@vorionsys/security 1.0.0

package/dist/compliance/reports.d.ts

@@ -0,0 +1,141 @@
+/**
+ * Compliance Report Generation
+ *
+ * Generates compliance reports in various formats for SOC 2, NIST 800-53,
+ * and other supported frameworks. Supports JSON, PDF, and HTML output.
+ *
+ * @packageDocumentation
+ */
+import { z } from 'zod';
+import type { ComplianceReport, ControlAssessment, Finding, Evidence, ComplianceFramework } from './types.js';
+/**
+ * Options for generating compliance reports
+ */
+export interface ReportGenerationOptions {
+    /** Report format */
+    format: 'json' | 'pdf' | 'html';
+    /** Include raw evidence in report */
+    includeRawEvidence?: boolean;
+    /** Include automated test results */
+    includeTestResults?: boolean;
+    /** Include recommendations */
+    includeRecommendations?: boolean;
+    /** Report preparer name */
+    preparedBy?: string;
+    /** Report reviewer name */
+    reviewedBy?: string;
+    /** Custom metadata */
+    metadata?: Record<string, unknown>;
+}
+export declare const reportGenerationOptionsSchema: z.ZodObject<{
+    format: z.ZodEnum<["json", "pdf", "html"]>;
+    includeRawEvidence: z.ZodOptional<z.ZodBoolean>;
+    includeTestResults: z.ZodOptional<z.ZodBoolean>;
+    includeRecommendations: z.ZodOptional<z.ZodBoolean>;
+    preparedBy: z.ZodOptional<z.ZodString>;
+    reviewedBy: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    metadata?: Record<string, unknown>;
+    reviewedBy?: string;
+    format?: "json" | "html" | "pdf";
+    preparedBy?: string;
+    includeRawEvidence?: boolean;
+    includeTestResults?: boolean;
+    includeRecommendations?: boolean;
+}, {
+    metadata?: Record<string, unknown>;
+    reviewedBy?: string;
+    format?: "json" | "html" | "pdf";
+    preparedBy?: string;
+    includeRawEvidence?: boolean;
+    includeTestResults?: boolean;
+    includeRecommendations?: boolean;
+}>;
+/**
+ * Compliance report generator
+ */
+export declare class ReportGenerator {
+    /**
+     * Generate a compliance report for a framework
+     */
+    generateReport(framework: ComplianceFramework, assessments: ControlAssessment[], findings: Finding[], period: {
+        start: Date;
+        end: Date;
+    }, options: ReportGenerationOptions): Promise<ComplianceReport>;
+    /**
+     * Calculate summary statistics from assessments
+     */
+    private calculateSummary;
+    /**
+     * Generate recommendations based on assessments and findings
+     */
+    private generateRecommendations;
+    /**
+     * Get severity weight for sorting
+     */
+    private severityWeight;
+    /**
+     * Format report as JSON string
+     */
+    formatAsJson(report: ComplianceReport): string;
+    /**
+     * Format report as HTML
+     */
+    formatAsHtml(report: ComplianceReport): string;
+}
+/**
+ * Evidence collector for automated evidence gathering
+ */
+export declare class EvidenceCollector {
+    private hashAlgorithm;
+    constructor(hashAlgorithm?: 'sha256' | 'sha384' | 'sha512');
+    /**
+     * Collect evidence from audit logs
+     */
+    collectLogEvidence(title: string, description: string, source: string, content: string): Promise<Evidence>;
+    /**
+     * Collect evidence from configuration
+     */
+    collectConfigEvidence(title: string, description: string, source: string, content: string): Promise<Evidence>;
+    /**
+     * Collect evidence from API response
+     */
+    collectApiEvidence(title: string, description: string, source: string, response: unknown): Promise<Evidence>;
+    /**
+     * Collect evidence from test results
+     */
+    collectTestEvidence(title: string, description: string, source: string, testResult: {
+        passed: boolean;
+        details: string;
+    }): Promise<Evidence>;
+    /**
+     * Hash content for integrity verification
+     */
+    private hashContent;
+    /**
+     * Verify evidence integrity
+     */
+    verifyEvidenceIntegrity(evidence: Evidence): boolean;
+}
+/**
+ * Finding generator for identifying compliance gaps
+ */
+export declare class FindingGenerator {
+    /**
+     * Generate findings from control assessments
+     */
+    generateFindings(assessments: ControlAssessment[], framework: ComplianceFramework): Finding[];
+    /**
+     * Create a finding
+     */
+    private createFinding;
+    /**
+     * Determine severity based on gaps
+     */
+    private determineSeverityFromGaps;
+}
+export declare const reportGenerator: ReportGenerator;
+export declare const evidenceCollector: EvidenceCollector;
+export declare const findingGenerator: FindingGenerator;
+//# sourceMappingURL=reports.d.ts.map

