@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.3

package/dist/otel-core/spans/trace.decorator.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Options of {@link Trace}.
+ *
+ * @stability experimental
+ */
+export interface TraceOptions {
+    /**
+     * The tracer (instrumentation scope) name used when `OTEL_SERVICE_NAME` is
+     * unset. Default: `DEFAULT_SERVICE_NAME`.
+     */
+    tracer?: string;
+}
+/**
+ * Method decorator: runs the method inside an active INTERNAL span named
+ * `spanName` (default `ClassName.method`). The span is `OK` when the method
+ * resolves, `ERROR` with the exception recorded when it throws or rejects;
+ * the error is rethrown. The decorated method always returns a promise.
+ * With no SDK installed the span is a no-op.
+ *
+ * @param spanName - The span name. Default: `<ClassName>.<method>`.
+ * @param options - See {@link TraceOptions}.
+ * @returns The method decorator.
+ *
+ * @example
+ * ```ts
+ * class ReportService {
+ *   @Trace('report.build')
+ *   async build(id: string): Promise<Report> { ... }
+ * }
+ * ```
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export declare function Trace(spanName?: string, options?: TraceOptions): MethodDecorator;
+//# sourceMappingURL=trace.decorator.d.ts.map

package/dist/otel-core/spans/trace.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.decorator.d.ts","sourceRoot":"","sources":["../../../src/otel-core/spans/trace.decorator.ts"],"names":[],"mappings":"AAsBA;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,eAAe,CA6BpF"}

package/dist/otel-core/spans/trace.decorator.js

@@ -0,0 +1,74 @@
+"use strict";
+// =============================================================================
+// @Trace(): one span around a method (moved from the app's
+// common/decorators/trace.decorator.ts by issue #700)
+// =============================================================================
+//
+// The tracer is resolved on the FIRST CALL, not when the decorator is applied
+// or the module is loaded: the class may be defined before the app has
+// decided its service name, and a tracer taken from the API's proxy provider
+// before the SDK starts would still work but would read a stale name.
+//
+// The tracer name is the service name by default (`OTEL_SERVICE_NAME`, else
+// the `tracer` option, else `DEFAULT_SERVICE_NAME`). By OpenTelemetry
+// convention `getTracer()` takes the name of the instrumentation library;
+// the reference app has always passed its service name instead, and the
+// scope name is a dimension dashboards filter on (issue #343), so the
+// conflation is kept. Pass `tracer` to name the scope explicitly.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Trace = Trace;
+const api_1 = require("@opentelemetry/api");
+const service_name_1 = require("../sdk/service-name");
+/**
+ * Method decorator: runs the method inside an active INTERNAL span named
+ * `spanName` (default `ClassName.method`). The span is `OK` when the method
+ * resolves, `ERROR` with the exception recorded when it throws or rejects;
+ * the error is rethrown. The decorated method always returns a promise.
+ * With no SDK installed the span is a no-op.
+ *
+ * @param spanName - The span name. Default: `<ClassName>.<method>`.
+ * @param options - See {@link TraceOptions}.
+ * @returns The method decorator.
+ *
+ * @example
+ * ```ts
+ * class ReportService {
+ *   @Trace('report.build')
+ *   async build(id: string): Promise<Report> { ... }
+ * }
+ * ```
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+function Trace(spanName, options = {}) {
+    let tracer = null;
+    const tracerFor = () => (tracer ??= api_1.trace.getTracer((0, service_name_1.resolveServiceName)(options.tracer)));
+    return function (target, propertyKey, descriptor) {
+        const originalMethod = descriptor.value;
+        const name = spanName || `${target.constructor.name}.${String(propertyKey)}`;
+        descriptor.value = async function (...args) {
+            return tracerFor().startActiveSpan(name, { kind: api_1.SpanKind.INTERNAL }, async (span) => {
+                try {
+                    const result = await originalMethod.apply(this, args);
+                    span.setStatus({ code: api_1.SpanStatusCode.OK });
+                    return result;
+                }
+                catch (error) {
+                    span.setStatus({
+                        code: api_1.SpanStatusCode.ERROR,
+                        message: error instanceof Error ? error.message : 'Unknown error',
+                    });
+                    span.recordException(error);
+                    throw error;
+                }
+                finally {
+                    span.end();
+                }
+            });
+        };
+        return descriptor;
+    };
+}
+//# sourceMappingURL=trace.decorator.js.map

