@crowdsource.you/core 1.2.0

package/dist/outbox/outbox/service.js

@@ -0,0 +1,279 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ModerationOutboxTransactionError = void 0;
+exports.reportSubmitEventId = reportSubmitEventId;
+exports.decisionApplyEventId = decisionApplyEventId;
+exports.isRetryableDeliveryError = isRetryableDeliveryError;
+exports.createOutboxService = createOutboxService;
+const crypto_1 = require("crypto");
+const retention_js_1 = require("../retention.js");
+/**
+ * Claiming, completing and failing moderation outbox events.
+ *
+ * The contract is at-least-once: handlers MUST make every downstream effect
+ * idempotent using the event `id`, because an expired lease is reclaimable and
+ * a worker can die mid-delivery.
+ *
+ * What differs from an ordinary work queue is where retrying stops. A delivery
+ * failure the SDK marks as not retryable is a defect in the payload, not a blip
+ * — see {@link OutboxService.fail}.
+ *
+ * Every decision in this file is a POLICY decision — the retry ceiling, the
+ * backoff curve, the lease-length floor, what counts as retryable, how long a
+ * row is kept. The queries that carry them out belong to a
+ * {@link ModerationOutboxStore}, outside the PostgreSQL query implementation.
+ */
+const DEFAULT_LEASE_MS = 60000;
+const DEFAULT_BATCH_SIZE = 50;
+const MAX_BATCH_SIZE = 500;
+const MAX_BACKOFF_MS = 6 * 60 * 60 * 1000;
+const MIN_LEASE_RENEW_INTERVAL_MS = 250;
+/**
+ * Attempts after which a retryable failure is treated as permanent.
+ *
+ * Generous: a retryable failure means CrowdSource might still accept this exact
+ * payload, and with `MAX_BACKOFF_MS` capped at six hours this is several days of
+ * trying. A report that has not landed by then needs a human, not another
+ * attempt.
+ */
+const MAX_RETRYABLE_ATTEMPTS = 25;
+/**
+ * The event id for delivering a report.
+ *
+ * Derived from the report, not from the request: a transaction retry or two
+ * concurrent duplicate submissions upsert the SAME event rather than queueing
+ * two deliveries. There is exactly one delivery event per report for the life of
+ * the report, which is also what makes the CrowdSource-side idempotency key
+ * stable.
+ */
+function reportSubmitEventId(reportId) {
+    return `moderation:report.submit:${reportId}`;
+}
+/**
+ * The event id for applying an inbound decision.
+ *
+ * The webhook event id is the key, so a redelivery of the same event can never
+ * queue the work twice even if the dedupe claim were somehow released.
+ */
+function decisionApplyEventId(eventId) {
+    return `moderation:decision.apply:${eventId}`;
+}
+/**
+ * Raised when an outbox event is written outside a transaction.
+ *
+ * Never expected at runtime. It exists so the invariant is ENFORCED rather than
+ * reviewed. It is thrown by the STORE — only a backend knows what an open
+ * transaction looks like — and it lives here so that every backend throws the
+ * same error for the same mistake. See {@link ModerationOutboxStore.enqueue}.
+ */
+class ModerationOutboxTransactionError extends Error {
+    constructor(eventId) {
+        super(`Refusing to enqueue moderation outbox event '${eventId}' outside a transaction: ` +
+            'the domain write and this row must commit together, or a report is answered 201 ' +
+            'and never delivered.');
+        this.name = 'ModerationOutboxTransactionError';
+    }
+}
+exports.ModerationOutboxTransactionError = ModerationOutboxTransactionError;
+/**
+ * A failure that says whether trying the same payload again could ever work.
+ *
+ * Every error `@crowdsource.you/core` throws carries `retryable`, which is the only
+ * thing a delivery worker needs from it. Anything else — a bug in this code, a
+ * Mongo error — is treated as retryable, because assuming a defect is permanent
+ * is how a recoverable outage becomes lost moderation work.
+ */
+function isRetryableDeliveryError(error) {
+    if (typeof error === 'object' && error !== null && 'retryable' in error) {
+        const retryable = error.retryable;
+        if (typeof retryable === 'boolean')
+            return retryable;
+    }
+    return true;
+}
+function nextAttemptAt(attempts, now) {
+    const exponent = Math.max(0, Math.min(attempts - 1, 20));
+    return new Date(now.getTime() + Math.min(1000 * 2 ** exponent, MAX_BACKOFF_MS));
+}
+function createOutboxService(input) {
+    const { store, logger } = input;
+    const renew = async (eventId, leaseOwner, leaseMs, now = new Date()) => await store.renew({
+        eventId,
+        leaseOwner,
+        // The floor is policy, not storage: a lease shorter than a second is
+        // reclaimable before the delivery it protects has begun.