package/dist/compliance/reports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reports.d.ts","sourceRoot":"","sources":["../../src/compliance/reports.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EACjB,OAAO,EACP,QAAQ,EAER,mBAAmB,EAIpB,MAAM,YAAY,CAAC;AAYpB;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,oBAAoB;IACpB,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;IAChC,qCAAqC;IACrC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,qCAAqC;IACrC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,8BAA8B;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,2BAA2B;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;EAQxC,CAAC;AAMH;;GAEG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IACG,cAAc,CAClB,SAAS,EAAE,mBAAmB,EAC9B,WAAW,EAAE,iBAAiB,EAAE,EAChC,QAAQ,EAAE,OAAO,EAAE,EACnB,MAAM,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,IAAI,CAAA;KAAE,EAClC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IAmD5B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA8CxB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA4E/B;;OAEG;IACH,OAAO,CAAC,cAAc;IAWtB;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM;IAI9C;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM;CAuJ/C;AAMD;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,aAAa,CAAiC;gBAE1C,aAAa,GAAE,QAAQ,GAAG,QAAQ,GAAG,QAAmB;IAIpE;;OAEG;IACG,kBAAkB,CACtB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,QAAQ,CAAC;IAepB;;OAEG;IACG,qBAAqB,CACzB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,QAAQ,CAAC;IAepB;;OAEG;IACG,kBAAkB,CACtB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,QAAQ,CAAC;IAiBpB;;OAEG;IACG,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC,QAAQ,CAAC;IAoBpB;;OAEG;IACH,OAAO,CAAC,WAAW;IAInB;;OAEG;IACH,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO;CAQrD;AAMD;;GAEG;AACH,qBAAa,gBAAgB;IAC3B;;OAEG;IACH,gBAAgB,CACd,WAAW,EAAE,iBAAiB,EAAE,EAChC,SAAS,EAAE,mBAAmB,GAC7B,OAAO,EAAE;IAyDZ;;OAEG;IACH,OAAO,CAAC,aAAa;IAqBrB;;OAEG;IACH,OAAO,CAAC,yBAAyB;CA6BlC;AAMD,eAAO,MAAM,eAAe,iBAAwB,CAAC;AACrD,eAAO,MAAM,iBAAiB,mBAA0B,CAAC;AACzD,eAAO,MAAM,gBAAgB,kBAAyB,CAAC"}

package/dist/compliance/reports.js

@@ -0,0 +1,495 @@
+/**
+ * Compliance Report Generation
+ *
+ * Generates compliance reports in various formats for SOC 2, NIST 800-53,
+ * and other supported frameworks. Supports JSON, PDF, and HTML output.
+ *
+ * @packageDocumentation
+ */
+import { createHash, randomUUID } from 'crypto';
+import { z } from 'zod';
+import { createLogger } from '../common/logger.js';
+import { complianceReportSchema, } from './types.js';
+const logger = createLogger({ component: 'compliance-reports' });
+export const reportGenerationOptionsSchema = z.object({
+    format: z.enum(['json', 'pdf', 'html']),
+    includeRawEvidence: z.boolean().optional(),
+    includeTestResults: z.boolean().optional(),
+    includeRecommendations: z.boolean().optional(),
+    preparedBy: z.string().optional(),
+    reviewedBy: z.string().optional(),
+    metadata: z.record(z.unknown()).optional(),
+});
+// =============================================================================
+// REPORT GENERATOR
+// =============================================================================
+/**
+ * Compliance report generator
+ */
+export class ReportGenerator {
+    /**
+     * Generate a compliance report for a framework
+     */
+    async generateReport(framework, assessments, findings, period, options) {
+        logger.info({ frameworkId: framework.id, controlCount: assessments.length }, 'Generating compliance report');
+        const summary = this.calculateSummary(assessments);
+        const recommendations = options.includeRecommendations
+            ? this.generateRecommendations(framework, assessments, findings)
+            : [];
+        const report = {
+            id: randomUUID(),
+            framework: framework.name,
+            frameworkVersion: framework.version,
+            generatedAt: new Date(),
+            period,
+            summary,
+            controls: assessments,
+            findings: findings.sort((a, b) => this.severityWeight(b.severity) - this.severityWeight(a.severity)),
+            recommendations,
+            preparedBy: options.preparedBy,
+            reviewedBy: options.reviewedBy,
+            metadata: {
+                ...options.metadata,
+                frameworkId: framework.id,
+                generationOptions: {
+                    format: options.format,
+                    includeRawEvidence: options.includeRawEvidence,
+                    includeTestResults: options.includeTestResults,
+                },
+            },
+        };
+        // Validate report structure
+        complianceReportSchema.parse(report);
+        logger.info({
+            reportId: report.id,
+            compliancePercentage: report.summary.compliancePercentage,
+            findingsCount: report.findings.length,
+        }, 'Compliance report generated');
+        return report;
+    }
+    /**
+     * Calculate summary statistics from assessments