package/dist/otel-core/spans/trace.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.decorator.js","sourceRoot":"","sources":["../../../src/otel-core/spans/trace.decorator.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,2DAA2D;AAC3D,sDAAsD;AACtD,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,uEAAuE;AACvE,6EAA6E;AAC7E,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,sEAAsE;AACtE,kEAAkE;AAClE,gFAAgF;;AAyChF,sBA6BC;AApED,4CAAkF;AAElF,sDAAyD;AAezD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,KAAK,CAAC,QAAiB,EAAE,UAAwB,EAAE;IACjE,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,CAAC,MAAM,KAAK,WAAK,CAAC,SAAS,CAAC,IAAA,iCAAkB,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEjG,OAAO,UAAU,MAAc,EAAE,WAA4B,EAAE,UAA8B;QAC3F,MAAM,cAAc,GAAG,UAAU,CAAC,KAAwC,CAAC;QAC3E,MAAM,IAAI,GAAG,QAAQ,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAE7E,UAAU,CAAC,KAAK,GAAG,KAAK,WAA0B,GAAG,IAAe;YAClE,OAAO,SAAS,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,cAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACnF,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACtD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAc,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5C,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,SAAS,CAAC;wBACb,IAAI,EAAE,oBAAc,CAAC,KAAK;wBAC1B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;qBAClE,CAAC,CAAC;oBACH,IAAI,CAAC,eAAe,CAAC,KAAc,CAAC,CAAC;oBACrC,MAAM,KAAK,CAAC;gBACd,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC"}

package/dist/telemetry/assistant/telemetry-ai-enabled.guard.d.ts

@@ -0,0 +1,15 @@
+import { CanActivate } from '@nestjs/common';
+import { type TelemetryAiPort } from '../ports';
+/**
+ * Refuses a request while the AI platform is switched off (403 `AI_DISABLED`,
+ * the app's own error).
+ *
+ * @stability experimental
+ */
+export declare class TelemetryAiEnabledGuard implements CanActivate {
+    private readonly ai;
+    constructor(ai: TelemetryAiPort);
+    /** Throws the app's "AI is off" error while AI is disabled; otherwise lets the request through. */
+    canActivate(): Promise<boolean>;
+}
+//# sourceMappingURL=telemetry-ai-enabled.guard.d.ts.map

package/dist/telemetry/assistant/telemetry-ai-enabled.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-ai-enabled.guard.d.ts","sourceRoot":"","sources":["../../../src/telemetry/assistant/telemetry-ai-enabled.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAsB,MAAM,gBAAgB,CAAC;AAEjE,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,UAAU,CAAC;AAY9D;;;;;GAKG;AACH,qBACa,uBAAwB,YAAW,WAAW;IACvB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,eAAe;IAEtE,mGAAmG;IAC7F,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CAKtC"}

package/dist/telemetry/assistant/telemetry-ai-enabled.guard.js

@@ -0,0 +1,50 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TelemetryAiEnabledGuard = void 0;
+const common_1 = require("@nestjs/common");
+const ports_1 = require("../ports");
+// =============================================================================
+// TelemetryAiEnabledGuard (issue #703)
+// =============================================================================
+//
+// The assistant route's AI kill switch: 403 `AI_DISABLED` while the AI
+// platform is off. It calls the `TELEMETRY_AI` port's `assertEnabled()`, which
+// the app binds to `AiConfigService.assertEnabled()`, the very call the app's
+// `AiEnabledGuard` makes, so the response is byte-identical.
+// =============================================================================
+/**
+ * Refuses a request while the AI platform is switched off (403 `AI_DISABLED`,
+ * the app's own error).
+ *
+ * @stability experimental
+ */
+let TelemetryAiEnabledGuard = class TelemetryAiEnabledGuard {
+    ai;
+    constructor(ai) {
+        this.ai = ai;
+    }
+    /** Throws the app's "AI is off" error while AI is disabled; otherwise lets the request through. */
+    async canActivate() {
+        await this.ai.assertEnabled();
+        return true;
+    }
+};
+exports.TelemetryAiEnabledGuard = TelemetryAiEnabledGuard;
+exports.TelemetryAiEnabledGuard = TelemetryAiEnabledGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(ports_1.TELEMETRY_AI)),
+    __metadata("design:paramtypes", [Object])
+], TelemetryAiEnabledGuard);
+//# sourceMappingURL=telemetry-ai-enabled.guard.js.map

package/dist/telemetry/assistant/telemetry-ai-enabled.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-ai-enabled.guard.js","sourceRoot":"","sources":["../../../src/telemetry/assistant/telemetry-ai-enabled.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAiE;AAEjE,oCAA8D;AAE9D,gFAAgF;AAChF,uCAAuC;AACvC,gFAAgF;AAChF,EAAE;AACF,uEAAuE;AACvE,+EAA+E;AAC/E,8EAA8E;AAC9E,6DAA6D;AAC7D,gFAAgF;AAEhF;;;;;GAKG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACiB;IAAnD,YAAmD,EAAmB;QAAnB,OAAE,GAAF,EAAE,CAAiB;IAAG,CAAC;IAE1E,mGAAmG;IACnG,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;QAE9B,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AATY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;IAEE,WAAA,IAAA,eAAM,EAAC,oBAAY,CAAC,CAAA;;GADtB,uBAAuB,CASnC"}

