@enricai/barnacle 1.0.0

package/dist/api/plugins/request-context.js

@@ -0,0 +1,61 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fastify_plugin_1 = __importDefault(require("fastify-plugin"));
+const nanoid_1 = require("nanoid");
+const REQUEST_ID_HEADER = "x-request-id";
+const CORRELATION_ID_HEADER = "x-correlation-id";
+/**
+ * Inbound trace-id charset: letters, digits, and `-._:` — the intersection
+ * of W3C trace-context, Fastify defaults, AWS X-Ray, and OpenTelemetry.
+ * Anything outside is either a typo or a log-poisoning attempt; we'd rather
+ * mint a fresh id than echo a CRLF / HTML / JSON fragment straight into
+ * structured logs and downstream response headers.
+ */
+const TRACE_ID_ALLOWED = /^[A-Za-z0-9._:-]+$/;
+const TRACE_ID_MAX_LEN = 128;
+function isValidTraceId(value) {
+    return (typeof value === "string" &&
+        value.length > 0 &&
+        value.length <= TRACE_ID_MAX_LEN &&
+        TRACE_ID_ALLOWED.test(value));
+}
+/**
+ * Propagates request IDs and correlation IDs so logs can be stitched across
+ * services. We echo an inbound X-Request-ID when provided, otherwise
+ * generate a nanoid (replacing Fastify's per-process `req-N` default,
+ * which collides across pods), and always echo on response. Correlation
+ * IDs are echo-only — we never invent one.
+ */
+async function requestContextPlugin(app) {
+    app.addHook("onRequest", async (request) => {
+        const incomingRequestId = request.headers[REQUEST_ID_HEADER];
+        if (isValidTraceId(incomingRequestId)) {
+            request.id = incomingRequestId;
+        }
+        else {
+            // Fastify assigns a short local `req-N` id before this hook runs,
+            // so we always replace it with a nanoid when the caller didn't
+            // supply a trace id (or sent a malformed one). nanoid gives a
+            // cross-process unique id so log aggregators can stitch requests
+            // without collisions.
+            request.id = (0, nanoid_1.nanoid)();
+        }
+        const incomingCorrelationId = request.headers[CORRELATION_ID_HEADER];
+        if (isValidTraceId(incomingCorrelationId)) {
+            request.correlationId = incomingCorrelationId;
+        }
+    });
+    app.addHook("onSend", async (request, reply) => {
+        reply.header(REQUEST_ID_HEADER, request.id);
+        if (request.correlationId) {
+            reply.header(CORRELATION_ID_HEADER, request.correlationId);
+        }
+    });
+}
+exports.default = (0, fastify_plugin_1.default)(requestContextPlugin, {
+    name: "request-context",
+});
+//# sourceMappingURL=request-context.js.map

package/dist/api/plugins/request-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../../src/api/plugins/request-context.ts"],"names":[],"mappings":";;;;;AACA,oEAAgC;AAChC,mCAAgC;AAEhC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AACzC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAC9C,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,gBAAgB;QAChC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAC7B,CAAC;AACJ,CAAC;AAQD;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB,CAAC,GAAoB;IACtD,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAuB,EAAE,EAAE;QACzD,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7D,IAAI,cAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,EAAE,GAAG,iBAAiB,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,kEAAkE;YAClE,+DAA+D;YAC/D,8DAA8D;YAC9D,iEAAiE;YACjE,sBAAsB;YACtB,OAAO,CAAC,EAAE,GAAG,IAAA,eAAM,GAAE,CAAC;QACxB,CAAC;QACD,MAAM,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACrE,IAAI,cAAc,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,aAAa,GAAG,qBAAqB,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC7C,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,kBAAe,IAAA,wBAAE,EAAC,oBAAoB,EAAE;IACtC,IAAI,EAAE,iBAAiB;CACxB,CAAC,CAAC"}