+     */
+    calculateSummary(assessments) {
+        const statusCounts = {
+            implemented: 0,
+            'partially-implemented': 0,
+            planned: 0,
+            'not-applicable': 0,
+        };
+        let automatedTestsPassed = 0;
+        let automatedTestsFailed = 0;
+        for (const assessment of assessments) {
+            statusCounts[assessment.status]++;
+            if (assessment.automatedTestPassed !== undefined) {
+                if (assessment.automatedTestPassed) {
+                    automatedTestsPassed++;
+                }
+                else {
+                    automatedTestsFailed++;
+                }
+            }
+        }
+        const totalControls = assessments.length;
+        const applicableControls = totalControls - statusCounts['not-applicable'];
+        const compliancePercentage = applicableControls > 0
+            ? Math.round(((statusCounts.implemented + statusCounts['partially-implemented'] * 0.5) /
+                applicableControls) *
+                100)
+            : 100;
+        return {
+            totalControls,
+            implemented: statusCounts.implemented,
+            partiallyImplemented: statusCounts['partially-implemented'],
+            planned: statusCounts.planned,
+            notApplicable: statusCounts['not-applicable'],
+            automatedTestsPassed,
+            automatedTestsFailed,
+            compliancePercentage,
+        };
+    }
+    /**
+     * Generate recommendations based on assessments and findings
+     */
+    generateRecommendations(framework, assessments, findings) {
+        const recommendations = [];
+        // Priority 1: Address critical and high severity findings
+        const criticalFindings = findings.filter((f) => f.severity === 'critical' && f.status !== 'remediated');
+        const highFindings = findings.filter((f) => f.severity === 'high' && f.status !== 'remediated');
+        if (criticalFindings.length > 0) {
+            recommendations.push(`Immediately address ${criticalFindings.length} critical finding(s): ${criticalFindings.map((f) => f.title).join(', ')}`);
+        }
+        if (highFindings.length > 0) {
+            recommendations.push(`Prioritize remediation of ${highFindings.length} high severity finding(s) within 30 days`);
+        }
+        // Priority 2: Complete partially implemented controls
+        const partialControls = assessments.filter((a) => a.status === 'partially-implemented');
+        if (partialControls.length > 0) {
+            recommendations.push(`Complete implementation of ${partialControls.length} partially implemented control(s) to achieve full compliance`);
+        }
+        // Priority 3: Address planned controls
+        const plannedControls = assessments.filter((a) => a.status === 'planned');
+        if (plannedControls.length > 0) {
+            recommendations.push(`Accelerate implementation of ${plannedControls.length} planned control(s) according to risk prioritization`);
+        }
+        // Priority 4: Improve automated testing coverage
+        const controlsWithoutTests = assessments.filter((a) => a.automatedTestPassed === undefined && a.status !== 'not-applicable');
+        if (controlsWithoutTests.length > 5) {
+            recommendations.push(`Expand automated testing coverage to ${controlsWithoutTests.length} controls currently without automated verification`);
+        }
+        // Priority 5: Evidence gaps
+        const controlsWithLowEvidence = assessments.filter((a) => a.evidence.length < 2 && a.status === 'implemented');
+        if (controlsWithLowEvidence.length > 0) {
+            recommendations.push(`Strengthen evidence collection for ${controlsWithLowEvidence.length} implemented control(s) with limited documentation`);
+        }
+        // Priority 6: Failed automated tests
+        const failedTests = assessments.filter((a) => a.automatedTestPassed === false);
+        if (failedTests.length > 0) {
+            recommendations.push(`Investigate and remediate ${failedTests.length} control(s) with failing automated tests`);
+        }
+        return recommendations;
+    }
+    /**
+     * Get severity weight for sorting
+     */
+    severityWeight(severity) {
+        const weights = {
+            critical: 5,
+            high: 4,
+            medium: 3,
+            low: 2,
+            informational: 1,
+        };
+        return weights[severity];
+    }
+    /**
+     * Format report as JSON string
+     */
+    formatAsJson(report) {
+        return JSON.stringify(report, null, 2);
+    }
+    /**
+     * Format report as HTML
+     */
+    formatAsHtml(report) {
+        const statusColors = {
+            implemented: '#28a745',
+            'partially-implemented': '#ffc107',
+            planned: '#17a2b8',