package/dist/telemetry/assistant/telemetry-assistant.controller.d.ts

@@ -0,0 +1,14 @@
+import { Type } from '@nestjs/common';
+import type { ResolvedTelemetryModuleOptions } from '../telemetry.options';
+/**
+ * Creates the `TelemetryAssistantController` class for one set of module options: its routes
+ * guarded by the app's access decorators (`options.host.access`), the caller
+ * resolved by `options.actorId`. `TelemetryModule.forRoot()` calls it.
+ *
+ * @param options - the resolved module options.
+ * @returns the controller class.
+ *
+ * @stability experimental
+ */
+export declare function createTelemetryAssistantController(options: ResolvedTelemetryModuleOptions): Type<unknown>;
+//# sourceMappingURL=telemetry-assistant.controller.d.ts.map

package/dist/telemetry/assistant/telemetry-assistant.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-assistant.controller.d.ts","sourceRoot":"","sources":["../../../src/telemetry/assistant/telemetry-assistant.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6D,IAAI,EAAa,MAAM,gBAAgB,CAAC;AAU5G,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AA8B3E;;;;;;;;;GASG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,8BAA8B,GAAG,IAAI,CAAC,OAAO,CAAC,CA6GzG"}

package/dist/telemetry/assistant/telemetry-assistant.controller.js

@@ -0,0 +1,178 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTelemetryAssistantController = createTelemetryAssistantController;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const index_1 = require("../../core/index");
+const telemetry_assistant_dto_1 = require("../dto/telemetry-assistant.dto");
+const sse_1 = require("../internal/sse");
+const telemetry_ai_enabled_guard_1 = require("./telemetry-ai-enabled.guard");
+const telemetry_assistant_service_1 = require("./telemetry-assistant.service");
+const telemetry_assistant_sse_1 = require("./telemetry-assistant.sse");
+const telemetry_permissions_1 = require("../telemetry.permissions");
+// =============================================================================
+// TelemetryAssistantController (issue #536, reworked in #571; epic #528)
+// =============================================================================
+//
+//   POST /api/admin/telemetry/assistant/stream   telemetry:query AND ai:use (SSE)
+//
+// ACCESS. `@Auth({ permissions: [...] })` is ALL-OF (`PermissionsGuard` uses
+// `every`), so the caller must hold both: `telemetry:query` because the
+// assistant reads telemetry data, `ai:use` because it spends an AI key.
+// `TelemetryAiEnabledGuard` answers 403 `AI_DISABLED` while the platform is off. This
+// route lives under `/api/admin/telemetry`, not `/api/ai`, so the AI
+// kill-switch and RBAC tripwire suites (which discover `/api/ai*` and
+// `/api/admin/ai*`) do not enumerate it; the guard is applied explicitly and
+// pinned by this controller's spec.
+//
+// STREAMING. Like `POST /api/ai/responses/stream` (see `ai/http/ai-sse.ts`),
+// not `@Sse()`: the service's preconditions run BEFORE anything is written,
+// so "assistant disabled", "no model selected" and friends are ordinary JSON
+// errors with `details.reason`. The response is committed to
+// `text/event-stream` only on the first event (`openTelemetrySse` hijacks the
+// reply lazily). Closing the connection aborts the provider call and the
+// in-flight query.
+//
+// nginx: `location /api/admin/telemetry/assistant/stream` (infra/nginx and
+// the CLI's VPS vhost) forwards it unbuffered with a long read timeout.
+// =============================================================================
+/**
+ * Creates the `TelemetryAssistantController` class for one set of module options: its routes
+ * guarded by the app's access decorators (`options.host.access`), the caller
+ * resolved by `options.actorId`. `TelemetryModule.forRoot()` calls it.
+ *
+ * @param options - the resolved module options.
+ * @returns the controller class.
+ *
+ * @stability experimental
+ */
+function createTelemetryAssistantController(options) {
+    const access = options.host.access;
+    const ActorId = options.actorIdParam;
+    let TelemetryAssistantController = class TelemetryAssistantController {
+        assistant;
+        constructor(assistant) {
+            this.assistant = assistant;
+        }
+        async stream(dto, userId, reply) {
+            const disconnect = (0, sse_1.abortOnDisconnect)(reply.raw);
+            const sse = (0, telemetry_assistant_sse_1.openTelemetrySse)(reply, disconnect);
+            try {
