promptspeak-mcp-server 0.1.0

package/dist/core/security/index.d.ts

@@ -0,0 +1,41 @@
+/**
+ * ===============================================================================
+ * SECURITY MODULE
+ * ===============================================================================
+ *
+ * Centralized security utilities for the PromptSpeak MCP Server.
+ *
+ * This module provides:
+ * - Secure logging with automatic sensitive data redaction
+ * - Field-level redaction utilities
+ * - Sensitive field detection
+ *
+ * USAGE GUIDE:
+ *
+ * 1. For NEW code in sensitive areas, use SecureLogger:
+ *    ```typescript
+ *    import { createSecureLogger } from '../core/security/index.js';
+ *    const logger = createSecureLogger('MyAdapter');
+ *    logger.safeDebug('Processing', { customerId, email, action });
+ *    ```
+ *
+ * 2. For EXISTING code, use the safeDebug wrapper:
+ *    ```typescript
+ *    import { safeDebug } from '../core/security/index.js';
+ *    safeDebug(existingLogger, 'Message', { sensitiveData });
+ *    ```
+ *
+ * 3. For ONE-OFF redaction:
+ *    ```typescript
+ *    import { redact, redactObject } from '../core/security/index.js';
+ *    const safe = redact(sensitiveValue);
+ *    const safePayload = redactObject(apiResponse, { redactAll: true });
+ *    ```
+ *
+ * See docs/SECURITY_LOGGING.md for complete guidelines.
+ *
+ * ===============================================================================
+ */
+export { REDACTED, SENSITIVE_FIELD_PATTERNS, SENSITIVE_FIELD_NAMES, isSensitiveField, hashPrefix, safePreview, redact, redactObject, redactString, type RedactedValue, } from './redaction.js';
+export { SecureLogger, createSecureLogger, safeDebug, safePayloadDebug, checkLoggingSafety, type SafeDebugOptions, } from './secure-logging.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAGH,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,KAAK,aAAa,GACnB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,gBAAgB,GACtB,MAAM,qBAAqB,CAAC"}

package/dist/core/security/index.js

@@ -0,0 +1,43 @@
+/**
+ * ===============================================================================
+ * SECURITY MODULE
+ * ===============================================================================
+ *
+ * Centralized security utilities for the PromptSpeak MCP Server.
+ *
+ * This module provides:
+ * - Secure logging with automatic sensitive data redaction
+ * - Field-level redaction utilities
+ * - Sensitive field detection
+ *
+ * USAGE GUIDE:
+ *
+ * 1. For NEW code in sensitive areas, use SecureLogger:
+ *    ```typescript
+ *    import { createSecureLogger } from '../core/security/index.js';
+ *    const logger = createSecureLogger('MyAdapter');
+ *    logger.safeDebug('Processing', { customerId, email, action });
+ *    ```
+ *
+ * 2. For EXISTING code, use the safeDebug wrapper:
+ *    ```typescript
+ *    import { safeDebug } from '../core/security/index.js';
+ *    safeDebug(existingLogger, 'Message', { sensitiveData });
+ *    ```
+ *
+ * 3. For ONE-OFF redaction:
+ *    ```typescript
+ *    import { redact, redactObject } from '../core/security/index.js';
+ *    const safe = redact(sensitiveValue);
+ *    const safePayload = redactObject(apiResponse, { redactAll: true });
+ *    ```
+ *
+ * See docs/SECURITY_LOGGING.md for complete guidelines.
+ *
+ * ===============================================================================
+ */
+// Redaction utilities
+export { REDACTED, SENSITIVE_FIELD_PATTERNS, SENSITIVE_FIELD_NAMES, isSensitiveField, hashPrefix, safePreview, redact, redactObject, redactString, } from './redaction.js';
+// Secure logging
+export { SecureLogger, createSecureLogger, safeDebug, safePayloadDebug, checkLoggingSafety, } from './secure-logging.js';
+//# sourceMappingURL=index.js.map

package/dist/core/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/security/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,sBAAsB;AACtB,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,MAAM,EACN,YAAY,EACZ,YAAY,GAEb,MAAM,gBAAgB,CAAC;AAExB,iBAAiB;AACjB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,kBAAkB,GAEnB,MAAM,qBAAqB,CAAC"}

