@vibesdotdev/storage 0.0.2 → 1.0.0-rc.3

package/dist/backup/schemas/disaster-recovery.js

@@ -0,0 +1,410 @@
+/**
+ * Disaster-recovery contracts.
+ *
+ * These schemas describe recovery intent and isolated drill evidence. They do
+ * not perform provider exports or restores; provider implementations register
+ * plans against the `backup/recovery-plan` kind and execute through their
+ * owning infra surfaces.
+ */
+import * as z from "zod/v4";
+const Sha256HexSchema = z
+    .string()
+    .regex(/^[a-f0-9]{64}$/i, "expected a SHA-256 hex digest");
+const DateTimeSchema = z.string().datetime();
+export const RecoveryCoverageStatusSchema = z.enum([
+    "none",
+    "declared",
+    "implemented",
+    "verified",
+    "drill-verified",
+]);
+export const RecoveryCoverageSchema = z
+    .object({
+    status: RecoveryCoverageStatusSchema,
+    evidenceRefs: z.array(z.string().min(1)).default([]),
+    verifiedAt: DateTimeSchema.optional(),
+})
+    .superRefine((coverage, ctx) => {
+    if ((coverage.status === "verified" ||
+        coverage.status === "drill-verified") &&
+        coverage.evidenceRefs.length === 0) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["evidenceRefs"],
+            message: `${coverage.status} coverage requires an evidence reference`,
+        });
+    }
+    if ((coverage.status === "verified" ||
+        coverage.status === "drill-verified") &&
+        !coverage.verifiedAt) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["verifiedAt"],
+            message: `${coverage.status} coverage requires the verification time`,
+        });
+    }
+});
+export const RecoveryObjectiveSchema = z.object({
+    rpoMinutes: z.number().int().nonnegative(),
+    rtoMinutes: z.number().int().positive(),
+});
+export const RecoveryRetentionPolicySchema = z.object({
+    hourlyHours: z.number().int().positive(),
+    dailyDays: z.number().int().positive(),
+    weeklyWeeks: z.number().int().positive(),
+    monthlyMonths: z.number().int().positive(),
+    yearlyYears: z.number().int().positive(),
+});
+export const RecoveryBackupModeSchema = z.enum([
+    "object-copy",
+    "provider-export",
+    "external-secret-recovery",
+    "rebuild-from-authority",
+]);
+export const RecoveryPlaneBackupSchema = z.object({
+    mode: RecoveryBackupModeSchema,
+    destinationProvider: z.string().min(1).optional(),
+    destinationResourceRef: z.string().min(1).optional(),
+    rebuildFrom: z.array(z.string().min(1)).default([]),
+    retention: RecoveryRetentionPolicySchema.optional(),
+    coverage: RecoveryCoverageSchema,
+    /** Secret values never belong in backup manifests or drill evidence. */
+    secretValuesExported: z.literal(false).default(false),
+});
+export const RecoveryAuthorityPlaneSchema = z
+    .object({
+    id: z.string().min(1),
+    name: z.string().min(1),
+    owner: z.string().min(1),
+    authority: z.enum(["authoritative", "derived"]),
+    sourceProvider: z.string().min(1),
+    resourceKind: z.enum([
+        "object-storage",
+        "database",
+        "durable-object",
+        "secret-store",
+        "configuration",
+        "index",
+        "counter",
+        "audit-log",
+    ]),
+    /** Opaque resource/binding identifier; never a credential or connection URL. */
+    resourceRef: z.string().min(1),
+    sensitivity: z.enum([
+        "public",
+        "internal",
+        "confidential",
+        "credential-ciphertext",
+        "credential-hash",
+    ]),
+    objectives: RecoveryObjectiveSchema,
+    backup: RecoveryPlaneBackupSchema,
+    requiredVerificationChecks: z.array(z.string().min(1)).min(1),
+})
+    .superRefine((plane, ctx) => {
+    const rebuilding = plane.backup.mode === "rebuild-from-authority";
+    if (plane.authority === "authoritative" && rebuilding) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["backup", "mode"],
+            message: "an authoritative plane cannot be its own rebuild strategy",
+        });
+    }
+    if (rebuilding) {
+        if (plane.backup.rebuildFrom.length === 0) {
+            ctx.addIssue({
+                code: "custom",
+                path: ["backup", "rebuildFrom"],
+                message: "a derived rebuild must name at least one authority plane",
+            });
+        }
+        return;
