@astragenie/astramemory-local 0.7.2

package/dist/storage/migrate-encrypt.js

@@ -0,0 +1,121 @@
+/**
+ * migrate-encrypt.ts — plaintext -> encrypted DB auto-migration (SEC-7, AC-2).
+ *
+ * On daemon startup, a pre-existing v0.3.x plaintext `memory.sqlite` must be
+ * transparently upgraded to an encrypted (SQLCipher) file before openDb()
+ * applies `PRAGMA key` to it. Detection is a raw byte-header check (no need
+ * to even open the file to know it's plaintext): every unencrypted SQLite
+ * file begins with the 16-byte magic string `"SQLite format 3\0"`.
+ *
+ * Migration path (`PRAGMA rekey`, the SQLite3MultipleCiphers mechanism —
+ * this driver does NOT ship SQLCipher's `sqlcipher_export()` function):
+ *   1. Open the plaintext file with the cipher driver WITHOUT a key
+ *      (the driver reads plaintext SQLite files natively when no key is set),
+ *      `PRAGMA wal_checkpoint(TRUNCATE)` to fold any -wal sidecar into the
+ *      main file, record row counts, close.
+ *   2. Copy the (now checkpoint-complete) file to a tmp path and run
+ *      `PRAGMA rekey = '<key>'` on the COPY — in-place encryption of every
+ *      page. The original stays untouched until verification passes.
+ *   3. Verify: the tmp header is no longer plaintext magic AND reopening tmp
+ *      with the key reproduces the `memories` + `transcripts` row counts.
+ *      Abort (throw, delete tmp, original untouched) on any mismatch.
+ *   4. Copy the plaintext original to `<dbPath>.pre-encryption.bak` (kept
+ *      per SEC-7 until the operator is confident the migration is safe —
+ *      this module does not delete it), then atomically rename the tmp file
+ *      over `dbPath`.
+ *
+ * Idempotent: a second call against an already-encrypted file (header is no
+ * longer the plaintext magic) is a no-op that returns 'already-encrypted'.
+ */
+import { readFileSync, existsSync, copyFileSync, renameSync, rmSync } from 'node:fs';
+import CipherDatabase from 'better-sqlite3-multiple-ciphers';
+const PLAINTEXT_MAGIC = 'SQLite format 3\0';
+/** Exported for key-aware CLI opens (open-runtime-db.ts): a plaintext file
+ *  must be opened WITHOUT a key — PRAGMA key on plaintext reads as garbage. */
+export function isPlaintextSqlite(dbPath) {
+    const header = readFileSync(dbPath).subarray(0, 16).toString('latin1');
+    return header === PLAINTEXT_MAGIC;
+}
+function escapeSqlString(value) {
+    return value.replace(/'/g, "''");
+}
+function tableCounts(db) {
+    const memories = db.prepare('SELECT COUNT(*) AS n FROM memories').get().n;
+    const transcripts = db.prepare('SELECT COUNT(*) AS n FROM transcripts').get().n;
+    return { memories, transcripts };
+}
+/**
+ * Detects a plaintext DB at `dbPath` and migrates it to encrypted form with
+ * `key`. Returns:
+ *   - 'missing'           — no file at dbPath (fresh install; openDb() with
+ *                            a key will create an encrypted file directly).
+ *   - 'already-encrypted' — file exists and is not plaintext (already
+ *                            migrated, or created encrypted from the start).
+ *   - 'migrated'          — a plaintext DB was found and successfully
+ *                            converted; `<dbPath>.pre-encryption.bak` now
+ *                            holds the pre-migration plaintext copy.
+ */
+export function encryptIfPlaintext(dbPath, key) {
+    if (!existsSync(dbPath))
+        return 'missing';
+    if (!isPlaintextSqlite(dbPath))
+        return 'already-encrypted';
+    const tmpPath = `${dbPath}.encrypting-tmp`;
+    if (existsSync(tmpPath)) {
+        // Leftover from a crashed/interrupted prior attempt — start clean.
+        rmSync(tmpPath, { force: true });
+    }
+    // 1. Checkpoint + count on the ORIGINAL, then close it before copying.
+    const plain = new CipherDatabase(dbPath);
+    let beforeCounts;
+    try {
+        try {
+            plain.pragma('wal_checkpoint(TRUNCATE)');
+        }
+        catch {
+            // Non-fatal: DB may not be in WAL mode yet (e.g. first-ever open).
+        }
+        beforeCounts = tableCounts(plain);
+    }
+    finally {
+        plain.close();
+    }
+    // 2. Encrypt a COPY in place via PRAGMA rekey (plaintext -> keyed).
