@zintrust/core 0.1.42 → 0.1.43

package/packages/workers/src/ClusterLock.js

@@ -0,0 +1,397 @@
+/**
+ * Cluster Lock Manager
+ * Distributed locking using Redis for multi-instance worker coordination
+ * Sealed namespace for immutability
+ */
+import { Cloudflare, ErrorFactory, Logger, createRedisConnection, generateUuid, } from '../../../src/index.js';
+let INSTANCE_ID = '';
+const createInstanceId = () => {
+    const workers = Cloudflare.getWorkersEnv() !== null;
+    const pid = typeof process !== 'undefined' && typeof process.pid === 'number' ? process.pid : 0;
+    const prefix = workers ? 'worker-cf' : 'worker';
+    return `${prefix}-${pid}-${Date.now()}-${generateUuid()}`;
+};
+const getInstanceId = () => {
+    if (INSTANCE_ID !== '')
+        return INSTANCE_ID;
+    INSTANCE_ID = createInstanceId();
+    return INSTANCE_ID;
+};
+// Redis key prefixes
+const LOCK_PREFIX = 'worker:lock:';
+const AUDIT_PREFIX = 'worker:audit:lock:';
+// Internal state
+let redisClient = null;
+let heartbeatInterval = null;
+const activeLocks = new Map();
+/**
+ * Helper: Get full Redis key for lock
+ */
+const getLockKey = (lockKey) => {
+    return `${LOCK_PREFIX}${lockKey}`;
+};
+/**
+ * Helper: Get full Redis key for audit log
+ */
+const getAuditKey = (lockKey) => {
+    return `${AUDIT_PREFIX}${lockKey}`;
+};
+/**
+ * Helper: Store audit log entry in Redis
+ */
+const auditLockOperation = async (client, entry) => {
+    try {
+        const auditKey = getAuditKey(entry.lockKey);
+        const auditData = JSON.stringify(entry);
+        // Store in sorted set with timestamp as score for easy retrieval
+        await client.zadd(auditKey, entry.timestamp.getTime(), auditData);
+        // Keep only last 1000 entries per lock
+        await client.zremrangebyrank(auditKey, 0, -1001);
+        // Expire audit logs after 30 days
+        await client.expire(auditKey, 30 * 24 * 60 * 60);
+    }
+    catch (error) {
+        Logger.error('Failed to write lock audit log', error);
+        // Don't throw - audit failure shouldn't break lock operations
+    }
+};
+/**
+ * Helper: Extend lock TTL
+ */
+const extendLockTTL = async (client, lockKey, ttl) => {
+    const redisKey = getLockKey(lockKey);
+    const value = await client.get(redisKey);
+    if (value === null || value !== getInstanceId()) {
+        return false; // Lock not held by this instance
+    }
+    const result = await client.expire(redisKey, ttl);
+    return result === 1;
+};
+/**
+ * Helper: Start heartbeat for lock extension
+ */
+const startHeartbeat = (client) => {
+    if (heartbeatInterval) {
+        return; // Already running
+    }
+    heartbeatInterval = setInterval(async () => {
+        const lockEntries = Array.from(activeLocks.entries());
+        await Promise.allSettled(lockEntries.map(async ([lockKey, info]) => {
+            try {
+                const now = new Date();
+                const timeUntilExpiry = info.expiresAt.getTime() - now.getTime();
+                // Extend if less than 30 seconds until expiry
+                if (timeUntilExpiry < 30000) {
+                    const ttl = Math.ceil(timeUntilExpiry / 1000) + 60; // Extend by 60 more seconds
+                    const extended = await extendLockTTL(client, lockKey, ttl);
+                    if (extended) {
+                        info.expiresAt = new Date(now.getTime() + ttl * 1000);
+                        Logger.debug(`Extended lock "${lockKey}" TTL to ${ttl}s`);
+                        await auditLockOperation(client, {
+                            timestamp: now,
+                            operation: 'extend',
+                            lockKey,
+                            instanceId: getInstanceId(),
+                            success: true,
+                        });
+                    }
+                    else {
+                        // Lost the lock
+                        activeLocks.delete(lockKey);
+                        Logger.warn(`Lost lock "${lockKey}" - it was released or taken by another instance`);
+                    }
+                }
+            }
+            catch (error) {
+                Logger.error(`Failed to extend lock "${lockKey}"`, error);
+            }
+        }));
+    }, 10000); // Check every 10 seconds
+    Logger.debug('Lock heartbeat started');
+};
+/**
+ * Helper: Stop heartbeat
+ */
+const stopHeartbeat = () => {
