@duckcodeailabs/dql-agent 1.6.33 → 1.7.0

package/dist/metadata/analytical-policy.d.ts

@@ -0,0 +1,51 @@
+/** Deterministic manifest-v3 analytical path planning and SQL validation. */
+import { type DQLManifest, type ManifestModelRelationship } from '@duckcodeailabs/dql-core';
+import type { DomainContextEnvelope } from '../domain-context.js';
+export type AnalyticalPolicyCode = 'attribution_policy_required' | 'stale_certification' | 'relationship_not_certified' | 'relationship_evidence_missing' | 'relationship_evidence_expired' | 'relationship_proof_invalid' | 'relationship_not_exported' | 'unsafe_relationship' | 'unbound_relation' | 'unplanned_join' | 'join_key_mismatch' | 'purpose_not_allowed';
+export interface AnalyticalJoinPlanEdge {
+    relationshipId: string;
+    fromEntity: string;
+    toEntity: string;
+    fromRelation?: string;
+    toRelation?: string;
+    keys: Array<{
+        from: string;
+        to: string;
+    }>;
+    cardinality: string;
+    fanout: string;
+    importRefs: string[];
+}
+export interface AnalyticalPathPlan {
+    safe: boolean;
+    code?: AnalyticalPolicyCode;
+    message?: string;
+    entities: string[];
+    relationshipIds: string[];
+    edges: AnalyticalJoinPlanEdge[];
+}
+export interface AnalyticalPathRequest {
+    entityIds: string[];
+    ownerDomain?: string;
+    purpose?: string;
+    /** Server-resolved authorization boundary. Raw client domain hints are insufficient. */
+    domainContext?: DomainContextEnvelope;
+    measureEntities?: string[];
+    dimensionEntities?: string[];
+}
+export interface AnalyticalRelationshipDecision {
+    executable: boolean;
+    code?: AnalyticalPolicyCode;
+    message: string;
+}
+/**
+ * Re-check the complete executable-join invariant at the point of use.
+ *
+ * `automaticJoinAllowed` is the compiler's summary bit and remains mandatory,
+ * but consumers also validate its source proof so stale/corrupt hand-authored
+ * manifests cannot turn a review-only relationship into SQL authorization.
+ */
+export declare function assessAnalyticalRelationship(relationship: ManifestModelRelationship, manifest?: DQLManifest, now?: Date): AnalyticalRelationshipDecision;
+export declare function planAnalyticalPath(manifest: DQLManifest, request: AnalyticalPathRequest): AnalyticalPathPlan;
+export declare function validateAnalyticalSql(sql: string, manifest: DQLManifest, dialect?: string, purpose?: string, domainContext?: DomainContextEnvelope): AnalyticalPathPlan;
+//# sourceMappingURL=analytical-policy.d.ts.map

package/dist/metadata/analytical-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytical-policy.d.ts","sourceRoot":"","sources":["../../src/metadata/analytical-policy.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAGL,KAAK,WAAW,EAEhB,KAAK,yBAAyB,EAC/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAElE,MAAM,MAAM,oBAAoB,GAC5B,6BAA6B,GAC7B,qBAAqB,GACrB,4BAA4B,GAC5B,+BAA+B,GAC/B,+BAA+B,GAC/B,4BAA4B,GAC5B,2BAA2B,GAC3B,qBAAqB,GACrB,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,KAAK,EAAE,sBAAsB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,8BAA8B;IAC7C,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,yBAAyB,EACvC,QAAQ,CAAC,EAAE,WAAW,EACtB,GAAG,OAAa,GACf,8BAA8B,CA8DhC;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,GAAG,kBAAkB,CAsE5G;AAiED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,WAAW,EACrB,OAAO,SAAW,EAClB,OAAO,CAAC,EAAE,MAAM,EAChB,aAAa,CAAC,EAAE,qBAAqB,GACpC,kBAAkB,CAwCpB"}

package/dist/metadata/analytical-policy.js

@@ -0,0 +1,309 @@
+/** Deterministic manifest-v3 analytical path planning and SQL validation. */
+import { analyzeSqlReferences, relationshipValidationProofFingerprint, } from '@duckcodeailabs/dql-core';
+/**
+ * Re-check the complete executable-join invariant at the point of use.
+ *
+ * `automaticJoinAllowed` is the compiler's summary bit and remains mandatory,
+ * but consumers also validate its source proof so stale/corrupt hand-authored
+ * manifests cannot turn a review-only relationship into SQL authorization.
