@oscharko-dev/keiko-server 0.2.0

package/dist/store/relationship-audit.js

@@ -0,0 +1,155 @@
+// Epic #532 / Issue #539 — relationship audit ledger sibling-table writer.
+//
+// Append-only writer for the `relationship_audit_entries` table (see audit-events.md §5.5).
+// Persistence-placement rule (audit-events.md §5.3): in this PR both run-scoped and
+// non-run-scoped mutations route to the sibling table. EvidenceManifest.relationships?
+// embedding is the responsibility of issue #544 (the `// TODO(#544)` comment in
+// `resolveAuditPlacement` is the single seam where future code branches).
+//
+// Redaction-on-write: every payload string passes through `deepRedactStrings` with the
+// injected `redactString` BEFORE the SQL INSERT (audit-events.md §7). The forbidden-key
+// gate from `RELATIONSHIP_FORBIDDEN_METADATA_KEY_SUBSTRINGS` rejects payload keys that
+// would smuggle prompt / document / secret content (audit-events.md §8.3).
+//
+// The append-only invariant (audit-events.md §9) is structural: this module exposes only
+// `insertRelationshipAuditEntry` and `listRelationshipAuditEntries`. There is no UPDATE /
+// DELETE seam. Retention sweeps live in #543 and are out of scope here.
+import { deepRedactStrings } from "@oscharko-dev/keiko-security";
+import { RELATIONSHIP_FORBIDDEN_METADATA_KEY_SUBSTRINGS } from "@oscharko-dev/keiko-contracts";
+import { invalidRequest } from "./errors.js";
+export const RELATIONSHIP_AUDIT_SCHEMA_VERSION = "1";
+export const RELATIONSHIP_AUDIT_SUMMARY_MAX_CHARS = 240;
+// Selects where the row lives. Audit-events.md §5.3: the source endpoint kind decides.
+// For now both branches return "sibling-table"; the workflow-run branch is reserved for
+// #544 wiring EvidenceManifest.relationships?.
+export function resolveAuditPlacement(input) {
+    // TODO(#544): wire EvidenceManifest.relationships? when sourceKind === "workflow-run"
+    // and the request handler holds an evidenceRunId. Until then every row lands in the
+    // sibling table — this is the documented Issue #539 placement.
+    void input;
+    return "sibling-table";
+}
+// Sequence is allocated atomically inside the INSERT via a subquery — no separate
+// SELECT MAX then JS-side increment. SQLite serialises writers so COALESCE(MAX(sequence),-1)+1
+// is the next monotonic value with no TOCTOU gap. The WHERE clause keeps the subquery
+// workspace-scoped (audit-events.md §10). When no prior rows exist COALESCE returns -1
+// giving sequence 0 as the first value.
+const SQL_INSERT_AUDIT = `
+INSERT INTO relationship_audit_entries(
+  event_id, relationship_audit_schema_ver, workspace_id, sequence, occurred_at,
+  kind, relationship_id, actor_surface, redacted_actor_id, redaction_state, summary,
+  payload_json
+)
+SELECT ?, ?, ?, COALESCE(MAX(sequence), -1) + 1, ?, ?, ?, ?, ?, ?, ?, ?
+FROM relationship_audit_entries
+WHERE workspace_id = ?
+`;
+const SQL_LIST_AUDIT = `
+SELECT event_id, relationship_audit_schema_ver, workspace_id, sequence, occurred_at,
+       kind, relationship_id, actor_surface, redacted_actor_id, redaction_state, summary,
+       payload_json
+FROM relationship_audit_entries
+WHERE workspace_id = ?
+ORDER BY occurred_at DESC, sequence DESC
+LIMIT ?
+`;
+const SQL_LIST_AUDIT_FOR_RELATIONSHIP = `
+SELECT event_id, relationship_audit_schema_ver, workspace_id, sequence, occurred_at,
+       kind, relationship_id, actor_surface, redacted_actor_id, redaction_state, summary,
+       payload_json
+FROM relationship_audit_entries
+WHERE workspace_id = ? AND relationship_id = ?
+ORDER BY occurred_at DESC, sequence DESC
+LIMIT ?
