@vorionsys/security 1.0.0

package/dist/security/alerting/channels/base.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Base Alert Channel
+ *
+ * Abstract base class for all alert channels providing common functionality:
+ * - Exponential backoff retry logic
+ * - Error handling and logging
+ * - Delivery result formatting
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels/base
+ */
+import { createLogger } from '../../../common/logger.js';
+import { type SecurityAlert, type AlertDeliveryResult, type AlertChannel } from '../types.js';
+/**
+ * Base configuration for all alert channels
+ */
+export interface BaseChannelConfig {
+    /** Timeout for requests in ms */
+    timeout?: number;
+    /** Maximum retry attempts */
+    maxRetries?: number;
+    /** Maximum backoff delay in ms */
+    maxBackoffDelay?: number;
+    /** Base delay for exponential backoff in ms */
+    baseBackoffDelay?: number;
+}
+/**
+ * Internal result from sendInternal implementations
+ */
+export interface SendInternalResult {
+    /** Message ID if available */
+    messageId?: string;
+}
+/**
+ * Abstract base class for all alert channels
+ *
+ * Provides common retry logic, error handling, and result formatting.
+ * Subclasses must implement sendInternal() with channel-specific logic.
+ */
+export declare abstract class BaseAlertChannel {
+    protected readonly logger: ReturnType<typeof createLogger>;
+    protected readonly timeout: number;
+    protected readonly maxRetries: number;
+    protected readonly maxBackoffDelay: number;
+    protected readonly baseBackoffDelay: number;
+    /**
+     * The channel type identifier
+     */
+    protected abstract readonly channelType: AlertChannel;
+    /**
+     * Channel name for logging
+     */
+    protected abstract readonly channelName: string;
+    constructor(config?: BaseChannelConfig);
+    /**
+     * Send an alert through this channel with retry logic
+     */
+    send(alert: SecurityAlert): Promise<AlertDeliveryResult>;
+    /**
+     * Channel-specific send implementation
+     *
+     * Subclasses must implement this method with their specific delivery logic.
+     * Should throw an error on failure to trigger retry.
+     */
+    protected abstract sendInternal(alert: SecurityAlert): Promise<SendInternalResult>;
+    /**
+     * Test the channel connection
+     */
+    abstract test(): Promise<boolean>;
+    /**
+     * Calculate exponential backoff delay
+     */
+    protected calculateBackoff(attempt: number): number;
+    /**
+     * Sleep for specified milliseconds
+     */
+    protected sleep(ms: number): Promise<void>;
+    /**
+     * Create a success delivery result
+     */
+    protected createSuccessResult(messageId?: string, retryCount?: number): AlertDeliveryResult;
+    /**
+     * Create a failure delivery result
+     */
+    protected createFailureResult(error: string, retryCount?: number): AlertDeliveryResult;
+    /**
+     * Create logger for a specific component
+     */
+    protected createChannelLogger(component: string): ReturnType<typeof createLogger>;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/security/alerting/channels/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/security/alerting/channels/base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AAMrB;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAeD;;;;;GAKG;AACH,8BAAsB,gBAAgB;IACpC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IAC3D,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACnC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IAC3C,SAAS,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAE5C;;OAEG;IACH,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC;IAEtD;;OAEG;IACH,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEpC,MAAM,GAAE,iBAAsB;IAU1C;;OAEG;IACG,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAqD9D;;;;;OAKG;IACH,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAElF;;OAEG;IACH,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IAEjC;;OAEG;IACH,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAKnD;;OAEG;IACH,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1C;;OAEG;IACH,SAAS,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,SAAI,GAAG,mBAAmB;IAUtF;;OAEG;IACH,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,SAAI,GAAG,mBAAmB;IAUjF;;OAEG;IACH,SAAS,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC;CAGlF"}

