@de-otio/trellis 0.4.0

package/dist/lib/database-wrapper.js

@@ -0,0 +1,109 @@
+"use strict";
+/**
+ * Database Wrapper
+ *
+ * Wraps Prisma client with monitoring and query logging.
+ *
+ * Features:
+ * - Connection failure monitoring
+ * - Query logging (trace level only)
+ * - Error handling and sanitization
+ *
+ * Note: Rate limiting is handled at the API level (in worker.ts), not per database operation.
+ * This avoids the performance overhead of checking limits on every database call.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatabaseWrapper = void 0;
+const database_monitor_1 = require("./database-monitor");
+const logger_1 = require("./logger");
+/**
+ * Database wrapper that adds monitoring and logging
+ *
+ * Note: Rate limiting is handled at the API level, not here.
+ */
+class DatabaseWrapper {
+    prisma;
+    monitor;
+    logger;
+    region;
+    constructor(prisma, env, region) {
+        this.prisma = prisma;
+        this.monitor = new database_monitor_1.DatabaseMonitor(env);
+        this.logger = logger_1.Logger.getInstance(env);
+        this.region = region;
+    }
+    /**
+     * Execute a database operation with monitoring and logging
+     *
+     * Note: Rate limiting is handled at the API level (in worker.ts), not here.
+     */
+    async execute(operation, options) {
+        const startTime = Date.now();
+        const { userId, operation: opName, request, env } = options;
+        try {
+            // Execute operation
+            const result = await operation();
+            // Log query (trace level only)
+            const duration = Date.now() - startTime;
+            this.monitor.logQuery({
+                operation: opName || "unknown",
+                region: this.region,
+                duration,
+                success: true,
+                userId,
+                timestamp: new Date(),
+            }, env);
+            return result;
+        }
+        catch (error) {
+            const duration = Date.now() - startTime;
+            const errorMessage = error?.message || "Unknown error";
+            // Log connection failure if applicable
+            if (this.isConnectionError(error)) {
+                await this.monitor.logConnectionFailure({
+                    region: this.region,
+                    error: errorMessage,
+                    operation: opName,
+                    userId,
+                    timestamp: new Date(),
+                }, env);
+            }
+            // Log query failure (trace level only)
+            this.monitor.logQuery({
+                operation: opName || "unknown",
+                region: this.region,
+                duration,
+                success: false,
+                error: errorMessage,
+                userId,
+                timestamp: new Date(),
+            }, env);
+            throw error;
+        }
+    }
+    /**
+     * Check if error is a connection error
+     */
+    isConnectionError(error) {
+        const message = error?.message || "";
+        const connectionErrorPatterns = [
+            /connection.*failed/gi,
+            /connection.*refused/gi,
+            /timeout/gi,
+            /network.*error/gi,
+            /ECONNREFUSED/gi,
+            /ETIMEDOUT/gi,
+            /P1001/gi, // Prisma connection error code
+            /P1017/gi, // Prisma server closed connection
+        ];
+        return connectionErrorPatterns.some((pattern) => pattern.test(message));
+    }
+    /**
+     * Get underlying Prisma client (for direct access when needed)
+     */
+    getClient() {
+        return this.prisma;
+    }
+}
+exports.DatabaseWrapper = DatabaseWrapper;
+//# sourceMappingURL=database-wrapper.js.map

package/dist/lib/database-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-wrapper.js","sourceRoot":"","sources":["../../src/lib/database-wrapper.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAGH,yDAI4B;AAC5B,qCAAkC;AAYlC;;;;GAIG;AACH,MAAa,eAAe;IAClB,MAAM,CAAe;IACrB,OAAO,CAAkB;IACzB,MAAM,CAAS;IACf,MAAM,CAAS;IAEvB,YAAY,MAAoB,EAAE,GAAuB,EAAE,MAAc;QACvE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,kCAAe,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CACX,SAA2B,EAC3B,OAA+B;QAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAE5D,IAAI,CAAC;YACH,oBAAoB;YACpB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YAEjC,+BAA+B;YAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,QAAQ,CACnB;gBACE,SAAS,EAAE,MAAM,IAAI,SAAS;gBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ;gBACR,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,EACD,GAAG,CACJ,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,MAAM,YAAY,GAAG,KAAK,EAAE,OAAO,IAAI,eAAe,CAAC;YAEvD,uCAAuC;YACvC,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CACrC;oBACE,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,KAAK,EAAE,YAAY;oBACnB,SAAS,EAAE,MAAM;oBACjB,MAAM;oBACN,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,uCAAuC;YACvC,IAAI,CAAC,OAAO,CAAC,QAAQ,CACnB;gBACE,SAAS,EAAE,MAAM,IAAI,SAAS;gBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ;gBACR,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,YAAY;gBACnB,MAAM;gBACN,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,EACD,GAAG,CACJ,CAAC;YAEF,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,KAAU;QAClC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;QACrC,MAAM,uBAAuB,GAAG;YAC9B,sBAAsB;YACtB,uBAAuB;YACvB,WAAW;YACX,kBAAkB;YAClB,gBAAgB;YAChB,aAAa;YACb,SAAS,EAAE,+BAA+B;YAC1C,SAAS,EAAE,kCAAkC;SAC9C,CAAC;QAEF,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAzGD,0CAyGC"}

package/dist/lib/db-query-helper.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Database Query Helper
+ *
+ * Provides reusable timeout and retry logic for database queries to handle stale connections.
