@wildo-ai/saas-models 1.1.5 → 1.1.6

package/dist/esm/flows-actors/provider-call-records.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-call-records.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/provider-call-records.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAuB,MAAM,qCAAqC,CAAC;AAEhH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,2GAA2G;IAC3G,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAE/C;;;OAGG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAEvC,yGAAyG;IACzG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC1D,8GAA8G;IAC9G,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC;IACvE;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE;IACrE,yEAAyE;IACzE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE;IAClE,uGAAuG;IACvG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAE/C,uGAAuG;IACvG,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACjD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAChE,8EAA8E;IAC9E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,kFAAkF;IAClF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAE9C,4FAA4F;IAC5F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C;;;;OAIG;IACH,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAErC,wGAAwG;IACxG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEhC,kFAAkF;IAClF,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACpG,CAAC,CAAC;AAGH,6GAA6G;AAC7G,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAqB,EACrB,EAAE,aAAa,EAAE,UAAU,EAA+C;IAE1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC;IACnC,OAAO;QACL,aAAa;QACb,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,kBAAkB,CAAC,UAAU;QACjD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,QAAQ;QACR,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3I,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3H,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvI,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxH,GAAG,CAAC,OAAO,KAAK,EAAE,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,iCAAiC,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtD,oCAAoC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,mGAAmG;IACnG,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,kEAAkE;IAClE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,8EAA8E;IAC9E,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C;;;;;;;;OAQG;IACH,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,0EAA0E;IAC1E,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAChC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC,CAAC;CACJ,CAAC,CAAC","sourcesContent":["/**\n * One row per PHYSICAL call to a model provider: which provider, which model, what kind of call, how\n * it ended and what it consumed. The queryable record that `evidence-requirement:outbound-call-record`\n * C2 demands (\"every physical provider call is recorded — provider, model, usage and outcome\").\n *\n * ## Why a store, when every call already emits a trace\n *\n * The engine emits an {@link AgentCallTrace} per call, and until this existed every destination of it\n * was TELEMETRY: the application log, an LLM-analytics vendor, an observability forwarder, the dev\n * companion's files. None is a store the product owns, so none can be queried for a window, and each\n * one's lifetime was set by log rotation or a vendor rather than by an evidence-retention decision.\n * The trace is also emitted only when an observability provider is active: at the default traceability\n * level `NONE` nothing is emitted at all. Evidence cannot depend on an observability setting, so this\n * record is written by its own seam, on every call, whatever the traceability level.\n *\n * ## Metadata only, by construction\n *\n * The trace carries the prompt (`input`), the completion (`output`) and the error MESSAGE, and any of\n * them can hold a person's content: a prompt is user text, and a provider error routinely echoes the\n * request back. None of them is copied. {@link projectProviderCallRecord} is the only producer, and it\n * reads a closed list of fields, so a field added to the trace later cannot reach this table by\n * accident. What stays is what the clause asks for plus what makes a row interpretable (duration,\n * finish reason, error class).\n *\n * Holding no content is also what makes this row NOT personal data: it describes a call the\n * application made, with no subject in it. That is why no field carries `dataCategories`, and why it\n * is not attributed to a user or a tenant. Per-tenant attribution would be useful for cost and is\n * deliberately left out until something reads it: an organization id here would make every row a\n * statement about a customer, with the retention and erasure obligations that follow.\n *\n * ## Retention\n *\n * Every row carries its own absolute expiry, {@link PROVIDER_CALL_RECORD_RETENTION_MS} after the call,\n * enforced by the framework's `.ttl()` mechanism: a TTL index on MongoDB and the bounded\n * `resource-retention-sweep` batch on PostgreSQL. Absolute rather than a window measured from a field,\n * so a later per-application retention choice changes what is WRITTEN and never needs a schema change,\n * the shape the scheduled-evidence records already use.