@vorionsys/security 1.0.0

package/dist/security/incident/actions/index.js

@@ -0,0 +1,52 @@
+/**
+ * Incident Response Actions
+ *
+ * Collection of automated actions for incident response playbooks.
+ * Each action provides execute, validate, and optional rollback capabilities.
+ *
+ * @packageDocumentation
+ * @module security/incident/actions
+ */
+// Export all action definitions
+export { isolateSystemAction, setIsolationService, getIsolationService } from './isolate-system.js';
+export { revokeCredentialsAction, setCredentialService, getCredentialService } from './revoke-credentials.js';
+export { blockIpAction, setIpBlockingService, getIpBlockingService } from './block-ip.js';
+export { notifyStakeholdersAction, setStakeholderNotificationService, getStakeholderNotificationService } from './notify-stakeholders.js';
+export { collectEvidenceAction, setEvidenceCollectionService, getEvidenceCollectionService } from './collect-evidence.js';
+export { scaleMonitoringAction, setMonitoringScalingService, getMonitoringScalingService } from './scale-monitoring.js';
+import { isolateSystemAction } from './isolate-system.js';
+import { revokeCredentialsAction } from './revoke-credentials.js';
+import { blockIpAction } from './block-ip.js';
+import { notifyStakeholdersAction } from './notify-stakeholders.js';
+import { collectEvidenceAction } from './collect-evidence.js';
+import { scaleMonitoringAction } from './scale-monitoring.js';
+/**
+ * Registry of all built-in actions
+ */
+export const builtInActions = [
+    isolateSystemAction,
+    revokeCredentialsAction,
+    blockIpAction,
+    notifyStakeholdersAction,
+    collectEvidenceAction,
+    scaleMonitoringAction,
+];
+/**
+ * Get action by ID
+ */
+export function getBuiltInAction(actionId) {
+    return builtInActions.find((a) => a.id === actionId);
+}
+/**
+ * Get all actions by category
+ */
+export function getActionsByCategory(category) {
+    return builtInActions.filter((a) => a.category === category);
+}
+/**
+ * Get all action IDs
+ */
+export function getActionIds() {
+    return builtInActions.map((a) => a.id);
+}
+//# sourceMappingURL=index.js.map

package/dist/security/incident/actions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/security/incident/actions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,gCAAgC;AAChC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAGpG,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAG9G,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAG1F,OAAO,EAAE,wBAAwB,EAAE,iCAAiC,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAG1I,OAAO,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAG1H,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAIxH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD,mBAAmB;IACnB,uBAAuB;IACvB,aAAa;IACb,wBAAwB;IACxB,qBAAqB;IACrB,qBAAqB;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAsC;IACzE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/security/incident/actions/isolate-system.d.ts

@@ -0,0 +1,63 @@
+/**
+ * System Isolation Action
+ *
+ * Automated system isolation for incident containment.
+ * Provides network isolation, session termination, and access restriction.
+ *
+ * @packageDocumentation
+ * @module security/incident/actions/isolate-system
+ */
+import type { ActionDefinition } from '../types.js';
+export interface IsolationTarget {
+    type: 'server' | 'container' | 'service' | 'network_segment' | 'user_account';
+    identifier: string;
+    metadata?: Record<string, unknown>;
+}
+export interface IsolationResult {
+    targetId: string;
+    isolated: boolean;
+    method: string;
+    previousState: Record<string, unknown>;
+    timestamp: Date;
+}
+export interface IsolationRollbackData {
+    isolations: IsolationResult[];
+    incidentId: string;
+}
+export interface IsolationService {
+    /** Isolate a network segment by applying firewall rules */
+    isolateNetworkSegment(segmentId: string): Promise<{
+        success: boolean;
+        previousRules: unknown[];
+    }>;
+    /** Remove a container/service from network */
+    isolateContainer(containerId: string): Promise<{
+        success: boolean;
+        previousNetwork: string;
+    }>;
+    /** Block external access to a server */
+    isolateServer(serverId: string): Promise<{
+        success: boolean;
+        previousConfig: Record<string, unknown>;
+    }>;
+    /** Disable a user account */
+    disableUserAccount(userId: string): Promise<{
+        success: boolean;
+        previousStatus: string;
+    }>;
+    /** Restore network segment */
+    restoreNetworkSegment(segmentId: string, previousRules: unknown[]): Promise<boolean>;
+    /** Restore container network */
+    restoreContainer(containerId: string, previousNetwork: string): Promise<boolean>;
+    /** Restore server access */
+    restoreServer(serverId: string, previousConfig: Record<string, unknown>): Promise<boolean>;
+    /** Re-enable user account */
