@vorionsys/security 1.0.0

package/dist/security/incident/actions/scale-monitoring.js

@@ -0,0 +1,483 @@
+/**
+ * Scale Monitoring Action
+ *
+ * Enhanced monitoring activation for incident response.
+ * Increases logging verbosity, enables additional alerts, and deploys detection rules.
+ *
+ * @packageDocumentation
+ * @module security/incident/actions/scale-monitoring
+ */
+import { createLogger } from '../../../common/logger.js';
+const logger = createLogger({ component: 'action-scale-monitoring' });
+// ============================================================================
+// Default Mock Monitoring Service
+// ============================================================================
+class MockMonitoringScalingService {
+    async increaseLogVerbosity(serviceId, level) {
+        logger.info('Increasing log verbosity', { serviceId, level });
+        await this.simulateOperation(500);
+        return { success: true, previousLevel: 'info' };
+    }
+    async restoreLogVerbosity(serviceId, level) {
+        logger.info('Restoring log verbosity', { serviceId, level });
+        await this.simulateOperation(300);
+        return true;
+    }
+    async enableAlertRules(ruleIds) {
+        logger.info('Enabling alert rules', { ruleIds });
+        await this.simulateOperation(800);
+        const previousStates = {};
+        ruleIds.forEach((id) => (previousStates[id] = false));
+        return { success: true, enabledRules: ruleIds, previousStates };
+    }
+    async disableAlertRules(ruleIds) {
+        logger.info('Disabling alert rules', { ruleIds });
+        await this.simulateOperation(600);
+        return true;
+    }
+    async deployDetectionRules(rules) {
+        logger.info('Deploying detection rules', { ruleCount: rules.length });
+        await this.simulateOperation(1000);
+        return { success: true, deployedRuleIds: rules.map((r) => r.id) };
+    }
+    async removeDetectionRules(ruleIds) {
+        logger.info('Removing detection rules', { ruleIds });
+        await this.simulateOperation(700);
+        return true;
+    }
+    async enableEnhancedMetrics(targets, metricsToCollect) {
+        logger.info('Enabling enhanced metrics', { targets, metricsToCollect });
+        await this.simulateOperation(600);
+        return { success: true, enabledTargets: targets };
+    }
+    async disableEnhancedMetrics(targets) {
+        logger.info('Disabling enhanced metrics', { targets });
+        await this.simulateOperation(400);
+        return true;
+    }
+    async increaseTraceSampling(serviceId, samplingRate) {
+        logger.info('Increasing trace sampling', { serviceId, samplingRate });
+        await this.simulateOperation(400);
+        return { success: true, previousRate: 0.1 };
+    }
+    async restoreTraceSampling(serviceId, rate) {
+        logger.info('Restoring trace sampling', { serviceId, rate });
+        await this.simulateOperation(300);
+        return true;
+    }
+    async deployHoneypots(config) {
+        logger.info('Deploying honeypots', { count: config.length });
+        await this.simulateOperation(2000);
+        return {
+            success: true,
+            deployedHoneypots: config.map((c) => `honeypot-${c.type}-${Date.now()}`),
+        };
+    }
+    async removeHoneypots(honeypotIds) {
+        logger.info('Removing honeypots', { honeypotIds });
+        await this.simulateOperation(1000);
+        return true;
+    }
+    async getAvailableAlertRules(incidentType) {
+        const commonRules = [
+            'suspicious-login-attempts',
+            'unusual-data-access',
+            'privilege-escalation-attempt',
+            'lateral-movement-detection',
+        ];
+        const typeSpecificRules = {
+            data_breach: ['data-exfiltration', 'sensitive-data-access', 'bulk-download'],
+            account_compromise: ['impossible-travel', 'credential-stuffing', 'session-hijacking'],
+            malware: ['malicious-process', 'c2-communication', 'file-encryption'],
+            ransomware: ['mass-file-modification', 'shadow-copy-deletion', 'ransom-note-creation'],
+            denial_of_service: ['traffic-spike', 'connection-flood', 'resource-exhaustion'],
+        };
+        return [...commonRules, ...(typeSpecificRules[incidentType] || [])];
+    }
+    async getAvailableDetectionRules(incidentType) {
+        const rules = [
+            { id: 'detect-suspicious-ip', pattern: 'source.ip in threat_intel', action: 'alert' },
+            { id: 'detect-unusual-hours', pattern: 'timestamp outside business_hours', action: 'alert' },
+        ];
+        if (incidentType === 'data_breach') {
+            rules.push({ id: 'detect-bulk-export', pattern: 'export_count > 1000', action: 'block' }, { id: 'detect-sensitive-access', pattern: 'resource contains PII', action: 'alert' });
+        }
+        else if (incidentType === 'account_compromise') {
+            rules.push({ id: 'detect-password-spray', pattern: 'failed_auth_count > 100', action: 'block' }, { id: 'detect-token-reuse', pattern: 'token.reuse_count > 5', action: 'revoke' });