\n */\nimport { z } from 'zod';\n\nimport { AgentCallOutcome, AgentCallTraceKind, type AgentCallTrace } from './agent-traceability.shared.schemas';\n\n/**\n * How long a provider-call record is kept: 400 days.\n *\n * The period this repository already keeps retained evidence for (scheduled-run evidence), chosen so\n * that one year of calls is always citable with a margin for the review that reads it. It belongs to\n * the `AUDIT_LOGS` retention class in spirit: the record an operator needs to show what the application\n * sent to whom, kept longer than operational logs for that reason.\n */\nexport const PROVIDER_CALL_RECORD_RETENTION_MS = 400 * 24 * 60 * 60 * 1000;\n\nexport const ProviderCallRecordSchema = z.object({\n  /** Document id. `.isPrimaryKey()` is what makes the PostgreSQL planner emit the PRIMARY KEY constraint. */\n  _id: z.string().isPrimaryKey().isSummaryField(),\n\n  /**\n   * The application RECORD id, the APPLICATION scope's key. Stamped from the canonical identity by the\n   * recorder, never taken from the call, for the reason `JobExecution.applicationId` gives.\n   */\n  applicationId: z.string().isDBIndexed(),\n\n  /** The agent the call served (`agentRef`), or the service's own label for an embedding or extraction. */\n  agentRef: z.string().min(1).isDBIndexed().isSummaryField(),\n  /** GENERATION or EMBEDDING. The two consume tokens differently, so usage is only comparable within a kind. */\n  kind: z.enum(AgentCallTraceKind).default(AgentCallTraceKind.GENERATION),\n  /**\n   * The provider the call went to (`anthropic`, `openai`, ...). Optional because the trace allows its\n   * absence, and a call must still be recorded when the trace could not name its provider: the gap is\n   * then COUNTED by the evidence door rather than hidden by a dropped row.\n   */\n  provider: z.string().min(1).isDBIndexed().isSummaryField().optional(),\n  /** The resolved model id. Optional for the same reason as `provider`. */\n  model: z.string().min(1).isDBIndexed().isSummaryField().optional(),\n  /** 1-based attempt index when the caller drives a retry loop; each physical attempt is its own row. */\n  attempt: z.number().int().positive().optional(),\n\n  /** When the call was initiated, as the engine recorded it. The window the evidence door filters on. */\n  calledAt: z.date().isDBIndexed().isSummaryField(),\n  outcome: z.enum(AgentCallOutcome).isDBIndexed().isSummaryField(),\n  /** The provider's finish reason, when it gave one (`stop`, `length`, ...). */\n  finishReason: z.string().optional(),\n  /** Wall-clock duration of the call in milliseconds, as the engine measured it. */\n  durationMs: z.number().int().min(0).optional(),\n\n  /** Token usage, flat so the aggregation surface can sum each dimension on both adapters. */\n  promptTokens: z.number().int().min(0).optional(),\n  completionTokens: z.number().int().min(0).optional(),\n  totalTokens: z.number().int().min(0).optional(),\n  /**\n   * Whether the provider reported every usage dimension this kind of call has. Absent means the\n   * provider said nothing about completeness, which the evidence door reports as such rather than as\n   * complete.\n   */\n  usageComplete: z.boolean().optional(),\n\n  /** On a failed call: the error's class and code only. The message is NOT kept (see the file header). */\n  errorName: z.string().optional(),\n  errorCode: z.string().optional(),\n\n  /** Absolute expiry: `calledAt` plus {@link PROVIDER_CALL_RECORD_RETENTION_MS}. */\n  expiresAt: z.date().ttl({ expireAfterSeconds: 0 }),\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n});\nexport type ProviderCallRecord = z.infer<typeof ProviderCallRecordSchema>;\n\n/** Round a token or duration count into the integer the schema stores, or drop it when it is not a count. */\nfunction nonNegativeInteger(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) && value >= 0 ? Math.round(value) : undefined;\n}\n\n/**\n * The ONLY way a provider-call record is built: a closed projection of an {@link AgentCallTrace}.\n *\n * Closed on purpose. It names every field it copies, so the prompt, the completion and the error\n * message cannot reach the table through a field someone adds to the trace later. `calledAt` falls\n * back to `recordedAt` only when the trace's own timestamp does not parse, so a malformed timestamp\n * costs precision rather than the record.\n */\nexport function projectProviderCallRecord(\n  trace: AgentCallTrace,\n  { applicationId, recordedAt }: { applicationId: string; recordedAt: Date },\n): Omit<ProviderCallRecord, '_id' | 'createdAt'> {\n  const parsed = Date.parse(trace.callTimestamp);\n  const calledAt = Number.isFinite(parsed) ? new Date(parsed) : recordedAt;\n  const usage = trace.context?.usage;\n  return {\n    applicationId,\n    agentRef: trace.agentRef,\n    kind: trace.kind ?? AgentCallTraceKind.GENERATION,\n    ...