+`;
+export const MAX_AUDIT_LIST_LIMIT = 256;
+export const DEFAULT_AUDIT_LIST_LIMIT = 64;
+// Rejects any payload object whose key (or a nested key) contains a forbidden substring per
+// audit-events.md §8.3. Same normalisation as the validator's forbidden-key gate in
+// `@oscharko-dev/keiko-contracts/relationships-validation` so the API and audit edges agree.
+function assertNoForbiddenKeys(payload, path = "") {
+    if (payload === null || typeof payload !== "object" || Array.isArray(payload))
+        return;
+    for (const key of Object.keys(payload)) {
+        const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
+        for (const banned of RELATIONSHIP_FORBIDDEN_METADATA_KEY_SUBSTRINGS) {
+            if (normalized.includes(banned)) {
+                throw invalidRequest(`Audit payload key "${path}${key}" is in the forbidden set.`);
+            }
+        }
+        assertNoForbiddenKeys(payload[key], `${path}${key}.`);
+    }
+}
+function assertSummary(summary) {
+    if (summary.length > RELATIONSHIP_AUDIT_SUMMARY_MAX_CHARS) {
+        throw invalidRequest("Audit summary exceeds the 240-char bound.");
+    }
+}
+// Single redactor invocation site (audit-events.md §7). `redactString` is supplied by the
+// API layer (typically `createAuditRedactor` + the configured secrets). The post-redaction
+// shape is what hits the SQL INSERT — no second redaction inside this module.
+export function insertRelationshipAuditEntry(db, entry, redactString) {
+    assertNoForbiddenKeys(entry.payload);
+    assertSummary(entry.summary);
+    const redactedSummary = redactString(entry.summary);
+    assertSummary(redactedSummary);
+    const redactedPayload = deepRedactStrings(entry.payload, redactString);
+    const payloadJson = JSON.stringify(redactedPayload);
+    // The subquery's WHERE clause receives workspaceId as the last bind parameter so that
+    // COALESCE(MAX(sequence),-1)+1 is scoped to the workspace. SQLite serialises writers so
+    // this read-modify-write happens atomically with no TOCTOU gap.
+    db.prepare(SQL_INSERT_AUDIT).run(entry.eventId, RELATIONSHIP_AUDIT_SCHEMA_VERSION, entry.workspaceId, entry.occurredAt, entry.kind, entry.relationshipId ?? null, entry.actor.surface, entry.actor.redactedActorId, "redacted-on-write", redactedSummary, payloadJson, entry.workspaceId);
+    const assigned = db
+        .prepare("SELECT sequence FROM relationship_audit_entries WHERE event_id = ?")
+        .get(entry.eventId);
+    if (assigned === undefined)
+        throw new Error("Audit INSERT returned no row.");
+    const row = {
+        eventId: entry.eventId,
+        workspaceId: entry.workspaceId,
+        sequence: assigned.sequence,
+        occurredAt: entry.occurredAt,
+        kind: entry.kind,
+        relationshipId: entry.relationshipId,
+        actorSurface: entry.actor.surface,
+        redactedActorId: entry.actor.redactedActorId,
+        redactionState: "redacted-on-write",
+        summary: redactedSummary,
+        payload: redactedPayload,
+    };
+    return row;
+}
+function rowToEntry(row) {
+    const payload = JSON.parse(row.payload_json);
+    return {
+        eventId: row.event_id,
+        workspaceId: row.workspace_id,
+        sequence: row.sequence,
+        occurredAt: row.occurred_at,
+        kind: row.kind,
+        relationshipId: row.relationship_id ?? undefined,
+        actorSurface: row.actor_surface,
+        redactedActorId: row.redacted_actor_id,
+        redactionState: row.redaction_state === "redacted-on-write-and-persist"
+            ? "redacted-on-write-and-persist"
+            : "redacted-on-write",
+        summary: row.summary,
+        payload,
+    };
+}
+export function listRelationshipAuditEntries(db, workspaceId, limit = DEFAULT_AUDIT_LIST_LIMIT) {
+    if (limit <= 0 || limit > MAX_AUDIT_LIST_LIMIT) {
+        throw invalidRequest("Audit limit out of bounds.");
+    }
+    const rows = db.prepare(SQL_LIST_AUDIT).all(workspaceId, limit);
+    return rows.map(rowToEntry);
+}