+    }
+    if (!plane.backup.destinationProvider) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["backup", "destinationProvider"],
+            message: "a copied/exported authority requires a destination provider",
+        });
+    }
+    else if (plane.backup.destinationProvider === plane.sourceProvider) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["backup", "destinationProvider"],
+            message: "disaster-recovery copies must cross a provider boundary",
+        });
+    }
+    if (!plane.backup.destinationResourceRef) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["backup", "destinationResourceRef"],
+            message: "a copied/exported authority requires a destination resource reference",
+        });
+    }
+    if (!plane.backup.retention) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["backup", "retention"],
+            message: "a copied/exported authority requires an explicit retention policy",
+        });
+    }
+});
+export const RecoveryEncryptionPolicySchema = z
+    .object({
+    artifactCipher: z.literal("AES-256-GCM"),
+    contentDigest: z.literal("SHA-256"),
+    manifestDigest: z.literal("SHA-256"),
+    activeKeyReference: z.string().min(1),
+    recoveryKeyReference: z.string().min(1),
+    minimumKeyCustodians: z.number().int().min(2),
+    secretValuesInEvidence: z.literal(false),
+})
+    .superRefine((policy, ctx) => {
+    if (policy.activeKeyReference === policy.recoveryKeyReference) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["recoveryKeyReference"],
+            message: "recovery key custody must not share the active key reference",
+        });
+    }
+});
+export const RecoveryRestoreAuthorizationSchema = z
+    .object({
+    minimumApprovers: z.number().int().min(2),
+    requiredRoles: z
+        .array(z.enum(["service-owner", "security-or-infra", "incident-commander"]))
+        .min(2),
+    changeRecordRequired: z.literal(true),
+    writeFreezeRequired: z.literal(true),
+})
+    .superRefine((authorization, ctx) => {
+    for (const role of ["service-owner", "security-or-infra"]) {
+        if (!authorization.requiredRoles.includes(role)) {
+            ctx.addIssue({
+                code: "custom",
+                path: ["requiredRoles"],
+                message: `destructive restore authorization requires role '${role}'`,
+            });
+        }
+    }
+});
+export const RecoveryPlanDescriptorSchema = z
+    .object({
+    kind: z.literal("backup/recovery-plan"),
+    id: z.string().min(1),
+    name: z.string().min(1),
+    description: z.string().optional(),
+    owner: z.string().min(1),
+    version: z.string().regex(/^\d+\.\d+\.\d+$/),
+    authorityPlanes: z.array(RecoveryAuthorityPlaneSchema).min(1),
+    /** Exact, dependency-safe restore sequence; every plane appears once. */
+    restoreOrder: z.array(z.string().min(1)).min(1),
+    consistencyPolicy: z.object({
+        mode: z.literal("write-freeze-watermark"),
+        maximumPlaneSkewSeconds: z.number().int().nonnegative(),
+        requireSingleEpoch: z.literal(true),
+    }),
+    encryption: RecoveryEncryptionPolicySchema,
+    destructiveRestoreAuthorization: RecoveryRestoreAuthorizationSchema,
+    drillPolicy: z.object({
+        intervalDays: z.number().int().positive().max(92),
+        isolatedTargetRequired: z.literal(true),
+        productionMutationForbidden: z.literal(true),
+    }),
+    tags: z.array(z.string()).default([]),
+    enabled: z.boolean().default(true),
+})
+    .superRefine((plan, ctx) => {
+    const ids = plan.authorityPlanes.map((plane) => plane.id);
+    const uniqueIds = new Set(ids);
+    if (uniqueIds.size !== ids.length) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["authorityPlanes"],
+            message: "authority plane ids must be unique",
+        });
+    }
+    const orderSet = new Set(plan.restoreOrder);
+    if (orderSet.size !== plan.restoreOrder.length ||
+        orderSet.size !== uniqueIds.size ||
+        ids.some((id) => !orderSet.has(id))) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["restoreOrder"],
+            message: "restoreOrder must contain every authority plane exactly once",
+        });
+    }
+    const orderIndex = new Map(plan.restoreOrder.map((id, index) => [id, index]));
