@bluefields/db 0.2.0

package/dist/schema/audit-log.d.ts

@@ -0,0 +1,228 @@
+/**
+ * Audit log (Review #11): unified record of security-relevant +
+ * customer-facing actions. Consolidates what was previously scattered across
+ * last_response_body_excerpt (Review #7), event_feedback (Review #5),
+ * prompt-injection alerts (Review #10), and routine API request logs.
+ *
+ * Retention varies by category (set via partition pruning rules):
+ *   - 'request' / 'tool_call'           : 90 days
+ *   - 'auth' / 'security' / 'admin'     : 7 years (compliance)
+ *   - 'attestation'                     : indefinite (provenance chain)
+ *
+ * Customers access their own audit log via `GET /audit-log` with the
+ * standard customer_id filter; security/admin entries are internal-only.
+ */
+export declare const auditLog: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "audit_log";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "audit_log";
+            dataType: "number";
+            columnType: "PgBigSerial53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        customerId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "customer_id";
+            tableName: "audit_log";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        actorType: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_type";
+            tableName: "audit_log";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        actorId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_id";
+            tableName: "audit_log";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        category: import("drizzle-orm/pg-core").PgColumn<{
+            name: "category";
+            tableName: "audit_log";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        action: import("drizzle-orm/pg-core").PgColumn<{
+            name: "action";
+            tableName: "audit_log";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        resourceType: import("drizzle-orm/pg-core").PgColumn<{
+            name: "resource_type";
+            tableName: "audit_log";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        resourceId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "resource_id";
+            tableName: "audit_log";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        metadata: import("drizzle-orm/pg-core").PgColumn<{
+            name: "metadata";
+            tableName: "audit_log";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: unknown;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        ipAddress: import("drizzle-orm/pg-core").PgColumn<{
+            name: "ip_address";
+            tableName: "audit_log";
+            dataType: "string";
+            columnType: "PgInet";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        userAgent: import("drizzle-orm/pg-core").PgColumn<{
+            name: "user_agent";
+            tableName: "audit_log";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        recordedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "recorded_at";
+            tableName: "audit_log";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+export type AuditLog = typeof auditLog.$inferSelect;
+export type NewAuditLog = typeof auditLog.$inferInsert;
+export declare const AUDIT_LOG_PARTITION_COLUMN = "recorded_at";

package/dist/schema/audit-log.js

@@ -0,0 +1,49 @@
+// SPDX-License-Identifier: Apache-2.0
+import { sql } from 'drizzle-orm';
+import { bigserial, index, inet, jsonb, pgTable, primaryKey, text, timestamp, uuid, } from 'drizzle-orm/pg-core';
+import { customers } from './customers.js';
+/**
+ * Audit log (Review #11): unified record of security-relevant +
+ * customer-facing actions. Consolidates what was previously scattered across
+ * last_response_body_excerpt (Review #7), event_feedback (Review #5),
+ * prompt-injection alerts (Review #10), and routine API request logs.
+ *
+ * Retention varies by category (set via partition pruning rules):
+ *   - 'request' / 'tool_call'           : 90 days
+ *   - 'auth' / 'security' / 'admin'     : 7 years (compliance)
+ *   - 'attestation'                     : indefinite (provenance chain)
+ *
+ * Customers access their own audit log via `GET /audit-log` with the
+ * standard customer_id filter; security/admin entries are internal-only.
+ */
+export const auditLog = pgTable('audit_log', {
+    id: bigserial('id', { mode: 'number' }).notNull(),
+    // nullable for system-level entries
+    customerId: uuid('customer_id').references(() => customers.id),
+    // 'customer' | 'system' | 'admin' | 'agent_oauth'
+    actorType: text('actor_type').notNull(),
+    // api_key_id, admin email, OAuth client_id, etc.
+    actorId: text('actor_id'),
+    // 'request' | 'tool_call' | 'auth' | 'security' | 'admin' | 'attestation'
+    category: text('category').notNull(),
+    // 'subscription.created' | 'webhook.rotated' | 'oauth.granted' | 'prompt_injection_detected' | ...
+    action: text('action').notNull(),
+    // 'subscription' | 'snapshot' | 'customer' | 'webhook' | ...
+    resourceType: text('resource_type'),
+    // the affected resource's ID
+    resourceId: text('resource_id'),
+    // action-specific details; PII-scrubbed before write
+    metadata: jsonb('metadata'),
+    ipAddress: inet('ip_address'),
+    userAgent: text('user_agent'),
+    recordedAt: timestamp('recorded_at', { withTimezone: true }).notNull().defaultNow(),
+}, (table) => [
+    primaryKey({ columns: [table.id, table.recordedAt] }),
+    index('idx_audit_customer').on(table.customerId, table.recordedAt.desc()),
+    index('idx_audit_security')
+        .on(table.category, table.recordedAt.desc())
+        .where(sql `${table.category} IN ('security', 'auth')`),
+    index('idx_audit_actor').on(table.actorType, table.actorId, table.recordedAt.desc()),
+]);
+export const AUDIT_LOG_PARTITION_COLUMN = 'recorded_at';
+//# sourceMappingURL=audit-log.js.map