+    enableUserAccount(userId: string): Promise<boolean>;
+}
+export declare function setIsolationService(service: IsolationService): void;
+export declare function getIsolationService(): IsolationService;
+/** Create a mock isolation service for testing only. */
+export declare function createMockIsolationService(): IsolationService;
+export declare const isolateSystemAction: ActionDefinition;
+export default isolateSystemAction;
+//# sourceMappingURL=isolate-system.d.ts.map

package/dist/security/incident/actions/isolate-system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolate-system.d.ts","sourceRoot":"","sources":["../../../../src/security/incident/actions/isolate-system.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAA+B,MAAM,aAAa,CAAC;AAQjF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,cAAc,CAAC;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;IAElG,8CAA8C;IAC9C,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE9F,wCAAwC;IACxC,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAExG,6BAA6B;IAC7B,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE1F,8BAA8B;IAC9B,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAErF,gCAAgC;IAChC,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEjF,4BAA4B;IAC5B,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3F,6BAA6B;IAC7B,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrD;AA0ED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAEnE;AAED,wBAAgB,mBAAmB,IAAI,gBAAgB,CAQtD;AAED,wDAAwD;AACxD,wBAAgB,0BAA0B,IAAI,gBAAgB,CAE7D;AA+SD,eAAO,MAAM,mBAAmB,EAAE,gBAkCjC,CAAC;AAEF,eAAe,mBAAmB,CAAC"}

package/dist/security/incident/actions/isolate-system.js

@@ -0,0 +1,379 @@
+/**
+ * System Isolation Action
+ *
+ * Automated system isolation for incident containment.
+ * Provides network isolation, session termination, and access restriction.
+ *
+ * @packageDocumentation
+ * @module security/incident/actions/isolate-system
+ */
+import { createLogger } from '../../../common/logger.js';
+const logger = createLogger({ component: 'action-isolate-system' });
+// ============================================================================
+// Default Mock Isolation Service
+// ============================================================================
+class MockIsolationService {
+    async isolateNetworkSegment(segmentId) {
+        logger.info('Isolating network segment', { segmentId });
+        // Simulate network isolation
+        await this.simulateOperation(1000);
+        return { success: true, previousRules: [{ rule: 'allow-all', segment: segmentId }] };
+    }
+    async isolateContainer(containerId) {
+        logger.info('Isolating container', { containerId });
+        await this.simulateOperation(500);
+        return { success: true, previousNetwork: 'production-network' };
+    }
+    async isolateServer(serverId) {
+        logger.info('Isolating server', { serverId });
+        await this.simulateOperation(1500);
+        return {
+            success: true,
+            previousConfig: {
+                firewall: 'open',
+                publicAccess: true,
+                loadBalancerPool: 'production'
+            }
+        };
+    }
+    async disableUserAccount(userId) {
+        logger.info('Disabling user account', { userId });
+        await this.simulateOperation(300);
+        return { success: true, previousStatus: 'active' };
+    }
+    async restoreNetworkSegment(segmentId, previousRules) {
+        logger.info('Restoring network segment', { segmentId, ruleCount: previousRules.length });
+        await this.simulateOperation(800);
+        return true;
+    }
+    async restoreContainer(containerId, previousNetwork) {
+        logger.info('Restoring container network', { containerId, previousNetwork });
+        await this.simulateOperation(400);
+        return true;
+    }
+    async restoreServer(serverId, _previousConfig) {
+        logger.info('Restoring server access', { serverId });
+        await this.simulateOperation(1200);
+        return true;
+    }
+    async enableUserAccount(userId) {
+        logger.info('Re-enabling user account', { userId });
+        await this.simulateOperation(300);
+        return true;
+    }
+    simulateOperation(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+}
+// ============================================================================
+// Singleton Isolation Service
+// ============================================================================
+let isolationService = null;
+export function setIsolationService(service) {
+    isolationService = service;
+}
+export function getIsolationService() {
+    if (!isolationService) {
+        throw new Error('No isolation service configured. Call setIsolationService() with a real implementation before use. ' +
+            'For tests, use createMockIsolationService().');
+    }
+    return isolationService;
+}
+/** Create a mock isolation service for testing only. */