package/dist/api/routes/health.d.ts

@@ -0,0 +1,55 @@
+import type { FastifyInstance } from "fastify";
+import { type RunState } from "../../lib/telemetry/run-state";
+/**
+ * Narrow subset of AppConfig the readiness probe needs. Kept inline
+ * rather than imported as `Pick<AppConfig,…>` to keep this module
+ * decoupled — health checks shouldn't be coupled to config surface
+ * churn beyond these fields.
+ */
+export interface HealthConfig {
+    scraper: {
+        steelApiKey: string | undefined;
+        anthropicApiKey: string | undefined;
+        readinessQueueThreshold: number;
+        useBedrock: boolean;
+    };
+    bedrock: {
+        accessKeyId: string | undefined;
+        secretAccessKey: string | undefined;
+        region: string;
+    };
+}
+interface HealthRoutesOptions {
+    config?: HealthConfig;
+    /** Override for tests — defaults to the live pool stats. */
+    poolStats?: () => {
+        size: number;
+        pending: number;
+        concurrency: number;
+    };
+    /** Override for tests — defaults to the live response-cache stats. */
+    cacheStats?: () => {
+        size: number;
+        max: number;
+        inFlight: number;
+    };
+    /** Override for tests — defaults to the live telemetry run state. */
+    telemetryState?: () => RunState;
+    /**
+     * Override for tests — root directory scanned for heal-out/<siteId>/healing-<siteId>.md.
+     * Defaults to process.cwd().
+     */
+    healOutRoot?: string;
+}
+/**
+ * Health and readiness probes. Ops-only routes — bypass auth and return plain JSON instead
+ * of the standard envelope. `/healthz` is a liveness check (process is up). `/readyz`
+ * verifies external dependencies and downgrades to 503 when any are
+ * unreachable so orchestrators stop routing traffic.
+ *
+ * Config is injected so tests can swap in specific states without
+ * relying on frozen-at-import process.env.
+ */
+export declare function healthRoutes(app: FastifyInstance, options?: HealthRoutesOptions): Promise<void>;
+export {};
+//# sourceMappingURL=health.d.ts.map

package/dist/api/routes/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/api/routes/health.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAK7D,OAAO,EAAqB,KAAK,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAiD7E;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE;QACP,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,uBAAuB,EAAE,MAAM,CAAC;QAChC,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,OAAO,EAAE;QACP,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,UAAU,mBAAmB;IAC3B,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,QAAQ,CAAC;IAChC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA8FD;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAiCf"}