+    copyFileSync(dbPath, tmpPath);
+    const rekeying = new CipherDatabase(tmpPath);
+    try {
+        rekeying.pragma(`rekey='${escapeSqlString(key)}'`);
+    }
+    finally {
+        rekeying.close();
+    }
+    // 3. Verify the copy is genuinely encrypted and complete before touching
+    //    the original file.
+    if (isPlaintextSqlite(tmpPath)) {
+        rmSync(tmpPath, { force: true });
+        throw new Error(`encryptIfPlaintext: PRAGMA rekey left ${tmpPath} with a plaintext header; ` +
+            `aborting — plaintext DB at ${dbPath} was left untouched`);
+    }
+    const verify = new CipherDatabase(tmpPath);
+    let afterCounts;
+    try {
+        verify.pragma(`key='${escapeSqlString(key)}'`);
+        afterCounts = tableCounts(verify);
+    }
+    finally {
+        verify.close();
+    }
+    if (afterCounts.memories !== beforeCounts.memories || afterCounts.transcripts !== beforeCounts.transcripts) {
+        rmSync(tmpPath, { force: true });
+        throw new Error(`encryptIfPlaintext: row count mismatch after rekey ` +
+            `(memories ${beforeCounts.memories} -> ${afterCounts.memories}, ` +
+            `transcripts ${beforeCounts.transcripts} -> ${afterCounts.transcripts}); ` +
+            `aborting — plaintext DB at ${dbPath} was left untouched`);
+    }
+    // Preserve the plaintext original (SEC-7), then atomically swap it out.
+    const bakPath = `${dbPath}.pre-encryption.bak`;
+    copyFileSync(dbPath, bakPath);
+    renameSync(tmpPath, dbPath);
+    return 'migrated';
+}
+//# sourceMappingURL=migrate-encrypt.js.map

package/dist/storage/migrate-encrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-encrypt.js","sourceRoot":"","sources":["../../src/storage/migrate-encrypt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,cAAc,MAAM,iCAAiC,CAAC;AAG7D,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAI5C;+EAC+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvE,OAAO,MAAM,KAAK,eAAe,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,WAAW,CAAC,EAAM;IACzB,MAAM,QAAQ,GAAI,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;IAC7F,MAAM,WAAW,GAAI,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;IACnG,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,GAAW;IAC5D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAE3D,MAAM,OAAO,GAAG,GAAG,MAAM,iBAAiB,CAAC;IAC3C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,mEAAmE;QACnE,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,uEAAuE;IACvE,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,YAAuD,CAAC;IAC5D,IAAI,CAAC;QACH,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;QACD,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAED,oEAAoE;IACpE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,QAAQ,CAAC,MAAM,CAAC,UAAU,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,yEAAyE;IACzE,wBAAwB;IACxB,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,yCAAyC,OAAO,4BAA4B;YAC5E,8BAA8B,MAAM,qBAAqB,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,WAAsD,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/C,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,KAAK,YAAY,CAAC,QAAQ,IAAI,WAAW,CAAC,WAAW,KAAK,YAAY,CAAC,WAAW,EAAE,CAAC;QAC3G,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,qDAAqD;YACrD,aAAa,YAAY,CAAC,QAAQ,OAAO,WAAW,CAAC,QAAQ,IAAI;YACjE,eAAe,YAAY,CAAC,WAAW,OAAO,WAAW,CAAC,WAAW,KAAK;YAC1E,8BAA8B,MAAM,qBAAqB,CAC1D,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,MAAM,OAAO,GAAG,GAAG,MAAM,qBAAqB,CAAC;IAC/C,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE5B,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/storage/migrate.d.ts

@@ -0,0 +1,27 @@
+import type { DB } from './db.js';
+/**
+ * Run pending migrations. `dim` (default DEFAULT_EMBED_DIM = 1024) is
+ * baked into any NOT-yet-applied migration file containing the
+ * __EMBED_DIM__ placeholder (currently just 001-init's `memories_vec
+ * FLOAT[__EMBED_DIM__]`) — i.e. it only matters for a genuinely fresh DB.
+ * Already-applied migrations are skipped entirely (schema_version tracks
+ * them), so passing a different `dim` against an already-migrated DB is a
+ * harmless no-op — the historical FLOAT[N] baked in at creation time is
+ * immutable short of the resumable re-embed procedure (migration 011,
+ * `astramem-local reembed-dim`, docs/embed-dim-migration.md).