+        }
+        return rules;
+    }
+    simulateOperation(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+}
+// ============================================================================
+// Singleton Monitoring Service
+// ============================================================================
+let monitoringService = null;
+export function setMonitoringScalingService(service) {
+    monitoringService = service;
+}
+export function getMonitoringScalingService() {
+    if (!monitoringService) {
+        throw new Error('No monitoring scaling service configured. Call setMonitoringScalingService() with a real implementation before use. ' +
+            'For tests, use createMockMonitoringScalingService().');
+    }
+    return monitoringService;
+}
+/** Create a mock monitoring scaling service for testing only. */
+export function createMockMonitoringScalingService() {
+    return new MockMonitoringScalingService();
+}
+// ============================================================================
+// Action Implementation
+// ============================================================================
+async function executeScaleMonitoring(context) {
+    const { incident, logger: actionLogger, setVariable } = context;
+    const startTime = Date.now();
+    const enhancements = [];
+    const service = getMonitoringScalingService();
+    // Calculate expiry (enhanced monitoring for 7 days by default)
+    const expiresAt = new Date();
+    expiresAt.setDate(expiresAt.getDate() + 7);
+    actionLogger.info('Starting monitoring scale-up', {
+        incidentId: incident.id,
+        type: incident.type,
+        severity: incident.severity,
+    });
+    let successCount = 0;
+    let failureCount = 0;
+    try {
+        // 1. Increase log verbosity for affected services
+        const affectedServices = extractAffectedServices(incident.affectedResources);
+        for (const serviceId of affectedServices) {
+            try {
+                const result = await service.increaseLogVerbosity(serviceId, 'debug');
+                enhancements.push({
+                    type: 'log_verbosity',
+                    target: serviceId,
+                    previousState: result.previousLevel,
+                    newState: 'debug',
+                    activated: result.success,
+                    activatedAt: new Date(),
+                    expiresAt,
+                });
+                if (result.success) {
+                    successCount++;
+                    actionLogger.info('Log verbosity increased', { serviceId });
+                }
+            }
+            catch (error) {
+                failureCount++;
+                actionLogger.error('Failed to increase log verbosity', { serviceId, error });
+            }
+        }
+        // 2. Enable additional alert rules
+        const alertRules = await service.getAvailableAlertRules(incident.type);
+        if (alertRules.length > 0) {
+            try {
+                const result = await service.enableAlertRules(alertRules);
+                enhancements.push({
+                    type: 'alert_rule',
+                    target: 'alert-rules',
+                    previousState: result.previousStates,
+                    newState: result.enabledRules,
+                    activated: result.success,
+                    activatedAt: new Date(),
+                    expiresAt,
+                });
+                if (result.success) {
+                    successCount++;
+                    actionLogger.info('Alert rules enabled', { count: result.enabledRules.length });
+                }
+            }
+            catch (error) {
+                failureCount++;
+                actionLogger.error('Failed to enable alert rules', { error });
+            }
+        }
+        // 3. Deploy detection rules
+        const detectionRules = await service.getAvailableDetectionRules(incident.type);
+        if (detectionRules.length > 0) {
+            try {
+                const result = await service.deployDetectionRules(detectionRules);
+                enhancements.push({
+                    type: 'detection_rule',
+                    target: 'detection-rules',
+                    previousState: [],
+                    newState: result.deployedRuleIds,
+                    activated: result.success,
+                    activatedAt: new Date(),
+                    expiresAt,
+                });
+                if (result.success) {
+                    successCount++;
+                    actionLogger.info('Detection rules deployed', { count: result.deployedRuleIds.length });
+                }
+            }
+            catch (error) {
+                failureCount++;
+                actionLogger.error('Failed to deploy detection rules', { error });
+            }
+        }
+        // 4. Enable enhanced metrics
+        if (affectedServices.length > 0) {
