngine,
+ *   enforcePolicies,
+ *   builtInPolicies,
+ * } from './security/policy-engine';
+ *
+ * // Create engine
+ * const engine = createSecurityPolicyEngine({
+ *   enableTracing: true,
+ *   defaultDecision: 'allow',
+ * });
+ *
+ * // Add built-in policies
+ * for (const policy of builtInPolicies) {
+ *   engine.addPolicy(policy);
+ * }
+ *
+ * // Use with Fastify
+ * const { middleware } = enforcePolicies({ engine });
+ * fastify.addHook('preHandler', middleware);
+ *
+ * // Or use the plugin
+ * import { policyEnginePluginFp } from './security/policy-engine';
+ * fastify.register(policyEnginePluginFp, {
+ *   engine,
+ *   enableManagementApi: true,
+ * });
+ * ```
+ *
+ * @packageDocumentation
+ */
+export { ConditionOperator, LogicalOperator, ConditionType, PolicyRuleType, PolicyActionType, DecisionOutcome, securityPolicySchema, policyConditionSchema, policyRuleSchema, policyActionSchema, policyContextSchema, } from './types.js';
+export type { PolicyCondition, UserAttributeCondition, RequestAttributeCondition, TimeBasedCondition, RiskBasedCondition, ResourceAttributeCondition, CompositeCondition, CustomCondition, PolicyRule, MFARule, ApprovalRule, BlockAccessRule, RateLimitRule, EncryptionRule, AuditLogRule, StepUpAuthRule, DataMaskingRule, SessionTimeoutRule, GeoRestrictionRule, CustomRule, PolicyAction, AllowAction, DenyAction, ChallengeAction, NotifyAction, LogAction, EscalateAction, QuarantineAction, RedirectAction, ModifyAction, SecurityPolicy, PolicyContext, PolicyContextUser, PolicyContextRequest, PolicyContextResource, PolicyContextRisk, PolicyContextEnvironment, PolicyDecision, PolicyEvaluationResult, ConditionEvaluationResult, RuleEvaluationResult, PolicyVersionRecord, PolicySimulationRequest, PolicySimulationResult, PolicyValidationResult, PolicyValidationError, } from './types.js';
+export { SecurityPolicyEngine, createSecurityPolicyEngine, type SecurityPolicyEngineOptions, type PolicyUpdateListener, type BreakGlassValidator, } from './engine.js';
+export { ConditionEvaluator, createConditionEvaluator, type ConditionEvaluatorOptions, type CustomExpressionEvaluator, } from './condition-evaluator.js';
+export { RuleEvaluator, createRuleEvaluator, type RuleEvaluatorOptions, type RateLimiter, type GeoLocationProvider, type CustomRuleHandler, } from './rule-evaluator.js';
+export { createPolicyMiddleware, enforcePolicies, policyEnginePluginFp, type PolicyMiddlewareOptions, } from './middleware.js';
+export { builtInPolicies, getBuiltInPoliciesByTag, getBuiltInPolicyIds, requireMfaForAdminPolicy, blockHighRiskIpsPolicy, requireApprovalForBulkExportPolicy, enhancedLoggingForSensitiveResourcesPolicy, rateLimitByRiskScorePolicy, mfaOutsideBusinessHoursPolicy, blockCriticalThreatsPolicy, geoRestrictSensitiveOperationsPolicy, sessionSecurityHighRiskUsersPolicy, dataMaskingForPiiPolicy, } from './built-in-policies.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/security/policy-engine/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/security/policy-engine/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAOH,OAAO,EAEL,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,eAAe,EAGf,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAGpB,YAAY,EAEV,eAAe,EACf,sBAAsB,EACtB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe,EAGf,UAAU,EACV,OAAO,EACP,YAAY,EACZ,eAAe,EACf,aAAa,EACb,cAAc,EACd,YAAY,EACZ,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EAGV,YAAY,EACZ,WAAW,EACX,UAAU,EACV,eAAe,EACf,YAAY,EACZ,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,YAAY,EAGZ,cAAc,EAGd,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,wBAAwB,EAGxB,cAAc,EACd,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EAGpB,mBAAmB,EAGnB,uBAAuB,EACvB,sBAAsB,EAGtB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAMpB,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AAMrB,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,GAC/B,MAAM,0BAA0B,CAAC;AAMlC,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAM7B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,KAAK,uBAAuB,GAC7B,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,kCAAkC,EAClC,0CAA0C,EAC1C,0BAA0B,EAC1B,6BAA6B,EAC7B,0BAA0B,EAC1B,oCAAoC,EACpC,kCAAkC,EAClC,uBAAuB,GACxB,MAAM,wBAAwB,CAAC"}

package/dist/security/policy-engine/index.js

@@ -0,0 +1,80 @@
+/**
+ * Security Policy Engine
+ *
+ * A flexible security policy engine for dynamic security rules.
