@derwinjs/db 0.7.0 → 0.8.0

package/dist/budget-gate.d.ts

@@ -0,0 +1,43 @@
+/**
+ * createPrismaBudgetGate — Prisma-backed implementation of the SDK
+ * BudgetGate contract introduced by QAP-084.
+ *
+ * Sprint 8 Phase 3 (Policy Governance). Per-project monthly auto-fix budget
+ * cap with soft-warn + hard-stop thresholds. The dispatcher consults
+ * `isHardStopped()` BEFORE running runFixCycle and refuses to dispatch
+ * when month-to-date spend has hit the cap.
+ *
+ * # Spend window
+ *
+ * Month-to-date is the calendar month in UTC: spend SUM is restricted to
+ * SpendLedger entries with `occurredAt >= startOfMonth(UTC)`. The window
+ * resets at 00:00 UTC on the 1st of each month — this matches operator
+ * mental model (`this month's budget`, not a rolling 30-day window).
+ *
+ * # Currency unit
+ *
+ * SpendLedger.costCents is INTEGER cents (legacy schema, preserved for
+ * back-compat with the audit trail and the per-attempt costCents column).
+ * The BudgetGate contract surfaces USD floats — we divide by 100 in the
+ * factory rather than mutating the schema. New consumers wire BudgetGate
+ * and never touch cents directly.
+ *
+ * # Tenant isolation
+ *
+ * Every method scopes by projectId. Pattern D — wrong-project / unknown-
+ * project lookups return state=`NO_CAP` (defense-in-depth: a missing
+ * Project row should not look different from one with no cap configured).
+ */
+import type { PrismaClient } from './prisma.js';
+import { type BudgetGate } from '@derwinjs/sdk';
+export interface PrismaBudgetGateConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+    /**
+     * Optional clock injection for deterministic month-boundary tests. Tests
+     * pass a fixed Date; production callers omit (defaults to `new Date()`).
+     */
+    now?: () => Date;
+}
+export declare function createPrismaBudgetGate(config: PrismaBudgetGateConfig): BudgetGate;
+//# sourceMappingURL=budget-gate.d.ts.map

package/dist/budget-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-gate.d.ts","sourceRoot":"","sources":["../src/budget-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAmB,KAAK,UAAU,EAAqB,MAAM,eAAe,CAAC;AAIpF,MAAM,WAAW,sBAAsB;IACrC,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;IACrB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AA8BD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,UAAU,CA8DjF"}