+    if (heartbeatInterval) {
+        clearInterval(heartbeatInterval);
+        heartbeatInterval = null;
+        Logger.debug('Lock heartbeat stopped');
+    }
+};
+/**
+ * Cluster Lock Manager - Sealed namespace
+ */
+export const ClusterLock = Object.freeze({
+    /**
+     * Initialize the lock manager with Redis connection
+     */
+    initialize(config) {
+        if (redisClient) {
+            Logger.warn('ClusterLock already initialized');
+            return;
+        }
+        const client = createRedisConnection(config);
+        redisClient = client;
+        startHeartbeat(client);
+        Logger.info('ClusterLock initialized', { instanceId: getInstanceId() });
+    },
+    /**
+     * Acquire a distributed lock
+     */
+    async acquire(options) {
+        if (!redisClient) {
+            throw ErrorFactory.createGeneralError('ClusterLock not initialized. Call initialize() first.');
+        }
+        const { lockKey, ttl, region = 'default', userId } = options;
+        const redisKey = getLockKey(lockKey);
+        const now = new Date();
+        try {
+            // Try to acquire lock using SET NX EX (set if not exists with expiry)
+            const result = await redisClient.set(redisKey, getInstanceId(), 'EX', ttl, 'NX');
+            const success = result === 'OK';
+            if (success) {
+                const lockInfo = {
+                    lockKey,
+                    instanceId: getInstanceId(),
+                    acquiredAt: now,
+                    expiresAt: new Date(now.getTime() + ttl * 1000),
+                    region,
+                    userId,
+                };
+                activeLocks.set(lockKey, lockInfo);
+                Logger.info(`Acquired lock "${lockKey}"`, {
+                    region,
+                    userId,
+                    ttl,
+                    expiresAt: lockInfo.expiresAt.toISOString(),
+                });
+                await auditLockOperation(redisClient, {
+                    timestamp: now,
+                    operation: 'acquire',
+                    lockKey,
+                    instanceId: getInstanceId(),
+                    userId,
+                    success: true,
+                });
+            }
+            else {
+                Logger.debug(`Failed to acquire lock "${lockKey}" - already held by another instance`);
+                await auditLockOperation(redisClient, {
+                    timestamp: now,
+                    operation: 'acquire',
+                    lockKey,
+                    instanceId: getInstanceId(),
+                    userId,
+                    success: false,
+                });
+            }
+            return success;
+        }
+        catch (error) {
+            Logger.error(`Error acquiring lock "${lockKey}"`, error);
+            throw error;
+        }
+    },
+    /**
+     * Release a distributed lock
+     */
+    async release(lockKey, userId) {
+        if (!redisClient) {
+            throw ErrorFactory.createGeneralError('ClusterLock not initialized');
+        }
+        const redisKey = getLockKey(lockKey);
+        const now = new Date();
+        try {
+            // Only release if we own the lock
+            const value = await redisClient.get(redisKey);
+            if (value !== INSTANCE_ID) {
+                Logger.warn(`Cannot release lock "${lockKey}" - not owned by this instance`);
+                return false;
+            }
+            await redisClient.del(redisKey);
+            activeLocks.delete(lockKey);
+            Logger.info(`Released lock "${lockKey}"`, { userId });
+            await auditLockOperation(redisClient, {
+                timestamp: now,
+                operation: 'release',
+                lockKey,
+                instanceId: INSTANCE_ID,
+                userId,
+                success: true,
+            });
+            return true;
+        }
+        catch (error) {
+            Logger.error(`Error releasing lock "${lockKey}"`, error);
+            throw error;
+        }
+    },
+    /**
+     * Extend lock TTL
+     */
+    async extend(lockKey, ttl) {
+        if (!redisClient) {
+            throw ErrorFactory.createGeneralError('ClusterLock not initialized');
+        }
+        const extended = await extendLockTTL(redisClient, lockKey, ttl);
+        if (extended) {