+export function createMockIsolationService() {
+    return new MockIsolationService();
+}
+// ============================================================================
+// Action Implementation
+// ============================================================================
+async function executeIsolation(context) {
+    const { incident, logger: actionLogger, setVariable } = context;
+    const startTime = Date.now();
+    const results = [];
+    actionLogger.info('Starting system isolation', {
+        affectedResources: incident.affectedResources,
+    });
+    try {
+        // Parse affected resources to determine isolation targets
+        const targets = parseIsolationTargets(incident.affectedResources, incident.metadata);
+        if (targets.length === 0) {
+            actionLogger.warn('No isolation targets identified');
+            return {
+                success: true,
+                output: { message: 'No isolation targets identified', results: [] },
+                metrics: { durationMs: Date.now() - startTime, itemsProcessed: 0 },
+                canRollback: false,
+            };
+        }
+        let successCount = 0;
+        let failureCount = 0;
+        for (const target of targets) {
+            try {
+                const result = await isolateTarget(target, actionLogger);
+                results.push(result);
+                if (result.isolated) {
+                    successCount++;
+                    actionLogger.info('Target isolated successfully', {
+                        targetType: target.type,
+                        targetId: target.identifier,
+                    });
+                }
+                else {
+                    failureCount++;
+                    actionLogger.error('Failed to isolate target', {
+                        targetType: target.type,
+                        targetId: target.identifier,
+                    });
+                }
+            }
+            catch (error) {
+                failureCount++;
+                actionLogger.error('Error isolating target', {
+                    targetType: target.type,
+                    targetId: target.identifier,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+        }
+        // Store results for rollback
+        const rollbackData = {
+            isolations: results.filter((r) => r.isolated),
+            incidentId: incident.id,
+        };
+        setVariable('isolation_results', results);
+        const success = failureCount === 0;
+        const durationMs = Date.now() - startTime;
+        actionLogger.info('System isolation completed', {
+            success,
+            successCount,
+            failureCount,
+            durationMs,
+        });
+        return {
+            success,
+            output: {
+                message: success
+                    ? `Successfully isolated ${successCount} target(s)`
+                    : `Isolation completed with ${failureCount} failure(s)`,
+                results,
+                successCount,
+                failureCount,
+            },
+            metrics: {
+                durationMs,
+                itemsProcessed: successCount,
+                itemsFailed: failureCount,
+            },
+            canRollback: results.some((r) => r.isolated),
+            rollbackData,
+        };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        actionLogger.error('System isolation failed', { error: errorMessage });
+        return {
+            success: false,
+            error: errorMessage,
+            metrics: { durationMs: Date.now() - startTime },
+            canRollback: results.some((r) => r.isolated),
+            rollbackData: {
+                isolations: results.filter((r) => r.isolated),
+                incidentId: incident.id,
+            },
+        };
+    }
+}
+async function rollbackIsolation(context, rollbackData) {
+    const { logger: actionLogger } = context;
+    const startTime = Date.now();
+    const data = rollbackData;
+    actionLogger.info('Starting isolation rollback', {
+        isolationCount: data.isolations.length,
+    });
+    let successCount = 0;
+    let failureCount = 0;
+    for (const isolation of data.isolations) {
+        try {
+            const restored = await restoreTarget(isolation, actionLogger);
+            if (restored) {
+                successCount++;
+                actionLogger.info('Target restored', { targetId: isolation.targetId });
+            }
+            else {
+                failureCount++;
+                actionLogger.error('Failed to restore target', { targetId: isolation.targetId });
+            }
+        }
+        catch (error) {
+            failureCount++;
+            actionLogger.error('Error restoring target', {
+                targetId: isolation.targetId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    return {
+        success: failureCount === 0,
