@vorionsys/security 1.0.0

package/dist/intent/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/intent/schema.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,gBAAgB,qJAAgD,CAAC;AAE9E,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqCjB,CAAC;AAEJ,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBtB,CAAC;AAEJ,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU5B,CAAC;AAEH,eAAO,MAAM,eAAe;;;EAGzB,CAAC;AAMJ,eAAO,MAAM,oBAAoB,mHAO/B,CAAC;AAEH,eAAO,MAAM,4BAA4B,uIAMvC,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8CrB,CAAC;AAEJ,eAAO,MAAM,mBAAmB;;EAK7B,CAAC;AAMJ,eAAO,MAAM,iBAAiB,gFAAqE,CAAC;AACpG,eAAO,MAAM,gBAAgB,yEAA6D,CAAC;AAE3F,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6DtB,CAAC;AAMJ,eAAO,MAAM,gBAAgB,wFAA4E,CAAC;AAE1G,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BlB,CAAC;AAEJ,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAcxB,CAAC;AAEJ,eAAO,MAAM,eAAe;;EAEzB,CAAC;AAEJ,eAAO,MAAM,sBAAsB;;EAKhC,CAAC;AAMJ,eAAO,MAAM,wBAAwB,gFAKnC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB3B,CAAC;AAQJ,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoB1B,CAAC;AAQJ,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgB7B,CAAC;AAEJ,eAAO,MAAM,2BAA2B;;EAKrC,CAAC;AAMJ;;GAEG;AACH,eAAO,MAAM,eAAe,qFAI1B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BtB,CAAC;AAEJ;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuBzB,CAAC;AAMJ;;;GAGG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBpB,CAAC;AAMJ;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,sFAKpC,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0B3B,CAAC;AAMJ,MAAM,MAAM,kBAAkB,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAC;AACvE,MAAM,MAAM,qBAAqB,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAC;AAC1E,MAAM,MAAM,YAAY,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC;AAC7D,MAAM,MAAM,cAAc,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AAC9D,MAAM,MAAM,iBAAiB,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AACjE,MAAM,MAAM,gBAAgB,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AACnE,MAAM,MAAM,mBAAmB,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AACtE,MAAM,MAAM,mBAAmB,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAC;AAC3E,MAAM,MAAM,kBAAkB,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAC;AACzE,MAAM,MAAM,qBAAqB,GAAG,OAAO,mBAAmB,CAAC,YAAY,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,OAAO,mBAAmB,CAAC,YAAY,CAAC;AAC/E,MAAM,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC;AACpD,MAAM,MAAM,YAAY,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC;AACvD,MAAM,MAAM,cAAc,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AAC9D,MAAM,MAAM,iBAAiB,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AACjE,MAAM,MAAM,mBAAmB,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAC;AAC3E,MAAM,MAAM,aAAa,GAAG,OAAO,WAAW,CAAC,YAAY,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,OAAO,WAAW,CAAC,YAAY,CAAC;AAC/D,MAAM,MAAM,cAAc,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AAC9D,MAAM,MAAM,iBAAiB,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AACjE,MAAM,MAAM,SAAS,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAC;AACrD,MAAM,MAAM,YAAY,GAAG,OAAO,QAAQ,CAAC,YAAY,CAAC;AACxD,MAAM,MAAM,gBAAgB,GAAG,OAAO,cAAc,CAAC,YAAY,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,OAAO,cAAc,CAAC,YAAY,CAAC"}

package/dist/intent/schema.js

@@ -0,0 +1,447 @@
+import { relations } from 'drizzle-orm';
+import { pgTable, uuid, text, jsonb, timestamp, integer, bigint, boolean, pgEnum, uniqueIndex, index, inet, } from 'drizzle-orm/pg-core';
+import { INTENT_STATUSES } from '../common/types.js';
+// =============================================================================
+// ENUMS
+// =============================================================================
+export const intentStatusEnum = pgEnum('intent_status', [...INTENT_STATUSES]);
+export const intents = pgTable('intents', {
+    id: uuid('id').defaultRandom().primaryKey(),
+    tenantId: text('tenant_id').notNull(),
+    entityId: uuid('entity_id').notNull(),
+    goal: text('goal').notNull(),
+    intentType: text('intent_type'),
+    priority: integer('priority').default(0),
+    status: intentStatusEnum('status').notNull().default('pending'),
+    trustSnapshot: jsonb('trust_snapshot'),
+    context: jsonb('context').notNull(),
+    metadata: jsonb('metadata').notNull().default({}),
+    dedupeHash: text('dedupe_hash').notNull(),
+    trustLevel: integer('trust_level'),
+    trustScore: integer('trust_score'),
+    createdAt: timestamp('created_at', { withTimezone: true })
+        .defaultNow()
+        .notNull(),
+    updatedAt: timestamp('updated_at', { withTimezone: true })
+        .defaultNow()
+        .notNull(),
+    // GDPR soft delete
+    deletedAt: timestamp('deleted_at', { withTimezone: true }),
+    // Cancellation support
+    cancellationReason: text('cancellation_reason'),
+}, (table) => ({
+    tenantCreatedIdx: index('intents_tenant_created_idx').on(table.tenantId, table.createdAt),
+    dedupeIdx: uniqueIndex('intents_tenant_dedupe_idx').on(table.tenantId, table.dedupeHash),
+    // Soft delete index for cleanup job
+    deletedAtIdx: index('intents_deleted_at_idx').on(table.deletedAt),