+    for (const plane of plan.authorityPlanes) {
+        for (const dependency of plane.backup.rebuildFrom) {
+            if (!uniqueIds.has(dependency)) {
+                ctx.addIssue({
+                    code: "custom",
+                    path: [
+                        "authorityPlanes",
+                        ids.indexOf(plane.id),
+                        "backup",
+                        "rebuildFrom",
+                    ],
+                    message: `unknown rebuild authority '${dependency}'`,
+                });
+                continue;
+            }
+            if ((orderIndex.get(dependency) ?? Number.MAX_SAFE_INTEGER) >=
+                (orderIndex.get(plane.id) ?? -1)) {
+                ctx.addIssue({
+                    code: "custom",
+                    path: ["restoreOrder"],
+                    message: `rebuild authority '${dependency}' must precede '${plane.id}'`,
+                });
+            }
+        }
+    }
+});
+export const RecoveryDrillCheckSchema = z.object({
+    id: z.string().min(1),
+    status: z.enum(["passed", "failed", "skipped"]),
+    evidenceRef: z.string().min(1),
+});
+export const RecoveryDrillPlaneResultSchema = z.object({
+    planeId: z.string().min(1),
+    status: z.enum(["passed", "failed"]),
+    snapshotProvider: z.string().min(1),
+    restoredObjects: z.number().int().nonnegative(),
+    restoredBytes: z.number().int().nonnegative(),
+    observedRpoMinutes: z.number().nonnegative(),
+    observedRtoMinutes: z.number().nonnegative(),
+    checks: z.array(RecoveryDrillCheckSchema).min(1),
+});
+export const RecoveryDrillEvidenceSchema = z
+    .object({
+    schemaVersion: z.literal("2"),
+    id: z.string().min(1),
+    planId: z.string().min(1),
+    planVersion: z.string().regex(/^\d+\.\d+\.\d+$/),
+    status: z.enum(["passed", "failed"]),
+    startedAt: DateTimeSchema,
+    finishedAt: DateTimeSchema,
+    authorization: z.object({
+        changeRecordRef: z.string().min(1),
+        approverIds: z.array(z.string().min(1)).min(2),
+        productionRestoreApproved: z.literal(false),
+    }),
+    sourceSnapshot: z.object({
+        epoch: z.string().min(1),
+        createdAt: DateTimeSchema,
+        manifestKey: z.string().min(1),
+        manifestSha256: Sha256HexSchema,
+        consistencyWatermark: z.string().min(1),
+        allArtifactChecksumsVerified: z.boolean(),
+    }),
+    target: z.object({
+        environmentId: z
+            .string()
+            .min(1)
+            .refine((id) => !/(^|[-_.])prod(?:uction)?($|[-_.])/i.test(id), "restore drills must not target a production-named environment"),
+        accountBoundaryRef: z.string().min(1),
+        isolated: z.literal(true),
+        production: z.literal(false),
+    }),
+    secretHandling: z.object({
+        availabilityChecksOnly: z.literal(true),
+        valuesRead: z.literal(false),
+        valuesRecorded: z.literal(false),
+    }),
+    planeResults: z.array(RecoveryDrillPlaneResultSchema).min(1),
+    cleanup: z.object({
+        status: z.enum(["complete", "failed"]),
+        evidenceRef: z.string().min(1),
+    }),
+})
+    .superRefine((evidence, ctx) => {
+    if (new Date(evidence.finishedAt) < new Date(evidence.startedAt)) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["finishedAt"],
+            message: "finishedAt must not precede startedAt",
+        });
+    }
+    if (new Set(evidence.authorization.approverIds).size < 2) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["authorization", "approverIds"],
+            message: "restore drill approval requires two distinct people",
+        });
+    }
+    const planeIds = evidence.planeResults.map((result) => result.planeId);
+    if (new Set(planeIds).size !== planeIds.length) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["planeResults"],
+            message: "drill evidence must contain at most one result per plane",
+        });
+    }
+    if (evidence.status === "passed") {
+        if (!evidence.sourceSnapshot.allArtifactChecksumsVerified) {
+            ctx.addIssue({
+                code: "custom",
+                path: ["sourceSnapshot", "allArtifactChecksumsVerified"],
+                message: "a passed drill requires all artifact checksums to verify",