+ * Now uses DatabaseConnectionManager for clear state management.
+ *
+ * Best Practices:
+ * - All database queries should use this helper for consistent timeout and retry behavior
+ * - Application timeout (3s for user-facing) is less than statement_timeout (15s) to fail fast
+ * - Retry logic clears pools and retries once with fresh connection
+ * - Graceful degradation: returns default value or throws based on context
+ *
+ * Usage:
+ * ```typescript
+ * const { sharedDatabaseConnectionManager: manager } = await import('./database-connection-manager');
+ * const result = await withQueryTimeoutAndRetry(
+ *   manager,
+ *   'US',
+ *   env,
+ *   (client) => client.user.findUnique({ where: { id } }),
+ *   { timeoutMs: 3000, retryTimeoutMs: 2000 }
+ * );
+ * ```
+ */
+import type { PrismaClient } from "@prisma/client";
+import type { EnvWithDb } from "../db";
+import { DatabaseConnectionManager } from "./database-connection-manager";
+export interface QueryTimeoutOptions {
+    /**
+     * Application-level timeout in milliseconds
+     * Should be less than statement_timeout (15s) to fail fast
+     * Default: 3000 (3 seconds for user-facing)
+     */
+    timeoutMs?: number;
+    /**
+     * Retry timeout in milliseconds (shorter than initial timeout)
+     * Default: 2000 (2 seconds)
+     */
+    retryTimeoutMs?: number;
+    /**
+     * Maximum number of retry attempts (default: 3)
+     * Total attempts = 1 initial + maxRetries retries
+     */
+    maxRetries?: number;
+    /**
+     * Base delay in milliseconds for exponential backoff (default: 100ms)
+     * Retry delays: baseDelayMs, baseDelayMs * 2, baseDelayMs * 4, etc.
+     */
+    baseDelayMs?: number;
+    /**
+     * Default value to return if query fails after retry
+     * If not provided, error will be thrown
+     */
+    defaultValue?: any;
+    /**
+     * Context for logging (operation name, userId, etc.)
+     */
+    context?: {
+        operation?: string;
+        userId?: string;
+        [key: string]: any;
+    };
+}
+/**
+ * Timeout presets for different use cases
+ */
+export declare const QueryTimeoutPresets: {
+    /**
+     * User-facing requests (frontend API calls)
+     * CRITICAL FIX: Increased timeout based on Cloudflare logs analysis
+     * Logs showed 108 query timeouts - 500ms is too aggressive
+     * Queries are taking 800ms+ under load, causing premature timeouts
+     * Total max wait: 4 seconds (2000ms initial + 2000ms retry)
+     */
+    readonly USER_FACING: {
+        readonly timeoutMs: 2000;
+        readonly retryTimeoutMs: 2000;
+    };
+    /**
+     * Background operations (scheduled jobs, async processing)
+     * Longer timeouts acceptable since not blocking user
+     * Total max wait: 17 seconds (12s initial + 5s retry)
+     */
+    readonly BACKGROUND: {
+        readonly timeoutMs: 12000;
+        readonly retryTimeoutMs: 5000;
+    };
+    /**
+     * Critical operations (auth, payments)
+     * Medium timeouts with retry for reliability
+     * Total max wait: 8 seconds (5s initial + 3s retry)
+     */
+    readonly CRITICAL: {
+        readonly timeoutMs: 5000;
+        readonly retryTimeoutMs: 3000;
+    };
+    /**
+     * Standard operations (default for most queries)
+     * CRITICAL FIX: Increased timeout based on Cloudflare logs analysis
+     * Logs showed 108 query timeouts - 500ms is too aggressive
+     * Total max wait: 4 seconds (2000ms initial + 2000ms retry)
+     */
+    readonly STANDARD: {
+        readonly timeoutMs: 2000;
+        readonly retryTimeoutMs: 2000;
+    };
+};
+/**
+ * Execute a database query with timeout protection and retry logic for stale connections
+ *
+ * @param manager - DatabaseConnectionManager instance (manages state)
+ * @param region - Region code ('US', 'EU', 'CN', etc.)