+            try {
+                const metricsToCollect = [
+                    'request_latency_detailed',
+                    'error_rate_by_endpoint',
+                    'connection_count',
+                    'memory_allocation',
+                    'cpu_usage_detailed',
+                ];
+                const result = await service.enableEnhancedMetrics(affectedServices, metricsToCollect);
+                enhancements.push({
+                    type: 'metric_collection',
+                    target: 'enhanced-metrics',
+                    previousState: [],
+                    newState: result.enabledTargets,
+                    activated: result.success,
+                    activatedAt: new Date(),
+                    expiresAt,
+                });
+                if (result.success) {
+                    successCount++;
+                    actionLogger.info('Enhanced metrics enabled', { targets: result.enabledTargets });
+                }
+            }
+            catch (error) {
+                failureCount++;
+                actionLogger.error('Failed to enable enhanced metrics', { error });
+            }
+        }
+        // 5. Increase trace sampling (for P1/P2 incidents)
+        if (incident.severity === 'P1' || incident.severity === 'P2') {
+            for (const serviceId of affectedServices.slice(0, 3)) {
+                // Limit to 3 services
+                try {
+                    const result = await service.increaseTraceSampling(serviceId, 1.0); // 100% sampling
+                    enhancements.push({
+                        type: 'trace_sampling',
+                        target: serviceId,
+                        previousState: result.previousRate,
+                        newState: 1.0,
+                        activated: result.success,
+                        activatedAt: new Date(),
+                        expiresAt,
+                    });
+                    if (result.success) {
+                        successCount++;
+                        actionLogger.info('Trace sampling increased', { serviceId });
+                    }
+                }
+                catch (error) {
+                    failureCount++;
+                    actionLogger.error('Failed to increase trace sampling', { serviceId, error });
+                }
+            }
+        }
+        // 6. Deploy honeypots (for certain incident types)
+        if (['data_breach', 'unauthorized_access', 'insider_threat'].includes(incident.type)) {
+            try {
+                const honeypotConfig = [
+                    { type: 'database', location: 'internal-network' },
+                    { type: 'file-share', location: 'sensitive-data-zone' },
+                    { type: 'api-endpoint', location: 'dmz' },
+                ];
+                const result = await service.deployHoneypots(honeypotConfig);
+                enhancements.push({
+                    type: 'honeypot',
+                    target: 'honeypots',
+                    previousState: [],
+                    newState: result.deployedHoneypots,
+                    activated: result.success,
+                    activatedAt: new Date(),
+                    expiresAt,
+                });
+                if (result.success) {
+                    successCount++;
+                    actionLogger.info('Honeypots deployed', { count: result.deployedHoneypots.length });
+                }
+            }
+            catch (error) {
+                failureCount++;
+                actionLogger.error('Failed to deploy honeypots', { error });
+            }
+        }
+        // Store enhancements for rollback
+        setVariable('monitoring_enhancements', enhancements);
+        const durationMs = Date.now() - startTime;
+        const success = successCount > 0;
+        actionLogger.info('Monitoring scale-up completed', {
+            success,
+            successCount,
+            failureCount,
+            enhancementsActivated: enhancements.filter((e) => e.activated).length,
+            durationMs,
+        });
+        const rollbackData = {
+            enhancements: enhancements.filter((e) => e.activated),
+            incidentId: incident.id,
+        };
+        return {
+            success,
+            output: {
+                message: success
+                    ? `Activated ${successCount} monitoring enhancement(s)`
+                    : 'Failed to activate any monitoring enhancements',
+                enhancements,
+                successCount,
+                failureCount,
+                expiresAt,
+            },
+            metrics: {
+                durationMs,
+                itemsProcessed: successCount,
+                itemsFailed: failureCount,
+            },
+            canRollback: enhancements.some((e) => e.activated),
+            rollbackData,
+        };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        actionLogger.error('Monitoring scale-up failed', { error: errorMessage });
