@zintrust/core 0.4.28 → 0.4.30

package/packages/workers/src/ComplianceManager.js

@@ -1,556 +0,0 @@
-/**
- * Compliance Manager
- * GDPR, HIPAA, and SOC2 compliance enforcement
- * Sealed namespace for immutability
- */
-import { ErrorFactory, Logger, NodeSingletons, createRedisConnection, } from '../../../src/index.js';
-// Access NodeSingletons lazily to avoid initialization errors in test environments
-const getCrypto = () => {
-    if (!NodeSingletons) {
-        throw ErrorFactory.createWorkerError('NodeSingletons not available');
-    }
-    return {
-        createCipheriv: NodeSingletons.createCipheriv,
-        createDecipheriv: NodeSingletons.createDecipheriv,
-        pbkdf2Sync: NodeSingletons.pbkdf2Sync,
-        randomBytes: NodeSingletons.randomBytes,
-    };
-};
-// Redis key prefixes
-const AUDIT_LOG_PREFIX = 'compliance:audit:';
-const DATA_SUBJECT_PREFIX = 'compliance:subject:';
-const ACCESS_REQUEST_PREFIX = 'compliance:request:';
-const VIOLATION_PREFIX = 'compliance:violation:';
-const CONSENT_PREFIX = 'compliance:consent:';
-// Internal state
-let redisClient = null;
-let complianceConfig = null;
-// Default configuration
-const DEFAULT_CONFIG = {
-    gdpr: {
-        enabled: true,
-        dataRetentionDays: 365,
-        requireConsent: true,
-        enableRightToForgotten: true,
-        enableDataPortability: true,
-        enableAccessRequest: true,
-    },
-    hipaa: {
-        enabled: false,
-        requireEncryptionAtRest: true,
-        requireEncryptionInTransit: true,
-        auditRetentionYears: 6,
-        requireAccessControls: true,
-        enableBreachNotification: true,
-    },
-    soc2: {
-        enabled: true,
-        requireChangeLogging: true,
-        requireAccessReviews: true,
-        accessReviewIntervalDays: 90,
-        requireIncidentResponse: true,
-        requireDisasterRecovery: true,
-    },
-};
-/**
- * Helper: Generate unique ID
- */
-const generateId = () => {
-    const { randomBytes } = getCrypto();
-    return randomBytes(16).toString('hex');
-};
-/**
- * Helper: Encrypt data (AES-256-GCM)
- */
-const encryptData = (data, keyId) => {
-    const { createCipheriv, pbkdf2Sync, randomBytes } = getCrypto();
-    // In production, retrieve key from secure key management service (AWS KMS, HashiCorp Vault, etc.)
-    const key = pbkdf2Sync(keyId, 'salt', 100_000, 32, 'sha256');
-    const iv = randomBytes(16);
-    const cipher = createCipheriv('aes-256-gcm', key, iv);
-    let encrypted = cipher.update(data, 'utf8', 'hex');
-    encrypted += cipher.final('hex');
-    const authTag = cipher.getAuthTag();
-    return {
-        encrypted,
-        iv: iv.toString('hex'),
-        authTag: authTag.toString('hex'),
-    };
-};
-/**
- * Helper: Decrypt data (AES-256-GCM)
- */
-const decryptData = (encrypted, iv, authTag, keyId) => {
-    const { createDecipheriv, pbkdf2Sync } = getCrypto();
-    const key = pbkdf2Sync(keyId, 'salt', 100_000, 32, 'sha256');
-    const decipher = createDecipheriv('aes-256-gcm', key, Buffer.from(iv, 'hex'));
-    decipher.setAuthTag(Buffer.from(authTag, 'hex'));
-    let decrypted = decipher.update(encrypted, 'hex', 'utf8');
-    decrypted += decipher.final('utf8');
-    return decrypted;
-};
-/**
- * Helper: Check if consent is required and valid
- */
-const checkConsent = async (dataSubjectId) => {
-    const gdprConfig = complianceConfig?.gdpr;
-    if (gdprConfig?.enabled !== true || gdprConfig?.requireConsent !== true) {
-        return { valid: true };
-    }
-    if (!redisClient) {
-        return { valid: false, reason: 'Compliance system not initialized' };
-    }
-    const key = `${DATA_SUBJECT_PREFIX}${dataSubjectId}`;
-    const subjectJson = await redisClient.get(key);
-    if (subjectJson === null) {
-        return { valid: false, reason: 'Data subject not found' };
-    }
-    const subject = JSON.parse(subjectJson);
-    if (!subject.consentGiven) {
-        return { valid: false, reason: 'Consent not given' };
-    }
-    if (subject.consentWithdrawnDate) {
-        return { valid: false, reason: 'Consent withdrawn' };
-    }
-    return { valid: true };
-};
-/**
- * Helper: Store audit log
- */
-const storeAuditLog = async (log) => {
-    if (!redisClient)
-        return;