+                // Throws (before any event) only for the preconditions: the global filter answers those as JSON.
+                await this.assistant.stream(userId, dto, { signal: disconnect.signal, emit: sse.send });
+            }
+            catch (err) {
+                if (!sse.opened) {
+                    disconnect.dispose();
+                    throw err;
+                }
+                // Not expected (the service reports failures in band); close the stream cleanly.
+                sse.send('error', { code: 'INTERNAL_ERROR', message: 'The telemetry assistant failed unexpectedly.' });
+                sse.send('done', {});
+            }
+            finally {
+                if (sse.opened)
+                    sse.close();
+            }
+        }
+    };
+    __decorate([
+        (0, common_1.Post)('assistant/stream'),
+        (access.requirePermissions([telemetry_permissions_1.TELEMETRY_PERMISSIONS.QUERY, telemetry_permissions_1.TELEMETRY_HOST_PERMISSIONS.AI_USE])),
+        (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+        (0, swagger_1.ApiProduces)('text/event-stream'),
+        (0, swagger_1.ApiOperation)({
+            summary: 'Ask the telemetry AI assistant to investigate (SSE)',
+            description: 'A troubleshooting agent for this application: it investigates a question (errors, slowness, "is ' +
+                'anything wrong?", or simply "write me a query") over the telemetry store and answers with a ' +
+                'structured report. Tools: `get_app_context` (deployment, configuration, tables, data range), ' +
+                '`health_overview` (a baseline over a window: per-service errors and latency, failing routes, log ' +
+                'severities, top error messages, slowest spans), `get_trace` (every span and log of one trace), ' +
+                '`run_query`, `list_tables` and `describe_table`. Every statement — the model\'s and the ones the ' +
+                'server builds for the baseline and trace tools — goes through the same guard, row cap, timeout and ' +
+                'audit trail as `POST /api/admin/telemetry/query` (audited as `telemetry:assistant_query`), and each ' +
+                'turn is audited as `telemetry:assistant`. A turn takes at most `telemetry.assistant.maxSteps` model ' +
+                'round-trips (at most 20). The AI call spends **your** key for the configured provider (or the ' +
+                'organisation key, per the key policy). Row values are shown to the model only when ' +
+                '`telemetry.assistant.shareResults` is on (otherwise only shapes, counts, durations and timestamps), ' +
+                'and never more than `telemetry.assistant.maxResultRowsToModel` (at most 100) rows per statement.\n\n' +
+                '`history` carries up to 20 earlier turns of the conversation (oldest first, each at most ' +
+                '8000 characters); send an assistant turn as plain text.\n\n' +
+                '**Frames.** `event: <name>` plus `data: <json>`:\n' +
+                '- `step` — `{ index, tool, input?: { table?, sql?, window?, traceId? }, rowCount?, truncated?, ' +
+                'durationMs, error?, thought? }`, one per tool call (`index` is 0-based; `thought` is the model\'s ' +
+                'interim reasoning for that round, on the round\'s first call only, at most 1000 characters);\n' +
+                '- `answer` — `{ sql: string | null, explanation, report }` where `report` is `{ status: ' +
+                '"issue_found" | "no_issue_found" | "inconclusive" | "no_data", summary, findings: [{ title, severity: ' +
+                '"critical" | "high" | "medium" | "low" | "info", evidence, queryIndex? }], rootCause: string | null, ' +
+                'confidence: "high" | "medium" | "low", recommendations: string[], queries: [{ title, sql }] }` or ' +
+                '`null` when the model did not return a report (then `explanation` is its raw text). `sql` is ' +
+                '`queries[0].sql` (or null) and `explanation` the summary, for older clients. Every report query ' +
+                'passed the read-only SQL guard; a refused one is withdrawn with a note in the summary;\n' +
+                '- `error` — `{ code, message }` (an `AI_*` code, a `TELEMETRY_*` reason, or `INTERNAL_ERROR`);\n' +
+                '- `done` — `{}`, always last.\n' +
+                `A \`: ping\` comment is sent every ${sse_1.AI_SSE_HEARTBEAT_MS / 1000} seconds.\n\n` +
+                '**Errors before streaming** are ordinary JSON errors with `details.reason`: `AI_DISABLED` ' +