(trace.provider ? { provider: trace.provider } : {}),\n    ...(trace.model ? { model: trace.model } : {}),\n    ...(trace.attempt !== undefined ? { attempt: trace.attempt } : {}),\n    calledAt,\n    outcome: trace.outcome,\n    ...(trace.context?.finishReason ? { finishReason: String(trace.context.finishReason) } : {}),\n    ...(nonNegativeInteger(trace.context?.executionTime) !== undefined ? { durationMs: nonNegativeInteger(trace.context?.executionTime) } : {}),\n    ...(nonNegativeInteger(usage?.promptTokens) !== undefined ? { promptTokens: nonNegativeInteger(usage?.promptTokens) } : {}),\n    ...(nonNegativeInteger(usage?.completionTokens) !== undefined ? { completionTokens: nonNegativeInteger(usage?.completionTokens) } : {}),\n    ...(nonNegativeInteger(usage?.totalTokens) !== undefined ? { totalTokens: nonNegativeInteger(usage?.totalTokens) } : {}),\n    ...(typeof usage?.tokenUsageComplete === 'boolean' ? { usageComplete: usage.tokenUsageComplete } : {}),\n    ...(trace.error?.name ? { errorName: trace.error.name } : {}),\n    ...(trace.error?.code ? { errorCode: trace.error.code } : {}),\n    expiresAt: new Date(calledAt.getTime() + PROVIDER_CALL_RECORD_RETENTION_MS),\n  };\n}\n\n/**\n * # Provider calls, summarized for an evidence reader\n *\n * assurance-control: WILDO.INTEGRATION.OUTBOUND_ACTIVITY_AUDIT — what the application sent to which\n * vendor is answerable for any window, without handing over a row.\n *\n * What `GET /assurance/provider-call-evidence` returns: COUNTS over a closed window, computed where the\n * rows live. Counts rather than rows because the question (\"was every call recorded with provider,\n * model, usage and outcome?\") is a statement about the population, and because a row names an agent\n * and a timestamp that an evidence reader has no need to hold.\n *\n * The completeness counts are what make a gap visible: a call recorded with no provider, or a provider\n * that reported no usage, is counted apart rather than folded into the total, so \"every call was\n * recorded\" and \"every recorded call is complete\" are two separate answers.\n */\nexport const ProviderCallEvidenceSchema = z.object({\n  window: z.object({ from: z.string(), to: z.string() }),\n  /** Calls recorded in the window. */\n  totalCalls: z.number().int().min(0),\n  failedCalls: z.number().int().min(0),\n  /** Calls whose record names no provider, or no model: a trace that could not say where it went. */\n  callsWithoutProvider: z.number().int().min(0),\n  callsWithoutModel: z.number().int().min(0),\n  /** Calls for which the provider reported a token count at all. */\n  callsReportingTokens: z.number().int().min(0),\n  /** Calls whose usage the provider reported complete for that kind of call. */\n  callsWithCompleteUsage: z.number().int().min(0),\n  /**\n   * Every provider some engine capability declares on this backend, the answer to \"does any capability\n   * select the provider a call went to?\". A call to a provider outside it is an undeclared egress, which\n   * is `outbound-call-record` C2's MAJOR. Read from the running backend's own provider registry rather\n   * than from committed configuration, because the registry is what a call actually resolved against.\n   *\n   * `null` when the registry could not answer (not yet initialized). Never an empty list in that case:\n   * an empty list would read as \"no provider is declared\", and every call would look undeclared.\n   */\n  declaredProviderRefs: z.array(z.string()).nullable(),\n  /** One entry per provider, model, kind and outcome seen in the window. */\n  byProviderModel: z.array(z.object({\n    provider: z.string().nullable(),\n    model: z.string().nullable(),\n    kind: z.enum(AgentCallTraceKind),\n    outcome: z.enum(AgentCallOutcome),\n    calls: z.number().int().min(0),\n    promptTokens: z.number().min(0),\n    completionTokens: z.number().min(0),\n    totalTokens: z.number().min(0),\n  })),\n});\nexport type ProviderCallEvidence = z.infer<typeof ProviderCallEvidenceSchema>;\n"]}
+{"version":3,"file":"provider-call-records.shared.schemas.js","sourceRoot":"","sources":["../../../../src/flows-actors/provider-call-records.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAuB,MAAM,qCAAqC,CAAC;AAEhH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,2GAA2G;IAC3G,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,cAAc,EAAE;IAE/C;;;OAGG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAEvC,yGAAyG;IACzG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAC1D,8GAA8G;IAC9G,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC;IACvE;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE;IACrE,yEAAyE;IACzE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE;IAClE,uGAAuG;IACvG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAE/C,uGAAuG;IACvG,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IACjD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE;IAChE,8EAA8E;IAC9E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,kFAAkF;IAClF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAE9C,4FAA4F;IAC5F