@npm-safe/core-dsh 1.0.5

package/dist/store/cache-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-manager.d.ts","sourceRoot":"","sources":["../../src/store/cache-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EAEtB,MAAM,qBAAqB,CAAC;AAE7B;;GAEG;AACH,eAAO,MAAM,oBAAoB,UAAY,CAAC;AAE9C;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAwED;;;;;;;GAOG;AACH,qBAAa,YAAY;IACvB,qDAAqD;IACrD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC;;;OAGG;gBACS,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,mBAAmB;IAKpE;;;;;;;;OAQG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAe/D;;;;;;;;OAQG;IACG,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BtD;;;;;;;;;OASG;IACG,iBAAiB,CACrB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IA0BnC;;;;;;;OAOG;IACG,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB1D,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAwC7E,gBAAgB,CACpB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC;IA4BhB;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAOvC;;;;;OAKG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjD;;;;OAIG;IACG,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtD;;;;;;OAMG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAQrD;;;;;OAKG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3D;;;;;;OAMG;IACG,gBAAgB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAW3C;;;OAGG;IACG,eAAe,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBjB;;OAEG;IACG,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CACvC,aAAa,CAAC;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAC5H;IAqBD;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;CAGpC;AAED,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,OAAO,CAAC"}

package/dist/store/cache-manager.js

@@ -0,0 +1,356 @@
+/**
+ * Cache read/write layer for @npm-safe/core.
+ *
+ * {@link CacheManager} sits on top of a {@link DatabaseManager} connection and
+ * provides typed accessors for the cached npm metadata, security scan reports,
+ * watchlist, and key-value settings tables. It owns the TTL policy for the
+ * `packages` table: every {@link CacheManager.setPackage} call stamps the row
+ * with an expiry timestamp (`ttl_until`) computed as `now + cacheTtlMs`, and
+ * {@link CacheManager.getPackage} refuses to return rows whose TTL has
+ * elapsed. Scheduling of refreshes is intentionally out of scope — that is
+ * the job of the refresh-scheduler; this module only reads and writes.
+ *
+ * All methods return `Promise`s for API consistency and future async backing
+ * stores, even though the underlying `better-sqlite3` calls are synchronous.
+ *
+ * @module store/cache-manager
+ */
+import { SecurityLevel, } from "../scanner/types.js";
+/**
+ * Default cache time-to-live for package metadata: 1 hour in milliseconds.
+ */
+export const DEFAULT_CACHE_TTL_MS = 3_600_000;
+/**
+ * Derives a {@link SecurityLevel} from a numeric static-scan score using the
+ * same thresholds as the static analyzer: `>=80` Safe, `>=50` Suspicious,
+ * `>=20` Dangerous, otherwise Unknown. The `security_reports` table persists
+ * only the numeric score (not the enum), so the level is reconstructed on
+ * read to satisfy the {@link StaticScanReport} shape.
+ *
+ * @param score - Numeric score from 0 to 100 (higher is safer).
+ * @returns The security level matching the score band.
+ */
+function scoreToLevel(score) {
+    if (score >= 80)
+        return SecurityLevel.Safe;
+    if (score >= 50)
+        return SecurityLevel.Suspicious;
+    if (score >= 20)
+        return SecurityLevel.Dangerous;
+    return SecurityLevel.Unknown;
+}
+/**
+ * Normalizes a {@link PackageRepository} value to a plain string for storage
+ * in the `packages.repository` TEXT column. Structured descriptors are
+ * rendered as `type:url`; shorthand strings are stored verbatim.
+ *
+ * @param repo - The repository descriptor from registry metadata.
+ * @returns A string representation suitable for storage.
+ */
+function repositoryToString(repo) {
+    if (repo === undefined)
+        return "";
+    if (typeof repo === "string")
+        return repo;
+    return `${repo.type}:${repo.url}`;
+}
+/**
+ * Cache read/write manager backed by a {@link DatabaseManager} connection.