+        leaseUntil: new Date(now.getTime() + Math.max(1000, leaseMs)),
+        now,
+    });
+    function startLeaseHeartbeat(options) {
+        const renewIntervalMs = Math.max(MIN_LEASE_RENEW_INTERVAL_MS, Math.floor(options.leaseMs / 3));
+        let stopped = false;
+        let lost = false;
+        let renewalError;
+        let renewalInFlight = null;
+        const tick = () => {
+            if (stopped || lost || renewalInFlight)
+                return;
+            const renewal = renew(options.eventId, options.leaseOwner, options.leaseMs)
+                .then((stillOwner) => {
+                if (!stillOwner)
+                    lost = true;
+            })
+                .catch((error) => {
+                lost = true;
+                renewalError = error;
+            })
+                .finally(() => {
+                if (renewalInFlight === renewal)
+                    renewalInFlight = null;
+            });
+            renewalInFlight = renewal;
+        };
+        const timer = setInterval(tick, renewIntervalMs);
+        timer.unref?.();
+        return {
+            async stop() {
+                stopped = true;
+                clearInterval(timer);
+                await renewalInFlight;
+                return { lost, error: renewalError };
+            },
+        };
+    }
+    const claim = async (options) => {
+        const now = options.now ?? new Date();
+        const leaseMs = Math.max(1000, options.leaseMs ?? DEFAULT_LEASE_MS);
+        return await store.claim({
+            leaseOwner: options.leaseOwner,
+            leaseUntil: new Date(now.getTime() + leaseMs),
+            now,
+            ...(options.eventId === undefined ? {} : { eventId: options.eventId }),
+        });
+    };
+    const complete = async (eventId, leaseOwner, now = new Date()) => await store.complete({ eventId, leaseOwner, now });
+    const fail = async (event, leaseOwner, error, now = new Date()) => {
+        const message = error instanceof Error ? error.message : String(error);
+        const retryable = isRetryableDeliveryError(error);
+        const deadLettered = !retryable || event.attempts >= MAX_RETRYABLE_ATTEMPTS;
+        const released = await store.fail({
+            eventId: event.id,
+            leaseOwner,
+            status: deadLettered ? 'dead_letter' : 'pending',
+            availableAt: deadLettered ? now : nextAttemptAt(event.attempts, now),
+            // Bounded here rather than by a column width, so both dialects agree: a
+            // Mongoose validator throws on overflow and Postgres errors 22001, and
+            // neither is what a failed delivery should turn into.
+            lastError: message.slice(0, 2000),
+            now,
+        });
+        return { released, deadLettered };
+    };
+    return {
+        async enqueue(enqueueInput, tx) {
+            const now = new Date();
+            await store.enqueue({
+                eventId: enqueueInput.eventId,
+                kind: enqueueInput.kind,
+                payload: enqueueInput.payload,
+                availableAt: now,
+                expiresAt: new Date(now.getTime() + retention_js_1.MODERATION_OUTBOX_RETENTION_SECONDS * 1000),
+                now,
+            }, tx);
+            return enqueueInput.eventId;
+        },
+        claim,
+        complete,
+        renew,
+        fail,
+        async statusOf(eventId) {
+            return await store.statusOf(eventId);
+        },
+        async dispatch(options) {
+            const leaseOwner = options.leaseOwner ?? `moderation:${process.pid}:${(0, crypto_1.randomUUID)()}`;
+            const batchSize = Math.min(Math.max(1, options.batchSize ?? DEFAULT_BATCH_SIZE), MAX_BATCH_SIZE);
+            const leaseMs = Math.max(1000, options.leaseMs ?? DEFAULT_LEASE_MS);
+            let processed = 0;
+            let failed = 0;
+            let deadLettered = 0;
+            for (let index = 0; index < batchSize; index += 1) {
+                // Shutdown stops claiming new work but lets the event already in flight
+                // reach a durable state.
+                if (options.signal?.aborted)
+                    break;
+                const event = await claim({ leaseOwner, leaseMs });
+                if (!event)
+                    break;
+                const heartbeat = startLeaseHeartbeat({
+                    eventId: event.id,
+                    leaseOwner,
+                    leaseMs,
+                });
+                let deliveryError;
+                try {
+                    await options.handler(event);
+                }
+                catch (error) {
+                    deliveryError = error;
+                }
+                // No completion/failure transition may race an owner-checked renewal.
