@aion0/bastion 0.1.7

package/dist/storage/migrations.js

@@ -0,0 +1,265 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runMigrations = runMigrations;
+const MIGRATIONS = [
+    // Migration 1: Initial schema
+    `
+  CREATE TABLE IF NOT EXISTS schema_version (
+    version INTEGER PRIMARY KEY,
+    applied_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+
+  CREATE TABLE IF NOT EXISTS requests (
+    id TEXT PRIMARY KEY,
+    provider TEXT NOT NULL,
+    model TEXT NOT NULL,
+    method TEXT NOT NULL,
+    path TEXT NOT NULL,
+    status_code INTEGER,
+    input_tokens INTEGER DEFAULT 0,
+    output_tokens INTEGER DEFAULT 0,
+    cache_creation_tokens INTEGER DEFAULT 0,
+    cache_read_tokens INTEGER DEFAULT 0,
+    cost_usd REAL DEFAULT 0,
+    latency_ms INTEGER DEFAULT 0,
+    cached INTEGER DEFAULT 0,
+    dlp_action TEXT,
+    dlp_findings INTEGER DEFAULT 0,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+
+  CREATE TABLE IF NOT EXISTS cache (
+    key TEXT PRIMARY KEY,
+    provider TEXT NOT NULL,
+    model TEXT NOT NULL,
+    encrypted_response BLOB NOT NULL,
+    iv BLOB NOT NULL,
+    auth_tag BLOB NOT NULL,
+    input_tokens INTEGER DEFAULT 0,
+    output_tokens INTEGER DEFAULT 0,
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    last_hit_at TEXT,
+    hit_count INTEGER DEFAULT 0
+  );
+
+  CREATE TABLE IF NOT EXISTS dlp_events (
+    id TEXT PRIMARY KEY,
+    request_id TEXT NOT NULL,
+    pattern_name TEXT NOT NULL,
+    pattern_category TEXT NOT NULL,
+    action TEXT NOT NULL,
+    match_count INTEGER DEFAULT 1,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_requests_created_at ON requests(created_at);
+  CREATE INDEX IF NOT EXISTS idx_requests_provider ON requests(provider);
+  CREATE INDEX IF NOT EXISTS idx_cache_last_hit ON cache(last_hit_at);
+  CREATE INDEX IF NOT EXISTS idx_dlp_events_request ON dlp_events(request_id);
+  `,
+    // Migration 2: Session tracking, audit log, optimizer events, DLP snippets
+    `
+  ALTER TABLE requests ADD COLUMN session_id TEXT;
+  ALTER TABLE requests ADD COLUMN api_key_hash TEXT;
+
+  CREATE TABLE IF NOT EXISTS audit_log (
+    id TEXT PRIMARY KEY,
+    request_id TEXT NOT NULL,
+    encrypted_content BLOB,
+    iv BLOB NOT NULL,
+    auth_tag BLOB NOT NULL,
+    request_length INTEGER DEFAULT 0,
+    response_length INTEGER DEFAULT 0,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+
+  CREATE TABLE IF NOT EXISTS optimizer_events (
+    id TEXT PRIMARY KEY,
+    request_id TEXT NOT NULL,
+    cache_hit INTEGER DEFAULT 0,
+    original_length INTEGER DEFAULT 0,
+    trimmed_length INTEGER DEFAULT 0,
+    chars_saved INTEGER DEFAULT 0,
+    tokens_saved_estimate INTEGER DEFAULT 0,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+
+  ALTER TABLE dlp_events ADD COLUMN original_snippet TEXT;
+  ALTER TABLE dlp_events ADD COLUMN redacted_snippet TEXT;
+
+  CREATE INDEX IF NOT EXISTS idx_requests_session ON requests(session_id);
+  CREATE INDEX IF NOT EXISTS idx_requests_api_key ON requests(api_key_hash);
+  CREATE INDEX IF NOT EXISTS idx_audit_request ON audit_log(request_id);
+  CREATE INDEX IF NOT EXISTS idx_optimizer_request ON optimizer_events(request_id);
+  `,
+    // Migration 3: Sessions table for session metadata and client identification
+    `
+  CREATE TABLE IF NOT EXISTS sessions (
+    id TEXT PRIMARY KEY,
+    label TEXT,
+    source TEXT DEFAULT 'auto',
+    project_path TEXT,
+    created_at TEXT NOT NULL DEFAULT (datetime('now')),
+    last_seen_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_sessions_last_seen ON sessions(last_seen_at);
+  `,
+    // Migration 4: DLP patterns table for DB-backed, UI-configurable patterns
+    `
+  CREATE TABLE IF NOT EXISTS dlp_patterns (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL UNIQUE,
+    category TEXT NOT NULL DEFAULT 'custom',
+    regex_source TEXT NOT NULL,
+    regex_flags TEXT DEFAULT 'g',
+    description TEXT,
+    validator TEXT,
+    require_context TEXT,
+    enabled INTEGER DEFAULT 1,
