codehere 0.1.0 → 0.2.0

package/dist/infrastructure/governance/nist-ai-rmf.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Infrastructure: NIST AI Risk Management Framework (AI RMF)
+ *
+ * Enterprise AI Governance structure based on NIST AI RMF
+ * Research: Enterprise governance mandatory for adoption (NIST AI RMF, ISO 42001)
+ *
+ * 4 Core Functions:
+ * 1. Govern: Risk culture, accountability, lifecycle management
+ * 2. Map: Context framing, risk identification
+ * 3. Measure: SAST/SCA mandatory, security density tracking
+ * 4. Manage: Incident response, continuous updates
+ */
+export interface RiskContext {
+    contextType: 'code_generation' | 'code_edit' | 'code_explanation' | 'planning';
+    targetDomain: string;
+    riskLevel: 'low' | 'medium' | 'high' | 'critical';
+    regulatoryRelevant: boolean;
+    userContext?: Record<string, any>;
+}
+export interface RiskProfile {
+    security: {
+        vulnerabilities: number;
+        licenseConflicts: number;
+        providerBias: boolean;
+        uncertainty: number;
+    };
+    compliance: {
+        gdprRelevant: boolean;
+        hipaaRelevant: boolean;
+        industrySpecific?: string[];
+    };
+    operational: {
+        complexity: number;
+        dependencies: number;
+        testCoverage?: number;
+    };
+}
+export interface GovernanceDecision {
+    decisionId: string;
+    timestamp: number;
+    function: 'govern' | 'map' | 'measure' | 'manage';
+    decision: string;
+    rationale: string;
+    riskProfile?: RiskProfile;
+    outcome?: 'allowed' | 'blocked' | 'requires_review';
+    reviewer?: string;
+}
+/**
+ * NIST AI RMF Framework
+ * Implements 4 core functions for enterprise AI governance
+ */
+export declare class NISTAIRMF {
+    private decisions;
+    /**
+     * GOVERN Function: Risk culture, accountability, lifecycle management
+     * Establishes organizational context for AI risk management
+     */
+    govern(context: RiskContext): Promise<GovernanceDecision>;
+    /**
+     * MAP Function: Context framing, risk identification
+     * Identifies and characterizes risks in specific contexts
+     */
+    map(context: RiskContext, existingRiskProfile?: RiskProfile): Promise<{
+        decision: GovernanceDecision;
+        riskProfile: RiskProfile;
+    }>;
+    /**
+     * MEASURE Function: SAST/SCA mandatory, security density tracking
+     * Quantifies and monitors AI risks and performance
+     */
+    measure(riskProfile: RiskProfile, metrics: {
+        sastFindings?: number;
+        licenseFindings?: number;
+        providerBiasFindings?: number;
+        uncertaintyScore?: number;
+        testCoverage?: number;
+        securityDensity?: number;
+    }): Promise<GovernanceDecision>;
+    /**
+     * MANAGE Function: Incident response, continuous updates
+     * Responds to and manages AI risks over time
+     */
+    manage(incident: {
+        type: 'security' | 'compliance' | 'operational' | 'performance';
+        severity: 'low' | 'medium' | 'high' | 'critical';
+        description: string;
+        context?: RiskContext;
+    }, action: 'mitigate' | 'accept' | 'transfer' | 'avoid'): Promise<GovernanceDecision>;
+    /**
+     * Get governance history for audit
+     */
+    getGovernanceHistory(filter?: {
+        function?: 'govern' | 'map' | 'measure' | 'manage';
+        outcome?: 'allowed' | 'blocked' | 'requires_review';
+        startTime?: number;
+        endTime?: number;
+    }): GovernanceDecision[];
+    private assessRiskCulture;
+    private assignAccountability;
+    private planLifecycle;
+    private frameContext;
+    private characterizeRisks;
+    private getSecurityDensityThreshold;
+    private respondToIncident;
+    private planContinuousUpdates;
+}
+//# sourceMappingURL=nist-ai-rmf.d.ts.map