+                const heartbeatResult = await heartbeat.stop();
+                if (heartbeatResult.lost) {
+                    failed += 1;
+                    logger.warn('[ModerationOutbox] event lease lost during delivery', {
+                        eventId: event.id,
+                        kind: event.kind,
+                        attempts: event.attempts,
+                        error: heartbeatResult.error instanceof Error
+                            ? heartbeatResult.error.message
+                            : heartbeatResult.error
+                                ? String(heartbeatResult.error)
+                                : 'owner or lease expiry changed',
+                    });
+                    continue;
+                }
+                if (deliveryError) {
+                    failed += 1;
+                    const outcome = await fail(event, leaseOwner, deliveryError);
+                    const context = {
+                        eventId: event.id,
+                        kind: event.kind,
+                        attempts: event.attempts,
+                        error: deliveryError instanceof Error
+                            ? deliveryError.message
+                            : String(deliveryError),
+                    };
+                    // A dead letter is moderation work that will not happen without a
+                    // human, so it must not be discoverable only by reading a warn-level
+                    // log line.
+                    if (outcome.deadLettered) {
+                        deadLettered += 1;
+                        logger.error('[ModerationOutbox] event dead-lettered', context);
+                    }
+                    else {
+                        logger.warn('[ModerationOutbox] event delivery failed, will retry', context);
+                    }
+                    if (!outcome.released) {
+                        logger.warn('[ModerationOutbox] lease lost before failure release', {
+                            eventId: event.id,
+                            kind: event.kind,
+                        });
+                    }
+                    continue;
+                }
+                const completed = await complete(event.id, leaseOwner);
+                if (!completed) {
+                    failed += 1;
+                    logger.warn('[ModerationOutbox] lease lost before completion', {
+                        eventId: event.id,
+                        kind: event.kind,
+                        attempts: event.attempts,
+                    });
+                    continue;
+                }
+                processed += 1;
+            }
+            return { processed, failed, deadLettered };
+        },
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/outbox/outbox/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/outbox/outbox/service.ts"],"names":[],"mappings":";;;AAsDA,kDAEC;AAQD,oDAEC;AA6BD,4DAMC;AAkHD,kDAoOC;AA3bD,mCAAoC;AACpC,kDAAsE;AAWtE;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,gBAAgB,GAAG,KAAM,CAAC;AAChC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAK,CAAC;AAC3C,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC;;;;;;;;GAQG;AACH,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,OAAO,4BAA4B,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,OAAe;IAClD,OAAO,6BAA6B,OAAO,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;GAOG;AACH,MAAa,gCAAiC,SAAQ,KAAK;IACzD,YAAY,OAAe;QACzB,KAAK,CACH,gDAAgD,OAAO,2BAA2B;YAChF,kFAAkF;YAClF,sBAAsB,CACzB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AATD,4EASC;AAED;;;;;;;GAOG;AACH,SAAgB,wBAAwB,CAAC,KAAc;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;QACxE,MAAM,SAAS,GAAa,KAAgC,CAAC,SAAS,CAAC;QACvE,IAAI,OAAO,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAcD,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAS;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAK,GAAG,CAAC,IAAI,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;AACnF,CAAC;AAiGD,SAAgB,mBAAmB,CAAM,KAGxC;IACC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAEhC,MAAM,KAAK,GAAgC,KAAK,EAC9C,OAAO,EACP,UAAU,EACV,OAAO,EACP,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,EAAE,CACF,MAAM,KAAK,CAAC,KAAK,CAAC;QAChB,OAAO;QACP,UAAU;QACV,qEAAqE;QACrE,yDAAyD;QACzD,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAK,EAAE,OAAO,CAAC,CAAC;QAC9D,GAAG;KACJ,CAAC,CAAC;IAEL,SAAS,mBAAmB,CAAC,OAI5B;QACC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAC9B,2BAA2B,EAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAChC,CAAC;QACF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,YAAqB,CAAC;QAC1B,IAAI,eAAe,GAAyB,IAAI,CAAC;QAEjD,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,IAAI,OAAO,IAAI,IAAI,IAAI,eAAe;gBAAE,OAAO;YAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC;iBACxE,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;gBACnB,IAAI,CAAC,UAAU;oBAAE,IAAI,GAAG,IAAI,CAAC;YAC/B,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxB,IAAI,GAAG,IAAI,CAAC;gBACZ,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,IAAI,eAAe,KAAK,OAAO;oBAAE,eAAe,GAAG,IAAI,CAAC;YAC1D,CAAC,CAAC,CAAC;YACL,eAAe,GAAG,OAAO,CAAC;QAC5B,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACjD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEhB,OAAO;YACL,KAAK,CAAC,IAAI;gBACR,OAAO,GAAG,IAAI,CAAC;gBACf,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,MAAM,eAAe,CAAC;gBACtB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;YACvC