@superblocksteam/telemetry 2.0.0-SNAPSHOT.329be19cb7ca892b

package/dist/npm-registry/emitter.d.ts

@@ -0,0 +1,310 @@
+/**
+ * NPM Registry Metrics Emitter (APPS-4378 / APPS-4189)
+ *
+ * One emitter for the whole npm-registry subsystem. It owns every
+ * `superblocks.npm.*` metric and centralizes the sanitize-at-emit-boundary
+ * discipline: no raw registry hostname, package name, or token can escape via
+ * a metric label because every dimension is coerced to a closed enum or a
+ * bounded bucket here, the moment before it reaches an OTel instrument.
+ *
+ * Wiring follows the rest of the npm subsystem: the meter is resolved lazily
+ * from the OTel global (`metrics.getMeter`) and instruments are cached and
+ * re-bound when the global MeterProvider changes (the typical case is a test
+ * installing its own provider for isolation). The emitter is therefore a
+ * zero-config process singleton (`npmRegistryEmitter`) — no DI plumbing
+ * through AiServiceConfig / NpmRegistryClientDeps.
+ *
+ * Metrics (all `superblocks.npm.*`, durations in seconds):
+ *
+ *   - `config.lookup_total`     counter   {result}
+ *   - `config.lookup_duration_seconds` histogram {result} buckets [0.05,0.25,1,3,10,30]
+ *   - `config.policy_fallback_total`   counter {branch}  lastKnownPolicy supplied the policy
+ *   - `sync_home_npmrc.outcome_total`  counter {outcome}  CLI boot home npmrc materialization
+ *   - `sync_project_npmrc.outcome_total` counter {outcome}  project-dir .npmrc reconcile (boot + install)
+ *   - `install.outcome_total`   counter   {outcome, configured, registry_host, runner}
+ *   - `install.duration_seconds`histogram {…same…}  buckets [0.5,2,5,15,60,300]
+ *   - `install.status`          gauge     {…same…}  last-seen 1=success/0=else
+ *   - `probe.outcome_total`     counter   {outcome, registry_host}
+ *   - `probe.duration_seconds`  histogram {…same…}  buckets [0.1,0.5,1,3,10,30]
+ *   - `lookup.calls_total`      counter   {outcome, registry_host}
+ *   - `lookup.duration_seconds` histogram {…same…}  buckets [0.05,0.25,1,3,10,30]
+ *   - `killswitch.enabled`      gauge     {}         1 when the feature is suppressed
+ *
+ * Cardinality budget (documented contract — must not regress without a
+ * migration plan; every dashboard / Datadog facet pins on these):
+ *
+ *   - registry_host ≤ 3   (`public_npm | private | unknown`)
+ *   - install.outcome ≤ 7 (`NPM_INSTALL_OUTCOMES`)
+ *   - probe.outcome ≤ 5   (`NPM_PROBE_OUTCOMES`)
+ *   - lookup.outcome ≤ 3  (`NPM_LOOKUP_TOOL_OUTCOMES`)
+ *   - config.result ≤ 5   (`NPM_CONFIG_LOOKUP_RESULTS`)
+ *   - config.force_refresh ≤ 2 (boolean)
+ *   - config.policy_fallback.branch ≤ 2 (`NPM_POLICY_FALLBACK_BRANCHES`)
+ *   - sync_home_npmrc.outcome ≤ 5 (`NPM_SYNC_HOME_NPMRC_OUTCOMES`)
+ *   - sync_project_npmrc.outcome ≤ 5 (`NPM_SYNC_PROJECT_NPMRC_OUTCOMES`)
+ *   - configured ≤ 2, runner ≤ 5 (`NPM_INSTALL_RUNNERS`)
+ *
+ * Worst-case distinct series across every instrument is ≈ 730: the three
+ * install instruments (status gauge + counter + histogram) dominate at
+ * outcome×configured×registry_host×runner = 7×2×3×5 = 210 each → 630, plus
+ * probe 5×3×2=30, config 5×2(force_refresh)×2(counter+histogram)=20, lookup
+ * 3×3×2=18, the policy-fallback counter 2, the sync-home-npmrc counter 5,
+ * the sync-project-npmrc counter 5, and the killswitch gauge 1. How it grew
+ * over time: the runner count went from 3 to 4 (`auto_upgrade`) then 5
+ * (`uninstall`), adding `config.force_refresh` grew config from 8 to 16,
+ * adding `stale` as its own config result grew it from 16 to 20, and the
+ * policy-fallback (2 series), sync-home-npmrc (5 series), and
+ * sync-project-npmrc (5 series) counters were added. Adding a label value
+ * must increase the count, not decrease it.
