@astragenie/astramemory-local 0.7.2

package/dist/server/routes/dashboard-search-html.js

@@ -0,0 +1,189 @@
+/**
+ * GET /dashboard/search — search debug page (FEAT-410 wave 2, SLICE-410-6).
+ *
+ * Plain GET `<form>` (query in the URL) rendering the per-candidate fusion
+ * score table from SLICE-410-3's `debug: true` search() path, plus the
+ * current fuse.ts weights (src/config/config.ts `search` defaults). Zero JS.
+ *
+ * Auth mirrors src/server/routes/dashboard.ts (Bearer header or the
+ * HttpOnly `astramem_dash` cookie bootstrapped there) but the check is
+ * duplicated locally by design — see dashboard-consolidation-html.ts for
+ * the same rationale. HTML escaping is likewise duplicated locally rather
+ * than importing dashboard-html.ts's `esc()` (SLICE-410-6 scope: this file
+ * + its tests only).
+ */
+import { search } from '../../search/search.js';
+import { defaultConfig } from '../../config/config.js';
+const COOKIE_NAME = 'astramem_dash';
+const RESULT_LIMIT = 20;
+function readCookie(req, name) {
+    const header = req.headers.cookie;
+    if (!header)
+        return undefined;
+    for (const part of header.split(';')) {
+        const eq = part.indexOf('=');
+        if (eq === -1)
+            continue;
+        if (part.slice(0, eq).trim() === name)
+            return part.slice(eq + 1).trim();
+    }
+    return undefined;
+}
+function esc(s) {
+    return s
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;');
+}
+/** "0.4" -> ".4" to match the design doc's compact weight notation (α.4 β.4 …). */
+function fmtWeight(n) {
+    return String(n).replace(/^0\./, '.').replace(/^-0\./, '-.');
+}
+function fmtScore(n) {
+    return n.toFixed(3);
+}
+export function dashboardSearchRoute(db, embed, token) {
+    return async (app) => {
+        app.get('/dashboard/search', async (req, reply) => {
+            const authHeader = req.headers.authorization;
+            const bearerOk = authHeader === `Bearer ${token}`;
+            const cookieOk = readCookie(req, COOKIE_NAME) === token;
+            if (!bearerOk && !cookieOk) {
+                return reply
+                    .code(401)
+                    .header('content-type', 'text/plain; charset=utf-8')
+                    .send('401 Unauthorized');
+            }
+            const q = req.query;
+            const rawQuery = q.query;
+            const weights = defaultConfig().search;
+            // Optional filter fields — every implemented search() filter mode is
+            // exposed: entity (FEAT-402), as_of temporal time-travel (FEAT-401),
+            // since lower bound, type list. Empty strings mean "not set".
+            const filterInputs = {
+                entity: q.entity?.trim() || undefined,
+                type: q.type?.trim() || undefined,
+                as_of: q.as_of?.trim() || undefined,
+                since: q.since?.trim() || undefined,
+            };
+            const filters = {};
+            if (filterInputs.entity)
+                filters.entity = filterInputs.entity;
+            if (filterInputs.type)
+                filters.type = filterInputs.type.split(',').map(s => s.trim()).filter(Boolean);
+            // datetime-local values ("2026-07-04T09:30") parse as local time —
+            // matching the operator's clock on this local-first daemon.
+            if (filterInputs.as_of) {
+                const t = new Date(filterInputs.as_of).getTime();
+                if (!Number.isNaN(t))
+                    filters.as_of = t;
+            }
+            if (filterInputs.since) {
+                const t = new Date(filterInputs.since).getTime();
+                if (!Number.isNaN(t))
+                    filters.since = t;
+            }
+            // AC-2: no `query` key at all → initial load, form + weights only.
+            // Any present value (including "") is treated as a submitted search
+            // so a zero-candidate result renders the explicit AC-3 empty state
+            // rather than silently looking like the initial load.
+            const ranSearch = rawQuery !== undefined;
+            let hits = [];
+            if (ranSearch) {
+                hits = await search(rawQuery, filters, RESULT_LIMIT, { db, embed, weights, debug: true });