+ */
+export function assessAnalyticalRelationship(relationship, manifest, now = new Date()) {
+    if (relationship.status !== 'certified') {
+        return denied('relationship_not_certified', `Relationship "${relationship.id}" is ${relationship.status}, not certified.`);
+    }
+    if (relationship.staleCertification) {
+        return denied('stale_certification', `Relationship "${relationship.id}" is stale and cannot authorize generated SQL.`);
+    }
+    if (!relationship.certificationFingerprint?.trim()) {
+        return denied('relationship_proof_invalid', `Relationship "${relationship.id}" has no valid certification fingerprint.`);
+    }
+    const validation = relationship.validation;
+    if (!validation) {
+        return denied('relationship_evidence_missing', `Relationship "${relationship.id}" has no warehouse validation evidence.`);
+    }
+    if (validation.status !== 'passed') {
+        return denied('relationship_proof_invalid', `Relationship "${relationship.id}" warehouse validation is ${validation.status}, not passed.`);
+    }
+    if (!validDate(validation.checkedAt) || !validation.queryFingerprint?.trim() || !validValidationCounts(validation)) {
+        return denied('relationship_proof_invalid', `Relationship "${relationship.id}" has invalid warehouse validation proof.`);
+    }
+    const modeling = manifest?.modeling;
+    const fromEntity = modeling?.entities[relationship.from];
+    const toEntity = modeling?.entities[relationship.to];
+    const fromRelation = manifest?.dbtProvenance?.nodes[fromEntity?.dbtUniqueId ?? '']?.relation;
+    const toRelation = manifest?.dbtProvenance?.nodes[toEntity?.dbtUniqueId ?? '']?.relation;
+    if (!validation.proofFingerprint?.trim()) {
+        return denied('relationship_proof_invalid', `Relationship "${relationship.id}" has legacy or unbound warehouse evidence; run relationship validation again.`);
+    }
+    if (!manifest || !fromEntity || !toEntity) {
+        return denied('relationship_proof_invalid', `Relationship "${relationship.id}" validation proof cannot be bound to its manifest-v3 entities.`);
+    }
+    const expectedProof = relationshipValidationProofFingerprint({
+        fromRelation,
+        toRelation,
+        keys: relationship.keys,
+        cardinality: relationship.cardinality,
+        fanout: relationship.fanout,
+        queryFingerprint: validation.queryFingerprint,
+    });
+    if (validation.proofFingerprint !== expectedProof) {
+        return denied('relationship_proof_invalid', `Relationship "${relationship.id}" validation proof no longer matches its query, relations, keys, cardinality, or fanout policy.`);
+    }
+    if (relationship.evidenceExpiresAt) {
+        const expiresAt = Date.parse(relationship.evidenceExpiresAt);
+        if (!Number.isFinite(expiresAt)) {
+            return denied('relationship_proof_invalid', `Relationship "${relationship.id}" has an invalid evidence expiry timestamp.`);
+        }
+        if (expiresAt <= now.getTime()) {
+            return denied('relationship_evidence_expired', `Relationship "${relationship.id}" warehouse validation evidence expired at ${relationship.evidenceExpiresAt}.`);
+        }
+    }
+    if (relationship.keys.length === 0 || relationship.keys.some((key) => !key.from.trim() || !key.to.trim())) {
+        return denied('relationship_proof_invalid', `Relationship "${relationship.id}" has no valid physical join-key proof.`);
+    }
+    if (relationship.fanout !== 'safe'
+        || !['one_to_one', 'one_to_many', 'many_to_one'].includes(relationship.cardinality)) {
+        return denied('unsafe_relationship', `Relationship "${relationship.id}" is not fanout-safe for automatic joins.`);
+    }
+    if (!relationship.automaticJoinAllowed) {
+        return denied('unsafe_relationship', `Relationship "${relationship.id}" is not authorized for automatic joins.`);
+    }
+    return { executable: true, message: `Relationship "${relationship.id}" is certified for automatic joins.` };
+}
+export function planAnalyticalPath(manifest, request) {
+    const modeling = manifest.modeling;
+    if (manifest.manifestVersion !== 3 || !modeling)
+        return allowed([], []);
+    const requested = [...new Set(request.entityIds)];
+    const resolvedEntities = requested.map((id) => {
+        if (modeling.entities[id])
+            return id;
+        const ownerDomain = request.domainContext?.activeDomain ?? request.ownerDomain;
+        const matches = Object.entries(modeling.entities).filter(([, entity]) => entity.qualifiedId === id
+            || (Boolean(ownerDomain) && entity.domain === ownerDomain && entity.localId === id));
+        return matches.length === 1 ? matches[0][0] : undefined;
+    });
+    const unresolved = requested.filter((_id, index) => !resolvedEntities[index]);
+    if (unresolved.length > 0) {
+        return blocked('unbound_relation', [], [], `Unknown or ambiguous qualified analytical entity id(s): ${unresolved.join(', ')}.`);
+    }
+    const entities = resolvedEntities.filter((id) => Boolean(id)).sort();
+    if (entities.length < 2)
+        return allowed(entities, []);
+    const relationships = Object.values(modeling.relationships);
+    const directlyRelevant = relationships.filter((relationship) => entities.includes(relationship.from) || entities.includes(relationship.to));
+    const attribution = directlyRelevant.find((relationship) => relationship.fanout === 'attribution_required'
+        && entities.includes(relationship.from) && entities.includes(relationship.to));
+    if (attribution)
+        return blocked('attribution_policy_required', entities, [attribution], `Relationship "${attribution.id}" requires an attribution policy or allocation policy before DQL can join these entities.`);
+    const adjacency = new Map();
+    for (const entity of Object.keys(modeling.entities))
+        adjacency.set(entity, []);
+    for (const relationship of relationships.filter((value) => assessAnalyticalRelationship(value, manifest).executable)) {
+        adjacency.get(relationship.from)?.push({ next: relationship.to, relationship });
+        adjacency.get(relationship.to)?.push({ next: relationship.from, relationship });
+    }