+ */
+export declare function migrate(db: DB, dim?: number): void;
+/**
+ * Read the dim actually baked into `memories_vec` at CREATE TABLE time
+ * (FEAT-409 AC-3) by parsing its persisted DDL out of sqlite_master —
+ * the source of truth for what the schema really is, independent of
+ * whatever config.embedding.dim currently says. Boot preflight compares
+ * the PROVIDER's dim against this (not just provider self-consistency),
+ * so a config/provider dim that drifted from the schema (e.g. someone
+ * edited config.yaml without running `reembed-dim`) fails loud at boot
+ * instead of surfacing as a raw sqlite-vec dimension error deep in the
+ * first ingest. Returns null when the table doesn't exist yet (fresh DB
+ * about to be created by migrate()) or its DDL doesn't match the
+ * expected `FLOAT[N]` shape.
+ */
+export declare function getVecSchemaDim(db: DB): number | null;

package/dist/storage/migrate.js

@@ -0,0 +1,105 @@
+import { readFileSync, readdirSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { SCHEMA_VERSION } from '../server/lib/wire-meta.js';
+import { DEFAULT_EMBED_DIM } from '../contracts/embed.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const MIGRATIONS_DIR = join(__dirname, '..', '..', 'migrations');
+/** Placeholder substituted into migration SQL for the vec schema dim
+ * (FEAT-409). Only migrations/001-init.sql uses it today; substitution is
+ * a no-op for any migration file that doesn't contain the token. Applying
+ * it unconditionally to every not-yet-applied file (rather than special-
+ * casing 001) keeps future dim-sensitive migrations trivial to add. */
+const EMBED_DIM_PLACEHOLDER = '__EMBED_DIM__';
+/**
+ * Run pending migrations. `dim` (default DEFAULT_EMBED_DIM = 1024) is
+ * baked into any NOT-yet-applied migration file containing the
+ * __EMBED_DIM__ placeholder (currently just 001-init's `memories_vec
+ * FLOAT[__EMBED_DIM__]`) — i.e. it only matters for a genuinely fresh DB.
+ * Already-applied migrations are skipped entirely (schema_version tracks
+ * them), so passing a different `dim` against an already-migrated DB is a
+ * harmless no-op — the historical FLOAT[N] baked in at creation time is
+ * immutable short of the resumable re-embed procedure (migration 011,
+ * `astramem-local reembed-dim`, docs/embed-dim-migration.md).
+ */
+export function migrate(db, dim = DEFAULT_EMBED_DIM) {
+    if (!Number.isInteger(dim) || dim <= 0) {
+        throw new Error(`invalid embedding dim: ${dim} (must be a positive integer)`);
+    }
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS schema_version (
+      version INTEGER PRIMARY KEY,
+      applied_at INTEGER NOT NULL
+    )
+  `);
+    const applied = new Set(db.prepare('SELECT version FROM schema_version').all()
+        .map(r => r.version));
+    const files = readdirSync(MIGRATIONS_DIR)
+        .filter(f => f.endsWith('.sql'))
+        .sort();
+    for (const f of files) {
+        const versionStr = f.split('-')[0];
+        const version = parseInt(versionStr ?? '', 10);
+        if (Number.isNaN(version))
+            throw new Error(`bad migration name: ${f}`);
+        if (applied.has(version))
+            continue;
+        const rawSql = readFileSync(join(MIGRATIONS_DIR, f), 'utf8');
+        const sql = rawSql.split(EMBED_DIM_PLACEHOLDER).join(String(dim));
+        const tx = db.transaction(() => {
+            db.exec(sql);
+            db.prepare('INSERT INTO schema_version (version, applied_at) VALUES (?, ?)').run(version, Date.now());
+        });
+        try {
+            tx();
+        }
+        catch (err) {
+            // FEAT-420 AC-3: a half-migrated datadir (e.g. the schema_version row
+            // for the last-applied migration was lost while the underlying schema
+            // change already landed) makes migrate() try to re-apply SQL against
+            // an already-migrated table — SQLite throws a low-level error (e.g.
+            // "duplicate column name") that IS fail-loud but not actionable on its
+            // own. Wrap it so the operator gets a diagnosis, not just a raw DDL
+            // error. No change to migration order/content/skip logic above.
+            throw new Error(`Migration ${f} (version ${version}) failed to apply — the database schema may already ` +
+                `partially reflect this migration while schema_version does not record it (a half-migrated ` +
+                `or corrupted datadir). Restore from a backup rather than continuing. Original error: ` +
+                `${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    // Boot-time schema-version drift guard: the SCHEMA_VERSION constant in
+    // wire-meta.ts MUST match the highest migration applied to the DB.
+    // If they diverge a migration was added without bumping the constant (or
+    // vice-versa). Fail loudly rather than silently serve wrong metadata.