+ * Provides policy evaluation, management, and enforcement capabilities.
+ *
+ * Features:
+ * - Dynamic policy conditions (user, request, time, risk, resource)
+ * - Flexible rules (MFA, approval, block, rate-limit, encryption, audit)
+ * - Configurable actions (allow, deny, challenge, notify, escalate, quarantine)
+ * - JSON-based Policy DSL
+ * - Fastify middleware integration
+ * - Management API for CRUD operations
+ * - Policy versioning and rollback
+ * - Dry-run/simulation mode
+ * - Break-glass override support
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   createSecurityPolicyEngine,
+ *   enforcePolicies,
+ *   builtInPolicies,
+ * } from './security/policy-engine';
+ *
+ * // Create engine
+ * const engine = createSecurityPolicyEngine({
+ *   enableTracing: true,
+ *   defaultDecision: 'allow',
+ * });
+ *
+ * // Add built-in policies
+ * for (const policy of builtInPolicies) {
+ *   engine.addPolicy(policy);
+ * }
+ *
+ * // Use with Fastify
+ * const { middleware } = enforcePolicies({ engine });
+ * fastify.addHook('preHandler', middleware);
+ *
+ * // Or use the plugin
+ * import { policyEnginePluginFp } from './security/policy-engine';
+ * fastify.register(policyEnginePluginFp, {
+ *   engine,
+ *   enableManagementApi: true,
+ * });
+ * ```
+ *
+ * @packageDocumentation
+ */
+// =============================================================================
+// TYPES
+// =============================================================================
+// Re-export everything from types
+export { 
+// Condition operator/type enums
+ConditionOperator, LogicalOperator, ConditionType, PolicyRuleType, PolicyActionType, DecisionOutcome, 
+// Schemas
+securityPolicySchema, policyConditionSchema, policyRuleSchema, policyActionSchema, policyContextSchema, } from './types.js';
+// =============================================================================
+// ENGINE
+// =============================================================================
+export { SecurityPolicyEngine, createSecurityPolicyEngine, } from './engine.js';
+// =============================================================================
+// CONDITION EVALUATOR
+// =============================================================================
+export { ConditionEvaluator, createConditionEvaluator, } from './condition-evaluator.js';
+// =============================================================================
+// RULE EVALUATOR
+// =============================================================================
+export { RuleEvaluator, createRuleEvaluator, } from './rule-evaluator.js';
+// =============================================================================
+// MIDDLEWARE
+// =============================================================================
+export { createPolicyMiddleware, enforcePolicies, policyEnginePluginFp, } from './middleware.js';
+// =============================================================================
+// BUILT-IN POLICIES
+// =============================================================================
+export { builtInPolicies, getBuiltInPoliciesByTag, getBuiltInPolicyIds, requireMfaForAdminPolicy, blockHighRiskIpsPolicy, requireApprovalForBulkExportPolicy, enhancedLoggingForSensitiveResourcesPolicy, rateLimitByRiskScorePolicy, mfaOutsideBusinessHoursPolicy, blockCriticalThreatsPolicy, geoRestrictSensitiveOperationsPolicy, sessionSecurityHighRiskUsersPolicy, dataMaskingForPiiPolicy, } from './built-in-policies.js';
+//# sourceMappingURL=index.js.map