+export function listRelationshipAuditEntriesForRelationship(db, workspaceId, relationshipId, limit = DEFAULT_AUDIT_LIST_LIMIT) {
+    if (limit <= 0 || limit > MAX_AUDIT_LIST_LIMIT) {
+        throw invalidRequest("Audit limit out of bounds.");
+    }
+    const rows = db
+        .prepare(SQL_LIST_AUDIT_FOR_RELATIONSHIP)
+        .all(workspaceId, relationshipId, limit);
+    return rows.map(rowToEntry);
+}

package/dist/store/relationships.d.ts

@@ -0,0 +1,191 @@
+import type { DatabaseSync } from "node:sqlite";
+import type { Relationship, RelationshipLifecycleState, RelationshipObjectKind, RelationshipType } from "@oscharko-dev/keiko-contracts";
+export declare const MAX_LIST_LIMIT = 256;
+export declare const DEFAULT_LIST_LIMIT = 64;
+export declare const MAX_IMPACT_DEPTH = 3;
+export declare const DEFAULT_IMPACT_DEPTH = 1;
+export declare const MAX_IMPACT_NODES = 1024;
+export declare const DEFAULT_IMPACT_NODES = 256;
+export declare const MAX_IMPACT_RELATIONSHIPS = 2048;
+export declare const DEFAULT_IMPACT_RELATIONSHIPS = 512;
+export declare const LIFECYCLE_HISTORY_RETAIN = 32;
+export declare const MAX_RELATIONSHIPS_PER_QUERY = 2048;
+export type RelationshipScope = {
+    readonly kind: "user";
+    readonly userId: string;
+    readonly workspaceId: string;
+} | {
+    readonly kind: "workspace";
+    readonly workspaceId: string;
+} | {
+    readonly kind: "project";
+    readonly projectId: string;
+    readonly workspaceId: string;
+} | {
+    readonly kind: "workflow";
+    readonly workflowDefinitionId: string;
+    readonly workspaceId: string;
+} | {
+    readonly kind: "global";
+    readonly workspaceId: string;
+};
+export interface StoredRelationship extends Relationship {
+    readonly confidence?: number | undefined;
+    readonly summary?: string | undefined;
+    readonly scope: RelationshipScope;
+}
+export interface NewRelationship {
+    readonly id: string;
+    readonly workspaceId: string;
+    readonly scope: RelationshipScope;
+    readonly type: RelationshipType;
+    readonly source: {
+        readonly kind: RelationshipObjectKind;
+        readonly id: string;
+        readonly workspaceId: string;
+    };
+    readonly target: {
+        readonly kind: RelationshipObjectKind;
+        readonly id: string;
+        readonly workspaceId: string;
+    };
+    readonly lifecycleState: RelationshipLifecycleState;
+    readonly confidence?: number | undefined;
+    readonly summary?: string | undefined;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+    readonly etag: string;
+}
+export interface RelationshipListQuery {
+    readonly workspaceId: string;
+    readonly sourceKind?: RelationshipObjectKind | undefined;
+    readonly sourceId?: string | undefined;
+    readonly targetKind?: RelationshipObjectKind | undefined;
+    readonly targetId?: string | undefined;
+    readonly type?: RelationshipType | undefined;
+    readonly lifecycle?: RelationshipLifecycleState | undefined;
+    readonly limit: number;
+    readonly afterEtag?: string | undefined;
+}
+export interface RelationshipListResult {
+    readonly entries: readonly StoredRelationship[];
+    readonly truncated: boolean;
+    readonly nextCursor: string | undefined;
+}
+export interface RelationshipCardinalitySnapshot {
+    readonly producesEvidenceForSource: number;
+    readonly startsWorkflowForTarget: number;
+}
+export interface RelationshipLifecycleHistoryRow {
+    readonly relationshipId: string;
+    readonly fromState: RelationshipLifecycleState;
+    readonly toState: RelationshipLifecycleState;
+    readonly occurredAt: number;
+    readonly summary?: string | undefined;
+}
+export interface RelationshipHealthEndpointRef {
+    readonly kind: RelationshipObjectKind;
+    readonly id: string;
+}
+export interface RelationshipHealthRelationshipRef {
+    readonly id: string;
+    readonly type: RelationshipType;
+    readonly source: RelationshipHealthEndpointRef;
+    readonly target: RelationshipHealthEndpointRef;
+    readonly lifecycle: RelationshipLifecycleState;
+}
+export interface RelationshipHealthFindings {
