@gracker/smartperfetto 1.0.13

package/dist/services/enterpriseOidcClient.js

@@ -0,0 +1,124 @@
+"use strict";
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2024-2026 Gracker (Chris)
+// This file is part of SmartPerfetto. See LICENSE for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnterpriseOidcClient = exports.OIDC_ENV = void 0;
+exports.resolveOidcRuntimeConfig = resolveOidcRuntimeConfig;
+exports.OIDC_ENV = {
+    issuerUrl: 'SMARTPERFETTO_OIDC_ISSUER_URL',
+    clientId: 'SMARTPERFETTO_OIDC_CLIENT_ID',
+    clientSecret: 'SMARTPERFETTO_OIDC_CLIENT_SECRET',
+    redirectUri: 'SMARTPERFETTO_OIDC_REDIRECT_URI',
+    scopes: 'SMARTPERFETTO_OIDC_SCOPES',
+};
+function normalizeIssuerUrl(value) {
+    return value.replace(/\/+$/, '');
+}
+function discoveryUrlForIssuer(issuerUrl) {
+    const normalized = normalizeIssuerUrl(issuerUrl);
+    if (normalized.endsWith('/.well-known/openid-configuration'))
+        return normalized;
+    return `${normalized}/.well-known/openid-configuration`;
+}
+function resolveOidcRuntimeConfig(env = process.env) {
+    const issuerUrl = env[exports.OIDC_ENV.issuerUrl]?.trim();
+    const clientId = env[exports.OIDC_ENV.clientId]?.trim();
+    const redirectUri = env[exports.OIDC_ENV.redirectUri]?.trim();
+    if (!issuerUrl || !clientId || !redirectUri)
+        return null;
+    return {
+        issuerUrl: normalizeIssuerUrl(issuerUrl),
+        clientId,
+        clientSecret: env[exports.OIDC_ENV.clientSecret]?.trim() || undefined,
+        redirectUri,
+        scopes: (env[exports.OIDC_ENV.scopes] || 'openid email profile')
+            .split(/[,\s]+/)
+            .map(scope => scope.trim())
+            .filter(Boolean),
+    };
+}
+class EnterpriseOidcClient {
+    constructor(config, fetchImpl = fetch) {
+        this.config = config;
+        this.fetchImpl = fetchImpl;
+        this.discovery = null;
+    }
+    static fromEnv(env = process.env) {
+        const config = resolveOidcRuntimeConfig(env);
+        return config ? new EnterpriseOidcClient(config) : null;
+    }
+    async buildAuthorizationUrl(params) {
+        const discovery = await this.getDiscovery();
+        const url = new URL(discovery.authorization_endpoint);
+        url.searchParams.set('response_type', 'code');
+        url.searchParams.set('client_id', this.config.clientId);
+        url.searchParams.set('redirect_uri', this.config.redirectUri);
+        url.searchParams.set('scope', this.config.scopes.join(' '));
+        url.searchParams.set('state', params.state);
+        url.searchParams.set('nonce', params.nonce);
+        return url.toString();
+    }
+    async exchangeCodeForUserInfo(code) {
+        const discovery = await this.getDiscovery();
+        if (!discovery.userinfo_endpoint) {
+            throw new Error('OIDC discovery document is missing userinfo_endpoint');
+        }
+        const body = new URLSearchParams();
+        body.set('grant_type', 'authorization_code');
+        body.set('code', code);
+        body.set('redirect_uri', this.config.redirectUri);
+        body.set('client_id', this.config.clientId);
+        if (this.config.clientSecret) {
+            body.set('client_secret', this.config.clientSecret);
+        }
+        const tokenResponse = await this.fetchImpl(discovery.token_endpoint, {
+            method: 'POST',
+            headers: { 'content-type': 'application/x-www-form-urlencoded' },
+            body,
+        });
+        if (!tokenResponse.ok) {
+            throw new Error(`OIDC token exchange failed with status ${tokenResponse.status}`);
+        }
+        const token = await tokenResponse.json();
+        if (!token.access_token || typeof token.access_token !== 'string') {
+            throw new Error('OIDC token response did not include access_token');
+        }
+        const userInfoResponse = await this.fetchImpl(discovery.userinfo_endpoint, {
+            headers: {
+                authorization: `Bearer ${token.access_token}`,
+            },
+        });
+        if (!userInfoResponse.ok) {
+            throw new Error(`OIDC userinfo request failed with status ${userInfoResponse.status}`);
+        }
+        const claims = await userInfoResponse.json();
+        const subject = typeof claims.sub === 'string' ? claims.sub.trim() : '';
+        if (!subject) {
+            throw new Error('OIDC userinfo response did not include sub');
+        }
+        return {
+            issuer: discovery.issuer || this.config.issuerUrl,
+            subject,
+            email: typeof claims.email === 'string' ? claims.email : undefined,
+            displayName: typeof claims.name === 'string' ? claims.name : undefined,
+            claims,
+        };
+    }
+    async getDiscovery() {