package/dist/infrastructure/governance/nist-ai-rmf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nist-ai-rmf.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/governance/nist-ai-rmf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,iBAAiB,GAAG,WAAW,GAAG,kBAAkB,GAAG,UAAU,CAAC;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,kBAAkB,EAAE,OAAO,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE;QACR,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,YAAY,EAAE,OAAO,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,UAAU,EAAE;QACV,YAAY,EAAE,OAAO,CAAC;QACtB,aAAa,EAAE,OAAO,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,WAAW,EAAE;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,QAAQ,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,OAAO,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,iBAAiB,CAAC;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,SAAS,CAA4B;IAE7C;;;OAGG;IACG,MAAM,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAyB/D;;;OAGG;IACG,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,mBAAmB,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,kBAAkB,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE,CAAC;IAyCvI;;;OAGG;IACG,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE;QAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAyC/B;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa,CAAC;QAChE,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;QACjD,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,WAAW,CAAC;KACvB,EACD,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,GACnD,OAAO,CAAC,kBAAkB,CAAC;IAsB9B;;OAEG;IACH,oBAAoB,CAAC,MAAM,CAAC,EAAE;QAC5B,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;QACnD,OAAO,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,iBAAiB,CAAC;QACpD,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,kBAAkB,EAAE;IAwBxB,OAAO,CAAC,iBAAiB;IAoBzB,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,YAAY;IAiBpB,OAAO,CAAC,iBAAiB;IA8CzB,OAAO,CAAC,2BAA2B;IAMnC,OAAO,CAAC,iBAAiB;IA4BzB,OAAO,CAAC,qBAAqB;CAc9B"}

package/dist/infrastructure/governance/nist-ai-rmf.js

@@ -0,0 +1,294 @@
+/**
+ * Infrastructure: NIST AI Risk Management Framework (AI RMF)
+ *
+ * Enterprise AI Governance structure based on NIST AI RMF
+ * Research: Enterprise governance mandatory for adoption (NIST AI RMF, ISO 42001)
+ *
+ * 4 Core Functions:
+ * 1. Govern: Risk culture, accountability, lifecycle management
+ * 2. Map: Context framing, risk identification
+ * 3. Measure: SAST/SCA mandatory, security density tracking
+ * 4. Manage: Incident response, continuous updates
+ */
+/**
+ * NIST AI RMF Framework
+ * Implements 4 core functions for enterprise AI governance
+ */
+export class NISTAIRMF {
+    decisions = [];
+    /**
+     * GOVERN Function: Risk culture, accountability, lifecycle management
+     * Establishes organizational context for AI risk management
+     */
+    async govern(context) {
+        const decisionId = `govern-${Date.now()}`;
+        // Govern: Risk culture assessment
+        const riskCulture = this.assessRiskCulture(context);
+        // Govern: Accountability assignment
+        const accountability = this.assignAccountability(context);
+        // Govern: Lifecycle management planning
+        const lifecycle = this.planLifecycle(context);
+        const decision = {
+            decisionId,
+            timestamp: Date.now(),
+            function: 'govern',
+            decision: `Risk culture: ${riskCulture.level}, Accountability: ${accountability.role}, Lifecycle: ${lifecycle.phase}`,
+            rationale: `Governed ${context.contextType} operation with ${context.riskLevel} risk level`,
+            outcome: riskCulture.level === 'critical' ? 'requires_review' : 'allowed',
+        };
+        this.decisions.push(decision);
+        return decision;
+    }
+    /**
+     * MAP Function: Context framing, risk identification
+     * Identifies and characterizes risks in specific contexts
+     */
+    async map(context, existingRiskProfile) {
+        const decisionId = `map-${Date.now()}`;
+        // Map: Context framing
+        const contextFrame = this.frameContext(context);
+        // Map: Risk identification
+        const riskProfile = existingRiskProfile || {
+            security: {
+                vulnerabilities: 0,
+                licenseConflicts: 0,
+                providerBias: false,
+                uncertainty: 0.5,
+            },
+            compliance: {