+ *
+ * The manager is stateless beyond the TTL configuration and the injected
+ * database handle, so it is safe to construct one per request or to share a
+ * long-lived instance. All public methods are async-returning for API
+ * consistency; the underlying `better-sqlite3` calls are synchronous.
+ */
+export class CacheManager {
+    /** Underlying better-sqlite3 connection accessor. */
+    db;
+    /** Cache TTL in milliseconds applied to newly written package rows. */
+    cacheTtlMs;
+    /**
+     * @param database - The {@link DatabaseManager} supplying the connection.
+     * @param options - Optional configuration; see {@link CacheManagerOptions}.
+     */
+    constructor(database, options) {
+        this.db = database.getDb();
+        this.cacheTtlMs = options?.cacheTtlMs ?? DEFAULT_CACHE_TTL_MS;
+    }
+    /**
+     * Returns cached package metadata for `name` if the row is still fresh
+     * (i.e. `ttl_until >= now`). Returns `null` when the row is missing or
+     * stale; callers are expected to re-fetch from the registry and call
+     * {@link CacheManager.setPackage} to refresh the cache.
+     *
+     * @param name - Fully-qualified package name (scope included when scoped).
+     * @returns The cached {@link PackageMetadata}, or `null` if absent/stale.
+     */
+    async getPackage(name) {
+        const row = this.db
+            .prepare("SELECT name, latest_version, description, homepage, repository, registry_data, cached_at, ttl_until FROM packages WHERE name = ? AND ttl_until >= strftime('%Y-%m-%d %H:%M:%f', 'now')")
+            .get(name);
+        if (row === undefined)
+            return null;
+        try {
+            const parsed = JSON.parse(row.registry_data);
+            return parsed;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Upserts a package metadata row, stamping it with a fresh TTL computed as
+     * `now + cacheTtlMs`. The full packument is serialized into the
+     * `registry_data` JSON column; the scalar columns (`latest_version`,
+     * `description`, `homepage`, `repository`) are denormalized for cheap
+     * listing queries.
+     *
+     * @param meta - The packument returned by the npm registry.
+     */
+    async setPackage(meta) {
+        const latest = meta["dist-tags"].latest;
+        const description = meta.description ?? "";
+        const homepage = meta.homepage ?? "";
+        const repository = repositoryToString(meta.repository);
+        const registryData = JSON.stringify(meta);
+        // Fractional (sub-second) TTLs are supported: `datetime('now', ...)` would
+        // truncate fractional seconds to whole seconds, so the expiry is stamped
+        // via `strftime('%Y-%m-%d %H:%M:%f', ...)` which preserves milliseconds.
+        // The value is a number derived from configuration, not user input, so
+        // interpolating it into the SQL string is safe.
+        const ttlSeconds = this.cacheTtlMs / 1000;
+        this.db
+            .prepare(`INSERT INTO packages (name, latest_version, description, homepage, repository, registry_data, cached_at, ttl_until)
+         VALUES (?, ?, ?, ?, ?, ?, datetime('now'), strftime('%Y-%m-%d %H:%M:%f', 'now', '+${ttlSeconds} seconds'))
+         ON CONFLICT(name) DO UPDATE SET
+           latest_version = excluded.latest_version,
+           description    = excluded.description,
+           homepage        = excluded.homepage,
+           repository      = excluded.repository,
+           registry_data   = excluded.registry_data,
+           cached_at       = datetime('now'),
+           ttl_until       = strftime('%Y-%m-%d %H:%M:%f', 'now', '+${ttlSeconds} seconds')`)
+            .run(meta.name, latest, description, homepage, repository, registryData);
+    }
+    /**
+     * Returns the most recent static security report for `pkg`@`version`, or
+     * `null` if none is cached. The {@link SecurityLevel} is reconstructed from
+     * the persisted numeric score because the `security_reports` table stores
+     * only the score, not the enum.
+     *
+     * @param pkg - Fully-qualified package name.
+     * @param version - Semver version string.
+     * @returns The cached {@link StaticScanReport}, or `null` if absent.