+        if (this.discovery)
+            return this.discovery;
+        const response = await this.fetchImpl(discoveryUrlForIssuer(this.config.issuerUrl));
+        if (!response.ok) {
+            throw new Error(`OIDC discovery failed with status ${response.status}`);
+        }
+        const parsed = await response.json();
+        if (!parsed.authorization_endpoint || !parsed.token_endpoint) {
+            throw new Error('OIDC discovery document is missing required endpoints');
+        }
+        this.discovery = parsed;
+        return parsed;
+    }
+}
+exports.EnterpriseOidcClient = EnterpriseOidcClient;
+//# sourceMappingURL=enterpriseOidcClient.js.map

package/dist/services/enterpriseOidcClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterpriseOidcClient.js","sourceRoot":"","sources":["../../src/services/enterpriseOidcClient.ts"],"names":[],"mappings":";AAAA,6CAA6C;AAC7C,0CAA0C;AAC1C,+DAA+D;;;AAmD/D,4DAeC;AAjCY,QAAA,QAAQ,GAAG;IACtB,SAAS,EAAE,+BAA+B;IAC1C,QAAQ,EAAE,8BAA8B;IACxC,YAAY,EAAE,kCAAkC;IAChD,WAAW,EAAE,iCAAiC;IAC9C,MAAM,EAAE,2BAA2B;CAC3B,CAAC;AAEX,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAAE,OAAO,UAAU,CAAC;IAChF,OAAO,GAAG,UAAU,mCAAmC,CAAC;AAC1D,CAAC;AAED,SAAgB,wBAAwB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC3E,MAAM,SAAS,GAAG,GAAG,CAAC,gBAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,gBAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,WAAW,GAAG,GAAG,CAAC,gBAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO;QACL,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC;QACxC,QAAQ;QACR,YAAY,EAAE,GAAG,CAAC,gBAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS;QAC7D,WAAW;QACX,MAAM,EAAE,CAAC,GAAG,CAAC,gBAAQ,CAAC,MAAM,CAAC,IAAI,sBAAsB,CAAC;aACrD,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC;KACnB,CAAC;AACJ,CAAC;AAED,MAAa,oBAAoB;IAG/B,YACmB,MAAyB,EACzB,YAA0B,KAAK;QAD/B,WAAM,GAAN,MAAM,CAAmB;QACzB,cAAS,GAAT,SAAS,CAAsB;QAJ1C,cAAS,GAAiC,IAAI,CAAC;IAKpD,CAAC;IAEJ,MAAM,CAAC,OAAO,CAAC,MAAyB,OAAO,CAAC,GAAG;QACjD,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAG3B;QACC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,IAAY;QACxC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,0CAA0C,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,EAAuB,CAAC;QAC9D,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,iBAAiB,EAAE;YACzE,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,CAAC,YAAY,EAAE;aAC9C;SACF,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4CAA4C,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAA6B,CAAC;QACxE,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YACjD,OAAO;YACP,KAAK,EAAE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAClE,WAAW,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACtE,MAAM;SACP,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA2B,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AA5FD,oDA4FC"}

package/dist/services/enterpriseQuotaPolicyService.d.ts

@@ -0,0 +1,37 @@
+import type Database from 'better-sqlite3';
+import type { RequestContext } from '../middleware/auth';
+import type { EnterpriseRepositoryScope } from './enterpriseRepository';
+export type EnterpriseQuotaDecisionCode = 'OK' | 'TRACE_SIZE_QUOTA_EXCEEDED' | 'WORKSPACE_TRACE_STORAGE_QUOTA_EXCEEDED' | 'CONCURRENT_RUN_QUOTA_EXCEEDED' | 'MONTHLY_RUN_QUOTA_EXCEEDED';
+export type EnterpriseQuotaDecisionStatus = 'allowed' | 'pending' | 'quota_exceeded';
+export interface WorkspaceQuotaPolicy {
+    maxTraceBytes?: number;
+    maxWorkspaceTraceBytes?: number;
+    maxConcurrentRuns?: number;
+    monthlyRunLimit?: number;
+}
+export interface WorkspaceRetentionPolicy {
+    defaultRetentionDays?: number;
+    traceRetentionDays?: number;
+    reportRetentionDays?: number;
+}
+export interface WorkspaceEnterprisePolicies {
+    quotaPolicy: WorkspaceQuotaPolicy;
+    retentionPolicy: WorkspaceRetentionPolicy;
+}
+export interface EnterpriseQuotaDecision {
+    allowed: boolean;
+    code: EnterpriseQuotaDecisionCode;
+    status: EnterpriseQuotaDecisionStatus;
+    httpStatus: number;
+    message: string;
+    details: Record<string, number | string | boolean>;
+}
+export declare function readWorkspaceEnterprisePolicies(db: Database.Database, scope: EnterpriseRepositoryScope): WorkspaceEnterprisePolicies;
+export declare function resolveEnterpriseRetentionExpiresAt(db: Database.Database, scope: EnterpriseRepositoryScope, artifactType: 'trace' | 'report', createdAt: number): number | null;
+export declare function evaluateTraceUploadQuota(context: RequestContext, sizeBytes: number, options?: {
+    now?: number;
+}): EnterpriseQuotaDecision;
+export declare function evaluateAnalysisRunQuota(context: RequestContext, options?: {
+    now?: number;
+}): EnterpriseQuotaDecision;