package/dist/schema/audit-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../src/schema/audit-log.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,SAAS,EACT,KAAK,EACL,IAAI,EACJ,KAAK,EACL,OAAO,EACP,UAAU,EACV,IAAI,EACJ,SAAS,EACT,IAAI,GACL,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAC7B,WAAW,EACX;IACE,EAAE,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACjD,oCAAoC;IACpC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IAC9D,kDAAkD;IAClD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,iDAAiD;IACjD,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,mGAAmG;IACnG,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,6DAA6D;IAC7D,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;IACnC,6BAA6B;IAC7B,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,qDAAqD;IACrD,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC;IAC3B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CACpF,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;IACrD,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACzE,KAAK,CAAC,oBAAoB,CAAC;SACxB,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;SAC3C,KAAK,CAAC,GAAG,CAAA,GAAG,KAAK,CAAC,QAAQ,0BAA0B,CAAC;IACxD,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;CACrF,CACF,CAAC;AAKF,MAAM,CAAC,MAAM,0BAA0B,GAAG,aAAa,CAAC"}

package/dist/schema/cost-records.d.ts

@@ -0,0 +1,190 @@
+/**
+ * Cost tracking — instrumented from day one, partitioned by month on
+ * recorded_at. The cost_type enum was expanded in Review #11 to ~16
+ * categories covering all cost sources surfaced by Reviews #4-10.
+ *
+ * cost_type values (Review #11):
+ *   Fetcher (Review #4):
+ *     'fetch_tier0'        — HTTP-only with TLS impersonation (cheapest)
+ *     'fetch_tier1'        — Patchright Chromium
+ *     'fetch_tier2'        — Camoufox Firefox
+ *     'fetch_tier3'        — external anti-bot service (Bright Data / ZenRows / Scrapfly)
+ *     'fetch_304'          — conditional GET 304 Not Modified (Review #9; near-zero cost)
+ *     'proxy_bandwidth'    — proxy provider bandwidth charge (separate from fetch compute)
+ *   LLM (Reviews #5, #6):
+ *     'llm_extract_haiku'  — extraction via Haiku 4.5 (simple-schema path)
+ *     'llm_extract_sonnet' — extraction via Sonnet 4.6 (complex-schema path)
+ *     'llm_judge'          — diff engine LLM judgment (Review #5)
+ *   Attestation (Review #3):
+ *     'kms_sign'           — AWS KMS Ed25519 signing operation
+ *   Delivery (Review #7):
+ *     'webhook_deliver'    — outbound HTTP POST attempt (per attempt, including retries)
+ *   Infrastructure:
+ *     'inngest_step'       — Inngest step execution (Review #1)
+ *     'compute'            — VPS / worker compute amortized
+ *     'storage'            — R2 storage + DB storage
+ *     'stripe_fee'         — Stripe payment processing
+ */
+export declare const costRecords: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "cost_records";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "cost_records";
+            dataType: "number";
+            columnType: "PgBigSerial53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        customerId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "customer_id";
+            tableName: "cost_records";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        subscriptionId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "subscription_id";
+            tableName: "cost_records";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        urlCanonical: import("drizzle-orm/pg-core").PgColumn<{
+            name: "url_canonical";
+            tableName: "cost_records";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        costType: import("drizzle-orm/pg-core").PgColumn<{
+            name: "cost_type";
+            tableName: "cost_records";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        costMicroUsd: import("drizzle-orm/pg-core").PgColumn<{
+            name: "cost_micro_usd";
+            tableName: "cost_records";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        units: import("drizzle-orm/pg-core").PgColumn<{
+            name: "units";
+            tableName: "cost_records";
+            dataType: "string";
+            columnType: "PgNumeric";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        costSubtype: import("drizzle-orm/pg-core").PgColumn<{
+            name: "cost_subtype";
+            tableName: "cost_records";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        recordedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "recorded_at";
+            tableName: "cost_records";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+export type CostRecord = typeof costRecords.$inferSelect;
+export type NewCostRecord = typeof costRecords.$inferInsert;
+export declare const COST_RECORDS_PARTITION_COLUMN = "recorded_at";