,CAAC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAgC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAK,EAAE,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC;QACrE,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC;YACvB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC;YAC7C,GAAG;YACH,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SACvE,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAmC,KAAK,EACpD,OAAO,EACP,UAAU,EACV,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,EAAE,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAExD,MAAM,IAAI,GAA+B,KAAK,EAC5C,KAAK,EACL,UAAU,EACV,KAAK,EACL,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,EAAE;QACF,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,IAAI,sBAAsB,CAAC;QAE5E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;YAChC,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,UAAU;YACV,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;YAChD,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC;YACpE,wEAAwE;YACxE,uEAAuE;YACvE,sDAAsD;YACtD,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAK,CAAC;YAClC,GAAG;SACJ,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACpC,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE;YAC5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC,OAAO,CACjB;gBACE,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,WAAW,EAAE,GAAG;gBAChB,SAAS,EAAE,IAAI,IAAI,CACjB,GAAG,CAAC,OAAO,EAAE,GAAG,kDAAmC,GAAG,IAAK,CAC5D;gBACD,GAAG;aACJ,EACD,EAAE,CACH,CAAC;YACF,OAAO,YAAY,CAAC,OAAO,CAAC;QAC9B,CAAC;QAED,KAAK;QACL,QAAQ;QACR,KAAK;QACL,IAAI;QAEJ,KAAK,CAAC,QAAQ,CAAC,OAAO;YACpB,OAAO,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,OAAO;YACpB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,OAAO,CAAC,GAAG,IAAI,IAAA,mBAAU,GAAE,EAAE,CAAC;YACrF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,EACpD,cAAc,CACf,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAK,EAAE,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC;YACrE,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,IAAI,YAAY,GAAG,CAAC,CAAC;YAErB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBAClD,wEAAwE;gBACxE,yBAAyB;gBACzB,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;oBAAE,MAAM;gBAEnC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;gBACnD,IAAI,CAAC,KAAK;oBAAE,MAAM;gBAElB,MAAM,SAAS,GAAG,mBAAmB,CAAC;oBACpC,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,UAAU;oBACV,OAAO;iBACR,CAAC,CAAC;gBACH,IAAI,aAAsB,CAAC;gBAC3B,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,aAAa,GAAG,KAAK,CAAC;gBACxB,CAAC;gBAED,sEAAsE;gBACtE,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC/C,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC;oBACzB,MAAM,IAAI,CAAC,CAAC;oBACZ,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE;wBACjE,OAAO,EAAE,KAAK,CAAC,EAAE;wBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,KAAK,EACH,eAAe,CAAC,KAAK,YAAY,KAAK;4BACpC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO;4BAC/B,CAAC,CAAC,eAAe,CAAC,KAAK;gCACrB,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC;gCAC/B,CAAC,CAAC,+BAA+B;qBACxC,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,IAAI,CAAC,CAAC;oBACZ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;oBAC7D,MAAM,OAAO,GAAG;wBACd,OAAO,EAAE,KAAK,CAAC,EAAE;wBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,KAAK,EACH,aAAa,YAAY,KAAK;4BAC5B,CAAC,CAAC,aAAa,CAAC,OAAO;4BACvB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;qBAC5B,CAAC;oBACF,kEAAkE;oBAClE,qEAAqE;oBACrE,YAAY;oBACZ,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;wBACzB,YAAY,IAAI,CAAC,CAAC;wBAClB,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,OAAO,CAAC,CAAC;oBAClE,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE,OAAO,CAAC,CAAC;oBAC/E,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACtB,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;4BAClE,OAAO,EAAE,KAAK,CAAC,EAAE;4BACjB,IAAI,EAAE,KAAK,CAAC,IAAI;yBACjB,CAAC,CAAC;oBACL,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;gBACvD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,IAAI,CAAC,CAAC;oBACZ,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;wBAC7D,OAAO,EAAE,KAAK,CAAC,EAAE;wBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;qBACzB,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;YAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/outbox/postgres/index.d.ts

@@ -0,0 +1,44 @@
+/**
+ * `@crowdsource.you/core/outbox/postgres` — the PostgreSQL half.
+ *
+ * An adopting application chooses its storage by which subpath it imports, and
+ * gets the same moderation pipeline either way. Everything drizzle-shaped lives
+ * behind this entry: the three tables this package owns, the columns to spread
+ * into your own report table, the two registry fragments to merge into your own
+ * gates, and the store the integration is wired with.
+ *
+ * ```ts
+ * import { createModerationIntegration } from '@crowdsource.you/core/outbox';
+ * import {
+ *   moderationTables,
+ *   moderationReportColumns,
+ *   moderationReportTableExtras,
+ *   postgresModerationStore,
+ * } from '@crowdsource.you/core/outbox/postgres';
+ * ```
+ *
+ * `drizzle-orm`, `postgres` and `@oxy.so/db` are OPTIONAL peers, which is what this
+ * split buys: a deployment on Mongo never installs them, and a bundler never has
+ * to resolve them. Importing this subpath without them fails at the import, by
+ * name — which is the failure you want, rather than a driver quietly missing at
+ * the first write.