+            const info = activeLocks.get(lockKey);
+            if (info) {
+                info.expiresAt = new Date(Date.now() + ttl * 1000);
+            }
+            Logger.debug(`Extended lock "${lockKey}" TTL to ${ttl}s`);
+        }
+        return extended;
+    },
+    /**
+     * Check if lock is held by this instance
+     */
+    async isHeldByMe(lockKey) {
+        if (!redisClient) {
+            return false;
+        }
+        const redisKey = getLockKey(lockKey);
+        const value = await redisClient.get(redisKey);
+        return value === INSTANCE_ID;
+    },
+    /**
+     * Force release a lock (admin operation)
+     */
+    async forceRelease(lockKey, userId, reason) {
+        if (!redisClient) {
+            throw ErrorFactory.createGeneralError('ClusterLock not initialized');
+        }
+        const redisKey = getLockKey(lockKey);
+        const now = new Date();
+        try {
+            const currentOwner = await redisClient.get(redisKey);
+            if (currentOwner === null) {
+                Logger.warn(`Lock "${lockKey}" does not exist`);
+                return false;
+            }
+            await redisClient.del(redisKey);
+            // Remove from active locks if we owned it
+            if (currentOwner === INSTANCE_ID) {
+                activeLocks.delete(lockKey);
+            }
+            Logger.warn(`Force released lock "${lockKey}"`, {
+                userId,
+                reason,
+                previousOwner: currentOwner,
+            });
+            await auditLockOperation(redisClient, {
+                timestamp: now,
+                operation: 'force-release',
+                lockKey,
+                instanceId: currentOwner,
+                userId,
+                reason,
+                success: true,
+            });
+            return true;
+        }
+        catch (error) {
+            Logger.error(`Error force releasing lock "${lockKey}"`, error);
+            throw error;
+        }
+    },
+    /**
+     * List all locks
+     */
+    async listLocks() {
+        if (!redisClient) {
+            throw ErrorFactory.createGeneralError('ClusterLock not initialized');
+        }
+        try {
+            const pattern = `${LOCK_PREFIX}*`;
+            const keys = await redisClient.keys(pattern);
+            const locks = await Promise.all(keys.map(async (key) => {
+                const owner = await redisClient?.get(key);
+                const lockKey = key.replace(LOCK_PREFIX, '');
+                const info = activeLocks.get(lockKey);
+                return {
+                    key: lockKey,
+                    owner: owner ?? 'unknown',
+                    region: info?.region,
+                };
+            }));
+            return locks;
+        }
+        catch (error) {
+            Logger.error('Error listing locks', error);
+            throw error;
+        }
+    },
+    /**
+     * Get lock owner
+     */
+    async getLockOwner(lockKey) {
+        if (!redisClient) {
+            throw ErrorFactory.createGeneralError('ClusterLock not initialized');
+        }
+        const redisKey = getLockKey(lockKey);
+        return redisClient.get(redisKey);
+    },
+    /**
+     * Get locks by region
+     */
+    getLocksByRegion(region) {
+        const locks = [];
+        for (const info of activeLocks.values()) {
+            if (info.region === region) {
+                locks.push({ ...info });
+            }
+        }
+        return locks;
+    },
+    /**
+     * Get audit log for a lock
+     */
+    async getAuditLog(lockKey, limit = 100) {
+        if (!redisClient) {
+            throw ErrorFactory.createGeneralError('ClusterLock not initialized');
+        }
+        try {
+            const auditKey = getAuditKey(lockKey);
+            // Get latest entries (highest scores = most recent timestamps)
+            const entries = await redisClient.zrevrange(auditKey, 0, limit - 1);
+            return entries.map((entry) => JSON.parse(entry));
+        }
+        catch (error) {
+            Logger.error(`Error retrieving audit log for "${lockKey}"`, error);
+            return [];
+        }
+    },
+    /**
+     * Get active locks held by this instance
+     */
+    getActiveLocks() {
+        return Array.from(activeLocks.values()).map((info) => ({ ...info }));
+    },
+    /**
+     * Get instance ID
+     */