package/dist/core/security/redaction.d.ts

@@ -0,0 +1,138 @@
+/**
+ * ===============================================================================
+ * SECURE REDACTION UTILITIES
+ * ===============================================================================
+ *
+ * Provides utilities for redacting sensitive information from logs and outputs.
+ * This module is the first line of defense against information leakage.
+ *
+ * SECURITY PRINCIPLE: Never log raw values that could contain PII, financial
+ * data, credentials, or business-sensitive information. Instead, log metadata
+ * about the value (type, length, hash prefix) for debugging.
+ *
+ * @example
+ * ```typescript
+ * import { redact, redactObject, isSensitiveField } from './redaction.js';
+ *
+ * // Redact a single value
+ * const safe = redact(customerEmail);
+ * // Returns: { type: 'string', length: 25, preview: 'cust***' }
+ *
+ * // Redact all sensitive fields in an object
+ * const safePayload = redactObject(erpResponse);
+ * ```
+ *
+ * ===============================================================================
+ */
+/**
+ * Redaction placeholder for logs.
+ */
+export declare const REDACTED = "<redacted>";
+/**
+ * Patterns that indicate a field name contains sensitive data.
+ * These are matched case-insensitively against field names.
+ */
+export declare const SENSITIVE_FIELD_PATTERNS: readonly RegExp[];
+/**
+ * Specific field names that should always be redacted regardless of pattern.
+ */
+export declare const SENSITIVE_FIELD_NAMES: Set<string>;
+/**
+ * Result of redacting a value - preserves metadata for debugging.
+ */
+export interface RedactedValue {
+    /** Original type of the value */
+    type: string;
+    /** Length of string representation */
+    length: number;
+    /** First 4 chars with asterisks (for correlation) */
+    preview?: string;
+    /** SHA-256 hash prefix (8 chars) for correlation without exposure */
+    hashPrefix?: string;
+    /** Whether the value was null/undefined */
+    isNull?: boolean;
+    /** For arrays, the count of elements */
+    count?: number;
+}
+/**
+ * Check if a field name matches sensitive patterns.
+ *
+ * @param fieldName - The field name to check
+ * @returns true if the field name indicates sensitive data
+ */
+export declare function isSensitiveField(fieldName: string): boolean;
+/**
+ * Compute a safe hash prefix for correlation purposes.
+ * Uses a salted hash to prevent rainbow table attacks.
+ *
+ * @param value - Value to hash
+ * @param salt - Optional salt (defaults to empty string)
+ * @returns First 8 characters of SHA-256 hash
+ */
+export declare function hashPrefix(value: unknown, salt?: string): string;
+/**
+ * Create a safe preview of a string value.
+ * Shows first 4 characters followed by asterisks.
+ *
+ * @param value - String to preview
+ * @returns Safe preview string
+ */
+export declare function safePreview(value: string): string;
+/**
+ * Redact a single value, returning metadata for debugging.
+ *
+ * @param value - Any value that might be sensitive
+ * @param includeHash - Whether to include hash prefix for correlation
+ * @returns Redacted metadata object
+ *
+ * @example
+ * ```typescript
+ * redact('john.doe@company.com')
+ * // Returns: { type: 'string', length: 20, preview: 'john***' }
+ *
+ * redact({ nested: 'data' })
+ * // Returns: { type: 'object', length: 18 }
+ * ```
+ */
+export declare function redact(value: unknown, includeHash?: boolean): RedactedValue;
+/**
+ * Redact all values in an object, automatically detecting sensitive fields.
+ *
+ * @param obj - Object to redact
+ * @param options - Redaction options
+ * @returns New object with sensitive values redacted
+ *
+ * @example
+ * ```typescript
+ * const payload = {
+ *   customerId: '12345',
+ *   email: 'john@example.com',
+ *   action: 'purchase'
+ * };
+ *
+ * redactObject(payload)
+ * // Returns: {
+ * //   customerId: { type: 'string', length: 5, preview: '1234***' },
+ * //   email: { type: 'string', length: 16, preview: 'john***' },
+ * //   action: 'purchase'  // Not sensitive, passed through
+ * // }
+ * ```
+ */
+export declare function redactObject(obj: Record<string, unknown>, options?: {
+    /** Redact ALL fields, not just sensitive ones */
+    redactAll?: boolean;
+    /** Include hash prefixes for correlation */
+    includeHashes?: boolean;
+    /** Additional field names to treat as sensitive */
+    additionalSensitive?: string[];
+    /** Field names to explicitly allow (whitelist) */
+    allowList?: string[];
+}): Record<string, unknown>;
+/**
+ * Redact sensitive patterns from a string (for log messages).
+ *
+ * @param message - Message that might contain sensitive data
+ * @returns Message with sensitive patterns replaced
+ */
+export declare function redactString(message: string): string;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/core/security/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../../src/core/security/redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH;;GAEG;AACH,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAwErD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAiBhC,CAAC;AAEH;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAQ3D;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAK,GAAG,MAAM,CAM5D;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKjD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,UAAQ,GAAG,aAAa,CA2CzE;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,OAAO,GAAE;IACP,iDAAiD;IACjD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4CAA4C;IAC5C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mDAAmD;IACnD,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,GACL,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmCzB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAqBpD"}