+    const dbMaxRow = db
+        .prepare('SELECT MAX(version) AS max_version FROM schema_version')
+        .get();
+    const dbMax = dbMaxRow.max_version ?? 0;
+    if (dbMax !== SCHEMA_VERSION) {
+        throw new Error(`Schema-version constant drift: wire-meta says ${SCHEMA_VERSION}, DB says ${dbMax}. ` +
+            `Bump wire-meta.SCHEMA_VERSION when adding a migration.`);
+    }
+}
+/**
+ * Read the dim actually baked into `memories_vec` at CREATE TABLE time
+ * (FEAT-409 AC-3) by parsing its persisted DDL out of sqlite_master —
+ * the source of truth for what the schema really is, independent of
+ * whatever config.embedding.dim currently says. Boot preflight compares
+ * the PROVIDER's dim against this (not just provider self-consistency),
+ * so a config/provider dim that drifted from the schema (e.g. someone
+ * edited config.yaml without running `reembed-dim`) fails loud at boot
+ * instead of surfacing as a raw sqlite-vec dimension error deep in the
+ * first ingest. Returns null when the table doesn't exist yet (fresh DB
+ * about to be created by migrate()) or its DDL doesn't match the
+ * expected `FLOAT[N]` shape.
+ */
+export function getVecSchemaDim(db) {
+    const row = db
+        .prepare(`SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'memories_vec'`)
+        .get();
+    if (!row?.sql)
+        return null;
+    const match = row.sql.match(/FLOAT\[(\d+)\]/);
+    return match ? Number(match[1]) : null;
+}
+//# sourceMappingURL=migrate.js.map

package/dist/storage/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/storage/migrate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;AAEjE;;;;uEAIuE;AACvE,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAE9C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,OAAO,CAAC,EAAM,EAAE,MAAc,iBAAiB;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,+BAA+B,CAAC,CAAC;IAChF,CAAC;IAED,EAAE,CAAC,IAAI,CAAC;;;;;GAKP,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,GAAG,CACpB,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,EAA0B;SAC5E,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CACvB,CAAC;IAEF,MAAM,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC;SACtC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC/B,IAAI,EAAE,CAAC;IAEV,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAC7B,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxG,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,EAAE,EAAE,CAAC;QACP,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,sEAAsE;YACtE,qEAAqE;YACrE,oEAAoE;YACpE,uEAAuE;YACvE,oEAAoE;YACpE,gEAAgE;YAChE,MAAM,IAAI,KAAK,CACb,aAAa,CAAC,aAAa,OAAO,sDAAsD;gBACxF,4FAA4F;gBAC5F,uFAAuF;gBACvF,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,mEAAmE;IACnE,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,QAAQ,GAAG,EAAE;SAChB,OAAO,CAAC,wDAAwD,CAAC;SACjE,GAAG,EAAoC,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,iDAAiD,cAAc,aAAa,KAAK,IAAI;YACrF,wDAAwD,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,EAAM;IACpC,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,8EAA8E,CAAC;SACvF,GAAG,EAAiC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,GAAG;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC"}

package/dist/storage/redaction-log.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Persistence for stage-0 redaction counters (SEC-6). Counts + types only —
+ * never the raw secret value. One row per (type, ingest) — see
+ * migrations/005-security.sql for the `redaction_log` table.
+ */
+import type { DB } from './db.js';
+import type { RedactionEvent } from '../redact/index.js';
+export interface RedactionCountRow {
+    type: string;
+    count: number;
+}
+/** Collapse a flat event list into one row per type (count = occurrences). */
+export declare function aggregateRedactionEvents(events: RedactionEvent[]): RedactionCountRow[];
+/**
+ * Write one `redaction_log` row per distinct type found in `events`. No-op
+ * when `events` is empty (nothing to record, no wasted write).
+ */
+export declare function recordRedactionEvents(db: DB, events: RedactionEvent[], sessionId: string | null): void;

package/dist/storage/redaction-log.js

@@ -0,0 +1,27 @@
+/**
+ * Persistence for stage-0 redaction counters (SEC-6). Counts + types only —
+ * never the raw secret value. One row per (type, ingest) — see
+ * migrations/005-security.sql for the `redaction_log` table.
+ */
+/** Collapse a flat event list into one row per type (count = occurrences). */
+export function aggregateRedactionEvents(events) {
+    const counts = new Map();
+    for (const e of events) {
+        counts.set(e.type, (counts.get(e.type) ?? 0) + 1);
+    }
+    return [...counts.entries()].map(([type, count]) => ({ type, count }));
+}
+/**
+ * Write one `redaction_log` row per distinct type found in `events`. No-op
+ * when `events` is empty (nothing to record, no wasted write).