+        return {
+            success: false,
+            error: errorMessage,
+            metrics: { durationMs: Date.now() - startTime },
+            canRollback: enhancements.some((e) => e.activated),
+            rollbackData: {
+                enhancements: enhancements.filter((e) => e.activated),
+                incidentId: incident.id,
+            },
+        };
+    }
+}
+async function rollbackScaleMonitoring(context, rollbackData) {
+    const { logger: actionLogger } = context;
+    const startTime = Date.now();
+    const data = rollbackData;
+    const service = getMonitoringScalingService();
+    actionLogger.info('Starting monitoring scale-down', {
+        enhancementCount: data.enhancements.length,
+    });
+    let successCount = 0;
+    let failureCount = 0;
+    for (const enhancement of data.enhancements) {
+        try {
+            let restored = false;
+            switch (enhancement.type) {
+                case 'log_verbosity':
+                    restored = await service.restoreLogVerbosity(enhancement.target, enhancement.previousState);
+                    break;
+                case 'alert_rule':
+                    const ruleIds = Object.keys(enhancement.previousState);
+                    restored = await service.disableAlertRules(ruleIds);
+                    break;
+                case 'detection_rule':
+                    restored = await service.removeDetectionRules(enhancement.newState);
+                    break;
+                case 'metric_collection':
+                    restored = await service.disableEnhancedMetrics(enhancement.newState);
+                    break;
+                case 'trace_sampling':
+                    restored = await service.restoreTraceSampling(enhancement.target, enhancement.previousState);
+                    break;
+                case 'honeypot':
+                    restored = await service.removeHoneypots(enhancement.newState);
+                    break;
+            }
+            if (restored) {
+                successCount++;
+                actionLogger.info('Enhancement rolled back', {
+                    type: enhancement.type,
+                    target: enhancement.target,
+                });
+            }
+            else {
+                failureCount++;
+                actionLogger.error('Failed to roll back enhancement', {
+                    type: enhancement.type,
+                    target: enhancement.target,
+                });
+            }
+        }
+        catch (error) {
+            failureCount++;
+            actionLogger.error('Error rolling back enhancement', {
+                type: enhancement.type,
+                target: enhancement.target,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    return {
+        success: failureCount === 0,
+        output: {
+            message: `Rolled back ${successCount} of ${data.enhancements.length} monitoring enhancement(s)`,
+            successCount,
+            failureCount,
+        },
+        metrics: {
+            durationMs: Date.now() - startTime,
+            itemsProcessed: successCount,
+            itemsFailed: failureCount,
+        },
+    };
+}
+// ============================================================================
+// Helper Functions
+// ============================================================================
+function extractAffectedServices(affectedResources) {
+    const services = new Set();
+    for (const resource of affectedResources) {
+        if (resource.startsWith('service:')) {
+            services.add(resource.replace('service:', ''));
+        }
+        else if (resource.startsWith('server:')) {
+            // Extract service from server identifier
+            const serverId = resource.replace('server:', '');
+            // Assume format: service-name-instance-id
+            const parts = serverId.split('-');
+            if (parts.length > 1) {
+                services.add(parts[0]);
+            }
+        }
+        else if (resource.startsWith('container:')) {
+            const containerId = resource.replace('container:', '');
+            // Containers often named with service prefix
+            const parts = containerId.split('-');
+            if (parts.length > 0) {
+                services.add(parts[0]);
+            }
+        }
+    }
+    // Always include core services for monitoring
+    services.add('api-gateway');
+    services.add('auth-service');
+    return Array.from(services);
+}
+// ============================================================================
+// Action Definition Export
+// ============================================================================
+export const scaleMonitoringAction = {
+    id: 'scale-monitoring',
+    name: 'Enhanced Monitoring Activation',
+    description: 'Activate enhanced monitoring including increased logging, additional alerts, detection rules, and honeypots',
+    category: 'monitoring',
+    riskLevel: 'low',
+    requiresApproval: false,