+    const selected = new Map();
+    const connected = new Set([entities[0]]);
+    for (const target of entities.slice(1)) {
+        const path = shortestPath([...connected], target, adjacency);
+        if (!path) {
+            const candidate = relationships.find((relationship) => (connected.has(relationship.from) && relationship.to === target)
+                || (connected.has(relationship.to) && relationship.from === target));
+            if (candidate) {
+                const decision = assessAnalyticalRelationship(candidate, manifest);
+                if (!decision.executable && decision.code !== 'unsafe_relationship') {
+                    return blocked(decision.code ?? 'unsafe_relationship', entities, [candidate], decision.message);
+                }
+            }
+            if (candidate?.crossDomain)
+                return blocked('relationship_not_exported', entities, candidate ? [candidate] : [], 'The cross-domain path is missing a certified export/import interface or valid purpose.');
+            return blocked('unsafe_relationship', entities, candidate ? [candidate] : [], `No certified, validated, fanout-safe DQL path connects ${entities.join(', ')}.`);
+        }
+        for (const relationship of path) {
+            selected.set(relationship.qualifiedId ?? relationship.id, relationship);
+            connected.add(relationship.from);
+            connected.add(relationship.to);
+        }
+    }
+    for (const relationship of selected.values()) {
+        if (relationship.crossDomain) {
+            const authorization = authorizeCrossDomainRelationship(manifest, relationship, request.domainContext, request.purpose);
+            if (!authorization.safe)
+                return blocked(authorization.code, entities, [relationship], authorization.message);
+        }
+        if (relationship.aggregation) {
+            const missingMeasure = request.measureEntities?.find((entity) => !relationship.aggregation?.measuresFrom.includes(entity));
+            const missingDimension = request.dimensionEntities?.find((entity) => !relationship.aggregation?.dimensionsFrom.includes(entity));
+            if (missingMeasure || missingDimension) {
+                return blocked('unsafe_relationship', entities, [relationship], `Relationship "${relationship.id}" does not authorize the requested measure/dimension direction.`);
+            }
+        }
+    }
+    return allowed(entities, [...selected.values()], manifest);
+}
+function denied(code, message) {
+    return { executable: false, code, message };
+}
+function authorizeCrossDomainRelationship(manifest, relationship, context, requestedPurpose) {
+    const purpose = context?.purpose?.trim();
+    if (!context || !purpose) {
+        return { safe: false, code: 'purpose_not_allowed', message: `Cross-domain relationship "${relationship.localId}" requires an explicit analytical purpose.` };
+    }
+    if (requestedPurpose?.trim() && requestedPurpose.trim() !== purpose) {
+        return { safe: false, code: 'purpose_not_allowed', message: `Requested purpose "${requestedPurpose}" does not match the resolved domain context purpose "${purpose}".` };
+    }
+    if (!context.activeDomain || (relationship.ownerDomain && context.activeDomain !== relationship.ownerDomain)) {
+        return { safe: false, code: 'relationship_not_exported', message: `Cross-domain relationship "${relationship.localId}" is not owned by the active domain context.` };
+    }
+    const importRefs = relationship.importRefs ?? [];
+    if (importRefs.length === 0) {
+        return { safe: false, code: 'relationship_not_exported', message: `Cross-domain relationship "${relationship.localId}" has no explicit import interface.` };
+    }
+    const exports = manifest.modeling?.interfaces?.exports ?? {};
+    const contracts = Object.values(manifest.modeling?.contracts ?? {});
+    for (const exportRef of importRefs) {
+        const allowed = context.allowedImports.find((value) => value.exportRef === exportRef && value.purpose === purpose);
+        const exported = exports[exportRef];
+        if (!allowed || !exported || exported.status !== 'certified') {
+            return { safe: false, code: 'relationship_not_exported', message: `Cross-domain relationship "${relationship.localId}" is missing a certified allowed import for "${exportRef}" and purpose "${purpose}".` };
+        }
+        const contract = exported.contract
+            ? contracts.find((value) => value.qualifiedId === exported.contract
+                || value.id === exported.contract
+                || (value.domain === exported.domain && value.localId === exported.contract))
+            : undefined;
+        const contractEntityCompatible = !exported.entity || Boolean(contract?.entities.includes(exported.entity));
+        const contractPurposeCompatible = !contract?.purpose || contract.purpose === purpose;
+        if (!contract || contract.status !== 'certified' || !contractEntityCompatible || !contractPurposeCompatible) {
+            return { safe: false, code: 'relationship_not_exported', message: `Cross-domain export "${exportRef}" has no compatible certified contract for purpose "${purpose}".` };
+        }
+    }
+    return { safe: true };
+}
+function validDate(value) {
+    return value.trim().length > 0 && Number.isFinite(Date.parse(value));
+}
+function validValidationCounts(validation) {
+    return [
+        validation.fromRows,
+        validation.toRows,
+        validation.joinedRows,
+        validation.fromNullKeys,
+        validation.toNullKeys,
+        validation.unmatchedFrom,
+        validation.maxFromPerKey,
+        validation.maxToPerKey,
+    ].every((value) => Number.isFinite(value) && value >= 0);
+}
+export function validateAnalyticalSql(sql, manifest, dialect = 'duckdb', purpose, domainContext) {
+    if (manifest.manifestVersion !== 3 || !manifest.modeling || !manifest.dbtProvenance)
+        return allowed([], []);
+    const analysis = analyzeSqlReferences(sql, dialect);
+    if (!analysis.parsed)
+        return blocked('unplanned_join', [], [], `DQL could not parse generated SQL for analytical policy validation: ${analysis.error ?? 'unknown parse error'}`);