+                gdprRelevant: context.regulatoryRelevant,
+                hipaaRelevant: context.targetDomain === 'healthcare',
+            },
+            operational: {
+                complexity: context.riskLevel === 'critical' ? 0.9 : 0.5,
+                dependencies: 0,
+            },
+        };
+        // Map: Risk characterization
+        const risks = this.characterizeRisks(riskProfile, context);
+        const decision = {
+            decisionId,
+            timestamp: Date.now(),
+            function: 'map',
+            decision: `Mapped ${risks.length} risks in ${context.contextType} context`,
+            rationale: risks.map(r => r.description).join('; '),
+            riskProfile,
+            outcome: risks.some(r => r.severity === 'critical') ? 'requires_review' : 'allowed',
+        };
+        this.decisions.push(decision);
+        return { decision, riskProfile };
+    }
+    /**
+     * MEASURE Function: SAST/SCA mandatory, security density tracking
+     * Quantifies and monitors AI risks and performance
+     */
+    async measure(riskProfile, metrics) {
+        const decisionId = `measure-${Date.now()}`;
+        // Measure: SAST/SCA metrics (mandatory)
+        const securityMetrics = {
+            vulnerabilities: metrics.sastFindings || 0,
+            licenseConflicts: metrics.licenseFindings || 0,
+            providerBias: (metrics.providerBiasFindings || 0) > 0,
+            uncertainty: metrics.uncertaintyScore || riskProfile.security.uncertainty,
+        };
+        // Measure: Security density tracking (language-specific thresholds)
+        const securityDensity = metrics.securityDensity || 0;
+        const densityThreshold = this.getSecurityDensityThreshold(riskProfile);
+        // Measure: Test coverage tracking
+        const testCoverage = metrics.testCoverage || riskProfile.operational.testCoverage || 0;
+        const updatedRiskProfile = {
+            ...riskProfile,
+            security: securityMetrics,
+            operational: {
+                ...riskProfile.operational,
+                testCoverage,
+            },
+        };
+        const decision = {
+            decisionId,
+            timestamp: Date.now(),
+            function: 'measure',
+            decision: `Measured: ${securityMetrics.vulnerabilities} vulnerabilities, ${securityMetrics.licenseConflicts} license conflicts, security density: ${securityDensity.toFixed(2)}, test coverage: ${testCoverage.toFixed(1)}%`,
+            rationale: `SAST/SCA metrics collected. Security density ${securityDensity > densityThreshold ? 'EXCEEDS' : 'within'} threshold (${densityThreshold}). Test coverage ${testCoverage < 80 ? 'BELOW' : 'meets'} target (80%)`,
+            riskProfile: updatedRiskProfile,
+            outcome: securityMetrics.vulnerabilities > 0 || securityMetrics.licenseConflicts > 0 || testCoverage < 50 ? 'requires_review' : 'allowed',
+        };
+        this.decisions.push(decision);
+        return decision;
+    }
+    /**
+     * MANAGE Function: Incident response, continuous updates
+     * Responds to and manages AI risks over time
+     */
+    async manage(incident, action) {
+        const decisionId = `manage-${Date.now()}`;
+        // Manage: Incident response
+        const response = this.respondToIncident(incident, action);
+        // Manage: Continuous update planning
+        const updates = this.planContinuousUpdates(incident);
+        const decision = {
+            decisionId,
+            timestamp: Date.now(),
+            function: 'manage',
+            decision: `${action.toUpperCase()}: ${incident.type} incident (${incident.severity})`,
+            rationale: `${response.description}. Continuous updates: ${updates.map(u => u.action).join(', ')}`,
+            outcome: action === 'accept' || action === 'transfer' ? 'allowed' : action === 'avoid' ? 'blocked' : 'requires_review',
+        };
+        this.decisions.push(decision);
+        return decision;
+    }
+    /**
+     * Get governance history for audit
+     */
+    getGovernanceHistory(filter) {
+        let filtered = [...this.decisions];
