@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.11

package/dist/ai/runtime/ai-limits.service.js

@@ -0,0 +1,366 @@
+"use strict";
+// =============================================================================
+// AiLimitsService — per-user and per-model AI rate limits (issue #450, epic #421)
+// =============================================================================
+//
+// The facade's gate right AFTER key resolution (`AiService.context`), so
+// whose key pays (`keySource`) is known: `ai.limits.orgKey.*` counts only
+// calls the ORG key pays for, and a user on their own key is never counted
+// against it. Every limit is optional and ABSENT MEANS UNLIMITED; with no
+// applicable limit configured this gate returns without a single query.
+//
+// WHAT COUNTS. One `ai_usage_events` row is one request — every inference
+// round-trip the facade records (responses, each step of a tool loop,
+// embeddings, and the queued media runs WHEN THEY EXECUTE; `startRun`,
+// `generateImage`, `transcribe` and `speak` only enqueue, never pass this
+// gate, and so are never counted twice). Only `keySource` `user`/`org`/`none`
+// rows count: a catalog discovery sync (`admin_discovery`) is the deployment's
+// own call, not any user's. A keyless call (`none`, #448) counts like a user's
+// own-key call — against the per-user and per-model limits, never the org-key
+// ones, since no org key pays for it. Failed and cancelled round-trips count too — they
+// reached the provider. A call THIS gate refused records no row, so a user
+// hammering a limit does not extend their own lock-out.
+//
+// TWO KINDS OF WINDOW
+//
+//  - Per minute (`perUser.requestsPerMinute`,
+//    `perModel[…].requestsPerMinutePerUser`): a sliding 60-second window,
+//    answered from TWO sources, and the larger count wins:
+//      1. an in-process log of admitted calls per `userId` /
+//         `userId:provider:model`, reserved SYNCHRONOUSLY before any await,
+//         so a burst of concurrent calls in one replica cannot all slip past
+//         the check before any of them has finished (and written its usage
+//         row); and
+//      2. a `COUNT(*)` over `ai_usage_events` for the same user (and model) in
+//         the last 60 seconds — the `(user_id, created_at)` index — so several
+//         API replicas agree on one budget.
+//    ⚠ THE TRADE-OFF. There is no Redis (or any shared cache) in this
+//    template, and adding one for this alone was rejected. The database count
+//    LAGS BY IN-FLIGHT REQUESTS: a usage row is written when a round-trip
+//    finishes, so calls still running on OTHER replicas are invisible to it.
+//    The local log covers bursts within one replica exactly; across replicas
+//    the limit is approximate by at most the number of calls in flight on the
+//    others. That is the right precision for abuse protection, and the wrong
+//    tool for billing (use `GET /api/admin/ai/usage` for that).
+//
+//  - Per UTC day (`perUser.requestsPerDay`, `orgKey.requestsPerDayPerUser`,
+//    `orgKey.tokensPerDayPerUser`): `ai_usage_events` counts / sums since UTC
+//    midnight — the same day boundary the usage report uses. Tokens are
+//    `input_tokens + output_tokens` (reasoning tokens are part of output, and
+//    cached input tokens part of input, in every provider's accounting).
+//
+// RETRY-AFTER. Exceeding a limit throws `AiError('AI_RATE_LIMITED')` (429)
+// with `retryAfterMs` and `details.limit` naming the limit. For a minute
+// window it is the time until enough of the counted calls have left the
+// window for one more to fit; for a daily one, the time until the next UTC
+// midnight. Never less than one second. A background run deferred by it
+// (`toRateLimitError()`) is retried then, not failed.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AiLimitsService = exports.AI_LIMITS_CLOCK = exports.AI_LIMIT_MIN_RETRY_MS = exports.AI_LIMIT_MINUTE_MS = void 0;
+exports.aiModelLimitKey = aiModelLimitKey;
+exports.modelLimits = modelLimits;
+exports.effectiveOutputTokensCap = effectiveOutputTokensCap;
+exports.utcMidnight = utcMidnight;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../core/index");
+const ai_config_service_1 = require("../config/ai-config.service");
+const ai_error_1 = require("../core/ai-error");
+/** The sliding window of a per-minute limit. */
+exports.AI_LIMIT_MINUTE_MS = 60_000;
+/** The shortest `retryAfterMs` a limit answers with. */
+exports.AI_LIMIT_MIN_RETRY_MS = 1_000;
+/**
+ * Injection token for the limiter's clock — tests pass a fake one.