+            'not-applicable': '#6c757d',
+        };
+        const severityColors = {
+            critical: '#dc3545',
+            high: '#fd7e14',
+            medium: '#ffc107',
+            low: '#17a2b8',
+            informational: '#6c757d',
+        };
+        const escapeHtml = (text) => {
+            return text
+                .replace(/&/g, '&amp;')
+                .replace(/</g, '&lt;')
+                .replace(/>/g, '&gt;')
+                .replace(/"/g, '&quot;')
+                .replace(/'/g, '&#039;');
+        };
+        return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Compliance Report - ${escapeHtml(report.framework)}</title>
+  <style>
+    body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; margin: 0; padding: 20px; background: #f5f5f5; }
+    .container { max-width: 1200px; margin: 0 auto; background: white; padding: 30px; border-radius: 8px; box-shadow: 0 2px 4px rgba(0,0,0,0.1); }
+    h1, h2, h3 { color: #333; }
+    .summary-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(150px, 1fr)); gap: 20px; margin: 20px 0; }
+    .summary-card { padding: 20px; background: #f8f9fa; border-radius: 8px; text-align: center; }
+    .summary-card .value { font-size: 2em; font-weight: bold; color: #333; }
+    .summary-card .label { color: #666; font-size: 0.9em; }
+    .compliance-meter { height: 24px; background: #e9ecef; border-radius: 12px; overflow: hidden; margin: 20px 0; }
+    .compliance-fill { height: 100%; background: linear-gradient(90deg, #28a745, #20c997); transition: width 0.5s; }
+    table { width: 100%; border-collapse: collapse; margin: 20px 0; }
+    th, td { padding: 12px; text-align: left; border-bottom: 1px solid #dee2e6; }
+    th { background: #f8f9fa; font-weight: 600; }
+    .status-badge { display: inline-block; padding: 4px 12px; border-radius: 12px; font-size: 0.85em; color: white; }
+    .finding { margin: 15px 0; padding: 15px; border-left: 4px solid; background: #f8f9fa; }
+    .recommendation { margin: 10px 0; padding: 10px 15px; background: #e7f5ff; border-radius: 4px; }
+    .meta-info { color: #666; font-size: 0.9em; margin-top: 30px; padding-top: 20px; border-top: 1px solid #dee2e6; }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <h1>Compliance Report</h1>
+    <h2>${escapeHtml(report.framework)} ${escapeHtml(report.frameworkVersion)}</h2>
+    <p>Assessment Period: ${report.period.start.toLocaleDateString()} - ${report.period.end.toLocaleDateString()}</p>
+
+    <h3>Summary</h3>
+    <div class="summary-grid">
+      <div class="summary-card">
+        <div class="value">${report.summary.totalControls}</div>
+        <div class="label">Total Controls</div>
+      </div>
+      <div class="summary-card">
+        <div class="value" style="color: #28a745">${report.summary.implemented}</div>
+        <div class="label">Implemented</div>
+      </div>
+      <div class="summary-card">
+        <div class="value" style="color: #ffc107">${report.summary.partiallyImplemented}</div>
+        <div class="label">Partially Implemented</div>
+      </div>
+      <div class="summary-card">
+        <div class="value" style="color: #17a2b8">${report.summary.planned}</div>
+        <div class="label">Planned</div>
+      </div>
+      <div class="summary-card">
+        <div class="value">${report.summary.compliancePercentage}%</div>
+        <div class="label">Compliance Score</div>
+      </div>
+    </div>
+
+    <div class="compliance-meter">
+      <div class="compliance-fill" style="width: ${report.summary.compliancePercentage}%"></div>
+    </div>
+
+    ${report.findings.length > 0
+            ? `
+    <h3>Findings (${report.findings.length})</h3>
+    ${report.findings
+                .map((f) => `
+      <div class="finding" style="border-color: ${severityColors[f.severity]}">
+        <strong>${escapeHtml(f.title)}</strong>
+        <span class="status-badge" style="background: ${severityColors[f.severity]}; margin-left: 10px;">${f.severity}</span>
+        <p>${escapeHtml(f.description)}</p>
+        <small>Status: ${f.status} | Related Controls: ${f.relatedControls.join(', ')}</small>
+      </div>
+    `)
+                .join('')}
+    `
+            : ''}
+
+    ${report.recommendations.length > 0
+            ? `
+    <h3>Recommendations</h3>
+    ${report.recommendations.map((r) => `<div class="recommendation">${escapeHtml(r)}</div>`).join('')}
+    `
+            : ''}
+
+    <h3>Control Assessments</h3>
+    <table>
+      <thead>
+        <tr>
+          <th>Control ID</th>
+          <th>Control Name</th>
+          <th>Status</th>
+          <th>Automated Test</th>
+          <th>Evidence Count</th>
+        </tr>
+      </thead>
+      <tbody>
+        ${report.controls
+            .map((c) => `
+          <tr>
+            <td>${escapeHtml(c.controlId)}</td>