-    try {
-        const key = `${AUDIT_LOG_PREFIX}${log.standard}`;
-        const score = log.timestamp.getTime();
-        const data = JSON.stringify(log);
-        await redisClient.zadd(key, score, data);
-        // Set retention based on standard
-        let retentionDays = 365; // Default 1 year
-        if (log.standard === 'hipaa' && complianceConfig?.hipaa.enabled === true) {
-            retentionDays = complianceConfig.hipaa.auditRetentionYears * 365;
-        }
-        await redisClient.expire(key, retentionDays * 24 * 60 * 60);
-        Logger.debug('Compliance audit log stored', {
-            standard: log.standard,
-            action: log.action,
-            userId: log.userId,
-        });
-    }
-    catch (error) {
-        Logger.error('Failed to store compliance audit log', error);
-    }
-};
-const hasNonEmptyString = (value) => {
-    return typeof value === 'string' && value.length > 0;
-};
-const runGdprChecks = async (dataSubjectId) => {
-    if (complianceConfig?.gdpr.enabled !== true) {
-        return [];
-    }
-    if (!hasNonEmptyString(dataSubjectId)) {
-        return [];
-    }
-    const consentCheck = await checkConsent(dataSubjectId);
-    if (consentCheck.valid) {
-        return [];
-    }
-    return [`GDPR: ${consentCheck.reason}`];
-};
-const runHipaaChecks = (action, userId, resourceId) => {
-    if (complianceConfig?.hipaa.enabled !== true) {
-        return [];
-    }
-    if (complianceConfig.hipaa.requireAccessControls !== true) {
-        return [];
-    }
-    Logger.debug('HIPAA access control check', { action, userId, resourceId });
-    return [];
-};
-const runSoc2Checks = (action) => {
-    if (complianceConfig?.soc2.enabled !== true) {
-        return [];
-    }
-    if (complianceConfig.soc2.requireChangeLogging !== true) {
-        return [];
-    }
-    if (action.includes('modify') || action.includes('delete') || action.includes('update')) {
-        return [];
-    }
-    return [];
-};
-/**
- * Compliance Manager - Sealed namespace
- */
-export const ComplianceManager = Object.freeze({
-    /**
-     * Initialize compliance manager
-     */
-    initialize(redisConfig, config) {
-        if (redisClient) {
-            Logger.warn('ComplianceManager already initialized');
-            return;
-        }
-        redisClient = createRedisConnection(redisConfig);
-        complianceConfig = {
-            gdpr: { ...DEFAULT_CONFIG.gdpr, ...config?.gdpr },
-            hipaa: { ...DEFAULT_CONFIG.hipaa, ...config?.hipaa },
-            soc2: { ...DEFAULT_CONFIG.soc2, ...config?.soc2 },
-        };
-        Logger.info('ComplianceManager initialized', {
-            gdpr: complianceConfig.gdpr.enabled,
-            hipaa: complianceConfig.hipaa.enabled,
-            soc2: complianceConfig.soc2.enabled,
-        });
-    },
-    /**
-     * Register data subject
-     */
-    async registerDataSubject(subject) {
-        if (!redisClient) {
-            throw ErrorFactory.createConfigError('ComplianceManager not initialized');
-        }
-        const key = `${DATA_SUBJECT_PREFIX}${subject.id}`;
-        await redisClient.set(key, JSON.stringify(subject));
-        // Set expiry based on retention period
-        if (subject.retentionPeriod !== undefined) {
-            await redisClient.expire(key, subject.retentionPeriod * 24 * 60 * 60);
-        }
-        await storeAuditLog({
-            id: generateId(),
-            timestamp: new Date(),
-            standard: 'gdpr',
-            action: 'data-subject-registered',
-            userId: 'system',
-            dataSubjectId: subject.id,
-            resourceId: subject.id,
-            resourceType: 'data-subject',
-            result: 'success',
-            severity: 'info',
-        });
-        Logger.info('Data subject registered', { id: subject.id });
-    },
-    /**
-     * Record consent
-     */
-    async recordConsent(dataSubjectId, consentGiven, userId) {
-        const client = redisClient;
-        const gdprConfig = complianceConfig?.gdpr;
-        if (!client || gdprConfig?.enabled !== true) {
-            throw ErrorFactory.createConfigError('GDPR compliance not enabled');
-        }
-        const subjectKey = `${DATA_SUBJECT_PREFIX}${dataSubjectId}`;