+ *
+ * @internal
+ */
+exports.AI_LIMITS_CLOCK = Symbol('AI_LIMITS_CLOCK');
+/** Past this many local keys, every stale entry is swept on the next call. */
+const LOCAL_SWEEP_THRESHOLD = 10_000;
+/** The `keySource` values that are a user's request — never `admin_discovery`. */
+const COUNTED_KEY_SOURCES = ['user', 'org', 'none'];
+/** A `perModel` entry's key: `<provider>:<modelId>`. */
+function aiModelLimitKey(provider, modelId) {
+    return `${provider}:${modelId}`;
+}
+/** The `perModel` entry for one model, or `undefined`. */
+function modelLimits(limits, provider, modelId) {
+    const perModel = limits?.perModel;
+    const key = aiModelLimitKey(provider, modelId);
+    return perModel && Object.prototype.hasOwnProperty.call(perModel, key) ? perModel[key] : undefined;
+}
+/**
+ * The output-token cap for a call to `provider`/`modelId`: the smaller of the
+ * deployment-wide `defaults.maxOutputTokensCap` and the model's
+ * `ai.limits.perModel[…].maxOutputTokens`, or `undefined` when neither is set.
+ */
+function effectiveOutputTokensCap(deploymentCap, limits, provider, modelId) {
+    const caps = [deploymentCap, modelLimits(limits, provider, modelId)?.maxOutputTokens].filter((value) => value !== undefined);
+    return caps.length > 0 ? Math.min(...caps) : undefined;
+}
+/**
+ * Exported for the reference app's wiring and tests (route discovery, contract
+ * and egress suites); not part of the slice's documented surface.
+ *
+ * @internal
+ */
+let AiLimitsService = class AiLimitsService {
+    prisma;
+    aiConfig;
+    /** Admission times (ms), oldest first, per local key. */
+    admitted = new Map();
+    now;
+    constructor(prisma, aiConfig, clock) {
+        this.prisma = prisma;
+        this.aiConfig = aiConfig;
+        this.now = clock ?? (() => Date.now());
+    }
+    /**
+     * Admits `call`, or throws `AiError('AI_RATE_LIMITED')` naming the first
+     * limit it would exceed. Admission is recorded locally at once (see the file
+     * header); a refused call records nothing.
+     */
+    async enforce(call) {
+        // #739: the organization's effective policy (its org layer can only lower
+        // `limits.perOrg`; every other limit is the deployment's).
+        const { limits } = await this.aiConfig.resolveForOrg(call.orgId);
+        const minutes = this.minuteWindows(limits, call);
+        const days = dayWindows(limits, call);
+        // Nothing applies: no query, no bookkeeping.
+        if (minutes.length === 0 && days.length === 0)
+            return;
+        const now = this.now();
+        // 1. Local per-minute logs — check AND reserve before the first await.
+        const reserved = [];
+        for (const window of minutes) {
+            const log = this.log(window.key, now);
+            if (log.length >= window.max) {
+                this.release(reserved, now);
+                throw minuteLimitExceeded(window, call, retryFromOldest(log, window.max, now));
+            }
+        }
+        for (const window of minutes) {
+            this.log(window.key, now).push(now);
+            reserved.push(window);
+        }
+        try {
+            // 2. The database, so replicas agree (per-minute) and for daily totals.
+            for (const window of minutes) {
+                await this.checkMinuteInDatabase(window, call, now);
+            }
+            for (const window of days) {
+                await this.checkDay(window, call, now);
+            }
+        }
+        catch (err) {
+            this.release(reserved, now);
+            throw err;
+        }
+    }
+    // ---- per-minute ----------------------------------------------------------------
+    minuteWindows(limits, call) {
+        const windows = [];
+        const perUser = limits?.perUser?.requestsPerMinute;
+        const perModel = modelLimits(limits, call.provider, call.modelId)?.requestsPerMinutePerUser;
+        if (perUser !== undefined) {
+            windows.push({ name: 'perUser.requestsPerMinute', max: perUser, key: call.userId });
+        }
+        if (perModel !== undefined) {
+            windows.push({
+                name: 'perModel.requestsPerMinutePerUser',
+                max: perModel,
+                key: `${call.userId}:${aiModelLimitKey(call.provider, call.modelId)}`,
+                model: { provider: call.provider, modelId: call.modelId },
+            });
+        }
+        return windows;
+    }
+    async checkMinuteInDatabase(window, call, now) {
+        const where = {
+            userId: call.userId,
+            keySource: { in: COUNTED_KEY_SOURCES },
+            // Strictly after: a call exactly a minute old has just left the window,
+            // the same boundary the local log and `retryAfterMs` use.
