@vorionsys/platform-core 0.1.0

package/dist/security/siem/splunk.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Splunk SIEM Connector
+ *
+ * HTTP Event Collector (HEC) integration for Splunk:
+ * - Batch event sending
+ * - Index and sourcetype configuration
+ * - Token-based authentication
+ * - Retry with exponential backoff
+ *
+ * @packageDocumentation
+ * @module security/siem/splunk
+ */
+import { BaseSIEMConnector } from './connector.js';
+import type { SecurityEvent, SendResult, SplunkConnectorConfig } from './types.js';
+/**
+ * Splunk connector using HTTP Event Collector (HEC)
+ *
+ * Features:
+ * - Batch event sending for efficiency
+ * - Configurable index, sourcetype, source
+ * - Token-based authentication
+ * - Retry with exponential backoff
+ */
+export declare class SplunkConnector extends BaseSIEMConnector {
+    readonly type = "splunk";
+    private readonly hecUrl;
+    private readonly token;
+    private readonly index?;
+    private readonly sourcetype?;
+    private readonly source?;
+    private readonly host?;
+    private readonly verifySsl;
+    private readonly defaultFields?;
+    constructor(config: SplunkConnectorConfig);
+    /**
+     * Connect to Splunk (verify HEC endpoint is accessible)
+     */
+    protected doConnect(): Promise<void>;
+    /**
+     * Disconnect from Splunk (no-op for HTTP-based connection)
+     */
+    protected doDisconnect(): Promise<void>;
+    /**
+     * Send events to Splunk via HEC
+     */
+    protected doSend(events: SecurityEvent[]): Promise<SendResult>;
+    /**
+     * Send a single batch to Splunk
+     */
+    private sendBatch;
+    /**
+     * Health check - verify HEC endpoint is accessible
+     */
+    protected doHealthCheck(): Promise<boolean>;
+    /**
+     * Convert security event to Splunk HEC format
+     */
+    private toHECEvent;
+    /**
+     * Build the event payload for Splunk
+     */
+    private buildEventPayload;
+    /**
+     * Get severity name from numeric value
+     */
+    private getSeverityName;
+    /**
+     * Mask sensitive parts of URL for logging
+     */
+    private maskUrl;
+}
+/**
+ * Create a Splunk connector
+ */
+export declare function createSplunkConnector(config: SplunkConnectorConfig): SplunkConnector;
+//# sourceMappingURL=splunk.d.ts.map

package/dist/security/siem/splunk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"splunk.d.ts","sourceRoot":"","sources":["../../../src/security/siem/splunk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,iBAAiB,EAA4B,MAAM,gBAAgB,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAyCnF;;;;;;;;GAQG;AACH,qBAAa,eAAgB,SAAQ,iBAAiB;IACpD,SAAgB,IAAI,YAAY;IAEhC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAyB;gBAE5C,MAAM,EAAE,qBAAqB;IAuBzC;;OAEG;cACa,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ1C;;OAEG;cACa,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7C;;OAEG;cACa,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAiCpE;;OAEG;YACW,SAAS;IAkCvB;;OAEG;cACa,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC;IAsBjD;;OAEG;IACH,OAAO,CAAC,UAAU;IAoBlB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA2EzB;;OAEG;IACH,OAAO,CAAC,eAAe;IAiBvB;;OAEG;IACH,OAAO,CAAC,OAAO;CAQhB;AAMD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAEpF"}

package/dist/security/siem/splunk.js

@@ -0,0 +1,283 @@
+/**
+ * Splunk SIEM Connector
+ *
+ * HTTP Event Collector (HEC) integration for Splunk:
+ * - Batch event sending
+ * - Index and sourcetype configuration
+ * - Token-based authentication
+ * - Retry with exponential backoff
+ *
+ * @packageDocumentation
+ * @module security/siem/splunk
+ */
+import { createLogger } from '../../common/logger.js';
+import { BaseSIEMConnector, registerConnectorFactory } from './connector.js';
+const logger = createLogger({ component: 'siem-splunk' });
+// =============================================================================
+// Splunk Connector
+// =============================================================================
+/**
+ * Splunk connector using HTTP Event Collector (HEC)
+ *
+ * Features:
+ * - Batch event sending for efficiency
+ * - Configurable index, sourcetype, source
+ * - Token-based authentication
+ * - Retry with exponential backoff
+ */
+export class SplunkConnector extends BaseSIEMConnector {
+    type = 'splunk';
+    hecUrl;
+    token;
+    index;
+    sourcetype;
+    source;
+    host;
+    verifySsl;
+    defaultFields;
+    constructor(config) {
+        super(config);
+        this.hecUrl = config.hecUrl.replace(/\/$/, '');
+        this.token = config.token;