+            }
+            return reply
+                .code(200)
+                .header('content-type', 'text/html; charset=utf-8')
+                .header('cache-control', 'no-store')
+                .send(renderPage(rawQuery, weights, ranSearch, hits, filterInputs));
+        });
+    };
+}
+function renderWeights(weights) {
+    return `&alpha;${fmtWeight(weights.alpha)} &beta;${fmtWeight(weights.beta)} `
+        + `&gamma;${fmtWeight(weights.gamma)} &delta;${fmtWeight(weights.delta)} `
+        + `&epsilon;${fmtWeight(weights.epsilon)} &zeta;${fmtWeight(weights.zeta)}`;
+}
+function renderTable(hits) {
+    const rows = hits.map((h, i) => `
+      <tr>
+        <td>${esc(h.id.slice(0, 8))}&hellip;</td>
+        <td>${esc(h.source)}</td>
+        <td>${fmtScore(h.bm25.normalized)}</td>
+        <td>${fmtScore(h.cosine.normalized)}</td>
+        <td>${fmtScore(h.importance)}</td>
+        <td>${fmtScore(h.freshness)}</td>
+        <td>${fmtScore(h.score)}</td>
+        <td>${i + 1}</td>
+      </tr>`).join('');
+    return `<table>
+    <thead>
+      <tr>
+        <th>id</th><th>source</th><th>bm25(norm)</th><th>cosine(norm)</th>
+        <th>importance</th><th>freshness</th><th>fused</th><th>rank</th>
+      </tr>
+    </thead>
+    <tbody>${rows}
+    </tbody>
+  </table>`;
+}
+function renderResults(ranSearch, hits) {
+    if (!ranSearch)
+        return '';
+    if (hits.length === 0)
+        return '<p class="empty">no results</p>';
+    return renderTable(hits);
+}
+const CSS = `
+*{box-sizing:border-box;margin:0;padding:0}
+body{background:#1a1a1a;color:#e0e0e0;font-family:monospace;font-size:13px;line-height:1.5;padding:16px}
+h1{font-size:18px;color:#fff;margin-bottom:12px}
+form{margin-bottom:8px}
+input[type=text]{background:#0f0f0f;color:#e0e0e0;border:1px solid #333;padding:4px 8px;width:320px}
+button{background:#2a2a2a;color:#e0e0e0;border:1px solid #444;padding:4px 10px;margin-left:4px}
+.weights{color:#888;margin-bottom:16px}
+nav{display:flex;gap:16px;margin:8px 0 16px;padding-bottom:8px;border-bottom:1px solid #333;font-size:12px}
+nav a{color:#888;text-decoration:none}
+nav a:hover{color:#3a7bd5}
+nav .active{color:#fff;font-weight:bold}
+.filters{margin-top:8px;display:flex;gap:12px;flex-wrap:wrap;color:#888}
+.filters input{width:170px}
+.filters input[type=datetime-local]{width:200px;background:#0f0f0f;color:#e0e0e0;border:1px solid #333;padding:3px 6px}
+.hint{color:#666;font-size:11px;margin-top:6px}
+table{border-collapse:collapse;width:100%}
+th,td{border-bottom:1px solid #333;padding:4px 8px;text-align:left}
+th{color:#aaa;text-transform:uppercase;font-size:11px;letter-spacing:.05em}
+.empty{color:#888;margin-top:12px}
+`;
+function renderPage(rawQuery, weights, ranSearch, hits, f) {
+    const queryValue = esc(rawQuery ?? '');
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>AstraMemory Dashboard — Search debug</title>
+<style>${CSS}</style>
+</head>
+<body>
+<h1>Search debug</h1>
+<nav><a href="/dashboard">Mission Control</a> <a href="/dashboard/jobs">Jobs</a> <a href="/dashboard/consolidation">Consolidation</a> <span class="active">Search</span> <a href="/dashboard/api">API</a></nav>
+<form method="get" action="/dashboard/search">
+  <input type="text" name="query" value="${queryValue}" placeholder="query...">
+  <button type="submit">run</button>
+  <div class="filters">
+    <label>entity <input type="text" name="entity" value="${esc(f.entity ?? '')}" placeholder="entity name"></label>
+    <label>type <input type="text" name="type" value="${esc(f.type ?? '')}" placeholder="fact,decision,…"></label>
+    <label>as of <input type="datetime-local" name="as_of" value="${esc(f.as_of ?? '')}"></label>
+    <label>since <input type="datetime-local" name="since" value="${esc(f.since ?? '')}"></label>
+  </div>
+  <p class="hint">modes: hybrid FTS(bm25)+vector fusion always on &middot; entity filter (exact, then substring) &middot; as-of = bitemporal time-travel &middot; since = created_at lower bound &middot; type = comma-separated list</p>
+</form>
+<p class="weights">weights: ${renderWeights(weights)}</p>
+${renderResults(ranSearch, hits)}
+</body>
+</html>`;
+}
+//# sourceMappingURL=dashboard-search-html.js.map