+ *
+ * **This package ships NO migrations.** It ships table DEFINITIONS; your own
+ * `drizzle-kit generate` produces the SQL, in your journal. Two journals against
+ * one `drizzle.__drizzle_migrations` table interleave, and the loser is skipped
+ * silently with exit 0 — so a migrations folder in a library is a way to lose your
+ * migration rather than a convenience.
+ *
+ * The MODERATION_*_RETENTION_SECONDS windows are NOT here. They are policy both
+ * backends share, so they stay on the root entry — and `moderationExpirySweepTargets`
+ * is what turns them into deletions, because Postgres has no TTL index.
+ */
+export { postgresModerationStore } from './store/index.js';
+export { postgresTransactionRunner } from './store/transaction.js';
+export type { ModerationPgHandle } from './store/transaction.js';
+export { moderationTables } from './tables.js';
+export type { ModerationTables } from './tables.js';
+export { moderationReportColumns, moderationReportTableExtras, } from './reportColumns.js';
+export type { ModerationReportBuiltColumns, ModerationReportColumnName, ModerationReportColumnOptions, ModerationReportColumns, ModerationReportTable, } from './reportColumns.js';
+export { moderationExpirySweepTargets, moderationIdColumnsWithoutForeignKey, } from './registries.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/outbox/postgres/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/outbox/postgres/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,YAAY,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EACL,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,4BAA4B,EAC5B,oCAAoC,GACrC,MAAM,iBAAiB,CAAC"}

package/dist/outbox/postgres/index.js

@@ -0,0 +1,51 @@
+"use strict";
+/**
+ * `@crowdsource.you/core/outbox/postgres` — the PostgreSQL half.
+ *
+ * An adopting application chooses its storage by which subpath it imports, and
+ * gets the same moderation pipeline either way. Everything drizzle-shaped lives
+ * behind this entry: the three tables this package owns, the columns to spread
+ * into your own report table, the two registry fragments to merge into your own
+ * gates, and the store the integration is wired with.
+ *
+ * ```ts
+ * import { createModerationIntegration } from '@crowdsource.you/core/outbox';
+ * import {
+ *   moderationTables,
+ *   moderationReportColumns,
+ *   moderationReportTableExtras,
+ *   postgresModerationStore,
+ * } from '@crowdsource.you/core/outbox/postgres';
+ * ```
+ *
+ * `drizzle-orm`, `postgres` and `@oxy.so/db` are OPTIONAL peers, which is what this
+ * split buys: a deployment on Mongo never installs them, and a bundler never has
+ * to resolve them. Importing this subpath without them fails at the import, by
+ * name — which is the failure you want, rather than a driver quietly missing at
+ * the first write.
+ *
+ * **This package ships NO migrations.** It ships table DEFINITIONS; your own
+ * `drizzle-kit generate` produces the SQL, in your journal. Two journals against
+ * one `drizzle.__drizzle_migrations` table interleave, and the loser is skipped
+ * silently with exit 0 — so a migrations folder in a library is a way to lose your
+ * migration rather than a convenience.
+ *
+ * The MODERATION_*_RETENTION_SECONDS windows are NOT here. They are policy both
+ * backends share, so they stay on the root entry — and `moderationExpirySweepTargets`
+ * is what turns them into deletions, because Postgres has no TTL index.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.moderationIdColumnsWithoutForeignKey = exports.moderationExpirySweepTargets = exports.moderationReportTableExtras = exports.moderationReportColumns = exports.moderationTables = exports.postgresTransactionRunner = exports.postgresModerationStore = void 0;
+var index_js_1 = require("./store/index.js");
+Object.defineProperty(exports, "postgresModerationStore", { enumerable: true, get: function () { return index_js_1.postgresModerationStore; } });
+var transaction_js_1 = require("./store/transaction.js");
+Object.defineProperty(exports, "postgresTransactionRunner", { enumerable: true, get: function () { return transaction_js_1.postgresTransactionRunner; } });
+var tables_js_1 = require("./tables.js");
+Object.defineProperty(exports, "moderationTables", { enumerable: true, get: function () { return tables_js_1.moderationTables; } });
+var reportColumns_js_1 = require("./reportColumns.js");
+Object.defineProperty(exports, "moderationReportColumns", { enumerable: true, get: function () { return reportColumns_js_1.moderationReportColumns; } });
+Object.defineProperty(exports, "moderationReportTableExtras", { enumerable: true, get: function () { return reportColumns_js_1.moderationReportTableExtras; } });
+var registries_js_1 = require("./registries.js");
+Object.defineProperty(exports, "moderationExpirySweepTargets", { enumerable: true, get: function () { return registries_js_1.moderationExpirySweepTargets; } });
+Object.defineProperty(exports, "moderationIdColumnsWithoutForeignKey", { enumerable: true, get: function () { return registries_js_1.moderationIdColumnsWithoutForeignKey; } });
+//# sourceMappingURL=index.js.map

package/dist/outbox/postgres/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/outbox/postgres/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAEH,6CAA2D;AAAlD,mHAAA,uBAAuB,OAAA;AAChC,yDAAmE;AAA1D,2HAAA,yBAAyB,OAAA;AAGlC,yCAA+C;AAAtC,6GAAA,gBAAgB,OAAA;AAGzB,uDAG4B;AAF1B,2HAAA,uBAAuB,OAAA;AACvB,+HAAA,2BAA2B,OAAA;AAU7B,iDAGyB;AAFvB,6HAAA,4BAA4B,OAAA;AAC5B,qIAAA,oCAAoC,OAAA"}

package/dist/outbox/postgres/registries.d.ts

@@ -0,0 +1,69 @@
+import type { ExpirySweepTarget } from '@oxy.so/db/expiry';
+import type { ModerationReportTable } from './reportColumns.js';
+import type { ModerationTables } from './tables.js';
+/**
+ * The two tables that carried a Mongo TTL index, as sweep targets.