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C;;;;OAIG;IACH,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC;;;;OAIG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEnD,wGAAwG;IACxG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEhC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE;CACpG,CAAC,CAAC;AAGH,6GAA6G;AAC7G,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAqB,EACrB,EAAE,aAAa,EAAE,UAAU,EAA+C;IAE1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC;IACnC,OAAO;QACL,aAAa;QACb,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,kBAAkB,CAAC,UAAU;QACjD,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,QAAQ;QACR,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3I,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3H,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvI,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxH,GAAG,CAAC,OAAO,KAAK,EAAE,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpK,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,EAAE,eAAe,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1K,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7K,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7J,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,eAAe,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5K,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtD,oCAAoC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,mGAAmG;IACnG,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,kEAAkE;IAClE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,8EAA8E;IAC9E,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C;;;;;;;;OAQG;IACH,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,0EAA0E;IAC1E,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAChC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,wGAAwG;QACxG,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,kGAAkG;QAClG,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACjD,CAAC,CAAC;CACJ,CAAC,CAAC","sourcesContent":["/**\n * One row per PHYSICAL call to a model provider: which provider, which model, what kind of call, how\n * it ended and what it consumed. The queryable record that `evidence-requirement:outbound-call-record`\n * C2 demands (\"every physical provider call is recorded — provider, model, usage and outcome\").\n *\n * ## Why a store, when every call already emits a trace\n *\n * The engine emits an {@link AgentCallTrace} per call, and until this existed every destination of it\n * was TELEMETRY: the application log, an LLM-analytics vendor, an observability forwarder, the dev\n * companion's files. None is a store the product owns, so none can be queried for a window, and each\n * one's lifetime was set by log rotation or a vendor rather than by an evidence-retention decision.\n * The trace is also emitted only when an observability provider is active: at the default traceability\n * level `NONE` nothing is emitted at all. Evidence cannot depend on an observability setting, so this\n * record is written by its own seam, on every call, whatever the traceability level.\n *\n * ## Metadata only, by construction\n *\n * The trace carries the prompt (`input`), the completion (`output`) and the error MESSAGE, and any of\n * them can hold a person's content: a prompt is user text, and a provider error routinely echoes the\n * request back. None of them is copied. {@link projectProviderCallRecord} is the only producer, and it\n * reads a closed list of fields, so a field added to the trace later cannot reach this table by\n * accident. What stays is what the clause asks for plus what makes a row interpretable (duration,\n * finish reason, error class).\n *\n * Holding no content is also what makes this row NOT personal data: it describes a call the\n * application made, with no subject in it. That is why no field carries `dataCategories`, and why it\n * is not attributed to a user or a tenant. Per-tenant attribution would be useful for cost and is\n * deliberately left out until something reads it: an organization id here would make every row a\n * statement about a customer, with the retention and erasure obligations that follow.\n *\n * ## Retention\n *\n * Kept for the application's declared `OPERATIONAL_LOGS` period, counted from the call's `createdAt`:\n * the resource binds that class (`retentionBinding`), and the retention-class sweep deletes expired rows\n * on both adapters (#1613). It used to carry its own 400-day `expiresAt` + `.ttl()`, a period no\n * operator declared and that could drift from the one the privacy notice states.\n */\nimport { z } from 'zod';\n\nimport { AgentCallOutcome, AgentCallTraceKind, type AgentCallTrace } from './agent-traceability.shared.schemas';\n\nexport const ProviderCallRecordSchema = z.object({\n  /** Document id. `.isPrimaryKey()` is what makes the PostgreSQL planner emit the PRIMARY KEY constraint. */\n  _id: z.string().isPrimaryKey().isSummaryField(),\n\n  /**\n   * The application RECORD id, the APPLICATION scope's key. Stamped from the canonical identity by the\n   * recorder, never taken from the call, for the reason `JobExecution.applicationId` gives.