package/dist/budget-gate.js

@@ -0,0 +1,110 @@
+/**
+ * createPrismaBudgetGate — Prisma-backed implementation of the SDK
+ * BudgetGate contract introduced by QAP-084.
+ *
+ * Sprint 8 Phase 3 (Policy Governance). Per-project monthly auto-fix budget
+ * cap with soft-warn + hard-stop thresholds. The dispatcher consults
+ * `isHardStopped()` BEFORE running runFixCycle and refuses to dispatch
+ * when month-to-date spend has hit the cap.
+ *
+ * # Spend window
+ *
+ * Month-to-date is the calendar month in UTC: spend SUM is restricted to
+ * SpendLedger entries with `occurredAt >= startOfMonth(UTC)`. The window
+ * resets at 00:00 UTC on the 1st of each month — this matches operator
+ * mental model (`this month's budget`, not a rolling 30-day window).
+ *
+ * # Currency unit
+ *
+ * SpendLedger.costCents is INTEGER cents (legacy schema, preserved for
+ * back-compat with the audit trail and the per-attempt costCents column).
+ * The BudgetGate contract surfaces USD floats — we divide by 100 in the
+ * factory rather than mutating the schema. New consumers wire BudgetGate
+ * and never touch cents directly.
+ *
+ * # Tenant isolation
+ *
+ * Every method scopes by projectId. Pattern D — wrong-project / unknown-
+ * project lookups return state=`NO_CAP` (defense-in-depth: a missing
+ * Project row should not look different from one with no cap configured).
+ */
+import { BudgetGateError } from '@derwinjs/sdk';
+// ─── Helpers ─────────────────────────────────────────────────────────────
+/**
+ * Compute the start of the calendar month in UTC for the given instant.
+ * `2026-05-07T12:34:56Z` → `2026-05-01T00:00:00.000Z`. The aggregator query
+ * uses `occurredAt >= startOfMonth` so the boundary is inclusive.
+ */
+function startOfMonthUtc(at) {
+    return new Date(Date.UTC(at.getUTCFullYear(), at.getUTCMonth(), 1, 0, 0, 0, 0));
+}
+/**
+ * Decide the gate state from utilization. Mirrors the BudgetGate contract's
+ * documented thresholds exactly.
+ */
+function deriveState(monthlyBudgetUsd, utilizationPercent, softWarnPct) {
+    if (monthlyBudgetUsd === null || utilizationPercent === null)
+        return 'NO_CAP';
+    if (utilizationPercent >= 1.0)
+        return 'HARD_STOP';
+    if (utilizationPercent >= softWarnPct)
+        return 'SOFT_WARN';
+    return 'OK';
+}
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaBudgetGate(config) {
+    const { prisma } = config;
+    const now = config.now ?? (() => new Date());
+    async function computeStatus(projectId) {
+        if (typeof projectId !== 'string' || projectId.length === 0) {
+            throw new BudgetGateError('invalid_input', 'BudgetGate: projectId is required');
+        }
+        // 1. Fetch the project's cap + soft-warn pct. Pattern D: unknown
+        //    project → NO_CAP, no throw. Defense-in-depth so a tenant
+        //    enumeration probe sees the same shape as a real cap-less project.
+        const project = await prisma.project.findUnique({
+            where: { id: projectId },
+            select: { monthlyBudgetUsd: true, budgetSoftWarnPct: true },
+        });
+        if (project === null) {
+            return {
+                monthToDateSpendUsd: 0,
+                monthlyBudgetUsd: null,
+                utilizationPercent: null,
+                state: 'NO_CAP',
+            };
+        }
+        // 2. Sum the SpendLedger entries for the current calendar month.
+        //    SpendLedger.costCents is INT cents — we divide by 100 to surface USD.
+        const monthStart = startOfMonthUtc(now());
+        const aggregate = await prisma.spendLedger.aggregate({
+            where: { projectId, occurredAt: { gte: monthStart } },
+            _sum: { costCents: true },
+        });
+        const totalCents = aggregate._sum.costCents ?? 0;
+        const monthToDateSpendUsd = totalCents / 100;
+        // 3. Compute utilization + state.
+        const monthlyBudgetUsd = project.monthlyBudgetUsd ?? null;
+        const utilizationPercent = monthlyBudgetUsd === null || monthlyBudgetUsd === 0
+            ? null
+            : monthToDateSpendUsd / monthlyBudgetUsd;
+        const softWarnPct = project.budgetSoftWarnPct;
+        const state = deriveState(monthlyBudgetUsd, utilizationPercent, softWarnPct);
+        return {
+            monthToDateSpendUsd,
+            monthlyBudgetUsd,
+            utilizationPercent,
+            state,
+        };
+    }
+    return {
+        async getStatus(input) {
+            return computeStatus(input.projectId);
+        },
+        async isHardStopped(input) {
+            const status = await computeStatus(input.projectId);
+            return status.state === 'HARD_STOP';
+        },
+    };
+}
+//# sourceMappingURL=budget-gate.js.map

package/dist/budget-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-gate.js","sourceRoot":"","sources":["../src/budget-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,EAAE,eAAe,EAAsC,MAAM,eAAe,CAAC;AAcpF,4EAA4E;AAE5E;;;;GAIG;AACH,SAAS,eAAe,CAAC,EAAQ;IAC/B,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,gBAA+B,EAC/B,kBAAiC,EACjC,WAAmB;IAEnB,IAAI,gBAAgB,KAAK,IAAI,IAAI,kBAAkB,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC9E,IAAI,kBAAkB,IAAI,GAAG;QAAE,OAAO,WAAW,CAAC;IAClD,IAAI,kBAAkB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,sBAAsB,CAAC,MAA8B;IACnE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE7C,KAAK,UAAU,aAAa,CAAC,SAAiB;QAC5C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,mCAAmC,CAAC,CAAC;QAClF,CAAC;QAED,iEAAiE;QACjE,8DAA8D;QAC9D,uEAAuE;QACvE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE;YACxB,MAAM,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE;SAC5D,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO;gBACL,mBAAmB,EAAE,CAAC;gBACtB,gBAAgB,EAAE,IAAI;gBACtB,kBAAkB,EAAE,IAAI;gBACxB,KAAK,EAAE,QAAQ;aAChB,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,2EAA2E;QAC3E,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;YACnD,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE;YACrD,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACjD,MAAM,mBAAmB,GAAG,UAAU,GAAG,GAAG,CAAC;QAE7C,kCAAkC;QAClC,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC;QAC1D,MAAM,kBAAkB,GACtB,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,CAAC;YACjD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,mBAAmB,GAAG,gBAAgB,CAAC;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;QAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;QAE7E,OAAO;YACL,mBAAmB;YACnB,gBAAgB;YAChB,kBAAkB;YAClB,KAAK;SACN,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,KAA4B;YAC1C,OAAO,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAA4B;YAC9C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/classification-override-store.d.ts