+        this.index = config.index;
+        this.sourcetype = config.sourcetype ?? 'vorion:security';
+        this.source = config.source ?? 'vorion';
+        this.host = config.host;
+        this.verifySsl = config.verifySsl ?? true;
+        this.defaultFields = config.defaultFields;
+        logger.info({
+            name: this.name,
+            hecUrl: this.maskUrl(this.hecUrl),
+            index: this.index,
+            sourcetype: this.sourcetype,
+        }, 'SplunkConnector initialized');
+    }
+    /**
+     * Connect to Splunk (verify HEC endpoint is accessible)
+     */
+    async doConnect() {
+        // Verify HEC endpoint by checking health
+        const healthy = await this.doHealthCheck();
+        if (!healthy) {
+            throw new Error('Failed to connect to Splunk HEC endpoint');
+        }
+    }
+    /**
+     * Disconnect from Splunk (no-op for HTTP-based connection)
+     */
+    async doDisconnect() {
+        // HTTP-based connection, no persistent connection to close
+    }
+    /**
+     * Send events to Splunk via HEC
+     */
+    async doSend(events) {
+        const batches = this.splitIntoBatches(events);
+        let totalSent = 0;
+        let totalFailed = 0;
+        const failedIds = [];
+        for (const batch of batches) {
+            try {
+                const result = await this.sendBatch(batch);
+                totalSent += result.eventsSent;
+                totalFailed += result.eventsFailed;
+                if (result.failedEventIds) {
+                    failedIds.push(...result.failedEventIds);
+                }
+            }
+            catch (error) {
+                totalFailed += batch.length;
+                failedIds.push(...batch.map((e) => e.id));
+                this.logger.error({ error, batchSize: batch.length }, 'Failed to send batch to Splunk');
+            }
+        }
+        return {
+            success: totalFailed === 0,
+            eventsSent: totalSent,
+            eventsFailed: totalFailed,
+            durationMs: 0, // Will be set by parent
+            failedEventIds: failedIds.length > 0 ? failedIds : undefined,
+        };
+    }
+    /**
+     * Send a single batch to Splunk
+     */
+    async sendBatch(events) {
+        const hecEvents = events.map((event) => this.toHECEvent(event));
+        // HEC accepts newline-delimited JSON
+        const body = hecEvents.map((e) => JSON.stringify(e)).join('\n');
+        const response = await this.httpRequest({
+            url: `${this.hecUrl}/services/collector/event`,
+            method: 'POST',
+            headers: {
+                Authorization: `Splunk ${this.token}`,
+                'Content-Type': 'application/json',
+            },
+            body,
+        });
+        if (!response.ok) {
+            throw new Error(`Splunk HEC error: ${response.status} - ${response.text}`);
+        }
+        const result = response.data;
+        if (result.code !== 0) {
+            throw new Error(`Splunk HEC error: ${result.text} (code: ${result.code})`);
+        }
+        return {
+            success: true,
+            eventsSent: events.length,
+            eventsFailed: 0,
+            durationMs: 0,
+            response: result,
+        };
+    }
+    /**
+     * Health check - verify HEC endpoint is accessible
+     */
+    async doHealthCheck() {
+        try {
+            // Use HEC health endpoint
+            const response = await this.httpRequest({
+                url: `${this.hecUrl}/services/collector/health`,
+                method: 'GET',
+                headers: {
+                    Authorization: `Splunk ${this.token}`,
+                },
+                timeout: 5000,
+            });
+            return response.ok;
+        }
+        catch (error) {
+            this.logger.warn({ error: error.message }, 'Splunk health check failed');
+            return false;
+        }
+    }
+    /**
+     * Convert security event to Splunk HEC format
+     */
+    toHECEvent(event) {
+        const hecEvent = {
+            time: Math.floor(event.timestamp.getTime() / 1000),
+            host: this.host,
+            source: this.source,
+            sourcetype: this.sourcetype,
+            event: this.buildEventPayload(event),
+        };
+        if (this.index) {
+            hecEvent.index = this.index;
+        }
+        if (this.defaultFields) {
+            hecEvent.fields = { ...this.defaultFields };
+        }
+        return hecEvent;
+    }
+    /**
+     * Build the event payload for Splunk
+     */
+    buildEventPayload(event) {