+ *
+ * **A TTL index is a behaviour of the SOURCE that does not survive the port.**
+ * Mongo reaps; Postgres does not. Both tables here were declared
+ * `expireAfterSeconds: 0` on an `expiresAt` the WRITER computes, so
+ * `retentionSeconds` is 0: the column already IS the deadline, and the retention
+ * window lives in `src/retention.ts` where both backends read it.
+ *
+ * Without an entry, a table grows forever — no error, no failing test, no
+ * symptom of any kind until disk. Nothing about it is visible in a diff, because
+ * the thing doing the work was never in the consumer's code to be missed.
+ *
+ * ## What sweeping these two costs, stated because a registry entry with no such
+ * note reads as "unconditionally safe"
+ *
+ * The outbox holds unprocessed WORK. A stalled dispatcher plus this sweep
+ * discards moderation work that was never delivered — which is why the retention
+ * window is ninety days rather than hours, and why a `dead_letter` row is
+ * evidence somebody still has to look at rather than a row to reap quickly.
+ * Operational alerts must fire long before this deadline; the sweep is the
+ * backstop for a table nobody drained, not a queue policy.
+ *
+ * The event log holds the audit trail of what a third party told this deployment
+ * to do, and the dedupe claim. CrowdSource's retry schedule ends at 24 hours, so
+ * deleting a row after ninety days cannot resurrect a duplicate delivery; what it
+ * does cost is the answer to "did CrowdSource tell us about this case, and when",
+ * which is the first question asked when a report looks stuck.
+ *
+ * Neither read path depends on a swept row already being gone: the dispatcher
+ * claims by `available_at` and the receiver claims by primary key, so an
+ * unswept row is stale at worst and never unsafe.
+ */
+export declare function moderationExpirySweepTargets(tables: ModerationTables): readonly ExpirySweepTarget[];
+/**
+ * Every id-shaped column in this package's tables that will never carry a
+ * foreign key, with the reason.
+ *
+ * Eight entries, and the count is worth stating because the obvious count is
+ * six: `findIdColumnViolations` exempts a column only when `column.primary` is
+ * set, and a composite primary key declared in a table's extra config does NOT
+ * set it on its members — so `moderation_enforcements.decision_id` is scanned
+ * despite being part of the key.
+ *
+ * They fall into two kinds, and neither can be constrained:
+ *
+ * - **Ids in CrowdSource's database.** A decision, a case, a report as CrowdSource
+ *   knows it. There is no local table to point at; the row lives in another
+ *   service's store, and this deployment holds a copy of its identifier.
+ * - **The adopter's own opaque noun ids.** `subject_id` and `reported_id` name a
+ *   post, a listing, a message — whichever table the adopter's subject provider
+ *   resolves. The package cannot know which, and a single column cannot reference
+ *   several tables, which is precisely why they are stored as opaque text.
+ *
+ * The report table is passed in rather than assumed: the entries embed the
+ * adopter's own table name, and a ledger entry naming a table that is not in the
+ * gate's `tables` list is reported as `stale_ledger_entry`.
+ */
+export declare function moderationIdColumnsWithoutForeignKey(input: {
+    tables: ModerationTables;
+    reportTable: ModerationReportTable;
+}): readonly {
+    column: string;
+    reason: string;
+}[];
+//# sourceMappingURL=registries.d.ts.map

package/dist/outbox/postgres/registries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registries.d.ts","sourceRoot":"","sources":["../../../src/outbox/postgres/registries.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAK3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAsCpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,gBAAgB,GACvB,SAAS,iBAAiB,EAAE,CAqB9B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,qBAAqB,CAAC;CACpC,GAAG,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CA2ChD"}

package/dist/outbox/postgres/registries.js

@@ -0,0 +1,159 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.moderationExpirySweepTargets = moderationExpirySweepTargets;
+exports.moderationIdColumnsWithoutForeignKey = moderationIdColumnsWithoutForeignKey;
+const drizzle_orm_1 = require("drizzle-orm");
+const db_1 = require("@oxy.so/db");
+const retention_js_1 = require("../retention.js");
+/**
+ * The two registry FRAGMENTS an adopter merges into its own gates.