+    supportsRollback: true,
+    defaultTimeoutMs: 180000, // 3 minutes
+    maxRetries: 2,
+    execute: executeScaleMonitoring,
+    rollback: rollbackScaleMonitoring,
+    validate: async (context) => {
+        const { incident } = context;
+        // Always valid - we can always enhance monitoring
+        return { valid: true };
+    },
+};
+export default scaleMonitoringAction;
+//# sourceMappingURL=scale-monitoring.js.map

package/dist/security/incident/actions/scale-monitoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scale-monitoring.js","sourceRoot":"","sources":["../../../../src/security/incident/actions/scale-monitoring.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAGzD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,yBAAyB,EAAE,CAAC,CAAC;AAwFtE,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAE/E,MAAM,4BAA4B;IAChC,KAAK,CAAC,oBAAoB,CACxB,SAAiB,EACjB,KAAwB;QAExB,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,SAAiB,EAAE,KAAa;QACxD,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAiB;QAKtC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,cAAc,GAA4B,EAAE,CAAC;QACnD,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAiB;QACvC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,KAAwD;QAExD,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,OAAiB;QAC1C,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,OAAiB,EACjB,gBAA0B;QAE1B,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,OAAiB;QAC5C,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,SAAiB,EACjB,YAAoB;QAEpB,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,SAAiB,EAAE,IAAY;QACxD,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,MAA4C;QAE5C,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAqB;QACzC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,YAAoB;QAC/C,MAAM,WAAW,GAAG;YAClB,2BAA2B;YAC3B,qBAAqB;YACrB,8BAA8B;YAC9B,4BAA4B;SAC7B,CAAC;QAEF,MAAM,iBAAiB,GAA6B;YAClD,WAAW,EAAE,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,eAAe,CAAC;YAC5E,kBAAkB,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,CAAC;YACrF,OAAO,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,iBAAiB,CAAC;YACrE,UAAU,EAAE,CAAC,wBAAwB,EAAE,sBAAsB,EAAE,sBAAsB,CAAC;YACtF,iBAAiB,EAAE,CAAC,eAAe,EAAE,kBAAkB,EAAE,qBAAqB,CAAC;SAChF,CAAC;QAEF,OAAO,CAAC,GAAG,WAAW,EAAE,GAAG,CAAC,iBAAiB,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,YAAoB;QAEpB,MAAM,KAAK,GAAsD;YAC/D,EAAE,EAAE,EAAE,sBAAsB,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,OAAO,EAAE;YACrF,EAAE,EAAE,EAAE,sBAAsB,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,OAAO,EAAE;SAC7F,CAAC;QAEF,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CACR,EAAE,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,OAAO,EAAE,EAC7E,EAAE,EAAE,EAAE,yBAAyB,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,OAAO,EAAE,CACrF,CAAC;QACJ,CAAC;aAAM,IAAI,YAAY,KAAK,oBAAoB,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CACR,EAAE,EAAE,EAAE,uBAAuB,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,OAAO,EAAE,EACpF,EAAE,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,QAAQ,EAAE,CACjF,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,iBAAiB,CAAC,EAAU;QAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E,IAAI,iBAAiB,GAAoC,IAAI,CAAC;AAE9D,MAAM,UAAU,2BAA2B,CAAC,OAAiC;IAC3E,iBAAiB,GAAG,OAAO,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,sHAAsH;YACtH,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,kCAAkC;IAChD,OAAO,IAAI,4BAA4B,EAAE,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,KAAK,UAAU,sBAAsB,CAAC,OAAsB;IAC1D,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,2BAA2B,EAAE,CAAC;IAE9C,+DAA+D;IAC/D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC7B,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAE3C,YAAY,CAAC,IAAI,CAAC,8BAA8B,EAAE;QAChD,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,IAAI,CAAC;QACH,kDAAkD;QAClD,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAC7E,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACtE,YAAY,CAAC,IAAI,CAAC;oBAChB,IAAI,EAAE,eAAe;oBACrB,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,QAAQ,EAAE,OAAO;oBACjB,SAAS,EAAE,MAAM,CAAC,OAAO;oBACzB,WAAW,EAAE,IAAI,IAAI,EAAE;oBACvB,SAAS;iBACV,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,YAAY,EAAE,CAAC;oBACf,YAAY,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAC1D,YAAY,CAAC,IAAI,CAAC;oBAChB,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,MAAM,CAAC,cAAc;oBACpC,QAAQ,EAAE,MAAM,CAAC,YAAY;oBAC7B,SAAS,EAAE,MAAM,CAAC,OAAO;oBACzB,WAAW,EAAE,IAAI,IAAI,EAAE;oBACvB,SAAS;iBACV,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,YAAY,EAAE,CAAC;oBACf,YAAY,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,0BAA0B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/E,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;gBAClE,YAAY,CAAC,IAAI,CAAC;oBAChB,IAAI,EAAE,gBAAgB;oBACtB,MAAM,EAAE,iBAAiB;oBACzB,aAAa,EAAE,EAAE;oBACjB,QAAQ,EAAE,MAAM,CAAC,eAAe;oBAChC,SAAS,EAAE,MAAM,CAAC,OAAO;oBACzB,WAAW,EAAE,IAAI,IAAI,EAAE;oBACvB,SAAS;iBACV,