+ */
+export function recordRedactionEvents(db, events, sessionId) {
+    if (events.length === 0)
+        return;
+    const now = Date.now();
+    const stmt = db.prepare('INSERT INTO redaction_log (type, count, session_id, created_at) VALUES (?, ?, ?, ?)');
+    for (const row of aggregateRedactionEvents(events)) {
+        stmt.run(row.type, row.count, sessionId, now);
+    }
+}
+//# sourceMappingURL=redaction-log.js.map

package/dist/storage/redaction-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction-log.js","sourceRoot":"","sources":["../../src/storage/redaction-log.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAC/D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAM,EAAE,MAAwB,EAAE,SAAwB;IAC9F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB,qFAAqF,CACtF,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/storage/usefulness.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Recall-usefulness event capture + metric (ADR-010, v1: measure only — the
+ * events captured here do NOT feed ranking yet, that's v1.x).
+ *
+ * Rides the existing memory_events log ('usefulness' event_type, already
+ * present in the migration 007 CHECK constraint) — no new migration. Three
+ * payload families, distinguished by payload.family:
+ *
+ *   - recall_served    — one event per atom returned from a search/recall
+ *                         surface (REST /search, /recall, /recall/pack; MCP
+ *                         search_memory/recall_memory).
+ *   - recall_used       — explicit or heuristic signal that a served atom
+ *                         mattered. v1 ships the explicit channel only
+ *                         (mark_memory_used MCP tool / POST /memory/:id/used).
+ *   - memory_corrected  — negative signal: the atom was invalidated,
+ *                         superseded, demoted, or edited. Appended directly
+ *                         inside MemoryEventRepo.invalidate/supersede's own
+ *                         transaction (src/storage/memory-events.ts) — this
+ *                         module documents the payload shape those call
+ *                         sites use, but does not append on their behalf, to
+ *                         avoid a circular import between the two modules.
+ *
+ * Privacy: the raw query text is NEVER stored — only a truncated sha256 hex
+ * digest (hashQuery). Usefulness events inherit the atom's scope (ADR-009)
+ * like every other memory_events row.
+ */
+import type { DB } from './db.js';
+export type UsefulnessSurface = 'mcp' | 'rest' | 'cli';
+export type UsefulnessSignal = 'explicit' | 'heuristic';
+export type CorrectionAction = 'invalidated' | 'superseded' | 'demoted' | 'edited';
+/** sha256 hex digest of the raw query, truncated to 16 chars — never store the query text itself. */
+export declare function hashQuery(query: string): string;
+export interface RecordRecallServedInput {
+    /** Precomputed query hash. Provide this OR `query` (which gets hashed here). */
+    queryHash?: string;
+    /** Raw query/recall-input text — hashed via hashQuery, never persisted as-is. */
+    query?: string;
+    atomIds: string[];
+    /** Optional per-atom scores, aligned by index with atomIds. */
+    scores?: number[];
+    surface: UsefulnessSurface;
+    /** Free-form label for the recall mode (e.g. 'search', 'recall', 'pack'). */
+    mode?: string;
+}
+/**
+ * Append one 'usefulness'/'recall_served' event per served atom, in a single
+ * transaction. Cheap by design: one prepared-statement loop, no per-atom
+ * round trip beyond the INSERT itself. No-ops on an empty atomIds list.
+ */
+export declare function recordRecallServed(db: DB, input: RecordRecallServedInput): void;
+export interface RecordRecallUsedInput {
+    atomId: string;
+    surface: UsefulnessSurface;
+    signal: UsefulnessSignal;
+}
+/** Append one 'usefulness'/'recall_used' event — the atom mattered. */
+export declare function recordRecallUsed(db: DB, input: RecordRecallUsedInput): void;
+export interface RecordMemoryCorrectedInput {
+    atomId: string;
+    action: CorrectionAction;
+}
+/**
+ * Append one 'usefulness'/'memory_corrected' event — a negative signal.
+ * Exposed for direct callers (e.g. future demote/edit flows); the
+ * invalidate/supersede lifecycle ops append this shape inline instead of
+ * calling this function, to keep memory-events.ts free of a dependency on
+ * this module (see file header).
+ */
+export declare function recordMemoryCorrected(db: DB, input: RecordMemoryCorrectedInput): void;
+/**
+ * Per-atom usefulness score for ranking (ADR-010 v1.x). Laplace-smoothed:
+ * (used + 1) / (used + corrected + 2) — an atom with no signal scores a
+ * neutral 0.5, one explicit recall_used lifts it to 0.67, one correction
+ * drops it to 0.33. Every requested id gets an entry so callers never have
+ * to special-case missing atoms.