+    readonly orphanedEndpoints: readonly RelationshipHealthEndpointRef[];
+    readonly orphanedEndpointsTruncated: boolean;
+    readonly staleRelationships: readonly RelationshipHealthRelationshipRef[];
+    readonly staleRelationshipsTruncated: boolean;
+    readonly blockedRelationships: readonly RelationshipHealthRelationshipRef[];
+    readonly blockedRelationshipsTruncated: boolean;
+    readonly failedRelationships: readonly RelationshipHealthRelationshipRef[];
+    readonly failedRelationshipsTruncated: boolean;
+    readonly invalidReferences: readonly RelationshipHealthRelationshipRef[];
+    readonly invalidReferencesTruncated: boolean;
+    readonly cycleParticipants: readonly RelationshipHealthRelationshipRef[];
+    readonly cycleScanTruncated: boolean;
+}
+export interface RelationshipHealthSummary {
+    readonly checkedAt: number;
+    readonly totals: Readonly<Record<RelationshipLifecycleState, number>>;
+    readonly truncated: boolean;
+    readonly findings: RelationshipHealthFindings;
+}
+export declare function insertRelationship(db: DatabaseSync, rel: NewRelationship): StoredRelationship;
+export declare function getRelationship(db: DatabaseSync, id: string, workspaceId: string): StoredRelationship | undefined;
+export declare function getRelationshipEtag(db: DatabaseSync, id: string, workspaceId: string): string | undefined;
+export interface UpdateLifecycleArgs {
+    readonly id: string;
+    readonly workspaceId: string;
+    readonly to: RelationshipLifecycleState;
+    readonly previous: RelationshipLifecycleState;
+    readonly newEtag: string;
+    readonly updatedAt: number;
+    readonly summary?: string | undefined;
+}
+export declare function updateRelationshipLifecycle(db: DatabaseSync, args: UpdateLifecycleArgs): StoredRelationship;
+export interface ReconnectArgs {
+    readonly id: string;
+    readonly workspaceId: string;
+    readonly target: {
+        readonly kind: RelationshipObjectKind;
+        readonly id: string;
+    };
+    readonly newEtag: string;
+    readonly updatedAt: number;
+    readonly summary?: string | undefined;
+}
+export declare function reconnectRelationship(db: DatabaseSync, args: ReconnectArgs): StoredRelationship;
+export declare function relationshipCardinalitySnapshot(db: DatabaseSync, workspaceId: string, source: {
+    readonly kind: RelationshipObjectKind;
+    readonly id: string;
+}, target: {
+    readonly kind: RelationshipObjectKind;
+    readonly id: string;
+}): RelationshipCardinalitySnapshot;
+export declare function listRelationships(db: DatabaseSync, q: RelationshipListQuery): RelationshipListResult;
+export declare function findRelationshipsBySource(db: DatabaseSync, workspaceId: string, source: {
+    readonly kind: RelationshipObjectKind;
+    readonly id: string;
+}, limit: number): readonly StoredRelationship[];
+export declare function findRelationshipsByTarget(db: DatabaseSync, workspaceId: string, target: {
+    readonly kind: RelationshipObjectKind;
+    readonly id: string;
+}, limit: number): readonly StoredRelationship[];
+export declare function listRelationshipLifecycleHistory(db: DatabaseSync, relationshipId: string, limit?: number): readonly RelationshipLifecycleHistoryRow[];
+export interface DependencyWalkOptions {
+    readonly workspaceId: string;
+    readonly originId: string;
+    readonly direction: "outgoing" | "incoming" | "both";
+    readonly maxDepth: number;
+    readonly maxNodes: number;
+    readonly maxRelationships: number;
+}
+export interface DependencyWalkResult {
+    readonly relationships: readonly StoredRelationship[];
+    readonly nodes: readonly {
+        readonly kind: RelationshipObjectKind;
+        readonly id: string;
+    }[];
+    readonly truncated: boolean;
+    readonly truncationReason: "max-depth" | "max-nodes" | "max-relationships" | null;
+    readonly depthReached: number;
+}
+export declare function walkDependencies(db: DatabaseSync, options: DependencyWalkOptions): DependencyWalkResult;
+export interface ImpactWalkOptions {