+    const relationEntities = new Map();
+    for (const relation of analysis.tables) {
+        const entity = entityForRelation(relation, manifest);
+        const key = entity ? entityRecordKey(manifest, entity) : undefined;
+        if (entity && key)
+            relationEntities.set(normalizeRelation(relation), { key, entity });
+    }
+    if (analysis.joins.length > 0) {
+        const unbound = analysis.tables.filter((relation) => !entityForRelation(relation, manifest));
+        if (unbound.length > 0)
+            return blocked('unbound_relation', [...new Set([...relationEntities.values()].map((value) => value.key))], [], `Generated join references unbound relation(s): ${unbound.join(', ')}.`);
+    }
+    const plan = planAnalyticalPath(manifest, {
+        entityIds: [...new Set([...relationEntities.values()].map((value) => value.key))],
+        purpose,
+        domainContext,
+    });
+    if (!plan.safe)
+        return plan;
+    for (const join of analysis.joins) {
+        const left = join.leftRelation ? entityForRelation(join.leftRelation, manifest) : undefined;
+        const right = join.rightRelation ? entityForRelation(join.rightRelation, manifest) : undefined;
+        if (!left || !right)
+            return blocked('unbound_relation', plan.entities, [], 'Every generated join endpoint must bind to a DQL analytical entity.');
+        const leftKey = entityRecordKey(manifest, left);
+        const rightKey = entityRecordKey(manifest, right);
+        if (!leftKey || !rightKey)
+            return blocked('unbound_relation', plan.entities, [], 'Every generated join endpoint must resolve to a qualified DQL analytical entity.');
+        const relationship = plan.relationshipIds
+            .map((id) => manifest.modeling?.relationships[id])
+            .find((value) => value && ((value.from === leftKey && value.to === rightKey) || (value.from === rightKey && value.to === leftKey)));
+        if (!relationship)
+            return blocked('unplanned_join', plan.entities, [], `No planned relationship authorizes ${left.id} to ${right.id}.`);
+        const matches = relationship.keys.some((key) => {
+            const direct = relationship.from === leftKey && normalizeColumn(join.leftColumn) === normalizeColumn(key.from) && normalizeColumn(join.rightColumn) === normalizeColumn(key.to);
+            const reverse = relationship.from === rightKey && normalizeColumn(join.leftColumn) === normalizeColumn(key.to) && normalizeColumn(join.rightColumn) === normalizeColumn(key.from);
+            return direct || reverse;
+        });
+        if (!matches)
+            return blocked('join_key_mismatch', plan.entities, [relationship], `Join predicate ${join.leftColumn} = ${join.rightColumn} does not match certified keys for "${relationship.id}".`);
+    }
+    return plan;
+}
+function entityRecordKey(manifest, entity) {
+    return Object.entries(manifest.modeling?.entities ?? {}).find(([, candidate]) => candidate === entity || (Boolean(entity.qualifiedId) && candidate.qualifiedId === entity.qualifiedId))?.[0];
+}
+function shortestPath(starts, target, adjacency) {
+    const queue = starts.map((entity) => ({ entity, path: [] }));
+    const seen = new Set(starts);
+    while (queue.length > 0) {
+        const current = queue.shift();
+        if (current.entity === target)
+            return current.path;
+        for (const edge of adjacency.get(current.entity) ?? []) {
+            if (seen.has(edge.next))
+                continue;
+            seen.add(edge.next);
+            queue.push({ entity: edge.next, path: [...current.path, edge.relationship] });
+        }
+    }
+    return undefined;
+}
+function entityForRelation(relation, manifest) {
+    const normalized = normalizeRelation(relation);
+    return Object.values(manifest.modeling?.entities ?? {}).find((entity) => {
+        const node = manifest.dbtProvenance?.nodes[entity.dbtUniqueId];
+        return [node?.name, node?.relation].filter(Boolean).some((value) => {
+            const candidate = normalizeRelation(String(value));
+            return candidate === normalized || candidate.endsWith(`.${normalized}`) || normalized.endsWith(`.${candidate}`);
+        });
+    });
+}
+function allowed(entities, relationships, manifest) {
+    return {
+        safe: true,
+        entities,
+        relationshipIds: relationships.map((relationship) => relationshipRecordKey(manifest, relationship)),
+        edges: relationships.map((relationship) => ({
+            relationshipId: relationship.id,
+            fromEntity: relationship.from,
+            toEntity: relationship.to,
+            fromRelation: manifest?.dbtProvenance?.nodes[manifest.modeling?.entities[relationship.from]?.dbtUniqueId ?? '']?.relation,
+            toRelation: manifest?.dbtProvenance?.nodes[manifest.modeling?.entities[relationship.to]?.dbtUniqueId ?? '']?.relation,
+            keys: relationship.keys,
+            cardinality: relationship.cardinality,
+            fanout: relationship.fanout,
+            importRefs: relationship.importRefs ?? [],
+        })),
+    };
+}
+function relationshipRecordKey(manifest, relationship) {
+    return Object.entries(manifest?.modeling?.relationships ?? {}).find(([, candidate]) => candidate === relationship || (Boolean(relationship.qualifiedId) && candidate.qualifiedId === relationship.qualifiedId))?.[0]
+        ?? relationship.qualifiedId
+        ?? relationship.id;
+}
+function blocked(code, entities, relationships, message) {
+    return { safe: false, code, message, entities, relationshipIds: relationships.map((relationship) => relationship.id), edges: [] };
+}
+function normalizeRelation(value) {
+    return value.replace(/["`\[\]]/g, '').trim().toLowerCase();
+}
+function normalizeColumn(value) {
+    return value.replace(/["`\[\]]/g, '').split('.').at(-1)?.trim().toLowerCase() ?? value.toLowerCase();
+}
+//# sourceMappingURL=analytical-policy.js.map