+            createdAt: { gt: new Date(now - exports.AI_LIMIT_MINUTE_MS) },
+            ...(window.model ? { provider: window.model.provider, modelId: window.model.modelId } : {}),
+        };
+        const count = await this.prisma.forOrg(call.orgId).aiUsageEvent.count({ where });
+        if (count < window.max)
+            return;
+        // The call that must leave the window for one more to fit is the
+        // (count - max + 1)-th oldest. Read only on the refusal path.
+        const [boundary] = await this.prisma.forOrg(call.orgId).aiUsageEvent.findMany({
+            where,
+            orderBy: { createdAt: 'asc' },
+            skip: count - window.max,
+            take: 1,
+            select: { createdAt: true },
+        });
+        // (The local log already passed, so the database is the binding count.)
+        const retryAfterMs = boundary ? boundary.createdAt.getTime() + exports.AI_LIMIT_MINUTE_MS - now : exports.AI_LIMIT_MIN_RETRY_MS;
+        throw minuteLimitExceeded(window, call, retryAfterMs);
+    }
+    /** The live admissions for `key` (pruned to the window), creating the log if needed. */
+    log(key, now) {
+        if (this.admitted.size > LOCAL_SWEEP_THRESHOLD)
+            this.sweep(now);
+        let log = this.admitted.get(key);
+        if (!log) {
+            log = [];
+            this.admitted.set(key, log);
+        }
+        const cutoff = now - exports.AI_LIMIT_MINUTE_MS;
+        let stale = 0;
+        while (stale < log.length && log[stale] <= cutoff)
+            stale += 1;
+        if (stale > 0)
+            log.splice(0, stale);
+        return log;
+    }
+    /** Undoes this call's reservations — it was refused, so it never happened. */
+    release(windows, now) {
+        for (const window of windows) {
+            const log = this.admitted.get(window.key);
+            const at = log?.lastIndexOf(now) ?? -1;
+            if (log && at !== -1)
+                log.splice(at, 1);
+            if (log && log.length === 0)
+                this.admitted.delete(window.key);
+        }
+    }
+    sweep(now) {
+        const cutoff = now - exports.AI_LIMIT_MINUTE_MS;
+        for (const [key, log] of this.admitted) {
+            if (log.length === 0 || log[log.length - 1] <= cutoff)
+                this.admitted.delete(key);
+        }
+    }
+    // ---- per-day ----------------------------------------------------------------------
+    async checkDay(window, call, now) {
+        const where = {
+            // A per-org window counts every member's calls: the row-level-security
+            // scope (`forOrg`) already confines the count to this organization.