package/dist/security/policy-engine/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/security/policy-engine/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,gFAAgF;AAChF,QAAQ;AACR,gFAAgF;AAEhF,kCAAkC;AAClC,OAAO;AACL,gCAAgC;AAChC,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,eAAe;AAEf,UAAU;AACV,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAqEpB,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,OAAO,EACL,oBAAoB,EACpB,0BAA0B,GAI3B,MAAM,aAAa,CAAC;AAErB,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,OAAO,EACL,kBAAkB,EAClB,wBAAwB,GAGzB,MAAM,0BAA0B,CAAC;AAElC,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,OAAO,EACL,aAAa,EACb,mBAAmB,GAKpB,MAAM,qBAAqB,CAAC;AAE7B,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,oBAAoB,GAErB,MAAM,iBAAiB,CAAC;AAEzB,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,kCAAkC,EAClC,0CAA0C,EAC1C,0BAA0B,EAC1B,6BAA6B,EAC7B,0BAA0B,EAC1B,oCAAoC,EACpC,kCAAkC,EAClC,uBAAuB,GACxB,MAAM,wBAAwB,CAAC"}

package/dist/security/policy-engine/middleware.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Fastify Middleware for Security Policy Engine
+ *
+ * Provides middleware for enforcing security policies in Fastify applications.
+ * Supports policy bypass (break-glass), decision injection, and management API.
+ *
+ * @packageDocumentation
+ */
+import type { FastifyRequest, FastifyReply, FastifyPluginCallback } from 'fastify';
+import { SecurityPolicyEngine, type SecurityPolicyEngineOptions } from './engine.js';
+import type { PolicyContext, PolicyDecision, PolicyContextUser, PolicyContextResource, PolicyContextRisk } from './types.js';
+/**
+ * Policy middleware options
+ */
+export interface PolicyMiddlewareOptions {
+    /** Security policy engine options */
+    engineOptions?: SecurityPolicyEngineOptions;
+    /** Existing engine instance (if not creating new) */
+    engine?: SecurityPolicyEngine;
+    /** Paths to skip policy enforcement */
+    skipPaths?: string[];
+    /** Paths to skip (regex patterns) */
+    skipPathPatterns?: RegExp[];
+    /** Enable break-glass support */
+    enableBreakGlass?: boolean;
+    /** Break-glass header name */
+    breakGlassHeader?: string;
+    /** User context extractor */
+    extractUser?: (request: FastifyRequest) => PolicyContextUser | undefined;
+    /** Resource context extractor */
+    extractResource?: (request: FastifyRequest) => PolicyContextResource | undefined;
+    /** Risk context extractor */
+    extractRisk?: (request: FastifyRequest) => PolicyContextRisk | undefined;
+    /** Custom context extractor */
+    extractCustom?: (request: FastifyRequest) => Record<string, unknown> | undefined;
+    /** Whether to block on policy errors */
+    blockOnError?: boolean;
+    /** Enable management API */
+    enableManagementApi?: boolean;
+    /** Management API prefix */
+    managementApiPrefix?: string;
+    /** Management API authentication */
+    managementApiAuth?: (request: FastifyRequest) => Promise<boolean>;
+}
+/**
+ * Extended FastifyRequest with policy decision
+ */
+declare module 'fastify' {
+    interface FastifyRequest {
+        policyDecision?: PolicyDecision;
+        policyContext?: PolicyContext;
+    }
+}
+/**
+ * Create policy enforcement middleware
+ */
+export declare function createPolicyMiddleware(engine: SecurityPolicyEngine, options?: PolicyMiddlewareOptions): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+/**
+ * Export plugin with fastify-plugin wrapper
+ */
+export declare const policyEnginePluginFp: FastifyPluginCallback<PolicyMiddlewareOptions>;
+/**
+ * Enforce policies middleware factory
+ *
+ * Creates a middleware that evaluates and enforces security policies.