package/dist/api/routes/health.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.healthRoutes = healthRoutes;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const response_cache_1 = require("../../cache/response-cache");
+const config_1 = require("../../config");
+const logging_1 = require("../../lib/logging");
+const run_state_1 = require("../../lib/telemetry/run-state");
+const metrics_1 = require("../../scraper/metrics");
+const pool_1 = require("../../scraper/pool");
+const logger = (0, logging_1.getLogger)({ name: "routes/health" });
+/**
+ * Confirms the scraper has the secrets it needs. When Bedrock is enabled,
+ * validates key-pair consistency: if one of accessKeyId/secretAccessKey is
+ * set the other must be too. If neither is set, ambient IAM credentials are
+ * assumed (ECS task role, EC2 instance profile) — these can't be probed
+ * synchronously at health-check time. When Anthropic is the provider,
+ * verifies the API key is present.
+ */
+function checkScraperCredentials(cfg) {
+    const missing = [];
+    if (!cfg.scraper.steelApiKey)
+        missing.push("STEEL_API_KEY");
+    if (cfg.scraper.useBedrock) {
+        if (cfg.bedrock.accessKeyId && !cfg.bedrock.secretAccessKey) {
+            missing.push("AWS_SECRET_ACCESS_KEY");
+        }
+        if (!cfg.bedrock.accessKeyId && cfg.bedrock.secretAccessKey) {
+            missing.push("AWS_ACCESS_KEY_ID");
+        }
+    }
+    else {
+        if (!cfg.scraper.anthropicApiKey)
+            missing.push("ANTHROPIC_API_KEY");
+    }
+    if (missing.length === 0)
+        return { ok: true };
+    return { ok: false, detail: `missing: ${missing.join(", ")}` };
+}
+/**
+ * Flags back-pressure on the Stagehand task queue. When queue depth
+ * (waiting + in-flight) exceeds `readinessQueueThreshold`, orchestrators
+ * should stop sending new work — additional requests would just pile
+ * onto an already-saturated pool and time out in client SLAs.
+ */
+function checkScraperPool(cfg, stats) {
+    const s = stats();
+    const depth = s.size + s.pending;
+    if (depth <= cfg.scraper.readinessQueueThreshold) {
+        return { ok: true, detail: `depth=${depth}` };
+    }
+    return {
+        ok: false,
+        detail: `queue depth ${depth} exceeds threshold ${cfg.scraper.readinessQueueThreshold}`,
+    };
+}
+/**
+ * Scans heal-out/<siteId>/healing-<siteId>.md files under `rootDir` and
+ * extracts the verdict and best-pass-rate lines written by writeHealReport().
+ * Returns an empty object when the heal-out directory doesn't exist yet —
+ * the caller treats absence as "no healing runs performed."
+ */
+function readHealSummaries(rootDir) {
+    const healOut = (0, node_path_1.resolve)((0, node_path_1.join)(rootDir, "heal-out"));
+    if (!(0, node_fs_1.existsSync)(healOut))
+        return {};
+    const result = {};
+    let siteDirs;
+    try {
+        siteDirs = (0, node_fs_1.readdirSync)(healOut, { withFileTypes: true })
+            .filter((e) => e.isDirectory())
+            .map((e) => e.name);
+    }
+    catch {
+        return {};
+    }
+    for (const siteId of siteDirs) {
+        const reportPath = (0, node_path_1.join)(healOut, siteId, `healing-${siteId}.md`);
+        if (!(0, node_fs_1.existsSync)(reportPath))
+            continue;
+        let content;
+        try {
+            content = (0, node_fs_1.readFileSync)(reportPath, "utf-8");
+        }
+        catch {
+            continue;
+        }
+        const verdictMatch = /^\*\*Verdict:\*\*\s+(\S+)/m.exec(content);
+        const passRateMatch = /^\*\*Best pass rate:\*\*\s+(\d+)%/m.exec(content);
+        if (!verdictMatch)
+            continue;
+        const verdict = verdictMatch[1] ?? "UNKNOWN";
+        const bestPassRate = passRateMatch ? Number(passRateMatch[1]) / 100 : 0;
+        result[siteId] = { verdict, bestPassRate, reportPath: (0, node_path_1.resolve)(reportPath) };
+    }
+    return result;
+}
+/**
+ * Health and readiness probes. Ops-only routes — bypass auth and return plain JSON instead
+ * of the standard envelope. `/healthz` is a liveness check (process is up). `/readyz`
+ * verifies external dependencies and downgrades to 503 when any are
+ * unreachable so orchestrators stop routing traffic.
+ *
+ * Config is injected so tests can swap in specific states without
+ * relying on frozen-at-import process.env.
+ */
+async function healthRoutes(app, options = {}) {
+    const cfg = options.config ?? config_1.config;
+    app.get("/healthz", async () => ({ status: "ok" }));
+    const poolStatsFn = options.poolStats ?? pool_1.poolStats;
+    const cacheStatsFn = options.cacheStats ?? response_cache_1.cacheStats;
+    const telemetryStateFn = options.telemetryState ?? run_state_1.getTelemetryState;
+    const healOutRoot = options.healOutRoot ?? process.cwd();
+    app.get("/readyz", async (_request, reply) => {
+        const scraperCredentials = checkScraperCredentials(cfg);
+        const scraperPool = checkScraperPool(cfg, poolStatsFn);
+        const allOk = scraperCredentials.ok && scraperPool.ok;
+        const report = {
+            status: allOk ? "ready" : "degraded",
+            checks: { scraperCredentials, scraperPool },
+            stats: {
+                scraperPool: poolStatsFn(),
+                cache: cacheStatsFn(),
+                metrics: (0, metrics_1.allMetrics)(),
+            },
+            telemetry: telemetryStateFn(),
+            heal: readHealSummaries(healOutRoot),
+        };
+        if (!allOk) {
+            logger.warn(`readyz degraded: scraperCreds=${scraperCredentials.ok ? "ok" : scraperCredentials.detail} pool=${scraperPool.ok ? "ok" : scraperPool.detail}`);
+            reply.code(503);
+        }
+        return report;
+    });
+}
+//# sourceMappingURL=health.js.map