+    readonly workspaceId: string;
+    readonly endpoint: {
+        readonly kind: RelationshipObjectKind;
+        readonly id: string;
+    };
+    readonly direction: "outgoing" | "incoming" | "both";
+    readonly maxDepth: number;
+    readonly maxNodes: number;
+    readonly maxRelationships: number;
+}
+export declare function computeImpact(db: DatabaseSync, options: ImpactWalkOptions): DependencyWalkResult;
+export declare function graphHealth(db: DatabaseSync, workspaceId: string): RelationshipHealthSummary;
+//# sourceMappingURL=relationships.d.ts.map

package/dist/store/relationships.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relationships.d.ts","sourceRoot":"","sources":["../../src/store/relationships.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,YAAY,EAAiB,MAAM,aAAa,CAAC;AAE/D,OAAO,KAAK,EACV,YAAY,EACZ,0BAA0B,EAC1B,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,+BAA+B,CAAC;AAQvC,eAAO,MAAM,cAAc,MAAM,CAAC;AAClC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAC7C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAI3C,eAAO,MAAM,2BAA2B,OAA2B,CAAC;AAOpE,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAChF;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACtF;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;QACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;QACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE,0BAA0B,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AASD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;CAChD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACrE,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,kBAAkB,EAAE,SAAS,iCAAiC,EAAE,CAAC;IAC1E,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,oBAAoB,EAAE,SAAS,iCAAiC,EAAE,CAAC;IAC5E,QAAQ,CAAC,6BAA6B,EAAE,OAAO,CAAC;IAChD,QAAQ,CAAC,mBAAmB,EAAE,SAAS,iCAAiC,EAAE,CAAC;IAC3E,QAAQ,CAAC,4BAA4B,EAAE,OAAO,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,iCAAiC,EAAE,CAAC;IACzE,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,iCAAiC,EAAE,CAAC;IACzE,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AA4LD,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,eAAe,GAAG,kBAAkB,CA8C7F;AAED,wBAAgB,eAAe,CAC7B,EAAE,EAAE,YAAY,EAChB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,GAClB,kBAAkB,GAAG,SAAS,CAGhC;AAED,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,YAAY,EAChB,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,SAAS,CAGpB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,EAAE,0BAA0B,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED,wBAAgB,2BAA2B,CACzC,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,mBAAmB,GACxB,kBAAkB,CAoBpB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,kBAAkB,CAgB/F;AAED,wBAAgB,+BAA+B,CAC7C,EAAE,EAAE,YAAY,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACtE,MAAM,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACrE,+BAA+B,CAejC;AA8BD,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,YAAY,EAChB,CAAC,EAAE,qBAAqB,GACvB,sBAAsB,CAuBxB;AAED,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,YAAY,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACtE,KAAK,EAAE,MAAM,GACZ,SAAS,kBAAkB,EAAE,CAM/B;AAED,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,YAAY,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACtE,KAAK,EAAE,MAAM,GACZ,SAAS,kBAAkB,EAAE,CAM/B;AAED,wBAAgB,gCAAgC,CAC9C,EAAE,EAAE,YAAY,EAChB,cAAc,EAAE,MAAM,EACtB,KAAK,GAAE,MAAiC,GACvC,SAAS,+BAA+B,EAAE,CAqB5C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAE,SAAS;QACvB,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;QACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;KACrB,EAAE,CAAC;IACJ,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,WAAW,GAAG,WAAW,GAAG,mBAAmB,GAAG,IAAI,CAAC;IAClF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,YAAY,EAChB,OAAO,EAAE,qBAAqB,GAC7B,oBAAoB,CAKtB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAClF,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,GAAG,oBAAoB,CAGhG;AAED,wBAAgB,WAAW,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,yBAAyB,CAW5F"}