package/dist/metadata/analytical-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytical-policy.js","sourceRoot":"","sources":["../../src/metadata/analytical-policy.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EACL,oBAAoB,EACpB,sCAAsC,GAIvC,MAAM,0BAA0B,CAAC;AAsDlC;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,YAAuC,EACvC,QAAsB,EACtB,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,IAAI,YAAY,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,4BAA4B,EAAE,iBAAiB,YAAY,CAAC,EAAE,QAAQ,YAAY,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,YAAY,CAAC,kBAAkB,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,YAAY,CAAC,EAAE,gDAAgD,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,IAAI,EAAE,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC,4BAA4B,EAAE,iBAAiB,YAAY,CAAC,EAAE,2CAA2C,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC;IAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC,+BAA+B,EAAE,iBAAiB,YAAY,CAAC,EAAE,yCAAyC,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,4BAA4B,EAAE,iBAAiB,YAAY,CAAC,EAAE,6BAA6B,UAAU,CAAC,MAAM,eAAe,CAAC,CAAC;IAC7I,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;QACnH,OAAO,MAAM,CAAC,4BAA4B,EAAE,iBAAiB,YAAY,CAAC,EAAE,2CAA2C,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,CAAC;IACpC,MAAM,UAAU,GAAG,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC;IAC7F,MAAM,UAAU,GAAG,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC;IACzF,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,4BAA4B,EAAE,iBAAiB,YAAY,CAAC,EAAE,gFAAgF,CAAC,CAAC;IAChK,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC,4BAA4B,EAAE,iBAAiB,YAAY,CAAC,EAAE,iEAAiE,CAAC,CAAC;IACjJ,CAAC;IACD,MAAM,aAAa,GAAG,sCAAsC,CAAC;QAC3D,YAAY;QACZ,UAAU;QACV,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;KAC9C,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,gBAAgB,KAAK,aAAa,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,4BAA4B,EAAE,iBAAiB,YAAY,CAAC,EAAE,iGAAiG,CAAC,CAAC;IACjL,CAAC;IACD,IAAI,YAAY,CAAC,iBAAiB,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,4BAA4B,EAAE,iBAAiB,YAAY,CAAC,EAAE,6CAA6C,CAAC,CAAC;QAC7H,CAAC;QACD,IAAI,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,+BAA+B,EAAE,iBAAiB,YAAY,CAAC,EAAE,8CAA8C,YAAY,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAClK,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1G,OAAO,MAAM,CAAC,4BAA4B,EAAE,iBAAiB,YAAY,CAAC,EAAE,yCAAyC,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM;WAC7B,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;QACtF,OAAO,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,YAAY,CAAC,EAAE,2CAA2C,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,qBAAqB,EAAE,iBAAiB,YAAY,CAAC,EAAE,0CAA0C,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,YAAY,CAAC,EAAE,qCAAqC,EAAE,CAAC;AAC9G,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAqB,EAAE,OAA8B;IACtF,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,IAAI,QAAQ,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QAC5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,EAAE,YAAY,IAAI,OAAO,CAAC,WAAW,CAAC;QAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CACtE,MAAM,CAAC,WAAW,KAAK,EAAE;eACtB,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;QACvF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,EAAE,2DAA2D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClI,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAEtD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5I,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,KAAK,sBAAsB;WACrG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IACjF,IAAI,WAAW;QAAE,OAAO,OAAO,CAAC,6BAA6B,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,iBAAiB,WAAW,CAAC,EAAE,2FAA2F,CAAC,CAAC;IAEpN,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4E,CAAC;IACtG,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/E,KAAK,MAAM,YAAY,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,4BAA4B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QACrH,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAChF,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,GAAG,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CACpD,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,EAAE,KAAK,MAAM,CAAC;mBAC7D,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,YAAY,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC;YACvE,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,4BAA4B,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACnE,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;oBACpE,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,qBAAqB,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAClG,CAAC;YACH,CAAC;YACD,IAAI,SAAS,EAAE,WAAW;gBAAE,OAAO,OAAO,CAAC,2BAA2B,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,wFAAwF,CAAC,CAAC;YAC1M,OAAO,OAAO,CAAC,qBAAqB,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,0DAA0D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClK,CAAC;QACD,KAAK,MAAM,YAAY,IAAI,IAAI,EAAE,CAAC;YAChC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,IAAI,YAAY,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YACxE,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACjC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,YAAY,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,aAAa,GAAG,gCAAgC,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACvH,IAAI,CAAC,aAAa,CAAC,IAAI;gBAAE,OAAO,OAAO,CAAC,aAAa,CAAC,IAAK,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,OAAQ,CAAC,CAAC;QACjH,CAAC;QACD,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,cAAc,GAAG,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3H,MAAM,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACjI,IAAI,cAAc,IAAI,gBAAgB,EAAE,CAAC;gBACvC,OAAO,OAAO,CAAC,qBAAqB,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,iBAAiB,YAAY,CAAC,EAAE,iEAAiE,CAAC,CAAC;YACrK,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,MAAM,CAAC,IAA0B,EAAE,OAAe;IACzD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,gCAAgC,CACvC,QAAqB,EACrB,YAAuC,EACvC,OAA0C,EAC1C,gBAAoC;IAEpC,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,8BAA8B,YAAY,CAAC,OAAO,4CAA4C,EAAE,CAAC;IAC/J,CAAC;IACD,IAAI,gBAAgB,EAAE,IAAI,EAAE,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,sBAAsB,gBAAgB,yDAAyD,OAAO,IAAI,EAAE,CAAC;IAC3K,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,WAAW,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7G,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,8BAA8B,YAAY,CAAC,OAAO,8CAA8C,EAAE,CAAC;IACvK,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