+    is_builtin INTEGER DEFAULT 0,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+  `,
+    // Migration 5: DLP direction column (request vs response scanning)
+    `
+  ALTER TABLE dlp_events ADD COLUMN direction TEXT DEFAULT 'request';
+  `,
+    // Migration 6: Audit log DLP hit flag and summary column
+    `
+  ALTER TABLE audit_log ADD COLUMN dlp_hit INTEGER DEFAULT 0;
+  ALTER TABLE audit_log ADD COLUMN summary TEXT;
+  CREATE INDEX IF NOT EXISTS idx_audit_dlp_hit ON audit_log(dlp_hit);
+  `,
+    // Migration 7: DLP config change history
+    `
+  CREATE TABLE IF NOT EXISTS dlp_config_history (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    config_json TEXT NOT NULL,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+  `,
+    // Migration 8: Tool Guard — tool_calls table for audit
+    `
+  CREATE TABLE IF NOT EXISTS tool_calls (
+    id TEXT PRIMARY KEY,
+    request_id TEXT NOT NULL,
+    tool_name TEXT NOT NULL,
+    tool_input TEXT,
+    rule_id TEXT,
+    rule_name TEXT,
+    severity TEXT,
+    category TEXT,
+    provider TEXT,
+    session_id TEXT,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_tool_calls_request ON tool_calls(request_id);
+  CREATE INDEX IF NOT EXISTS idx_tool_calls_session ON tool_calls(session_id);
+  CREATE INDEX IF NOT EXISTS idx_tool_calls_severity ON tool_calls(severity);
+  CREATE INDEX IF NOT EXISTS idx_tool_calls_created ON tool_calls(created_at);
+  `,
+    // Migration 9: Tool Guard — action result column on tool_calls
+    `
+  ALTER TABLE tool_calls ADD COLUMN action TEXT;
+  `,
+    // Migration 10: Tool Guard rules table for DB-backed, UI-configurable rules
+    `
+  CREATE TABLE IF NOT EXISTS tool_guard_rules (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL UNIQUE,
+    description TEXT,
+    severity TEXT NOT NULL DEFAULT 'medium',
+    category TEXT NOT NULL DEFAULT 'custom',
+    tool_name_pattern TEXT,
+    tool_name_flags TEXT,
+    input_pattern TEXT NOT NULL,
+    input_flags TEXT DEFAULT 'i',
+    enabled INTEGER DEFAULT 1,
+    is_builtin INTEGER DEFAULT 0,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+  `,
+    // Migration 11: Audit log — tool_guard_hit column + ensure action column exists
+    // (action column may already exist from migration 9 on fresh installs; runner handles duplicate)
+    `
+  ALTER TABLE tool_calls ADD COLUMN action TEXT;
+  ALTER TABLE audit_log ADD COLUMN tool_guard_hit INTEGER DEFAULT 0;
+  CREATE INDEX IF NOT EXISTS idx_audit_tool_guard_hit ON audit_log(tool_guard_hit);
+  `,
+    // Migration 12: Ensure tool_calls.action column exists (catch-up for DBs that skipped migration 9/11)
+    `
+  ALTER TABLE tool_calls ADD COLUMN action TEXT;
+  `,
+    // Migration 13: Backfill action + severity for existing records
+    `
+  UPDATE tool_calls SET action = 'flag' WHERE action IS NULL AND rule_id IS NOT NULL;
+  UPDATE tool_calls SET action = 'pass', severity = 'info' WHERE action IS NULL AND rule_id IS NULL;
+  `,
+    // Migration 14: Audit log — plugin pipeline fail-closed tracking
+    `
+  ALTER TABLE audit_log ADD COLUMN failed_plugin TEXT;
+  ALTER TABLE audit_log ADD COLUMN fail_action TEXT;
+  `,
+    // Migration 15: Plugin events table for external plugin event storage
+    `
+  CREATE TABLE IF NOT EXISTS plugin_events (
+    id TEXT PRIMARY KEY,
+    plugin_name TEXT NOT NULL,
+    request_id TEXT,
+    type TEXT NOT NULL,
+    severity TEXT NOT NULL,
+    rule TEXT NOT NULL,
+    detail TEXT NOT NULL,
+    matched_text TEXT,
+    created_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_plugin_events_plugin ON plugin_events(plugin_name);
+  CREATE INDEX IF NOT EXISTS idx_plugin_events_request ON plugin_events(request_id);
+  CREATE INDEX IF NOT EXISTS idx_plugin_events_created ON plugin_events(created_at);
+  `,
+    // Migration 16: DLP patterns — context_verify column for anti-pattern / entropy / code-block checks
+    `
+  ALTER TABLE dlp_patterns ADD COLUMN context_verify TEXT;
+  `,
+];
+function runMigrations(db) {
+    // Ensure schema_version table exists