\n   */\n  applicationId: z.string().isDBIndexed(),\n\n  /** The agent the call served (`agentRef`), or the service's own label for an embedding or extraction. */\n  agentRef: z.string().min(1).isDBIndexed().isSummaryField(),\n  /** GENERATION or EMBEDDING. The two consume tokens differently, so usage is only comparable within a kind. */\n  kind: z.enum(AgentCallTraceKind).default(AgentCallTraceKind.GENERATION),\n  /**\n   * The provider the call went to (`anthropic`, `openai`, ...). Optional because the trace allows its\n   * absence, and a call must still be recorded when the trace could not name its provider: the gap is\n   * then COUNTED by the evidence door rather than hidden by a dropped row.\n   */\n  provider: z.string().min(1).isDBIndexed().isSummaryField().optional(),\n  /** The resolved model id. Optional for the same reason as `provider`. */\n  model: z.string().min(1).isDBIndexed().isSummaryField().optional(),\n  /** 1-based attempt index when the caller drives a retry loop; each physical attempt is its own row. */\n  attempt: z.number().int().positive().optional(),\n\n  /** When the call was initiated, as the engine recorded it. The window the evidence door filters on. */\n  calledAt: z.date().isDBIndexed().isSummaryField(),\n  outcome: z.enum(AgentCallOutcome).isDBIndexed().isSummaryField(),\n  /** The provider's finish reason, when it gave one (`stop`, `length`, ...). */\n  finishReason: z.string().optional(),\n  /** Wall-clock duration of the call in milliseconds, as the engine measured it. */\n  durationMs: z.number().int().min(0).optional(),\n\n  /** Token usage, flat so the aggregation surface can sum each dimension on both adapters. */\n  promptTokens: z.number().int().min(0).optional(),\n  completionTokens: z.number().int().min(0).optional(),\n  totalTokens: z.number().int().min(0).optional(),\n  /**\n   * Whether the provider reported every usage dimension this kind of call has. Absent means the\n   * provider said nothing about completeness, which the evidence door reports as such rather than as\n   * complete.\n   */\n  usageComplete: z.boolean().optional(),\n  /**\n   * The input split the provider reported (#1598): tokens read without cache, read from a prompt cache,\n   * and written into one. Each is a part of `promptTokens`. Absent when the provider reported no split,\n   * which the cost calculator then prices as uncached input.\n   */\n  noCacheTokens: z.number().int().min(0).optional(),\n  cacheReadTokens: z.number().int().min(0).optional(),\n  cacheWriteTokens: z.number().int().min(0).optional(),\n  /**\n   * The output split the provider reported (#1598): visible text and reasoning. Each is a part of\n   * `completionTokens`, never in addition to it. Absent `reasoningTokens` means the provider did not report\n   * the split (Anthropic and Mistral do not), which is not zero reasoning.\n   */\n  textTokens: z.number().int().min(0).optional(),\n  reasoningTokens: z.number().int().min(0).optional(),\n\n  /** On a failed call: the error's class and code only. The message is NOT kept (see the file header). */\n  errorName: z.string().optional(),\n  errorCode: z.string().optional(),\n\n  createdAt: z.date().default(() => new Date()).isDBIndexed().excludeFromCreate().excludeFromUpdate(),\n});\nexport type ProviderCallRecord = z.infer<typeof ProviderCallRecordSchema>;\n\n/** Round a token or duration count into the integer the schema stores, or drop it when it is not a count. */\nfunction nonNegativeInteger(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) && value >= 0 ? Math.round(value) : undefined;\n}\n\n/**\n * The ONLY way a provider-call record is built: a closed projection of an {@link AgentCallTrace}.\n *\n * Closed on purpose. It names every field it copies, so the prompt, the completion and the error\n * message cannot reach the table through a field someone adds to the trace later. `calledAt` falls\n * back to `recordedAt` only when the trace's own timestamp does not parse, so a malformed timestamp\n * costs precision rather than the record.\n */\nexport function projectProviderCallRecord(\n  trace: AgentCallTrace,\n  { applicationId, recordedAt }: { applicationId: string; recordedAt: Date },\n): Omit<ProviderCallRecord, '_id' | 'createdAt'> {\n  const parsed = Date.parse(trace.callTimestamp);\n  const calledAt = Number.isFinite(parsed) ? new Date(parsed) : recordedAt;\n  const usage = trace.context?.usage;\n  return {\n    applicationId,\n    agentRef: trace.agentRef,\n    kind: trace.kind ?? AgentCallTraceKind.GENERATION,\n    ...(trace.provider ? { provider: trace.provider } : {}),\n    ...(trace.model ? { model: trace.model } : {}),\n    ...(trace.attempt !== undefined ? { attempt: trace.attempt } : {}),\n    calledAt,\n    outcome: trace.outcome,\n    ...(trace.context?.finishReason ? { finishReason: String(trace.context.finishReason) } : {}),\n    ...(nonNegativeInteger(trace.context?.executionTime) !== undefined ? { durationMs: nonNegativeInteger(trace.context?.executionTime) } : {}),\n    ...