-        const subjectJson = await client.get(subjectKey);
-        if (subjectJson === null) {
-            throw ErrorFactory.createNotFoundError(`Data subject not found: ${dataSubjectId}`);
-        }
-        const subject = JSON.parse(subjectJson);
-        subject.consentGiven = consentGiven;
-        if (consentGiven) {
-            subject.consentDate = new Date();
-            subject.consentWithdrawnDate = undefined;
-        }
-        else {
-            subject.consentWithdrawnDate = new Date();
-        }
-        await client.set(subjectKey, JSON.stringify(subject));
-        // Store consent in separate key for auditing
-        const consentKey = `${CONSENT_PREFIX}${dataSubjectId}`;
-        const consentRecord = {
-            dataSubjectId,
-            consentGiven,
-            timestamp: new Date(),
-            recordedBy: userId,
-        };
-        await client.zadd(consentKey, Date.now(), JSON.stringify(consentRecord));
-        await storeAuditLog({
-            id: generateId(),
-            timestamp: new Date(),
-            standard: 'gdpr',
-            action: consentGiven ? 'consent-given' : 'consent-withdrawn',
-            userId,
-            dataSubjectId,
-            resourceId: dataSubjectId,
-            resourceType: 'consent',
-            result: 'success',
-            severity: 'info',
-        });
-        Logger.info('Consent recorded', { dataSubjectId, consentGiven });
-    },
-    /**
-     * Check if action is compliant
-     */
-    async checkCompliance(action, userId, dataSubjectId, resourceId) {
-        const violations = [];
-        const gdprViolations = await runGdprChecks(dataSubjectId);
-        violations.push(...gdprViolations);
-        const hipaaViolations = runHipaaChecks(action, userId, resourceId);
-        violations.push(...hipaaViolations);
-        const soc2Violations = runSoc2Checks(action);
-        violations.push(...soc2Violations);
-        const compliant = violations.length === 0;
-        if (!compliant) {
-            await storeAuditLog({
-                id: generateId(),
-                timestamp: new Date(),
-                standard: 'gdpr', // Primary standard for consent
-                action,
-                userId,
-                dataSubjectId,
-                resourceId: resourceId ?? 'unknown',
-                resourceType: 'compliance-check',
-                result: 'blocked',
-                reason: violations.join('; '),
-                severity: 'warning',
-            });
-        }
-        return { compliant, violations };
-    },
-    /**
-     * Create access request (GDPR Right to Access, Deletion, etc.)
-     */
-    async createAccessRequest(request) {
-        if (!redisClient) {
-            throw ErrorFactory.createConfigError('ComplianceManager not initialized');
-        }
-        const requestId = generateId();
-        const fullRequest = {
-            id: requestId,
-            requestDate: new Date(),
-            status: 'pending',
-            ...request,
-        };
-        const key = `${ACCESS_REQUEST_PREFIX}${requestId}`;
-        await redisClient.set(key, JSON.stringify(fullRequest));
-        await storeAuditLog({
-            id: generateId(),
-            timestamp: new Date(),
-            standard: 'gdpr',
-            action: `access-request-${request.requestType}`,
-            userId: request.requestedBy,
-            dataSubjectId: request.dataSubjectId,
-            resourceId: requestId,
-            resourceType: 'access-request',
-            result: 'success',
-            severity: 'info',
-        });
-        Logger.info('Access request created', {
-            id: requestId,
-            type: request.requestType,
-            dataSubjectId: request.dataSubjectId,
-        });
-        return requestId;
-    },
-    /**
-     * Process access request
-     */
-    async processAccessRequest(requestId, status, processedBy) {
-        if (!redisClient) {
-            throw ErrorFactory.createConfigError('ComplianceManager not initialized');
-        }
-        const key = `${ACCESS_REQUEST_PREFIX}${requestId}`;
-        const requestJson = await redisClient.get(key);
-        if (requestJson === null) {