+                '(403), `TELEMETRY_NOT_CONFIGURED` (503), `TELEMETRY_DISABLED` (409), ' +
+                '`TELEMETRY_ASSISTANT_DISABLED` (409, `telemetry.assistant.enabled` is off), ' +
+                '`TELEMETRY_ASSISTANT_NOT_CONFIGURED` (409, no provider/model selected).\n\n' +
+                '**Cancel** by closing the connection: the AI call and any running query are aborted.',
+        }),
+        (0, swagger_1.ApiOkResponse)({
+            description: 'An open event stream; it ends after `done`.',
+            content: {
+                'text/event-stream': {
+                    schema: {
+                        type: 'string',
+                        example: 'event: step\ndata: {"index":0,"tool":"get_app_context","durationMs":85,"thought":"Checking what is deployed and how much telemetry there is."}\n\n' +
+                            'event: step\ndata: {"index":1,"tool":"health_overview","input":{"window":"1h"},"durationMs":420,"thought":"Taking a one-hour baseline of errors and latency."}\n\n' +
+                            'event: step\ndata: {"index":2,"tool":"run_query","input":{"sql":"SELECT span_name, count(*) AS errors FROM opentelemetry_traces WHERE span_status_code = \'STATUS_CODE_ERROR\' AND timestamp > now() - INTERVAL \'1 hour\' GROUP BY span_name ORDER BY errors DESC LIMIT 10"},"rowCount":2,"truncated":false,"durationMs":40,"thought":"Most errors are on one route; breaking them down by span."}\n\n' +
+                            'event: step\ndata: {"index":3,"tool":"get_trace","input":{"traceId":"4bf92f3577b34da6a3ce929d0e0e4736"},"rowCount":7,"truncated":false,"durationMs":55}\n\n' +
+                            ': ping\n\n' +
+                            'event: answer\ndata: {"sql":"SELECT span_name, count(*) AS errors FROM opentelemetry_traces WHERE span_status_code = \'STATUS_CODE_ERROR\' AND timestamp > now() - INTERVAL \'1 hour\' GROUP BY span_name ORDER BY errors DESC LIMIT 10","explanation":"42 of 1,310 requests (3.2%) failed in the last hour, all on POST /api/jobs.","report":{"status":"issue_found","summary":"42 of 1,310 requests (3.2%) failed in the last hour, all on POST /api/jobs.","findings":[{"title":"POST /api/jobs failing","severity":"high","evidence":"42 error spans since 10:05 UTC; sample trace 4bf92f3577b34da6a3ce929d0e0e4736 ends in a database timeout.","queryIndex":0}],"rootCause":"Database timeouts on the jobs insert.","confidence":"medium","recommendations":["Check database connection pool saturation."],"queries":[{"title":"Error spans by name","sql":"SELECT span_name, count(*) AS errors FROM opentelemetry_traces WHERE span_status_code = \'STATUS_CODE_ERROR\' AND timestamp > now() - INTERVAL \'1 hour\' GROUP BY span_name ORDER BY errors DESC LIMIT 10"}]}}\n\n' +
+                            'event: done\ndata: {}\n\n',
+                    },
+                },
+            },
+        }),
+        (0, swagger_1.ApiResponse)({ status: 400, description: 'Validation error', type: index_1.ErrorDto }),
+        (0, swagger_1.ApiResponse)({
+            status: 403,
+            description: '`AI_DISABLED`, or missing `telemetry:query` / `ai:use`',
+            type: index_1.ErrorDto,
+        }),
+        (0, swagger_1.ApiResponse)({
+            status: 409,
+            description: '`TELEMETRY_DISABLED`, `TELEMETRY_ASSISTANT_DISABLED`, `TELEMETRY_ASSISTANT_NOT_CONFIGURED`',
+            type: index_1.ErrorDto,
+        }),
+        (0, swagger_1.ApiResponse)({ status: 503, description: '`TELEMETRY_NOT_CONFIGURED`', type: index_1.ErrorDto }),
+        __param(0, (0, common_1.Body)()),
+        __param(1, ActorId()),
+        __param(2, (0, common_1.Res)()),
+        __metadata("design:type", Function),
+        __metadata("design:paramtypes", [telemetry_assistant_dto_1.TelemetryAssistantRequestDto, String, Object]),
+        __metadata("design:returntype", Promise)
+    ], TelemetryAssistantController.prototype, "stream", null);
+    TelemetryAssistantController = __decorate([
+        (0, swagger_1.ApiTags)('Telemetry'),
+        (0, common_1.Controller)('admin/telemetry'),
+        (0, common_1.UseGuards)(telemetry_ai_enabled_guard_1.TelemetryAiEnabledGuard),
+        __param(0, (0, common_1.Inject)(telemetry_assistant_service_1.TelemetryAssistantService)),
+        __metadata("design:paramtypes", [telemetry_assistant_service_1.TelemetryAssistantService])
+    ], TelemetryAssistantController);
+    return TelemetryAssistantController;
+}
+//# sourceMappingURL=telemetry-assistant.controller.js.map