+    getInstanceId() {
+        return INSTANCE_ID;
+    },
+    /**
+     * Shutdown and release all locks
+     */
+    async shutdown() {
+        if (!redisClient) {
+            return;
+        }
+        Logger.info('ClusterLock shutting down...');
+        stopHeartbeat();
+        // Release all active locks
+        const releasePromises = Array.from(activeLocks.keys()).map(async (lockKey) => ClusterLock.release(lockKey, 'system-shutdown'));
+        await Promise.all(releasePromises);
+        if (redisClient !== null) {
+            await redisClient.quit();
+            redisClient = null;
+        }
+        Logger.info('ClusterLock shutdown complete');
+    },
+});
+// Graceful shutdown handled by WorkerShutdown

package/packages/workers/src/ComplianceManager.d.ts

@@ -0,0 +1,178 @@
+/**
+ * Compliance Manager
+ * GDPR, HIPAA, and SOC2 compliance enforcement
+ * Sealed namespace for immutability
+ */
+import { type RedisConfig } from '../../../src/index.js';
+export type ComplianceStandard = 'gdpr' | 'hipaa' | 'soc2';
+export type DataClassification = 'public' | 'internal' | 'confidential' | 'restricted';
+export type ComplianceConfig = {
+    gdpr: {
+        enabled: boolean;
+        dataRetentionDays: number;
+        requireConsent: boolean;
+        enableRightToForgotten: boolean;
+        enableDataPortability: boolean;
+        enableAccessRequest: boolean;
+    };
+    hipaa: {
+        enabled: boolean;
+        requireEncryptionAtRest: boolean;
+        requireEncryptionInTransit: boolean;
+        auditRetentionYears: number;
+        requireAccessControls: boolean;
+        enableBreachNotification: boolean;
+    };
+    soc2: {
+        enabled: boolean;
+        requireChangeLogging: boolean;
+        requireAccessReviews: boolean;
+        accessReviewIntervalDays: number;
+        requireIncidentResponse: boolean;
+        requireDisasterRecovery: boolean;
+    };
+};
+export type DataSubject = {
+    id: string;
+    email?: string;
+    consentGiven: boolean;
+    consentDate?: Date;
+    consentWithdrawnDate?: Date;
+    dataClassification: DataClassification;
+    retentionPeriod?: number;
+    deletionScheduled?: Date;
+};
+export type ComplianceAuditLog = {
+    id: string;
+    timestamp: Date;
+    standard: ComplianceStandard;
+    action: string;
+    userId: string;
+    userRole?: string;
+    dataSubjectId?: string;
+    resourceId: string;
+    resourceType: string;
+    ipAddress?: string;
+    userAgent?: string;
+    changes?: Record<string, {
+        before: unknown;
+        after: unknown;
+    }>;
+    result: 'success' | 'failure' | 'blocked';
+    reason?: string;
+    severity: 'info' | 'warning' | 'critical';
+};
+export type AccessRequest = {
+    id: string;
+    dataSubjectId: string;
+    requestType: 'access' | 'deletion' | 'portability' | 'rectification';
+    requestDate: Date;
+    status: 'pending' | 'approved' | 'rejected' | 'completed';
+    requestedBy: string;
+    approvedBy?: string;
+    completedBy?: string;
+    completedDate?: Date;
+    reason?: string;
+    dataExport?: string;
+};
+export type EncryptionMetadata = {
+    algorithm: string;
+    keyId: string;
+    encryptedAt: Date;
+    encryptedBy: string;
+};
+export type ComplianceViolation = {
+    id: string;
+    timestamp: Date;
+    standard: ComplianceStandard;
+    violationType: string;
+    severity: 'low' | 'medium' | 'high' | 'critical';
+    description: string;
+    affectedResources: string[];
+    remediation: string;
+    status: 'open' | 'in-progress' | 'resolved' | 'accepted-risk';
+};
+/**
+ * Compliance Manager - Sealed namespace
+ */
+export declare const ComplianceManager: Readonly<{
+    /**
+     * Initialize compliance manager
+     */
+    initialize(redisConfig: RedisConfig, config?: Partial<ComplianceConfig>): void;
+    /**
+     * Register data subject
+     */
+    registerDataSubject(subject: DataSubject): Promise<void>;
+    /**
+     * Record consent
+     */
+    recordConsent(dataSubjectId: string, consentGiven: boolean, userId: string): Promise<void>;
+    /**
+     * Check if action is compliant
+     */
+    checkCompliance(action: string, userId: string, dataSubjectId?: string, resourceId?: string): Promise<{
+        compliant: boolean;
+        violations: string[];
+    }>;
+    /**
+     * Create access request (GDPR Right to Access, Deletion, etc.)