+     */
+    async getSecurityReport(pkg, version) {
+        const row = this.db
+            .prepare("SELECT id, package_name, version, scan_type, overall_score, findings_json, summary, scanned_at FROM security_reports WHERE package_name = ? AND version = ? AND scan_type = 'static'")
+            .get(pkg, version);
+        if (row === undefined)
+            return null;
+        let findings = [];
+        try {
+            const parsed = JSON.parse(row.findings_json);
+            if (Array.isArray(parsed)) {
+                findings = parsed;
+            }
+        }
+        catch {
+            findings = [];
+        }
+        return {
+            packageName: row.package_name,
+            version: row.version,
+            overallLevel: scoreToLevel(row.overall_score),
+            score: row.overall_score,
+            findings,
+            scannedAt: row.scanned_at,
+        };
+    }
+    /**
+     * Upserts a static security report into the `security_reports` table. The
+     * findings array is serialized to JSON in the `findings_json` column; the
+     * numeric score is stored in `overall_score`. The row is keyed by
+     * `(package_name, version, scan_type)` via the table's UNIQUE constraint.
+     *
+     * @param report - The static scan report to persist.
+     */
+    async setSecurityReport(report) {
+        const findingsJson = JSON.stringify(report.findings);
+        this.db
+            .prepare(`INSERT INTO security_reports (package_name, version, scan_type, overall_score, findings_json, summary, scanned_at)
+         VALUES (?, ?, 'static', ?, ?, '', ?)
+         ON CONFLICT(package_name, version, scan_type) DO UPDATE SET
+           overall_score = excluded.overall_score,
+           findings_json  = excluded.findings_json,
+           scanned_at     = excluded.scanned_at`)
+            .run(report.packageName, report.version, report.score, findingsJson, report.scannedAt);
+    }
+    async getLlmScanReport(pkg, version) {
+        const row = this.db
+            .prepare("SELECT findings_json, summary, scanned_at FROM security_reports WHERE package_name = ? AND version = ? AND scan_type = 'llm'")
+            .get(pkg, version);
+        if (!row)
+            return null;
+        let findings = [];
+        try {
+            const parsed = JSON.parse(row.findings_json);
+            if (Array.isArray(parsed))
+                findings = parsed;
+        }
+        catch {
+            findings = [];
+        }
+        let details = {};
+        try {
+            const parsed = JSON.parse(row.summary);
+            if (parsed && typeof parsed === "object") {
+                details = parsed;
+            }
+        }
+        catch {
+            details = { reason: row.summary };
+        }
+        return {
+            enabled: details.enabled ?? false,
+            reason: details.reason,
+            summary: details.summary,
+            functionalMatch: details.functionalMatch,
+            suspiciousScore: details.suspiciousScore,
+            findings,
+            scannedAt: row.scanned_at,
+        };
+    }
+    async setLlmScanReport(packageName, version, report) {
+        const summary = JSON.stringify({
+            enabled: report.enabled,
+            summary: report.summary,
+            reason: report.reason,
+            functionalMatch: report.functionalMatch,
+            suspiciousScore: report.suspiciousScore,
+        });
+        this.db
+            .prepare(`INSERT INTO security_reports (package_name, version, scan_type, overall_score, findings_json, summary, scanned_at)
+         VALUES (?, ?, 'llm', ?, ?, ?, ?)
+         ON CONFLICT(package_name, version, scan_type) DO UPDATE SET
+           overall_score = excluded.overall_score,
+           findings_json = excluded.findings_json,
+           summary = excluded.summary,
+           scanned_at = excluded.scanned_at`)
+            .run(packageName, version, report.suspiciousScore ?? 0, JSON.stringify(report.findings ?? []), summary, report.scannedAt ?? new Date().toISOString());
+    }
+    /**
+     * Returns the list of package names currently on the user's watchlist.
+     *
+     * @returns All watched package names, in insertion order.