+            });
+        }
+        if (evidence.planeResults.some((result) => result.status !== "passed" ||
+            result.checks.some((check) => check.status !== "passed"))) {
+            ctx.addIssue({
+                code: "custom",
+                path: ["planeResults"],
+                message: "a passed drill cannot contain failed or skipped plane checks",
+            });
+        }
+        if (evidence.cleanup.status !== "complete") {
+            ctx.addIssue({
+                code: "custom",
+                path: ["cleanup", "status"],
+                message: "a passed drill requires verified isolated-target cleanup",
+            });
+        }
+    }
+});
+export const RecoverySnapshotAttestationSchema = z.object({
+    planeId: z.string().min(1),
+    epoch: z.string().min(1),
+    consistencyWatermark: z.string().min(1),
+    sourceProvider: z.string().min(1),
+    destinationProvider: z.string().min(1),
+    sourceAccountRef: z.string().min(1),
+    destinationAccountRef: z.string().min(1),
+    producer: z.object({
+        kind: z.literal("provider-job"),
+        provider: z.string().min(1),
+        executionRef: z.string().min(1),
+    }),
+    immutability: z.object({
+        locked: z.boolean(),
+        until: DateTimeSchema,
+        evidenceRef: z.string().min(1),
+    }),
+    retention: RecoveryRetentionPolicySchema,
+    retentionEvidenceRef: z.string().min(1),
+    lastSuccessfulSnapshot: z.object({
+        createdAt: DateTimeSchema,
+        manifestSha256: Sha256HexSchema,
+        checksumsVerified: z.boolean(),
+        evidenceRef: z.string().min(1),
+    }),
+    observedAt: DateTimeSchema,
+});
+export const RecoveryReadinessAttestationSchema = z.object({
+    schemaVersion: z.literal("2"),
+    planId: z.string().min(1),
+    planVersion: z.string().regex(/^\d+\.\d+\.\d+$/),
+    generatedAt: DateTimeSchema,
+    secretValuesRead: z.literal(false),
+    epoch: z.string().min(1),
+    manifestKey: z.string().min(1),
+    manifestSha256: Sha256HexSchema,
+    consistencyWatermark: z.string().min(1),
+    snapshots: z.array(RecoverySnapshotAttestationSchema),
+    latestDrill: RecoveryDrillEvidenceSchema.optional(),
+});
+//# sourceMappingURL=disaster-recovery.js.map

package/dist/backup/schemas/disaster-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disaster-recovery.js","sourceRoot":"","sources":["../../../src/backup/schemas/disaster-recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,KAAK,CAAC,iBAAiB,EAAE,+BAA+B,CAAC,CAAC;AAC7D,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAE7C,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,IAAI,CAAC;IACjD,MAAM;IACN,UAAU;IACV,aAAa;IACb,UAAU;IACV,gBAAgB;CACjB,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,MAAM,EAAE,4BAA4B;IACpC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,UAAU,EAAE,cAAc,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,IACE,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU;QAC7B,QAAQ,CAAC,MAAM,KAAK,gBAAgB,CAAC;QACvC,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,0CAA0C;SACtE,CAAC,CAAC;IACL,CAAC;IACD,IACE,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU;QAC7B,QAAQ,CAAC,MAAM,KAAK,gBAAgB,CAAC;QACvC,CAAC,QAAQ,CAAC,UAAU,EACpB,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,0CAA0C;SACtE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,aAAa;IACb,iBAAiB;IACjB,0BAA0B;IAC1B,wBAAwB;CACzB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,wBAAwB;IAC9B,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,SAAS,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,sBAAsB;IAChC,wEAAwE;IACxE,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CACtD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IAC/C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC;QACnB,gBAAgB;QAChB,UAAU;QACV,gBAAgB;QAChB,cAAc;QACd,eAAe;QACf,OAAO;QACP,SAAS;QACT,WAAW;KACZ,CAAC;IACF,gFAAgF;IAChF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC;QAClB,QAAQ;QACR,UAAU;QACV,cAAc;QACd,uBAAuB;QACvB,iBAAiB;KAClB,CAAC;IACF,UAAU,EAAE,uBAAuB;IACnC,MAAM,EAAE,yBAAyB;IACjC,0BAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9D,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,wBAAwB,CAAC;IAClE,IAAI,KAAK,CAAC,SAAS,KAAK,eAAe,IAAI,UAAU,EAAE,CAAC;QACtD