+     */
+    createAccessRequest(request: Omit<AccessRequest, "id" | "requestDate" | "status">): Promise<string>;
+    /**
+     * Process access request
+     */
+    processAccessRequest(requestId: string, status: AccessRequest["status"], processedBy: string): Promise<void>;
+    /**
+     * Encrypt sensitive data (HIPAA compliance)
+     */
+    encryptSensitiveData(data: string, userId: string, keyId?: string): {
+        encrypted: string;
+        metadata: EncryptionMetadata;
+    };
+    /**
+     * Decrypt sensitive data
+     */
+    decryptSensitiveData(encryptedPackage: string, userId: string): string;
+    /**
+     * Record compliance violation
+     */
+    recordViolation(violation: Omit<ComplianceViolation, "id" | "timestamp">): Promise<string>;
+    /**
+     * Get audit logs
+     */
+    getAuditLogs(standard: ComplianceStandard, startDate?: Date, endDate?: Date, limit?: number): Promise<ReadonlyArray<ComplianceAuditLog>>;
+    /**
+     * Get compliance summary
+     */
+    getComplianceSummary(): Promise<{
+        gdpr: {
+            enabled: boolean;
+            dataSubjects: number;
+            pendingRequests: number;
+        };
+        hipaa: {
+            enabled: boolean;
+            encryptedResources: number;
+            auditLogRetention: string;
+        };
+        soc2: {
+            enabled: boolean;
+            violations: number;
+            lastAccessReview?: Date;
+        };
+    }>;
+    /**
+     * Get configuration
+     */
+    getConfig(): ComplianceConfig | null;
+    /**
+     * Update configuration
+     */
+    updateConfig(config: Partial<ComplianceConfig>): void;
+    /**
+     * Shutdown
+     */
+    shutdown(): Promise<void>;
+}>;
+//# sourceMappingURL=ComplianceManager.d.ts.map

package/packages/workers/src/ComplianceManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ComplianceManager.d.ts","sourceRoot":"","sources":["../../../../packages/workers/src/ComplianceManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AAwBxB,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAE3D,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;AAEvF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;QACjB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,OAAO,CAAC;QACxB,sBAAsB,EAAE,OAAO,CAAC;QAChC,qBAAqB,EAAE,OAAO,CAAC;QAC/B,mBAAmB,EAAE,OAAO,CAAC;KAC9B,CAAC;IACF,KAAK,EAAE;QACL,OAAO,EAAE,OAAO,CAAC;QACjB,uBAAuB,EAAE,OAAO,CAAC;QACjC,0BAA0B,EAAE,OAAO,CAAC;QACpC,mBAAmB,EAAE,MAAM,CAAC;QAC5B,qBAAqB,EAAE,OAAO,CAAC;QAC/B,wBAAwB,EAAE,OAAO,CAAC;KACnC,CAAC;IACF,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAC;QACjB,oBAAoB,EAAE,OAAO,CAAC;QAC9B,oBAAoB,EAAE,OAAO,CAAC;QAC9B,wBAAwB,EAAE,MAAM,CAAC;QACjC,uBAAuB,EAAE,OAAO,CAAC;QACjC,uBAAuB,EAAE,OAAO,CAAC;KAClC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,oBAAoB,CAAC,EAAE,IAAI,CAAC;IAC5B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,CAAC;IACrE,WAAW,EAAE,IAAI,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,IAAI,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,UAAU,GAAG,eAAe,CAAC;CAC/D,CAAC;AA8MF;;GAEG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;OAEG;4BACqB,WAAW,WAAW,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI;IAoB9E;;OAEG;iCACgC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA6B9D;;OAEG;iCACgC,MAAM,gBAAgB,OAAO,UAAU,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqDhG;;OAEG;4BAEO,MAAM,UACN,MAAM,kBACE,MAAM,eACT,MAAM,GAClB,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAiCxD;;OAEG;iCAEQ,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,aAAa,GAAG,QAAQ,CAAC,GAC5D,OAAO,CAAC,MAAM,CAAC;IAsClB;;OAEG;oCAEU,MAAM,UACT,aAAa,CAAC,QAAQ,CAAC,eAClB,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAwChB;;OAEG;+BAEK,MAAM,UACJ,MAAM,mBAEb;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,kBAAkB,CAAC;KAC9B;IA0BD;;OAEG;2CACoC,MAAM,UAAU,MAAM,GAAG,MAAM;IAkCtE;;OAEG;+BAC8B,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAsChG;;OAEG;2BAES,kBAAkB,cAChB,IAAI,YACN,IAAI,mBAEb,OAAO,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAmB7C;;OAEG;4BAC2B,OAAO,CAAC;QACpC,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,eAAe,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1E,KAAK,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,kBAAkB,EAAE,MAAM,CAAC;YAAC,iBAAiB,EAAE,MAAM,CAAA;SAAE,CAAC;QACnF,IAAI,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,gBAAgB,CAAC,EAAE,IAAI,CAAA;SAAE,CAAC;KACzE,CAAC;IA+CF;;OAEG;iBACU,gBAAgB,GAAG,IAAI;IAIpC;;OAEG;yBACkB,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI;IAcrD;;OAEG;gBACe,OAAO,CAAC,IAAI,CAAC;EAY/B,CAAC"}