+    // Performance index for countActiveIntents() queries
+    tenantStatusIdx: index('intents_tenant_status_idx').on(table.tenantId, table.status),
+}));
+export const intentEvents = pgTable('intent_events', {
+    id: uuid('id').defaultRandom().primaryKey(),
+    intentId: uuid('intent_id')
+        .notNull()
+        .references(() => intents.id),
+    eventType: text('event_type').notNull(),
+    payload: jsonb('payload').notNull().default({}),
+    occurredAt: timestamp('occurred_at', { withTimezone: true })
+        .defaultNow()
+        .notNull(),
+    // Cryptographic hash for tamper detection (SHA-256)
+    hash: text('hash'),
+    // Previous event hash for chain integrity
+    previousHash: text('previous_hash'),
+}, (table) => ({
+    intentEventIdx: index('intent_events_intent_idx').on(table.intentId, table.occurredAt),
+}));
+export const intentEvaluations = pgTable('intent_evaluations', {
+    id: uuid('id').defaultRandom().primaryKey(),
+    intentId: uuid('intent_id')
+        .notNull()
+        .references(() => intents.id),
+    tenantId: text('tenant_id').notNull(),
+    result: jsonb('result').notNull(),
+    createdAt: timestamp('created_at', { withTimezone: true })
+        .defaultNow()
+        .notNull(),
+});
+export const intentRelations = relations(intents, ({ many }) => ({
+    events: many(intentEvents),
+    evaluations: many(intentEvaluations),
+}));
+// =============================================================================
+// ESCALATIONS
+// =============================================================================
+export const escalationStatusEnum = pgEnum('escalation_status', [
+    'pending',
+    'acknowledged',
+    'approved',
+    'rejected',
+    'timeout',
+    'cancelled',
+]);
+export const escalationReasonCategoryEnum = pgEnum('escalation_reason_category', [
+    'trust_insufficient',
+    'high_risk',
+    'policy_violation',
+    'manual_review',
+    'constraint_escalate',
+]);
+export const escalations = pgTable('escalations', {
+    id: uuid('id').defaultRandom().primaryKey(),
+    intentId: uuid('intent_id')
+        .notNull()
+        .references(() => intents.id),
+    tenantId: text('tenant_id').notNull(),
+    // Escalation details
+    reason: text('reason').notNull(),
+    reasonCategory: escalationReasonCategoryEnum('reason_category').notNull(),
+    // Routing
+    escalatedTo: text('escalated_to').notNull(),
+    escalatedBy: text('escalated_by'),
+    // Status
+    status: escalationStatusEnum('status').notNull().default('pending'),
+    // Resolution
+    resolvedBy: text('resolved_by'),
+    resolvedAt: timestamp('resolved_at', { withTimezone: true }),
+    resolutionNotes: text('resolution_notes'),
+    // SLA tracking
+    timeout: text('timeout').notNull(), // ISO 8601 duration
+    timeoutAt: timestamp('timeout_at', { withTimezone: true }).notNull(),
+    acknowledgedAt: timestamp('acknowledged_at', { withTimezone: true }),
+    slaBreached: boolean('sla_breached').default(false),
+    // Metadata
+    context: jsonb('context'),
+    metadata: jsonb('metadata'),
+    // Timestamps
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).defaultNow().notNull(),
+}, (table) => ({
+    tenantStatusIdx: index('escalations_tenant_status_idx').on(table.tenantId, table.status, table.createdAt),
+    intentIdx: index('escalations_intent_idx').on(table.intentId),
+    timeoutIdx: index('escalations_timeout_idx').on(table.timeoutAt),
+    // Performance index for processTimeouts() queries
+    timeoutStatusIdx: index('escalations_timeout_status_idx').on(table.status, table.timeoutAt),
+}));
+export const escalationRelations = relations(escalations, ({ one }) => ({
+    intent: one(intents, {
+        fields: [escalations.intentId],
+        references: [intents.id],
+    }),
+}));
+// =============================================================================
+// AUDIT RECORDS
+// =============================================================================
+export const auditSeverityEnum = pgEnum('audit_severity', ['info', 'warning', 'error', 'critical']);
+export const auditOutcomeEnum = pgEnum('audit_outcome', ['success', 'failure', 'partial']);
+export const auditRecords = pgTable('audit_records', {
+    id: uuid('id').defaultRandom().primaryKey(),
+    tenantId: text('tenant_id').notNull(),
+    // Event identification
+    eventType: text('event_type').notNull(),
+    eventCategory: text('event_category').notNull(),
+    severity: auditSeverityEnum('severity').notNull().default('info'),
+    // Actor
+    actorType: text('actor_type').notNull(),
+    actorId: text('actor_id').notNull(),
+    actorName: text('actor_name'),
+    actorIp: inet('actor_ip'),
+    // Target
+    targetType: text('target_type').notNull(),
+    targetId: text('target_id').notNull(),
+    targetName: text('target_name'),
+    // Context
+    requestId: text('request_id').notNull(),
+    traceId: text('trace_id'),
+    spanId: text('span_id'),
+    // Event details
+    action: text('action').notNull(),
+    outcome: auditOutcomeEnum('outcome').notNull(),
+    reason: text('reason'),
+    // Change tracking