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;YACxB,OAAO,EAAE,2DAA2D;SACrE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;gBAC/B,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACtC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,QAAQ,EAAE,qBAAqB,CAAC;YACvC,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,CAAC,mBAAmB,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,QAAQ,EAAE,qBAAqB,CAAC;YACvC,OAAO,EAAE,yDAAyD;SACnE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;QACzC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,QAAQ,EAAE,wBAAwB,CAAC;YAC1C,OAAO,EACL,uEAAuE;SAC1E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC5B,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC;YAC7B,OAAO,EACL,mEAAmE;SACtE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACnC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACpC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CACzC,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,IAAI,MAAM,CAAC,kBAAkB,KAAK,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAC9D,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,sBAAsB,CAAC;YAC9B,OAAO,EAAE,8DAA8D;SACxE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,aAAa,EAAE,CAAC;SACb,KAAK,CACJ,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,CACrE;SACA,GAAG,CAAC,CAAC,CAAC;IACT,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACrC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACrC,CAAC;KACD,WAAW,CAAC,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE;IAClC,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,mBAAmB,CAAU,EAAE,CAAC;QACnE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,eAAe,CAAC;gBACvB,OAAO,EAAE,oDAAoD,IAAI,GAAG;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAKL,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC5C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7D,yEAAyE;IACzE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;QACzC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACvD,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;KACpC,CAAC;IACF,UAAU,EAAE,8BAA8B;IAC1C,+BAA+B,EAAE,kCAAkC;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,2BAA2B,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;KAC7C,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACnC,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QAClC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,IACE,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM;QAC1C,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;QAChC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EACnC,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,8DAA8D;SACxE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAClD,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzC,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAClD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE;wBACJ,iBAAiB;wBACjB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBACrB,QAAQ;wBACR,aAAa;qBACd;oBACD,OAAO,EAAE,8BAA8B,UAAU,GAAG;iBACrD,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IACE,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC;gBACvD,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAChC,CAAC;gBACD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,cAAc,CAAC;oBACtB,OAAO,EAAE,sBAAsB,UAAU,mBAAmB,KAAK,CAAC,EAAE,GAAG;iBACxE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAKL,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAC5C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACjD,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpC,SAAS,EAAE,cAAc;IACzB,UAAU,EAAE,cAAc;IAC1B,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;KAC5C,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,cAAc,EAAE,eAAe;QAC/B,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,4BAA4B,EAAE,CAAC,CAAC,OAAO,EAAE;KAC1C,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,MAAM,CACL,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,oCAAoC,CAAC,IAAI,CAAC,EAAE,CAAC,EACtD,+DAA+D,CAChE;QACH,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACzB,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;KAC7B,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAC5B,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;KACjC,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC;CACH,