,IAAI,EAAE,CAAC;IACjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,8BAA8B,YAAY,CAAC,OAAO,qCAAqC,EAAE,CAAC;IAC9J,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IACpE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACnH,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC7D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,8BAA8B,YAAY,CAAC,OAAO,gDAAgD,SAAS,kBAAkB,OAAO,IAAI,EAAE,CAAC;QAC/M,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ;YAChC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,QAAQ;mBAC9D,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,QAAQ;mBAC9B,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/E,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,wBAAwB,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3G,MAAM,yBAAyB,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC;QACrF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,wBAAwB,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC5G,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,wBAAwB,SAAS,uDAAuD,OAAO,IAAI,EAAE,CAAC;QAC1K,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAgE;IAC7F,OAAO;QACL,UAAU,CAAC,QAAQ;QACnB,UAAU,CAAC,MAAM;QACjB,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,YAAY;QACvB,UAAU,CAAC,UAAU;QACrB,UAAU,CAAC,aAAa;QACxB,UAAU,CAAC,aAAa;QACxB,UAAU,CAAC,WAAW;KACvB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,QAAqB,EACrB,OAAO,GAAG,QAAQ,EAClB,OAAgB,EAChB,aAAqC;IAErC,IAAI,QAAQ,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,aAAa;QAAE,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5G,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,EAAE,uEAAuE,QAAQ,CAAC,KAAK,IAAI,qBAAqB,EAAE,CAAC,CAAC;IACjL,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAwD,CAAC;IACzF,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,IAAI,MAAM,IAAI,GAAG;YAAE,gBAAgB,CAAC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,kBAAkB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,kDAAkD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClN,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,EAAE;QACxC,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,OAAO;QACP,aAAa;KACd,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAE5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5F,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,qEAAqE,CAAC,CAAC;QAClJ,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,kFAAkF,CAAC,CAAC;QACrK,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe;aACtC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;aACjD,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;QACtI,IAAI,CAAC,YAAY;YAAE,OAAO,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,sCAAsC,IAAI,CAAC,EAAE,OAAO,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACxI,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,KAAK,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChL,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClL,OAAO,MAAM,IAAI,OAAO,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,kBAAkB,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC,WAAW,uCAAuC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;IACtM,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,QAAqB,EAAE,MAA2B;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/L,CAAC;AAED,SAAS,YAAY,CACnB,MAAgB,EAChB,MAAc,EACd,SAAwF;IAExF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAiC,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACvD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAClC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,QAAqB;IAChE,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACtE,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACjE,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,OAAO,SAAS,KAAK,UAAU,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;QAClH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,QAAkB,EAAE,aAA0C,EAAE,QAAsB;IACrG,OAAO;QACL,IAAI,EAAE,IAAI;QACV,QAAQ;QACR,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,qBAAqB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACnG,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAC1C,cAAc,EAAE,YAAY,CAAC,EAAE;YAC/B,UAAU,EAAE,YAAY,CAAC,IAAI;YAC7B,QAAQ,EAAE,YAAY,CAAC,EAAE;YACzB,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,QAAQ;YACzH,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,QAAQ;YACrH,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,UAAU,EAAE,YAAY,CAAC,UAAU,IAAI,EAAE;SAC1C,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAiC,EAAE,YAAuC;IACvG,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,WAAW,KAAK,YAAY,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;WAC/M,YAAY,CAAC,WAAW;WACxB,YAAY,CAAC,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,OAAO,CAAC,IAA0B,EAAE,QAAkB,EAAE,aAA0C,EAAE,OAAe;IAC1H,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AACpI,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;AACvG,CAAC"}

package/dist/metadata/block-adapt.d.ts

@@ -0,0 +1,37 @@
+import type { CertifiedBlockFit } from './block-fit.js';
+export interface CertifiedAdaptation {
+    /** The adapted SQL to execute. */
+    sql: string;
+    /** Trust qualifier composed onto the base `reviewed` label. */
+    trustQualifier: string;
+    /** Human-facing provenance line naming the donor block and the transform. */
+    provenance: string;
+}
+/**
+ * Adapt a certified block's SQL by filtering its OUTPUT to a single column=value.
+ * Returns null when the filter column is not one of `outputColumns` (so the wrapper
+ * would reference a non-existent column) or when inputs are blank.
+ */
+export declare function adaptCertifiedSqlWithFilter(input: {
+    certifiedSql: string;
+    filterColumn: string;
+    filterValue: string;
+    outputColumns: string[];
+    blockName: string;
+}): CertifiedAdaptation | null;
+/**
+ * Decide whether a context-only certified block can be safely adapted to answer the
+ * question with exactly ONE added filter. Returns the adaptation, or null when the
+ * block is not a single-delta fit (extra dimensions/outputs/grain mismatch, more
+ * than one filter), or the filter value does not resolve to exactly one block-output
+ * column. Null ⇒ the caller falls through to generation.