package/dist/core/security/redaction.js

@@ -0,0 +1,295 @@
+/**
+ * ===============================================================================
+ * SECURE REDACTION UTILITIES
+ * ===============================================================================
+ *
+ * Provides utilities for redacting sensitive information from logs and outputs.
+ * This module is the first line of defense against information leakage.
+ *
+ * SECURITY PRINCIPLE: Never log raw values that could contain PII, financial
+ * data, credentials, or business-sensitive information. Instead, log metadata
+ * about the value (type, length, hash prefix) for debugging.
+ *
+ * @example
+ * ```typescript
+ * import { redact, redactObject, isSensitiveField } from './redaction.js';
+ *
+ * // Redact a single value
+ * const safe = redact(customerEmail);
+ * // Returns: { type: 'string', length: 25, preview: 'cust***' }
+ *
+ * // Redact all sensitive fields in an object
+ * const safePayload = redactObject(erpResponse);
+ * ```
+ *
+ * ===============================================================================
+ */
+import { createHash } from 'crypto';
+/**
+ * Redaction placeholder for logs.
+ */
+export const REDACTED = '<redacted>';
+/**
+ * Patterns that indicate a field name contains sensitive data.
+ * These are matched case-insensitively against field names.
+ */
+export const SENSITIVE_FIELD_PATTERNS = [
+    // Authentication & Credentials
+    /password/i,
+    /secret/i,
+    /token/i,
+    /api[_-]?key/i,
+    /auth/i,
+    /credential/i,
+    /bearer/i,
+    /session[_-]?id/i,
+    // Personal Identifiable Information (PII)
+    /email/i,
+    /phone/i,
+    /address/i,
+    /ssn/i,
+    /social[_-]?security/i,
+    /tax[_-]?id/i,
+    /passport/i,
+    /driver[_-]?license/i,
+    /date[_-]?of[_-]?birth/i,
+    /dob/i,
+    /national[_-]?id/i,
+    // Financial Data
+    /credit[_-]?card/i,
+    /card[_-]?number/i,
+    /cvv/i,
+    /cvc/i,
+    /account[_-]?number/i,
+    /routing[_-]?number/i,
+    /iban/i,
+    /swift/i,
+    /bank/i,
+    /billing/i,
+    /invoice[_-]?(number|id|amount)/i,
+    /payment/i,
+    /salary/i,
+    /compensation/i,
+    // ERP/SAP Specific Fields
+    /customer[_-]?(id|name|number)/i,
+    /vendor[_-]?(id|name|number)/i,
+    /employee[_-]?(id|name|number)/i,
+    /posting[_-]?date/i,
+    /document[_-]?number/i,
+    /material[_-]?(number|id)/i,
+    /purchase[_-]?order/i,
+    /sales[_-]?order/i,
+    /cost[_-]?center/i,
+    /profit[_-]?center/i,
+    /gl[_-]?account/i,
+    /company[_-]?code/i,
+    // Healthcare (HIPAA)
+    /patient/i,
+    /diagnosis/i,
+    /prescription/i,
+    /medical/i,
+    /health/i,
+    // Legal
+    /case[_-]?number/i,
+    /docket/i,
+    /plaintiff/i,
+    /defendant/i,
+    // Generic Sensitive Patterns
+    /private/i,
+    /confidential/i,
+    /sensitive/i,
+    /pii/i,
+];
+/**
+ * Specific field names that should always be redacted regardless of pattern.
+ */
+export const SENSITIVE_FIELD_NAMES = new Set([
+    'password',
+    'secret',
+    'apiKey',
+    'api_key',
+    'token',
+    'accessToken',
+    'access_token',
+    'refreshToken',
+    'refresh_token',
+    'authorization',
+    'cookie',
+    'ssn',
+    'creditCard',
+    'credit_card',
+    'cvv',
+    'pin',
+]);
+/**
+ * Check if a field name matches sensitive patterns.
+ *
+ * @param fieldName - The field name to check
+ * @returns true if the field name indicates sensitive data
+ */
+export function isSensitiveField(fieldName) {
+    // Check exact matches first (fast path)
+    if (SENSITIVE_FIELD_NAMES.has(fieldName)) {
+        return true;
+    }
+    // Check patterns
+    return SENSITIVE_FIELD_PATTERNS.some((pattern) => pattern.test(fieldName));
+}
+/**
+ * Compute a safe hash prefix for correlation purposes.
+ * Uses a salted hash to prevent rainbow table attacks.
+ *
+ * @param value - Value to hash
+ * @param salt - Optional salt (defaults to empty string)
+ * @returns First 8 characters of SHA-256 hash
+ */
+export function hashPrefix(value, salt = '') {
+    const str = typeof value === 'string' ? value : JSON.stringify(value);
+    const hash = createHash('sha256')
+        .update(salt + str)
+        .digest('hex');
+    return hash.substring(0, 8);
+}
+/**
+ * Create a safe preview of a string value.
+ * Shows first 4 characters followed by asterisks.
+ *
+ * @param value - String to preview
+ * @returns Safe preview string
+ */
+export function safePreview(value) {