+//# sourceMappingURL=enterpriseQuotaPolicyService.d.ts.map

package/dist/services/enterpriseQuotaPolicyService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterpriseQuotaPolicyService.d.ts","sourceRoot":"","sources":["../../src/services/enterpriseQuotaPolicyService.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAExE,MAAM,MAAM,2BAA2B,GACnC,IAAI,GACJ,2BAA2B,GAC3B,wCAAwC,GACxC,+BAA+B,GAC/B,4BAA4B,CAAC;AAEjC,MAAM,MAAM,6BAA6B,GACrC,SAAS,GACT,SAAS,GACT,gBAAgB,CAAC;AAErB,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,oBAAoB,CAAC;IAClC,eAAe,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,2BAA2B,CAAC;IAClC,MAAM,EAAE,6BAA6B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACpD;AAwHD,wBAAgB,+BAA+B,CAC7C,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,yBAAyB,GAC/B,2BAA2B,CAY7B;AAED,wBAAgB,mCAAmC,CACjD,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,yBAAyB,EAChC,YAAY,EAAE,OAAO,GAAG,QAAQ,EAChC,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,IAAI,CAOf;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,uBAAuB,CA8CzB;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,uBAAuB,CAkDzB"}

package/dist/services/enterpriseQuotaPolicyService.js

@@ -0,0 +1,198 @@
+"use strict";
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2024-2026 Gracker (Chris)
+// This file is part of SmartPerfetto. See LICENSE for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readWorkspaceEnterprisePolicies = readWorkspaceEnterprisePolicies;
+exports.resolveEnterpriseRetentionExpiresAt = resolveEnterpriseRetentionExpiresAt;
+exports.evaluateTraceUploadQuota = evaluateTraceUploadQuota;
+exports.evaluateAnalysisRunQuota = evaluateAnalysisRunQuota;
+const config_1 = require("../config");
+const enterpriseDb_1 = require("./enterpriseDb");
+const DAY_MS = 24 * 60 * 60 * 1000;
+const ACTIVE_RUN_STATUSES = ['pending', 'running', 'awaiting_user'];
+function allowedDecision() {
+    return {
+        allowed: true,
+        code: 'OK',
+        status: 'allowed',
+        httpStatus: 200,
+        message: 'Allowed',
+        details: {},
+    };
+}
+function denyDecision(code, status, httpStatus, message, details) {
+    return {
+        allowed: false,
+        code,
+        status,
+        httpStatus,
+        message,
+        details,
+    };
+}
+function parseObjectJson(value) {
+    if (!value)
+        return {};
+    try {
+        const parsed = JSON.parse(value);
+        return parsed && typeof parsed === 'object' && !Array.isArray(parsed)
+            ? parsed
+            : {};
+    }
+    catch {
+        return {};
+    }
+}
+function nonNegativeInteger(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value < 0)
+        return undefined;
+    return Math.floor(value);
+}
+function normalizeQuotaPolicy(raw) {
+    return {
+        maxTraceBytes: nonNegativeInteger(raw.maxTraceBytes),
+        maxWorkspaceTraceBytes: nonNegativeInteger(raw.maxWorkspaceTraceBytes),
+        maxConcurrentRuns: nonNegativeInteger(raw.maxConcurrentRuns),
+        monthlyRunLimit: nonNegativeInteger(raw.monthlyRunLimit),
+    };
+}
+function normalizeRetentionPolicy(raw) {
+    return {
+        defaultRetentionDays: nonNegativeInteger(raw.defaultRetentionDays),
+        traceRetentionDays: nonNegativeInteger(raw.traceRetentionDays),
+        reportRetentionDays: nonNegativeInteger(raw.reportRetentionDays),
+    };
+}
+function monthStartMs(now) {
+    const date = new Date(now);
+    return Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), 1);
+}
+function workspaceTraceBytes(db, scope, now) {
+    const row = db.prepare(`
+    SELECT COALESCE(SUM(size_bytes), 0) AS total
+    FROM trace_assets
+    WHERE tenant_id = ?
+      AND workspace_id = ?
+      AND status <> 'deleted'
+      AND (expires_at IS NULL OR expires_at > ?)
+  `).get(scope.tenantId, scope.workspaceId, now);
+    return row?.total ?? 0;
+}
+function activeRunCount(db, scope) {
+    const placeholders = ACTIVE_RUN_STATUSES.map(() => '?').join(', ');
+    const row = db.prepare(`
+    SELECT COUNT(*) AS count
+    FROM analysis_runs
+    WHERE tenant_id = ?
+      AND workspace_id = ?
+      AND status IN (${placeholders})
+  `).get(scope.tenantId, scope.workspaceId, ...ACTIVE_RUN_STATUSES);
+    return row?.count ?? 0;
+}
+function monthlyRunCount(db, scope, now) {
+    const row = db.prepare(`
+    SELECT COUNT(*) AS count
+    FROM analysis_runs
+    WHERE tenant_id = ?
+      AND workspace_id = ?
+      AND started_at >= ?
+  `).get(scope.tenantId, scope.workspaceId, monthStartMs(now));
+    return row?.count ?? 0;
+}
+function readWorkspaceEnterprisePolicies(db, scope) {
+    const row = db.prepare(`
+    SELECT quota_policy, retention_policy
+    FROM workspaces
+    WHERE tenant_id = ?
+      AND id = ?