package/dist/schema/cost-records.js

@@ -0,0 +1,55 @@
+// SPDX-License-Identifier: Apache-2.0
+import { bigserial, index, integer, numeric, pgTable, primaryKey, text, timestamp, uuid, } from 'drizzle-orm/pg-core';
+import { customers } from './customers.js';
+import { subscriptions } from './subscriptions.js';
+/**
+ * Cost tracking — instrumented from day one, partitioned by month on
+ * recorded_at. The cost_type enum was expanded in Review #11 to ~16
+ * categories covering all cost sources surfaced by Reviews #4-10.
+ *
+ * cost_type values (Review #11):
+ *   Fetcher (Review #4):
+ *     'fetch_tier0'        — HTTP-only with TLS impersonation (cheapest)
+ *     'fetch_tier1'        — Patchright Chromium
+ *     'fetch_tier2'        — Camoufox Firefox
+ *     'fetch_tier3'        — external anti-bot service (Bright Data / ZenRows / Scrapfly)
+ *     'fetch_304'          — conditional GET 304 Not Modified (Review #9; near-zero cost)
+ *     'proxy_bandwidth'    — proxy provider bandwidth charge (separate from fetch compute)
+ *   LLM (Reviews #5, #6):
+ *     'llm_extract_haiku'  — extraction via Haiku 4.5 (simple-schema path)
+ *     'llm_extract_sonnet' — extraction via Sonnet 4.6 (complex-schema path)
+ *     'llm_judge'          — diff engine LLM judgment (Review #5)
+ *   Attestation (Review #3):
+ *     'kms_sign'           — AWS KMS Ed25519 signing operation
+ *   Delivery (Review #7):
+ *     'webhook_deliver'    — outbound HTTP POST attempt (per attempt, including retries)
+ *   Infrastructure:
+ *     'inngest_step'       — Inngest step execution (Review #1)
+ *     'compute'            — VPS / worker compute amortized
+ *     'storage'            — R2 storage + DB storage
+ *     'stripe_fee'         — Stripe payment processing
+ */
+export const costRecords = pgTable('cost_records', {
+    id: bigserial('id', { mode: 'number' }).notNull(),
+    customerId: uuid('customer_id')
+        .notNull()
+        .references(() => customers.id),
+    subscriptionId: uuid('subscription_id').references(() => subscriptions.id),
+    urlCanonical: text('url_canonical'),
+    costType: text('cost_type').notNull(),
+    costMicroUsd: integer('cost_micro_usd').notNull(),
+    // bytes, tokens, requests, depending on type
+    units: numeric('units'),
+    // optional refinement: model name, proxy provider, fetcher tier sub-detail (Review #11)
+    costSubtype: text('cost_subtype'),
+    recordedAt: timestamp('recorded_at', { withTimezone: true }).notNull().defaultNow(),
+}, (table) => [
+    // Partition key must be in PK (Postgres requirement for partitioned tables).
+    primaryKey({ columns: [table.id, table.recordedAt] }),
+    index('idx_cost_customer_time').on(table.customerId, table.recordedAt),
+    index('idx_cost_url').on(table.urlCanonical, table.recordedAt),
+    // Hot-path index for per-cost-type analytics (Review #11)
+    index('idx_cost_type_time').on(table.costType, table.recordedAt),
+]);
+export const COST_RECORDS_PARTITION_COLUMN = 'recorded_at';
+//# sourceMappingURL=cost-records.js.map

package/dist/schema/cost-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-records.js","sourceRoot":"","sources":["../../src/schema/cost-records.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EACL,SAAS,EACT,KAAK,EACL,OAAO,EACP,OAAO,EACP,OAAO,EACP,UAAU,EACV,IAAI,EACJ,SAAS,EACT,IAAI,GACL,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAChC,cAAc,EACd;IACE,EAAE,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACjD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;SAC5B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IACjC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;IAC1E,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;IACnC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IACjD,6CAA6C;IAC7C,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC;IACvB,wFAAwF;IACxF,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CACpF,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,6EAA6E;IAC7E,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;IACrD,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;IACtE,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;IAC9D,0DAA0D;IAC1D,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC;CACjE,CACF,CAAC;AAKF,MAAM,CAAC,MAAM,6BAA6B,GAAG,aAAa,CAAC"}