-            throw ErrorFactory.createNotFoundError(`Access request not found: ${requestId}`);
-        }
-        const request = JSON.parse(requestJson);
-        request.status = status;
-        if (status === 'approved') {
-            request.approvedBy = processedBy;
-        }
-        else if (status === 'completed') {
-            request.completedBy = processedBy;
-            request.completedDate = new Date();
-        }
-        await redisClient.set(key, JSON.stringify(request));
-        await storeAuditLog({
-            id: generateId(),
-            timestamp: new Date(),
-            standard: 'gdpr',
-            action: `access-request-${status}`,
-            userId: processedBy,
-            dataSubjectId: request.dataSubjectId,
-            resourceId: requestId,
-            resourceType: 'access-request',
-            result: 'success',
-            severity: status === 'rejected' ? 'warning' : 'info',
-        });
-        Logger.info('Access request processed', { id: requestId, status });
-    },
-    /**
-     * Encrypt sensitive data (HIPAA compliance)
-     */
-    encryptSensitiveData(data, userId, keyId = 'default-key') {
-        if (complianceConfig?.hipaa.enabled === true &&
-            complianceConfig.hipaa.requireEncryptionAtRest !== true) {
-            Logger.warn('HIPAA encryption not enforced by configuration');
-        }
-        const { encrypted, iv, authTag } = encryptData(data, keyId);
-        const metadata = {
-            algorithm: 'aes-256-gcm',
-            keyId,
-            encryptedAt: new Date(),
-            encryptedBy: userId,
-        };
-        // Store IV and authTag with encrypted data
-        const encryptedPackage = JSON.stringify({ encrypted, iv, authTag, metadata });
-        return {
-            encrypted: encryptedPackage,
-            metadata,
-        };
-    },
-    /**
-     * Decrypt sensitive data
-     */
-    decryptSensitiveData(encryptedPackage, userId) {
-        const parsed = JSON.parse(encryptedPackage);
-        if (typeof parsed.encrypted !== 'string' ||
-            typeof parsed.iv !== 'string' ||
-            typeof parsed.authTag !== 'string' ||
-            typeof parsed.metadata?.keyId !== 'string') {
-            throw ErrorFactory.createValidationError('Invalid encrypted payload');
-        }
-        const { encrypted, iv, authTag, metadata } = parsed;
-        storeAuditLog({
-            id: generateId(),
-            timestamp: new Date(),
-            standard: 'hipaa',
-            action: 'data-decrypted',
-            userId,
-            resourceId: metadata.keyId,
-            resourceType: 'encrypted-data',
-            result: 'success',
-            severity: 'info',
-        });
-        return decryptData(encrypted, iv, authTag, metadata.keyId);
-    },
-    /**
-     * Record compliance violation
-     */
-    async recordViolation(violation) {
-        if (!redisClient) {
-            throw ErrorFactory.createConfigError('ComplianceManager not initialized');
-        }
-        const violationId = generateId();
-        const fullViolation = {
-            id: violationId,
-            timestamp: new Date(),
-            ...violation,
-        };
-        const key = `${VIOLATION_PREFIX}${violationId}`;
-        await redisClient.set(key, JSON.stringify(fullViolation));
-        await storeAuditLog({
-            id: generateId(),
-            timestamp: new Date(),
-            standard: violation.standard,
-            action: 'violation-recorded',
-            userId: 'system',
-            resourceId: violationId,
-            resourceType: 'compliance-violation',
-            result: 'success',
-            severity: 'critical',
-            reason: violation.description,
-        });
-        Logger.error('Compliance violation recorded', {
-            id: violationId,
-            standard: violation.standard,
-            type: violation.violationType,
-            severity: violation.severity,
-        });
-        return violationId;
-    },
-    /**
-     * Get audit logs
-     */
-    async getAuditLogs(standard, startDate, endDate, limit = 1000) {
-        if (!redisClient) {
-            throw ErrorFactory.createConfigError('ComplianceManager not initialized');