+        if (filter?.function) {
+            filtered = filtered.filter(d => d.function === filter.function);
+        }
+        if (filter?.outcome) {
+            filtered = filtered.filter(d => d.outcome === filter.outcome);
+        }
+        if (filter?.startTime) {
+            filtered = filtered.filter(d => d.timestamp >= filter.startTime);
+        }
+        if (filter?.endTime) {
+            filtered = filtered.filter(d => d.timestamp <= filter.endTime);
+        }
+        return filtered.sort((a, b) => b.timestamp - a.timestamp);
+    }
+    // Private helper methods
+    assessRiskCulture(context) {
+        const factors = [];
+        let level = 'low';
+        if (context.riskLevel === 'critical') {
+            level = 'critical';
+            factors.push('Critical risk level detected');
+        }
+        else if (context.regulatoryRelevant) {
+            level = 'high';
+            factors.push('Regulatory relevance (GDPR/HIPAA)');
+        }
+        else if (context.riskLevel === 'high') {
+            level = 'high';
+            factors.push('High risk level');
+        }
+        else {
+            level = context.riskLevel;
+        }
+        return { level, factors };
+    }
+    assignAccountability(context) {
+        // Accountability assignment based on risk level
+        if (context.riskLevel === 'critical') {
+            return { role: 'senior_engineer_review', responsible: 'Senior Engineer + Security Team' };
+        }
+        else if (context.riskLevel === 'high') {
+            return { role: 'engineer_review', responsible: 'Engineering Lead' };
+        }
+        else {
+            return { role: 'automated', responsible: 'AI System' };
+        }
+    }
+    planLifecycle(context) {
+        const stages = ['Development', 'Testing', 'Deployment', 'Monitoring', 'Retirement'];
+        return {
+            phase: 'Development',
+            stages,
+        };
+    }
+    frameContext(context) {
+        const constraints = [];
+        if (context.regulatoryRelevant) {
+            constraints.push('Regulatory compliance required');
+        }
+        if (context.riskLevel === 'critical') {
+            constraints.push('Critical risk - human review mandatory');
+        }
+        return {
+            domain: context.targetDomain,
+            constraints,
+        };
+    }
+    characterizeRisks(riskProfile, context) {
+        const risks = [];
+        if (riskProfile.security.vulnerabilities > 0) {
+            risks.push({
+                type: 'security',
+                severity: riskProfile.security.vulnerabilities > 5 ? 'critical' : 'high',
+                description: `${riskProfile.security.vulnerabilities} security vulnerabilities detected`,
+            });
+        }
+        if (riskProfile.security.licenseConflicts > 0) {
+            risks.push({
+                type: 'compliance',
+                severity: 'critical',
+                description: `${riskProfile.security.licenseConflicts} license conflicts detected (35% contamination risk)`,
+            });
+        }
+        if (riskProfile.security.providerBias) {
+            risks.push({
+                type: 'operational',
+                severity: 'medium',
+                description: 'Provider bias detected - vendor lock-in risk',
+            });
+        }
+        if (riskProfile.security.uncertainty > 0.7) {
+            risks.push({
+                type: 'reliability',
+                severity: 'high',
+                description: `High epistemic uncertainty (${(riskProfile.security.uncertainty * 100).toFixed(1)}%) - hallucination risk`,
+            });
+        }
+        if (riskProfile.compliance.gdprRelevant || riskProfile.compliance.hipaaRelevant) {
+            risks.push({
+                type: 'compliance',
+                severity: 'high',
+                description: 'Regulatory compliance requirements (GDPR/HIPAA)',
+            });
+        }
+        return risks;
+    }
+    getSecurityDensityThreshold(riskProfile) {
+        // Language-specific thresholds (LOC per CWE)