+ *
+ * `@oxy.so/db` holds the mechanisms — the expiry sweep, the id-column
+ * classification gate — and the REGISTRIES belong to the consumer, because they
+ * name the consumer's own tables. This package's three tables are in the
+ * adopter's database, so the entries for them are the adopter's to declare and
+ * this package's to KNOW: it is the only place that can say why
+ * `crowdsource_case_id` will never carry a foreign key.
+ *
+ * So each of these returns a fragment to spread, never a whole registry:
+ *
+ * ```ts
+ * const targets = [...myOwnTargets, ...moderationExpirySweepTargets(moderation)];
+ * const violations = findIdColumnViolations({
+ *   tables: [...myTables, moderation.outbox, moderation.events, moderation.enforcements],
+ *   deferred: myDeferred,
+ *   withoutForeignKey: [
+ *     ...myOwnUnclassified,
+ *     ...moderationIdColumnsWithoutForeignKey({ tables: moderation, reportTable: reports }),
+ *   ],
+ *   minimumTables: …,
+ * });
+ * ```
+ *
+ * Shipping them is what stops the first adopter writing these reasons by
+ * guessing — and every one of the eight id columns below would otherwise fail
+ * that adopter's inherited gate as `unclassified_id_column` on the day it adopts,
+ * with nothing to tell it whether that is a missing constraint or a decision.
+ */
+/** `<table>.<column>`, in the SQL names the gate compares against. */
+function describe(table, column) {
+    return `${(0, drizzle_orm_1.getTableName)(table)}.${(0, db_1.sqlColumnName)(column)}`;
+}
+/**
+ * The two tables that carried a Mongo TTL index, as sweep targets.
+ *
+ * **A TTL index is a behaviour of the SOURCE that does not survive the port.**
+ * Mongo reaps; Postgres does not. Both tables here were declared
+ * `expireAfterSeconds: 0` on an `expiresAt` the WRITER computes, so
+ * `retentionSeconds` is 0: the column already IS the deadline, and the retention
+ * window lives in `src/retention.ts` where both backends read it.
+ *
+ * Without an entry, a table grows forever — no error, no failing test, no
+ * symptom of any kind until disk. Nothing about it is visible in a diff, because
+ * the thing doing the work was never in the consumer's code to be missed.
+ *
+ * ## What sweeping these two costs, stated because a registry entry with no such
+ * note reads as "unconditionally safe"
+ *
+ * The outbox holds unprocessed WORK. A stalled dispatcher plus this sweep
+ * discards moderation work that was never delivered — which is why the retention
+ * window is ninety days rather than hours, and why a `dead_letter` row is
+ * evidence somebody still has to look at rather than a row to reap quickly.
+ * Operational alerts must fire long before this deadline; the sweep is the
+ * backstop for a table nobody drained, not a queue policy.
+ *
+ * The event log holds the audit trail of what a third party told this deployment
+ * to do, and the dedupe claim. CrowdSource's retry schedule ends at 24 hours, so
+ * deleting a row after ninety days cannot resurrect a duplicate delivery; what it
+ * does cost is the answer to "did CrowdSource tell us about this case, and when",
+ * which is the first question asked when a report looks stuck.
+ *
+ * Neither read path depends on a swept row already being gone: the dispatcher
+ * claims by `available_at` and the receiver claims by primary key, so an
+ * unswept row is stale at worst and never unsafe.
+ */
+function moderationExpirySweepTargets(tables) {
+    return [
+        {
+            table: tables.outbox,
+            column: tables.outbox.expiresAt,
+            retentionSeconds: 0,
+            reason: 'Deletes a delivered or dead-lettered moderation outbox event past its ' +
+                `${retention_js_1.MODERATION_OUTBOX_RETENTION_SECONDS}s retention. A row still pending is ` +
+                'moderation work that was never delivered — alert long before this.',
+        },
+        {
+            table: tables.events,
+            column: tables.events.expiresAt,
+            retentionSeconds: 0,
+            reason: 'Deletes the audit row and dedupe claim for an inbound decision past its ' +
+                `${retention_js_1.MODERATION_EVENT_RETENTION_SECONDS}s retention, long after CrowdSource's ` +
+                '24-hour retry schedule can redeliver it.',
+        },
+    ];
+}
+/**
+ * Every id-shaped column in this package's tables that will never carry a
+ * foreign key, with the reason.
+ *
+ * Eight entries, and the count is worth stating because the obvious count is
+ * six: `findIdColumnViolations` exempts a column only when `column.primary` is
+ * set, and a composite primary key declared in a table's extra config does NOT
+ * set it on its members — so `moderation_enforcements.decision_id` is scanned
+ * despite being part of the key.