+ * Can be used standalone or with the full plugin.
+ */
+export declare function enforcePolicies(options?: PolicyMiddlewareOptions): {
+    middleware: (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+    engine: SecurityPolicyEngine;
+};
+declare module 'fastify' {
+    interface FastifyInstance {
+        policyEngine?: SecurityPolicyEngine;
+    }
+}
+//# sourceMappingURL=middleware.d.ts.map

package/dist/security/policy-engine/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/security/policy-engine/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAEV,cAAc,EACd,YAAY,EACZ,qBAAqB,EACtB,MAAM,SAAS,CAAC;AAIjB,OAAO,EAAE,oBAAoB,EAAE,KAAK,2BAA2B,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EAEd,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAIpB;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,qCAAqC;IACrC,aAAa,CAAC,EAAE,2BAA2B,CAAC;IAC5C,qDAAqD;IACrD,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,qCAAqC;IACrC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,iCAAiC;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,8BAA8B;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6BAA6B;IAC7B,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,iBAAiB,GAAG,SAAS,CAAC;IACzE,iCAAiC;IACjC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,qBAAqB,GAAG,SAAS,CAAC;IACjF,6BAA6B;IAC7B,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,iBAAiB,GAAG,SAAS,CAAC;IACzE,+BAA+B;IAC/B,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACjF,wCAAwC;IACxC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4BAA4B;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,4BAA4B;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oCAAoC;IACpC,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE;AAED;;GAEG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,cAAc,CAAC,EAAE,cAAc,CAAC;QAChC,aAAa,CAAC,EAAE,aAAa,CAAC;KAC/B;CACF;AAkJD;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,GAAE,uBAA4B,IAOnC,SAAS,cAAc,EACvB,OAAO,YAAY,KAClB,OAAO,CAAC,IAAI,CAAC,CAqFjB;AAkLD;;GAEG;AACH,eAAO,MAAM,oBAAoB,gDAG/B,CAAC;AAEH;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,uBAA4B;0BAvRxD,cAAc,SAChB,YAAY,KAClB,OAAO,CAAC,IAAI,CAAC;;EA4RjB;AAGD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,YAAY,CAAC,EAAE,oBAAoB,CAAC;KACrC;CACF"}

package/dist/security/policy-engine/middleware.js

@@ -0,0 +1,375 @@
+/**
+ * Fastify Middleware for Security Policy Engine
+ *
+ * Provides middleware for enforcing security policies in Fastify applications.
+ * Supports policy bypass (break-glass), decision injection, and management API.