+    LIMIT 1
+  `).get(scope.tenantId, scope.workspaceId);
+    return {
+        quotaPolicy: normalizeQuotaPolicy(parseObjectJson(row?.quota_policy ?? null)),
+        retentionPolicy: normalizeRetentionPolicy(parseObjectJson(row?.retention_policy ?? null)),
+    };
+}
+function resolveEnterpriseRetentionExpiresAt(db, scope, artifactType, createdAt) {
+    const { retentionPolicy } = readWorkspaceEnterprisePolicies(db, scope);
+    const days = artifactType === 'trace'
+        ? retentionPolicy.traceRetentionDays ?? retentionPolicy.defaultRetentionDays
+        : retentionPolicy.reportRetentionDays ?? retentionPolicy.defaultRetentionDays;
+    if (days === undefined)
+        return null;
+    return createdAt + days * DAY_MS;
+}
+function evaluateTraceUploadQuota(context, sizeBytes, options = {}) {
+    if (!(0, config_1.resolveFeatureConfig)().enterprise)
+        return allowedDecision();
+    const now = options.now ?? Date.now();
+    const requestedBytes = Math.max(0, Math.floor(sizeBytes));
+    const db = (0, enterpriseDb_1.openEnterpriseDb)();
+    try {
+        const scope = {
+            tenantId: context.tenantId,
+            workspaceId: context.workspaceId,
+            userId: context.userId,
+        };
+        const { quotaPolicy } = readWorkspaceEnterprisePolicies(db, scope);
+        if (quotaPolicy.maxTraceBytes !== undefined && requestedBytes > quotaPolicy.maxTraceBytes) {
+            return denyDecision('TRACE_SIZE_QUOTA_EXCEEDED', 'quota_exceeded', 413, 'Trace upload exceeds workspace per-trace quota', {
+                requestedBytes,
+                limitBytes: quotaPolicy.maxTraceBytes,
+            });
+        }
+        if (quotaPolicy.maxWorkspaceTraceBytes !== undefined) {
+            const currentBytes = workspaceTraceBytes(db, scope, now);
+            if (currentBytes + requestedBytes > quotaPolicy.maxWorkspaceTraceBytes) {
+                return denyDecision('WORKSPACE_TRACE_STORAGE_QUOTA_EXCEEDED', 'quota_exceeded', 409, 'Trace upload exceeds workspace trace storage quota', {
+                    currentBytes,
+                    requestedBytes,
+                    limitBytes: quotaPolicy.maxWorkspaceTraceBytes,
+                });
+            }
+        }
+        return allowedDecision();
+    }
+    finally {
+        db.close();
+    }
+}
+function evaluateAnalysisRunQuota(context, options = {}) {
+    if (!(0, config_1.resolveFeatureConfig)().enterprise)
+        return allowedDecision();
+    const now = options.now ?? Date.now();
+    const db = (0, enterpriseDb_1.openEnterpriseDb)();
+    try {
+        const scope = {
+            tenantId: context.tenantId,
+            workspaceId: context.workspaceId,
+            userId: context.userId,
+        };
+        const { quotaPolicy } = readWorkspaceEnterprisePolicies(db, scope);
+        if (quotaPolicy.monthlyRunLimit !== undefined) {
+            const usedRuns = monthlyRunCount(db, scope, now);
+            if (usedRuns >= quotaPolicy.monthlyRunLimit) {
+                return denyDecision('MONTHLY_RUN_QUOTA_EXCEEDED', 'quota_exceeded', 402, 'Workspace monthly run quota is exhausted', {
+                    usedRuns,
+                    limitRuns: quotaPolicy.monthlyRunLimit,
+                    windowStartMs: monthStartMs(now),
+                });
+            }
+        }
+        if (quotaPolicy.maxConcurrentRuns !== undefined) {
+            const activeRuns = activeRunCount(db, scope);
+            if (activeRuns >= quotaPolicy.maxConcurrentRuns) {
+                return denyDecision('CONCURRENT_RUN_QUOTA_EXCEEDED', 'pending', 429, 'Workspace concurrent run quota is full', {
+                    activeRuns,
+                    limitRuns: quotaPolicy.maxConcurrentRuns,
+                    queuePosition: activeRuns - quotaPolicy.maxConcurrentRuns + 1,
+                });
+            }
+        }
+        return allowedDecision();
+    }
+    finally {
+        db.close();
+    }
+}
+//# sourceMappingURL=enterpriseQuotaPolicyService.js.map

package/dist/services/enterpriseQuotaPolicyService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterpriseQuotaPolicyService.js","sourceRoot":"","sources":["../../src/services/enterpriseQuotaPolicyService.ts"],"names":[],"mappings":";AAAA,6CAA6C;AAC7C,0CAA0C;AAC1C,+DAA+D;;AAqK/D,0EAeC;AAED,kFAYC;AAED,4DAkDC;AAED,4DAqDC;AA1SD,sCAAiD;AAEjD,iDAAkD;AAuDlD,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAU,CAAC;AAE7E,SAAS,eAAe;IACtB,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,GAAG;QACf,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,IAAgD,EAChD,MAAyD,EACzD,UAAkB,EAClB,OAAe,EACf,OAAkD;IAElD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI;QACJ,MAAM;QACN,UAAU;QACV,OAAO;QACP,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAoB;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,CAAC,CAAC,MAAiC;YACnC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACxF,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,oBAAoB,CAAC,GAA4B;IACxD,OAAO;QACL,aAAa,EAAE,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC;QACpD,sBAAsB,EAAE,kBAAkB,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACtE,iBAAiB,EAAE,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC5D,eAAe,EAAE,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,GAA4B;IAC5D,OAAO;QACL,oBAAoB,EAAE,kBAAkB,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAClE,kBAAkB,EAAE,kBAAkB,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC9D,mBAAmB,EAAE,kBAAkB,CAAC,GAAG,CAAC,mBAAmB,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAqB,EAAE,KAAgC,EAAE,GAAW;IAC/F,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAoB;;;;;;;GAOzC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/C,OAAO,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,EAAqB,EAAE,KAAgC;IAC7E,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAsB;;;;;uBAKvB,YAAY;GAChC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,mBAAmB,CAAC,CAAC;IAClE,OAAO,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,EAAqB,EAAE,KAAgC,EAAE,GAAW;IAC3F,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAsB;;;;;;GAM3C,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAgB,+BAA+B,CAC7C,EAAqB,EACrB,KAAgC;IAEhC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAgC;;;;;;GAMrD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,OAAO;QACL,WAAW,EAAE,oBAAoB,CAAC,eAAe,CAAC,GAAG,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC;QAC7E,eAAe,EAAE,wBAAwB,CAAC,eAAe,CAAC,GAAG,EAAE,gBAAgB,IAAI,IAAI,CAAC,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,SAAgB,mCAAmC,CACjD,EAAqB,EACrB,KAAgC,EAChC,YAAgC,EAChC,SAAiB;IAEjB,MAAM,EAAE,eAAe,EAAE,GAAG,+BAA+B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,YAAY,KAAK,OAAO;QACnC,CAAC,CAAC,eAAe,CAAC,kBAAkB,IAAI,eAAe,CAAC,oBAAoB;QAC5E,CAAC,CAAC,eAAe,CAAC,mBAAmB,IAAI,eAAe,CAAC,oBAAoB,CAAC;IAChF,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,SAAS,GAAG,IAAI,GAAG,MAAM,CAAC;AACnC,CAAC;AAED,SAAgB,wBAAwB,CACtC,OAAuB,EACvB,SAAiB,EACjB,UAA4B,EAAE;IAE9B,IAAI,CAAC,IAAA,6BAAoB,GAAE,CAAC,UAAU;QAAE,OAAO,eAAe,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,IAAA,+BAAgB,GAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;QACF,MAAM,EAAE,WAAW,EAAE,GAAG,+BAA+B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACnE,IAAI,WAAW,CAAC,aAAa,KAAK,SAAS,IAAI,cAAc,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC;YAC1F,OAAO,YAAY,CACjB,2BAA2B,EAC3B,gBAAgB,EAChB,GAAG,EACH,gDAAgD,EAChD;gBACE,cAAc;gBACd,UAAU,EAAE,WAAW,CAAC,aAAa;aACtC,CACF,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;YACrD,MAAM,YAAY,GAAG,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACzD,IAAI,YAAY,GAAG,cAAc,GAAG,WAAW,CAAC,sBAAsB,EAAE,CAAC;gBACvE,OAAO,YAAY,CACjB,wCAAwC,EACxC,gBAAgB,EAChB,GAAG,EACH,oDAAoD,EACpD;oBACE,YAAY;oBACZ,cAAc;oBACd,UAAU,EAAE,WAAW,CAAC,sBAAsB;iBAC/C,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAgB,wBAAwB,CACtC,OAAuB,EACvB,UAA4B,EAAE;IAE9B,IAAI,CAAC,IAAA,6BAAoB,GAAE,CAAC,UAAU;QAAE,OAAO,eAAe,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,EAAE,GAAG,IAAA,+BAAgB,GAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;QACF,MAAM,EAAE,WAAW,EAAE,GAAG,+BAA+B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAEnE,IAAI,WAAW,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,QAAQ,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC;gBAC5C,OAAO,YAAY,CACjB,4BAA4B,EAC5B,gBAAgB,EAChB,GAAG,EACH,0CAA0C,EAC1C;oBACE,QAAQ;oBACR,SAAS,EAAE,WAAW,CAAC,eAAe;oBACtC,aAAa,EAAE,YAAY,CAAC,GAAG,CAAC;iBACjC,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,WAAW,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,UAAU,GAAG,cAAc,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAI,UAAU,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;gBAChD,OAAO,YAAY,CACjB,+BAA+B,EAC/B,SAAS,EACT,GAAG,EACH,wCAAwC,EACxC;oBACE,UAAU;oBACV,SAAS,EAAE,WAAW,CAAC,iBAAiB;oBACxC,aAAa,EAAE,UAAU,GAAG,WAAW,CAAC,iBAAiB,GAAG,CAAC;iBAC9D,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/services/enterpriseRepository.d.ts

@@ -0,0 +1,36 @@
+import type Database from 'better-sqlite3';
+import type { RequestContext } from '../middleware/auth';
+type SqliteBindValue = string | number | bigint | Buffer | null;
+export interface EnterpriseRepositoryScope {
+    tenantId: string;
+    workspaceId: string;
+    userId?: string;
+}
+export type EnterpriseWorkspaceScopedTable = 'trace_assets' | 'trace_processor_leases' | 'analysis_sessions' | 'analysis_runs' | 'conversation_turns' | 'agent_events' | 'analysis_result_snapshots' | 'runtime_snapshots' | 'report_artifacts' | 'memory_entries' | 'skill_registry_entries';
+export declare const ENTERPRISE_WORKSPACE_SCOPED_TABLES: readonly EnterpriseWorkspaceScopedTable[];
+export type EnterpriseQueryCriteria = Record<string, SqliteBindValue | undefined>;
+export type EnterpriseUpdateValues = Record<string, SqliteBindValue | undefined>;
+export interface ScopedWhereClause {
+    sql: string;
+    params: Record<string, SqliteBindValue>;
+}
+export interface ListOptions {
+    orderBy?: string;
+    direction?: 'ASC' | 'DESC';
+    limit?: number;
+}
+export declare function repositoryScopeFromRequestContext(context: RequestContext): EnterpriseRepositoryScope;