+     */
+    async getWatchlist() {
+        const rows = this.db
+            .prepare("SELECT package_name FROM watchlist ORDER BY added_at ASC")
+            .all();
+        return rows.map((r) => r.package_name);
+    }
+    /**
+     * Adds `name` to the watchlist. Idempotent: inserting a name that is
+     * already watched is a no-op (INSERT OR IGNORE).
+     *
+     * @param name - Fully-qualified package name to watch.
+     */
+    async addToWatchlist(name) {
+        this.db
+            .prepare("INSERT OR IGNORE INTO watchlist (package_name) VALUES (?)")
+            .run(name);
+    }
+    /**
+     * Removes `name` from the watchlist. No-op if the name was not watched.
+     *
+     * @param name - Fully-qualified package name to stop watching.
+     */
+    async removeFromWatchlist(name) {
+        this.db
+            .prepare("DELETE FROM watchlist WHERE package_name = ?")
+            .run(name);
+    }
+    /**
+     * Returns the value stored under `key` in the settings table, or `null`
+     * if the key is unset.
+     *
+     * @param key - Settings key.
+     * @returns The stored value, or `null` if absent.
+     */
+    async getSetting(key) {
+        const row = this.db
+            .prepare("SELECT key, value FROM settings WHERE key = ?")
+            .get(key);
+        if (row === undefined)
+            return null;
+        return row.value;
+    }
+    /**
+     * Upserts `value` under `key` in the settings table (INSERT OR REPLACE).
+     *
+     * @param key - Settings key.
+     * @param value - Settings value to persist.
+     */
+    async setSetting(key, value) {
+        this.db
+            .prepare("INSERT OR REPLACE INTO settings (key, value) VALUES (?, ?)")
+            .run(key, value);
+    }
+    /**
+     * Returns the names of all cached package rows whose TTL has elapsed
+     * (`ttl_until < now`). These are candidates for an incremental refresh by
+     * the refresh-scheduler.
+     *
+     * @returns Package names with expired cache entries.
+     */
+    async getStalePackages() {
+        const rows = this.db
+            .prepare("SELECT name FROM packages WHERE ttl_until < strftime('%Y-%m-%d %H:%M:%f', 'now')")
+            .all();
+        return rows.map((r) => r.name);
+    }
+    // --------------------------------------------------------------------------
+    // Check history
+    // --------------------------------------------------------------------------
+    /**
+     * Append an entry to the persistent check history, keeping only the most
+     * recent {@link MAX_CHECK_HISTORY} entries.
+     */
+    async addHistoryEntry(entry) {
+        this.db
+            .prepare(`INSERT INTO check_history (package_name, level, score, timestamp)
+         VALUES (?, ?, ?, ?)`)
+            .run(entry.packageName, entry.level, entry.score, entry.timestamp);
+        this.db
+            .prepare(`DELETE FROM check_history WHERE id NOT IN (
+           SELECT id FROM check_history ORDER BY timestamp DESC, id DESC LIMIT ${MAX_CHECK_HISTORY}
+         )`)
+            .run();
+    }
+    /**
+     * Return the persistent check history, newest first.
+     */
+    async getHistory(limit) {
+        const capped = Math.max(1, Math.min(limit ?? MAX_CHECK_HISTORY, MAX_CHECK_HISTORY));
+        const rows = this.db
+            .prepare(`SELECT package_name, level, score, timestamp FROM check_history
+         ORDER BY timestamp DESC, id DESC LIMIT ${capped}`)
+            .all();
+        return rows.map((r) => ({
+            packageName: r.package_name,
+            level: r.level,
+            score: r.score,
+            timestamp: r.timestamp,
+        }));
+    }
+    /**
+     * Remove every entry from the persistent check history.