+ */
+export declare function planCertifiedAdaptation(input: {
+    blockFit: CertifiedBlockFit;
+    certifiedSql: string;
+    blockName: string;
+    blockOutputs: string[];
+    /** Resolve a filter VALUE (e.g. "food") to the physical column(s) that carry it. */
+    resolveFilterColumn: (value: string) => string[];
+}): CertifiedAdaptation | null;
+//# sourceMappingURL=block-adapt.d.ts.map

package/dist/metadata/block-adapt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-adapt.d.ts","sourceRoot":"","sources":["../../src/metadata/block-adapt.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,WAAW,mBAAmB;IAClC,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,+DAA+D;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;CACpB;AAUD;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,mBAAmB,GAAG,IAAI,CAyB7B;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,oFAAoF;IACpF,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;CAClD,GAAG,mBAAmB,GAAG,IAAI,CAoB7B"}

package/dist/metadata/block-adapt.js

@@ -0,0 +1,89 @@
+/**
+ * Certified-block adaptation lane (W2.2).
+ *
+ * When a certified block is CLOSE to answering but the question adds exactly ONE
+ * small delta — most commonly "the same certified breakdown, but just the <value>
+ * row" — regenerating from scratch throws away governed logic. Instead we adapt the
+ * certified SQL with a single, mechanically-safe transform and serve it at a trust
+ * tier BELOW certified (base `reviewed`, qualifier "adapted from certified block X")
+ * — never `certified`, because the adapted query itself was not human-reviewed.
+ *
+ * v1 handles the add-filter delta via an OUTPUT subquery wrapper:
+ *   SELECT * FROM ( <certified sql> ) AS certified_derived WHERE <col> = <value>
+ * This is provably safe (it only RESTRICTS rows of the already-certified result)
+ * and dialect-neutral, and is valid exactly when the filter column is one of the
+ * block's OUTPUT columns (a dimension the certified block already groups by). If
+ * the filter would need to reach INPUT rows and re-aggregate, the column is not in
+ * the outputs and we return null → the caller falls through to generation.
+ *
+ * Adding a GROUP-BY dimension (re-graining the inner query) is intentionally NOT
+ * attempted in v1 — it cannot be done as a safe output wrapper.
+ */
+import { analyzeSqlReferences } from '@duckcodeailabs/dql-core';
+function quoteAdaptValue(value) {
+    return /^-?\d+(\.\d+)?$/.test(value.trim()) ? value.trim() : `'${value.replace(/'/g, "''")}'`;
+}
+function normalizeColumn(name) {
+    return name.replace(/["`]/g, '').trim().toLowerCase();
+}
+/**
+ * Adapt a certified block's SQL by filtering its OUTPUT to a single column=value.
+ * Returns null when the filter column is not one of `outputColumns` (so the wrapper
+ * would reference a non-existent column) or when inputs are blank.
+ */
+export function adaptCertifiedSqlWithFilter(input) {
+    const certifiedSql = input.certifiedSql?.trim();
+    const filterColumn = input.filterColumn?.trim();
+    const filterValue = input.filterValue?.trim();
+    if (!certifiedSql || !filterColumn || !filterValue)
+        return null;
+    // The filter column MUST be an output of the certified query, else the wrapper
+    // references a column that does not exist in the subquery result.
+    const outputs = new Set(input.outputColumns.map(normalizeColumn));
+    if (!outputs.has(normalizeColumn(filterColumn)))
+        return null;
+    // The certified SQL must be a single parseable read-only SELECT/WITH so wrapping
+    // it in a subquery is safe.
+    const analysis = analyzeSqlReferences(certifiedSql);
+    if (!analysis.parsed)
+        return null;
+    const stripped = certifiedSql.replace(/;\s*$/, '');
+    const sql = `SELECT * FROM (\n${stripped}\n) AS certified_derived\nWHERE ${filterColumn} = ${quoteAdaptValue(filterValue)}`;
+    return {
+        sql,
+        trustQualifier: `adapted from certified block ${input.blockName}`,
+        provenance: `Derived from certified block "${input.blockName}" by filtering its result to ` +
+            `${filterColumn} = ${quoteAdaptValue(filterValue)}. Not itself certified — review before stakeholder reuse.`,
+    };
+}
+/**
+ * Decide whether a context-only certified block can be safely adapted to answer the
+ * question with exactly ONE added filter. Returns the adaptation, or null when the
+ * block is not a single-delta fit (extra dimensions/outputs/grain mismatch, more
+ * than one filter), or the filter value does not resolve to exactly one block-output
+ * column. Null ⇒ the caller falls through to generation.
+ */
+export function planCertifiedAdaptation(input) {
+    const fit = input.blockFit;
+    // The ONLY delta may be a single unsupported filter — nothing else missing.
+    if (fit.kind !== 'context_only')
+        return null;
+    if (fit.missingDimensions.length > 0 || fit.missingOutputs.length > 0 || fit.grainMismatch)
+        return null;
+    if (fit.unsupportedFilters.length !== 1)
+        return null;
+    const filterValue = fit.unsupportedFilters[0];
+    const outputs = new Set(input.blockOutputs.map((column) => normalizeColumn(column)));
+    const columns = input.resolveFilterColumn(filterValue).filter((column) => outputs.has(normalizeColumn(column)));
+    // Exactly one block-output column must carry the value; ambiguous or input-only ⇒ fall through.