+ * @param env - Environment variables
+ * @param queryFn - Function that executes the query using the provided PrismaClient
+ * @param options - Timeout and retry configuration
+ * @returns Query result or default value if retry fails
+ * @throws Error if query fails and no default value provided
+ */
+export declare function withQueryTimeoutAndRetry<T>(manager: DatabaseConnectionManager, region: string, env: EnvWithDb, queryFn: (client: PrismaClient) => Promise<T>, options?: QueryTimeoutOptions): Promise<T>;
+/**
+ * Execute a database query with timeout protection only (no retry)
+ * Use this for queries that should fail fast without retry
+ *
+ * @param queryFn - Function that returns a Promise for the database query
+ * @param timeoutMs - Timeout in milliseconds (default: 12000)
+ * @returns Query result
+ * @throws Error if query times out
+ */
+export declare function withQueryTimeout<T>(queryFn: () => Promise<T>, timeoutMs?: number): Promise<T>;
+//# sourceMappingURL=db-query-helper.d.ts.map

package/dist/lib/db-query-helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-query-helper.d.ts","sourceRoot":"","sources":["../../src/lib/db-query-helper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,YAAY,CAAC,EAAE,GAAG,CAAC;IAEnB;;OAEG;IACH,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACpB,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB;IAC9B;;;;;;OAMG;;;;;IAMH;;;;OAIG;;;;;IAMH;;;;OAIG;;;;;IAMH;;;;;OAKG;;;;;CAKK,CAAC;AAEX;;;;;;;;;;GAUG;AACH,wBAAsB,wBAAwB,CAAC,CAAC,EAC9C,OAAO,EAAE,yBAAyB,EAClC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,EAC7C,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,CAAC,CAAC,CAEZ;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACzB,SAAS,GAAE,MAAc,GACxB,OAAO,CAAC,CAAC,CAAC,CAQZ"}

package/dist/lib/db-query-helper.js

@@ -0,0 +1,105 @@
+"use strict";
+/**
+ * Database Query Helper
+ *
+ * Provides reusable timeout and retry logic for database queries to handle stale connections.
+ * Now uses DatabaseConnectionManager for clear state management.