+            ...(window.wholeOrg ? { orgId: call.orgId } : { userId: call.userId }),
+            keySource: window.orgOnly ? 'org' : { in: COUNTED_KEY_SOURCES },
+            createdAt: { gte: new Date(utcMidnight(now)) },
+        };
+        let used;
+        if (window.tokens === 'output') {
+            const sums = await this.prisma.forOrg(call.orgId).aiUsageEvent.aggregate({
+                where,
+                _sum: { outputTokens: true },
+            });
+            used = sums._sum.outputTokens ?? 0;
+        }
+        else if (window.tokens) {
+            const sums = await this.prisma.forOrg(call.orgId).aiUsageEvent.aggregate({
+                where,
+                _sum: { inputTokens: true, outputTokens: true },
+            });
+            used = (sums._sum.inputTokens ?? 0) + (sums._sum.outputTokens ?? 0);
+        }
+        else {
+            used = await this.prisma.forOrg(call.orgId).aiUsageEvent.count({ where });
+        }
+        if (used < window.max)
+            return;
+        throw new ai_error_1.AiError('AI_RATE_LIMITED', window.wholeOrg
+            ? window.tokens
+                ? `Your organization's daily AI output-token limit (${window.max}) has been reached; it resets at midnight UTC.`
+                : `Your organization's daily AI request limit (${window.max}) has been reached; it resets at midnight UTC.`
+            : window.tokens
+                ? `The daily organization-key token limit (${window.max}) has been reached; it resets at midnight UTC.`
+                : `The daily AI request limit (${window.max}) has been reached; it resets at midnight UTC.`, {
+            retryAfterMs: Math.max(exports.AI_LIMIT_MIN_RETRY_MS, utcMidnight(now) + DAY_MS - now),
+            details: {
+                limit: window.name,
+                max: window.max,
+                window: 'day',
+                ...(window.orgOnly ? { keySource: 'org' } : {}),
+                ...(window.wholeOrg ? { scope: 'org' } : {}),
+                provider: call.provider,
+                model: call.modelId,
+            },
+        });
+    }
+};
+exports.AiLimitsService = AiLimitsService;
+exports.AiLimitsService = AiLimitsService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __param(2, (0, common_1.Optional)()),
+    __param(2, (0, common_1.Inject)(exports.AI_LIMITS_CLOCK)),
+    __metadata("design:paramtypes", [Object, ai_config_service_1.AiConfigService, Function])
+], AiLimitsService);
+const DAY_MS = 24 * 60 * 60 * 1000;
+/** The daily limits that apply to this call. Org-key limits only when the org key pays. */
+function dayWindows(limits, call) {
+    const windows = [];
+    const perDay = limits?.perUser?.requestsPerDay;
+    if (perDay !== undefined) {
+        windows.push({ name: 'perUser.requestsPerDay', max: perDay, orgOnly: false, tokens: false });
+    }
+    if (call.keySource === 'org') {
+        const requests = limits?.orgKey?.requestsPerDayPerUser;
+        const tokens = limits?.orgKey?.tokensPerDayPerUser;
+        if (requests !== undefined) {
+            windows.push({ name: 'orgKey.requestsPerDayPerUser', max: requests, orgOnly: true, tokens: false });
+        }
+        if (tokens !== undefined) {
+            windows.push({ name: 'orgKey.tokensPerDayPerUser', max: tokens, orgOnly: true, tokens: true });
+        }
+    }
+    // #739: the per-organization budget, every member's calls together.
+    const perOrgRequests = limits?.perOrg?.requestsPerDay;
+    const perOrgOutput = limits?.perOrg?.outputTokensPerDay;
+    if (perOrgRequests !== undefined) {
+        windows.push({ name: 'perOrg.requestsPerDay', max: perOrgRequests, orgOnly: false, tokens: false, wholeOrg: true });
+    }
+    if (perOrgOutput !== undefined) {
+        windows.push({ name: 'perOrg.outputTokensPerDay', max: perOrgOutput, orgOnly: false, tokens: 'output', wholeOrg: true });
+    }
+    return windows;
+}
+/** Midnight UTC at the start of `now`'s day, in ms. */
+function utcMidnight(now) {
+    return now - (now % DAY_MS);
+}
+/**
+ * How long until one more call fits a window holding `log` (admission times,
+ * oldest first) with room for `max`: until the (length - max + 1)-th oldest
+ * leaves it. At least `AI_LIMIT_MIN_RETRY_MS`.