+            <td>${escapeHtml(c.controlName)}</td>
+            <td><span class="status-badge" style="background: ${statusColors[c.status]}">${c.status}</span></td>
+            <td>${c.automatedTestPassed === undefined ? 'N/A' : c.automatedTestPassed ? 'Passed' : 'Failed'}</td>
+            <td>${c.evidence.length}</td>
+          </tr>
+        `)
+            .join('')}
+      </tbody>
+    </table>
+
+    <div class="meta-info">
+      <p>Report ID: ${report.id}</p>
+      <p>Generated: ${report.generatedAt.toISOString()}</p>
+      ${report.preparedBy ? `<p>Prepared by: ${escapeHtml(report.preparedBy)}</p>` : ''}
+      ${report.reviewedBy ? `<p>Reviewed by: ${escapeHtml(report.reviewedBy)}</p>` : ''}
+    </div>
+  </div>
+</body>
+</html>`;
+    }
+}
+// =============================================================================
+// EVIDENCE COLLECTOR
+// =============================================================================
+/**
+ * Evidence collector for automated evidence gathering
+ */
+export class EvidenceCollector {
+    hashAlgorithm;
+    constructor(hashAlgorithm = 'sha256') {
+        this.hashAlgorithm = hashAlgorithm;
+    }
+    /**
+     * Collect evidence from audit logs
+     */
+    async collectLogEvidence(title, description, source, content) {
+        logger.debug({ source, title }, 'Collecting log evidence');
+        return {
+            id: randomUUID(),
+            type: 'log',
+            title,
+            description,
+            source,
+            collectedAt: new Date(),
+            contentHash: this.hashContent(content),
+            content,
+        };
+    }
+    /**
+     * Collect evidence from configuration
+     */
+    async collectConfigEvidence(title, description, source, content) {
+        logger.debug({ source, title }, 'Collecting config evidence');
+        return {
+            id: randomUUID(),
+            type: 'config',
+            title,
+            description,
+            source,
+            collectedAt: new Date(),
+            contentHash: this.hashContent(content),
+            content,
+        };
+    }
+    /**
+     * Collect evidence from API response
+     */
+    async collectApiEvidence(title, description, source, response) {
+        logger.debug({ source, title }, 'Collecting API evidence');
+        const content = JSON.stringify(response, null, 2);
+        return {
+            id: randomUUID(),
+            type: 'api-response',
+            title,
+            description,
+            source,
+            collectedAt: new Date(),
+            contentHash: this.hashContent(content),
+            content,
+        };
+    }
+    /**
+     * Collect evidence from test results
+     */
+    async collectTestEvidence(title, description, source, testResult) {
+        logger.debug({ source, title, passed: testResult.passed }, 'Collecting test evidence');
+        const content = JSON.stringify(testResult, null, 2);
+        return {
+            id: randomUUID(),
+            type: 'test-result',
+            title,
+            description,
+            source,
+            collectedAt: new Date(),
+            contentHash: this.hashContent(content),
+            content,
+            metadata: {
+                passed: testResult.passed,
+            },
+        };
+    }
+    /**
+     * Hash content for integrity verification
+     */
+    hashContent(content) {
+        return createHash(this.hashAlgorithm).update(content).digest('hex');
+    }
+    /**
+     * Verify evidence integrity
+     */
+    verifyEvidenceIntegrity(evidence) {
+        if (!evidence.contentHash || !evidence.content) {
+            return true; // No hash to verify
+        }
+        const expectedHash = this.hashContent(evidence.content);
+        return evidence.contentHash === expectedHash;
+    }
+}
+// =============================================================================
+// FINDING GENERATOR
+// =============================================================================
+/**
+ * Finding generator for identifying compliance gaps
+ */
+export class FindingGenerator {
+    /**
+     * Generate findings from control assessments
+     */
+    generateFindings(assessments, framework) {
+        const findings = [];
+        for (const assessment of assessments) {
+            // Finding for failed automated tests
+            if (assessment.automatedTestPassed === false) {
+                findings.push(this.createFinding(`Automated test failure for ${assessment.controlId}`, `The automated compliance test for control ${assessment.controlId} (${assessment.controlName}) has failed. This indicates a potential control deficiency that requires investigation.`, 'high', [assessment.controlId], assessment.gaps));
+            }
+            // Finding for planned controls that should be implemented