+export declare function buildWorkspaceScopedWhere(scope: EnterpriseRepositoryScope, criteria?: EnterpriseQueryCriteria): ScopedWhereClause;
+export declare class EnterpriseWorkspaceRepository<Row extends Record<string, unknown>> {
+    private readonly db;
+    private readonly table;
+    constructor(db: Database.Database, table: EnterpriseWorkspaceScopedTable);
+    getById(scope: EnterpriseRepositoryScope, id: string): Row | null;
+    list(scope: EnterpriseRepositoryScope, criteria?: EnterpriseQueryCriteria, options?: ListOptions): Row[];
+    updateById(scope: EnterpriseRepositoryScope, id: string, values: EnterpriseUpdateValues): number;
+    upsertById(scope: EnterpriseRepositoryScope, id: string, values: EnterpriseUpdateValues): number;
+    deleteById(scope: EnterpriseRepositoryScope, id: string): number;
+}
+export declare function createEnterpriseWorkspaceRepository<Row extends Record<string, unknown>>(db: Database.Database, table: EnterpriseWorkspaceScopedTable): EnterpriseWorkspaceRepository<Row>;
+export {};
+//# sourceMappingURL=enterpriseRepository.d.ts.map

package/dist/services/enterpriseRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterpriseRepository.d.ts","sourceRoot":"","sources":["../../src/services/enterpriseRepository.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,KAAK,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAEhE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,8BAA8B,GACtC,cAAc,GACd,wBAAwB,GACxB,mBAAmB,GACnB,eAAe,GACf,oBAAoB,GACpB,cAAc,GACd,2BAA2B,GAC3B,mBAAmB,GACnB,kBAAkB,GAClB,gBAAgB,GAChB,wBAAwB,CAAC;AAE7B,eAAO,MAAM,kCAAkC,EAAE,SAAS,8BAA8B,EAYvF,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC,CAAC;AAClF,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC,CAAC;AAEjF,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAyBD,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,cAAc,GAAG,yBAAyB,CAMpG;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,yBAAyB,EAChC,QAAQ,GAAE,uBAA4B,GACrC,iBAAiB,CA4BnB;AA4ED,qBAAa,6BAA6B,CAAC,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAE1E,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBADL,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,8BAA8B;IAKxD,OAAO,CAAC,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAUjE,IAAI,CACF,KAAK,EAAE,yBAAyB,EAChC,QAAQ,GAAE,uBAA4B,EACtC,OAAO,GAAE,WAAgB,GACxB,GAAG,EAAE;IAQR,UAAU,CAAC,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,MAAM;IAehG,UAAU,CAAC,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,MAAM;IAuBhG,UAAU,CAAC,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM;CASjE;AAED,wBAAgB,mCAAmC,CAAC,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACrF,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,8BAA8B,GACpC,6BAA6B,CAAC,GAAG,CAAC,CAEpC"}

package/dist/services/enterpriseRepository.js

@@ -0,0 +1,208 @@
+"use strict";
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2024-2026 Gracker (Chris)
+// This file is part of SmartPerfetto. See LICENSE for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnterpriseWorkspaceRepository = exports.ENTERPRISE_WORKSPACE_SCOPED_TABLES = void 0;
+exports.repositoryScopeFromRequestContext = repositoryScopeFromRequestContext;
+exports.buildWorkspaceScopedWhere = buildWorkspaceScopedWhere;
+exports.createEnterpriseWorkspaceRepository = createEnterpriseWorkspaceRepository;
+exports.ENTERPRISE_WORKSPACE_SCOPED_TABLES = [
+    'trace_assets',
+    'trace_processor_leases',
+    'analysis_sessions',
+    'analysis_runs',
+    'conversation_turns',
+    'agent_events',
+    'analysis_result_snapshots',
+    'runtime_snapshots',
+    'report_artifacts',
+    'memory_entries',
+    'skill_registry_entries',
+];
+const IDENTIFIER_RE = /^[a-z][a-z0-9_]*$/;
+const SCOPE_COLUMNS = new Set(['tenant_id', 'workspace_id']);
+const IMMUTABLE_UPDATE_COLUMNS = new Set(['id', 'tenant_id', 'workspace_id']);
+const IMMUTABLE_WRITE_COLUMNS = new Set(['id', 'tenant_id', 'workspace_id']);
+function assertNonEmptyId(value, name) {
+    if (!value.trim()) {
+        throw new Error(`${name} is required`);
+    }
+}
+function assertIdentifier(value, label) {
+    if (!IDENTIFIER_RE.test(value)) {
+        throw new Error(`Invalid ${label}: ${value}`);
+    }
+}
+function assertWorkspaceScopedTable(table) {
+    if (!exports.ENTERPRISE_WORKSPACE_SCOPED_TABLES.includes(table)) {
+        throw new Error(`Table is not workspace-scoped: ${table}`);
+    }
+}
+function repositoryScopeFromRequestContext(context) {
+    return {
+        tenantId: context.tenantId,
+        workspaceId: context.workspaceId,
+        userId: context.userId,
+    };
+}
+function buildWorkspaceScopedWhere(scope, criteria = {}) {
+    assertNonEmptyId(scope.tenantId, 'tenantId');
+    assertNonEmptyId(scope.workspaceId, 'workspaceId');
+    const clauses = [
+        'tenant_id = @scopeTenantId',
+        'workspace_id = @scopeWorkspaceId',
+    ];
+    const params = {
+        scopeTenantId: scope.tenantId,
+        scopeWorkspaceId: scope.workspaceId,
+    };