+    beforeState: jsonb('before_state'),
+    afterState: jsonb('after_state'),
+    diffState: jsonb('diff_state'),
+    // Metadata
+    metadata: jsonb('metadata'),
+    tags: text('tags').array(),
+    // Chain integrity
+    sequenceNumber: bigint('sequence_number', { mode: 'number' }).notNull(),
+    previousHash: text('previous_hash'),
+    recordHash: text('record_hash').notNull(),
+    // Timestamps
+    eventTime: timestamp('event_time', { withTimezone: true }).defaultNow().notNull(),
+    recordedAt: timestamp('recorded_at', { withTimezone: true }).defaultNow().notNull(),
+    // Archive support for enterprise retention compliance
+    archived: boolean('archived').default(false).notNull(),
+    archivedAt: timestamp('archived_at', { withTimezone: true }),
+}, (table) => ({
+    tenantTimeIdx: index('audit_tenant_time_idx').on(table.tenantId, table.eventTime),
+    actorIdx: index('audit_actor_idx').on(table.actorId, table.eventTime),
+    targetIdx: index('audit_target_idx').on(table.targetType, table.targetId, table.eventTime),
+    eventTypeIdx: index('audit_event_type_idx').on(table.eventType, table.eventTime),
+    requestIdx: index('audit_request_idx').on(table.requestId),
+    // Index for efficient archive/cleanup queries
+    archivedIdx: index('audit_archived_idx').on(table.archived, table.eventTime),
+    // Performance index for distributed tracing queries
+    traceIdx: index('audit_records_trace_idx').on(table.traceId),
+}));
+// =============================================================================
+// POLICIES
+// =============================================================================
+export const policyStatusEnum = pgEnum('policy_status', ['draft', 'published', 'deprecated', 'archived']);
+export const policies = pgTable('policies', {
+    id: uuid('id').defaultRandom().primaryKey(),
+    tenantId: text('tenant_id').notNull(),
+    name: text('name').notNull(),
+    namespace: text('namespace').notNull().default('default'),
+    description: text('description'),
+    version: integer('version').notNull().default(1),
+    status: policyStatusEnum('status').notNull().default('draft'),
+    // Policy definition
+    definition: jsonb('definition').notNull(),
+    checksum: text('checksum').notNull(),
+    // Audit
+    createdBy: text('created_by'),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).defaultNow().notNull(),
+    publishedAt: timestamp('published_at', { withTimezone: true }),
+}, (table) => ({
+    tenantStatusIdx: index('policies_tenant_status_idx').on(table.tenantId, table.status),
+    namespaceIdx: index('policies_namespace_idx').on(table.namespace),
+    uniqueNameVersion: uniqueIndex('policies_tenant_name_version_unique').on(table.tenantId, table.namespace, table.name, table.version),
+}));
+export const policyVersions = pgTable('policy_versions', {
+    id: uuid('id').defaultRandom().primaryKey(),
+    policyId: uuid('policy_id')
+        .notNull()
+        .references(() => policies.id),
+    version: integer('version').notNull(),
+    definition: jsonb('definition').notNull(),
+    checksum: text('checksum').notNull(),
+    changeSummary: text('change_summary'),
+    createdBy: text('created_by'),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+}, (table) => ({
+    policyIdx: index('policy_versions_policy_idx').on(table.policyId),
+    uniqueVersion: uniqueIndex('policy_versions_unique').on(table.policyId, table.version),
+}));
+export const policyRelations = relations(policies, ({ many }) => ({
+    versions: many(policyVersions),
+}));
+export const policyVersionRelations = relations(policyVersions, ({ one }) => ({
+    policy: one(policies, {
+        fields: [policyVersions.policyId],
+        references: [policies.id],
+    }),
+}));
+// =============================================================================
+// TENANT MEMBERSHIPS (Security: Multi-tenant isolation)
+// =============================================================================
+export const tenantMembershipRoleEnum = pgEnum('tenant_membership_role', [
+    'owner',
+    'admin',
+    'member',
+    'readonly',
+]);
+export const tenantMemberships = pgTable('tenant_memberships', {
+    id: uuid('id').defaultRandom().primaryKey(),
+    userId: text('user_id').notNull(),
+    tenantId: text('tenant_id').notNull(),
+    role: tenantMembershipRoleEnum('role').notNull().default('member'),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).defaultNow().notNull(),
+}, (table) => ({
+    // Unique constraint: user can only have one membership per tenant
+    uniqueUserTenant: uniqueIndex('tenant_memberships_user_tenant_unique').on(table.userId, table.tenantId),
+    // Index for efficient user lookup (primary access pattern)
+    userIdx: index('tenant_memberships_user_idx').on(table.userId),
+    // Index for listing all members of a tenant
+    tenantIdx: index('tenant_memberships_tenant_idx').on(table.tenantId),
+}));
+// =============================================================================
+// GROUP MEMBERSHIPS - Authoritative source for user group membership
+// SECURITY: This table is the source of truth for group membership verification.