-        }
-        try {
-            const key = `${AUDIT_LOG_PREFIX}${standard}`;
-            const minScore = startDate ? startDate.getTime() : '-inf';
-            const maxScore = endDate ? endDate.getTime() : '+inf';
-            const logs = await redisClient.zrangebyscore(key, minScore, maxScore, 'LIMIT', 0, limit);
-            return logs.map((log) => JSON.parse(log));
-        }
-        catch (error) {
-            Logger.error('Failed to retrieve audit logs', error);
-            return [];
-        }
-    },
-    /**
-     * Get compliance summary
-     */
-    async getComplianceSummary() {
-        if (!redisClient || !complianceConfig) {
-            throw ErrorFactory.createConfigError('ComplianceManager not initialized');
-        }
-        const client = redisClient;
-        const config = complianceConfig;
-        // Count data subjects
-        const subjectKeys = await client.keys(`${DATA_SUBJECT_PREFIX}*`);
-        // Count pending access requests
-        const requestKeys = await client.keys(`${ACCESS_REQUEST_PREFIX}*`);
-        let pendingRequests = 0;
-        const requestEntries = await Promise.all(requestKeys.map(async (key) => client.get(key)));
-        requestEntries.forEach((requestJson) => {
-            if (requestJson !== null) {
-                const request = JSON.parse(requestJson);
-                if (request.status === 'pending') {
-                    pendingRequests++;
-                }
-            }
-        });
-        // Count violations
-        const violationKeys = await client.keys(`${VIOLATION_PREFIX}*`);
-        return {
-            gdpr: {
-                enabled: config.gdpr.enabled,
-                dataSubjects: subjectKeys.length,
-                pendingRequests,
-            },
-            hipaa: {
-                enabled: config.hipaa.enabled,
-                encryptedResources: 0, // Would need to track this separately
-                auditLogRetention: `${config.hipaa.auditRetentionYears} years`,
-            },
-            soc2: {
-                enabled: config.soc2.enabled,
-                violations: violationKeys.length,
-            },
-        };
-    },
-    /**
-     * Get configuration
-     */
-    getConfig() {
-        return complianceConfig ? { ...complianceConfig } : null;
-    },
-    /**
-     * Update configuration
-     */
-    updateConfig(config) {
-        if (!complianceConfig) {
-            throw ErrorFactory.createConfigError('ComplianceManager not initialized');
-        }
-        complianceConfig = {
-            gdpr: { ...complianceConfig.gdpr, ...config.gdpr },
-            hipaa: { ...complianceConfig.hipaa, ...config.hipaa },
-            soc2: { ...complianceConfig.soc2, ...config.soc2 },
-        };
-        Logger.info('Compliance configuration updated', { config });
-    },
-    /**
-     * Shutdown
-     */
-    async shutdown() {
-        Logger.info('ComplianceManager shutting down...');
-        if (redisClient) {
-            await redisClient.quit();
-            redisClient = null;
-        }
-        complianceConfig = null;
-        Logger.info('ComplianceManager shutdown complete');
-    },
-});
-// Graceful shutdown handled by WorkerShutdown

package/packages/workers/src/DatacenterOrchestrator.d.ts

@@ -1,134 +0,0 @@
-/**
- * Datacenter Orchestration
- * Multi-datacenter worker coordination with region affinity and failover
- * Sealed namespace for immutability
- */
-export type DatacenterRegion = {
-    id: string;
-    name: string;
-    location: {
-        continent: string;
-        country: string;
-        city: string;
-        coordinates?: {
-            lat: number;
-            lng: number;
-        };
-    };
-    priority: number;
-    capacity: number;
-    currentLoad: number;
-    healthStatus: 'healthy' | 'degraded' | 'offline';
-    latency: number;
-    costMultiplier: number;
-};
-export type ReplicationStrategy = 'none' | 'active-passive' | 'active-active' | 'multi-master';
-export type FailoverPolicy = {
-    enabled: boolean;
-    autoFailover: boolean;
-    failoverThreshold: number;
-    healthCheckInterval: number;
-    minHealthyRegions: number;
-    preferredRegions: string[];
-};
-export type WorkerPlacement = {