+ *
+ * @packageDocumentation
+ */
+import fp from 'fastify-plugin';
+import { randomUUID } from 'node:crypto';
+import { createLogger } from '../../common/logger.js';
+import { SecurityPolicyEngine } from './engine.js';
+const logger = createLogger({ component: 'policy-middleware' });
+/**
+ * Default user extractor
+ */
+function defaultUserExtractor(request) {
+    const user = request.user;
+    if (!user)
+        return undefined;
+    return {
+        id: (user.id ?? user.sub ?? user.userId),
+        email: user.email,
+        role: user.role,
+        roles: user.roles,
+        department: user.department,
+        tenant: (user.tenant ?? user.tenantId),
+        groups: user.groups,
+        permissions: user.permissions,
+        attributes: user,
+        riskScore: user.riskScore,
+        mfaVerified: user.mfaVerified,
+        lastMfaAt: user.lastMfaAt,
+        sessionStartedAt: user.sessionStartedAt,
+    };
+}
+/**
+ * Build policy context from request
+ */
+function buildPolicyContext(request, options) {
+    const now = new Date();
+    const context = {
+        user: options.extractUser?.(request) ?? defaultUserExtractor(request),
+        request: {
+            id: request.id ?? randomUUID(),
+            method: request.method,
+            path: request.url.split('?')[0],
+            url: request.url,
+            ip: request.ip,
+            userAgent: request.headers['user-agent'],
+            origin: request.headers.origin,
+            referer: request.headers.referer,
+            headers: request.headers,
+            query: request.query,
+            body: request.body,
+            contentType: request.headers['content-type'],
+        },
+        resource: options.extractResource?.(request),
+        risk: options.extractRisk?.(request),
+        environment: {
+            timestamp: now.toISOString(),
+            timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+            dayOfWeek: now.getDay(),
+            hour: now.getHours(),
+            isWeekend: now.getDay() === 0 || now.getDay() === 6,
+        },
+        custom: options.extractCustom?.(request),
+    };
+    // Add break-glass token if provided
+    if (options.enableBreakGlass) {
+        const headerName = options.breakGlassHeader ?? 'x-break-glass-token';
+        const token = request.headers[headerName];
+        if (typeof token === 'string') {
+            context.breakGlassToken = token;
+        }
+    }
+    return context;
+}
+/**
+ * Handle policy decision
+ */
+async function handleDecision(decision, request, reply) {
+    // Attach decision to request
+    request.policyDecision = decision;
+    // Add decision headers
+    reply.header('X-Policy-Decision', decision.outcome);
+    reply.header('X-Policy-Decision-Id', decision.id);
+    switch (decision.outcome) {
+        case 'allow':
+            return true;
+        case 'deny': {
+            const denyAction = decision.actions.find(a => a.type === 'deny');
+            const httpStatus = denyAction?.httpStatus ?? 403;
+            const errorCode = denyAction?.errorCode ?? 'POLICY_DENIED';
+            const retryAfter = denyAction?.retryAfter;
+            if (retryAfter) {
+                reply.header('Retry-After', retryAfter.toString());
+            }
+            await reply.status(httpStatus).send({
+                error: errorCode,
+                message: decision.reason,
+                decisionId: decision.id,
+                retryable: denyAction?.retryable ?? false,
+            });
+            return false;
+        }
+        case 'challenge': {
+            const challengeAction = decision.actions.find(a => a.type === 'challenge');
+            const method = challengeAction?.method ?? 'mfa';
+            const redirectUrl = challengeAction?.redirectUrl;
+            if (redirectUrl) {
+                await reply.redirect(302, redirectUrl);
+                return false;
+            }
+            await reply.status(401).send({
+                error: 'CHALLENGE_REQUIRED',
+                message: decision.reason,
+                decisionId: decision.id,
+                challengeMethod: method,
+                challengeTimeout: challengeAction?.timeout,
+            });
+            return false;
+        }
+        case 'pending':
+            await reply.status(202).send({
+                error: 'APPROVAL_PENDING',
+                message: decision.reason,
+                decisionId: decision.id,
+            });
+            return false;
+        default:
+            return true;
+    }
+}
+/**
+ * Create policy enforcement middleware
+ */
+export function createPolicyMiddleware(engine, options = {}) {
+    const skipPaths = new Set(options.skipPaths ?? ['/health', '/ready', '/metrics']);
+    const skipPatterns = options.skipPathPatterns ?? [];
+    const blockOnError = options.blockOnError ?? false;
+    return async function policyMiddleware(request, reply) {
+        const path = request.url.split('?')[0];
+        // Skip configured paths
+        if (skipPaths.has(path)) {
+            return;
+        }
+        // Skip pattern matches
+        if (skipPatterns.some(p => p.test(path))) {
+            return;
+        }
+        try {
+            // Build context
+            const context = buildPolicyContext(request, options);
+            request.policyContext = context;
+            // Evaluate policies
+            const decision = await engine.evaluateWithTracing(context);
+            // Handle decision
+            const allowed = await handleDecision(decision, request, reply);
+            if (!allowed) {
+                // Reply already sent
+                return;
+            }
+            // Execute additional actions (logging, notifications, etc.)