+    for (const [column, value] of Object.entries(criteria)) {
+        if (value === undefined)
+            continue;
+        assertIdentifier(column, 'criteria column');
+        if (SCOPE_COLUMNS.has(column)) {
+            throw new Error(`${column} must come from EnterpriseRepositoryScope`);
+        }
+        const paramName = `criteria_${column}`;
+        clauses.push(`${column} = @${paramName}`);
+        params[paramName] = value;
+    }
+    return {
+        sql: clauses.join(' AND '),
+        params,
+    };
+}
+function buildOrderClause(options) {
+    if (!options.orderBy)
+        return '';
+    assertIdentifier(options.orderBy, 'orderBy column');
+    const direction = options.direction ?? 'ASC';
+    if (direction !== 'ASC' && direction !== 'DESC') {
+        throw new Error(`Invalid order direction: ${direction}`);
+    }
+    return ` ORDER BY ${options.orderBy} ${direction}`;
+}
+function buildLimitClause(options) {
+    if (options.limit === undefined)
+        return '';
+    if (!Number.isInteger(options.limit) || options.limit < 1 || options.limit > 1000) {
+        throw new Error('limit must be an integer between 1 and 1000');
+    }
+    return ` LIMIT ${options.limit}`;
+}
+function normalizeUpdateValues(values) {
+    const assignments = [];
+    const params = {};
+    for (const [column, value] of Object.entries(values)) {
+        if (value === undefined)
+            continue;
+        assertIdentifier(column, 'update column');
+        if (IMMUTABLE_UPDATE_COLUMNS.has(column)) {
+            throw new Error(`${column} cannot be updated through a scoped repository`);
+        }
+        const paramName = `update_${column}`;
+        assignments.push(`${column} = @${paramName}`);
+        params[paramName] = value;
+    }
+    if (assignments.length === 0) {
+        throw new Error('At least one update value is required');
+    }
+    return { assignments, params };
+}
+function normalizeWriteValues(values) {
+    const columns = [];
+    const placeholders = [];
+    const updateAssignments = [];
+    const params = {};
+    for (const [column, value] of Object.entries(values)) {
+        if (value === undefined)
+            continue;
+        assertIdentifier(column, 'write column');
+        if (IMMUTABLE_WRITE_COLUMNS.has(column)) {
+            throw new Error(`${column} cannot be written through a scoped repository`);
+        }
+        const paramName = `write_${column}`;
+        columns.push(column);
+        placeholders.push(`@${paramName}`);
+        updateAssignments.push(`${column} = excluded.${column}`);
+        params[paramName] = value;
+    }
+    if (columns.length === 0) {
+        throw new Error('At least one write value is required');
+    }
+    return { columns, placeholders, updateAssignments, params };
+}
+class EnterpriseWorkspaceRepository {
+    constructor(db, table) {
+        this.db = db;
+        this.table = table;
+        assertWorkspaceScopedTable(table);
+    }
+    getById(scope, id) {
+        assertNonEmptyId(id, 'id');
+        const where = buildWorkspaceScopedWhere(scope, { id });
+        return this.db.prepare(`
+      SELECT * FROM ${this.table}
+      WHERE ${where.sql}
+      LIMIT 1
+    `).get(where.params) ?? null;
+    }
+    list(scope, criteria = {}, options = {}) {
+        const where = buildWorkspaceScopedWhere(scope, criteria);
+        return this.db.prepare(`
+      SELECT * FROM ${this.table}
+      WHERE ${where.sql}${buildOrderClause(options)}${buildLimitClause(options)}
+    `).all(where.params);
+    }
+    updateById(scope, id, values) {
+        assertNonEmptyId(id, 'id');
+        const where = buildWorkspaceScopedWhere(scope, { id });
+        const update = normalizeUpdateValues(values);
+        const result = this.db.prepare(`
+      UPDATE ${this.table}
+      SET ${update.assignments.join(', ')}
+      WHERE ${where.sql}
+    `).run({
+            ...where.params,
+            ...update.params,
+        });
+        return result.changes;
+    }
+    upsertById(scope, id, values) {
+        assertNonEmptyId(id, 'id');
+        assertNonEmptyId(scope.tenantId, 'tenantId');
+        assertNonEmptyId(scope.workspaceId, 'workspaceId');
+        const write = normalizeWriteValues(values);
+        const result = this.db.prepare(`
+      INSERT INTO ${this.table}
+        (id, tenant_id, workspace_id, ${write.columns.join(', ')})
+      VALUES
+        (@insertId, @scopeTenantId, @scopeWorkspaceId, ${write.placeholders.join(', ')})
+      ON CONFLICT(id) DO UPDATE SET
+        ${write.updateAssignments.join(', ')}
+      WHERE tenant_id = @scopeTenantId
+        AND workspace_id = @scopeWorkspaceId
+    `).run({
+            insertId: id,
+            scopeTenantId: scope.tenantId,
+            scopeWorkspaceId: scope.workspaceId,
+            ...write.params,
+        });
+        return result.changes;
+    }
+    deleteById(scope, id) {
+        assertNonEmptyId(id, 'id');
+        const where = buildWorkspaceScopedWhere(scope, { id });