@@ -0,0 +1,24 @@
+/**
+ * createPrismaClassificationOverrideStore — Prisma-backed implementation of
+ * the SDK ClassificationOverrideStore contract introduced by QAP-081.
+ *
+ * Sprint 8 (Policy Governance, Phase 1). Operator-defined overrides keyed
+ * by (classification, surface). Three modes:
+ *
+ *   - BLOCK_AUTO_FIX     — never auto-fix this (classification, surface)
+ *   - FORCE_ESCALATION   — route directly to ESCALATION bucket
+ *   - DOWNGRADE_TIER     — replace the resolved RiskTier with `downgradeTier`
+ *
+ * Tenant isolation: every method scopes by projectId. findOverride
+ * resolution: exact-surface match wins over wildcard (surface=null).
+ * Cross-project ids return null on findOverride / throw `not_found` on
+ * deleteOverride. Pattern D from docs/testing.md applies.
+ */
+import type { PrismaClient } from './prisma.js';
+import { type ClassificationOverrideStore } from '@derwinjs/sdk';
+export interface PrismaClassificationOverrideStoreConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+}
+export declare function createPrismaClassificationOverrideStore(config: PrismaClassificationOverrideStoreConfig): ClassificationOverrideStore;
+//# sourceMappingURL=classification-override-store.d.ts.map

package/dist/classification-override-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification-override-store.d.ts","sourceRoot":"","sources":["../src/classification-override-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAKL,KAAK,2BAA2B,EAEjC,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,uCAAuC;IACtD,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;CACtB;AAyFD,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,uCAAuC,GAC9C,2BAA2B,CAyF7B"}

package/dist/classification-override-store.js

@@ -0,0 +1,131 @@
+/**
+ * createPrismaClassificationOverrideStore — Prisma-backed implementation of
+ * the SDK ClassificationOverrideStore contract introduced by QAP-081.
+ *
+ * Sprint 8 (Policy Governance, Phase 1). Operator-defined overrides keyed
+ * by (classification, surface). Three modes:
+ *
+ *   - BLOCK_AUTO_FIX     — never auto-fix this (classification, surface)
+ *   - FORCE_ESCALATION   — route directly to ESCALATION bucket
+ *   - DOWNGRADE_TIER     — replace the resolved RiskTier with `downgradeTier`
+ *
+ * Tenant isolation: every method scopes by projectId. findOverride
+ * resolution: exact-surface match wins over wildcard (surface=null).
+ * Cross-project ids return null on findOverride / throw `not_found` on
+ * deleteOverride. Pattern D from docs/testing.md applies.
+ */
+import { ClassificationOverrideStoreError, OverrideModeValues, RiskTierValues, } from '@derwinjs/sdk';
+// ─── Validation ──────────────────────────────────────────────────────────
+function validateCreateInput(input) {
+    if (typeof input.classification !== 'string' || input.classification.length === 0) {
+        throw new ClassificationOverrideStoreError('invalid_input', 'ClassificationOverrideStore: classification is required');
+    }
+    if (!OverrideModeValues.includes(input.overrideMode)) {
+        throw new ClassificationOverrideStoreError('invalid_input', `ClassificationOverrideStore: overrideMode must be one of ${OverrideModeValues.join(', ')}`);
+    }
+    if (typeof input.reason !== 'string' || input.reason.trim().length === 0) {
+        throw new ClassificationOverrideStoreError('invalid_input', 'ClassificationOverrideStore: reason is required');
+    }
+    if (typeof input.createdBy !== 'string' || input.createdBy.trim().length === 0) {
+        throw new ClassificationOverrideStoreError('invalid_input', 'ClassificationOverrideStore: createdBy is required');
+    }
+    if (input.overrideMode === 'DOWNGRADE_TIER') {
+        if (input.downgradeTier === undefined || input.downgradeTier === null) {
+            throw new ClassificationOverrideStoreError('invalid_input', 'ClassificationOverrideStore: downgradeTier is required when overrideMode === DOWNGRADE_TIER');
+        }
+        if (!RiskTierValues.includes(input.downgradeTier)) {
+            throw new ClassificationOverrideStoreError('invalid_input', `ClassificationOverrideStore: downgradeTier must be one of ${RiskTierValues.join(', ')}`);
+        }
+    }
+    else {
+        // For non-DOWNGRADE_TIER modes, downgradeTier MUST be null/undefined.
+        if (input.downgradeTier !== undefined && input.downgradeTier !== null) {
+            throw new ClassificationOverrideStoreError('invalid_input', 'ClassificationOverrideStore: downgradeTier must be null unless overrideMode === DOWNGRADE_TIER');
+        }
+    }
+}
+function mapOverride(row) {
+    return {
+        id: row.id,
+        projectId: row.projectId,
+        classification: row.classification,
+        surface: row.surface,
+        overrideMode: row.overrideMode,
+        downgradeTier: row.downgradeTier,
+        reason: row.reason,
+        createdBy: row.createdBy,
+        createdAt: row.createdAt,
+    };
+}
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaClassificationOverrideStore(config) {
+    const { prisma } = config;
+    return {
+        async findOverride(input) {
+            // Resolution: exact-surface match wins over wildcard (surface=null).
+            // Implemented as TWO queries (exact first, then wildcard) so the
+            // intent is unambiguous. Both findFirst calls scope by projectId for
+            // tenant isolation.
+            const exact = await prisma.classificationOverride.findFirst({
+                where: {
+                    projectId: input.projectId,
+                    classification: input.classification,
+                    surface: input.surface,
+                },
+                orderBy: { createdAt: 'desc' },
+            });
+            if (exact !== null)
+                return mapOverride(exact);
+            const wildcard = await prisma.classificationOverride.findFirst({
+                where: {
+                    projectId: input.projectId,
+                    classification: input.classification,
+                    surface: null,
+                },
+                orderBy: { createdAt: 'desc' },
+            });
+            if (wildcard !== null)
+                return mapOverride(wildcard);
+            return null;
+        },
+        async listOverrides(input) {
+            const rows = await prisma.classificationOverride.findMany({
+                where: { projectId: input.projectId },
+                orderBy: { createdAt: 'desc' },
+            });
+            return rows.map(mapOverride);
+        },
+        async createOverride(input) {
+            validateCreateInput(input);
+            const row = await prisma.classificationOverride.create({
+                data: {
+                    projectId: input.projectId,
+                    classification: input.classification,
+                    surface: input.surface,
+                    overrideMode: input.overrideMode,
+                    downgradeTier: input.overrideMode === 'DOWNGRADE_TIER'
+                        ? (input.downgradeTier ?? null)
+                        : null,
+                    reason: input.reason,
+                    createdBy: input.createdBy,
+                },
+                select: { id: true },
+            });
+            return { id: row.id };
+        },
+        async deleteOverride(input) {
+            // Tenant-check first via findFirst — same defense-in-depth pattern as
+            // QAPatternStore.updatePatternStatus. Surfacing not_found early gives
+            // callers a typed error rather than a silent no-op.
+            const existing = await prisma.classificationOverride.findFirst({
+                where: { id: input.overrideId, projectId: input.projectId },
+                select: { id: true },
+            });
+            if (existing === null) {
+                throw new ClassificationOverrideStoreError('not_found', `ClassificationOverride ${input.overrideId} not found in project ${input.projectId}`);
+            }
+            await prisma.classificationOverride.delete({ where: { id: input.overrideId } });
+        },
+    };
+}
+//# sourceMappingURL=classification-override-store.js.map