+     */
+    async clearHistory() {
+        this.db.prepare("DELETE FROM check_history").run();
+    }
+}
+/** Maximum number of check-history entries retained in the database. */
+export const MAX_CHECK_HISTORY = 1000;
+//# sourceMappingURL=cache-manager.js.map

package/dist/store/cache-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-manager.js","sourceRoot":"","sources":["../../src/store/cache-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,EACL,aAAa,GAId,MAAM,qBAAqB,CAAC;AAE7B;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAuD9C;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC;IAC3C,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,aAAa,CAAC,UAAU,CAAC;IACjD,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,aAAa,CAAC,SAAS,CAAC;IAChD,OAAO,aAAa,CAAC,OAAO,CAAC;AAC/B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,IAAmC;IAC7D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IACvB,qDAAqD;IACpC,EAAE,CAAoB;IACvC,uEAAuE;IACtD,UAAU,CAAS;IAEpC;;;OAGG;IACH,YAAY,QAAyB,EAAE,OAA6B;QAClE,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,oBAAoB,CAAC;IAChE,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,wLAAwL,CACzL;aACA,GAAG,CAAC,IAAI,CAA2B,CAAC;QACvC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAoB,CAAC;YAChE,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CAAC,IAAqB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1C,2EAA2E;QAC3E,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAC1C,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;6FACqF,UAAU;;;;;;;;sEAQjC,UAAU,YAAY,CACrF;aACA,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,iBAAiB,CACrB,GAAW,EACX,OAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,sLAAsL,CACvL;aACA,GAAG,CAAC,GAAG,EAAE,OAAO,CAAkC,CAAC;QACtD,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,QAAQ,GAA2B,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAY,CAAC;YACxD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,QAAQ,GAAG,MAAgC,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;QACD,OAAO;YACL,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;YAC7C,KAAK,EAAE,GAAG,CAAC,aAAa;YACxB,QAAQ;YACR,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAAwB;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;gDAKwC,CACzC;aACA,GAAG,CACF,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,KAAK,EACZ,YAAY,EACZ,MAAM,CAAC,SAAS,CACjB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAW,EAAE,OAAe;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,8HAA8H,CAC/H;aACA,GAAG,CAAC,GAAG,EAAE,OAAO,CAAoF,CAAC;QACxG,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,QAAQ,GAA2B,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAY,CAAC;YACxD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,QAAQ,GAAG,MAAgC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,GAMP,EAAE,CAAC;QACP,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAY,CAAC;YAClD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,GAAG,MAAwB,CAAC;YACrC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QACpC,CAAC;QACD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;YACjC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,QAAQ;YACR,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,WAAmB,EACnB,OAAe,EACf,MAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,eAAe,EAAE,MAAM,CAAC,eAAe;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;;4CAMoC,CACrC;aACA,GAAG,CACF,WAAW,EACX,OAAO,EACP,MAAM,CAAC,eAAe,IAAI,CAAC,EAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EACrC,OAAO,EACP,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAC7C,CAAC;IACN,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,0DAA0D,CAAC;aACnE,GAAG,EAAe,CAAC;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,IAAI,CAAC,EAAE;aACJ,OAAO,CAAW,2DAA2D,CAAC;aAC9E,GAAG,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,IAAY;QACpC,IAAI,CAAC,EAAE;aACJ,OAAO,CAAW,8CAA8C,CAAC;aACjE,GAAG,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,GAAW;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAW,+CAA+C,CAAC;aAClE,GAAG,CAAC,GAAG,CAA4B,CAAC;QACvC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,KAAa;QACzC,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,4DAA4D,CAC7D;aACA,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,kFAAkF,CAAC;aAC3F,GAAG,EAA8C,CAAC;QACrD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,6EAA6E;IAC7E,gBAAgB;IAChB,6EAA6E;IAE7E;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,KAKrB;QACC,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;6BACqB,CACtB;aACA,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;iFACyE,iBAAiB;WACvF,CACJ;aACA,GAAG,EAAE,CAAC;IACX,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,KAAc;QAG7B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;kDAC0C,MAAM,EAAE,CACnD;aACA,GAAG,EAKJ,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAAE,CAAC;IACrD,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC"}

package/dist/store/database.d.ts

@@ -0,0 +1,81 @@
+/**
+ * SQLite connection manager for @npm-safe/core.