-    workerName: string;
-    primaryRegion: string;
-    secondaryRegions: string[];
-    replicationStrategy: ReplicationStrategy;
-    affinityRules: {
-        preferLocal: boolean;
-        maxLatency?: number;
-        avoidRegions?: string[];
-    };
-};
-export type DatacenterTopology = {
-    regions: DatacenterRegion[];
-    connections: Array<{
-        from: string;
-        to: string;
-        latency: number;
-        bandwidth: number;
-    }>;
-};
-/**
- * Datacenter Orchestrator - Sealed namespace
- */
-export declare const DatacenterOrchestrator: Readonly<{
-    /**
-     * Register datacenter region
-     */
-    registerRegion(region: DatacenterRegion): void;
-    /**
-     * Unregister datacenter region
-     */
-    unregisterRegion(regionId: string): void;
-    /**
-     * Get region information
-     */
-    getRegion(regionId: string): DatacenterRegion | null;
-    /**
-     * List all regions
-     */
-    listRegions(healthStatus?: DatacenterRegion["healthStatus"]): ReadonlyArray<DatacenterRegion>;
-    /**
-     * Update region health status
-     */
-    updateRegionHealth(regionId: string, healthStatus: DatacenterRegion["healthStatus"]): void;
-    /**
-     * Update region load
-     */
-    updateRegionLoad(regionId: string, currentLoad: number): void;
-    /**
-     * Place worker in datacenter
-     */
-    placeWorker(placement: WorkerPlacement): void;
-    /**
-     * Get worker placement
-     */
-    getPlacement(workerName: string): WorkerPlacement | null;
-    /**
-     * Update worker placement
-     */
-    updatePlacement(workerName: string, updates: Partial<WorkerPlacement>): void;
-    /**
-     * Remove worker placement
-     */
-    removeWorker(workerName: string): void;
-    /**
-     * Find optimal region for job execution
-     */
-    findOptimalRegion(workerName: string, clientRegion?: string): string | null;
-    /**
-     * Set failover policy for region
-     */
-    setFailoverPolicy(regionId: string, policy: FailoverPolicy): void;
-    /**
-     * Get failover policy
-     */
-    getFailoverPolicy(regionId: string): FailoverPolicy | null;
-    /**
-     * Start health checks for region
-     */
-    startHealthChecks(regionId: string, intervalSeconds: number): void;
-    /**
-     * Stop health checks for region
-     */
-    stopHealthChecks(regionId: string): void;
-    /**
-     * Get datacenter topology
-     */
-    getTopology(): DatacenterTopology;
-    /**
-     * Get load balancing recommendation
-     */
-    getLoadBalancingRecommendation(): Array<{
-        regionId: string;
-        recommendedLoad: number;
-    }>;
-    /**
-     * Shutdown datacenter orchestrator
-     */
-    shutdown(): void;
-}>;
-//# sourceMappingURL=DatacenterOrchestrator.d.ts.map

package/packages/workers/src/DatacenterOrchestrator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"DatacenterOrchestrator.d.ts","sourceRoot":"","sources":["../../../../packages/workers/src/DatacenterOrchestrator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;KAC5C,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,gBAAgB,GAAG,eAAe,GAAG,cAAc,CAAC;AAE/F,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,aAAa,EAAE;QACb,WAAW,EAAE,OAAO,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,WAAW,EAAE,KAAK,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;CACJ,CAAC;AA4JF;;GAEG;AACH,eAAO,MAAM,sBAAsB;IACjC;;OAEG;2BACoB,gBAAgB,GAAG,IAAI;IAa9C;;OAEG;+BACwB,MAAM,GAAG,IAAI;IA8BxC;;OAEG;wBACiB,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAKpD;;OAEG;+BACwB,gBAAgB,CAAC,cAAc,CAAC,GAAG,aAAa,CAAC,gBAAgB,CAAC;IAU7F;;OAEG;iCAC0B,MAAM,gBAAgB,gBAAgB,CAAC,cAAc,CAAC,GAAG,IAAI;IAwB1F;;OAEG;+BACwB,MAAM,eAAe,MAAM,GAAG,IAAI;IAsB7D;;OAEG;2BACoB,eAAe,GAAG,IAAI;IAuB7C;;OAEG;6BACsB,MAAM,GAAG,eAAe,GAAG,IAAI;IAKxD;;OAEG;gCACyB,MAAM,WAAW,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI;IAY5E;;OAEG;6BACsB,MAAM,GAAG,IAAI;IAUtC;;OAEG;kCAC2B,MAAM,iBAAiB,MAAM,GAAG,MAAM,GAAG,IAAI;IAU3E;;OAEG;gCACyB,MAAM,UAAU,cAAc,GAAG,IAAI;IAmBjE;;OAEG;gCACyB,MAAM,GAAG,cAAc,GAAG,IAAI;IAK1D;;OAEG;gCACyB,MAAM,mBAAmB,MAAM,GAAG,IAAI;IAmBlE;;OAEG;+BACwB,MAAM,GAAG,IAAI;IAWxC;;OAEG;mBACY,kBAAkB;IAqCjC;;OAEG;sCAC+B,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAiBtF;;OAEG;gBACS,IAAI;EAehB,CAAC"}