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,YAAY,EAAE,CAAC;oBACf,YAAY,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1F,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,gBAAgB,GAAG;oBACvB,0BAA0B;oBAC1B,wBAAwB;oBACxB,kBAAkB;oBAClB,mBAAmB;oBACnB,oBAAoB;iBACrB,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAChD,gBAAgB,EAChB,gBAAgB,CACjB,CAAC;gBACF,YAAY,CAAC,IAAI,CAAC;oBAChB,IAAI,EAAE,mBAAmB;oBACzB,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,EAAE;oBACjB,QAAQ,EAAE,MAAM,CAAC,cAAc;oBAC/B,SAAS,EAAE,MAAM,CAAC,OAAO;oBACzB,WAAW,EAAE,IAAI,IAAI,EAAE;oBACvB,SAAS;iBACV,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,YAAY,EAAE,CAAC;oBACf,YAAY,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC7D,KAAK,MAAM,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACrD,sBAAsB;gBACtB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,gBAAgB;oBACpF,YAAY,CAAC,IAAI,CAAC;wBAChB,IAAI,EAAE,gBAAgB;wBACtB,MAAM,EAAE,SAAS;wBACjB,aAAa,EAAE,MAAM,CAAC,YAAY;wBAClC,QAAQ,EAAE,GAAG;wBACb,SAAS,EAAE,MAAM,CAAC,OAAO;wBACzB,WAAW,EAAE,IAAI,IAAI,EAAE;wBACvB,SAAS;qBACV,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,YAAY,EAAE,CAAC;wBACf,YAAY,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,YAAY,EAAE,CAAC;oBACf,YAAY,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,aAAa,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrF,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG;oBACrB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE;oBAClD,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,qBAAqB,EAAE;oBACvD,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE;iBAC1C,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;gBAC7D,YAAY,CAAC,IAAI,CAAC;oBAChB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,WAAW;oBACnB,aAAa,EAAE,EAAE;oBACjB,QAAQ,EAAE,MAAM,CAAC,iBAAiB;oBAClC,SAAS,EAAE,MAAM,CAAC,OAAO;oBACzB,WAAW,EAAE,IAAI,IAAI,EAAE;oBACvB,SAAS;iBACV,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,YAAY,EAAE,CAAC;oBACf,YAAY,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,WAAW,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;QAErD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,MAAM,OAAO,GAAG,YAAY,GAAG,CAAC,CAAC;QAEjC,YAAY,CAAC,IAAI,CAAC,+BAA+B,EAAE;YACjD,OAAO;YACP,YAAY;YACZ,YAAY;YACZ,qBAAqB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM;YACrE,UAAU;SACX,CAAC,CAAC;QAEH,MAAM,YAAY,GAA2B;YAC3C,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACrD,UAAU,EAAE,QAAQ,CAAC,EAAE;SACxB,CAAC;QAEF,OAAO;YACL,OAAO;YACP,MAAM,EAAE;gBACN,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,aAAa,YAAY,4BAA4B;oBACvD,CAAC,CAAC,gDAAgD;gBACpD,YAAY;gBACZ,YAAY;gBACZ,YAAY;gBACZ,SAAS;aACV;YACD,OAAO,EAAE;gBACP,UAAU;gBACV,cAAc,EAAE,YAAY;gBAC5B,WAAW,EAAE,YAAY;aAC1B;YACD,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,YAAY;SACb,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,YAAY,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAE1E,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE;YAC/C,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAClD,YAAY,EAAE;gBACZ,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrD,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,OAAsB,EACtB,YAAqB;IAErB,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,YAAsC,CAAC;IACpD,MAAM,OAAO,GAAG,2BAA2B,EAAE,CAAC;IAE9C,YAAY,CAAC,IAAI,CAAC,gCAAgC,EAAE;QAClD,gBAAgB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;KAC3C,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;gBACzB,KAAK,eAAe;oBAClB,QAAQ,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAC1C,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,aAAuB,CACpC,CAAC;oBACF,MAAM;gBAER,KAAK,YAAY;oBACf,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,aAAwC,CAAC,CAAC;oBAClF,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;oBACpD,MAAM;gBAER,KAAK,gBAAgB;oBACnB,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAC3C,WAAW,CAAC,QAAoB,CACjC,CAAC;oBACF,MAAM;gBAER,KAAK,mBAAmB;oBACtB,QAAQ,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAC7C,WAAW,CAAC,QAAoB,CACjC,CAAC;oBACF,MAAM;gBAER,KAAK,gBAAgB;oBACnB,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAC3C,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,aAAuB,CACpC,CAAC;oBACF,MAAM;gBAER,KAAK,UAAU;oBACb,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,QAAoB,CAAC,CAAC;oBAC3E,MAAM;YACV,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,YAAY,EAAE,CAAC;gBACf,YAAY,CAAC,IAAI,CAAC,yBAAyB,EAAE;oBAC3C,IAAI,EAAE,WAAW,CAAC,IAAI;oBACtB,MAAM,EAAE,WAAW,CAAC,MAAM;iBAC3B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,YAAY,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,iCAAiC,EAAE;oBACpD,IAAI,EAAE,WAAW,CAAC,IAAI;oBACtB,MAAM,EAAE,WAAW,CAAC,MAAM;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,EAAE,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBACnD,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,YAAY,KAAK,CAAC;QAC3B,MAAM,EAAE;YACN,OAAO,EAAE,eAAe,YAAY,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,4BAA4B;YAC/F,YAAY;YACZ,YAAY;SACb;QACD,OAAO,EAAE;YACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