+ * Still well under the internal 150K flag and the Datadog billing boundary.
+ * Per-pod `host` is stripped at the collector for the `superblocks.npm.*`
+ * family so series are aggregated by `service.name`.
+ *
+ * Each path has its OWN closed outcome enum + `normalize*` coercer because the
+ * paths legitimately diverge (probe has `ok`/`invalid_response`, install has
+ * `tls_failed`/`lockfile_url_mismatch`, …). `auth_failed` is deliberately a
+ * first-class outcome on install/probe — an expected, fast-failing
+ * customer-config mode — kept separable from infra failures (`unreachable` /
+ * `tls_failed`) so a future alert can page on infra spikes while routing auth
+ * to a dashboard. These short names diverge from the long-form `NPM_OUTCOMES`
+ * in `./sanitize` (which stays as the audit-event surface): the install path
+ * normalizes the long `NpmInstallBlocked.reason` values to the short forms.
+ */
+import { type NpmRegistryBucket } from "./sanitize.js";
+/**
+ * Closed enum of npm install call sites that emit metrics. One value per call
+ * site Superblocks owns; renaming a value breaks every dashboard split on
+ * `runner`, so additions/removals need a migration plan.
+ *
+ *   - `install_all`      — full install from package.json (no specific
+ *                          packages). Covers both `AppShell.runNpmInstall`
+ *                          and `AppShell.runPackageManagerInstall`.
+ *   - `install_specific` — `AppShell.installSpecificPackages` (`npm add`).
+ *   - `prefetch`         — `installTemplateModules` (template `node_modules`
+ *                          prefetch during AiService construction).
+ *   - `auto_upgrade`     — `upgradeCliWithPackageManager` in the CLI SDK
+ *                          (`automatic-upgrades.ts`). Owns the dev-server
+ *                          self-upgrade install; a perimeter block here
+ *                          crash-loops the live-edit pod, so the metric is
+ *                          the only signal that distinguishes that from a
+ *                          working upgrade. APPS-4544.
+ *   - `uninstall`        — `AppShell.uninstallPackages` (`npm uninstall` /
+ *                          `pnpm remove`). Same registry and script-policy
+ *                          wrappers as install; a distinct runner so
+ *                          dashboards can split remove from add.
+ */
+export declare const NPM_INSTALL_RUNNERS: readonly ["auto_upgrade", "install_all", "install_specific", "prefetch", "uninstall"];
+export type NpmInstallRunner = (typeof NPM_INSTALL_RUNNERS)[number];
+/**
+ * `config.lookup_total` result. Derived inside `NpmRegistryClient.getConfig`
+ * (the only place that knows cache hit vs miss): in-TTL non-empty hit → `hit`;
+ * fresh fetch with a configured registry → `miss`; empty / 404 / flag-off →
+ * `not_configured`; serving last-known-good config during an outage → `stale`;
+ * no usable cache during an outage / any throw → `error`.
+ *
+ * `stale` means the client is still serving a real configured registry from
+ * cache, just past the point where it would normally refresh. On-call needs to
+ * tell this apart from a real failure, so it is its own result instead of
+ * folding into `error` (which used to mix "still working off cache" with
+ * "broken"). The age of the cached value rides on the WARN log only, never as
+ * a metric label, so it adds no metric series.
+ */
+export declare const NPM_CONFIG_LOOKUP_RESULTS: readonly ["hit", "miss", "not_configured", "stale", "error"];
+export type NpmConfigLookupResult = (typeof NPM_CONFIG_LOOKUP_RESULTS)[number];
+/** Unknown config-lookup states are an error condition, not a new series. */
+export declare function normalizeConfigLookupResult(input: string | null | undefined): NpmConfigLookupResult;
+/**
+ * `config.policy_fallback_total` branch. Records where the in-memory cache
+ * could not supply an `npmAllowInstallScripts` policy, so
+ * `NpmRegistryClient.lastKnownPolicy` was used instead. That happens when an
+ * earlier auth-failure or 4xx branch wiped the cache, which is a sign
+ * something went wrong, so it is worth alerting on.
+ *
+ *   - `not_configured_404`: the branch of `getConfig` that keeps the policy on a 404.
+ *   - `unreachable`: the no-usable-cache branch of `serveStaleOrUnconfigured`.