package/dist/api/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/api/routes/health.ts"],"names":[],"mappings":";;AAgMA,oCAoCC;AApOD,qCAAgE;AAChE,yCAA0C;AAG1C,2DAAyE;AACzE,qCAAmD;AACnD,2CAA0C;AAC1C,yDAA6E;AAC7E,+CAAiE;AACjE,yCAA+D;AAE/D,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;AAgFpD;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAAC,GAAiB;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE5D,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe;YAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,GAAiB,EACjB,KAAmE;IAEnE,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;IAClB,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC;IACjC,IAAI,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,KAAK,EAAE,EAAE,CAAC;IAChD,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,eAAe,KAAK,sBAAsB,GAAG,CAAC,OAAO,CAAC,uBAAuB,EAAE;KACxF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,OAAO,GAAG,IAAA,mBAAO,EAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,IAAA,oBAAU,EAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAA,qBAAW,EAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACrD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,MAAM,EAAE,WAAW,MAAM,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,IAAA,oBAAU,EAAC,UAAU,CAAC;YAAE,SAAS;QAEtC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,IAAA,sBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzE,IAAI,CAAC,YAAY;YAAE,SAAS;QAE5B,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;QAC7C,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAExE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,IAAA,mBAAO,EAAC,UAAU,CAAC,EAAE,CAAC;IAC9E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,YAAY,CAChC,GAAoB,EACpB,UAA+B,EAAE;IAEjC,MAAM,GAAG,GAAiB,OAAO,CAAC,MAAM,IAAI,eAAa,CAAC;IAE1D,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEpD,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,IAAI,2BAAiB,CAAC;IAC7D,MAAM,gBAAgB,GAAG,OAAO,CAAC,cAAc,IAAI,6BAAiB,CAAC;IACrE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEzD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAmB,EAAE,EAAE;QACzD,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,kBAAkB,CAAC,EAAE,IAAI,WAAW,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YACpC,MAAM,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE;YAC3C,KAAK,EAAE;gBACL,WAAW,EAAE,WAAW,EAAE;gBAC1B,KAAK,EAAE,YAAY,EAAE;gBACrB,OAAO,EAAE,IAAA,oBAAU,GAAE;aACtB;YACD,SAAS,EAAE,gBAAgB,EAAE;YAC7B,IAAI,EAAE,iBAAiB,CAAC,WAAW,CAAC;SACrC,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CACT,iCAAiC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,SAAS,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,CAC/I,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api/routes/plugins-introspection.d.ts

@@ -0,0 +1,17 @@
+import type { FastifyInstance } from "fastify";
+import type { PluginLoadRecord } from "../../plugins/discover";
+/**
+ * Injectable options for `pluginsIntrospectionRoutes`. The report is passed
+ * in at registration time so the route can be tested without spinning up the
+ * full server and plugin-loading pipeline.
+ */
+export interface PluginsIntrospectionOptions {
+    report: PluginLoadRecord[];
+}
+/**
+ * Exposes the plugin load report behind authentication. Separate from
+ * `healthRoutes` because it reveals filesystem paths (resolved plugin paths)
+ * that must not be visible to unauthenticated callers.
+ */
+export declare function pluginsIntrospectionRoutes(app: FastifyInstance, options: PluginsIntrospectionOptions): Promise<void>;
+//# sourceMappingURL=plugins-introspection.d.ts.map

package/dist/api/routes/plugins-introspection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins-introspection.d.ts","sourceRoot":"","sources":["../../../src/api/routes/plugins-introspection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAC5B;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/api/routes/plugins-introspection.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pluginsIntrospectionRoutes = pluginsIntrospectionRoutes;
+/**
+ * Exposes the plugin load report behind authentication. Separate from
+ * `healthRoutes` because it reveals filesystem paths (resolved plugin paths)
+ * that must not be visible to unauthenticated callers.
+ */
+async function pluginsIntrospectionRoutes(app, options) {
+    const { report } = options;
+    app.get("/v1/plugins", { onRequest: [app.authenticate] }, async () => report);
+}
+//# sourceMappingURL=plugins-introspection.js.map

package/dist/api/routes/plugins-introspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins-introspection.js","sourceRoot":"","sources":["../../../src/api/routes/plugins-introspection.ts"],"names":[],"mappings":";;AAkBA,gEAWC;AAhBD;;;;GAIG;AACI,KAAK,UAAU,0BAA0B,CAC9C,GAAoB,EACpB,OAAoC;IAEpC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE3B,GAAG,CAAC,GAAG,CACL,aAAa,EACb,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EACjC,KAAK,IAAiC,EAAE,CAAC,MAAM,CAChD,CAAC;AACJ,CAAC"}