package/dist/classification-override-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification-override-store.js","sourceRoot":"","sources":["../src/classification-override-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EACL,gCAAgC,EAChC,kBAAkB,EAClB,cAAc,GAIf,MAAM,eAAe,CAAC;AASvB,4EAA4E;AAE5E,SAAS,mBAAmB,CAAC,KAM5B;IACC,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,gCAAgC,CACxC,eAAe,EACf,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,gCAAgC,CACxC,eAAe,EACf,4DAA4D,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5F,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,gCAAgC,CACxC,eAAe,EACf,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,gCAAgC,CACxC,eAAe,EACf,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,gBAAgB,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YACtE,MAAM,IAAI,gCAAgC,CACxC,eAAe,EACf,6FAA6F,CAC9F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAgD,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,gCAAgC,CACxC,eAAe,EACf,6DAA6D,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,sEAAsE;QACtE,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YACtE,MAAM,IAAI,gCAAgC,CACxC,eAAe,EACf,gGAAgG,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAgBD,SAAS,WAAW,CAAC,GAAgB;IACnC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,uCAAuC,CACrD,MAA+C;IAE/C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,KAIlB;YACC,qEAAqE;YACrE,iEAAiE;YACjE,qEAAqE;YACrE,oBAAoB;YACpB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC;gBAC1D,KAAK,EAAE;oBACL,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB;gBACD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC/B,CAAC,CAAC;YACH,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;YAE9C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC;gBAC7D,KAAK,EAAE;oBACL,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,OAAO,EAAE,IAAI;iBACd;gBACD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC/B,CAAC,CAAC;YACH,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;YAEpD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAA4B;YAC9C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,QAAQ,CAAC;gBACxD,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;gBACrC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC/B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,KAQpB;YACC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC;gBACrD,IAAI,EAAE;oBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,aAAa,EACX,KAAK,CAAC,YAAY,KAAK,gBAAgB;wBACrC,CAAC,CAAE,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAA4C;wBAC3E,CAAC,CAAC,IAAI;oBACV,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B;gBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QACxB,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,KAAgD;YACnE,sEAAsE;YACtE,sEAAsE;YACtE,oDAAoD;YACpD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC;gBAC7D,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;gBAC3D,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,IAAI,gCAAgC,CACxC,WAAW,EACX,0BAA0B,KAAK,CAAC,UAAU,yBAAyB,KAAK,CAAC,SAAS,EAAE,CACrF,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/freeze-window-evaluator.d.ts