+            if (assessment.status === 'planned') {
+                const control = framework.controls.find((c) => c.id === assessment.controlId);
+                if (control?.priority === 'P1') {
+                    findings.push(this.createFinding(`Priority 1 control not implemented: ${assessment.controlId}`, `Control ${assessment.controlId} (${assessment.controlName}) is marked as planned but is a Priority 1 control that should be implemented immediately.`, 'high', [assessment.controlId]));
+                }
+            }
+            // Finding for partially implemented controls
+            if (assessment.status === 'partially-implemented' && assessment.gaps) {
+                const severity = this.determineSeverityFromGaps(assessment.gaps);
+                findings.push(this.createFinding(`Partial implementation gaps in ${assessment.controlId}`, `Control ${assessment.controlId} (${assessment.controlName}) is only partially implemented. Gaps identified: ${assessment.gaps.join('; ')}`, severity, [assessment.controlId], assessment.gaps));
+            }
+            // Finding for insufficient evidence
+            if (assessment.status === 'implemented' &&
+                assessment.evidence.length === 0) {
+                findings.push(this.createFinding(`Missing evidence for ${assessment.controlId}`, `Control ${assessment.controlId} (${assessment.controlName}) is marked as implemented but has no supporting evidence documented.`, 'medium', [assessment.controlId]));
+            }
+        }
+        return findings;
+    }
+    /**
+     * Create a finding
+     */
+    createFinding(title, description, severity, relatedControls, gaps) {
+        return {
+            id: randomUUID(),
+            title,
+            description,
+            severity,
+            relatedControls,
+            identifiedAt: new Date(),
+            status: 'open',
+            remediationPlan: gaps
+                ? `Address the following gaps: ${gaps.join('; ')}`
+                : undefined,
+        };
+    }
+    /**
+     * Determine severity based on gaps
+     */
+    determineSeverityFromGaps(gaps) {
+        const gapText = gaps.join(' ').toLowerCase();
+        if (gapText.includes('critical') ||
+            gapText.includes('security breach') ||
+            gapText.includes('data exposure')) {
+            return 'critical';
+        }
+        if (gapText.includes('high risk') ||
+            gapText.includes('vulnerability') ||
+            gapText.includes('unauthorized')) {
+            return 'high';
+        }
+        if (gapText.includes('moderate') ||
+            gapText.includes('improvement') ||
+            gapText.includes('documentation')) {
+            return 'medium';
+        }
+        return 'low';
+    }
+}
+// =============================================================================
+// EXPORTS
+// =============================================================================
+export const reportGenerator = new ReportGenerator();
+export const evidenceCollector = new EvidenceCollector();
+export const findingGenerator = new FindingGenerator();
+//# sourceMappingURL=reports.js.map

package/dist/compliance/reports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reports.js","sourceRoot":"","sources":["../../src/compliance/reports.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAYnD,OAAO,EACL,sBAAsB,GAEvB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;AA0BjE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEH,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,eAAe;IAC1B;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,SAA8B,EAC9B,WAAgC,EAChC,QAAmB,EACnB,MAAkC,EAClC,OAAgC;QAEhC,MAAM,CAAC,IAAI,CACT,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,EAC/D,8BAA8B,CAC/B,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,eAAe,GAAG,OAAO,CAAC,sBAAsB;YACpD,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC;YAChE,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,MAAM,GAAqB;YAC/B,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,SAAS,CAAC,IAAI;YACzB,gBAAgB,EAAE,SAAS,CAAC,OAAO;YACnC,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,MAAM;YACN,OAAO;YACP,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CACrB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC5E;YACD,eAAe;YACf,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE;gBACR,GAAG,OAAO,CAAC,QAAQ;gBACnB,WAAW,EAAE,SAAS,CAAC,EAAE;gBACzB,iBAAiB,EAAE;oBACjB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;iBAC/C;aACF;SACF,CAAC;QAEF,4BAA4B;QAC5B,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAErC,MAAM,CAAC,IAAI,CACT;YACE,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,oBAAoB;YACzD,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;SACtC,EACD,6BAA6B,CAC9B,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