package/dist/api/schemas/common.d.ts

@@ -0,0 +1,114 @@
+import { z } from "zod/v4";
+/**
+ * Error code registry and HTTP status envelope schema shared across all
+ * API responses. The envelope shape keeps every response — success and
+ * error — parseable by a single client-side decoder.
+ */
+export declare const ERROR_CODES: {
+    readonly PARTIAL_CONTENT_SUCCESS: 1000;
+    readonly DECODING_ERROR: 1001;
+    readonly FIELD_VIOLATION: 1002;
+    readonly EMPTY_REQUEST: 1003;
+    readonly AUTHORIZATION_ERROR: 1004;
+    readonly RESOURCE_NOT_FOUND: 1005;
+    readonly INDEX_NOT_FOUND: 1006;
+    readonly CLIENT_CALL_ERROR: 1007;
+    readonly GENERIC_ERROR: 1008;
+    readonly EXTRA_DETAIL: 1009;
+    readonly THROTTLED_REQUEST: 1010;
+    readonly TIME_OUT: 1011;
+    readonly SCRAPE_FAILURE: 2003;
+    readonly CAPTCHA_ENCOUNTERED: 2004;
+    readonly EMPTY_RESULTS: 2005;
+    readonly VERIFICATION_TRIGGER_FAILED: 2006;
+    readonly RESUME_INVALID_OTP: 2007;
+    readonly URL_LOCKED: 2008;
+};
+export type ErrorCode = (typeof ERROR_CODES)[keyof typeof ERROR_CODES];
+/**
+ * Reverse lookup: numeric code → canonical description. Used to render
+ * `codeDescription` on the wire.
+ */
+export declare const ERROR_CODE_DESCRIPTIONS: Record<ErrorCode, string>;
+/**
+ * The envelope every response is wrapped in. Success and error responses
+ * both carry this status block so clients can share a single parser.
+ */
+export declare const statusSchema: z.ZodObject<{
+    httpStatus: z.ZodUnion<[z.ZodEnum<{
+        OK: "OK";
+        BAD_REQUEST: "BAD_REQUEST";
+        UNAUTHORIZED: "UNAUTHORIZED";
+        FORBIDDEN: "FORBIDDEN";
+        NOT_FOUND: "NOT_FOUND";
+        TOO_MANY_REQUESTS: "TOO_MANY_REQUESTS";
+        INTERNAL_SERVER_ERROR: "INTERNAL_SERVER_ERROR";
+        SERVICE_UNAVAILABLE: "SERVICE_UNAVAILABLE";
+        GATEWAY_TIMEOUT: "GATEWAY_TIMEOUT";
+    }>, z.ZodString]>;
+    dateTime: z.ZodString;
+    details: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        code: z.ZodNumber;
+        codeDescription: z.ZodString;
+        detailType: z.ZodOptional<z.ZodString>;
+        message: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>>;
+}, z.core.$loose>;
+/**
+ * Response envelope emitted by dispatch when the hot path cannot complete
+ * the application because the user must supply additional information (e.g.
+ * missing profile fields or an OTP code). Returned as HTTP 200 so clients
+ * can parse it without branching on status codes.
+ */
+export declare const needsUserInfoResponseSchema: z.ZodObject<{
+    status: z.ZodObject<{
+        httpStatus: z.ZodUnion<[z.ZodEnum<{
+            OK: "OK";
+            BAD_REQUEST: "BAD_REQUEST";
+            UNAUTHORIZED: "UNAUTHORIZED";
+            FORBIDDEN: "FORBIDDEN";
+            NOT_FOUND: "NOT_FOUND";
+            TOO_MANY_REQUESTS: "TOO_MANY_REQUESTS";
+            INTERNAL_SERVER_ERROR: "INTERNAL_SERVER_ERROR";
+            SERVICE_UNAVAILABLE: "SERVICE_UNAVAILABLE";
+            GATEWAY_TIMEOUT: "GATEWAY_TIMEOUT";
+        }>, z.ZodString]>;
+        dateTime: z.ZodString;
+        details: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            code: z.ZodNumber;
+            codeDescription: z.ZodString;
+            detailType: z.ZodOptional<z.ZodString>;
+            message: z.ZodOptional<z.ZodString>;
+        }, z.core.$loose>>>;
+    }, z.core.$loose>;
+    needsUserInfo: z.ZodLiteral<true>;
+    missingFields: z.ZodArray<z.ZodObject<{
+        field: z.ZodString;
+        question: z.ZodString;
+    }, z.core.$strip>>;
+    requiresOtp: z.ZodBoolean;
+    metrics: z.ZodOptional<z.ZodObject<{
+        totalDurationMs: z.ZodNumber;
+        path: z.ZodEnum<{
+            http: "http";
+            browser: "browser";
+        }>;
+        steps: z.ZodArray<z.ZodObject<{
+            step: z.ZodString;
+            durationMs: z.ZodNumber;
+            status: z.ZodEnum<{
+                success: "success";
+                failed: "failed";
+                skipped: "skipped";
+            }>;
+            error: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        errorType: z.ZodOptional<z.ZodString>;
+        errorStep: z.ZodOptional<z.ZodString>;
+        attemptCount: z.ZodNumber;
+        startedAt: z.ZodString;
+        endedAt: z.ZodString;
+        recordedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+//# sourceMappingURL=common.d.ts.map