+        output: {
+            message: `Restored ${successCount} of ${data.isolations.length} isolated targets`,
+            successCount,
+            failureCount,
+        },
+        metrics: {
+            durationMs: Date.now() - startTime,
+            itemsProcessed: successCount,
+            itemsFailed: failureCount,
+        },
+    };
+}
+// ============================================================================
+// Helper Functions
+// ============================================================================
+function parseIsolationTargets(affectedResources, metadata) {
+    const targets = [];
+    for (const resource of affectedResources) {
+        // Parse resource identifiers
+        if (resource.startsWith('server:')) {
+            targets.push({
+                type: 'server',
+                identifier: resource.replace('server:', ''),
+            });
+        }
+        else if (resource.startsWith('container:')) {
+            targets.push({
+                type: 'container',
+                identifier: resource.replace('container:', ''),
+            });
+        }
+        else if (resource.startsWith('service:')) {
+            targets.push({
+                type: 'service',
+                identifier: resource.replace('service:', ''),
+            });
+        }
+        else if (resource.startsWith('network:')) {
+            targets.push({
+                type: 'network_segment',
+                identifier: resource.replace('network:', ''),
+            });
+        }
+        else if (resource.startsWith('user:')) {
+            targets.push({
+                type: 'user_account',
+                identifier: resource.replace('user:', ''),
+            });
+        }
+    }
+    // Also check metadata for additional targets
+    const additionalTargets = metadata?.['isolationTargets'];
+    if (additionalTargets) {
+        targets.push(...additionalTargets);
+    }
+    return targets;
+}
+async function isolateTarget(target, actionLogger) {
+    const service = getIsolationService();
+    const result = {
+        targetId: `${target.type}:${target.identifier}`,
+        isolated: false,
+        method: '',
+        previousState: {},
+        timestamp: new Date(),
+    };
+    switch (target.type) {
+        case 'server': {
+            const serverResult = await service.isolateServer(target.identifier);
+            result.isolated = serverResult.success;
+            result.method = 'firewall_block';
+            result.previousState = serverResult.previousConfig;
+            break;
+        }
+        case 'container': {
+            const containerResult = await service.isolateContainer(target.identifier);
+            result.isolated = containerResult.success;
+            result.method = 'network_disconnect';
+            result.previousState = { network: containerResult.previousNetwork };
+            break;
+        }
+        case 'service': {
+            // Services are isolated by isolating their containers
+            const serviceResult = await service.isolateContainer(target.identifier);
+            result.isolated = serviceResult.success;
+            result.method = 'service_container_isolation';
+            result.previousState = { network: serviceResult.previousNetwork };
+            break;
+        }
+        case 'network_segment': {
+            const networkResult = await service.isolateNetworkSegment(target.identifier);
+            result.isolated = networkResult.success;
+            result.method = 'segment_firewall';
+            result.previousState = { rules: networkResult.previousRules };
+            break;
+        }
+        case 'user_account': {
+            const userResult = await service.disableUserAccount(target.identifier);
+            result.isolated = userResult.success;
+            result.method = 'account_disable';
+            result.previousState = { status: userResult.previousStatus };
+            break;
+        }
+        default:
+            actionLogger.warn('Unknown target type', { targetType: target.type });
+    }
+    return result;
+}
+async function restoreTarget(isolation, actionLogger) {
+    const service = getIsolationService();
+    const [type, identifier] = isolation.targetId.split(':');
+    switch (type) {
+        case 'server':
+            return service.restoreServer(identifier, isolation.previousState);
+        case 'container':
+        case 'service':
+            return service.restoreContainer(identifier, isolation.previousState['network']);
+        case 'network_segment':
+            return service.restoreNetworkSegment(identifier, isolation.previousState['rules']);
+        case 'user_account':
+            return service.enableUserAccount(identifier);
+        default:
+            actionLogger.warn('Unknown isolation type for restore', { type });
+            return false;
+    }
+}