+//           JWT group claims MUST NOT be trusted - verify against this table.
+// =============================================================================
+export const groupMemberships = pgTable('group_memberships', {
+    id: uuid('id').defaultRandom().primaryKey(),
+    tenantId: text('tenant_id').notNull(),
+    userId: text('user_id').notNull(),
+    groupName: text('group_name').notNull(),
+    active: boolean('active').notNull().default(true),
+    // Audit fields
+    createdBy: text('created_by'),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).defaultNow().notNull(),
+    expiresAt: timestamp('expires_at', { withTimezone: true }),
+}, (table) => ({
+    tenantUserIdx: index('group_memberships_tenant_user_idx').on(table.tenantId, table.userId),
+    tenantGroupIdx: index('group_memberships_tenant_group_idx').on(table.tenantId, table.groupName),
+    uniqueMembership: uniqueIndex('group_memberships_unique').on(table.tenantId, table.userId, table.groupName),
+}));
+// =============================================================================
+// ESCALATION APPROVERS - Explicit approver assignments for escalations
+// SECURITY: Provides fine-grained authorization for who can approve escalations.
+//           This supplements group-based authorization with explicit assignments.
+// =============================================================================
+export const escalationApprovers = pgTable('escalation_approvers', {
+    id: uuid('id').defaultRandom().primaryKey(),
+    escalationId: uuid('escalation_id')
+        .notNull()
+        .references(() => escalations.id, { onDelete: 'cascade' }),
+    tenantId: text('tenant_id').notNull(),
+    userId: text('user_id').notNull(),
+    assignedBy: text('assigned_by').notNull(),
+    assignedAt: timestamp('assigned_at', { withTimezone: true }).defaultNow().notNull(),
+}, (table) => ({
+    escalationIdx: index('escalation_approvers_escalation_idx').on(table.escalationId),
+    tenantUserIdx: index('escalation_approvers_tenant_user_idx').on(table.tenantId, table.userId),
+    uniqueApprover: uniqueIndex('escalation_approvers_unique').on(table.escalationId, table.userId),
+}));
+export const escalationApproverRelations = relations(escalationApprovers, ({ one }) => ({
+    escalation: one(escalations, {
+        fields: [escalationApprovers.escalationId],
+        references: [escalations.id],
+    }),
+}));
+// =============================================================================
+// CONSENT MANAGEMENT (GDPR/SOC2 Compliance)
+// =============================================================================
+/**
+ * Consent types for data processing under GDPR/SOC2
+ */
+export const consentTypeEnum = pgEnum('consent_type', [
+    'data_processing',
+    'analytics',
+    'marketing',
+]);
+/**
+ * User consent records - tracks user consent for data processing
+ * Required for GDPR Article 7 compliance (Conditions for consent)
+ */
+export const userConsents = pgTable('user_consents', {
+    id: uuid('id').primaryKey().defaultRandom(),
+    userId: text('user_id').notNull(),
+    tenantId: text('tenant_id').notNull(),
+    consentType: text('consent_type').notNull(), // 'data_processing', 'analytics', 'marketing'
+    granted: boolean('granted').notNull(),
+    grantedAt: timestamp('granted_at', { withTimezone: true }),
+    revokedAt: timestamp('revoked_at', { withTimezone: true }),
+    version: text('version').notNull(), // consent policy version
+    ipAddress: text('ip_address'), // IPv4 or IPv6 (max 45 chars)
+    userAgent: text('user_agent'),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).defaultNow().notNull(),
+}, (table) => ({
+    // Efficient lookup by user and tenant
+    userTenantIdx: index('user_consents_user_tenant_idx').on(table.userId, table.tenantId),
+    // Efficient lookup for consent validation
+    userTenantTypeIdx: index('user_consents_user_tenant_type_idx').on(table.userId, table.tenantId, table.consentType),
+    // Audit trail queries by tenant
+    tenantCreatedIdx: index('user_consents_tenant_created_idx').on(table.tenantId, table.createdAt),
+    // Find active consents
+    grantedIdx: index('user_consents_granted_idx').on(table.granted, table.revokedAt),
+}));
+/**
+ * Consent policy versions - tracks policy documents and their versions
+ * Required for demonstrating what users agreed to at time of consent
+ */
+export const consentPolicies = pgTable('consent_policies', {
+    id: uuid('id').primaryKey().defaultRandom(),
+    tenantId: text('tenant_id').notNull(),
+    consentType: text('consent_type').notNull(),
+    version: text('version').notNull(),
+    content: text('content').notNull(), // policy text
+    effectiveFrom: timestamp('effective_from', { withTimezone: true }).notNull(),
+    effectiveTo: timestamp('effective_to', { withTimezone: true }),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+}, (table) => ({
+    // Lookup current policy for a tenant and consent type
+    tenantTypeVersionIdx: uniqueIndex('consent_policies_tenant_type_version_idx').on(table.tenantId, table.consentType, table.version),
+    // Find effective policies
+    effectiveIdx: index('consent_policies_effective_idx').on(table.tenantId, table.consentType, table.effectiveFrom, table.effectiveTo),
+}));
+// =============================================================================
+// AUDIT READS (SOC2 Compliance - Read Access Logging)
+// =============================================================================
+/**
+ * Tracks read access to resources for SOC2 compliance.