+        // Research: Security density tracking with language-specific thresholds
+        return 1000; // Default: 1 CWE per 1000 LOC
+    }
+    respondToIncident(incident, action) {
+        const steps = [];
+        if (action === 'mitigate') {
+            steps.push('Identify root cause');
+            steps.push('Implement fix');
+            steps.push('Verify resolution');
+            steps.push('Update risk profile');
+        }
+        else if (action === 'accept') {
+            steps.push('Document acceptance rationale');
+            steps.push('Monitor for escalation');
+        }
+        else if (action === 'avoid') {
+            steps.push('Block operation');
+            steps.push('Notify stakeholders');
+        }
+        else if (action === 'transfer') {
+            steps.push('Assign to responsible party');
+            steps.push('Track resolution');
+        }
+        return {
+            description: `${action.toUpperCase()} action for ${incident.severity} ${incident.type} incident`,
+            steps,
+        };
+    }
+    planContinuousUpdates(incident) {
+        const updates = [];
+        if (incident.severity === 'critical') {
+            updates.push({ action: 'Update risk models', priority: 'high' });
+            updates.push({ action: 'Enhance detection rules', priority: 'high' });
+        }
+        else {
+            updates.push({ action: 'Monitor similar incidents', priority: 'medium' });
+        }
+        updates.push({ action: 'Review governance policies', priority: 'low' });
+        return updates;
+    }
+}
+//# sourceMappingURL=nist-ai-rmf.js.map

package/dist/infrastructure/governance/nist-ai-rmf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nist-ai-rmf.js","sourceRoot":"","sources":["../../../src/infrastructure/governance/nist-ai-rmf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAwCH;;;GAGG;AACH,MAAM,OAAO,SAAS;IACZ,SAAS,GAAyB,EAAE,CAAC;IAE7C;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAoB;QAC/B,MAAM,UAAU,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAE1C,kCAAkC;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAEpD,oCAAoC;QACpC,MAAM,cAAc,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAE1D,wCAAwC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAuB;YACnC,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,iBAAiB,WAAW,CAAC,KAAK,qBAAqB,cAAc,CAAC,IAAI,gBAAgB,SAAS,CAAC,KAAK,EAAE;YACrH,SAAS,EAAE,YAAY,OAAO,CAAC,WAAW,mBAAmB,OAAO,CAAC,SAAS,aAAa;YAC3F,OAAO,EAAE,WAAW,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;SAC1E,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,OAAoB,EAAE,mBAAiC;QAC/D,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAEvC,uBAAuB;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAEhD,2BAA2B;QAC3B,MAAM,WAAW,GAAgB,mBAAmB,IAAI;YACtD,QAAQ,EAAE;gBACR,eAAe,EAAE,CAAC;gBAClB,gBAAgB,EAAE,CAAC;gBACnB,YAAY,EAAE,KAAK;gBACnB,WAAW,EAAE,GAAG;aACjB;YACD,UAAU,EAAE;gBACV,YAAY,EAAE,OAAO,CAAC,kBAAkB;gBACxC,aAAa,EAAE,OAAO,CAAC,YAAY,KAAK,YAAY;aACrD;YACD,WAAW,EAAE;gBACX,UAAU,EAAE,OAAO,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;gBACxD,YAAY,EAAE,CAAC;aAChB;SACF,CAAC;QAEF,6BAA6B;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAE3D,MAAM,QAAQ,GAAuB;YACnC,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,UAAU,KAAK,CAAC,MAAM,aAAa,OAAO,CAAC,WAAW,UAAU;YAC1E,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACnD,WAAW;YACX,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;SACpF,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,WAAwB,EAAE,OAOvC;QACC,MAAM,UAAU,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAE3C,wCAAwC;QACxC,MAAM,eAAe,GAAG;YACtB,eAAe,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC;YAC1C,gBAAgB,EAAE,OAAO,CAAC,eAAe,IAAI,CAAC;YAC9C,YAAY,EAAE,CAAC,OAAO,CAAC,oBAAoB,IAAI,CAAC,CAAC,GAAG,CAAC;YACrD,WAAW,EAAE,OAAO,CAAC,gBAAgB,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW;SAC1E,CAAC;QAEF,oEAAoE;QACpE,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC;QACrD,MAAM,gBAAgB,GAAG,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAEvE,kCAAkC;QAClC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC,WAAW,CAAC,YAAY,IAAI,CAAC,CAAC;QAEvF,MAAM,kBAAkB,GAAgB;YACtC,GAAG,WAAW;YACd,QAAQ,EAAE,eAAe;YACzB,WAAW,EAAE;gBACX,GAAG,WAAW,CAAC,WAAW;gBAC1B,YAAY;aACb;SACF,CAAC;QAEF,MAAM,QAAQ,GAAuB;YACnC,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,aAAa,eAAe,CAAC,eAAe,qBAAqB,eAAe,CAAC,gBAAgB,yCAAyC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;YAC5N,SAAS,EAAE,gDAAgD,eAAe,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,eAAe,gBAAgB,oBAAoB,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,eAAe;YAC3N,WAAW,EAAE,kBAAkB;YAC/B,OAAO,EAAE,eAAe,CAAC,eAAe,GAAG,CAAC,IAAI,eAAe,CAAC,gBAAgB,GAAG,CAAC,IAAI,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;SAC1I,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,QAKC,EACD,MAAoD;QAEpD,MAAM,UAAU,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAE1C,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE1D,qCAAqC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAErD,MAAM,QAAQ,GAAuB;YACnC,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,IAAI,cAAc,QAAQ,CAAC,QAAQ,GAAG;YACrF,SAAS,EAAE,GAAG,QAAQ,CAAC,WAAW,yBAAyB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAClG,OAAO,EAAE,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB;SACvH,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,MAKpB;QACC,IAAI,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnC,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;YACrB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,MAAM,EAAE,SAAS,EAAE,CAAC;YACtB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,SAAU,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,OAAQ,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,yBAAyB;IAEjB,iBAAiB,CAAC,OAAoB;QAC5C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,KAAK,GAA2C,KAAK,CAAC;QAE1D,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACrC,KAAK,GAAG,UAAU,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACtC,KAAK,GAAG,MAAM,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YACxC,KAAK,GAAG,MAAM,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,OAAO,CAAC,SAA6B,CAAC;QAChD,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5B,CAAC;IAEO,oBAAoB,CAAC,OAAoB;QAC/C,gDAAgD;QAChD,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACrC,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC;QAC5F,CAAC;aAAM,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YACxC,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,OAAoB;QACxC,MAAM,MAAM,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QACpF,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,MAAM;SACP,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,OAAoB;QACvC,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,WAAW,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACrC,WAAW,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,YAAY;YAC5B,WAAW;SACZ,CAAC;IACJ,CAAC;IAEO,iBAAiB,CAAC,WAAwB,EAAE,OAAoB;QACtE,MAAM,KAAK,GAAmE,EAAE,CAAC;QAEjF,IAAI,WAAW,CAAC,QAAQ,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;gBACxE,WAAW,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,eAAe,oCAAoC;aACzF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,CAAC,QAAQ,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,gBAAgB,sDAAsD;aAC5G,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,8CAA8C;aAC5D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,+BAA+B,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;aACzH,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,CAAC,UAAU,CAAC,YAAY,IAAI,WAAW,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;YAChF,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,iDAAiD;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,2BAA2B,CAAC,WAAwB;QAC1D,6CAA6C;QAC7C,wEAAwE;QACxE,OAAO,IAAI,CAAC,CAAC,8BAA8B;IAC7C,CAAC;IAEO,iBAAiB,CACvB,QAAiE,EACjE,MAAc;QAEd,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjC,CAAC;QAED,OAAO;YACL,WAAW,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,eAAe,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,WAAW;YAChG,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAAC,QAA4C;QACxE,MAAM,OAAO,GAAgD,EAAE,CAAC;QAEhE,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAExE,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/infrastructure/governance/policy-as-code.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Infrastructure: Policy-as-Code (PaC) Framework