+            for (const action of decision.actions) {
+                switch (action.type) {
+                    case 'log': {
+                        const logData = {
+                            message: action.message,
+                            requestId: context.request.id,
+                            userId: context.user?.id,
+                            decisionId: decision.id,
+                            tags: action.tags,
+                        };
+                        switch (action.level) {
+                            case 'debug':
+                                logger.debug(logData, 'Policy action log');
+                                break;
+                            case 'info':
+                                logger.info(logData, 'Policy action log');
+                                break;
+                            case 'warn':
+                                logger.warn(logData, 'Policy action log');
+                                break;
+                            case 'error':
+                                logger.error(logData, 'Policy action log');
+                                break;
+                        }
+                        break;
+                    }
+                    case 'modify':
+                        // Add headers
+                        if (action.addHeaders) {
+                            for (const [name, value] of Object.entries(action.addHeaders)) {
+                                reply.header(name, value);
+                            }
+                        }
+                        break;
+                    // Notify and escalate actions would be handled asynchronously
+                    // by a separate action processor
+                }
+            }
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            logger.error({ error: message, path }, 'Policy evaluation failed');
+            if (blockOnError) {
+                await reply.status(500).send({
+                    error: 'POLICY_ERROR',
+                    message: 'Security policy evaluation failed',
+                });
+                return;
+            }
+            // Fail open - allow request but log the failure
+        }
+    };
+}
+/**
+ * Policy engine Fastify plugin
+ */
+const policyEnginePlugin = (fastify, options, done) => {
+    // Create or use provided engine
+    const engine = options.engine ?? new SecurityPolicyEngine(options.engineOptions);
+    // Create middleware
+    const middleware = createPolicyMiddleware(engine, options);
+    // Register preHandler hook
+    fastify.addHook('preHandler', middleware);
+    // Decorate fastify with engine
+    fastify.decorate('policyEngine', engine);
+    // Register management API if enabled
+    if (options.enableManagementApi) {
+        registerManagementApi(fastify, engine, options);
+    }
+    done();
+};
+/**
+ * Register management API routes
+ */
+function registerManagementApi(fastify, engine, options) {
+    const prefix = options.managementApiPrefix ?? '/api/security/policies';
+    const authCheck = options.managementApiAuth ?? (async () => true);
+    // Auth middleware for management API
+    const authMiddleware = async (request, reply) => {
+        const authorized = await authCheck(request);
+        if (!authorized) {
+            await reply.status(403).send({ error: 'UNAUTHORIZED', message: 'Not authorized to manage policies' });
+        }
+    };
+    // List policies
+    fastify.get(prefix, { preHandler: authMiddleware }, async (_request, _reply) => {
+        const policies = engine.getAllPolicies();
+        return {
+            policies,
+            total: policies.length,
+            enabled: policies.filter(p => p.enabled).length,
+        };
+    });
+    // Get policy by ID
+    fastify.get(`${prefix}/:id`, { preHandler: authMiddleware }, async (request, reply) => {
+        const policy = engine.getPolicy(request.params.id);
+        if (!policy) {
+            return reply.status(404).send({ error: 'NOT_FOUND', message: 'Policy not found' });
+        }
+        return policy;
+    });
+    // Create policy
+    fastify.post(prefix, { preHandler: authMiddleware }, async (request, reply) => {
+        try {