+ */
+export declare function usefulnessScores(db: DB, atomIds: string[]): Map<string, number>;
+export interface UsefulnessRateOpts {
+    /** Epoch-ms lower bound on created_at. Defaults to 0 (no lower bound). */
+    sinceMs?: number;
+    surface?: UsefulnessSurface;
+}
+export interface UsefulnessRate {
+    served: number;
+    used: number;
+    /** used / served; null when served === 0 (avoids divide-by-zero / misleading 0%). */
+    rate: number | null;
+}
+/**
+ * recall-usefulness rate = distinct atoms used / distinct atoms served, in
+ * the given window (ADR-010's seed metric). Distinct-atom counting avoids
+ * double-counting an atom served or used more than once in the window.
+ */
+export declare function usefulnessRate(db: DB, opts?: UsefulnessRateOpts): UsefulnessRate;
+/**
+ * Per-atom usefulness rate over a trailing window, for archival eligibility
+ * (FEAT-404 AC-2/AC-3 — "rate_7d"). Deliberately distinct from
+ * usefulnessRate() above: that DB-wide health-dashboard metric returns
+ * `rate: null` when served === 0 to avoid a misleading 0% on the /health
+ * surface. Archival eligibility instead needs one comparable number per
+ * atom, and "zero recall_served events in the window" is itself evidence
+ * the atom isn't earning its keep — so it maps to rate 0 here, not null,
+ * making an unsignaled atom exactly as archival-eligible as one with 0%
+ * explicit usage. Every requested id gets an entry (default 0) so callers
+ * never special-case a missing atom.
+ */
+export declare function perAtomUsefulnessRate7d(db: DB, atomIds: string[], sinceMs: number): Map<string, number>;
+export interface UsefulnessByType {
+    type: string;
+    served: number;
+    used: number;
+    rate: number | null;
+}
+/** Same metric, grouped by the served/used atom's current memories.type. */
+export declare function usefulnessByType(db: DB, opts?: UsefulnessRateOpts): UsefulnessByType[];

package/dist/storage/usefulness.js

@@ -0,0 +1,203 @@
+/**
+ * Recall-usefulness event capture + metric (ADR-010, v1: measure only — the
+ * events captured here do NOT feed ranking yet, that's v1.x).
+ *
+ * Rides the existing memory_events log ('usefulness' event_type, already
+ * present in the migration 007 CHECK constraint) — no new migration. Three
+ * payload families, distinguished by payload.family:
+ *
+ *   - recall_served    — one event per atom returned from a search/recall
+ *                         surface (REST /search, /recall, /recall/pack; MCP
+ *                         search_memory/recall_memory).
+ *   - recall_used       — explicit or heuristic signal that a served atom
+ *                         mattered. v1 ships the explicit channel only
+ *                         (mark_memory_used MCP tool / POST /memory/:id/used).
+ *   - memory_corrected  — negative signal: the atom was invalidated,
+ *                         superseded, demoted, or edited. Appended directly
+ *                         inside MemoryEventRepo.invalidate/supersede's own
+ *                         transaction (src/storage/memory-events.ts) — this
+ *                         module documents the payload shape those call
+ *                         sites use, but does not append on their behalf, to
+ *                         avoid a circular import between the two modules.
+ *
+ * Privacy: the raw query text is NEVER stored — only a truncated sha256 hex
+ * digest (hashQuery). Usefulness events inherit the atom's scope (ADR-009)
+ * like every other memory_events row.
+ */
+import { createHash } from 'node:crypto';
+import { MemoryEventRepo } from './memory-events.js';
+/** sha256 hex digest of the raw query, truncated to 16 chars — never store the query text itself. */
+export function hashQuery(query) {
+    return createHash('sha256').update(query).digest('hex').slice(0, 16);
+}
+/**
+ * Append one 'usefulness'/'recall_served' event per served atom, in a single
+ * transaction. Cheap by design: one prepared-statement loop, no per-atom
+ * round trip beyond the INSERT itself. No-ops on an empty atomIds list.
+ */
+export function recordRecallServed(db, input) {
+    if (input.atomIds.length === 0)
+        return;
+    const queryHash = input.queryHash ?? (input.query !== undefined ? hashQuery(input.query) : undefined);
+    if (!queryHash)
+        throw new Error('recordRecallServed requires queryHash or query');
+    const events = new MemoryEventRepo(db);
+    const tx = db.transaction(() => {
+        input.atomIds.forEach((atomId, i) => {
+            events.append({
+                event_type: 'usefulness',
+                atom_id: atomId,
+                payload: {
+                    family: 'recall_served',
+                    query_hash: queryHash,
+                    score: input.scores?.[i] ?? null,
+                    surface: input.surface,
+                    mode: input.mode ?? null,
+                },
+            });
+        });
+    });
+    tx();
+}
+/** Append one 'usefulness'/'recall_used' event — the atom mattered. */
+export function recordRecallUsed(db, input) {
+    new MemoryEventRepo(db).append({
+        event_type: 'usefulness',
+        atom_id: input.atomId,
+        payload: { family: 'recall_used', surface: input.surface, signal: input.signal },
+    });
+}
+/**
+ * Append one 'usefulness'/'memory_corrected' event — a negative signal.