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,EAAE,aAAa,CAAC;YACtC,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC/C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,0DAA0D;SACpE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,4BAA4B,EAAE,CAAC;YAC1D,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,gBAAgB,EAAE,8BAA8B,CAAC;gBACxD,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;QACD,IACE,QAAQ,CAAC,YAAY,CAAC,IAAI,CACxB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAC3D,EACD,CAAC;YACD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,CAAC;gBACtB,OAAO,EACL,8DAA8D;aACjE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC3C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;gBAC3B,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAChC,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC;IACF,SAAS,EAAE,6BAA6B;IACxC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC/B,SAAS,EAAE,cAAc;QACzB,cAAc,EAAE,eAAe;QAC/B,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;QAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC;IACF,UAAU,EAAE,cAAc;CAC3B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAChD,WAAW,EAAE,cAAc;IAC3B,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,cAAc,EAAE,eAAe;IAC/B,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC;IACrD,WAAW,EAAE,2BAA2B,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC"}

package/dist/backup/schemas/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Backup Schemas barrel
+ */
+export { BackupSourceKindSchema, BackupSourceSpecSchema, BackupRotationPolicySchema, BackupVerifyExpectationsSchema, BackupTargetDescriptorSchema, } from "./target.ts";
+export type { BackupSourceKind, BackupSourceSpec, BackupRotationPolicy, BackupVerifyExpectations, BackupTargetDescriptor, } from "./target.ts";
+export { SnapshotStatusSchema, SnapshotFileSchema, SnapshotRecordSchema, SnapshotResultSchema, SnapshotNoticeSchema, } from "./snapshot.ts";
+export type { SnapshotStatus, SnapshotFile, SnapshotRecord, SnapshotResult, SnapshotNotice, } from "./snapshot.ts";
+export { RecoveryCoverageStatusSchema, RecoveryCoverageSchema, RecoveryObjectiveSchema, RecoveryRetentionPolicySchema, RecoveryBackupModeSchema, RecoveryPlaneBackupSchema, RecoveryAuthorityPlaneSchema, RecoveryEncryptionPolicySchema, RecoveryRestoreAuthorizationSchema, RecoveryPlanDescriptorSchema, RecoveryDrillCheckSchema, RecoveryDrillPlaneResultSchema, RecoveryDrillEvidenceSchema, RecoverySnapshotAttestationSchema, RecoveryReadinessAttestationSchema, } from "./disaster-recovery.ts";
+export type { RecoveryCoverageStatus, RecoveryCoverage, RecoveryObjective, RecoveryRetentionPolicy, RecoveryBackupMode, RecoveryPlaneBackup, RecoveryAuthorityPlane, RecoveryEncryptionPolicy, RecoveryRestoreAuthorization, RecoveryPlanDescriptor, RecoveryDrillCheck, RecoveryDrillPlaneResult, RecoveryDrillEvidence, RecoverySnapshotAttestation, RecoveryReadinessAttestation, } from "./disaster-recovery.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/backup/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/backup/schemas/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,cAAc,EACd,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,8BAA8B,EAC9B,kCAAkC,EAClC,4BAA4B,EAC5B,wBAAwB,EACxB,8BAA8B,EAC9B,2BAA2B,EAG3B,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,4BAA4B,EAC5B,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC"}

package/dist/backup/schemas/index.js

@@ -0,0 +1,10 @@
+/**
+ * Backup Schemas barrel
+ */
+export { BackupSourceKindSchema, BackupSourceSpecSchema, BackupRotationPolicySchema, BackupVerifyExpectationsSchema, BackupTargetDescriptorSchema, } from "./target.js";
+export { SnapshotStatusSchema, SnapshotFileSchema, SnapshotRecordSchema, SnapshotResultSchema, SnapshotNoticeSchema, } from "./snapshot.js";
+export { RecoveryCoverageStatusSchema, RecoveryCoverageSchema, RecoveryObjectiveSchema, RecoveryRetentionPolicySchema, RecoveryBackupModeSchema, RecoveryPlaneBackupSchema, RecoveryAuthorityPlaneSchema, RecoveryEncryptionPolicySchema, RecoveryRestoreAuthorizationSchema, RecoveryPlanDescriptorSchema, RecoveryDrillCheckSchema, RecoveryDrillPlaneResultSchema, RecoveryDrillEvidenceSchema, 
+// Attestation contracts consumed by infra recovery adapters (e.g. DO Spaces).