+ *
+ * Treats policy definitions like code for automated enforcement and version control
+ * Research: Policy-as-Code enables automated compliance, version control for policies, CI/CD integration
+ *
+ * Features:
+ * - Policy definitions as code (YAML/JSON)
+ * - Automated enforcement at runtime
+ * - Version control and audit trails
+ * - CI/CD integration
+ */
+export type PolicySeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';
+export type PolicyAction = 'block' | 'warn' | 'allow' | 'require_review';
+export interface PolicyRule {
+    id: string;
+    name: string;
+    description: string;
+    severity: PolicySeverity;
+    action: PolicyAction;
+    enabled: boolean;
+    conditions: PolicyCondition[];
+    version: string;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface PolicyCondition {
+    type: 'security' | 'license' | 'provider_bias' | 'uncertainty' | 'test_coverage' | 'compliance';
+    operator: 'equals' | 'greater_than' | 'less_than' | 'contains' | 'not_contains' | 'exists';
+    field: string;
+    value: any;
+}
+export interface PolicyEvaluationResult {
+    ruleId: string;
+    ruleName: string;
+    passed: boolean;
+    severity: PolicySeverity;
+    action: PolicyAction;
+    message: string;
+    evidence?: Record<string, any>;
+}
+export interface PolicyEvaluationContext {
+    filepath?: string;
+    code?: string;
+    instruction?: string;
+    securityFindings?: any[];
+    licenseFindings?: any[];
+    providerBiasFindings?: any[];
+    uncertainty?: any;
+    testCoverage?: number;
+    metadata?: Record<string, any>;
+}
+/**
+ * Policy-as-Code Framework
+ * Enforces policies automatically based on code-defined rules
+ */
+export declare class PolicyAsCode {
+    private policies;
+    private defaultPolicies;
+    constructor();
+    /**
+     * Load policy from code definition
+     */
+    loadPolicy(rule: PolicyRule): void;
+    /**
+     * Evaluate policies against context
+     */
+    evaluate(context: PolicyEvaluationContext): Promise<{
+        passed: boolean;
+        results: PolicyEvaluationResult[];
+        blockingRules: PolicyEvaluationResult[];
+    }>;
+    /**
+     * Get all policies
+     */
+    getPolicies(): PolicyRule[];
+    /**
+     * Enable/disable policy
+     */
+    setPolicyEnabled(ruleId: string, enabled: boolean): boolean;
+    /**
+     * Update policy
+     */
+    updatePolicy(ruleId: string, updates: Partial<PolicyRule>): boolean;
+    private evaluateRule;
+    private evaluateCondition;
+    private initializeDefaultPolicies;
+    private incrementVersion;
+}
+//# sourceMappingURL=policy-as-code.d.ts.map

package/dist/infrastructure/governance/policy-as-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-as-code.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/governance/policy-as-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAC7E,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,gBAAgB,CAAC;AAEzE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,eAAe,GAAG,aAAa,GAAG,eAAe,GAAG,YAAY,CAAC;IAChG,QAAQ,EAAE,QAAQ,GAAG,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,cAAc,GAAG,QAAQ,CAAC;IAC3F,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,GAAG,CAAC;CACZ;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,GAAG,EAAE,CAAC;IACzB,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC;IACxB,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED;;;GAGG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAsC;IACtD,OAAO,CAAC,eAAe,CAAoB;;IAM3C;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAKlC;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC;QACxD,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,sBAAsB,EAAE,CAAC;QAClC,aAAa,EAAE,sBAAsB,EAAE,CAAC;KACzC,CAAC;IAyBF;;OAEG;IACH,WAAW,IAAI,UAAU,EAAE;IAI3B;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO;IAS3D;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO;YAYrD,YAAY;IAgC1B,OAAO,CAAC,iBAAiB;IAqDzB,OAAO,CAAC,yBAAyB;IAsFjC,OAAO,CAAC,gBAAgB;CAKzB"}