+ */
+export declare const NPM_POLICY_FALLBACK_BRANCHES: readonly ["not_configured_404", "unreachable"];
+export type NpmPolicyFallbackBranch = (typeof NPM_POLICY_FALLBACK_BRANCHES)[number];
+/**
+ * `sync_home_npmrc.outcome_total` outcome. Mirrors the `SyncHomeNpmrcOutcome`
+ * union in the CLI's `home-npmrc.mts` and the `outcome` span attribute, so the
+ * metric and the `npm_registry.sync_home_npmrc` span join on the same value.
+ * Keep this list in sync with that union; an unknown value folds to `error`
+ * rather than adding a new series.
+ */
+export declare const NPM_SYNC_HOME_NPMRC_OUTCOMES: readonly ["written", "restored-not-configured", "skipped-unreachable", "skipped-snapshot-failed", "error"];
+export type NpmSyncHomeNpmrcOutcome = (typeof NPM_SYNC_HOME_NPMRC_OUTCOMES)[number];
+export declare function normalizeSyncHomeNpmrcOutcome(input: string | null | undefined): NpmSyncHomeNpmrcOutcome;
+/**
+ * `sync_project_npmrc.outcome_total` outcome. Mirrors project-dir reconcile
+ * in `maybeWriteNpmrcForDir` (boot + install). Keep in sync with that call
+ * site; unknown values fold to `error`.
+ *
+ *   - `written`: configured rewrite with a fresh JWT
+ *   - `restored-not-configured`: restored from a clean backup, or noop
+ *   - `deleted-not-configured`: removed a Superblocks-authored stale file
+ *   - `skipped-unreachable`: fail-closed leave-alone on cold-cache outage
+ *   - `error`: unexpected failure (gitignore refuse, unlink/restore miss, boot catch)
+ */
+export declare const NPM_SYNC_PROJECT_NPMRC_OUTCOMES: readonly ["written", "restored-not-configured", "deleted-not-configured", "skipped-unreachable", "error"];
+export type NpmSyncProjectNpmrcOutcome = (typeof NPM_SYNC_PROJECT_NPMRC_OUTCOMES)[number];
+export declare function normalizeSyncProjectNpmrcOutcome(input: string | null | undefined): NpmSyncProjectNpmrcOutcome;
+/**
+ * `install.outcome_total` outcome. Short forms; the install path normalizes
+ * the long `NpmInstallBlocked.reason` values (`registry_auth_failed`,
+ * `registry_unreachable`) to these via {@link normalizeInstallOutcome}.
+ */
+export declare const NPM_INSTALL_OUTCOMES: readonly ["success", "auth_failed", "not_in_registry", "unreachable", "tls_failed", "lockfile_url_mismatch", "package_substituted", "vulnerable_package", "other"];
+export type NpmInstallOutcome = (typeof NPM_INSTALL_OUTCOMES)[number];
+export declare function normalizeInstallOutcome(input: string | null | undefined): NpmInstallOutcome;
+/** `probe.outcome_total` outcome. Mapped from the server `ProbeResult`. */
+export declare const NPM_PROBE_OUTCOMES: readonly ["ok", "auth_failed", "unreachable", "tls_failed", "invalid_response"];
+export type NpmProbeOutcome = (typeof NPM_PROBE_OUTCOMES)[number];
+/**
+ * Unknown → `unreachable`: the typed call site maps the closed `ProbeReason`
+ * exhaustively, so this floor only fires on a non-typed (JS) caller, where
+ * "we couldn't classify the probe" is safest reported as a connectivity
+ * failure rather than silently dropped or minted as a new series.
+ */
+export declare function normalizeProbeOutcome(input: string | null | undefined): NpmProbeOutcome;
+/** `lookup.calls_total` outcome (the Clark `lookupNpmPackage` tool). */
+export declare const NPM_LOOKUP_TOOL_OUTCOMES: readonly ["in_registry", "not_in_registry", "error"];
+export type NpmLookupToolOutcome = (typeof NPM_LOOKUP_TOOL_OUTCOMES)[number];
+/** Auth / unreachable / fail-closed / throw all collapse to `error` here. */
+export declare function normalizeLookupToolOutcome(input: string | null | undefined): NpmLookupToolOutcome;
+export interface NpmInstallMetricInput {
+    /** Which install call site emitted this event. */
+    runner: NpmInstallRunner;
+    /**
+     * Registry URL or bare hostname (`null`/`undefined` → `unknown`). Always
+     * bucketed via `bucketNpmRegistryHost`, so raw hostnames cannot leak.