+ */
+function retryFromOldest(log, max, now) {
+    if (log.length < max)
+        return exports.AI_LIMIT_MIN_RETRY_MS;
+    const boundary = log[log.length - max];
+    return Math.max(exports.AI_LIMIT_MIN_RETRY_MS, boundary + exports.AI_LIMIT_MINUTE_MS - now);
+}
+function minuteLimitExceeded(window, call, retryAfterMs) {
+    return new ai_error_1.AiError('AI_RATE_LIMITED', window.model
+        ? `Too many requests to model "${call.modelId}": at most ${window.max} per minute.`
+        : `Too many AI requests: at most ${window.max} per minute.`, {
+        retryAfterMs: Math.max(exports.AI_LIMIT_MIN_RETRY_MS, Math.ceil(retryAfterMs)),
+        details: {
+            limit: window.name,
+            max: window.max,
+            window: 'minute',
+            provider: call.provider,
+            model: call.modelId,
+        },
+    });
+}
+//# sourceMappingURL=ai-limits.service.js.map

package/dist/ai/runtime/ai-limits.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-limits.service.js","sourceRoot":"","sources":["../../../src/ai/runtime/ai-limits.service.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,kFAAkF;AAClF,gFAAgF;AAChF,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,wEAAwE;AACxE,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,wFAAwF;AACxF,2EAA2E;AAC3E,wDAAwD;AACxD,EAAE;AACF,sBAAsB;AACtB,EAAE;AACF,8CAA8C;AAC9C,0EAA0E;AAC1E,2DAA2D;AAC3D,6DAA6D;AAC7D,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,oBAAoB;AACpB,+EAA+E;AAC/E,+EAA+E;AAC/E,4CAA4C;AAC5C,sEAAsE;AACtE,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,gEAAgE;AAChE,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAC9E,yEAAyE;AACzE,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,wEAAwE;AACxE,2EAA2E;AAC3E,wEAAwE;AACxE,sDAAsD;AACtD,gFAAgF;;;;;;;;;;;;;;;AAmEhF,0CAEC;AAGD,kCASC;AAOD,4DAWC;AA0RD,kCAEC;AA7XD,2CAA8D;AAI9D,4CAAmD;AACnD,mEAA8D;AAC9D,+CAA2C;AAG3C,gDAAgD;AACnC,QAAA,kBAAkB,GAAG,MAAM,CAAC;AAEzC,wDAAwD;AAC3C,QAAA,qBAAqB,GAAG,KAAK,CAAC;AAE3C;;;;GAIG;AACU,QAAA,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;AASzD,8EAA8E;AAC9E,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC,kFAAkF;AAClF,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AA+BpD,wDAAwD;AACxD,SAAgB,eAAe,CAAC,QAAgB,EAAE,OAAe;IAC/D,OAAO,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,0DAA0D;AAC1D,SAAgB,WAAW,CACzB,MAAuC,EACvC,QAAgB,EAChB,OAAe;IAEf,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,CAAC;IAClC,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE/C,OAAO,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrG,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB,CACtC,aAAiC,EACjC,MAAuC,EACvC,QAAgB,EAChB,OAAe;IAEf,MAAM,IAAI,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,eAAe,CAAC,CAAC,MAAM,CAC1F,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAChD,CAAC;IAEF,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAwBD;;;;;GAKG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAe;IAOkB;IACzB;IAPnB,yDAAyD;IACxC,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEvC,GAAG,CAAgB;IAEpC,YAC4C,MAAgB,EACzC,QAAyB,EACL,KAAqB;QAFhB,WAAM,GAAN,MAAM,CAAU;QACzC,aAAQ,GAAR,QAAQ,CAAiB;QAG1C,IAAI,CAAC,GAAG,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,IAAiB;QAC7B,0EAA0E;QAC1E,2DAA2D;QAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEtC,6CAA6C;QAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,uEAAuE;QACvE,MAAM,QAAQ,GAAmB,EAAE,CAAC;QAEpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAEtC,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBAC7B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC5B,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,wEAAwE;YACxE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACtD,CAAC;YAED,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC5B,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,mFAAmF;IAE3E,aAAa,CAAC,MAAuC,EAAE,IAAiB;QAC9E,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC;QACnD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC;QAE5F,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,mCAAmC;gBACzC,GAAG,EAAE,QAAQ;gBACb,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;gBACrE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,MAAoB,EAAE,IAAiB,EAAE,GAAW;QACtF,MAAM,KAAK,GAAG;YACZ,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE;YACtC,wEAAwE;YACxE,0DAA0D;YAC1D,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,0BAAkB,CAAC,EAAE;YACrD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAEjF,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG;YAAE,OAAO;QAE/B,iEAAiE;QACjE,8DAA8D;QAC9D,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC;YAC5E,KAAK;YACL,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;YAC7B,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC,GAAG;YACxB,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;SAC5B,CAAC,CAAC;QACH,wEAAwE;QACxE,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,0BAAkB,GAAG,GAAG,CAAC,CAAC,CAAC,6BAAqB,CAAC;QAEhH,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,wFAAwF;IAChF,GAAG,CAAC,GAAW,EAAE,GAAW;QAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,qBAAqB;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEhE,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,GAAG,0BAAkB,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM;YAAE,KAAK,IAAI,CAAC,CAAC;QAC9D,IAAI,KAAK,GAAG,CAAC;YAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEpC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,8EAA8E;IACtE,OAAO,CAAC,OAAuB,EAAE,GAAW;QAClD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,EAAE,GAAG,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAEvC,IAAI,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACxC,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,GAAW;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,0BAAkB,CAAC;QAExC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,sFAAsF;IAE9E,KAAK,CAAC,QAAQ,CAAC,MAAiB,EAAE,IAAiB,EAAE,GAAW;QACtE,MAAM,KAAK,GAAG;YACZ,uEAAuE;YACvE,oEAAoE;YACpE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACtE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE;YAC/D,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE;SAC/C,CAAC;QAEF,IAAI,IAAY,CAAC;QAEjB,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC;gBACvE,KAAK;gBACL,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;aAC7B,CAAC,CAAC;YAEH,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC;gBACvE,KAAK;gBACL,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;aAChD,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,IAAI,GAAG,MAAM,CAAC,GAAG;YAAE,OAAO;QAE9B,MAAM,IAAI,kBAAO,CACf,iBAAiB,EACjB,MAAM,CAAC,QAAQ;YACb,CAAC,CAAC,MAAM,CAAC,MAAM;gBACb,CAAC,CAAC,oDAAoD,MAAM,CAAC,GAAG,gDAAgD;gBAChH,CAAC,CAAC,+CAA+C,MAAM,CAAC,GAAG,gDAAgD;YAC7G,CAAC,CAAC,MAAM,CAAC,MAAM;gBACb,CAAC,CAAC,2CAA2C,MAAM,CAAC,GAAG,gDAAgD;gBACvG,CAAC,CAAC,+BAA+B,MAAM,CAAC,GAAG,gDAAgD,EAC/F;YACE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,6BAAqB,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,GAAG,CAAC;YAC9E,OAAO,EAAE;gBACP,KAAK,EAAE,MAAM,CAAC,IAAI;gBAClB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,MAAM,EAAE,KAAK;gBACb,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,IAAI,CAAC,OAAO;aACpB;SACF,CACF,CAAC;IACJ,CAAC;CACF,CAAA;AAjNY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAQR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;IAEvB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;6CADT,mCAAe;GARjC,eAAe,CAiN3B;AAED,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnC,2FAA2F;AAC3F,SAAS,UAAU,CAAC,MAAuC,EAAE,IAAiB;IAC5E,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC;IAE/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,EAAE,MAAM,EAAE,qBAAqB,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAC;QAEnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACtG,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,MAAM,cAAc,GAAG,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC;IACtD,MAAM,YAAY,GAAG,MAAM,EAAE,MAAM,EAAE,kBAAkB,CAAC;IAExD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtH,CAAC;IAED,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3H,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,uDAAuD;AACvD,SAAgB,WAAW,CAAC,GAAW;IACrC,OAAO,GAAG,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAa,EAAE,GAAW,EAAE,GAAW;IAC9D,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,6BAAqB,CAAC;IAEnD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAEvC,OAAO,IAAI,CAAC,GAAG,CAAC,6BAAqB,EAAE,QAAQ,GAAG,0BAAkB,GAAG,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB,EAAE,IAAiB,EAAE,YAAoB;IACxF,OAAO,IAAI,kBAAO,CAChB,iBAAiB,EACjB,MAAM,CAAC,KAAK;QACV,CAAC,CAAC,+BAA+B,IAAI,CAAC,OAAO,cAAc,MAAM,CAAC,GAAG,cAAc;QACnF,CAAC,CAAC,iCAAiC,MAAM,CAAC,GAAG,cAAc,EAC7D;QACE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,6BAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtE,OAAO,EAAE;YACP,KAAK,EAAE,MAAM,CAAC,IAAI;YAClB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,OAAO;SACpB;KACF,CACF,CAAC;AACJ,CAAC"}

package/dist/ai/runtime/ai-media-run.handler.d.ts

@@ -0,0 +1,67 @@
+import { Logger, OnModuleInit } from '@nestjs/common';
+import type { Job } from '../../jobs/index';
+import type { Prisma } from '../data/prisma';
+import { z } from 'zod';
+import { JobSettledEvent } from '../../jobs/index';
+import { JobExecutionProfile } from '../../jobs/index';
+import { JobHandler } from '../../jobs/index';
+import { JobHandlerRegistry } from '../../jobs/index';
+import { type AiRunOperation } from './ai-run-operation';
+import { AiRunsService } from './ai-runs.service';
+import type { AiRunOutput } from './ai-runtime.types';
+export declare const aiMediaRunPayloadSchema: z.ZodObject<{
+    runId: z.ZodString;
+    orgId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** What `execute` is handed for one claimed run. */
+export interface AiMediaRunContext {
+    job: Job;
+    runId: string;
+    userId: string;
+    /** The run's organization: scope every read and write of tenant data with it (#725). */
+    orgId: string;
+    /** The stored request, still unparsed (`execute` validates it). */
+    request: Prisma.JsonValue;
+    /**
+     * The feature the run was started for (`ai_runs.feature`, PP-14.17, #935),
+     * for the usage row of its round-trip. Attribution only: pass it to the
+     * facade's `feature` run option, which does not gate it again.