package/dist/telemetry/assistant/telemetry-assistant.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-assistant.controller.js","sourceRoot":"","sources":["../../../src/telemetry/assistant/telemetry-assistant.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAkDA,gFA6GC;AA/JD,2CAA4G;AAC5G,6CAAiG;AAGjG,4CAA4C;AAC5C,4EAA8E;AAC9E,yCAAyE;AACzE,6EAAuE;AACvE,+EAA0E;AAC1E,uEAA6D;AAE7D,oEAA6F;AAE7F,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAChF,EAAE;AACF,kFAAkF;AAClF,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,wEAAwE;AACxE,sFAAsF;AACtF,qEAAqE;AACrE,sEAAsE;AACtE,6EAA6E;AAC7E,oCAAoC;AACpC,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,6DAA6D;AAC7D,8EAA8E;AAC9E,yEAAyE;AACzE,mBAAmB;AACnB,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,SAAgB,kCAAkC,CAAC,OAAuC;IACxF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAErC,IAGM,4BAA4B,GAHlC,MAGM,4BAA4B;QACgC;QAAhE,YAAgE,SAAoC;YAApC,cAAS,GAAT,SAAS,CAA2B;QAAG,CAAC;QA0ElG,AAAN,KAAK,CAAC,MAAM,CACF,GAAiC,EAC9B,MAAc,EAClB,KAAmB;YAE1B,MAAM,UAAU,GAAG,IAAA,uBAAiB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,GAAG,GAAG,IAAA,0CAAgB,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAEhD,IAAI,CAAC;gBACH,iGAAiG;gBACjG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1F,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;oBAChB,UAAU,CAAC,OAAO,EAAE,CAAC;oBACrB,MAAM,GAAG,CAAC;gBACZ,CAAC;gBAED,iFAAiF;gBACjF,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;gBACvG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvB,CAAC;oBAAS,CAAC;gBACT,IAAI,GAAG,CAAC,MAAM;oBAAE,GAAG,CAAC,KAAK,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;KACF,CAAA;IAxBO;QAxEL,IAAA,aAAI,EAAC,kBAAkB,CAAC;QACxB,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,6CAAqB,CAAC,KAAK,EAAE,kDAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7F,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;QACvB,IAAA,qBAAW,EAAC,mBAAmB,CAAC;QAChC,IAAA,sBAAY,EAAC;YACZ,OAAO,EAAE,qDAAqD;YAC9D,WAAW,EACT,kGAAkG;gBAClG,8FAA8F;gBAC9F,+FAA+F;gBAC/F,mGAAmG;gBACnG,iGAAiG;gBACjG,mGAAmG;gBACnG,qGAAqG;gBACrG,sGAAsG;gBACtG,sGAAsG;gBACtG,gGAAgG;gBAChG,qFAAqF;gBACrF,sGAAsG;gBACtG,sGAAsG;gBACtG,2FAA2F;gBAC3F,6DAA6D;gBAC7D,oDAAoD;gBACpD,iGAAiG;gBACjG,oGAAoG;gBACpG,gGAAgG;gBAChG,0FAA0F;gBAC1F,wGAAwG;gBACxG,uGAAuG;gBACvG,oGAAoG;gBACpG,+FAA+F;gBAC/F,kGAAkG;gBAClG,0FAA0F;gBAC1F,kGAAkG;gBAClG,iCAAiC;gBACjC,sCAAsC,yBAAmB,GAAG,IAAI,eAAe;gBAC/E,4FAA4F;gBAC5F,uEAAuE;gBACvE,8EAA8E;gBAC9E,6EAA6E;gBAC7E,sFAAsF;SACzF,CAAC;QACD,IAAA,uBAAa,EAAC;YACb,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE;gBACP,mBAAmB,EAAE;oBACnB,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,OAAO,EACL,oJAAoJ;4BACpJ,oKAAoK;4BACpK,yYAAyY;4BACzY,6JAA6J;4BAC7J,YAAY;4BACZ,uhCAAuhC;4BACvhC,2BAA2B;qBAC9B;iBACF;aACF;SACF,CAAC;QACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;QAC7E,IAAA,qBAAW,EAAC;YACX,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,wDAAwD;YACrE,IAAI,EAAE,gBAAQ;SACf,CAAC;QACD,IAAA,qBAAW,EAAC;YACX,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,4FAA4F;YACzG,IAAI,EAAE,gBAAQ;SACf,CAAC;QACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,gBAAQ,EAAE,CAAC;QAErF,WAAA,IAAA,aAAI,GAAE,CAAA;QACN,WAAA,OAAO,EAAE,CAAA;QACT,WAAA,IAAA,YAAG,GAAE,CAAA;;yCAFO,sDAA4B;;8DAsB1C;IAlGG,4BAA4B;QAHjC,IAAA,iBAAO,EAAC,WAAW,CAAC;QACpB,IAAA,mBAAU,EAAC,iBAAiB,CAAC;QAC7B,IAAA,kBAAS,EAAC,oDAAuB,CAAC;QAEpB,WAAA,IAAA,eAAM,EAAC,uDAAyB,CAAC,CAAA;yCAA6B,uDAAyB;OADhG,4BAA4B,CAmGjC;IAED,OAAO,4BAA4B,CAAC;AACtC,CAAC"}