+    if (columns.length !== 1)
+        return null;
+    return adaptCertifiedSqlWithFilter({
+        certifiedSql: input.certifiedSql,
+        filterColumn: columns[0],
+        filterValue,
+        outputColumns: input.blockOutputs,
+        blockName: input.blockName,
+    });
+}
+//# sourceMappingURL=block-adapt.js.map

package/dist/metadata/block-adapt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"block-adapt.js","sourceRoot":"","sources":["../../src/metadata/block-adapt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAYhE,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAChG,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAM3C;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAEhE,+EAA+E;IAC/E,kEAAkE;IAClE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7D,iFAAiF;IACjF,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,oBAAoB,QAAQ,mCAAmC,YAAY,MAAM,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;IAE5H,OAAO;QACL,GAAG;QACH,cAAc,EAAE,gCAAgC,KAAK,CAAC,SAAS,EAAE;QACjE,UAAU,EACR,iCAAiC,KAAK,CAAC,SAAS,+BAA+B;YAC/E,GAAG,YAAY,MAAM,eAAe,CAAC,WAAW,CAAC,2DAA2D;KAC/G,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAOvC;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC3B,4EAA4E;IAC5E,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IACxG,IAAI,GAAG,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,WAAW,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChH,gGAAgG;IAChG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,OAAO,2BAA2B,CAAC;QACjC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QACxB,WAAW;QACX,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC"}

package/dist/metadata/block-fit.js

@@ -30,7 +30,7 @@ export function evaluateCertifiedBlockFit(input) {
     const missingOutputs = uniqueStrings(requiredOutputs.filter((output) => !outputRequirementCovered(output, block)));
     const measureMatch = requestedMeasures.length === 0
         || requestedMeasures.some((measure) => blockMeasures.has(measure) || block.textTokens.has(measure) || outputHasEntity(blockOutputs, measure));
-    const unsupportedFilters = unsupportedRequestedFilters(requested, block);
+    const unsupportedFilters = unsupportedRequestedFilters(requested, block, input.question);
     const grainMismatch = requested.grain && block.grain && canonicalToken(requested.grain) !== block.grain
         && !blockDimensions.has(canonicalToken(requested.grain))
         ? `certified block grain=${block.grain} does not cover requested grain=${canonicalToken(requested.grain)}`
@@ -135,6 +135,8 @@ function blockShape(block) {
         ...stringArray(record.allowedFilters),
         ...filterBindingNames(payload.filterBindings),
         ...filterBindingNames(record.filterBindings),
+        ...parameterNames(payload.parameters),
+        ...parameterNames(record.parameters),
     ].map(canonicalToken).filter(Boolean));
     const grain = canonicalToken(stringValue(payload.grain) ?? stringValue(record.grain) ?? explicitDimensions[0] ?? '');
     const relevance = outputs.length + dimensions.length + measures.length;
@@ -150,6 +152,13 @@ function blockShape(block) {
         inferredContract: stringArray(payload.declaredOutputs).length === 0 && stringArray(record.declaredOutputs).length === 0,
     };
 }
+function parameterNames(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.flatMap((item) => item && typeof item === 'object' && typeof item.name === 'string'
+        ? [item.name]
+        : []);
+}
 function inferredTextDimensions(text) {
     const normalized = text.replace(/[_-]+/g, ' ').toLowerCase();
     const inferred = [];
@@ -164,16 +173,40 @@ function inferredTextDimensions(text) {
     }
     return uniqueStrings(inferred);
 }
-function unsupportedRequestedFilters(requested, block) {
+function unsupportedRequestedFilters(requested, block, question) {
     const requestedFilters = uniqueStrings([
         ...requested.filters,
         ...requested.followUpReferences.flatMap((ref) => ref.resolvedValues ?? []),
-    ].map(canonicalToken).filter(Boolean));
-    if (requestedFilters.length === 0 || block.filters.length === 0)
+    ].map(canonicalToken).filter((filter) => Boolean(filter) && !isTemporalFilter(filter)));
+    if (requestedFilters.length === 0)
         return [];
+    // A filtered question cannot be answered exactly by an unparameterized block.
+    // Returning [] here used to erase the user's restriction and let a broad
+    // certified ranking (for example all-customer lifetime spend) answer a
+    // category-specific question. A block may still be useful as context, but it
+    // cannot terminate the certified lane unless it exposes the requested value
+    // through a filter or dimension contract.
+    if (block.filters.length === 0) {
+        // A certified breakdown can be safely narrowed on one of its own output
+        // dimensions when the question explicitly names that binding ("by segment
+        // for Enterprise"). The adaptation lane applies the actual restriction.
+        const explicitlyFilterable = block.dimensions.some((dimension) => {
+            const words = dimension.replace(/_/g, '[ _-]+');
+            return new RegExp(`\\b(?:by|per)\\s+${words}\\b`, 'i').test(question)
+                || new RegExp(`\\b${words}\\s*(?:=|:|is|equals)`, 'i').test(question);
+        });
+        if (explicitlyFilterable)
+            return [];
+        return requestedFilters.filter((filter) => !block.dimensions.includes(filter));
+    }
     const blockFilters = new Set(block.filters);
     return requestedFilters.filter((filter) => !blockFilters.has(filter) && !block.dimensions.includes(filter));
 }
+function isTemporalFilter(filter) {
+    return /^(?:day|week|month|quarter|year|season)$/.test(filter)
+        || /^(?:last|this|next|previous|prior|current)_(?:day|week|month|quarter|year|season)$/.test(filter)
+        || /^\d{4}$/.test(filter);
+}
 function topNFitAction(requested, block) {
     if (!requested.topN)
         return 'none';