package/dist/security/alerting/channels/base.js

@@ -0,0 +1,128 @@
+/**
+ * Base Alert Channel
+ *
+ * Abstract base class for all alert channels providing common functionality:
+ * - Exponential backoff retry logic
+ * - Error handling and logging
+ * - Delivery result formatting
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels/base
+ */
+import { createLogger } from '../../../common/logger.js';
+// =============================================================================
+// Constants
+// =============================================================================
+const DEFAULT_TIMEOUT = 10000;
+const DEFAULT_MAX_RETRIES = 3;
+const DEFAULT_MAX_BACKOFF_DELAY = 10000;
+const DEFAULT_BASE_BACKOFF_DELAY = 1000;
+// =============================================================================
+// BaseAlertChannel Class
+// =============================================================================
+/**
+ * Abstract base class for all alert channels
+ *
+ * Provides common retry logic, error handling, and result formatting.
+ * Subclasses must implement sendInternal() with channel-specific logic.
+ */
+export class BaseAlertChannel {
+    logger;
+    timeout;
+    maxRetries;
+    maxBackoffDelay;
+    baseBackoffDelay;
+    constructor(config = {}) {
+        this.timeout = config.timeout ?? DEFAULT_TIMEOUT;
+        this.maxRetries = config.maxRetries ?? DEFAULT_MAX_RETRIES;
+        this.maxBackoffDelay = config.maxBackoffDelay ?? DEFAULT_MAX_BACKOFF_DELAY;
+        this.baseBackoffDelay = config.baseBackoffDelay ?? DEFAULT_BASE_BACKOFF_DELAY;
+        // Logger will be initialized with component name in subclass constructor
+        this.logger = createLogger({ component: 'base-alert-channel' });
+    }
+    /**
+     * Send an alert through this channel with retry logic
+     */
+    async send(alert) {
+        const startTime = Date.now();
+        let retryCount = 0;
+        let lastError = null;
+        while (retryCount <= this.maxRetries) {
+            try {
+                const result = await this.sendInternal(alert);
+                this.logger.info({
+                    alertId: alert.id,
+                    messageId: result.messageId,
+                    severity: alert.severity,
+                    retryCount,
+                    durationMs: Date.now() - startTime,
+                }, `Alert sent to ${this.channelName}`);
+                return this.createSuccessResult(result.messageId, retryCount);
+            }
+            catch (error) {
+                lastError = error instanceof Error ? error : new Error(String(error));
+                retryCount++;
+                if (retryCount <= this.maxRetries) {
+                    const delay = this.calculateBackoff(retryCount);
+                    this.logger.warn({
+                        alertId: alert.id,
+                        error: lastError.message,
+                        retryCount,
+                        nextRetryIn: delay,
+                    }, `Retrying ${this.channelName} request`);
+                    await this.sleep(delay);
+                }
+            }
+        }
+        this.logger.error({
+            alertId: alert.id,
+            error: lastError?.message,
+            retryCount,
+        }, `Failed to send alert to ${this.channelName}`);
+        return this.createFailureResult(lastError?.message ?? 'Unknown error', retryCount);
+    }
+    /**
+     * Calculate exponential backoff delay
+     */
+    calculateBackoff(attempt) {
+        const delay = this.baseBackoffDelay * Math.pow(2, attempt - 1);
+        return Math.min(delay, this.maxBackoffDelay);
+    }
+    /**
+     * Sleep for specified milliseconds
+     */
+    sleep(ms) {
+        return new Promise(resolve => setTimeout(resolve, ms));
+    }
+    /**
+     * Create a success delivery result
+     */
+    createSuccessResult(messageId, retryCount = 0) {
+        return {
+            channel: this.channelType,
+            success: true,
+            messageId,
+            timestamp: new Date(),
+            retryCount,
+        };
+    }
+    /**
+     * Create a failure delivery result
+     */
+    createFailureResult(error, retryCount = 0) {
+        return {
+            channel: this.channelType,
+            success: false,
+            error,
+            timestamp: new Date(),
+            retryCount,
+        };
+    }
+    /**
+     * Create logger for a specific component
+     */
+    createChannelLogger(component) {
+        return createLogger({ component });
+    }
+}
+//# sourceMappingURL=base.js.map