package/dist/telemetry/assistant/telemetry-assistant.metrics.d.ts

@@ -0,0 +1,147 @@
+import { type VerdictInput, type VerdictThresholds } from '../dashboard/telemetry-dashboard.verdict';
+import type { TelemetryQueryResult } from '../greptime/greptime.client';
+import { type MetricFamily, type MetricGroup, type MetricTables, type MetricTableSpec } from '../metrics/metric-catalog';
+import { type MetricGroupResult, type MetricGroupWindow, type MetricTable } from '../metrics/metric-group';
+import { type VerdictProbe } from '../metrics/metric-verdict';
+import type { HealthWindow } from './telemetry-assistant.sql';
+/** Rows of one metric table the model sees at most (before the model's own row cap). */
+export declare const METRICS_TABLE_ROWS_TO_MODEL = 20;
+/** Items of a list (job types, URLs) the model sees at most. */
+export declare const METRICS_LIST_MAX = 10;
+/** A node whose reading is above this multiple of the fleet median is flagged. */
+export declare const NODE_OUTLIER_FACTOR = 2;
+/** A node whose state directory has less free space than this (%) is flagged. */
+export declare const NODE_DISK_FREE_MIN_PCT = 10;
+/** A node whose heap is above this share of its limit (%) is flagged. */
+export declare const NODE_HEAP_HIGH_PCT = 90;
+/** The buckets per window the assistant's metric reads use (the dashboard's coarser setting). */
+export declare const ASSISTANT_METRIC_BUCKETS = "30";
+export declare const METRICS_HIDDEN_NOTE: string;
+export interface ShareOptions {
+    shareResults: boolean;
+    rowsToModel: number;
+}
+/** One metric table as the model sees it: `fitSections` can drop its rows from the end. */
+export interface MetricTableOutput {
+    key: string;
+    label: string;
+    columns: string[];
+    rowCount: number;
+    truncated: boolean;
+    rows: unknown[][];
+    note?: string;
+}
+/**
+ * The dashboard's window for a health window (they share the ranges), with its previous window.
+ *
+ * @stability experimental
+ */
+export declare function assistantMetricWindow(window: HealthWindow, now?: number): MetricGroupWindow;
+/** A family's table exists with every column its statement reads. */
+export declare function familyPresent(family: MetricFamily, tables: MetricTables): boolean;
+export interface MetricGroupPresence {
+    /** Something of the group exists. */
+    available: boolean;
+    familiesPresent: number;
+    familiesTotal: number;
+    tablesPresent: number;
+    tablesTotal: number;
+    /** Catalog keys of the families present (constants, never label values). */
+    present: string[];
+}
+/** Per catalog group: what exists in the store. Counts, booleans and catalog keys only. */
+export declare function metricFamilyPresence(tables: MetricTables): Record<MetricGroup, MetricGroupPresence>;
+/**
+ * One computed table (`buildTable`'s rows, in its own order) as the model
+ * sees it: at most `METRICS_TABLE_ROWS_TO_MODEL` (and the model's row cap)
+ * rows; with sharing off the key is an ordinal and text cells are null.
+ */
+export declare function shapeMetricTable(table: MetricTable, opts: ShareOptions, cellMax?: number): MetricTableOutput;
+export interface MetricTileOutput {
+    key: string;
+    label: string;
+    unit: string;
+    value: number | string | null;
+    previous: number | string | null;
+    /** The highest bucket of the current window, and when that bucket started. */
+    max: number | null;
+    maxAt: string | null;
+}
+/** A tile without its sparkline, but with the window's peak and when it happened. */
+export declare function shapeTile(tile: MetricGroupResult['tiles'][number], window: {
+    from: Date;
+    bucketSeconds: number;
+}): MetricTileOutput;
+/** A computed metric group as the model sees it. */
+export declare function shapeMetricsOverview(group: MetricGroup, result: MetricGroupResult, window: MetricGroupWindow, opts: ShareOptions): {
+    group: MetricGroup;
+    available: boolean;
+    truncated: boolean;
+    bucketSeconds: number;
+    tiles: MetricTileOutput[];
+    tables: MetricTableOutput[];
+    skipped: string[];
+};
+export declare const NODE_COUNTER_TABLE = "app_nodes_counter";
+/**
+ * The catalog's per-node vitals table plus the node counters' increases over
+ * the window. Not in `METRIC_TABLES`: the dashboard does not show it.
+ */
+export declare const NODE_COMPARISON_TABLE: MetricTableSpec;
+/** Node-offered job types and whether each lacks an eligible node (the catalog's table). */
+export declare const NO_ELIGIBLE_NODE_TABLE: MetricTableSpec;
+/**
+ * The flag names `compare_nodes` reports for an outlier node (constants:
+ * always shared with the model).
+ *
+ * @stability experimental
+ */
+export declare const NODE_FLAGS: {
+    /** CPU over twice the fleet median. */
+    readonly cpuHigh: "cpu_over_2x_fleet_median";
+    /** RSS over twice the fleet median. */
+    readonly rssHigh: "rss_over_2x_fleet_median";
+    /** Heap over twice the fleet median. */
+    readonly heapHigh: "heap_used_over_2x_fleet_median";
+    /** Heap above 90 % of its limit. */
+    readonly heapNearLimit: "heap_above_90pct_of_limit";
+    /** State directory under 10 % free. */
+    readonly diskLow: "state_dir_free_below_10pct";
+    /** Every slot busy. */
+    readonly slotsFull: "slots_full";
+    /** Lease renewals failed. */
+    readonly leaseRenewFailures: "lease_renew_failures";
+    /** The watchdog fired. */
+    readonly watchdogTrips: "watchdog_trips";
+    /** Heartbeats failed. */
+    readonly heartbeatFailures: "heartbeat_failures";
+    /** Claims failed. */
+    readonly claimFailures: "claim_failures";
+    /** No recent vitals at all. */
+    readonly noCurrentVitals: "no_current_vitals";
+};
+export declare function median(values: number[]): number | null;
+/** The flags one node raises against the fleet medians. */
+export declare function nodeFlags(row: Record<string, unknown>, medians: Record<string, number | null>): string[];
+/** Fleet health counts from the verdict's `nodes` probe (fresh readings only). */
+export declare function fleetHealth(result: TelemetryQueryResult | null): Record<'healthy' | 'stale' | 'offline', number> | null;
+/** Job types with due work and no eligible node, from the computed `noEligibleNodeTypes` table. */
+export declare function typesWithoutEligibleNode(table: MetricTable | null, share: boolean): {
+    offered: number;
+    withoutEligibleNode: number;
+    jobTypes: string[] | null;
+} | null;
+/** `compare_nodes`: per-node vitals and counters side by side with the fleet median, and flags. */
+export declare function compareNodesOutput(input: {
+    nodes: MetricTable | null;
+    noEligible: MetricTable | null;
+    health: Record<'healthy' | 'stale' | 'offline', number> | null;
+}, opts: ShareOptions): Record<string, unknown>;
+/**
+ * The saturation section of `health_overview`: the verdict probes' readings
+ * (`verdictInputsFrom`), each with a level against the dashboard's own
+ * verdict thresholds (the resolved ones, #703). A probe whose tables are absent is listed in
+ * `skipped`; one that ran but had no fresh reading in `noReading`.
+ */
+export declare function saturationOutput(inputs: Partial<VerdictInput>, ran: Record<VerdictProbe, boolean>, share: boolean, thresholds?: VerdictThresholds): Record<string, unknown>;
+//# sourceMappingURL=telemetry-assistant.metrics.d.ts.map