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS schema_version (
+      version INTEGER PRIMARY KEY,
+      applied_at TEXT NOT NULL DEFAULT (datetime('now'))
+    );
+  `);
+    const currentVersion = db.prepare('SELECT MAX(version) as version FROM schema_version').get();
+    const version = currentVersion?.version ?? 0;
+    for (let i = version; i < MIGRATIONS.length; i++) {
+        try {
+            db.exec(MIGRATIONS[i]);
+        }
+        catch (err) {
+            // Handle duplicate column errors from idempotent ALTER TABLE statements
+            if (err instanceof Error && err.message.includes('duplicate column')) {
+                // Execute statements individually, skipping duplicate column errors
+                const statements = MIGRATIONS[i].split(';').map(s => s.trim()).filter(Boolean);
+                for (const stmt of statements) {
+                    try {
+                        db.exec(stmt);
+                    }
+                    catch (stmtErr) {
+                        if (!(stmtErr instanceof Error) || !stmtErr.message.includes('duplicate column')) {
+                            throw stmtErr;
+                        }
+                    }
+                }
+            }
+            else {
+                throw err;
+            }
+        }
+        db.prepare('INSERT INTO schema_version (version) VALUES (?)').run(i + 1);
+    }
+}
+//# sourceMappingURL=migrations.js.map

package/dist/storage/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/storage/migrations.ts"],"names":[],"mappings":";;AAkPA,sCAqCC;AArRD,MAAM,UAAU,GAAa;IAC3B,8BAA8B;IAC9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDC;IAED,2EAA2E;IAC3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCC;IAED,6EAA6E;IAC7E;;;;;;;;;;;GAWC;IAED,0EAA0E;IAC1E;;;;;;;;;;;;;;GAcC;IAED,mEAAmE;IACnE;;GAEC;IAED,yDAAyD;IACzD;;;;GAIC;IAED,yCAAyC;IACzC;;;;;;GAMC;IAED,uDAAuD;IACvD;;;;;;;;;;;;;;;;;;;GAmBC;IAED,+DAA+D;IAC/D;;GAEC;IAED,4EAA4E;IAC5E;;;;;;;;;;;;;;;GAeC;IAED,gFAAgF;IAChF,iGAAiG;IACjG;;;;GAIC;IAED,sGAAsG;IACtG;;GAEC;IAED,gEAAgE;IAChE;;;GAGC;IAED,iEAAiE;IACjE;;;GAGC;IAED,sEAAsE;IACtE;;;;;;;;;;;;;;;;GAgBC;IAED,oGAAoG;IACpG;;GAEC;CACF,CAAC;AAEF,SAAgB,aAAa,CAAC,EAAqB;IACjD,qCAAqC;IACrC,EAAE,CAAC,IAAI,CAAC;;;;;GAKP,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,EAE9E,CAAC;IACd,MAAM,OAAO,GAAG,cAAc,EAAE,OAAO,IAAI,CAAC,CAAC;IAE7C,KAAK,IAAI,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACrE,oEAAoE;gBACpE,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC/E,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;oBAC9B,IAAI,CAAC;wBACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChB,CAAC;oBAAC,OAAO,OAAO,EAAE,CAAC;wBACjB,IAAI,CAAC,CAAC,OAAO,YAAY,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;4BACjF,MAAM,OAAO,CAAC;wBAChB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC"}

package/dist/storage/repositories/audit-log.d.ts

@@ -0,0 +1,115 @@
+import type Database from 'better-sqlite3';
+export interface AuditLogRecord {
+    id: string;
+    request_id: string;
+    encrypted_content: Buffer | null;
+    iv: Buffer;
+    auth_tag: Buffer;
+    request_length: number;
+    response_length: number;
+    dlp_hit: number;
+    tool_guard_hit: number;
+    summary: string | null;
+    created_at: string;
+}
+export interface AuditLogMeta {
+    id: string;
+    request_id: string;
+    request_length: number;
+    response_length: number;
+    dlp_hit: number;
+    tool_guard_hit: number;
+    failed_plugin: string | null;
+    fail_action: string | null;
+    summary: string | null;
+    created_at: string;
+    session_id?: string | null;
+    model?: string | null;
+    status_code?: number | null;
+    latency_ms?: number | null;
+    stop_reason?: string | null;
+}
+export interface AuditSession {
+    session_id: string;
+    request_count: number;
+    first_at: string;
+    last_at: string;
+    models: string;
+    label: string | null;
+    source: string | null;
+    project_path: string | null;
+}
+export interface ParsedMessage {
+    role: string;