+        return {
+            event_id: event.id,
+            event_type: event.eventType,
+            category: event.category,
+            severity: event.severity,
+            severity_name: this.getSeverityName(event.severity),
+            outcome: event.outcome,
+            message: event.message,
+            description: event.description,
+            // Source info
+            src_ip: event.sourceIp,
+            src_port: event.sourcePort,
+            src_host: event.sourceHost,
+            src_mac: event.sourceMac,
+            // Destination info
+            dest_ip: event.destinationIp,
+            dest_port: event.destinationPort,
+            dest_host: event.destinationHost,
+            dest_mac: event.destinationMac,
+            // Network info
+            protocol: event.protocol,
+            http_method: event.httpMethod,
+            http_url: event.httpUrl,
+            http_status: event.httpStatusCode,
+            user_agent: event.userAgent,
+            request_id: event.requestId,
+            // Process info
+            process_name: event.processName,
+            process_id: event.processId,
+            file_path: event.filePath,
+            file_hash: event.fileHash,
+            // User context
+            user_id: event.user?.userId,
+            username: event.user?.username,
+            user_email: event.user?.email,
+            user_roles: event.user?.roles?.join(','),
+            tenant_id: event.user?.tenantId,
+            tenant_name: event.user?.tenantName,
+            privileged_user: event.user?.privileged,
+            // Geo context
+            geo_country: event.geo?.country,
+            geo_country_code: event.geo?.countryCode,
+            geo_city: event.geo?.city,
+            geo_region: event.geo?.region,
+            geo_lat: event.geo?.latitude,
+            geo_lon: event.geo?.longitude,
+            // Threat context
+            threat_indicator: event.threat?.indicator,
+            threat_type: event.threat?.threatType,
+            threat_confidence: event.threat?.confidence,
+            threat_source: event.threat?.source,
+            mitre_attack: event.threat?.mitreAttack?.join(','),
+            // Source system
+            source_app: event.source,
+            source_component: event.component,
+            source_version: event.version,
+            environment: event.environment,
+            // Tags
+            tags: event.tags,
+            // Custom fields
+            ...event.customFields,
+        };
+    }
+    /**
+     * Get severity name from numeric value
+     */
+    getSeverityName(severity) {
+        switch (severity) {
+            case 0:
+                return 'unknown';
+            case 1:
+                return 'low';
+            case 4:
+                return 'medium';
+            case 7:
+                return 'high';
+            case 10:
+                return 'critical';
+            default:
+                return 'unknown';
+        }
+    }
+    /**
+     * Mask sensitive parts of URL for logging
+     */
+    maskUrl(url) {
+        try {
+            const parsed = new URL(url);
+            return `${parsed.protocol}//${parsed.host}${parsed.pathname}`;
+        }
+        catch {
+            return '[invalid url]';
+        }
+    }
+}
+// =============================================================================
+// Factory Registration
+// =============================================================================
+/**
+ * Create a Splunk connector
+ */
+export function createSplunkConnector(config) {
+    return new SplunkConnector(config);
+}
+// Register the factory
+registerConnectorFactory('splunk', (config) => createSplunkConnector(config));
+//# sourceMappingURL=splunk.js.map

package/dist/security/siem/splunk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"splunk.js","sourceRoot":"","sources":["../../../src/security/siem/splunk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAG7E,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;AAmC1D,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAgB,SAAQ,iBAAiB;IACpC,IAAI,GAAG,QAAQ,CAAC;IAEf,MAAM,CAAS;IACf,KAAK,CAAS;IACd,KAAK,CAAU;IACf,UAAU,CAAU;IACpB,MAAM,CAAU;IAChB,IAAI,CAAU;IACd,SAAS,CAAU;IACnB,aAAa,CAA0B;IAExD,YAAY,MAA6B;QACvC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEd,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,iBAAiB,CAAC;QACzD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;QAC1C,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAE1C,MAAM,CAAC,IAAI,CACT;YACE