+ * Logs who accessed/viewed data, when, and from where.
+ */
+export const auditReads = pgTable('audit_reads', {
+    id: uuid('id').primaryKey().defaultRandom(),
+    tenantId: text('tenant_id').notNull(),
+    userId: text('user_id').notNull(),
+    action: text('action').notNull(), // 'intent.read', 'intent.read_list', etc.
+    resourceType: text('resource_type').notNull(), // 'intent', 'escalation', 'webhook', 'user_data'
+    resourceId: text('resource_id').notNull(),
+    metadata: jsonb('metadata'), // Additional context (query params, filters, etc.)
+    ipAddress: text('ip_address'), // IPv4 or IPv6 (max 45 chars)
+    userAgent: text('user_agent'),
+    timestamp: timestamp('timestamp', { withTimezone: true }).defaultNow().notNull(),
+}, (table) => ({
+    // Primary compliance query: find all access by a user
+    userIdx: index('audit_reads_user_idx').on(table.userId, table.timestamp),
+    // Tenant-scoped queries
+    tenantIdx: index('audit_reads_tenant_idx').on(table.tenantId, table.timestamp),
+    // Resource access history
+    resourceIdx: index('audit_reads_resource_idx').on(table.resourceType, table.resourceId, table.timestamp),
+    // Action filtering for compliance reports
+    actionIdx: index('audit_reads_action_idx').on(table.action, table.timestamp),
+    // Combined tenant + user for efficient filtered queries
+    tenantUserIdx: index('audit_reads_tenant_user_idx').on(table.tenantId, table.userId, table.timestamp),
+}));
+// =============================================================================
+// WEBHOOK DELIVERIES (Persistence for webhook delivery attempts)
+// =============================================================================
+/**
+ * Webhook delivery status enum
+ * - pending: Delivery created but not yet attempted
+ * - delivered: Successfully delivered to endpoint
+ * - failed: All retry attempts exhausted, delivery failed
+ * - retrying: Currently being retried
+ */
+export const webhookDeliveryStatusEnum = pgEnum('webhook_delivery_status', [
+    'pending',
+    'delivered',
+    'failed',
+    'retrying',
+]);
+/**
+ * Webhook deliveries table - Persistent record of webhook delivery attempts
+ *
+ * This table provides:
+ * - Audit trail for all webhook delivery attempts
+ * - Support for replay of failed deliveries
+ * - Tracking of delivery status, attempts, and errors
+ * - Full payload persistence for debugging and replay
+ */
+export const webhookDeliveries = pgTable('webhook_deliveries', {
+    id: uuid('id').primaryKey().defaultRandom(),
+    webhookId: uuid('webhook_id').notNull(),
+    tenantId: text('tenant_id').notNull(),
+    eventType: text('event_type').notNull(),
+    payload: jsonb('payload').notNull(),
+    status: webhookDeliveryStatusEnum('status').notNull().default('pending'),
+    attempts: integer('attempts').notNull().default(0),
+    lastAttemptAt: timestamp('last_attempt_at', { withTimezone: true }),
+    lastError: text('last_error'),
+    nextRetryAt: timestamp('next_retry_at', { withTimezone: true }),
+    deliveredAt: timestamp('delivered_at', { withTimezone: true }),
+    responseStatus: integer('response_status'),
+    responseBody: text('response_body'),
+    createdAt: timestamp('created_at', { withTimezone: true }).defaultNow().notNull(),
+}, (table) => ({
+    // Index for fetching delivery history by webhook
+    webhookIdx: index('webhook_deliveries_webhook_idx').on(table.webhookId, table.createdAt),
+    // Index for tenant-scoped queries
+    tenantIdx: index('webhook_deliveries_tenant_idx').on(table.tenantId, table.createdAt),
+    // Index for fetching pending retries (status + nextRetryAt)
+    pendingRetriesIdx: index('webhook_deliveries_pending_retries_idx').on(table.status, table.nextRetryAt),
+    // Index for fetching failed deliveries by tenant
+    failedDeliveriesIdx: index('webhook_deliveries_failed_idx').on(table.tenantId, table.status, table.createdAt),
+    // Composite index for webhook + status queries
+    webhookStatusIdx: index('webhook_deliveries_webhook_status_idx').on(table.webhookId, table.status),
+}));
+//# sourceMappingURL=schema.js.map

package/dist/intent/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/intent/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EACL,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,SAAS,EACT,OAAO,EACP,MAAM,EACN,OAAO,EACP,MAAM,EACN,WAAW,EACX,KAAK,EACL,IAAI,GACL,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,gFAAgF;AAChF,QAAQ;AACR,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC;AAE9E,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE;IACxC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IAC/D,aAAa,EAAE,KAAK,CAAC,gBAAgB,CAAC;IACtC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACnC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC;IAClC,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC;IAClC,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACvD,UAAU,EAAE;SACZ,OAAO,EAAE;IACZ,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACvD,UAAU,EAAE;SACZ,OAAO,EAAE;IACZ,mBAAmB;IACnB,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1D,uBAAuB;IACvB,kBAAkB,EAAE,IAAI,CAAC,qBAAqB,CAAC;CAChD,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,gBAAgB,EAAE,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CACtD,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,SAAS,CAChB;IACD,SAAS,EAAE,WAAW,CAAC,2BAA2B,CAAC,CAAC,EAAE,CACpD,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,UAAU,CACjB;IACD,oCAAoC;IACpC,YAAY,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACjE,qDAAqD;IACrD,eAAe,EAAE,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;CACrF,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE;IACnD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;SACxB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzD,UAAU,EAAE;SACZ,OAAO,EAAE;IACZ,oDAAoD;IACpD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;IAClB,0CAA0C;IAC1C,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;CACpC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,cAAc,EAAE,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAClD,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,UAAU,CACjB;CACF,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAC7D,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;SACxB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IACjC,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACvD,UAAU,EAAE;SACZ,OAAO,EAAE;CACb,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC;IAC1B,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC;CACrC,CAAC,CAAC,CAAC;AAEJ,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,mBAAmB,EAAE;IAC9D,SAAS;IACT,cAAc;IACd,UAAU;IACV,UAAU;IACV,SAAS;IACT,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,4BAA4B,EAAE;IAC/E,oBAAoB;IACpB,WAAW;IACX,kBAAkB;IAClB,eAAe;IACf,qBAAqB;