package/dist/server/routes/dashboard-search-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-search-html.js","sourceRoot":"","sources":["../../../src/server/routes/dashboard-search-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,EAAE,MAAM,EAA2C,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAe,MAAM,wBAAwB,CAAC;AAEpE,MAAM,WAAW,GAAG,eAAe,CAAC;AACpC,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,SAAS,UAAU,CAAC,GAAmB,EAAE,IAAY;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,mFAAmF;AACnF,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,EAAM,EAAE,KAAoB,EAAE,KAAa;IAC9E,OAAO,KAAK,EAAE,GAAoB,EAAE,EAAE;QACpC,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAChD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7C,MAAM,QAAQ,GAAG,UAAU,KAAK,UAAU,KAAK,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,KAAK,CAAC;YAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC3B,OAAO,KAAK;qBACT,IAAI,CAAC,GAAG,CAAC;qBACT,MAAM,CAAC,cAAc,EAAE,2BAA2B,CAAC;qBACnD,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC9B,CAAC;YAED,MAAM,CAAC,GAAG,GAAG,CAAC,KAA2C,CAAC;YAC1D,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC;YACzB,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC,MAAM,CAAC;YAEvC,qEAAqE;YACrE,qEAAqE;YACrE,8DAA8D;YAC9D,MAAM,YAAY,GAAG;gBACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS;gBACrC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,SAAS;gBACjC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS;gBACnC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS;aACpC,CAAC;YACF,MAAM,OAAO,GAAkB,EAAE,CAAC;YAClC,IAAI,YAAY,CAAC,MAAM;gBAAE,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;YAC9D,IAAI,YAAY,CAAC,IAAI;gBAAE,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtG,mEAAmE;YACnE,4DAA4D;YAC5D,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,mEAAmE;YACnE,oEAAoE;YACpE,mEAAmE;YACnE,sDAAsD;YACtD,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,CAAC;YACzC,IAAI,IAAI,GAAqB,EAAE,CAAC;YAChC,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5F,CAAC;YAED,OAAO,KAAK;iBACT,IAAI,CAAC,GAAG,CAAC;iBACT,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC;iBAClD,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC;iBACnC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAyB;IAC9C,OAAO,UAAU,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG;UACzE,UAAU,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG;UACxE,YAAY,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,WAAW,CAAC,IAAsB;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;;cAEpB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;cACrB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;cACb,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;cAC3B,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;cAC7B,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;cACtB,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;cACrB,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;cACjB,CAAC,GAAG,CAAC;YACP,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErB,OAAO;;;;;;;aAOI,IAAI;;WAEN,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,SAAkB,EAAE,IAAsB;IAC/D,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,iCAAiC,CAAC;IAChE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,GAAG,GAAG;;;;;;;;;;;;;;;;;;;;CAoBX,CAAC;AASF,SAAS,UAAU,CAAC,QAA4B,EAAE,OAAyB,EAAE,SAAkB,EAAE,IAAsB,EAAE,CAAe;IACtI,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACvC,OAAO;;;;;;SAMA,GAAG;;;;;;2CAM+B,UAAU;;;4DAGO,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;wDACvB,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;oEACL,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oEAClB,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;;;;8BAIxD,aAAa,CAAC,OAAO,CAAC;EAClD,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC;;QAExB,CAAC;AACT,CAAC"}