+// ============================================================================
+// Action Definition Export
+// ============================================================================
+export const isolateSystemAction = {
+    id: 'isolate-system',
+    name: 'Isolate Affected Systems',
+    description: 'Automatically isolate affected systems to prevent further damage or data exfiltration',
+    category: 'containment',
+    riskLevel: 'high',
+    requiresApproval: true,
+    supportsRollback: true,
+    defaultTimeoutMs: 120000, // 2 minutes
+    maxRetries: 2,
+    execute: executeIsolation,
+    rollback: rollbackIsolation,
+    validate: async (context) => {
+        const { incident } = context;
+        // Check if there are resources to isolate
+        if (!incident.affectedResources || incident.affectedResources.length === 0) {
+            return {
+                valid: false,
+                reason: 'No affected resources specified for isolation',
+            };
+        }
+        // Check if any resources can be isolated
+        const targets = parseIsolationTargets(incident.affectedResources, incident.metadata);
+        if (targets.length === 0) {
+            return {
+                valid: false,
+                reason: 'No isolatable resources found in affected resources list',
+            };
+        }
+        return { valid: true };
+    },
+};
+export default isolateSystemAction;
+//# sourceMappingURL=isolate-system.js.map

package/dist/security/incident/actions/isolate-system.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolate-system.js","sourceRoot":"","sources":["../../../../src/security/incident/actions/isolate-system.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAGzD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAuDpE,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E,MAAM,oBAAoB;IACxB,KAAK,CAAC,qBAAqB,CAAC,SAAiB;QAC3C,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACxD,6BAA6B;QAC7B,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QACxC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,cAAc,EAAE;gBACd,QAAQ,EAAE,MAAM;gBAChB,YAAY,EAAE,IAAI;gBAClB,gBAAgB,EAAE,YAAY;aAC/B;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,SAAiB,EAAE,aAAwB;QACrE,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,eAAuB;QACjE,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;QAC7E,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,eAAwC;QAC5E,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc;QACpC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,iBAAiB,CAAC,EAAU;QAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E,IAAI,gBAAgB,GAA4B,IAAI,CAAC;AAErD,MAAM,UAAU,mBAAmB,CAAC,OAAyB;IAC3D,gBAAgB,GAAG,OAAO,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,qGAAqG;YACrG,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,0BAA0B;IACxC,OAAO,IAAI,oBAAoB,EAAE,CAAC;AACpC,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,KAAK,UAAU,gBAAgB,CAAC,OAAsB;IACpD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,YAAY,CAAC,IAAI,CAAC,2BAA2B,EAAE;QAC7C,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;KAC9C,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,0DAA0D;QAC1D,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAErF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,YAAY,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACrD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,OAAO,EAAE,EAAE,EAAE;gBACnE,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,CAAC,EAAE;gBAClE,WAAW,EAAE,KAAK;aACnB,CAAC;QACJ,CAAC;QAED,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;gBACzD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAErB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACpB,YAAY,EAAE,CAAC;oBACf,YAAY,CAAC,IAAI,CAAC,8BAA8B,EAAE;wBAChD,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,QAAQ,EAAE,MAAM,CAAC,UAAU;qBAC5B,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,YAAY,EAAE,CAAC;oBACf,YAAY,CAAC,KAAK,CAAC,0BAA0B,EAAE;wBAC7C,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,QAAQ,EAAE,MAAM,CAAC,UAAU;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,wBAAwB,EAAE;oBAC3C,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,QAAQ,EAAE,MAAM,CAAC,UAAU;oBAC3B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,YAAY,GAA0B;YAC1C,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC7C,UAAU,EAAE,QAAQ,CAAC,EAAE;SACxB,CAAC;QACF,WAAW,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAE1C,MAAM,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAE1C,YAAY,CAAC,IAAI,CAAC,4BAA4B,EAAE;YAC9C,OAAO;YACP,YAAY;YACZ,YAAY;YACZ,UAAU;SACX,CAAC,CAAC;QAEH,OAAO;YACL,OAAO;YACP,MAAM,EAAE;gBACN,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,yBAAyB,YAAY,YAAY;oBACnD,CAAC,CAAC,4BAA4B,YAAY,aAAa;gBACzD,OAAO;gBACP,YAAY;gBACZ,YAAY;aACb;YACD,OAAO,EAAE;gBACP,UAAU;gBACV,cAAc,EAAE,YAAY;gBAC5B,WAAW,EAAE,YAAY;aAC1B;YACD,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5C,YAAY;SACb,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