+ * Exposed for direct callers (e.g. future demote/edit flows); the
+ * invalidate/supersede lifecycle ops append this shape inline instead of
+ * calling this function, to keep memory-events.ts free of a dependency on
+ * this module (see file header).
+ */
+export function recordMemoryCorrected(db, input) {
+    new MemoryEventRepo(db).append({
+        event_type: 'usefulness',
+        atom_id: input.atomId,
+        payload: { family: 'memory_corrected', action: input.action },
+    });
+}
+/**
+ * Per-atom usefulness score for ranking (ADR-010 v1.x). Laplace-smoothed:
+ * (used + 1) / (used + corrected + 2) — an atom with no signal scores a
+ * neutral 0.5, one explicit recall_used lifts it to 0.67, one correction
+ * drops it to 0.33. Every requested id gets an entry so callers never have
+ * to special-case missing atoms.
+ */
+export function usefulnessScores(db, atomIds) {
+    const scores = new Map(atomIds.map(id => [id, 0.5]));
+    if (atomIds.length === 0)
+        return scores;
+    const ph = atomIds.map(() => '?').join(',');
+    const rows = db.prepare(`
+    SELECT atom_id,
+      SUM(CASE WHEN json_extract(payload_json, '$.family') = 'recall_used' THEN 1 ELSE 0 END) AS used,
+      SUM(CASE WHEN json_extract(payload_json, '$.family') = 'memory_corrected' THEN 1 ELSE 0 END) AS corrected
+    FROM memory_events
+    WHERE event_type = 'usefulness' AND atom_id IN (${ph})
+    GROUP BY atom_id
+  `).all(...atomIds);
+    for (const r of rows) {
+        scores.set(r.atom_id, (r.used + 1) / (r.used + r.corrected + 2));
+    }
+    return scores;
+}
+function surfaceFilter(opts, column) {
+    if (!opts.surface)
+        return { clause: '', params: [] };
+    return { clause: `AND json_extract(${column}, '$.surface') = ?`, params: [opts.surface] };
+}
+/**
+ * recall-usefulness rate = distinct atoms used / distinct atoms served, in
+ * the given window (ADR-010's seed metric). Distinct-atom counting avoids
+ * double-counting an atom served or used more than once in the window.
+ */
+export function usefulnessRate(db, opts = {}) {
+    const since = opts.sinceMs ?? 0;
+    const { clause, params } = surfaceFilter(opts, 'payload_json');
+    const served = db.prepare(`
+    SELECT COUNT(DISTINCT atom_id) AS n
+    FROM memory_events
+    WHERE event_type = 'usefulness'
+      AND json_extract(payload_json, '$.family') = 'recall_served'
+      AND created_at >= ?
+      ${clause}
+  `).get(since, ...params).n;
+    const used = db.prepare(`
+    SELECT COUNT(DISTINCT atom_id) AS n
+    FROM memory_events
+    WHERE event_type = 'usefulness'
+      AND json_extract(payload_json, '$.family') = 'recall_used'
+      AND created_at >= ?
+      ${clause}
+  `).get(since, ...params).n;
+    return { served, used, rate: served > 0 ? used / served : null };
+}
+/**
+ * Per-atom usefulness rate over a trailing window, for archival eligibility
+ * (FEAT-404 AC-2/AC-3 — "rate_7d"). Deliberately distinct from
+ * usefulnessRate() above: that DB-wide health-dashboard metric returns
+ * `rate: null` when served === 0 to avoid a misleading 0% on the /health
+ * surface. Archival eligibility instead needs one comparable number per
+ * atom, and "zero recall_served events in the window" is itself evidence
+ * the atom isn't earning its keep — so it maps to rate 0 here, not null,
+ * making an unsignaled atom exactly as archival-eligible as one with 0%
+ * explicit usage. Every requested id gets an entry (default 0) so callers
+ * never special-case a missing atom.