package/dist/api/schemas/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/api/schemas/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAI3B;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;CAmBd,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEvE;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAmB7D,CAAC;AA+BF;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;iBAMf,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWtC,CAAC"}

package/dist/api/schemas/common.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.needsUserInfoResponseSchema = exports.statusSchema = exports.ERROR_CODE_DESCRIPTIONS = exports.ERROR_CODES = void 0;
+const v4_1 = require("zod/v4");
+const dispatch_metrics_1 = require("../../types/dispatch-metrics");
+/**
+ * Error code registry and HTTP status envelope schema shared across all
+ * API responses. The envelope shape keeps every response — success and
+ * error — parseable by a single client-side decoder.
+ */
+exports.ERROR_CODES = {
+    PARTIAL_CONTENT_SUCCESS: 1000,
+    DECODING_ERROR: 1001,
+    FIELD_VIOLATION: 1002,
+    EMPTY_REQUEST: 1003,
+    AUTHORIZATION_ERROR: 1004,
+    RESOURCE_NOT_FOUND: 1005,
+    INDEX_NOT_FOUND: 1006,
+    CLIENT_CALL_ERROR: 1007,
+    GENERIC_ERROR: 1008,
+    EXTRA_DETAIL: 1009,
+    THROTTLED_REQUEST: 1010,
+    TIME_OUT: 1011,
+    SCRAPE_FAILURE: 2003,
+    CAPTCHA_ENCOUNTERED: 2004,
+    EMPTY_RESULTS: 2005,
+    VERIFICATION_TRIGGER_FAILED: 2006,
+    RESUME_INVALID_OTP: 2007,
+    URL_LOCKED: 2008,
+};
+/**
+ * Reverse lookup: numeric code → canonical description. Used to render
+ * `codeDescription` on the wire.
+ */
+exports.ERROR_CODE_DESCRIPTIONS = {
+    1000: "PARTIAL_CONTENT_SUCCESS",
+    1001: "DECODING_ERROR",
+    1002: "FIELD_VIOLATION",
+    1003: "EMPTY_REQUEST",
+    1004: "AUTHORIZATION_ERROR",
+    1005: "RESOURCE_NOT_FOUND",
+    1006: "INDEX_NOT_FOUND",
+    1007: "CLIENT_CALL_ERROR",
+    1008: "GENERIC_ERROR",
+    1009: "EXTRA_DETAIL",
+    1010: "THROTTLED_REQUEST",
+    1011: "TIME_OUT",
+    2003: "SCRAPE_FAILURE",
+    2004: "CAPTCHA_ENCOUNTERED",
+    2005: "EMPTY_RESULTS",
+    2006: "VERIFICATION_TRIGGER_FAILED",
+    2007: "RESUME_INVALID_OTP",
+    2008: "URL_LOCKED",
+};
+/**
+ * HTTP status strings (upper-snake-case) used in the response envelope.
+ */
+const httpStatusSchema = v4_1.z
+    .enum([
+    "OK",
+    "BAD_REQUEST",
+    "UNAUTHORIZED",
+    "FORBIDDEN",
+    "NOT_FOUND",
+    "TOO_MANY_REQUESTS",
+    "INTERNAL_SERVER_ERROR",
+    "SERVICE_UNAVAILABLE",
+    "GATEWAY_TIMEOUT",
+])
+    .or(v4_1.z.string());
+/**
+ * Single entry in the `status.details[]` array.
+ */
+const statusDetailSchema = v4_1.z
+    .object({
+    code: v4_1.z.number().int(),
+    codeDescription: v4_1.z.string(),
+    detailType: v4_1.z.string().optional(),
+    message: v4_1.z.string().optional(),
+})
+    .loose();
+/**
+ * The envelope every response is wrapped in. Success and error responses
+ * both carry this status block so clients can share a single parser.
+ */
+exports.statusSchema = v4_1.z
+    .object({
+    httpStatus: httpStatusSchema,
+    dateTime: v4_1.z.string(),
+    details: v4_1.z.array(statusDetailSchema).default([]),
+})
+    .loose();
+/**
+ * Response envelope emitted by dispatch when the hot path cannot complete
+ * the application because the user must supply additional information (e.g.
+ * missing profile fields or an OTP code). Returned as HTTP 200 so clients
+ * can parse it without branching on status codes.
+ */
+exports.needsUserInfoResponseSchema = v4_1.z.object({
+    status: exports.statusSchema,
+    needsUserInfo: v4_1.z.literal(true),
+    missingFields: v4_1.z.array(v4_1.z.object({
+        field: v4_1.z.string(),
+        question: v4_1.z.string(),
+    })),
+    requiresOtp: v4_1.z.boolean(),
+    metrics: dispatch_metrics_1.DispatchMetricsSchema.optional(),
+});
+//# sourceMappingURL=common.js.map