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,EAAE;IAChD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;SACxB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IAErC,qBAAqB;IACrB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,cAAc,EAAE,4BAA4B,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;IAEzE,UAAU;IACV,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IAEjC,SAAS;IACT,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IAEnE,aAAa;IACb,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5D,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC;IAEzC,eAAe;IACf,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,oBAAoB;IACxD,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACpE,cAAc,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACpE,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAEnD,WAAW;IACX,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC;IACzB,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC;IAE3B,aAAa;IACb,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CAClF,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,eAAe,EAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CACxD,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,CAChB;IACD,SAAS,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC7D,UAAU,EAAE,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAChE,kDAAkD;IAClD,gBAAgB,EAAE,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;CAC5F,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE;QACnB,MAAM,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC9B,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KACzB,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAE3F,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE;IACnD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IAErC,uBAAuB;IACvB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;IAC/C,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAEjE,QAAQ;IACR,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IAEzB,SAAS;IACT,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAE/B,UAAU;IACV,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;IACzB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;IAEvB,gBAAgB;IAChB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAC9C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IAEtB,kBAAkB;IAClB,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC;IAClC,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC;IAChC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC;IAE9B,WAAW;IACX,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC;IAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE;IAE1B,kBAAkB;IAClB,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACvE,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;IACnC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IAEzC,aAAa;IACb,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IAEnF,sDAAsD;IACtD,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;IACtD,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;CAC7D,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,aAAa,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IACjF,QAAQ,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC;IACrE,SAAS,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1F,YAAY,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC;IAChF,UAAU,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC1D,8CAA8C;IAC9C,WAAW,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC5E,oDAAoD;IACpD,QAAQ,EAAE,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;CAC7D,CAAC,CAAC,CAAC;AAEJ,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1G,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,EAAE;IAC1C,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACzD,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAE7D,oBAAoB;IACpB,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IAEpC,QAAQ;IACR,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;CAC/D,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,eAAe,EAAE,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;IACrF,YAAY,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACjE,iBAAiB,EAAE,WAAW,CAAC,qCAAqC,CAAC,CAAC,EAAE,CACtE,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,OAAO,CACd;CACF,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,iBAAiB,EAAE;IACvD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;SACxB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACrC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACrC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CAClF,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,SAAS,EAAE,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IACjE,aAAa,EAAE,WAAW,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC;CACvF,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAChE,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC;CAC/B,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE;QACpB,MAAM,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;QACjC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;KAC1B,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,gFAAgF;AAChF,wDAAwD;AACxD,gFAAgF;AAEhF,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,wBAAwB,EAAE;IACvE,OAAO;IACP,OAAO;IACP,QAAQ;IACR,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAC7D,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,IAAI,EAAE,wBAAwB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAClE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CAClF,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,kEAAkE;IAClE,gBAAgB,EAAE,WAAW,CAAC,uCAAuC,CAAC,CAAC,EAAE,CACvE,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,QAAQ,CACf;IACD,2DAA2D;IAC3D,OAAO,EAAE,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC9D,4CAA4C;IAC5C,SAAS,EAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;CACrE,CAAC,CAAC,CAAC;AAEJ,gFAAgF;AAChF,qEAAqE;AACrE,iFAAiF;AACjF,8EAA8E;AAC9E,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,EAAE;IAC3D,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAEjD,eAAe;IACf,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;CAC3D,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,aAAa,EAAE,KAAK,CAAC,mCAAmC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;IAC1F,cAAc,EAAE,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC/F,gBAAgB,EAAE,WAAW,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAC1D,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,CAChB;CACF,CAAC,CAAC,CAAC;AAEJ,gFAAgF;AAChF,uEAAuE;AACvE,iFAAiF;AACjF,kFAAkF;AAClF,gFAAgF;AAEhF,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,EAAE;IACjE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;SAChC,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC5D,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CACpF,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,aAAa,EAAE,KAAK,CAAC