(nonNegativeInteger(usage?.promptTokens) !== undefined ? { promptTokens: nonNegativeInteger(usage?.promptTokens) } : {}),\n    ...(nonNegativeInteger(usage?.completionTokens) !== undefined ? { completionTokens: nonNegativeInteger(usage?.completionTokens) } : {}),\n    ...(nonNegativeInteger(usage?.totalTokens) !== undefined ? { totalTokens: nonNegativeInteger(usage?.totalTokens) } : {}),\n    ...(typeof usage?.tokenUsageComplete === 'boolean' ? { usageComplete: usage.tokenUsageComplete } : {}),\n    ...(nonNegativeInteger(usage?.inputTokenDetails?.noCacheTokens) !== undefined ? { noCacheTokens: nonNegativeInteger(usage?.inputTokenDetails?.noCacheTokens) } : {}),\n    ...(nonNegativeInteger(usage?.inputTokenDetails?.cacheReadTokens) !== undefined ? { cacheReadTokens: nonNegativeInteger(usage?.inputTokenDetails?.cacheReadTokens) } : {}),\n    ...(nonNegativeInteger(usage?.inputTokenDetails?.cacheWriteTokens) !== undefined ? { cacheWriteTokens: nonNegativeInteger(usage?.inputTokenDetails?.cacheWriteTokens) } : {}),\n    ...(nonNegativeInteger(usage?.outputTokenDetails?.textTokens) !== undefined ? { textTokens: nonNegativeInteger(usage?.outputTokenDetails?.textTokens) } : {}),\n    ...(nonNegativeInteger(usage?.outputTokenDetails?.reasoningTokens) !== undefined ? { reasoningTokens: nonNegativeInteger(usage?.outputTokenDetails?.reasoningTokens) } : {}),\n    ...(trace.error?.name ? { errorName: trace.error.name } : {}),\n    ...(trace.error?.code ? { errorCode: trace.error.code } : {}),\n  };\n}\n\n/**\n * # Provider calls, summarized for an evidence reader\n *\n * assurance-control: WILDO.INTEGRATION.OUTBOUND_ACTIVITY_AUDIT — what the application sent to which\n * vendor is answerable for any window, without handing over a row.\n *\n * What `GET /assurance/provider-call-evidence` returns: COUNTS over a closed window, computed where the\n * rows live. Counts rather than rows because the question (\"was every call recorded with provider,\n * model, usage and outcome?\") is a statement about the population, and because a row names an agent\n * and a timestamp that an evidence reader has no need to hold.\n *\n * The completeness counts are what make a gap visible: a call recorded with no provider, or a provider\n * that reported no usage, is counted apart rather than folded into the total, so \"every call was\n * recorded\" and \"every recorded call is complete\" are two separate answers.\n */\nexport const ProviderCallEvidenceSchema = z.object({\n  window: z.object({ from: z.string(), to: z.string() }),\n  /** Calls recorded in the window. */\n  totalCalls: z.number().int().min(0),\n  failedCalls: z.number().int().min(0),\n  /** Calls whose record names no provider, or no model: a trace that could not say where it went. */\n  callsWithoutProvider: z.number().int().min(0),\n  callsWithoutModel: z.number().int().min(0),\n  /** Calls for which the provider reported a token count at all. */\n  callsReportingTokens: z.number().int().min(0),\n  /** Calls whose usage the provider reported complete for that kind of call. */\n  callsWithCompleteUsage: z.number().int().min(0),\n  /**\n   * Every provider some engine capability declares on this backend, the answer to \"does any capability\n   * select the provider a call went to?\". A call to a provider outside it is an undeclared egress, which\n   * is `outbound-call-record` C2's MAJOR. Read from the running backend's own provider registry rather\n   * than from committed configuration, because the registry is what a call actually resolved against.\n   *\n   * `null` when the registry could not answer (not yet initialized). Never an empty list in that case:\n   * an empty list would read as \"no provider is declared\", and every call would look undeclared.\n   */\n  declaredProviderRefs: z.array(z.string()).nullable(),\n  /** One entry per provider, model, kind and outcome seen in the window. */\n  byProviderModel: z.array(z.object({\n    provider: z.string().nullable(),\n    model: z.string().nullable(),\n    kind: z.enum(AgentCallTraceKind),\n    outcome: z.enum(AgentCallOutcome),\n    calls: z.number().int().min(0),\n    promptTokens: z.number().min(0),\n    completionTokens: z.number().min(0),\n    totalTokens: z.number().min(0),\n    /** Sums of the reported input and output splits (#1598). A call that reported no split adds nothing. */\n    cacheReadTokens: z.number().min(0),\n    cacheWriteTokens: z.number().min(0),\n    reasoningTokens: z.number().min(0),\n    /** Calls in this group whose provider reported the reasoning split, so a zero sum is readable. */\n    callsReportingReasoning: z.number().int().min(0),\n  })),\n});\nexport type ProviderCallEvidence = z.infer<typeof ProviderCallEvidenceSchema>;\n"]}

package/dist/esm/flows-actors/review-deadlines.shared.schemas.d.ts

@@ -0,0 +1,268 @@
+/**
+ * #1628 — deadlines, reminders and escalation for pending human decisions: the declaration a gate carries,
+ * the application's business calendar, and the pure arithmetic both planes arm and advance clocks with.