+// Keep barrel parity with dist — dropping these breaks consumers at rebuild (#1101).
+RecoverySnapshotAttestationSchema, RecoveryReadinessAttestationSchema, } from "./disaster-recovery.js";
+//# sourceMappingURL=index.js.map

package/dist/backup/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/backup/schemas/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AAQrB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAQvB,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,8BAA8B,EAC9B,kCAAkC,EAClC,4BAA4B,EAC5B,wBAAwB,EACxB,8BAA8B,EAC9B,2BAA2B;AAC3B,8EAA8E;AAC9E,qFAAqF;AACrF,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,wBAAwB,CAAC"}

package/dist/backup/schemas/job.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Backup Snapshot Job schemas
+ *
+ * Drains all enabled targets (or a specific target if provided) and runs
+ * snapshots, writing provenance rows to `backup.snapshot`.
+ */
+import * as z from "zod/v4";
+export declare const SnapshotJobInputSchema: z.ZodObject<{
+    targetId: z.ZodOptional<z.ZodString>;
+    skipHash: z.ZodDefault<z.ZodBoolean>;
+    dryRun: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+/**
+ * One target run's rotation, applied before its snapshot: what the declared
+ * policy pruned (or, on a dry run, would prune), the stale staging swept, and
+ * what was left in place. Sizes are recorded bytes; no file content.
+ */
+export declare const RotationReportSchema: z.ZodObject<{
+    targetId: z.ZodString;
+    home: z.ZodNullable<z.ZodString>;
+    destDir: z.ZodString;
+    applied: z.ZodBoolean;
+    kept: z.ZodNumber;
+    prunedSnapshots: z.ZodNumber;
+    pruneBytes: z.ZodNumber;
+    staleStaging: z.ZodNumber;
+    stagingBytes: z.ZodNumber;
+    skipped: z.ZodArray<z.ZodObject<{
+        snapshotId: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>>;
+    failures: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type RotationReport = z.infer<typeof RotationReportSchema>;
+export declare const SnapshotJobOutputSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    targetsAttempted: z.ZodNumber;
+    targetsSucceeded: z.ZodNumber;
+    targetsFailed: z.ZodNumber;
+    targetsEmpty: z.ZodDefault<z.ZodNumber>;
+    results: z.ZodArray<z.ZodObject<{
+        targetId: z.ZodString;
+        snapshotId: z.ZodString;
+        status: z.ZodEnum<{
+            success: "success";
+            failed: "failed";
+            pending: "pending";
+            verified: "verified";
+            pruned: "pruned";
+            empty: "empty";
+        }>;
+        files: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            bytes: z.ZodNumber;
+            sha256: z.ZodOptional<z.ZodString>;
+            source: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        rowCount: z.ZodNullable<z.ZodNumber>;
+        durationMs: z.ZodNumber;
+        error: z.ZodNullable<z.ZodString>;
+        home: z.ZodOptional<z.ZodString>;
+        notices: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            preflight: z.ZodString;
+            code: z.ZodString;
+            reason: z.ZodString;
+            message: z.ZodString;
+        }, z.core.$strip>>>;
+        failure: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            code: z.ZodOptional<z.ZodString>;
+            reason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    rotation: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        targetId: z.ZodString;
+        home: z.ZodNullable<z.ZodString>;
+        destDir: z.ZodString;
+        applied: z.ZodBoolean;
+        kept: z.ZodNumber;
+        prunedSnapshots: z.ZodNumber;
+        pruneBytes: z.ZodNumber;
+        staleStaging: z.ZodNumber;