+     */
+    registryHost: string | null | undefined;
+    /**
+     * Outcome key. Free-form on input; coerced to {@link NPM_INSTALL_OUTCOMES}
+     * at the emit boundary (long `NpmInstallBlocked.reason` forms are mapped to
+     * their short equivalents; unknown → `other`). Use `"success"` on the happy
+     * path.
+     */
+    outcome: string | null | undefined;
+    /**
+     * Whether the org had a private registry configured for this install
+     * (`result.config.configured`). Lets dashboards separate
+     * configured-but-failed from never-configured.
+     */
+    configured: boolean;
+    /** Elapsed wall-clock time in milliseconds; clamped at 0, emitted as seconds. */
+    durationMs: number;
+}
+export interface NpmProbeMetricInput {
+    registryHost: string | null | undefined;
+    outcome: string | null | undefined;
+    durationMs: number;
+}
+export interface NpmLookupToolMetricInput {
+    registryHost: string | null | undefined;
+    outcome: string | null | undefined;
+    durationMs: number;
+}
+/**
+ * Attribute set shaped for `llmobs.annotate({ tags })`. Returned by
+ * `recordInstall` so the active install span carries the exact values that
+ * went into the metric pipeline.
+ */
+export interface NpmInstallSpanAttributes {
+    "npm.registry_host": NpmRegistryBucket;
+    "npm.outcome": NpmInstallOutcome;
+}
+/**
+ * The npm-registry metrics emitter. Constructed once as the
+ * {@link npmRegistryEmitter} singleton; no `Meter` is injected — instruments
+ * resolve lazily from the OTel global and re-bind on provider change.
+ */
+export declare class NpmRegistryEmitter {
+    /**
+     * Last-seen install status keyed by the attribute tuple. The observable
+     * gauge reads this each collection cycle. Every key component is coerced to
+     * a closed enum / bounded bucket at the emit boundary
+     * (`normalizeInstallOutcome`, `bucketNpmRegistryHost`, the `NpmInstallRunner`
+     * union, a boolean), so the map is **bounded by construction** at
+     * runner(4) × configured(2) × registry_host(3) × outcome(7) = 168 entries —
+     * it cannot grow with traffic, only with deliberate enum changes. Entries
+     * persist until process exit / `_resetForTesting` (a "last-seen for
+     * dashboards" gauge must not drop a combo and lie about the most recent
+     * outcome); no eviction is needed at this bound. The cardinality regression
+     * test pins the resulting series count.
+     */
+    private readonly lastInstallStatus;
+    /** Returns `true` when the kill-switch is asserting (feature suppressed). */
+    private killswitchState;
+    private cachedMeter;
+    private cachedInstruments;
+    /**
+     * Lazy instrument factory. Re-creates instruments and re-registers the
+     * observable-gauge callbacks when the global MeterProvider changes (a stale
+     * instrument bound to a replaced provider silently drops data).
+     */
+    private getInstruments;
+    /**
+     * Emit one `config.lookup_total` + `config.lookup_duration_seconds`
+     * observation. `durationMs` is the time `getConfig` spent resolving — sub-ms
+     * for a cache hit, the network round-trip (+ any JWT-refresh retry) for a
+     * miss — so dashboards can tell fast cache hits from slow cold fetches.
+     * `forceRefresh` records whether the caller bypassed the TTL cache hit, so
+     * forced just-in-time refreshes can be split from organic TTL-expiry misses.
+     */
+    recordConfigLookup(result: string | null | undefined, durationMs: number, forceRefresh?: boolean): void;
+    /**
+     * Emit one `config.policy_fallback_total` observation. Call from the
+     * `getConfig` 404 branch and the `serveStaleOrUnconfigured` no-cache branch
+     * when `lastKnownPolicy` supplied a value the cache could not. That means an
+     * earlier auth or 4xx branch wiped the cache, which is a sign something went
+     * wrong and is worth alerting on.
+     */
+    recordPolicyFallback(branch: NpmPolicyFallbackBranch): void;
+    /**
+     * Emit one `sync_home_npmrc.outcome_total` observation alongside the
+     * `npm_registry.sync_home_npmrc` span, so the health of writing the npmrc at
+     * boot can be alerted on per `service.name` without querying traces.
+     * `outcome` is the `SyncHomeNpmrcOutcome`; an unknown value folds to `error`.