+ *
+ * Owns a single `better-sqlite3` connection, configures WAL-mode pragmas for
+ * safe concurrent reads, and runs the migration list declared in
+ * {@link ./schema.ts} on construction. This module is pure connection +
+ * migration management — no query helpers, no caching, no business logic.
+ *
+ * @module store/database
+ */
+import Database from "better-sqlite3";
+/**
+ * Error thrown by {@link DatabaseManager} when the underlying `better-sqlite3`
+ * operation fails (open, pragma, migration). Wraps the original error so
+ * callers can branch on a single typed error while still inspecting the cause.
+ */
+export declare class DatabaseManagerError extends Error {
+    readonly cause?: unknown | undefined;
+    /**
+     * @param message - Human-readable error message.
+     * @param cause - The underlying error, if any.
+     */
+    constructor(message: string, cause?: unknown | undefined);
+}
+/**
+ * Manages the lifecycle of a single SQLite database connection.
+ *
+ * On construction it opens the database file (creating it if missing),
+ * applies WAL-mode and safety pragmas, then runs any unapplied migrations
+ * from {@link getMigrationList} inside a transaction. The connection is
+ * kept open and accessible via {@link DatabaseManager.getDb} until
+ * {@link DatabaseManager.close} is called.
+ */
+export declare class DatabaseManager {
+    /** Underlying better-sqlite3 connection, or `null` after `close()`. */
+    private db;
+    /**
+     * Opens (or creates) the database at `dbPath`, configures pragmas, and
+     * runs pending migrations. Throws {@link DatabaseManagerError} on any
+     * failure during open, pragma, or migration.
+     *
+     * @param dbPath - Filesystem path to the SQLite database file.
+     */
+    constructor(dbPath: string);
+    /**
+     * Apply the connection-level pragmas: WAL journal mode, a 5s busy timeout,
+     * NORMAL synchronous (safe under WAL), and foreign-key enforcement.
+     */
+    private applyPragmas;
+    /**
+     * Run all migrations from {@link getMigrationList} that have not yet been
+     * recorded in the `_migrations` table. The `_migrations` tracking table is
+     * created idempotently first (it is also part of {@link SCHEMA_SQL}, but
+     * we create it here so the very first migration can be recorded even when
+     * the schema is empty).
+     *
+     * Each migration is applied in its own transaction; on success its name is
+     * inserted into `_migrations`.
+     */
+    private runMigrations;
+    /**
+     * Returns the underlying `better-sqlite3` connection. Throws if the
+     * connection has been closed.
+     *
+     * @returns The active better-sqlite3 `Database` instance.
+     */
+    getDb(): Database.Database;
+    /**
+     * Closes the database connection. Safe to call multiple times; subsequent
+     * calls are no-ops. Throws {@link DatabaseManagerError} if the underlying
+     * close fails.
+     */
+    close(): void;
+    /**
+     * Whether the database connection is currently open.
+     *
+     * @returns `true` if the connection has not been closed.
+     */
+    isOpen(): boolean;
+}
+//# sourceMappingURL=database.d.ts.map

package/dist/store/database.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/store/database.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAQtC;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;aAO3B,KAAK,CAAC,EAAE,OAAO;IANjC;;;OAGG;gBAED,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,OAAO,YAAA;CAKlC;AAoBD;;;;;;;;GAQG;AACH,qBAAa,eAAe;IAC1B,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAA2B;IAErC;;;;;;OAMG;gBACS,MAAM,EAAE,MAAM;IAc1B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAmBpB;;;;;;;;;OASG;IACH,OAAO,CAAC,aAAa;IAiDrB;;;;;OAKG;IACH,KAAK,IAAI,QAAQ,CAAC,QAAQ;IAO1B;;;;OAIG;IACH,KAAK,IAAI,IAAI;IAgBb;;;;OAIG;IACH,MAAM,IAAI,OAAO;CAGlB"}

package/dist/store/database.js

@@ -0,0 +1,182 @@
+/**
+ * SQLite connection manager for @npm-safe/core.