,qCAAqC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IAClF,aAAa,EAAE,KAAK,CAAC,sCAAsC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;IAC7F,cAAc,EAAE,WAAW,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAC3D,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,MAAM,CACb;CACF,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAC,mBAAmB,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;QAC3B,MAAM,EAAE,CAAC,mBAAmB,CAAC,YAAY,CAAC;QAC1C,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;KAC7B,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,gFAAgF;AAChF,4CAA4C;AAC5C,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,cAAc,EAAE;IACpD,iBAAiB;IACjB,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE;IACnD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,EAAE,8CAA8C;IAC3F,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACrC,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1D,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1D,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,yBAAyB;IAC7D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,8BAA8B;IAC7D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CAClF,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,sCAAsC;IACtC,aAAa,EAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;IACtF,0CAA0C;IAC1C,iBAAiB,EAAE,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,CAC/D,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,WAAW,CAClB;IACD,gCAAgC;IAChC,gBAAgB,EAAE,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC/F,uBAAuB;IACvB,UAAU,EAAE,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC;CAClF,CAAC,CAAC,CAAC;AAEJ;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE;IACzD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAClC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,cAAc;IAClD,aAAa,EAAE,SAAS,CAAC,gBAAgB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5E,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9D,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CAClF,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,sDAAsD;IACtD,oBAAoB,EAAE,WAAW,CAAC,0CAA0C,CAAC,CAAC,EAAE,CAC9E,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,OAAO,CACd;IACD,0BAA0B;IAC1B,YAAY,EAAE,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CACtD,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,WAAW,CAClB;CACF,CAAC,CAAC,CAAC;AAEJ,gFAAgF;AAChF,sDAAsD;AACtD,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE;IAC/C,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,0CAA0C;IAC5E,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,EAAE,iDAAiD;IAChG,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,mDAAmD;IAChF,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,8BAA8B;IAC7D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CACjF,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,sDAAsD;IACtD,OAAO,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;IACxE,wBAAwB;IACxB,SAAS,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC9E,0BAA0B;IAC1B,WAAW,EAAE,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC;IACxG,0CAA0C;IAC1C,SAAS,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;IAC5E,wDAAwD;IACxD,aAAa,EAAE,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;CACtG,CAAC,CAAC,CAAC;AAEJ,gFAAgF;AAChF,iEAAiE;AACjE,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,yBAAyB,EAAE;IACzE,SAAS;IACT,WAAW;IACX,QAAQ;IACR,UAAU;CACX,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,EAAE;IAC7D,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACnC,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACxE,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,aAAa,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACnE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,WAAW,EAAE,SAAS,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC/D,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9D,cAAc,EAAE,OAAO,CAAC,iBAAiB,CAAC;IAC1C,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;IACnC,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;CAClF,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACb,iDAAiD;IACjD,UAAU,EAAE,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC;IACxF,kCAAkC;IAClC,SAAS,EAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IACrF,4DAA4D;IAC5D,iBAAiB,EAAE,KAAK,CAAC,wCAAwC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;IACtG,iDAAiD;IACjD,mBAAmB,EAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;IAC7G,+CAA+C;IAC/C,gBAAgB,EAAE,KAAK,CAAC,uCAAuC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;CACnG,CAAC,CAAC,CAAC"}

package/dist/intent/shutdown.d.ts

@@ -0,0 +1,145 @@
+/**
+ * Graceful Shutdown Module
+ *
+ * Provides graceful shutdown handling for the INTENT module to ensure
+ * in-flight requests are completed during deployment.
+ *
+ * Features:
+ * - Track active HTTP requests
+ * - Reject new requests during shutdown with 503 status
+ * - Wait for in-flight requests to complete (with timeout)
+ * - Coordinate BullMQ worker shutdown
+ * - Close database and Redis connections
+ * - Comprehensive shutdown metrics logging
+ *
+ * @packageDocumentation
+ */
+import type { FastifyInstance, FastifyRequest, FastifyReply } from 'fastify';
+/**
+ * Shutdown metrics collected during graceful shutdown
+ */
+export interface ShutdownMetrics {
+    /** Total shutdown duration in milliseconds */
+    totalDurationMs: number;
+    /** Time spent waiting for HTTP requests */
+    httpWaitDurationMs: number;
+    /** Time spent waiting for queue jobs */
+    jobWaitDurationMs: number;
+    /** Number of HTTP requests that were in-flight when shutdown started */
+    initialActiveRequests: number;
+    /** Number of HTTP requests that completed gracefully */
+    completedRequests: number;
+    /** Number of HTTP requests that were forcibly terminated */
+    forcedTerminatedRequests: number;
+    /** Number of queue jobs that were active when shutdown started */
+    initialActiveJobs: number;
+    /** Number of queue jobs that completed gracefully */
+    completedJobs: number;
+    /** Number of queue jobs that were abandoned */
+    abandonedJobs: number;
+    /** Whether the shutdown was forced due to timeout */
+    forcedShutdown: boolean;
+    /** Shutdown phases and their durations */
+    phases: {
+        name: string;
+        durationMs: number;
+        success: boolean;
+        error?: string;
+    }[];
+}
+/**
+ * Check if the server is currently shutting down
+ */
+export declare function isServerShuttingDown(): boolean;
+/**
+ * Get the current number of active requests
+ */
+export declare function getActiveRequestCount(): number;
+/**
+ * Get the last shutdown metrics (for monitoring/debugging)
+ */
+export declare function getLastShutdownMetrics(): ShutdownMetrics | null;
+/**
+ * Track a new request and return a cleanup function to call when complete.