@@ -0,0 +1,62 @@
+/**
+ * createPrismaFreezeWindowEvaluator — Prisma-backed implementation of the
+ * SDK FreezeWindowEvaluator contract introduced by QAP-083.
+ *
+ * Sprint 8 Phase 2 (Policy Governance). Operator-defined recurring time
+ * windows during which auto-fix dispatch is partially or fully blocked.
+ *
+ * # Cron evaluator
+ *
+ * Embedded, dependency-free. Supports a SUBSET of standard 5-field cron:
+ * `minute hour dayOfMonth month dayOfWeek`. Each field accepts:
+ *   - `*` — wildcard (any value in the field's allowed range)
+ *   - exact non-negative integer in the field's allowed range
+ *
+ * NOT supported (intentional MVP scope): `*\/N` step values, `M-N` ranges,
+ * comma-separated lists, named months/days, `?`, `L`, `W`, `#`. Sprint 9's
+ * policy editor may extend this when richer scheduling is needed; until
+ * then, operators compose multiple FreezeWindow rows for OR semantics
+ * (e.g., separate rows for "every Friday 5pm" and "every Saturday 9am").
+ *
+ * Algorithm: `mostRecentFire(cron, at)` walks BACKWARDS minute-by-minute
+ * from `at` for at most `MAX_LOOKBACK_MINUTES` and returns the first time
+ * the cron matches. The dispatcher only ever asks "did this fire within
+ * the past durationMinutes?"; we cap the search at 7 days of minutes
+ * (10080) which comfortably exceeds any practical durationMinutes.
+ *
+ * # Tenant isolation
+ *
+ * Every method scopes by projectId. Pattern D — wrong-project /
+ * unknown-project queries return empty arrays / not_found errors.
+ */
+import type { PrismaClient } from './prisma.js';
+import { type FreezeWindowEvaluator } from '@derwinjs/sdk';
+export interface PrismaFreezeWindowEvaluatorConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+}
+/**
+ * Parsed cron — each field is either null (wildcard `*`) or a literal int.
+ */
+interface ParsedCron {
+    minute: number | null;
+    hour: number | null;
+    dayOfMonth: number | null;
+    month: number | null;
+    dayOfWeek: number | null;
+}
+/**
+ * Parse a 5-field cron expression. Throws FreezeWindowEvaluatorError
+ * (`invalid_cron`) on bad input. Whitespace-tolerant — splits on /\s+/.
+ */
+export declare function parseCron(expr: string): ParsedCron;
+/**
+ * Find the most recent time at or before `at` when the cron fires.
+ * Returns null if no fire within the past MAX_LOOKBACK_MINUTES (which
+ * exceeds any practical durationMinutes — windows beyond a week are out
+ * of scope for the MVP).
+ */
+export declare function mostRecentFire(cron: ParsedCron, at: Date): Date | null;
+export declare function createPrismaFreezeWindowEvaluator(config: PrismaFreezeWindowEvaluatorConfig): FreezeWindowEvaluator;
+export {};
+//# sourceMappingURL=freeze-window-evaluator.d.ts.map

package/dist/freeze-window-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"freeze-window-evaluator.d.ts","sourceRoot":"","sources":["../src/freeze-window-evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,iCAAiC;IAChD,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;CACtB;AAmBD;;GAEG;AACH,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAyClD;AAgCD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAoBtE;AA+ED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,iCAAiC,GACxC,qBAAqB,CA4DvB"}