+ *
+ * They fall into two kinds, and neither can be constrained:
+ *
+ * - **Ids in CrowdSource's database.** A decision, a case, a report as CrowdSource
+ *   knows it. There is no local table to point at; the row lives in another
+ *   service's store, and this deployment holds a copy of its identifier.
+ * - **The adopter's own opaque noun ids.** `subject_id` and `reported_id` name a
+ *   post, a listing, a message — whichever table the adopter's subject provider
+ *   resolves. The package cannot know which, and a single column cannot reference
+ *   several tables, which is precisely why they are stored as opaque text.
+ *
+ * The report table is passed in rather than assumed: the entries embed the
+ * adopter's own table name, and a ledger entry naming a table that is not in the
+ * gate's `tables` list is reported as `stale_ledger_entry`.
+ */
+function moderationIdColumnsWithoutForeignKey(input) {
+    const { tables, reportTable } = input;
+    return [
+        {
+            column: describe(tables.events, tables.events.caseId),
+            reason: 'Names a case in CrowdSource’s database, not the adopter’s.',
+        },
+        {
+            column: describe(tables.enforcements, tables.enforcements.decisionId),
+            reason: 'Names a decision in CrowdSource’s database. Part of the composite ' +
+                'primary key, which does not set `column.primary` on its members.',
+        },
+        {
+            column: describe(tables.enforcements, tables.enforcements.caseId),
+            reason: 'Names a case in CrowdSource’s database.',
+        },
+        {
+            column: describe(tables.enforcements, tables.enforcements.subjectId),
+            reason: 'The adopter’s own opaque noun id; the package cannot know which table ' +
+                'it points at, and one column cannot reference several.',
+        },
+        {
+            column: describe(reportTable, reportTable.reportedId),
+            reason: 'The adopter’s own opaque noun id — same reason as ' +
+                '`moderation_enforcements.subject_id`.',
+        },
+        {
+            column: describe(reportTable, reportTable.crowdSourceReportId),
+            reason: 'A report id in CrowdSource’s database.',
+        },
+        {
+            column: describe(reportTable, reportTable.crowdSourceCaseId),
+            reason: 'A case id in CrowdSource’s database.',
+        },
+        {
+            column: describe(reportTable, reportTable.decisionId),
+            reason: 'A decision id in CrowdSource’s database.',
+        },
+    ];
+}
+//# sourceMappingURL=registries.js.map

package/dist/outbox/postgres/registries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registries.js","sourceRoot":"","sources":["../../../src/outbox/postgres/registries.ts"],"names":[],"mappings":";;AAiFA,oEAuBC;AA0BD,oFA8CC;AAhLD,6CAA2C;AAG3C,mCAA2C;AAE3C,kDAGyB;AAIzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,sEAAsE;AACtE,SAAS,QAAQ,CAAC,KAAc,EAAE,MAAc;IAC9C,OAAO,GAAG,IAAA,0BAAY,EAAC,KAAK,CAAC,IAAI,IAAA,kBAAa,EAAC,MAAM,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,SAAgB,4BAA4B,CAC1C,MAAwB;IAExB,OAAO;QACL;YACE,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;YAC/B,gBAAgB,EAAE,CAAC;YACnB,MAAM,EACJ,wEAAwE;gBACxE,GAAG,kDAAmC,sCAAsC;gBAC5E,oEAAoE;SACvE;QACD;YACE,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;YAC/B,gBAAgB,EAAE,CAAC;YACnB,MAAM,EACJ,0EAA0E;gBAC1E,GAAG,iDAAkC,wCAAwC;gBAC7E,0CAA0C;SAC7C;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,oCAAoC,CAAC,KAGpD;IACC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAEtC,OAAO;QACL;YACE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YACrD,MAAM,EAAE,4DAA4D;SACrE;QACD;YACE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YACrE,MAAM,EACJ,oEAAoE;gBACpE,kEAAkE;SACrE;QACD;YACE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;YACjE,MAAM,EAAE,yCAAyC;SAClD;QACD;YACE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;YACpE,MAAM,EACJ,wEAAwE;gBACxE,wDAAwD;SAC3D;QACD;YACE,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,UAAU,CAAC;YACrD,MAAM,EACJ,oDAAoD;gBACpD,uCAAuC;SAC1C;QACD;YACE,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,mBAAmB,CAAC;YAC9D,MAAM,EAAE,wCAAwC;SACjD;QACD;YACE,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,iBAAiB,CAAC;YAC5D,MAAM,EAAE,sCAAsC;SAC/C;QACD;YACE,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,UAAU,CAAC;YACrD,MAAM,EAAE,0CAA0C;SACnD;KACF,CAAC;AACJ,CAAC"}