,YAAY,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAEvE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;YAC/C,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5C,YAAY,EAAE;gBACZ,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC7C,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,OAAsB,EACtB,YAAqB;IAErB,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,YAAqC,CAAC;IAEnD,YAAY,CAAC,IAAI,CAAC,6BAA6B,EAAE;QAC/C,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;KACvC,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAC9D,IAAI,QAAQ,EAAE,CAAC;gBACb,YAAY,EAAE,CAAC;gBACf,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,YAAY,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,EAAE,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,wBAAwB,EAAE;gBAC3C,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,YAAY,KAAK,CAAC;QAC3B,MAAM,EAAE;YACN,OAAO,EAAE,YAAY,YAAY,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,mBAAmB;YACjF,YAAY;YACZ,YAAY;SACb;QACD,OAAO,EAAE;YACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,cAAc,EAAE,YAAY;YAC5B,WAAW,EAAE,YAAY;SAC1B;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,SAAS,qBAAqB,CAC5B,iBAA2B,EAC3B,QAAkC;IAElC,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,6BAA6B;QAC7B,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,WAAW;gBACjB,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;aAC7C,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,iBAAiB;gBACvB,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;aAC7C,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,cAAc;gBACpB,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,iBAAiB,GAAG,QAAQ,EAAE,CAAC,kBAAkB,CAAkC,CAAC;IAC1F,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAAuB,EACvB,YAAqC;IAErC,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAoB;QAC9B,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE;QAC/C,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,EAAE;QACV,aAAa,EAAE,EAAE;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC;IAEF,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACpE,MAAM,CAAC,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,MAAM,GAAG,gBAAgB,CAAC;YACjC,MAAM,CAAC,aAAa,GAAG,YAAY,CAAC,cAAc,CAAC;YACnD,MAAM;QACR,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1E,MAAM,CAAC,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC;YAC1C,MAAM,CAAC,MAAM,GAAG,oBAAoB,CAAC;YACrC,MAAM,CAAC,aAAa,GAAG,EAAE,OAAO,EAAE,eAAe,CAAC,eAAe,EAAE,CAAC;YACpE,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,sDAAsD;YACtD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACxE,MAAM,CAAC,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC;YACxC,MAAM,CAAC,MAAM,GAAG,6BAA6B,CAAC;YAC9C,MAAM,CAAC,aAAa,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,eAAe,EAAE,CAAC;YAClE,MAAM;QACR,CAAC;QACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC7E,MAAM,CAAC,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC;YACxC,MAAM,CAAC,MAAM,GAAG,kBAAkB,CAAC;YACnC,MAAM,CAAC,aAAa,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,aAAa,EAAE,CAAC;YAC9D,MAAM;QACR,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACvE,MAAM,CAAC,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;YACrC,MAAM,CAAC,MAAM,GAAG,iBAAiB,CAAC;YAClC,MAAM,CAAC,aAAa,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,cAAc,EAAE,CAAC;YAC7D,MAAM;QACR,CAAC;QACD;YACE,YAAY,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAA0B,EAC1B,YAAqC;IAErC,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;IACtC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEzD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,aAAa,CAC1B,UAAU,EACV,SAAS,CAAC,aAAwC,CACnD,CAAC;QACJ,KAAK,WAAW,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,gBAAgB,CAC7B,UAAU,EACV,SAAS,CAAC,aAAa,CAAC,SAAS,CAAW,CAC7C,CAAC;QACJ,KAAK,iBAAiB;YACpB,OAAO,OAAO,CAAC,qBAAqB,CAClC,UAAU,EACV,SAAS,CAAC,aAAa,CAAC,OAAO,CAAc,CAC9C,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC/C;YACE,YAAY,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E,MAAM,CAAC,MAAM,mBAAmB,GAAqB;IACnD,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,0BAA0B;IAChC,WAAW,EAAE,uFAAuF;IACpG,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,MAAM;IACjB,gBAAgB,EAAE,IAAI;IACtB,gBAAgB,EAAE,IAAI;IACtB,gBAAgB,EAAE,MAAM,EAAE,YAAY;IACtC,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,gBAAgB;IACzB,QAAQ,EAAE,iBAAiB;IAC3B,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAE7B,0CAA0C;QAC1C,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3E,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,+CAA+C;aACxD,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,0DAA0D;aACnE,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;CACF,CAAC;AAEF,eAAe,mBAAmB,CAAC"}

package/dist/security/incident/actions/notify-stakeholders.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Stakeholder Notification Action
+ *
+ * Automated notification dispatch to relevant stakeholders during incidents.