package/dist/freeze-window-evaluator.js

@@ -0,0 +1,236 @@
+/**
+ * createPrismaFreezeWindowEvaluator — Prisma-backed implementation of the
+ * SDK FreezeWindowEvaluator contract introduced by QAP-083.
+ *
+ * Sprint 8 Phase 2 (Policy Governance). Operator-defined recurring time
+ * windows during which auto-fix dispatch is partially or fully blocked.
+ *
+ * # Cron evaluator
+ *
+ * Embedded, dependency-free. Supports a SUBSET of standard 5-field cron:
+ * `minute hour dayOfMonth month dayOfWeek`. Each field accepts:
+ *   - `*` — wildcard (any value in the field's allowed range)
+ *   - exact non-negative integer in the field's allowed range
+ *
+ * NOT supported (intentional MVP scope): `*\/N` step values, `M-N` ranges,
+ * comma-separated lists, named months/days, `?`, `L`, `W`, `#`. Sprint 9's
+ * policy editor may extend this when richer scheduling is needed; until
+ * then, operators compose multiple FreezeWindow rows for OR semantics
+ * (e.g., separate rows for "every Friday 5pm" and "every Saturday 9am").
+ *
+ * Algorithm: `mostRecentFire(cron, at)` walks BACKWARDS minute-by-minute
+ * from `at` for at most `MAX_LOOKBACK_MINUTES` and returns the first time
+ * the cron matches. The dispatcher only ever asks "did this fire within
+ * the past durationMinutes?"; we cap the search at 7 days of minutes
+ * (10080) which comfortably exceeds any practical durationMinutes.
+ *
+ * # Tenant isolation
+ *
+ * Every method scopes by projectId. Pattern D — wrong-project /
+ * unknown-project queries return empty arrays / not_found errors.
+ */
+import { FreezeWindowEvaluatorError, } from '@derwinjs/sdk';
+// ─── Cron evaluator (embedded, dependency-free) ──────────────────────────
+/**
+ * Per-field allowed range. dayOfMonth/month are 1-indexed; minute, hour,
+ * and dayOfWeek are 0-indexed. dayOfWeek: 0 = Sunday, 6 = Saturday
+ * (POSIX cron convention).
+ */
+const FIELD_RANGES = [
+    [0, 59], // minute
+    [0, 23], // hour
+    [1, 31], // dayOfMonth
+    [1, 12], // month
+    [0, 6], // dayOfWeek
+];
+const FIELD_NAMES = ['minute', 'hour', 'dayOfMonth', 'month', 'dayOfWeek'];
+/**
+ * Parse a 5-field cron expression. Throws FreezeWindowEvaluatorError
+ * (`invalid_cron`) on bad input. Whitespace-tolerant — splits on /\s+/.
+ */
+export function parseCron(expr) {
+    if (typeof expr !== 'string' || expr.trim().length === 0) {
+        throw new FreezeWindowEvaluatorError('invalid_cron', 'FreezeWindowEvaluator: cronExpression must be a non-empty string');
+    }
+    const fields = expr.trim().split(/\s+/);
+    if (fields.length !== 5) {
+        throw new FreezeWindowEvaluatorError('invalid_cron', `FreezeWindowEvaluator: cronExpression must have 5 fields (got ${String(fields.length)}: ${JSON.stringify(expr)})`);
+    }
+    const parsed = [];
+    for (const [i, raw] of fields.entries()) {
+        const range = FIELD_RANGES[i];
+        const fieldName = FIELD_NAMES[i];
+        if (range === undefined || fieldName === undefined)
+            continue;
+        const [min, max] = range;
+        if (raw === '*') {
+            parsed.push(null);
+            continue;
+        }
+        if (!/^\d+$/.test(raw)) {
+            throw new FreezeWindowEvaluatorError('invalid_cron', `FreezeWindowEvaluator: ${fieldName} must be '*' or an integer (got ${JSON.stringify(raw)})`);
+        }
+        const n = Number.parseInt(raw, 10);
+        if (n < min || n > max) {
+            throw new FreezeWindowEvaluatorError('invalid_cron', `FreezeWindowEvaluator: ${fieldName} must be in [${String(min)}, ${String(max)}] (got ${String(n)})`);
+        }
+        parsed.push(n);
+    }
+    const [minute = null, hour = null, dayOfMonth = null, month = null, dayOfWeek = null] = parsed;
+    return { minute, hour, dayOfMonth, month, dayOfWeek };
+}
+/**
+ * True iff the supplied Date matches the parsed cron.
+ *
+ * NOTE: cron's POSIX convention is that dayOfMonth and dayOfWeek are
+ * OR-combined when BOTH are restricted (non-`*`). When at least one is `*`,
+ * the other applies normally. This impl follows that convention.
+ */
+function cronMatches(cron, at) {
+    const minute = at.getUTCMinutes();
+    const hour = at.getUTCHours();
+    const dom = at.getUTCDate();
+    const month = at.getUTCMonth() + 1; // JS month is 0-indexed
+    const dow = at.getUTCDay();
+    if (cron.minute !== null && cron.minute !== minute)
+        return false;
+    if (cron.hour !== null && cron.hour !== hour)
+        return false;
+    if (cron.month !== null && cron.month !== month)
+        return false;
+    // POSIX dom/dow OR semantics.
+    if (cron.dayOfMonth !== null && cron.dayOfWeek !== null) {
+        if (cron.dayOfMonth !== dom && cron.dayOfWeek !== dow)
+            return false;
+    }
+    else {
+        if (cron.dayOfMonth !== null && cron.dayOfMonth !== dom)
+            return false;
+        if (cron.dayOfWeek !== null && cron.dayOfWeek !== dow)
+            return false;
+    }
+    return true;
+}
+const MAX_LOOKBACK_MINUTES = 60 * 24 * 7; // 7 days
+/**
+ * Find the most recent time at or before `at` when the cron fires.