+     */
+    recordSyncHomeNpmrc(outcome: string | null | undefined): void;
+    /**
+     * Emit one `sync_project_npmrc.outcome_total` observation for project-dir
+     * `.npmrc` reconcile (boot + install). Unknown outcomes fold to `error`.
+     */
+    recordSyncProjectNpmrc(outcome: string | null | undefined): void;
+    /**
+     * Emit the install outcome counter + duration histogram + last-seen status
+     * gauge, and return the matching span-attribute pair for `llmobs.annotate`.
+     * Safe to call from a `finally` block.
+     */
+    recordInstall(input: NpmInstallMetricInput): NpmInstallSpanAttributes;
+    /** Emit one `probe.outcome_total` + `probe.duration_seconds` observation. */
+    recordProbe(input: NpmProbeMetricInput): void;
+    /** Emit one `lookup.calls_total` + `lookup.duration_seconds` observation. */
+    recordLookupTool(input: NpmLookupToolMetricInput): void;
+    /**
+     * Register the kill-switch state source. `getCurrentState` returns `true`
+     * when the feature is suppressed (LD flag off). Idempotent — the latest
+     * source wins; the observable gauge reads it on each scrape. Calling this
+     * also ensures the instruments (and thus the gauge callback) are wired.
+     */
+    setKillswitch(getCurrentState: () => boolean): void;
+    /**
+     * Test-only: drop cached instruments, last-seen status, and the kill-switch
+     * source so the next emit re-binds to a freshly-installed test provider.
+     */
+    _resetForTesting(): void;
+}
+/** Process-wide singleton. All npm-registry call sites emit through this. */
+export declare const npmRegistryEmitter: NpmRegistryEmitter;
+/**
+ * Back-compat free function for the install path (APPS-4189 call sites in
+ * `shell.ts` / `template-renderer.ts`). Delegates to the singleton and returns
+ * the span-attribute pair for `llmobs.annotate`.
+ */
+export declare function recordNpmInstall(input: NpmInstallMetricInput): NpmInstallSpanAttributes;
+/** Test-only reset for the singleton (see {@link NpmRegistryEmitter._resetForTesting}). */
+export declare function _resetNpmRegistryEmitterForTesting(): void;
+//# sourceMappingURL=emitter.d.ts.map

package/dist/npm-registry/emitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../src/npm-registry/emitter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAIH,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAE9E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,mBAAmB,uFAMtB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAqCpE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,yBAAyB,8DAM5B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,6EAA6E;AAC7E,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,qBAAqB,CAIvB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,gDAG/B,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,4GAM/B,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,uBAAuB,CAIzB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,+BAA+B,2GAMlC,CAAC;AACX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,0BAA0B,CAK5B;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,oKAUvB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAetE,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,iBAAiB,CAOnB;AAED,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,iFAMrB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAClE;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,eAAe,CAIjB;AAED,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,sDAI3B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7E,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,oBAAoB,CAItB;AAsCD,MAAM,WAAW,qBAAqB;IACpC,kDAAkD;IAClD,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;OAGG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACxC;;;;;OAKG;IACH,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACnC;;;;OAIG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,mBAAmB,EAAE,iBAAiB,CAAC;IACvC,aAAa,EAAE,iBAAiB,CAAC;CAClC;AAuBD;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAG9B;IAEJ,6EAA6E;IAC7E,OAAO,CAAC,eAAe,CAA8B;IAErD,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,iBAAiB,CAA0B;IAEnD;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAqGtB;;;;;;;OAOG;IACH,kBAAkB,CAChB,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,UAAU,EAAE,MAAM,EAClB,YAAY,UAAQ,GACnB,IAAI;IAUP;;;;;;OAMG;IACH,oBAAoB,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI;IAK3D;;;;;OAKG;IACH,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;IAO7D;;;OAGG;IACH,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;IAOhE;;;;OAIG;IACH,aAAa,CAAC,KAAK,EAAE,qBAAqB,GAAG,wBAAwB;IAuBrE,6EAA6E;IAC7E,WAAW,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI;IAU7C,6EAA6E;IAC7E,gBAAgB,CAAC,KAAK,EAAE,wBAAwB,GAAG,IAAI;IAUvD;;;;;OAKG;IACH,aAAa,CAAC,eAAe,EAAE,MAAM,OAAO,GAAG,IAAI;IAKnD;;;OAGG;IACH,gBAAgB,IAAI,IAAI;CAMzB;AAED,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB,oBAA2B,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,qBAAqB,GAC3B,wBAAwB,CAE1B;AAED,2FAA2F;AAC3F,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD"}