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,SAAS;QACvB,yCAAyC;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,YAAY;QAC1B,2DAA2D;IAC7D,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,MAAM,CAAC,MAAuB;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC3C,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC;gBAC/B,WAAW,IAAI,MAAM,CAAC,YAAY,CAAC;gBACnC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC1B,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;gBAC5B,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,EAClC,gCAAgC,CACjC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,WAAW,KAAK,CAAC;YAC1B,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,CAAC,EAAE,wBAAwB;YACvC,cAAc,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CAAC,MAAuB;QAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAEhE,qCAAqC;QACrC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAoB;YACzD,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,2BAA2B;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;gBACrC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,MAAM,CAAC,MAAM;YACzB,YAAY,EAAE,CAAC;YACf,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,MAAM;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,aAAa;QAC3B,IAAI,CAAC;YACH,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAqB;gBAC1D,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,4BAA4B;gBAC/C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;iBACtC;gBACD,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,EACnC,4BAA4B,CAC7B,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,KAAoB;QACrC,MAAM,QAAQ,GAAmB;YAC/B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;YAClD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;SACrC,CAAC;QAEF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC9B,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,QAAQ,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,KAAoB;QAC5C,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC;YACnD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAE9B,cAAc;YACd,MAAM,EAAE,KAAK,CAAC,QAAQ;YACtB,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,OAAO,EAAE,KAAK,CAAC,SAAS;YAExB,mBAAmB;YACnB,OAAO,EAAE,KAAK,CAAC,aAAa;YAC5B,SAAS,EAAE,KAAK,CAAC,eAAe;YAChC,SAAS,EAAE,KAAK,CAAC,eAAe;YAChC,QAAQ,EAAE,KAAK,CAAC,cAAc;YAE9B,eAAe;YACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,WAAW,EAAE,KAAK,CAAC,cAAc;YACjC,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,UAAU,EAAE,KAAK,CAAC,SAAS;YAE3B,eAAe;YACf,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,SAAS,EAAE,KAAK,CAAC,QAAQ;YAEzB,eAAe;YACf,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM;YAC3B,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ;YAC9B,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK;YAC7B,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;YACxC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ;YAC/B,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU;YACnC,eAAe,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU;YAEvC,cAAc;YACd,WAAW,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO;YAC/B,gBAAgB,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW;YACxC,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI;YACzB,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM;YAC7B,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ;YAC5B,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS;YAE7B,iBAAiB;YACjB,gBAAgB,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS;YACzC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU;YACrC,iBAAiB,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU;YAC3C,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM;YACnC,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC;YAElD,gBAAgB;YAChB,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,gBAAgB,EAAE,KAAK,CAAC,SAAS;YACjC,cAAc,EAAE,KAAK,CAAC,OAAO;YAC7B,WAAW,EAAE,KAAK,CAAC,WAAW;YAE9B,OAAO;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAEhB,gBAAgB;YAChB,GAAG,KAAK,CAAC,YAAY;SACtB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,QAAgB;QACtC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,CAAC;gBACJ,OAAO,SAAS,CAAC;YACnB,KAAK,CAAC;gBACJ,OAAO,KAAK,CAAC;YACf,KAAK,CAAC;gBACJ,OAAO,QAAQ,CAAC;YAClB,KAAK,CAAC;gBACJ,OAAO,MAAM,CAAC;YAChB,KAAK,EAAE;gBACL,OAAO,UAAU,CAAC;YACpB;gBACE,OAAO,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,GAAW;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;CACF;AAED,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,uBAAuB;AACvB,wBAAwB,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAC5C,qBAAqB,CAAC,MAA+B,CAAC,CACvD,CAAC"}