+        const result = this.db.prepare(`
+      DELETE FROM ${this.table}
+      WHERE ${where.sql}
+    `).run(where.params);
+        return result.changes;
+    }
+}
+exports.EnterpriseWorkspaceRepository = EnterpriseWorkspaceRepository;
+function createEnterpriseWorkspaceRepository(db, table) {
+    return new EnterpriseWorkspaceRepository(db, table);
+}
+//# sourceMappingURL=enterpriseRepository.js.map

package/dist/services/enterpriseRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterpriseRepository.js","sourceRoot":"","sources":["../../src/services/enterpriseRepository.ts"],"names":[],"mappings":";AAAA,6CAA6C;AAC7C,0CAA0C;AAC1C,+DAA+D;;;AA6E/D,8EAMC;AAED,8DA+BC;AA2JD,kFAKC;AA1PY,QAAA,kCAAkC,GAA8C;IAC3F,cAAc;IACd,wBAAwB;IACxB,mBAAmB;IACnB,eAAe;IACf,oBAAoB;IACpB,cAAc;IACd,2BAA2B;IAC3B,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,wBAAwB;CACzB,CAAC;AAgBF,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAC7D,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAC9E,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAE7E,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY;IACnD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAa;IACpD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa;IAC/C,IAAI,CAAE,0CAAwD,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAgB,iCAAiC,CAAC,OAAuB;IACvE,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CACvC,KAAgC,EAChC,WAAoC,EAAE;IAEtC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7C,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAEnD,MAAM,OAAO,GAAG;QACd,4BAA4B;QAC5B,kCAAkC;KACnC,CAAC;IACF,MAAM,MAAM,GAAoC;QAC9C,aAAa,EAAE,KAAK,CAAC,QAAQ;QAC7B,gBAAgB,EAAE,KAAK,CAAC,WAAW;KACpC,CAAC;IAEF,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC5C,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,2CAA2C,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,MAAM,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,SAAS,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAoB;IAC5C,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAChC,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,4BAA4B,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,aAAa,OAAO,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAoB;IAC5C,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA8B;IAI3D,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,MAAM,GAAoC,EAAE,CAAC;IAEnD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAC1C,IAAI,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,gDAAgD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,MAAM,EAAE,CAAC;QACrC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,SAAS,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,oBAAoB,CAAC,MAA8B;IAM1D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,MAAM,MAAM,GAAoC,EAAE,CAAC;IAEnD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACzC,IAAI,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,gDAAgD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,SAAS,GAAG,SAAS,MAAM,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;QACnC,iBAAiB,CAAC,IAAI,CAAC,GAAG,MAAM,eAAe,MAAM,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;AAC9D,CAAC;AAED,MAAa,6BAA6B;IACxC,YACmB,EAAqB,EACrB,KAAqC;QADrC,OAAE,GAAF,EAAE,CAAmB;QACrB,UAAK,GAAL,KAAK,CAAgC;QAEtD,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,KAAgC,EAAE,EAAU;QAClD,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;sBACL,IAAI,CAAC,KAAK;cAClB,KAAK,CAAC,GAAG;;KAElB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAoB,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,IAAI,CACF,KAAgC,EAChC,WAAoC,EAAE,EACtC,UAAuB,EAAE;QAEzB,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;sBACL,IAAI,CAAC,KAAK;cAClB,KAAK,CAAC,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC;KAC1E,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAU,CAAC;IAChC,CAAC;IAED,UAAU,CAAC,KAAgC,EAAE,EAAU,EAAE,MAA8B;QACrF,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;eACpB,IAAI,CAAC,KAAK;YACb,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;cAC3B,KAAK,CAAC,GAAG;KAClB,CAAC,CAAC,GAAG,CAAC;YACL,GAAG,KAAK,CAAC,MAAM;YACf,GAAG,MAAM,CAAC,MAAM;SACjB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,UAAU,CAAC,KAAgC,EAAE,EAAU,EAAE,MAA8B;QACrF,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3B,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7C,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;oBACf,IAAI,CAAC,KAAK;wCACU,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;;yDAEP,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;;UAE5E,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;;;KAGvC,CAAC,CAAC,GAAG,CAAC;YACL,QAAQ,EAAE,EAAE;YACZ,aAAa,EAAE,KAAK,CAAC,QAAQ;YAC7B,gBAAgB,EAAE,KAAK,CAAC,WAAW;YACnC,GAAG,KAAK,CAAC,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,UAAU,CAAC,KAAgC,EAAE,EAAU;QACrD,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;oBACf,IAAI,CAAC,KAAK;cAChB,KAAK,CAAC,GAAG;KAClB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF;AA7ED,sEA6EC;AAED,SAAgB,mCAAmC,CACjD,EAAqB,EACrB,KAAqC;IAErC,OAAO,IAAI,6BAA6B,CAAM,EAAE,EAAE,KAAK,CAAC,CAAC;AAC3D,CAAC"}