+ * Returns null if no fire within the past MAX_LOOKBACK_MINUTES (which
+ * exceeds any practical durationMinutes — windows beyond a week are out
+ * of scope for the MVP).
+ */
+export function mostRecentFire(cron, at) {
+    // Round down to the start of the current minute — cron fires at minute
+    // boundaries. seconds/milliseconds set to zero.
+    const start = new Date(Date.UTC(at.getUTCFullYear(), at.getUTCMonth(), at.getUTCDate(), at.getUTCHours(), at.getUTCMinutes(), 0, 0));
+    let cursor = start;
+    for (let i = 0; i <= MAX_LOOKBACK_MINUTES; i++) {
+        if (cronMatches(cron, cursor))
+            return cursor;
+        cursor = new Date(cursor.getTime() - 60_000);
+    }
+    return null;
+}
+/**
+ * True iff the freeze window is active at `at` — i.e., its cron fired
+ * within the past `durationMinutes`.
+ */
+function windowIsActive(cronExpression, durationMinutes, at) {
+    let cron;
+    try {
+        cron = parseCron(cronExpression);
+    }
+    catch {
+        // A corrupted row should not crash the dispatcher. Treat it as inactive
+        // (defense-in-depth) — the createWindow validator prevents bad cron at
+        // write time, so this branch is for legacy / direct-DB-edit cases.
+        return false;
+    }
+    const lastFire = mostRecentFire(cron, at);
+    if (lastFire === null)
+        return false;
+    return at.getTime() - lastFire.getTime() < durationMinutes * 60_000;
+}
+// ─── Validation ──────────────────────────────────────────────────────────
+function validateCreateInput(input) {
+    if (typeof input.projectId !== 'string' || input.projectId.length === 0) {
+        throw new FreezeWindowEvaluatorError('invalid_input', 'FreezeWindowEvaluator: projectId is required');
+    }
+    if (typeof input.label !== 'string' || input.label.trim().length === 0) {
+        throw new FreezeWindowEvaluatorError('invalid_input', 'FreezeWindowEvaluator: label is required');
+    }
+    if (typeof input.durationMinutes !== 'number' ||
+        !Number.isFinite(input.durationMinutes) ||
+        !Number.isInteger(input.durationMinutes) ||
+        input.durationMinutes <= 0) {
+        throw new FreezeWindowEvaluatorError('invalid_input', `FreezeWindowEvaluator: durationMinutes must be a positive integer (got ${String(input.durationMinutes)})`);
+    }
+    // parseCron throws invalid_cron on bad input.
+    parseCron(input.cronExpression);
+}
+function mapWindow(row) {
+    return {
+        id: row.id,
+        projectId: row.projectId,
+        cronExpression: row.cronExpression,
+        durationMinutes: row.durationMinutes,
+        label: row.label,
+        blocksDispatch: row.blocksDispatch,
+        enabled: row.enabled,
+        createdAt: row.createdAt,
+    };
+}
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaFreezeWindowEvaluator(config) {
+    const { prisma } = config;
+    return {
+        async getActiveWindows(input) {
+            const at = input.at ?? new Date();
+            const rows = await prisma.freezeWindow.findMany({
+                where: { projectId: input.projectId, enabled: true },
+            });
+            return rows
+                .filter((row) => windowIsActive(row.cronExpression, row.durationMinutes, at))
+                .map(mapWindow);
+        },
+        async isDispatchBlocked(input) {
+            const at = input.at ?? new Date();
+            const rows = await prisma.freezeWindow.findMany({
+                where: { projectId: input.projectId, enabled: true, blocksDispatch: true },
+            });
+            return rows.some((row) => windowIsActive(row.cronExpression, row.durationMinutes, at));
+        },
+        async listWindows(input) {
+            const rows = await prisma.freezeWindow.findMany({
+                where: { projectId: input.projectId },
+                orderBy: { createdAt: 'desc' },
+            });
+            return rows.map(mapWindow);
+        },
+        async createWindow(input) {
+            validateCreateInput(input);
+            const row = await prisma.freezeWindow.create({
+                data: {
+                    projectId: input.projectId,
+                    cronExpression: input.cronExpression,
+                    durationMinutes: input.durationMinutes,
+                    label: input.label,
+                    blocksDispatch: input.blocksDispatch,
+                    enabled: input.enabled,
+                },
+                select: { id: true },
+            });
+            return { id: row.id };
+        },
+        async deleteWindow(input) {
+            const existing = await prisma.freezeWindow.findFirst({
+                where: { id: input.windowId, projectId: input.projectId },
+                select: { id: true },
+            });
+            if (existing === null) {
+                throw new FreezeWindowEvaluatorError('not_found', `FreezeWindow ${input.windowId} not found in project ${input.projectId}`);
+            }
+            await prisma.freezeWindow.delete({ where: { id: input.windowId } });
+        },
+    };
+}
+//# sourceMappingURL=freeze-window-evaluator.js.map