,cAAc,EAAE,YAAY;YAC5B,WAAW,EAAE,YAAY;SAC1B;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,SAAS,uBAAuB,CAAC,iBAA2B;IAC1D,MAAM,QAAQ,GAAgB,IAAI,GAAG,EAAE,CAAC;IAExC,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,yCAAyC;YACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACjD,0CAA0C;YAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACvD,6CAA6C;YAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAE7B,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E,MAAM,CAAC,MAAM,qBAAqB,GAAqB;IACrD,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,gCAAgC;IACtC,WAAW,EAAE,6GAA6G;IAC1H,QAAQ,EAAE,YAAY;IACtB,SAAS,EAAE,KAAK;IAChB,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,IAAI;IACtB,gBAAgB,EAAE,MAAM,EAAE,YAAY;IACtC,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,sBAAsB;IAC/B,QAAQ,EAAE,uBAAuB;IACjC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAE7B,kDAAkD;QAClD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;CACF,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/dist/security/incident/executor.d.ts

@@ -0,0 +1,128 @@
+/**
+ * Playbook Executor - Automated Incident Response Execution
+ *
+ * State machine for playbook execution with:
+ * - Step execution with timeout handling
+ * - Retry logic for failed steps
+ * - Rollback capability for failed playbooks
+ * - Parallel step execution where dependencies allow
+ * - Persistent state tracking
+ *
+ * @packageDocumentation
+ * @module security/incident/executor
+ */
+import { EventEmitter } from 'events';
+import { Incident, Playbook, PlaybookExecutionState, ActionDefinition, Evidence, UpdateIncidentInput, ExecutionStateStore, StepExecutionResult } from './types.js';
+export interface PlaybookExecutorConfig {
+    /** Maximum concurrent step executions */
+    maxConcurrentSteps: number;
+    /** Default step timeout in milliseconds */
+    defaultStepTimeoutMs: number;
+    /** Whether to enable automatic rollback on failure */
+    enableAutoRollback: boolean;
+    /** Maximum retry delay multiplier for exponential backoff */
+    maxRetryBackoffMultiplier: number;
+    /** Base retry delay in milliseconds */
+    baseRetryDelayMs: number;
+    /** State storage for persistence */
+    stateStore?: ExecutionStateStore;
+    /** Whether to persist state */
+    persistState: boolean;
+}
+declare class InMemoryStateStore implements ExecutionStateStore {
+    private states;
+    private incidentIndex;
+    save(state: PlaybookExecutionState): Promise<void>;
+    load(executionId: string): Promise<PlaybookExecutionState | null>;
+    loadByIncident(incidentId: string): Promise<PlaybookExecutionState | null>;
+    delete(executionId: string): Promise<void>;
+    listActive(): Promise<PlaybookExecutionState[]>;
+    update(executionId: string, updates: Partial<PlaybookExecutionState>): Promise<void>;
+}
+export interface ExecutorEvents {
+    'execution:started': (state: PlaybookExecutionState) => void;
+    'execution:completed': (state: PlaybookExecutionState) => void;
+    'execution:failed': (state: PlaybookExecutionState, error: string) => void;
+    'execution:paused': (state: PlaybookExecutionState, reason: string) => void;
+    'execution:resumed': (state: PlaybookExecutionState) => void;
+    'execution:cancelled': (state: PlaybookExecutionState) => void;
+    'execution:rolledBack': (state: PlaybookExecutionState) => void;
+    'step:started': (executionId: string, stepId: string) => void;
+    'step:completed': (executionId: string, stepId: string, result: StepExecutionResult) => void;
+    'step:failed': (executionId: string, stepId: string, error: string) => void;
+    'step:waiting': (executionId: string, stepId: string, reason: 'approval' | 'manual') => void;
+    'step:approved': (executionId: string, stepId: string, approver: string) => void;
+    'step:rolledBack': (executionId: string, stepId: string) => void;
+}
+export declare class PlaybookExecutor extends EventEmitter {
+    private readonly config;
+    private readonly stateStore;
+    private readonly actions;
+    private readonly activeExecutions;
+    private incidentUpdater?;
+    private evidenceAdder?;
+    constructor(config?: Partial<PlaybookExecutorConfig>);
+    /**
+     * Register handlers for incident updates and evidence
+     */
+    registerHandlers(handlers: {
+        updateIncident: (incidentId: string, updates: UpdateIncidentInput) => Promise<void>;
+        addEvidence: (incidentId: string, evidence: Omit<Evidence, 'id' | 'collectedAt'>) => Promise<Evidence>;
+    }): void;
+    /**
+     * Register an action definition
+     */
+    registerAction(action: ActionDefinition): void;
+    /**
+     * Get a registered action
+     */
+    getAction(actionId: string): ActionDefinition | undefined;
+    /**
+     * Start executing a playbook for an incident
+     */
+    startExecution(incident: Incident, playbook: Playbook): Promise<PlaybookExecutionState>;
+    /**
+     * Resume a paused execution
+     */
+    resumeExecution(executionId: string, incident: Incident, playbook: Playbook): Promise<void>;