+ *
+ * Nothing here reads a store or a clock. Every function takes the instants it reasons about, which is what
+ * lets the sweep, the pause/resume doors and the tests share one definition of "when is this due".
+ *
+ * ## The model (researched 2026-09-25; the sources are on #1628)
+ *
+ * - Two SERVICE-TARGET clocks — CLAIM and DECISION — separate from the LAPSE, the hard stop. Missing a target
+ *   fires actions and changes nothing else (WS-HumanTask 1.1 §4.9: "The state of the task is not changed").
+ *   spec-cite: OASIS WS-HumanTask 1.1 (cs-01) §4.9 "Elements for Handling Timeouts and Escalations", fetched 2026-09-27 from https://docs.oasis-open.org/bpel4people/ws-humantask-1.1-spec-cs-01.html
+ * - Durations are ISO-8601 durations (`PT12H`, `P2D`), the form BPMN 2.0.2 timer events and Camunda use.
+ *   Years and months are refused: their length depends on the calendar date, so they are not durations.
+ * - A target counts ELAPSED time by default, or only the working hours of the application's calendar.
+ *   The lapse always counts ELAPSED time: it bounds how long a turn stays open, and a calendar lapse would
+ *   let one stay open for a week of holidays.
+ */
+import { z } from 'zod';
+import { ReviewClockBasis, ReviewDeadlineKind, ReviewDeadlineOutcome, ReviewDeadlineStage, ReviewEscalationActionKind, HumanDecision_Outcome, HumanDecision_RouteKind } from './human-decision.shared.schemas';
+/** The duration in milliseconds, or `undefined` when `value` is not a positive ISO-8601 duration this model admits. */
+export declare function parseReviewDurationMs(value: string): number | undefined;
+/** An ISO-8601 duration such as `PT12H` or `P2D`. */
+export declare const ReviewDurationSchema: z.ZodString;
+/** A day of the week, as the business calendar names working days. */
+export declare enum CalendarWeekday {
+    MONDAY = "monday",
+    TUESDAY = "tuesday",
+    WEDNESDAY = "wednesday",
+    THURSDAY = "thursday",
+    FRIDAY = "friday",
+    SATURDAY = "saturday",
+    SUNDAY = "sunday"
+}
+/** @wildo_source:part:start saas.models.flows-actors.review-calendar facet:layer:shared facet:family:flows-actors facet:audience:app-developer */
+/**
+ * The application's business calendar (#1628): when reviewers are expected to be working. Declared ONCE by
+ * the application, in its backend configuration as `reviewCalendar`, and read by every gate whose CLAIM or
+ * DECISION clock asks for the `CALENDAR` basis.
+ *
+ * - `timeZone` is an IANA zone (`Europe/Paris`). Working hours and holidays are read in it, so a deadline
+ *   stays right across a daylight-saving change.
+ * - `workingHours` is one window per working day, `start` before `end`; a window crossing midnight is refused.
+ * - `holidays` are local dates (`2026-12-25`) on which no working time counts, whatever the weekday.
+ *
+ * A decision submitted on Friday evening with a `PT8H` CALENDAR target is due at the end of Monday's
+ * working day, not on Saturday morning. The lapse is never counted on this calendar.
+ *
+ * One calendar per application, not per tenant: a second calendar would be a second source for the same
+ * fact, and nothing asks for one yet. The shape allows a per-tenant calendar later without a reshape.
+ */
+export declare const ReviewCalendarSchema: z.ZodObject<{
+    timeZone: z.ZodString;
+    workingDays: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof CalendarWeekday>>>;
+    workingHours: z.ZodDefault<z.ZodObject<{
+        start: z.ZodString;
+        end: z.ZodString;
+    }, z.core.$strip>>;
+    holidays: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type ReviewCalendar = z.infer<typeof ReviewCalendarSchema>;
+/** @wildo_source:part:end saas.models.flows-actors.review-calendar */
+/** A calendar that cannot answer — refused at startup when declared, so reaching this at run time is a defect. */
+export declare class ReviewCalendarError extends Error {
+}
+/**
+ * `start` moved by `durationMs` of WORKING time on `calendar` — forward for a positive duration, backward
+ * for a negative one (a warning `warnBefore` a CALENDAR deadline). A zero duration answers `start`.