package/dist/server/routes/dashboard.d.ts

@@ -0,0 +1,19 @@
+/**
+ * GET /dashboard
+ *
+ * Read-only HTML metrics dashboard. Auth accepts (in order):
+ *   1. Authorization: Bearer <token> — same as every other route.
+ *   2. HttpOnly session cookie (set by the one-time bootstrap below).
+ *   3. ?token=<bearer> — bootstrap ONLY: exchanged for the cookie via a 302
+ *      redirect to the clean URL, so the bearer never persists in browser
+ *      history and is not re-sent by the <meta refresh> poll.
+ * Returns 401 plain text on missing/wrong credentials; the 401 log strips the
+ * query string so wrong-token attempts don't persist candidate secrets.
+ *
+ * No JS, no external assets. <meta refresh content="5"> drives auto-poll.
+ */
+import type { FastifyInstance } from 'fastify';
+import type { DB } from '../../storage/db.js';
+import type { Config } from '../../config/config.js';
+import type { HealthState } from '../health-state.js';
+export declare function dashboardRoute(db: DB, config: Config, token: string, healthState?: HealthState): (app: FastifyInstance) => Promise<void>;

package/dist/server/routes/dashboard.js

@@ -0,0 +1,68 @@
+/**
+ * GET /dashboard
+ *
+ * Read-only HTML metrics dashboard. Auth accepts (in order):
+ *   1. Authorization: Bearer <token> — same as every other route.
+ *   2. HttpOnly session cookie (set by the one-time bootstrap below).
+ *   3. ?token=<bearer> — bootstrap ONLY: exchanged for the cookie via a 302
+ *      redirect to the clean URL, so the bearer never persists in browser
+ *      history and is not re-sent by the <meta refresh> poll.
+ * Returns 401 plain text on missing/wrong credentials; the 401 log strips the
+ * query string so wrong-token attempts don't persist candidate secrets.
+ *
+ * No JS, no external assets. <meta refresh content="5"> drives auto-poll.
+ */
+import { queryDashboard } from '../queries/dashboard.js';
+import { renderDashboard } from './dashboard-html.js';
+import { childLogger } from '../../log/logger.js';
+const COOKIE_NAME = 'astramem_dash';
+function readCookie(req, name) {
+    const header = req.headers.cookie;
+    if (!header)
+        return undefined;
+    for (const part of header.split(';')) {
+        const eq = part.indexOf('=');
+        if (eq === -1)
+            continue;
+        if (part.slice(0, eq).trim() === name)
+            return part.slice(eq + 1).trim();
+    }
+    return undefined;
+}
+export function dashboardRoute(db, config, token, healthState) {
+    return async (app) => {
+        app.get('/dashboard', async (req, reply) => {
+            const requestId = req['requestId'];
+            const log = childLogger({ request_id: requestId ?? 'unknown' });
+            const authHeader = req.headers.authorization;
+            const bearerOk = authHeader === `Bearer ${token}`;
+            const cookieOk = readCookie(req, COOKIE_NAME) === token;
+            if (!bearerOk && !cookieOk) {
+                const queryToken = req.query['token'];
+                if (queryToken === token) {
+                    // Bootstrap: swap the URL token for an HttpOnly cookie and redirect
+                    // to the clean path so the bearer leaves the address bar immediately.
+                    // No Secure flag: the daemon is plain-HTTP on 127.0.0.1 by design.
+                    return reply
+                        .header('set-cookie', `${COOKIE_NAME}=${token}; HttpOnly; SameSite=Strict; Path=/dashboard`)
+                        .redirect('/dashboard', 302);
+                }
+                // Strip the query string from the log — a wrong ?token= is a candidate
+                // credential and must not persist in log files.
+                log.warn({ method: req.method, path: req.url.split('?')[0] }, 'dashboard: unauthorized');
+                return reply
+                    .code(401)
+                    .header('content-type', 'text/plain; charset=utf-8')
+                    .send('401 Unauthorized - supply Authorization: Bearer <token> or bootstrap once with ?token=<bearer>');
+            }
+            const data = await queryDashboard(db, healthState);
+            const html = renderDashboard(data, config);
+            return reply
+                .code(200)
+                .header('content-type', 'text/html; charset=utf-8')
+                .header('cache-control', 'no-store')
+                .send(html);
+        });
+    };
+}
+//# sourceMappingURL=dashboard.js.map