+    content: ParsedContentBlock[];
+}
+export interface ParsedContentBlock {
+    type: 'text' | 'tool_use' | 'tool_result' | 'image' | 'other';
+    text?: string;
+    toolName?: string;
+    toolInput?: string;
+    isError?: boolean;
+}
+export interface ParsedAudit {
+    request: {
+        model: string | null;
+        maxTokens: number | null;
+        temperature: number | null;
+        stream: boolean;
+        system: string | null;
+        tools: string[];
+        messages: ParsedMessage[];
+    };
+    response: {
+        model: string | null;
+        stopReason: string | null;
+        usage: Record<string, number>;
+        content: ParsedContentBlock[];
+    };
+    raw: {
+        request: string;
+        response: string;
+    };
+}
+export declare function parseAuditContent(reqStr: string, resStr: string): ParsedAudit;
+export declare class AuditLogRepository {
+    private db;
+    private insertStmt;
+    constructor(db: Database.Database);
+    insert(record: {
+        id: string;
+        request_id: string;
+        requestBody: string;
+        responseBody: string;
+        dlpHit?: boolean;
+        toolGuardHit?: boolean;
+        failedPlugin?: string;
+        failAction?: 'continued' | 'blocked';
+        rawData?: boolean;
+        rawMaxBytes?: number;
+        summaryMaxBytes?: number;
+    }): void;
+    /** Check if an audit entry already exists for a given request ID */
+    hasEntry(requestId: string): boolean;
+    /** Mark an existing audit entry as DLP-hit (used when audit-logger inserted first) */
+    markDlpHit(requestId: string): void;
+    getByRequestId(requestId: string): {
+        request: string;
+        response: string;
+    } | null;
+    getParsedByRequestId(requestId: string): ParsedAudit | null;
+    /** Get meta for a single request (used as fallback when rawData is off) */
+    getMetaByRequestId(requestId: string): AuditLogMeta | null;
+    getRecent(limit?: number, sinceHours?: number): AuditLogMeta[];
+    /** Get all audit entries for a session, in chronological order */
+    getBySessionId(sessionId: string): AuditLogMeta[];
+    /** Get sessions that have audit entries, ordered by most recent */
+    getAuditSessions(limit?: number, sinceHours?: number): AuditSession[];
+    /** Get a full parsed session timeline: all requests in order with parsed content */
+    getParsedSession(sessionId: string): Array<{
+        meta: AuditLogMeta;
+        parsed: ParsedAudit;
+    }>;
+    purgeOlderThan(hours: number): number;
+}
+//# sourceMappingURL=audit-log.d.ts.map

package/dist/storage/repositories/audit-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../../src/storage/repositories/audit-log.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAID,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,QAAQ,EAAE,aAAa,EAAE,CAAC;KAC3B,CAAC;IACF,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,EAAE,kBAAkB,EAAE,CAAC;KAC/B,CAAC;IACF,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AA+ID,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CA6H7E;AA8HD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,UAAU,CAAqB;gBAE3B,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAQjC,MAAM,CAAC,MAAM,EAAE;QACb,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;QACrC,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,IAAI;IA4CR,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAOpC,sFAAsF;IACtF,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAMnC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAgB/E,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAM3D,2EAA2E;IAC3E,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAW1D,SAAS,CAAC,KAAK,GAAE,MAAW,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IAoBlE,kEAAkE;IAClE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE;IAWjD,mEAAmE;IACnE,gBAAgB,CAAC,KAAK,GAAE,MAAW,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IA+BzE,oFAAoF;IACpF,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,CAAC;IAevF,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAMtC"}