package/dist/security/alerting/channels/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../src/security/alerting/channels/base.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAiCzD,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAExC,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,OAAgB,gBAAgB;IACjB,MAAM,CAAkC;IACxC,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,eAAe,CAAS;IACxB,gBAAgB,CAAS;IAY5C,YAAY,SAA4B,EAAE;QACxC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC3D,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,yBAAyB,CAAC;QAC3E,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAE9E,yEAAyE;QACzE,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,KAAoB;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,SAAS,GAAiB,IAAI,CAAC;QAEnC,OAAO,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBAE9C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;oBACE,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,UAAU;oBACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,EACD,iBAAiB,IAAI,CAAC,WAAW,EAAE,CACpC,CAAC;gBAEF,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtE,UAAU,EAAE,CAAC;gBAEb,IAAI,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBAClC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;oBAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;wBACE,OAAO,EAAE,KAAK,CAAC,EAAE;wBACjB,KAAK,EAAE,SAAS,CAAC,OAAO;wBACxB,UAAU;wBACV,WAAW,EAAE,KAAK;qBACnB,EACD,YAAY,IAAI,CAAC,WAAW,UAAU,CACvC,CAAC;oBACF,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CACf;YACE,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,KAAK,EAAE,SAAS,EAAE,OAAO;YACzB,UAAU;SACX,EACD,2BAA2B,IAAI,CAAC,WAAW,EAAE,CAC9C,CAAC;QAEF,OAAO,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,IAAI,eAAe,EAAE,UAAU,CAAC,CAAC;IACrF,CAAC;IAeD;;OAEG;IACO,gBAAgB,CAAC,OAAe;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,EAAU;QACxB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACO,mBAAmB,CAAC,SAAkB,EAAE,UAAU,GAAG,CAAC;QAC9D,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,OAAO,EAAE,IAAI;YACb,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,mBAAmB,CAAC,KAAa,EAAE,UAAU,GAAG,CAAC;QACzD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,OAAO,EAAE,KAAK;YACd,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,mBAAmB,CAAC,SAAiB;QAC7C,OAAO,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/security/alerting/channels/email.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Email Alert Channel
+ *
+ * Sends security alerts via email using nodemailer or AWS SES.
+ * Supports HTML formatting with severity-based styling.
+ *
+ * @packageDocumentation
+ * @module security/alerting/channels/email
+ */
+import { type SecurityAlert, type AlertDeliveryResult } from '../types.js';
+import { BaseAlertChannel, type BaseChannelConfig } from './base.js';
+import type { SendInternalResult } from './base.js';
+export interface EmailChannelConfig extends BaseChannelConfig {
+    /** Email provider: 'smtp' or 'ses' */
+    provider: 'smtp' | 'ses';
+    /** From address */
+    from: string;
+    /** Default recipient addresses */
+    defaultRecipients: string[];
+    /** SMTP configuration (required if provider is 'smtp') */
+    smtp?: {
+        host: string;
+        port: number;
+        secure: boolean;
+        auth?: {
+            user: string;
+            pass: string;
+        };
+    };
+    /** AWS SES configuration (required if provider is 'ses') */
+    ses?: {
+        region: string;
+        accessKeyId?: string;
+        secretAccessKey?: string;
+    };
+    /** Subject prefix */
+    subjectPrefix?: string;
+    /** Include raw JSON in email */
+    includeRawJson?: boolean;
+}
+/**
+ * Email alert channel using SMTP or AWS SES
+ */
+export declare class EmailAlertChannel extends BaseAlertChannel {
+    protected readonly channelType: "email";
+    protected readonly channelName = "Email";
+    protected readonly logger: import("pino").Logger<never>;
+    private readonly provider;
+    private readonly from;
+    private readonly defaultRecipients;
+    private readonly smtp?;
+    private readonly ses?;
+    private readonly subjectPrefix;
+    private readonly includeRawJson;
+    private transporter;
+    constructor(config: EmailChannelConfig);
+    /**
+     * Initialize the email transporter
+     */
+    private initTransporter;
+    /**
+     * Send an alert via email
+     */
+    protected sendInternal(alert: SecurityAlert): Promise<SendInternalResult>;
+    /**
+     * Send an alert via email to specific recipients
+     */
+    sendToRecipients(alert: SecurityAlert, recipients: string[]): Promise<AlertDeliveryResult>;
+    /**
+     * Format alert as email message
+     */
+    private formatMessage;
+    /**
+     * Format plain text email
+     */
+    private formatPlainText;
+    /**
+     * Format HTML email
+     */
+    private formatHtml;
+    private htmlTableRow;
+    private escapeHtml;
+    /**
+     * Test the email connection
+     */
+    test(): Promise<boolean>;
+}
+/**
+ * Create a new email alert channel
+ */
+export declare function createEmailChannel(config: EmailChannelConfig): EmailAlertChannel;
+//# sourceMappingURL=email.d.ts.map

package/dist/security/alerting/channels/email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../../../src/security/alerting/channels/email.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EAGzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAQpD,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D,sCAAsC;IACtC,QAAQ,EAAE,MAAM,GAAG,KAAK,CAAC;IACzB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,0DAA0D;IAC1D,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,OAAO,CAAC;QAChB,IAAI,CAAC,EAAE;YACL,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;SACd,CAAC;KACH,CAAC;IACF,4DAA4D;IAC5D,GAAG,CAAC,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,qBAAqB;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gCAAgC;IAChC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAsCD;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,gBAAgB;IACrD,SAAS,CAAC,QAAQ,CAAC,WAAW,UAAsB;IACpD,SAAS,CAAC,QAAQ,CAAC,WAAW,WAAW;IACzC,mBAA4B,MAAM,+BAAU;IAE5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAW;IAC7C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAA6B;IACnD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAA4B;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,OAAO,CAAC,WAAW,CAAiC;gBAExC,MAAM,EAAE,kBAAkB;IAwBtC;;OAEG;YACW,eAAe;IA8E7B;;OAEG;cACa,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAa/E;;OAEG;IACG,gBAAgB,CACpB,KAAK,EAAE,aAAa,EACpB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,mBAAmB,CAAC;IA6C/B;;OAEG;IACH,OAAO,CAAC,aAAa;IAoBrB;;OAEG;IACH,OAAO,CAAC,eAAe;IAoDvB;;OAEG;IACH,OAAO,CAAC,UAAU;IA0HlB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,UAAU;IASlB;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;CAe/B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,iBAAiB,CAEhF"}