+ * Supports multiple channels and escalation paths.
+ *
+ * @packageDocumentation
+ * @module security/incident/actions/notify-stakeholders
+ */
+import type { ActionDefinition, IncidentSeverity } from '../types.js';
+export interface StakeholderNotification {
+    stakeholder: string;
+    role: string;
+    channel: string;
+    status: 'pending' | 'sent' | 'delivered' | 'failed';
+    sentAt?: Date;
+    deliveredAt?: Date;
+    messageId?: string;
+    error?: string;
+}
+export interface NotificationTemplate {
+    subject: string;
+    body: string;
+    urgency: 'low' | 'normal' | 'high' | 'critical';
+}
+export interface StakeholderConfig {
+    id: string;
+    name: string;
+    role: 'security_team' | 'engineering' | 'management' | 'legal' | 'communications' | 'executive' | 'dpo' | 'external';
+    channels: {
+        channel: string;
+        address: string;
+        priority: number;
+    }[];
+    severityThreshold: IncidentSeverity;
+}
+export interface StakeholderNotificationService {
+    /** Send Slack message */
+    sendSlack(channel: string, message: NotificationTemplate): Promise<{
+        success: boolean;
+        messageId?: string;
+    }>;
+    /** Send email */
+    sendEmail(to: string, message: NotificationTemplate): Promise<{
+        success: boolean;
+        messageId?: string;
+    }>;
+    /** Send PagerDuty alert */
+    sendPagerDuty(routingKey: string, message: NotificationTemplate): Promise<{
+        success: boolean;
+        incidentId?: string;
+    }>;
+    /** Send SMS */
+    sendSms(phoneNumber: string, message: string): Promise<{
+        success: boolean;
+        messageId?: string;
+    }>;
+    /** Send Teams message */
+    sendTeams(webhookUrl: string, message: NotificationTemplate): Promise<{
+        success: boolean;
+        messageId?: string;
+    }>;
+    /** Get stakeholders for a given severity and incident type */
+    getStakeholders(severity: IncidentSeverity, incidentType: string): Promise<StakeholderConfig[]>;
+}
+export declare function setStakeholderNotificationService(service: StakeholderNotificationService): void;
+export declare function getStakeholderNotificationService(): StakeholderNotificationService;
+/** Create a mock stakeholder notification service for testing only. */
+export declare function createMockStakeholderNotificationService(): StakeholderNotificationService;
+export declare const notifyStakeholdersAction: ActionDefinition;
+export default notifyStakeholdersAction;
+//# sourceMappingURL=notify-stakeholders.d.ts.map

package/dist/security/incident/actions/notify-stakeholders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify-stakeholders.d.ts","sourceRoot":"","sources":["../../../../src/security/incident/actions/notify-stakeholders.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EACV,gBAAgB,EAGhB,gBAAgB,EAEjB,MAAM,aAAa,CAAC;AAQrB,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;IACpD,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CACjD;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,eAAe,GAAG,aAAa,GAAG,YAAY,GAAG,OAAO,GAAG,gBAAgB,GAAG,WAAW,GAAG,KAAK,GAAG,UAAU,CAAC;IACrH,QAAQ,EAAE;QACR,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;KAClB,EAAE,CAAC;IACJ,iBAAiB,EAAE,gBAAgB,CAAC;CACrC;AAMD,MAAM,WAAW,8BAA8B;IAC7C,yBAAyB;IACzB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE7G,iBAAiB;IACjB,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAExG,2BAA2B;IAC3B,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAErH,eAAe;IACf,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEjG,yBAAyB;IACzB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEhH,8DAA8D;IAC9D,eAAe,CAAC,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;CACjG;AA8JD,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,8BAA8B,GAAG,IAAI,CAE/F;AAED,wBAAgB,iCAAiC,IAAI,8BAA8B,CAQlF;AAED,uEAAuE;AACvE,wBAAgB,wCAAwC,IAAI,8BAA8B,CAEzF;AAqRD,eAAO,MAAM,wBAAwB,EAAE,gBAwBtC,CAAC;AAEF,eAAe,wBAAwB,CAAC"}