package/dist/freeze-window-evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"freeze-window-evaluator.js","sourceRoot":"","sources":["../src/freeze-window-evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EACL,0BAA0B,GAG3B,MAAM,eAAe,CAAC;AASvB,4EAA4E;AAE5E;;;;GAIG;AACH,MAAM,YAAY,GAA2C;IAC3D,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS;IAClB,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO;IAChB,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,aAAa;IACtB,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ;IACjB,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY;CACrB,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,CAAU,CAAC;AAapF;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,0BAA0B,CAClC,cAAc,EACd,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,0BAA0B,CAClC,cAAc,EACd,iEAAiE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CACnH,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;YAAE,SAAS;QAC7D,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,0BAA0B,CAClC,cAAc,EACd,0BAA0B,SAAS,mCAAmC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAC7F,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,0BAA0B,CAClC,cAAc,EACd,0BAA0B,SAAS,gBAAgB,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,CAAC,CAAC,GAAG,CACrG,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,UAAU,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;IAC/F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,IAAgB,EAAE,EAAQ;IAC7C,MAAM,MAAM,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,wBAAwB;IAC5D,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;IAE3B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAE9D,8BAA8B;IAC9B,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACtE,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,EAAQ;IACvD,uEAAuE;IACvE,gDAAgD;IAChD,MAAM,KAAK,GAAG,IAAI,IAAI,CACpB,IAAI,CAAC,GAAG,CACN,EAAE,CAAC,cAAc,EAAE,EACnB,EAAE,CAAC,WAAW,EAAE,EAChB,EAAE,CAAC,UAAU,EAAE,EACf,EAAE,CAAC,WAAW,EAAE,EAChB,EAAE,CAAC,aAAa,EAAE,EAClB,CAAC,EACD,CAAC,CACF,CACF,CAAC;IACF,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,oBAAoB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAC7C,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,cAAsB,EAAE,eAAuB,EAAE,EAAQ;IAC/E,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,uEAAuE;QACvE,mEAAmE;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,eAAe,GAAG,MAAM,CAAC;AACtE,CAAC;AAED,4EAA4E;AAE5E,SAAS,mBAAmB,CAAC,KAA6C;IACxE,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,IACE,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;QACzC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC;QACvC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC;QACxC,KAAK,CAAC,eAAe,IAAI,CAAC,EAC1B,CAAC;QACD,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,0EAA0E,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAC3G,CAAC;IACJ,CAAC;IACD,8CAA8C;IAC9C,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAeD,SAAS,SAAS,CAAC,GAAoB;IACrC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,iCAAiC,CAC/C,MAAyC;IAEzC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,OAAO;QACL,KAAK,CAAC,gBAAgB,CAAC,KAAuC;YAC5D,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;gBAC9C,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;aACrD,CAAC,CAAC;YACH,OAAO,IAAI;iBACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;iBAC5E,GAAG,CAAC,SAAS,CAAC,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,KAAuC;YAC7D,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;gBAC9C,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;aAC3E,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QACzF,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAA4B;YAC5C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;gBAC9C,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;gBACrC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC/B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,KAA6C;YAC9D,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;gBAC3C,IAAI,EAAE;oBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,eAAe,EAAE,KAAK,CAAC,eAAe;oBACtC,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,OAAO,EAAE,KAAK,CAAC,OAAO;iBACvB;gBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QACxB,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,KAA8C;YAC/D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC;gBACnD,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;gBACzD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,IAAI,0BAA0B,CAClC,WAAW,EACX,gBAAgB,KAAK,CAAC,QAAQ,yBAAyB,KAAK,CAAC,SAAS,EAAE,CACzE,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;KACF,CAAC;AACJ,CAAC"}