+    if (value.length <= 4) {
+        return '*'.repeat(value.length);
+    }
+    return value.substring(0, 4) + '***';
+}
+/**
+ * Redact a single value, returning metadata for debugging.
+ *
+ * @param value - Any value that might be sensitive
+ * @param includeHash - Whether to include hash prefix for correlation
+ * @returns Redacted metadata object
+ *
+ * @example
+ * ```typescript
+ * redact('john.doe@company.com')
+ * // Returns: { type: 'string', length: 20, preview: 'john***' }
+ *
+ * redact({ nested: 'data' })
+ * // Returns: { type: 'object', length: 18 }
+ * ```
+ */
+export function redact(value, includeHash = false) {
+    if (value === null || value === undefined) {
+        return { type: 'null', length: 0, isNull: true };
+    }
+    const type = typeof value;
+    if (type === 'string') {
+        const str = value;
+        const result = {
+            type: 'string',
+            length: str.length,
+            preview: safePreview(str),
+        };
+        if (includeHash) {
+            result.hashPrefix = hashPrefix(str);
+        }
+        return result;
+    }
+    if (type === 'number' || type === 'boolean') {
+        // Numbers and booleans are generally safe, but we still redact
+        return { type, length: String(value).length };
+    }
+    if (Array.isArray(value)) {
+        return {
+            type: 'array',
+            length: JSON.stringify(value).length,
+            count: value.length,
+        };
+    }
+    if (type === 'object') {
+        const keys = Object.keys(value);
+        return {
+            type: 'object',
+            length: JSON.stringify(value).length,
+            count: keys.length,
+        };
+    }
+    return { type, length: String(value).length };
+}
+/**
+ * Redact all values in an object, automatically detecting sensitive fields.
+ *
+ * @param obj - Object to redact
+ * @param options - Redaction options
+ * @returns New object with sensitive values redacted
+ *
+ * @example
+ * ```typescript
+ * const payload = {
+ *   customerId: '12345',
+ *   email: 'john@example.com',
+ *   action: 'purchase'
+ * };
+ *
+ * redactObject(payload)
+ * // Returns: {
+ * //   customerId: { type: 'string', length: 5, preview: '1234***' },
+ * //   email: { type: 'string', length: 16, preview: 'john***' },
+ * //   action: 'purchase'  // Not sensitive, passed through
+ * // }
+ * ```
+ */
+export function redactObject(obj, options = {}) {
+    const { redactAll = false, includeHashes = false, additionalSensitive = [], allowList = [], } = options;
+    const allowSet = new Set(allowList);
+    const additionalSet = new Set(additionalSensitive);
+    const result = {};
+    for (const [key, value] of Object.entries(obj)) {
+        // Check if explicitly allowed
+        if (allowSet.has(key)) {
+            result[key] = value;
+            continue;
+        }
+        // Check if should be redacted
+        const shouldRedact = redactAll || isSensitiveField(key) || additionalSet.has(key);
+        if (shouldRedact) {
+            result[key] = redact(value, includeHashes);
+        }
+        else if (value !== null && typeof value === 'object' && !Array.isArray(value)) {
+            // Recursively handle nested objects
+            result[key] = redactObject(value, options);
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+/**
+ * Redact sensitive patterns from a string (for log messages).
+ *
+ * @param message - Message that might contain sensitive data
+ * @returns Message with sensitive patterns replaced
+ */
+export function redactString(message) {
+    // Redact common sensitive patterns in strings
+    return (message
+        // Email addresses
+        .replace(/[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g, '<email-redacted>')
+        // Credit card numbers (various formats)
+        .replace(/\b\d{4}[- ]?\d{4}[- ]?\d{4}[- ]?\d{4}\b/g, '<card-redacted>')
+        // SSN (US)
+        .replace(/\b\d{3}[- ]?\d{2}[- ]?\d{4}\b/g, '<ssn-redacted>')
+        // Phone numbers (basic)
+        .replace(/\b\d{3}[- .]?\d{3}[- .]?\d{4}\b/g, '<phone-redacted>')
+        // API keys (common patterns)
+        .replace(/\b[A-Za-z0-9]{32,}\b/g, (match) => {
+        // Only redact if it looks like a key (mixed case/numbers, long)
+        if (/[A-Z]/.test(match) && /[a-z]/.test(match) && /\d/.test(match)) {
+            return '<key-redacted>';
+        }
+        return match;
+    }));
+}
+//# sourceMappingURL=redaction.js.map