,WAAgC;QACvD,MAAM,YAAY,GAAyC;YACzD,WAAW,EAAE,CAAC;YACd,uBAAuB,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;YACV,gBAAgB,EAAE,CAAC;SACpB,CAAC;QAEF,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAE7B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAElC,IAAI,UAAU,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBACjD,IAAI,UAAU,CAAC,mBAAmB,EAAE,CAAC;oBACnC,oBAAoB,EAAE,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,oBAAoB,EAAE,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC;QACzC,MAAM,kBAAkB,GAAG,aAAa,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,oBAAoB,GACxB,kBAAkB,GAAG,CAAC;YACpB,CAAC,CAAC,IAAI,CAAC,KAAK,CACR,CAAC,CAAC,YAAY,CAAC,WAAW,GAAG,YAAY,CAAC,uBAAuB,CAAC,GAAG,GAAG,CAAC;gBACvE,kBAAkB,CAAC;gBACnB,GAAG,CACN;YACH,CAAC,CAAC,GAAG,CAAC;QAEV,OAAO;YACL,aAAa;YACb,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,oBAAoB,EAAE,YAAY,CAAC,uBAAuB,CAAC;YAC3D,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,aAAa,EAAE,YAAY,CAAC,gBAAgB,CAAC;YAC7C,oBAAoB;YACpB,oBAAoB;YACpB,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,uBAAuB,CAC7B,SAA8B,EAC9B,WAAgC,EAChC,QAAmB;QAEnB,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,0DAA0D;QAC1D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,CAC9D,CAAC;QACF,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,CAC1D,CAAC;QAEF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,eAAe,CAAC,IAAI,CAClB,uBAAuB,gBAAgB,CAAC,MAAM,yBAAyB,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzH,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,eAAe,CAAC,IAAI,CAClB,6BAA6B,YAAY,CAAC,MAAM,0CAA0C,CAC3F,CAAC;QACJ,CAAC;QAED,sDAAsD;QACtD,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,uBAAuB,CAC5C,CAAC;QACF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,eAAe,CAAC,IAAI,CAClB,8BAA8B,eAAe,CAAC,MAAM,8DAA8D,CACnH,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAC1E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,eAAe,CAAC,IAAI,CAClB,gCAAgC,eAAe,CAAC,MAAM,sDAAsD,CAC7G,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,MAAM,oBAAoB,GAAG,WAAW,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAC5E,CAAC;QACF,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,eAAe,CAAC,IAAI,CAClB,wCAAwC,oBAAoB,CAAC,MAAM,oDAAoD,CACxH,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,uBAAuB,GAAG,WAAW,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa,CAC3D,CAAC;QACF,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,eAAe,CAAC,IAAI,CAClB,sCAAsC,uBAAuB,CAAC,MAAM,oDAAoD,CACzH,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,KAAK,KAAK,CAAC,CAAC;QAC/E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,eAAe,CAAC,IAAI,CAClB,6BAA6B,WAAW,CAAC,MAAM,0CAA0C,CAC1F,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,QAAyB;QAC9C,MAAM,OAAO,GAAoC;YAC/C,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;YACT,GAAG,EAAE,CAAC;YACN,aAAa,EAAE,CAAC;SACjB,CAAC;QACF,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAwB;QACnC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAwB;QACnC,MAAM,YAAY,GAAyC;YACzD,WAAW,EAAE,SAAS;YACtB,uBAAuB,EAAE,SAAS;YAClC,OAAO,EAAE,SAAS;YAClB,gBAAgB,EAAE,SAAS;SAC5B,CAAC;QAEF,MAAM,cAAc,GAAoC;YACtD,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS;YACd,aAAa,EAAE,SAAS;SACzB,CAAC;QAEF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE;YAC1C,OAAO,IAAI;iBACR,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;iBACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;iBACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;iBACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;iBACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7B,CAAC,CAAC;QAEF,OAAO;;;;;+BAKoB,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;;;;;;;;;UAuBjD,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC;4BACjD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE;;;;;6BAKnF,MAAM,CAAC,OAAO,CAAC,aAAa;;;;oDAIL,MAAM,CAAC,OAAO,CAAC,WAAW;;;;oDAI1B,MAAM,CAAC,OAAO,CAAC,oBAAoB;;;;oDAInC,MAAM,CAAC,OAAO,CAAC,OAAO;;;;6BAI7C,MAAM,CAAC,OAAO,CAAC,oBAAoB;;;;;;mDAMb,MAAM,CAAC,OAAO,CAAC,oBAAoB;;;MAIhF,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YACxB,CAAC,CAAC;oBACU,MAAM,CAAC,QAAQ,CAAC,MAAM;MACpC,MAAM,CAAC,QAAQ;iBACd,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CAAC;kDACmC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;kBAC1D,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;wDACmB,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,QAAQ;aACxG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;yBACb,CAAC,CAAC,MAAM,wBAAwB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;;KAEhF,CACE;iBACA,IAAI,CAAC,EAAE,CAAC;KACV;YACG,CAAC,CAAC,EACN;;MAGE,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;YAC/B,CAAC,CAAC;;MAEJ,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;KACjG;YACG,CAAC,CAAC,EACN;;;;;;;;;;;;;;UAcM,MAAM,CAAC,QAAQ;aACd,