package/dist/api/schemas/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/api/schemas/common.ts"],"names":[],"mappings":";;;AAAA,+BAA2B;AAE3B,+DAAiE;AAEjE;;;;GAIG;AACU,QAAA,WAAW,GAAG;IACzB,uBAAuB,EAAE,IAAI;IAC7B,cAAc,EAAE,IAAI;IACpB,eAAe,EAAE,IAAI;IACrB,aAAa,EAAE,IAAI;IACnB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,eAAe,EAAE,IAAI;IACrB,iBAAiB,EAAE,IAAI;IACvB,aAAa,EAAE,IAAI;IACnB,YAAY,EAAE,IAAI;IAClB,iBAAiB,EAAE,IAAI;IACvB,QAAQ,EAAE,IAAI;IACd,cAAc,EAAE,IAAI;IACpB,mBAAmB,EAAE,IAAI;IACzB,aAAa,EAAE,IAAI;IACnB,2BAA2B,EAAE,IAAI;IACjC,kBAAkB,EAAE,IAAI;IACxB,UAAU,EAAE,IAAI;CACR,CAAC;AAIX;;;GAGG;AACU,QAAA,uBAAuB,GAA8B;IAChE,IAAI,EAAE,yBAAyB;IAC/B,IAAI,EAAE,gBAAgB;IACtB,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,qBAAqB;IAC3B,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,mBAAmB;IACzB,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,mBAAmB;IACzB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,gBAAgB;IACtB,IAAI,EAAE,qBAAqB;IAC3B,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,6BAA6B;IACnC,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,YAAY;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,gBAAgB,GAAG,MAAC;KACvB,IAAI,CAAC;IACJ,IAAI;IACJ,aAAa;IACb,cAAc;IACd,WAAW;IACX,WAAW;IACX,mBAAmB;IACnB,uBAAuB;IACvB,qBAAqB;IACrB,iBAAiB;CAClB,CAAC;KACD,EAAE,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAElB;;GAEG;AACH,MAAM,kBAAkB,GAAG,MAAC;KACzB,MAAM,CAAC;IACN,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,eAAe,EAAE,MAAC,CAAC,MAAM,EAAE;IAC3B,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,KAAK,EAAE,CAAC;AAEX;;;GAGG;AACU,QAAA,YAAY,GAAG,MAAC;KAC1B,MAAM,CAAC;IACN,UAAU,EAAE,gBAAgB;IAC5B,QAAQ,EAAE,MAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,MAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjD,CAAC;KACD,KAAK,EAAE,CAAC;AAEX;;;;;GAKG;AACU,QAAA,2BAA2B,GAAG,MAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,oBAAY;IACpB,aAAa,EAAE,MAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAC,CAAC,KAAK,CACpB,MAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,MAAC,CAAC,MAAM,EAAE;QACjB,QAAQ,EAAE,MAAC,CAAC,MAAM,EAAE;KACrB,CAAC,CACH;IACD,WAAW,EAAE,MAAC,CAAC,OAAO,EAAE;IACxB,OAAO,EAAE,wCAAqB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC"}