+ *
+ * Best Practices:
+ * - All database queries should use this helper for consistent timeout and retry behavior
+ * - Application timeout (3s for user-facing) is less than statement_timeout (15s) to fail fast
+ * - Retry logic clears pools and retries once with fresh connection
+ * - Graceful degradation: returns default value or throws based on context
+ *
+ * Usage:
+ * ```typescript
+ * const { sharedDatabaseConnectionManager: manager } = await import('./database-connection-manager');
+ * const result = await withQueryTimeoutAndRetry(
+ *   manager,
+ *   'US',
+ *   env,
+ *   (client) => client.user.findUnique({ where: { id } }),
+ *   { timeoutMs: 3000, retryTimeoutMs: 2000 }
+ * );
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.QueryTimeoutPresets = void 0;
+exports.withQueryTimeoutAndRetry = withQueryTimeoutAndRetry;
+exports.withQueryTimeout = withQueryTimeout;
+/**
+ * Timeout presets for different use cases
+ */
+exports.QueryTimeoutPresets = {
+    /**
+     * User-facing requests (frontend API calls)
+     * CRITICAL FIX: Increased timeout based on Cloudflare logs analysis
+     * Logs showed 108 query timeouts - 500ms is too aggressive
+     * Queries are taking 800ms+ under load, causing premature timeouts
+     * Total max wait: 4 seconds (2000ms initial + 2000ms retry)
+     */
+    USER_FACING: {
+        timeoutMs: 2000, // Increased from 500ms to 2000ms - Cloudflare logs showed 108 query timeouts with 500ms being too aggressive
+        retryTimeoutMs: 2000, // Increased from 500ms to 2000ms for retry
+    },
+    /**
+     * Background operations (scheduled jobs, async processing)
+     * Longer timeouts acceptable since not blocking user
+     * Total max wait: 17 seconds (12s initial + 5s retry)
+     */
+    BACKGROUND: {
+        timeoutMs: 12000, // 12 seconds
+        retryTimeoutMs: 5000, // 5 seconds for retry
+    },
+    /**
+     * Critical operations (auth, payments)
+     * Medium timeouts with retry for reliability
+     * Total max wait: 8 seconds (5s initial + 3s retry)
+     */
+    CRITICAL: {
+        timeoutMs: 5000, // 5 seconds
+        retryTimeoutMs: 3000, // 3 seconds for retry
+    },
+    /**
+     * Standard operations (default for most queries)
+     * CRITICAL FIX: Increased timeout based on Cloudflare logs analysis
+     * Logs showed 108 query timeouts - 500ms is too aggressive
+     * Total max wait: 4 seconds (2000ms initial + 2000ms retry)
+     */
+    STANDARD: {
+        timeoutMs: 2000, // Increased from 500ms to 2000ms - Cloudflare logs showed 108 query timeouts with 500ms being too aggressive
+        retryTimeoutMs: 2000, // Increased from 500ms to 2000ms for retry
+    },
+};
+/**
+ * Execute a database query with timeout protection and retry logic for stale connections
+ *
+ * @param manager - DatabaseConnectionManager instance (manages state)
+ * @param region - Region code ('US', 'EU', 'CN', etc.)
+ * @param env - Environment variables
+ * @param queryFn - Function that executes the query using the provided PrismaClient
+ * @param options - Timeout and retry configuration
+ * @returns Query result or default value if retry fails
+ * @throws Error if query fails and no default value provided
+ */
+async function withQueryTimeoutAndRetry(manager, region, env, queryFn, options = {}) {
+    return manager.executeWithRetry(region, env, queryFn, options);
+}
+/**
+ * Execute a database query with timeout protection only (no retry)
+ * Use this for queries that should fail fast without retry
+ *
+ * @param queryFn - Function that returns a Promise for the database query
+ * @param timeoutMs - Timeout in milliseconds (default: 12000)
+ * @returns Query result
+ * @throws Error if query times out
+ */
+async function withQueryTimeout(queryFn, timeoutMs = 12000) {
+    const timeoutPromise = new Promise((_, reject) => {
+        setTimeout(() => {
+            reject(new Error("Database query timeout"));
+        }, timeoutMs);
+    });
+    return await Promise.race([queryFn(), timeoutPromise]);
+}
+//# sourceMappingURL=db-query-helper.js.map

package/dist/lib/db-query-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-query-helper.js","sourceRoot":"","sources":["../../src/lib/db-query-helper.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AA2GH,4DAQC;AAWD,4CAWC;AAzFD;;GAEG;AACU,QAAA,mBAAmB,GAAG;IACjC;;;;;;OAMG;IACH,WAAW,EAAE;QACX,SAAS,EAAE,IAAI,EAAE,6GAA6G;QAC9H,cAAc,EAAE,IAAI,EAAE,2CAA2C;KAClE;IAED;;;;OAIG;IACH,UAAU,EAAE;QACV,SAAS,EAAE,KAAK,EAAE,aAAa;QAC/B,cAAc,EAAE,IAAI,EAAE,sBAAsB;KAC7C;IAED;;;;OAIG;IACH,QAAQ,EAAE;QACR,SAAS,EAAE,IAAI,EAAE,YAAY;QAC7B,cAAc,EAAE,IAAI,EAAE,sBAAsB;KAC7C;IAED;;;;;OAKG;IACH,QAAQ,EAAE;QACR,SAAS,EAAE,IAAI,EAAE,6GAA6G;QAC9H,cAAc,EAAE,IAAI,EAAE,2CAA2C;KAClE;CACO,CAAC;AAEX;;;;;;;;;;GAUG;AACI,KAAK,UAAU,wBAAwB,CAC5C,OAAkC,EAClC,MAAc,EACd,GAAc,EACd,OAA6C,EAC7C,UAA+B,EAAE;IAEjC,OAAO,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,gBAAgB,CACpC,OAAyB,EACzB,YAAoB,KAAK;IAEzB,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QACtD,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC9C,CAAC,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/dist/lib/discovery-handler.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Discovery Handler
+ *
+ * Endpoints for entity discovery via graph traversal, spatial proximity,
+ * and graph-based recommendations.