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CAAC;;kBAED,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;kBACvB,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;gEACqB,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM;kBACjF,CAAC,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;kBACzF,CAAC,CAAC,QAAQ,CAAC,MAAM;;SAE1B,CACE;aACA,IAAI,CAAC,EAAE,CAAC;;;;;sBAKG,MAAM,CAAC,EAAE;sBACT,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE;QAC9C,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QAC/E,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;;;;QAI/E,CAAC;IACP,CAAC;CACF;AAED,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACpB,aAAa,CAAiC;IAEtD,YAAY,gBAAgD,QAAQ;QAClE,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,KAAa,EACb,WAAmB,EACnB,MAAc,EACd,OAAe;QAEf,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAE3D,OAAO;YACL,EAAE,EAAE,UAAU,EAAE;YAChB,IAAI,EAAE,KAAK;YACX,KAAK;YACL,WAAW;YACX,MAAM;YACN,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YACtC,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,KAAa,EACb,WAAmB,EACnB,MAAc,EACd,OAAe;QAEf,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAE9D,OAAO;YACL,EAAE,EAAE,UAAU,EAAE;YAChB,IAAI,EAAE,QAAQ;YACd,KAAK;YACL,WAAW;YACX,MAAM;YACN,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YACtC,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,KAAa,EACb,WAAmB,EACnB,MAAc,EACd,QAAiB;QAEjB,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAE3D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAElD,OAAO;YACL,EAAE,EAAE,UAAU,EAAE;YAChB,IAAI,EAAE,cAAc;YACpB,KAAK;YACL,WAAW;YACX,MAAM;YACN,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YACtC,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,KAAa,EACb,WAAmB,EACnB,MAAc,EACd,UAAgD;QAEhD,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAEvF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEpD,OAAO;YACL,EAAE,EAAE,UAAU,EAAE;YAChB,IAAI,EAAE,aAAa;YACnB,KAAK;YACL,WAAW;YACX,MAAM;YACN,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YACtC,OAAO;YACP,QAAQ,EAAE;gBACR,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAe;QACjC,OAAO,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,QAAkB;QACxC,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,CAAC,oBAAoB;QACnC,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,QAAQ,CAAC,WAAW,KAAK,YAAY,CAAC;IAC/C,CAAC;CACF;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAC3B;;OAEG;IACH,gBAAgB,CACd,WAAgC,EAChC,SAA8B;QAE9B,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,qCAAqC;YACrC,IAAI,UAAU,CAAC,mBAAmB,KAAK,KAAK,EAAE,CAAC;gBAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAC9B,8BAA8B,UAAU,CAAC,SAAS,EAAE,EACpD,6CAA6C,UAAU,CAAC,SAAS,KAAK,UAAU,CAAC,WAAW,0FAA0F,EACtL,MAAM,EACN,CAAC,UAAU,CAAC,SAAS,CAAC,EACtB,UAAU,CAAC,IAAI,CAChB,CAAC,CAAC;YACL,CAAC;YAED,0DAA0D;YAC1D,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC9E,IAAI,OAAO,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAC9B,uCAAuC,UAAU,CAAC,SAAS,EAAE,EAC7D,WAAW,UAAU,CAAC,SAAS,KAAK,UAAU,CAAC,WAAW,4FAA4F,EACtJ,MAAM,EACN,CAAC,UAAU,CAAC,SAAS,CAAC,CACvB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,6CAA6C;YAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,uBAAuB,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBACjE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAC9B,kCAAkC,UAAU,CAAC,SAAS,EAAE,EACxD,WAAW,UAAU,CAAC,SAAS,KAAK,UAAU,CAAC,WAAW,qDAAqD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC3I,QAAQ,EACR,CAAC,UAAU,CAAC,SAAS,CAAC,EACtB,UAAU,CAAC,IAAI,CAChB,CAAC,CAAC;YACL,CAAC;YAED,oCAAoC;YACpC,IACE,UAAU,CAAC,MAAM,KAAK,aAAa;gBACnC,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAChC,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAC9B,wBAAwB,UAAU,CAAC,SAAS,EAAE,EAC9C,WAAW,UAAU,CAAC,SAAS,KAAK,UAAU,CAAC,WAAW,uEAAuE,EACjI,QAAQ,EACR,CAAC,UAAU,CAAC,SAAS,CAAC,CACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,aAAa,CACnB,KAAa,EACb,WAAmB,EACnB,QAAyB,EACzB,eAAyB,EACzB,IAAe;QAEf,OAAO;YACL,EAAE,EAAE,UAAU,EAAE;YAChB,KAAK;YACL,WAAW;YACX,QAAQ;YACR,eAAe;YACf,YAAY,EAAE,IAAI,IAAI,EAAE;YACxB,MAAM,EAAE,MAAM;YACd,eAAe,EAAE,IAAI;gBACnB,CAAC,CAAC,+BAA+B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAClD,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,IAAc;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAE7C,IACE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EACjC,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IACE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC7B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAChC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IACE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC5B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EACjC,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AACrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AACzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,EAAE,CAAC"}