+ *
+ * Owns a single `better-sqlite3` connection, configures WAL-mode pragmas for
+ * safe concurrent reads, and runs the migration list declared in
+ * {@link ./schema.ts} on construction. This module is pure connection +
+ * migration management — no query helpers, no caching, no business logic.
+ *
+ * @module store/database
+ */
+import Database from "better-sqlite3";
+import { getMigrationList, getInitialMigration, getCheckHistoryMigration, } from "./schema.js";
+/**
+ * Error thrown by {@link DatabaseManager} when the underlying `better-sqlite3`
+ * operation fails (open, pragma, migration). Wraps the original error so
+ * callers can branch on a single typed error while still inspecting the cause.
+ */
+export class DatabaseManagerError extends Error {
+    cause;
+    /**
+     * @param message - Human-readable error message.
+     * @param cause - The underlying error, if any.
+     */
+    constructor(message, cause) {
+        super(message);
+        this.cause = cause;
+        this.name = "DatabaseManagerError";
+    }
+}
+/**
+ * Maps a migration file name to the SQL it should execute. Today only the
+ * initial migration exists; future migrations add entries here.
+ *
+ * @param name - Migration file name from {@link getMigrationList}.
+ * @returns The SQL string to run for that migration.
+ */
+function getMigrationSql(name) {
+    switch (name) {
+        case "001_initial.sql":
+            return getInitialMigration();
+        case "002_check_history.sql":
+            return getCheckHistoryMigration();
+        default:
+            throw new DatabaseManagerError(`Unknown migration: ${name}`);
+    }
+}
+/**
+ * Manages the lifecycle of a single SQLite database connection.
+ *
+ * On construction it opens the database file (creating it if missing),
+ * applies WAL-mode and safety pragmas, then runs any unapplied migrations
+ * from {@link getMigrationList} inside a transaction. The connection is
+ * kept open and accessible via {@link DatabaseManager.getDb} until
+ * {@link DatabaseManager.close} is called.
+ */
+export class DatabaseManager {
+    /** Underlying better-sqlite3 connection, or `null` after `close()`. */
+    db;
+    /**
+     * Opens (or creates) the database at `dbPath`, configures pragmas, and
+     * runs pending migrations. Throws {@link DatabaseManagerError} on any
+     * failure during open, pragma, or migration.
+     *
+     * @param dbPath - Filesystem path to the SQLite database file.
+     */
+    constructor(dbPath) {
+        try {
+            this.db = new Database(dbPath, { fileMustExist: false });
+        }
+        catch (err) {
+            throw new DatabaseManagerError(`Failed to open database at ${dbPath}: ${err instanceof Error ? err.message : String(err)}`, err);
+        }
+        this.applyPragmas();
+        this.runMigrations();
+    }
+    /**
+     * Apply the connection-level pragmas: WAL journal mode, a 5s busy timeout,
+     * NORMAL synchronous (safe under WAL), and foreign-key enforcement.
+     */
+    applyPragmas() {
+        const pragmas = [
+            "journal_mode=WAL",
+            "busy_timeout=5000",
+            "synchronous=NORMAL",
+            "foreign_keys=ON",
+        ];
+        for (const stmt of pragmas) {
+            try {
+                this.db.pragma(stmt);
+            }
+            catch (err) {
+                throw new DatabaseManagerError(`Failed to apply pragma "${stmt}": ${err instanceof Error ? err.message : String(err)}`, err);
+            }
+        }
+    }
+    /**
+     * Run all migrations from {@link getMigrationList} that have not yet been
+     * recorded in the `_migrations` table. The `_migrations` tracking table is
+     * created idempotently first (it is also part of {@link SCHEMA_SQL}, but
+     * we create it here so the very first migration can be recorded even when
+     * the schema is empty).
+     *
+     * Each migration is applied in its own transaction; on success its name is
+     * inserted into `_migrations`.