+     */
+    feature?: string;
+    /** Aborted by the owner's cancel or the run's deadline. */
+    signal: AbortSignal;
+    /**
+     * Whether the owner cancelled while the call ran — asked AFTER the call,
+     * BEFORE keeping its output (nothing is stored for a cancelled run).
+     */
+    cancelledWhileRunning(): Promise<boolean>;
+}
+/** What a finished `execute` keeps. */
+export interface AiMediaRunResult {
+    output: AiRunOutput;
+    /** Undo what `execute` stored, for a run cancelled before it could complete. */
+    discard?(): Promise<void>;
+}
+export declare abstract class AiMediaRunHandler implements JobHandler, OnModuleInit {
+    private readonly registry;
+    protected readonly runs: AiRunsService;
+    protected readonly logger: Logger;
+    abstract readonly type: string;
+    abstract readonly profile: JobExecutionProfile;
+    /** The `request.operation`s this job executes. */
+    protected abstract readonly operations: readonly AiRunOperation[];
+    /** What the run is called in logs and messages: `'image'`, `'transcription'`. */
+    protected abstract readonly noun: string;
+    protected constructor(registry: JobHandlerRegistry, runs: AiRunsService);
+    onModuleInit(): void;
+    /**
+     * The facade call and what to keep of it. `null` means "cancelled while it
+     * ran, nothing kept". Throw to fail (storage errors are mapped for you).
+     */
+    protected abstract execute(ctx: AiMediaRunContext): Promise<AiMediaRunResult | null>;
+    process(job: Job): Promise<void>;
+    /** The settle-listener body — see the file header's SAFETY NET. */
+    protected failOrphanedRun(event: JobSettledEvent): Promise<void>;
+    private settleFailure;
+}
+//# sourceMappingURL=ai-media-run.handler.d.ts.map

package/dist/ai/runtime/ai-media-run.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-media-run.handler.d.ts","sourceRoot":"","sources":["../../../src/ai/runtime/ai-media-run.handler.ts"],"names":[],"mappings":"AAkDA,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAItD,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAuB,aAAa,EAAoB,MAAM,mBAAmB,CAAC;AACzF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,eAAO,MAAM,uBAAuB;;;iBAIlC,CAAC;AAEH,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,GAAG,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,MAAM,EAAE,WAAW,CAAC;IACpB;;;OAGG;IACH,qBAAqB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3C;AAED,uCAAuC;AACvC,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,gFAAgF;IAChF,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,8BAAsB,iBAAkB,YAAW,UAAU,EAAE,YAAY;IAavE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa;IAbxC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAElC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IAE/C,kDAAkD;IAClD,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;IAElE,iFAAiF;IACjF,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEzC,SAAS,aACU,QAAQ,EAAE,kBAAkB,EAC1B,IAAI,EAAE,aAAa;IAKxC,YAAY,IAAI,IAAI;IAIpB;;;OAGG;IACH,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAE9E,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAmGtC,mEAAmE;cACnD,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;YAgBxD,aAAa;CAqD5B"}