package/dist/server/routes/dashboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../../../src/server/routes/dashboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC,SAAS,UAAU,CAAC,GAAmB,EAAE,IAAY;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAM,EAAE,MAAc,EAAE,KAAa,EAAE,WAAyB;IAC7F,OAAO,KAAK,EAAE,GAAoB,EAAE,EAAE;QACpC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACzC,MAAM,SAAS,GAAI,GAA0C,CAAC,WAAW,CAAuB,CAAC;YACjG,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;YAEhE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7C,MAAM,QAAQ,GAAG,UAAU,KAAK,UAAU,KAAK,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,KAAK,CAAC;YAExD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC3B,MAAM,UAAU,GAAI,GAAG,CAAC,KAA4C,CAAC,OAAO,CAAC,CAAC;gBAC9E,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;oBACzB,oEAAoE;oBACpE,sEAAsE;oBACtE,mEAAmE;oBACnE,OAAO,KAAK;yBACT,MAAM,CACL,YAAY,EACZ,GAAG,WAAW,IAAI,KAAK,8CAA8C,CACtE;yBACA,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;gBACjC,CAAC;gBACD,uEAAuE;gBACvE,gDAAgD;gBAChD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBACzF,OAAO,KAAK;qBACT,IAAI,CAAC,GAAG,CAAC;qBACT,MAAM,CAAC,cAAc,EAAE,2BAA2B,CAAC;qBACnD,IAAI,CAAC,gGAAgG,CAAC,CAAC;YAC5G,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAE3C,OAAO,KAAK;iBACT,IAAI,CAAC,GAAG,CAAC;iBACT,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC;iBAClD,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC;iBACnC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/routes/digest.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Session digest route (KF-C): "what I learned this session".
+ *   GET /sessions/:id/digest
+ * Derived at read time from memories(session_id); no stored digest state.
+ * status=pending while a distill job for this session is queued/running.
+ */
+import type { FastifyInstance } from 'fastify';
+import type { DB } from '../../storage/db.js';
+export declare function digestRoute(db: DB): (app: FastifyInstance) => Promise<void>;