+ */
+export function perAtomUsefulnessRate7d(db, atomIds, sinceMs) {
+    const rates = new Map(atomIds.map(id => [id, 0]));
+    if (atomIds.length === 0)
+        return rates;
+    const ph = atomIds.map(() => '?').join(',');
+    const rows = db.prepare(`
+    SELECT atom_id,
+      SUM(CASE WHEN json_extract(payload_json, '$.family') = 'recall_served' THEN 1 ELSE 0 END) AS served,
+      SUM(CASE WHEN json_extract(payload_json, '$.family') = 'recall_used' THEN 1 ELSE 0 END) AS used
+    FROM memory_events
+    WHERE event_type = 'usefulness' AND atom_id IN (${ph}) AND created_at >= ?
+    GROUP BY atom_id
+  `).all(...atomIds, sinceMs);
+    for (const r of rows) {
+        rates.set(r.atom_id, r.served > 0 ? r.used / r.served : 0);
+    }
+    return rates;
+}
+/** Same metric, grouped by the served/used atom's current memories.type. */
+export function usefulnessByType(db, opts = {}) {
+    const since = opts.sinceMs ?? 0;
+    const { clause, params } = surfaceFilter(opts, 'e.payload_json');
+    const servedRows = db.prepare(`
+    SELECT m.type AS type, COUNT(DISTINCT e.atom_id) AS n
+    FROM memory_events e
+    JOIN memories m ON m.id = e.atom_id
+    WHERE e.event_type = 'usefulness'
+      AND json_extract(e.payload_json, '$.family') = 'recall_served'
+      AND e.created_at >= ?
+      ${clause}
+    GROUP BY m.type
+  `).all(since, ...params);
+    const usedRows = db.prepare(`
+    SELECT m.type AS type, COUNT(DISTINCT e.atom_id) AS n
+    FROM memory_events e
+    JOIN memories m ON m.id = e.atom_id
+    WHERE e.event_type = 'usefulness'
+      AND json_extract(e.payload_json, '$.family') = 'recall_used'
+      AND e.created_at >= ?
+      ${clause}
+    GROUP BY m.type
+  `).all(since, ...params);
+    const servedMap = new Map(servedRows.map(r => [r.type, r.n]));
+    const usedMap = new Map(usedRows.map(r => [r.type, r.n]));
+    const types = Array.from(new Set([...servedMap.keys(), ...usedMap.keys()])).sort();
+    return types.map(type => {
+        const served = servedMap.get(type) ?? 0;
+        const used = usedMap.get(type) ?? 0;
+        return { type, served, used, rate: served > 0 ? used / served : null };
+    });
+}
+//# sourceMappingURL=usefulness.js.map

package/dist/storage/usefulness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usefulness.js","sourceRoot":"","sources":["../../src/storage/usefulness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAMrD,qGAAqG;AACrG,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAeD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAM,EAAE,KAA8B;IACvE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACvC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtG,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAElF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC7B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YAClC,MAAM,CAAC,MAAM,CAAC;gBACZ,UAAU,EAAE,YAAY;gBACxB,OAAO,EAAE,MAAM;gBACf,OAAO,EAAE;oBACP,MAAM,EAAE,eAAe;oBACvB,UAAU,EAAE,SAAS;oBACrB,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI;oBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;iBACzB;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,EAAE,CAAC;AACP,CAAC;AAQD,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,EAAM,EAAE,KAA4B;IACnE,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QAC7B,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;KACjF,CAAC,CAAC;AACL,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAM,EAAE,KAAiC;IAC7E,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QAC7B,UAAU,EAAE,YAAY;QACxB,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;KAC9D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAM,EAAE,OAAiB;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAiB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;sDAK4B,EAAE;;GAErD,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAgE,CAAC;IAElF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAeD,SAAS,aAAa,CAAC,IAAwB,EAAE,MAAc;IAC7D,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrD,OAAO,EAAE,MAAM,EAAE,oBAAoB,MAAM,oBAAoB,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,EAAM,EAAE,OAA2B,EAAE;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAI,EAAE,CAAC,OAAO,CAAC;;;;;;QAMrB,MAAM;GACX,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,MAAM,CAAmB,CAAC,CAAC,CAAC;IAE7C,MAAM,IAAI,GAAI,EAAE,CAAC,OAAO,CAAC;;;;;;QAMnB,MAAM;GACX,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,MAAM,CAAmB,CAAC,CAAC,CAAC;IAE7C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAM,EAAE,OAAiB,EAAE,OAAe;IAChF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAiB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;sDAK4B,EAAE;;GAErD,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,EAAE,OAAO,CAA6D,CAAC;IAExF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,EAAM,EAAE,OAA2B,EAAE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAEjE,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;QAOxB,MAAM;;GAEX,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,MAAM,CAAuC,CAAC;IAE/D,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;QAOtB,MAAM;;GAEX,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,MAAM,CAAuC,CAAC;IAE/D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEnF,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACtB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC"}