+ *
+ * SECURITY: Discovery is rate-limited to 5 requests/minute/user.
+ * Hops are hard-capped at 2. Lat/lng are coarsened to 3 decimal places.
+ */
+import type { Env } from "../env";
+import type { RequestContext } from "./request-context";
+import type { Session } from "./session-manager";
+export declare class DiscoveryHandler {
+    handleDiscoverByGraph(request: Request, session: Session, env: Env, _requestContext: RequestContext): Promise<Response>;
+    handleDiscoverNearby(request: Request, session: Session, env: Env, _requestContext: RequestContext): Promise<Response>;
+    handleGetRecommendations(request: Request, session: Session, env: Env, _requestContext: RequestContext): Promise<Response>;
+    private handleError;
+}
+//# sourceMappingURL=discovery-handler.d.ts.map

package/dist/lib/discovery-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-handler.d.ts","sourceRoot":"","sources":["../../src/lib/discovery-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AA0CjD,qBAAa,gBAAgB;IACrB,qBAAqB,CACzB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IAqCd,oBAAoB,CACxB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;IA0Dd,wBAAwB,CAC5B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,eAAe,EAAE,cAAc,GAC9B,OAAO,CAAC,QAAQ,CAAC;YAwBN,WAAW;CAyB1B"}

package/dist/lib/discovery-handler.js

@@ -0,0 +1,195 @@
+"use strict";
+/**
+ * Discovery Handler
+ *
+ * Endpoints for entity discovery via graph traversal, spatial proximity,
+ * and graph-based recommendations.
+ *
+ * SECURITY: Discovery is rate-limited to 5 requests/minute/user.
+ * Hops are hard-capped at 2. Lat/lng are coarsened to 3 decimal places.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DiscoveryHandler = void 0;
+// Simple in-memory rate limiter: 5 requests per 60-second window per user.
+// NOTE: Per-process only — does not enforce across multiple ECS tasks. Known tradeoff.
+const RATE_LIMIT_MAX = 5;
+const RATE_LIMIT_WINDOW_MS = 60_000;
+// Hard cap to prevent unbounded growth under many unique users
+const RATE_LIMIT_MAP_MAX_SIZE = 50_000;
+const rateLimitMap = new Map();
+let lastCleanupAt = Date.now();
+function checkRateLimit(userId) {
+    const now = Date.now();
+    // Periodic cleanup: sweep expired entries every 60 seconds to prevent memory leak
+    if (now - lastCleanupAt > RATE_LIMIT_WINDOW_MS) {
+        lastCleanupAt = now;
+        for (const [key, val] of rateLimitMap) {
+            if (now >= val.resetAt)
+                rateLimitMap.delete(key);
+        }
+    }
+    // Hard size cap: if at limit and this user isn't already tracked, deny
+    if (!rateLimitMap.has(userId) && rateLimitMap.size >= RATE_LIMIT_MAP_MAX_SIZE) {
+        return false;
+    }
+    const entry = rateLimitMap.get(userId);
+    if (!entry || now >= entry.resetAt) {
+        rateLimitMap.set(userId, { count: 1, resetAt: now + RATE_LIMIT_WINDOW_MS });
+        return true;
+    }
+    if (entry.count >= RATE_LIMIT_MAX) {
+        return false;
+    }
+    entry.count++;
+    return true;
+}
+class DiscoveryHandler {
+    async handleDiscoverByGraph(request, session, env, _requestContext) {
+        try {
+            if (!checkRateLimit(session.userId)) {
+                return rateLimitResponse();
+            }
+            const url = new URL(request.url);
+            const hopsStr = url.searchParams.get("hops");
+            const entityType = url.searchParams.get("entityType") || undefined;
+            const breed = url.searchParams.get("breed") || undefined;
+            const lifeStage = url.searchParams.get("lifeStage") || undefined;
+            const limitStr = url.searchParams.get("limit");
+            // Hard-cap hops at 2 (security requirement — prevents graph traversal DoS)
+            const hops = Math.min(Math.max(parseInt(hopsStr || "2", 10) || 2, 1), 2);
+            const limit = Math.min(Math.max(parseInt(limitStr || "20", 10) || 20, 1), 50);
+            const { createGraphServiceFromEnv } = await Promise.resolve().then(() => __importStar(require("./graph")));
+            const graphService = await createGraphServiceFromEnv(env);
+            const results = await graphService.discoverByGraph(session.userId, hops, {
+                entityType,
+                breed,
+                lifeStage,
+                hops: hops,
+                limit,
+            });
+            return new Response(JSON.stringify({ results }), {
+                status: 200,
+                headers: { "content-type": "application/json" },
+            });
+        }
+        catch (error) {
+            return await this.handleError(error, env);