package/dist/server/routes/digest.js

@@ -0,0 +1,37 @@
+/**
+ * Session digest route (KF-C): "what I learned this session".
+ *   GET /sessions/:id/digest
+ * Derived at read time from memories(session_id); no stored digest state.
+ * status=pending while a distill job for this session is queued/running.
+ */
+export function digestRoute(db) {
+    return async (app) => {
+        app.get('/sessions/:id/digest', async (req, reply) => {
+            const { id } = req.params;
+            const session = db.prepare('SELECT id FROM sessions WHERE id = ?').get(id);
+            if (!session) {
+                return reply.code(404).send({ error: 'not found', session_id: id });
+            }
+            // A distill job for this session still queued or running → pending.
+            // json_extract (SQLite JSON1, bundled with better-sqlite3) — exact match,
+            // immune to LIKE-wildcard injection and payload key reordering.
+            const activeJob = db.prepare(`
+        SELECT id FROM jobs
+        WHERE kind = 'distill' AND state IN ('pending', 'running')
+          AND json_extract(payload_json, '$.session_id') = ?
+        LIMIT 1
+      `).get(id);
+            const rows = db.prepare('SELECT id, type, text FROM memories WHERE session_id = ? ORDER BY created_at ASC').all(id);
+            const counts = {};
+            for (const r of rows)
+                counts[r.type] = (counts[r.type] ?? 0) + 1;
+            return {
+                session_id: id,
+                status: activeJob ? 'pending' : 'ready',
+                counts,
+                memories: rows,
+            };
+        });
+    };
+}
+//# sourceMappingURL=digest.js.map

package/dist/server/routes/digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.js","sourceRoot":"","sources":["../../../src/server/routes/digest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,MAAM,UAAU,WAAW,CAAC,EAAM;IAChC,OAAO,KAAK,EAAE,GAAoB,EAAE,EAAE;QACpC,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACnD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;YAE5C,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;YACtE,CAAC;YAED,oEAAoE;YACpE,0EAA0E;YAC1E,gEAAgE;YAChE,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;OAK5B,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEX,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB,kFAAkF,CACnF,CAAC,GAAG,CAAC,EAAE,CAAa,CAAC;YAEtB,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAEjE,OAAO;gBACL,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBACvC,MAAM;gBACN,QAAQ,EAAE,IAAI;aACf,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/routes/entities.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Entity query routes (FEAT-402 slice 2, AC-5):
+ *   GET /entities?q=&limit=          — autocomplete (name substring match)
+ *   GET /entities/:id/memories       — every memory linked to this entity
+ *
+ * Both routes sit behind the same Bearer-auth preHandler as every other
+ * non-public route (src/server/app.ts) — neither is in the /health,
+ * /version, /dashboard allowlist.
+ */
+import type { FastifyInstance } from 'fastify';
+import type { DB } from '../../storage/db.js';
+export declare function entitiesRoute(db: DB): (app: FastifyInstance) => Promise<void>;

package/dist/server/routes/entities.js

@@ -0,0 +1,46 @@
+/**
+ * Entity query routes (FEAT-402 slice 2, AC-5):
+ *   GET /entities?q=&limit=          — autocomplete (name substring match)
+ *   GET /entities/:id/memories       — every memory linked to this entity
+ *
+ * Both routes sit behind the same Bearer-auth preHandler as every other
+ * non-public route (src/server/app.ts) — neither is in the /health,
+ * /version, /dashboard allowlist.
+ */
+import { EntityRepo } from '../../storage/entities.js';
+import { MemoryRepo } from '../../storage/memories.js';
+export function entitiesRoute(db) {
+    return async (app) => {
+        // GET /entities?q=pg — autocomplete. Empty q returns entities alphabetically.
+        app.get('/entities', async (req, reply) => {
+            const params = req.query;
+            const q = params.q ?? '';
+            const rawLimit = params.limit ? Number(params.limit) : 20;
+            const limit = Number.isFinite(rawLimit) ? Math.max(1, Math.min(100, rawLimit)) : 20;
+            const entityRepo = new EntityRepo(db);
+            const entities = entityRepo.search(q, limit);
+            return { entities };
+        });
+        // GET /entities/:id/memories — every memory currently linked to entity :id.
+        app.get('/entities/:id/memories', async (req, reply) => {
+            const { id } = req.params;
+            const entityRepo = new EntityRepo(db);
+            const entity = entityRepo.getById(id);
+            if (!entity) {
+                return reply.code(404).send({ error: 'not found', id });
+            }
+            const memRepo = new MemoryRepo(db);
+            const memoryIds = entityRepo.memoryIdsForEntities([id]);
+            // Currently-valid only (valid_to IS NULL — same semantics as
+            // validityFilterClause(undefined) in src/search/search.ts): a
+            // superseded/invalidated/archived memory is retired, not "currently
+            // linked" to the entity, even though the memory_entities row itself
+            // still points at it.
+            const memories = Array.from(memoryIds)
+                .map(mid => memRepo.get(mid))
+                .filter((m) => m !== null && m.valid_to === null);
+            return { entity, memories };
+        });
+    };
+}
+//# sourceMappingURL=entities.js.map