+ * The cleanup function should be called in onResponse hook.
+ */
+export declare function trackRequest(): () => void;
+export interface GracefulShutdownOptions {
+    /** Maximum time to wait for requests to complete in milliseconds */
+    timeoutMs?: number;
+    /** Skip closing database connections (for testing) */
+    skipDatabase?: boolean;
+    /** Skip closing Redis connections (for testing) */
+    skipRedis?: boolean;
+    /** Skip worker shutdown (for testing) */
+    skipWorkers?: boolean;
+    /** Skip scheduler shutdown (for testing) */
+    skipScheduler?: boolean;
+}
+/**
+ * Enhanced graceful shutdown options with separate timeouts
+ */
+export interface EnhancedShutdownOptions {
+    /** Maximum time to wait for HTTP requests to complete (default: 10000ms) */
+    httpTimeoutMs: number;
+    /** Maximum time to wait for queue jobs to complete (default: 15000ms) */
+    jobTimeoutMs: number;
+    /** Force shutdown after this total time regardless of state (default: 30000ms) */
+    forceAfterMs: number;
+}
+/**
+ * Perform enhanced graceful shutdown of the server and all resources.
+ *
+ * Shutdown sequence:
+ * 1. Stop accepting new HTTP requests
+ * 2. Wait for in-flight HTTP requests to complete (with timeout)
+ * 3. Pause queue workers (stop accepting new jobs)
+ * 4. Wait for active jobs to complete (with timeout)
+ * 5. Shutdown workers and close queue connections
+ * 6. Flush audit system
+ * 7. Close database connections
+ * 8. Close Redis connections
+ * 9. Log shutdown metrics
+ *
+ * @param options - Shutdown options with separate timeouts for HTTP and job completion
+ */
+export declare function gracefulShutdown(options: EnhancedShutdownOptions): Promise<ShutdownMetrics>;
+export declare function gracefulShutdown(server: FastifyInstance, options?: GracefulShutdownOptions): Promise<void>;
+/**
+ * Register signal handlers for graceful shutdown.
+ *
+ * Handles:
+ * - SIGTERM: Kubernetes/Docker graceful termination
+ * - SIGINT: Ctrl+C in terminal
+ * - SIGQUIT: Extended timeout shutdown for debugging
+ */
+export declare function registerShutdownHandlers(server: FastifyInstance, options?: GracefulShutdownOptions): void;
+/**
+ * Register enhanced signal handlers with separate HTTP and job timeouts.
+ *
+ * This is the recommended way to register shutdown handlers for production.
+ *
+ * @param options - Default shutdown options
+ * @param extendedOptions - Options for SIGQUIT with extended timeouts
+ */
+export declare function registerEnhancedShutdownHandlers(options: EnhancedShutdownOptions, extendedOptions?: EnhancedShutdownOptions): void;
+/**
+ * Fastify hook to reject requests during shutdown.
+ * Add this to server.addHook('onRequest', ...)
+ *
+ * When the server is shutting down:
+ * - Returns 503 Service Unavailable
+ * - Includes Retry-After header (RFC 7231)
+ * - Provides structured error response
+ */
+export declare function shutdownRequestHook(request: FastifyRequest, reply: FastifyReply): Promise<void>;
+/**
+ * Fastify hook to clean up request tracking.
+ * Add this to server.addHook('onResponse', ...)
+ */
+export declare function shutdownResponseHook(request: FastifyRequest): Promise<void>;
+/**
+ * Reset shutdown state (for testing purposes only)
+ */
+export declare function resetShutdownState(): void;
+//# sourceMappingURL=shutdown.d.ts.map

package/dist/intent/shutdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown.d.ts","sourceRoot":"","sources":["../../src/intent/shutdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AA6B7E;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,eAAe,EAAE,MAAM,CAAC;IACxB,2CAA2C;IAC3C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,wCAAwC;IACxC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,wDAAwD;IACxD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,4DAA4D;IAC5D,wBAAwB,EAAE,MAAM,CAAC;IACjC,kEAAkE;IAClE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,aAAa,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,aAAa,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,cAAc,EAAE,OAAO,CAAC;IACxB,0CAA0C;IAC1C,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EAAE,CAAC;CACL;AAID;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,eAAe,GAAG,IAAI,CAE/D;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,IAAI,CAezC;AAkCD,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mDAAmD;IACnD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,yCAAyC;IACzC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4CAA4C;IAC5C,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,YAAY,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,eAAe,CAAC,CAAC;AAC5B,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,eAAe,EACvB,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,IAAI,CAAC,CAAC;AAqTjB;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,eAAe,EACvB,OAAO,CAAC,EAAE,uBAAuB,GAChC,IAAI,CAoBN;AAED;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,uBAAuB,EAChC,eAAe,CAAC,EAAE,uBAAuB,GACxC,IAAI,CAqCN;AAOD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAKjF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAMzC"}