+        }
+    }
+    async handleDiscoverNearby(request, session, env, _requestContext) {
+        try {
+            if (!checkRateLimit(session.userId)) {
+                return rateLimitResponse();
+            }
+            const url = new URL(request.url);
+            const latStr = url.searchParams.get("lat");
+            const lngStr = url.searchParams.get("lng");
+            const radiusStr = url.searchParams.get("radius");
+            const entityType = url.searchParams.get("entityType") || undefined;
+            const breed = url.searchParams.get("breed") || undefined;
+            const limitStr = url.searchParams.get("limit");
+            if (!latStr || !lngStr) {
+                return new Response(JSON.stringify({ error: "VALIDATION_ERROR", message: "lat and lng are required" }), { status: 400, headers: { "content-type": "application/json" } });
+            }
+            const lat = parseFloat(latStr);
+            const lng = parseFloat(lngStr);
+            if (isNaN(lat) || isNaN(lng) || lat < -90 || lat > 90 || lng < -180 || lng > 180) {
+                return new Response(JSON.stringify({ error: "VALIDATION_ERROR", message: "lat must be -90..90, lng must be -180..180" }), { status: 400, headers: { "content-type": "application/json" } });
+            }
+            // Coarsen to 3 decimal places (~1km precision) to prevent triangulation
+            const coarseLat = Math.round(lat * 1000) / 1000;
+            const coarseLng = Math.round(lng * 1000) / 1000;
+            const radius = Math.min(Math.max(parseInt(radiusStr || "5000", 10) || 5000, 100), 50000);
+            const limit = Math.min(Math.max(parseInt(limitStr || "20", 10) || 20, 1), 50);
+            const { createGraphServiceFromEnv } = await Promise.resolve().then(() => __importStar(require("./graph")));
+            const graphService = await createGraphServiceFromEnv(env);
+            const results = await graphService.discoverNearby(session.userId, coarseLat, coarseLng, radius, { entityType, breed, limit });
+            return new Response(JSON.stringify({ results }), {
+                status: 200,
+                headers: { "content-type": "application/json" },
+            });
+        }
+        catch (error) {
+            return await this.handleError(error, env);
+        }
+    }
+    async handleGetRecommendations(request, session, env, _requestContext) {
+        try {
+            if (!checkRateLimit(session.userId)) {
+                return rateLimitResponse();
+            }
+            const url = new URL(request.url);
+            const limitStr = url.searchParams.get("limit");
+            const limit = Math.min(Math.max(parseInt(limitStr || "10", 10) || 10, 1), 30);
+            const { createGraphServiceFromEnv } = await Promise.resolve().then(() => __importStar(require("./graph")));
+            const graphService = await createGraphServiceFromEnv(env);
+            const recommendations = await graphService.getRecommendations(session.userId, limit);
+            return new Response(JSON.stringify({ recommendations }), {
+                status: 200,
+                headers: { "content-type": "application/json" },
+            });
+        }
+        catch (error) {
+            return await this.handleError(error, env);
+        }
+    }
+    async handleError(error, env) {
+        const logger = logger_1.Logger.getInstance(env);
+        if (error?.constructor?.name === "GraphConnectionError") {
+            const isPoolTimeout = typeof error.message === "string" &&
+                error.message.includes("connection acquisition timed out");
+            if (isPoolTimeout) {
+                logger.warn("graph_pool_acquire_timeout", { code: error.code, name: error.constructor.name });
+                await new Promise((r) => setTimeout(r, 50 + Math.random() * 100));
+            }
+            else {
+                logger.warn("[DiscoveryHandler] Graph connection error", { code: error.code, name: error.constructor.name });
+            }
+            return new Response(JSON.stringify({ error: "service_unavailable" }), {
+                status: 503,
+                headers: { "content-type": "application/json", "Retry-After": "1" },
+            });
+        }
+        logger.error("[DiscoveryHandler] Unexpected error:", error);
+        return new Response(JSON.stringify({ error: "INTERNAL_ERROR", message: "Internal server error" }), { status: 500, headers: { "content-type": "application/json" } });
+    }
+}
+exports.DiscoveryHandler = DiscoveryHandler;
+function rateLimitResponse() {