package/dist/telemetry/assistant/telemetry-assistant.metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-assistant.metrics.d.ts","sourceRoot":"","sources":["../../../src/telemetry/assistant/telemetry-assistant.metrics.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,KAAK,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AACjI,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAML,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,eAAe,EACrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAc,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAGvH,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAChG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AA+B9D,wFAAwF;AACxF,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAE9C,gEAAgE;AAChE,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,iGAAiG;AACjG,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAE7C,eAAO,MAAM,mBAAmB,QAGsC,CAAC;AAEvE,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,2FAA2F;AAC3F,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAID;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,SAAa,GAAG,iBAAiB,CAS/F;AAID,qEAAqE;AACrE,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CASjF;AAED,MAAM,WAAW,mBAAmB;IAClC,qCAAqC;IACrC,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,2FAA2F;AAC3F,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAqBnG;AAkCD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,SAAM,GAAG,iBAAiB,CA0BzG;AAID,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACjC,8EAA8E;IAC9E,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,qFAAqF;AACrF,wBAAgB,SAAS,CACvB,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,EACxC,MAAM,EAAE;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAC5C,gBAAgB,CAclB;AAED,oDAAoD;AACpD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,iBAAiB,EACzB,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,YAAY,GACjB;IACD,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAYA;AAoBD,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AAEtD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,eAqBhC,CAAC;AAEL,4FAA4F;AAC5F,eAAO,MAAM,sBAAsB,EAAE,eAAqD,CAAC;AAa3F;;;;;GAKG;AACH,eAAO,MAAM,UAAU;IACrB,uCAAuC;;IAEvC,uCAAuC;;IAEvC,wCAAwC;;IAExC,oCAAoC;;IAEpC,uCAAuC;;IAEvC,uBAAuB;;IAEvB,6BAA6B;;IAE7B,0BAA0B;;IAE1B,yBAAyB;;IAEzB,qBAAqB;;IAErB,+BAA+B;;CAEvB,CAAC;AAEX,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAMtD;AAOD,2DAA2D;AAC3D,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,EAAE,CAwBxG;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,GAAG,MAAM,CAAC,SAAS,GAAG,OAAO,GAAG,SAAS,EAAE,MAAM,CAAC,GAAG,IAAI,CAgBvH;AAED,mGAAmG;AACnG,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,WAAW,GAAG,IAAI,EACzB,KAAK,EAAE,OAAO,GACb;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CASpF;AAED,mGAAmG;AACnG,wBAAgB,kBAAkB,CAChC,KAAK,EAAE;IACL,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,WAAW,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,SAAS,GAAG,OAAO,GAAG,SAAS,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CAChE,EACD,IAAI,EAAE,YAAY,GACjB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuCzB;AAcD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,EAC7B,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,EAClC,KAAK,EAAE,OAAO,EACd,UAAU,GAAE,iBAA8C,GACzD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgGzB"}