+        stagingBytes: z.ZodNumber;
+        skipped: z.ZodArray<z.ZodObject<{
+            snapshotId: z.ZodString;
+            reason: z.ZodString;
+        }, z.core.$strip>>;
+        failures: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            reason: z.ZodString;
+        }, z.core.$strip>>>;
+        error: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type SnapshotJobInput = z.infer<typeof SnapshotJobInputSchema>;
+export type SnapshotJobOutput = z.infer<typeof SnapshotJobOutputSchema>;
+//# sourceMappingURL=job.d.ts.map

package/dist/backup/schemas/job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job.d.ts","sourceRoot":"","sources":["../../../src/backup/schemas/job.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;iBAe/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWlC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/backup/schemas/job.js

@@ -0,0 +1,47 @@
+/**
+ * Backup Snapshot Job schemas
+ *
+ * Drains all enabled targets (or a specific target if provided) and runs
+ * snapshots, writing provenance rows to `backup.snapshot`.
+ */
+import * as z from "zod/v4";
+import { SnapshotResultSchema } from "./snapshot.js";
+export const SnapshotJobInputSchema = z.object({
+    targetId: z.string().optional(),
+    skipHash: z.boolean().default(false),
+    dryRun: z.boolean().default(false),
+});
+/**
+ * One target run's rotation, applied before its snapshot: what the declared
+ * policy pruned (or, on a dry run, would prune), the stale staging swept, and
+ * what was left in place. Sizes are recorded bytes; no file content.
+ */
+export const RotationReportSchema = z.object({
+    targetId: z.string(),
+    home: z.string().nullable(),
+    destDir: z.string(),
+    applied: z.boolean(),
+    kept: z.number().int().nonnegative(),
+    prunedSnapshots: z.number().int().nonnegative(),
+    pruneBytes: z.number().int().nonnegative(),
+    staleStaging: z.number().int().nonnegative(),
+    stagingBytes: z.number().int().nonnegative(),
+    skipped: z.array(z.object({ snapshotId: z.string(), reason: z.string() })),
+    /** Value-free reasons for paths that could not be removed or rows that could not be marked. */
+    failures: z.array(z.object({ path: z.string(), reason: z.string() })).default([]),
+    /** The rotation step itself failed for this run; its snapshot still ran. */
+    error: z.string().optional(),
+});
+export const SnapshotJobOutputSchema = z.object({
+    success: z.boolean(),
+    targetsAttempted: z.number().int().nonnegative(),
+    targetsSucceeded: z.number().int().nonnegative(),
+    targetsFailed: z.number().int().nonnegative(),
+    /** Runs where none of the target's declared files existed (status `empty`). */
+    targetsEmpty: z.number().int().nonnegative().default(0),
+    results: z.array(SnapshotResultSchema),
+    /** Each target run's rotation, before its snapshot (planned only on a dry run). */
+    rotation: z.array(RotationReportSchema).default([]),
+    error: z.string().optional(),
+});
+//# sourceMappingURL=job.js.map

package/dist/backup/schemas/job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job.js","sourceRoot":"","sources":["../../../src/backup/schemas/job.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACnC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1E,+FAA+F;IAC/F,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjF,4EAA4E;IAC5E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAChD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAChD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,+EAA+E;IAC/E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACtC,mFAAmF;IACnF,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC"}