+     */
+    runMigrations() {
+        const db = this.db;
+        try {
+            db.exec(`
+        CREATE TABLE IF NOT EXISTS _migrations (
+          id          INTEGER PRIMARY KEY AUTOINCREMENT,
+          name        TEXT NOT NULL UNIQUE,
+          applied_at  TEXT NOT NULL DEFAULT (datetime('now'))
+        );
+      `);
+        }
+        catch (err) {
+            throw new DatabaseManagerError(`Failed to create _migrations tracking table: ${err instanceof Error ? err.message : String(err)}`, err);
+        }
+        const selectApplied = db.prepare("SELECT name FROM _migrations WHERE name = ?");
+        const insertMigration = db.prepare("INSERT INTO _migrations (name) VALUES (?)");
+        const applyOne = (name, sql) => {
+            const tx = db.transaction(() => {
+                db.exec(sql);
+                insertMigration.run(name);
+            });
+            tx();
+        };
+        for (const name of getMigrationList()) {
+            const existing = selectApplied.get(name);
+            if (existing !== undefined) {
+                continue;
+            }
+            try {
+                applyOne(name, getMigrationSql(name));
+            }
+            catch (err) {
+                throw new DatabaseManagerError(`Failed to apply migration "${name}": ${err instanceof Error ? err.message : String(err)}`, err);
+            }
+        }
+    }
+    /**
+     * Returns the underlying `better-sqlite3` connection. Throws if the
+     * connection has been closed.
+     *
+     * @returns The active better-sqlite3 `Database` instance.
+     */
+    getDb() {
+        if (this.db === null) {
+            throw new DatabaseManagerError("Database is not open");
+        }
+        return this.db;
+    }
+    /**
+     * Closes the database connection. Safe to call multiple times; subsequent
+     * calls are no-ops. Throws {@link DatabaseManagerError} if the underlying
+     * close fails.
+     */
+    close() {
+        if (this.db === null) {
+            return;
+        }
+        try {
+            this.db.close();
+        }
+        catch (err) {
+            throw new DatabaseManagerError(`Failed to close database: ${err instanceof Error ? err.message : String(err)}`, err);
+        }
+        finally {
+            this.db = null;
+        }
+    }
+    /**
+     * Whether the database connection is currently open.
+     *
+     * @returns `true` if the connection has not been closed.
+     */
+    isOpen() {
+        return this.db !== null;
+    }
+}
+//# sourceMappingURL=database.js.map

package/dist/store/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../src/store/database.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAEL,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AAErB;;;;GAIG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAO3B;IANlB;;;OAGG;IACH,YACE,OAAe,EACC,KAAe;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,mBAAmB,EAAE,CAAC;QAC/B,KAAK,uBAAuB;YAC1B,OAAO,wBAAwB,EAAE,CAAC;QACpC;YACE,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAe;IAC1B,uEAAuE;IAC/D,EAAE,CAA2B;IAErC;;;;;;OAMG;IACH,YAAY,MAAc;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,oBAAoB,CAC5B,8BAA8B,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC3F,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED;;;OAGG;IACK,YAAY;QAClB,MAAM,OAAO,GAAG;YACd,kBAAkB;YAClB,mBAAmB;YACnB,oBAAoB;YACpB,iBAAiB;SAClB,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,IAAI,CAAC,EAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,oBAAoB,CAC5B,2BAA2B,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACvF,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACK,aAAa;QACnB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAG,CAAC;QACpB,IAAI,CAAC;YACH,EAAE,CAAC,IAAI,CAAC;;;;;;OAMP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,oBAAoB,CAC5B,gDAAgD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAClG,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAC9B,6CAA6C,CAC9C,CAAC;QAEF,MAAM,eAAe,GAAG,EAAE,CAAC,OAAO,CAChC,2CAA2C,CAC5C,CAAC;QAEF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,GAAW,EAAQ,EAAE;YACnD,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC7B,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACb,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,EAAE,EAAE,CAAC;QACP,CAAC,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,oBAAoB,CAC5B,8BAA8B,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC1F,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,oBAAoB,CAC5B,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC/E,GAAG,CACJ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;IAC1B,CAAC;CACF"}