package/dist/server/routes/entities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entities.js","sourceRoot":"","sources":["../../../src/server/routes/entities.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAEvD,MAAM,UAAU,aAAa,CAAC,EAAM;IAClC,OAAO,KAAK,EAAE,GAAoB,EAAE,EAAE;QACpC,8EAA8E;QAC9E,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,GAAG,CAAC,KAA+B,CAAC;YACnD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEpF,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,4EAA4E;QAC5E,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACrD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;YAC5C,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,6DAA6D;YAC7D,8DAA8D;YAC9D,oEAAoE;YACpE,oEAAoE;YACpE,sBAAsB;YACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;iBACnC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;iBAC5B,MAAM,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;YAEhF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/routes/health.d.ts

@@ -0,0 +1,14 @@
+import type { FastifyInstance } from 'fastify';
+import { type Config } from '../../config/config.js';
+import type { DB } from '../../storage/db.js';
+import type { HealthState } from '../health-state.js';
+/**
+ * db is optional so /health keeps working for any caller that doesn't wire a
+ * DB (defensive default) — the usefulness block degrades to zeros rather
+ * than 500ing.
+ *
+ * Wire compat: every pre-existing field is preserved and `ok` stays true
+ * whenever the daemon is reachable ("reachable and serving"). The additive
+ * `status` field carries the degraded-start signal (starting|ok|degraded).
+ */
+export declare function healthRoute(config?: Config, db?: DB, healthState?: HealthState): (app: FastifyInstance) => Promise<void>;