+    return new Response(JSON.stringify({ error: "RATE_LIMITED", message: "Too many discovery requests. Try again in 60 seconds." }), { status: 429, headers: { "content-type": "application/json", "retry-after": "60" } });
+}
+const logger_1 = require("./logger");
+//# sourceMappingURL=discovery-handler.js.map

package/dist/lib/discovery-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-handler.js","sourceRoot":"","sources":["../../src/lib/discovery-handler.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMH,2EAA2E;AAC3E,uFAAuF;AACvF,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,+DAA+D;AAC/D,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,YAAY,GAAG,IAAI,GAAG,EAA8C,CAAC;AAC3E,IAAI,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAE/B,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,kFAAkF;IAClF,IAAI,GAAG,GAAG,aAAa,GAAG,oBAAoB,EAAE,CAAC;QAC/C,aAAa,GAAG,GAAG,CAAC;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC;YACtC,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO;gBAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEvC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,oBAAoB,EAAE,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,IAAI,cAAc,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAa,gBAAgB;IAC3B,KAAK,CAAC,qBAAqB,CACzB,OAAgB,EAChB,OAAgB,EAChB,GAAQ,EACR,eAA+B;QAE/B,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,OAAO,iBAAiB,EAAE,CAAC;YAC7B,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;YACnE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;YACzD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;YACjE,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE/C,2EAA2E;YAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAE9E,MAAM,EAAE,yBAAyB,EAAE,GAAG,wDAAa,SAAS,GAAC,CAAC;YAC9D,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC;YAE1D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;gBACvE,UAAU;gBACV,KAAK;gBACL,SAAS;gBACT,IAAI,EAAE,IAAa;gBACnB,KAAK;aACN,CAAC,CAAC;YAEH,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;gBAC/C,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,OAAgB,EAChB,OAAgB,EAChB,GAAQ,EACR,eAA+B;QAE/B,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,OAAO,iBAAiB,EAAE,CAAC;YAC7B,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;YACnE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;YACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE/C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,EAClF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAE/B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;gBACjF,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,EACpG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,wEAAwE;YACxE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;YAEhD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACzF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAE9E,MAAM,EAAE,yBAAyB,EAAE,GAAG,wDAAa,SAAS,GAAC,CAAC;YAC9D,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC;YAE1D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,cAAc,CAC/C,OAAO,CAAC,MAAM,EACd,SAAS,EACT,SAAS,EACT,MAAM,EACN,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAC7B,CAAC;YAEF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;gBAC/C,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,OAAgB,EAChB,OAAgB,EAChB,GAAQ,EACR,eAA+B;QAE/B,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,OAAO,iBAAiB,EAAE,CAAC;YAC7B,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAE9E,MAAM,EAAE,yBAAyB,EAAE,GAAG,wDAAa,SAAS,GAAC,CAAC;YAC9D,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC;YAE1D,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAErF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE;gBACvD,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAU,EAAE,GAAQ;QAC5C,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,KAAK,EAAE,WAAW,EAAE,IAAI,KAAK,sBAAsB,EAAE,CAAC;YACxD,MAAM,aAAa,GACjB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBACjC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC;YAC7D,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9F,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/G,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,EAAE;gBACpE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,EAAE;aACpE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAC5D,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,EAC7E,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;IACJ,CAAC;CACF;AAhKD,4CAgKC;AAED,SAAS,iBAAiB;IACxB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC,EAC3G,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CACtF,CAAC;AACJ,CAAC;AAED,qCAAkC"}