package/dist/core/security/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../../src/core/security/redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IACzD,+BAA+B;IAC/B,WAAW;IACX,SAAS;IACT,QAAQ;IACR,cAAc;IACd,OAAO;IACP,aAAa;IACb,SAAS;IACT,iBAAiB;IAEjB,0CAA0C;IAC1C,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,MAAM;IACN,sBAAsB;IACtB,aAAa;IACb,WAAW;IACX,qBAAqB;IACrB,wBAAwB;IACxB,MAAM;IACN,kBAAkB;IAElB,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAClB,MAAM;IACN,MAAM;IACN,qBAAqB;IACrB,qBAAqB;IACrB,OAAO;IACP,QAAQ;IACR,OAAO;IACP,UAAU;IACV,iCAAiC;IACjC,UAAU;IACV,SAAS;IACT,eAAe;IAEf,0BAA0B;IAC1B,gCAAgC;IAChC,8BAA8B;IAC9B,gCAAgC;IAChC,mBAAmB;IACnB,sBAAsB;IACtB,2BAA2B;IAC3B,qBAAqB;IACrB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,mBAAmB;IAEnB,qBAAqB;IACrB,UAAU;IACV,YAAY;IACZ,eAAe;IACf,UAAU;IACV,SAAS;IAET,QAAQ;IACR,kBAAkB;IAClB,SAAS;IACT,YAAY;IACZ,YAAY;IAEZ,6BAA6B;IAC7B,UAAU;IACV,eAAe;IACf,YAAY;IACZ,MAAM;CACP,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IAC3C,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;IACP,aAAa;IACb,cAAc;IACd,cAAc;IACd,eAAe;IACf,eAAe;IACf,QAAQ;IACR,KAAK;IACL,YAAY;IACZ,aAAa;IACb,KAAK;IACL,KAAK;CACN,CAAC,CAAC;AAoBH;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,wCAAwC;IACxC,IAAI,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iBAAiB;IACjB,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc,EAAE,IAAI,GAAG,EAAE;IAClD,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC9B,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC;SAClB,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,MAAM,CAAC,KAAc,EAAE,WAAW,GAAG,KAAK;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC;IAE1B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,KAAe,CAAC;QAC5B,MAAM,MAAM,GAAkB;YAC5B,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC;SAC1B,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5C,+DAA+D;QAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM;YACpC,KAAK,EAAE,KAAK,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC1C,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM;YACpC,KAAK,EAAE,IAAI,CAAC,MAAM;SACnB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,YAAY,CAC1B,GAA4B,EAC5B,UASI,EAAE;IAEN,MAAM,EACJ,SAAS,GAAG,KAAK,EACjB,aAAa,GAAG,KAAK,EACrB,mBAAmB,GAAG,EAAE,EACxB,SAAS,GAAG,EAAE,GACf,GAAG,OAAO,CAAC;IAEZ,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAEnD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,8BAA8B;QAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,SAAS;QACX,CAAC;QAED,8BAA8B;QAC9B,MAAM,YAAY,GAChB,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE/D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,oCAAoC;YACpC,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAgC,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,8CAA8C;IAC9C,OAAO,CACL,OAAO;QACL,kBAAkB;SACjB,OAAO,CAAC,iDAAiD,EAAE,kBAAkB,CAAC;QAC/E,wCAAwC;SACvC,OAAO,CAAC,0CAA0C,EAAE,iBAAiB,CAAC;QACvE,WAAW;SACV,OAAO,CAAC,gCAAgC,EAAE,gBAAgB,CAAC;QAC5D,wBAAwB;SACvB,OAAO,CAAC,kCAAkC,EAAE,kBAAkB,CAAC;QAChE,6BAA6B;SAC5B,OAAO,CAAC,uBAAuB,EAAE,CAAC,KAAK,EAAE,EAAE;QAC1C,gEAAgE;QAChE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACnE,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CACL,CAAC;AACJ,CAAC"}