+    /**
+     * Cancel an active execution
+     */
+    cancelExecution(executionId: string): Promise<void>;
+    /**
+     * Approve a step that requires approval
+     */
+    approveStep(executionId: string, stepId: string, approver: string): Promise<void>;
+    /**
+     * Mark a manual step as completed
+     */
+    completeManualStep(executionId: string, stepId: string, completedBy: string, output?: unknown): Promise<void>;
+    /**
+     * Rollback a failed execution
+     */
+    rollbackExecution(executionId: string, incident: Incident, playbook: Playbook): Promise<void>;
+    /**
+     * Get execution state
+     */
+    getExecutionState(executionId: string): Promise<PlaybookExecutionState | null>;
+    /**
+     * Get execution state by incident
+     */
+    getExecutionByIncident(incidentId: string): Promise<PlaybookExecutionState | null>;
+    /**
+     * Get all active executions
+     */
+    getActiveExecutions(): Promise<PlaybookExecutionState[]>;
+    private runExecution;
+    private findExecutableSteps;
+    private executeStep;
+    private executeWithTimeout;
+    private calculateRetryDelay;
+    private createActionContext;
+    private isActiveState;
+    private sleep;
+}
+export declare function createPlaybookExecutor(config?: Partial<PlaybookExecutorConfig>): PlaybookExecutor;
+export { InMemoryStateStore };
+export type { ExecutionStateStore };
+//# sourceMappingURL=executor.d.ts.map

package/dist/security/incident/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/security/incident/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,EACL,QAAQ,EACR,QAAQ,EAER,sBAAsB,EAMtB,gBAAgB,EAChB,QAAQ,EACR,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAQpB,MAAM,WAAW,sBAAsB;IACrC,yCAAyC;IACzC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sDAAsD;IACtD,kBAAkB,EAAE,OAAO,CAAC;IAC5B,6DAA6D;IAC7D,yBAAyB,EAAE,MAAM,CAAC;IAClC,uCAAuC;IACvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oCAAoC;IACpC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,+BAA+B;IAC/B,YAAY,EAAE,OAAO,CAAC;CACvB;AAeD,cAAM,kBAAmB,YAAW,mBAAmB;IACrD,OAAO,CAAC,MAAM,CAAkD;IAChE,OAAO,CAAC,aAAa,CAAkC;IAEjD,IAAI,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlD,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAKjE,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAM1E,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1C,UAAU,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAU/C,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAM3F;AAMD,MAAM,WAAW,cAAc;IAC7B,mBAAmB,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC7D,qBAAqB,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC/D,kBAAkB,EAAE,CAAC,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3E,kBAAkB,EAAE,CAAC,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5E,mBAAmB,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC7D,qBAAqB,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAC/D,sBAAsB,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAChE,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9D,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC7F,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5E,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,QAAQ,KAAK,IAAI,CAAC;IAC7F,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACjF,iBAAiB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAClE;AAMD,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4C;IACpE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA2C;IAC5E,OAAO,CAAC,eAAe,CAAC,CAAsE;IAC9F,OAAO,CAAC,aAAa,CAAC,CAA4F;gBAEtG,MAAM,GAAE,OAAO,CAAC,sBAAsB,CAAM;IAYxD;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE;QACzB,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACpF,WAAW,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,aAAa,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;KACxG,GAAG,IAAI;IAKR;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAK9C;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIzD;;OAEG;IACG,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,sBAAsB,CAAC;IA6D7F;;OAEG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAkCjG;;OAEG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BzD;;OAEG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BvF;;OAEG;IACG,kBAAkB,CACtB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC;IA0ChB;;OAEG;IACG,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA2DnG;;OAEG;IACG,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAIpF;;OAEG;IACG,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAIxF;;OAEG;IACG,mBAAmB,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC;YAQhD,YAAY;IAwH1B,OAAO,CAAC,mBAAmB;YAuCb,WAAW;YAoKX,kBAAkB;IA+BhC,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,mBAAmB;IAiD3B,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,KAAK;CAGd;AAMD,wBAAgB,sBAAsB,CACpC,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,GACvC,gBAAgB,CAElB;AAMD,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAC9B,YAAY,EAAE,mBAAmB,EAAE,CAAC"}