package/dist/server/routes/health.js

@@ -0,0 +1,100 @@
+import { PKG_VERSION, WIRE_VERSIONS_SUPPORTED, SCHEMA_VERSION } from '../lib/wire-meta.js';
+import { defaultConfig } from '../../config/config.js';
+import { usefulnessRate } from '../../storage/usefulness.js';
+import { queryJobStates } from '../queries/dashboard.js';
+import { statfsSync } from 'node:fs';
+const SEVEN_DAYS_MS = 7 * 24 * 60 * 60 * 1000;
+/**
+ * db is optional so /health keeps working for any caller that doesn't wire a
+ * DB (defensive default) — the usefulness block degrades to zeros rather
+ * than 500ing.
+ *
+ * Wire compat: every pre-existing field is preserved and `ok` stays true
+ * whenever the daemon is reachable ("reachable and serving"). The additive
+ * `status` field carries the degraded-start signal (starting|ok|degraded).
+ */
+export function healthRoute(config = defaultConfig(), db, healthState) {
+    return async (app) => {
+        app.get('/health', async () => {
+            const rate = db ? usefulnessRate(db, { sinceMs: Date.now() - SEVEN_DAYS_MS }) : { served: 0, used: 0, rate: null };
+            return {
+                ok: true,
+                version: PKG_VERSION,
+                wire_versions_supported: WIRE_VERSIONS_SUPPORTED,
+                schema_version: SCHEMA_VERSION,
+                security: {
+                    redaction: config.security.redaction.enabled,
+                    encryption: config.security.encryption.enabled,
+                },
+                // ADR-010: recall-usefulness rate (v1: measure only, does not feed ranking).
+                usefulness: {
+                    served_7d: rate.served,
+                    used_7d: rate.used,
+                    rate_7d: rate.rate,
+                },
+                // Degraded-start (D3) + real health checks (P1.3) — additive only.
+                ...(healthState
+                    ? {
+                        status: healthState.status(),
+                        uptime_s: healthState.uptimeSeconds(),
+                        embed: {
+                            ok: healthState.embed.ok,
+                            last_ok_at: healthState.embed.lastOkAt,
+                            last_error: healthState.embed.lastError,
+                            attempts: healthState.embed.attempts,
+                        },
+                        worker: workerBlock(healthState),
+                        ...(db ? { queue: queueCounts(db), pending_proposals: pendingProposals(db) } : {}),
+                        ...(healthState.dataDir ? { disk_free_bytes: diskFree(healthState.dataDir) } : {}),
+                    }
+                    : {}),
+            };
+        });
+    };
+}
+/**
+ * Generous liveness window: the worker stamps lastTickAt at tick START, so a
+ * single long-running job (LLM distill can take up to the 60s chat timeout)
+ * must not read as "worker dead". 90s covers the worst handler + margin.
+ */
+const WORKER_ALIVE_WINDOW_MS = 90_000;
+function workerBlock(hs) {
+    const last = hs.worker.lastTickAt;
+    return {
+        alive: last !== null && Date.now() - last < WORKER_ALIVE_WINDOW_MS,
+        last_tick_at: last,
+        last_tick_ago_ms: last === null ? null : Date.now() - last,
+    };
+}
+/** FEAT-410 AC-2: delegates to the shared queryJobStates (queries/dashboard.ts)
+ *  so /health and /dashboard compute job-state counts from one function. */
+function queueCounts(db) {
+    try {
+        const rows = queryJobStates(db);
+        const out = {};
+        for (const r of rows)
+            out[r.state] = r.count;
+        return out;
+    }
+    catch {
+        return {}; // jobs table absent (bare test DB) — degrade, never 500.
+    }
+}
+function pendingProposals(db) {
+    try {
+        return db.prepare(`SELECT COUNT(*) AS n FROM consolidation_proposals WHERE status = 'pending'`).get().n;
+    }
+    catch {
+        return 0; // table absent (pre-008 schema in bare test DBs)
+    }
+}
+function diskFree(dataDir) {
+    try {
+        const s = statfsSync(dataDir);
+        return s.bavail * s.bsize;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=health.js.map

package/dist/server/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/server/routes/health.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAe,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGpE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB,aAAa,EAAE,EAAE,EAAO,EAAE,WAAyB;IAC9F,OAAO,KAAK,EAAE,GAAoB,EAAE,EAAE;QACpC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACnH,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,WAAW;gBACpB,uBAAuB,EAAE,uBAAuB;gBAChD,cAAc,EAAE,cAAc;gBAC9B,QAAQ,EAAE;oBACR,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO;oBAC5C,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO;iBAC/C;gBACD,6EAA6E;gBAC7E,UAAU,EAAE;oBACV,SAAS,EAAE,IAAI,CAAC,MAAM;oBACtB,OAAO,EAAE,IAAI,CAAC,IAAI;oBAClB,OAAO,EAAE,IAAI,CAAC,IAAI;iBACnB;gBACD,mEAAmE;gBACnE,GAAG,CAAC,WAAW;oBACb,CAAC,CAAC;wBACE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE;wBAC5B,QAAQ,EAAE,WAAW,CAAC,aAAa,EAAE;wBACrC,KAAK,EAAE;4BACL,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE;4BACxB,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ;4BACtC,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS;4BACvC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ;yBACrC;wBACD,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC;wBAChC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClF,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACnF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC,SAAS,WAAW,CAAC,EAAe;IAClC,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;IAClC,OAAO;QACL,KAAK,EAAE,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,sBAAsB;QAClE,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;KAC3D,CAAC;AACJ,CAAC;AAED;4EAC4E;AAC5E,SAAS,WAAW,CAAC,EAAM;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAC7C,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,yDAAyD;IACtE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,EAAM;IAC9B,IAAI,CAAC;QACH,OAAQ,EAAE,CAAC,OAAO,CAChB,4EAA4E,CAC7E,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,CAAC,iDAAiD;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}