+            const policy = request.body;
+            engine.addPolicy(policy);
+            return reply.status(201).send(policy);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            return reply.status(400).send({ error: 'INVALID_POLICY', message });
+        }
+    });
+    // Update policy
+    fastify.put(`${prefix}/:id`, { preHandler: authMiddleware }, async (request, reply) => {
+        try {
+            const updated = engine.updatePolicy(request.params.id, request.body);
+            return updated;
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            if (message.includes('not found')) {
+                return reply.status(404).send({ error: 'NOT_FOUND', message });
+            }
+            return reply.status(400).send({ error: 'UPDATE_FAILED', message });
+        }
+    });
+    // Delete policy
+    fastify.delete(`${prefix}/:id`, { preHandler: authMiddleware }, async (request, reply) => {
+        const removed = engine.removePolicy(request.params.id);
+        if (!removed) {
+            return reply.status(404).send({ error: 'NOT_FOUND', message: 'Policy not found' });
+        }
+        return { success: true };
+    });
+    // Enable policy
+    fastify.post(`${prefix}/:id/enable`, { preHandler: authMiddleware }, async (request, reply) => {
+        const success = engine.enablePolicy(request.params.id);
+        if (!success) {
+            return reply.status(404).send({ error: 'NOT_FOUND', message: 'Policy not found' });
+        }
+        return { success: true };
+    });
+    // Disable policy
+    fastify.post(`${prefix}/:id/disable`, { preHandler: authMiddleware }, async (request, reply) => {
+        const success = engine.disablePolicy(request.params.id);
+        if (!success) {
+            return reply.status(404).send({ error: 'NOT_FOUND', message: 'Policy not found' });
+        }
+        return { success: true };
+    });
+    // Validate policy
+    fastify.post(`${prefix}/validate`, { preHandler: authMiddleware }, async (request, _reply) => {
+        const result = engine.validatePolicy(request.body);
+        return result;
+    });
+    // Simulate policy evaluation
+    fastify.post(`${prefix}/simulate`, { preHandler: authMiddleware }, async (request, _reply) => {
+        const result = await engine.simulate({
+            context: request.body.context,
+            policies: request.body.policies,
+            verbose: request.body.verbose,
+        });
+        return result;
+    });
+    // Get policy versions
+    fastify.get(`${prefix}/:id/versions`, { preHandler: authMiddleware }, async (request, reply) => {
+        const versions = engine.getPolicyVersions(request.params.id);
+        if (versions.length === 0) {
+            const policy = engine.getPolicy(request.params.id);
+            if (!policy) {
+                return reply.status(404).send({ error: 'NOT_FOUND', message: 'Policy not found' });
+            }
+        }
+        return { versions };
+    });
+    // Rollback policy
+    fastify.post(`${prefix}/:id/rollback/:versionId`, { preHandler: authMiddleware }, async (request, reply) => {
+        const policy = engine.rollbackPolicy(request.params.id, request.params.versionId);
+        if (!policy) {
+            return reply.status(404).send({ error: 'NOT_FOUND', message: 'Policy or version not found' });
+        }
+        return policy;
+    });
+    // Get engine stats
+    fastify.get(`${prefix}/stats`, { preHandler: authMiddleware }, async (_request, _reply) => {
+        return engine.getStats();
+    });
+    logger.info({ prefix }, 'Policy management API registered');
+}
+/**
+ * Export plugin with fastify-plugin wrapper
+ */
+export const policyEnginePluginFp = fp(policyEnginePlugin, {
+    fastify: '>=4.x',
+    name: 'vorion-policy-engine',
+});
+/**
+ * Enforce policies middleware factory
+ *
+ * Creates a middleware that evaluates and enforces security policies.
+ * Can be used standalone or with the full plugin.
+ */
+export function enforcePolicies(options = {}) {
+    const engine = options.engine ?? new SecurityPolicyEngine(options.engineOptions);
+    return {
+        middleware: createPolicyMiddleware(engine, options),
+        engine,
+    };
+}
+//# sourceMappingURL=middleware.js.map