package/dist/api/schemas/telemetry.d.ts

@@ -0,0 +1,66 @@
+import { z } from "zod/v4";
+/**
+ * Re-exports of the call-capture telemetry types so the schema stays the
+ * single source of truth. The lib/telemetry/call-capture module is the
+ * canonical writer (it owns the schema + classifier helper); this barrel
+ * makes the same types available to the judge / self-heal reader paths
+ * without a redundant definition that could silently diverge.
+ */
+export { type LlmCallFailureKind, type LlmCallSample, llmCallFailureKindSchema, llmCallSampleSchema, } from "../../lib/telemetry/call-capture";
+/**
+ * Per-sample verdict produced by the judge skill. Three boolean dimensions
+ * plus an aggregate `pass` (all three must be true).
+ */
+declare const judgeVerdictEntrySchema: z.ZodObject<{
+    callId: z.ZodString;
+    schemaOk: z.ZodBoolean;
+    schemaRationale: z.ZodString;
+    factuallyGrounded: z.ZodBoolean;
+    factualRationale: z.ZodString;
+    hallucinationFree: z.ZodBoolean;
+    hallucinationRationale: z.ZodString;
+    worstOffender: z.ZodOptional<z.ZodString>;
+    pass: z.ZodBoolean;
+}, z.core.$strip>;
+export type JudgeVerdictEntry = z.infer<typeof judgeVerdictEntrySchema>;
+/**
+ * Aggregate counts across all judged samples in a verdict file.
+ */
+declare const judgeAggregateSchema: z.ZodObject<{
+    n: z.ZodNumber;
+    schemaPass: z.ZodNumber;
+    factualPass: z.ZodNumber;
+    hallucinationFreePass: z.ZodNumber;
+    overallPass: z.ZodNumber;
+}, z.core.$strip>;
+export type JudgeAggregate = z.infer<typeof judgeAggregateSchema>;
+/**
+ * Top-level verdict file produced by the judge skill for one batch. Mirrors
+ * beacon/pila's verdict-JSON shape but in Barnacle's camelCase convention.
+ */
+export declare const judgeVerdictSchema: z.ZodObject<{
+    callType: z.ZodString;
+    batchIndex: z.ZodNumber;
+    judgedAt: z.ZodString;
+    judgeModel: z.ZodString;
+    verdicts: z.ZodArray<z.ZodObject<{
+        callId: z.ZodString;
+        schemaOk: z.ZodBoolean;
+        schemaRationale: z.ZodString;
+        factuallyGrounded: z.ZodBoolean;
+        factualRationale: z.ZodString;
+        hallucinationFree: z.ZodBoolean;
+        hallucinationRationale: z.ZodString;
+        worstOffender: z.ZodOptional<z.ZodString>;
+        pass: z.ZodBoolean;
+    }, z.core.$strip>>;
+    aggregate: z.ZodObject<{
+        n: z.ZodNumber;
+        schemaPass: z.ZodNumber;
+        factualPass: z.ZodNumber;
+        hallucinationFreePass: z.ZodNumber;
+        overallPass: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type JudgeVerdict = z.infer<typeof judgeVerdictSchema>;
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/api/schemas/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../../src/api/schemas/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;;;;GAMG;AACH,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AAEtC;;;GAGG;AACH,QAAA,MAAM,uBAAuB;;;;;;;;;;iBAU3B,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,QAAA,MAAM,oBAAoB;;;;;;iBAMxB,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;iBAO7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}