+ *
+ * Forward from outside working hours, the first working minute is where counting begins: a `PT1H` target
+ * raised on Saturday is due one hour into Monday's window.
+ */
+export declare function addBusinessDuration(start: Date, durationMs: number, calendar: ReviewCalendar): Date;
+/** How much WORKING time on `calendar` lies between `from` and `to`; zero when `to` is not after `from`. */
+export declare function businessDurationBetween(from: Date, to: Date, calendar: ReviewCalendar): number;
+/** `start` moved by `durationMs` on the given clock basis. CALENDAR without a calendar is refused. */
+export declare function shiftOnReviewClock(start: Date, durationMs: number, basis: ReviewClockBasis, calendar: ReviewCalendar | undefined): Date;
+/** @wildo_source:part:start saas.models.flows-actors.review-deadlines-declaration facet:layer:shared facet:family:flows-actors facet:audience:app-developer */
+/** The CLAIM target every gate gets when it declares none: half of its lapse window. */
+export declare const DEFAULT_REVIEW_CLAIM_FRACTION_OF_LAPSE = 0.5;
+/** The DECISION target every gate gets when it declares none: three quarters of its lapse window. */
+export declare const DEFAULT_REVIEW_DECISION_FRACTION_OF_LAPSE = 0.75;
+/**
+ * When a service-target deadline falls: a duration after the decision was requested (`'PT4H'`), or a
+ * fraction of the gate's lapse window (`{ fractionOfLapse: 0.5 }`), counted on the target's clock basis.
+ */
+export declare const ReviewDeadlineAtSchema: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+    fractionOfLapse: z.ZodNumber;
+}, z.core.$strip>]>;
+export type ReviewDeadlineAt = z.infer<typeof ReviewDeadlineAtSchema>;
+/** One service-target clock of a gate: CLAIM or DECISION. */
+export declare const ReviewDeadlineTargetSchema: z.ZodObject<{
+    at: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        fractionOfLapse: z.ZodNumber;
+    }, z.core.$strip>]>;
+    basis: z.ZodOptional<z.ZodEnum<typeof ReviewClockBasis>>;
+    warnBefore: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ReviewDeadlineTarget = z.infer<typeof ReviewDeadlineTargetSchema>;
+/**
+ * What a stage does when it fires. The data half of a gate's escalation rule; a REASSIGN rule also names a
+ * target resolver, declared on the backend gate beside it.
+ */
+export declare const ReviewEscalationRuleSchema: z.ZodObject<{
+    stage: z.ZodEnum<typeof ReviewDeadlineStage>;
+    action: z.ZodEnum<typeof ReviewEscalationActionKind>;
+}, z.core.$strip>;
+export type ReviewEscalationRuleDescriptor = z.infer<typeof ReviewEscalationRuleSchema>;
+/**
+ * A gate's deadlines (`humanApproval.deadlines`). Every field is optional, and a gate declaring nothing
+ * still gets the defaults: a 24-hour elapsed lapse, a CLAIM reminder at half of it and a DECISION reminder
+ * at three quarters, each notifying the people who may answer. Notifications grant nothing, so this is on
+ * for every gate; a silent lapse was the surprising behaviour.
+ *
+ * - `lapseAfter` — when the decision ends LAPSED. Always elapsed time.
+ * - `claim` / `decision` — the two service targets.
+ * - `rules` — what fires at each stage, in declaration order. Declaring `rules` REPLACES the default
+ *   reminders, so a gate that wants a reassignment and a reminder declares both. When several REASSIGN rules
+ *   fire at one stage, the first declared wins.
+ * - `pauseStates` — the application's own names for why a reviewer may stop the clocks
+ *   (`'awaiting-requester-information'`), labelled through i18n. A gate declaring none cannot be paused.
+ */
+export declare const ReviewDeadlinesDeclarationSchema: z.ZodObject<{
+    lapseAfter: z.ZodOptional<z.ZodString>;
+    claim: z.ZodOptional<z.ZodObject<{
+        at: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            fractionOfLapse: z.ZodNumber;
+        }, z.core.$strip>]>;
+        basis: z.ZodOptional<z.ZodEnum<typeof ReviewClockBasis>>;
+        warnBefore: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    decision: z.ZodOptional<z.ZodObject<{
+        at: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+            fractionOfLapse: z.ZodNumber;
+        }, z.core.$strip>]>;
+        basis: z.ZodOptional<z.ZodEnum<typeof ReviewClockBasis>>;
+        warnBefore: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    rules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        stage: z.ZodEnum<typeof ReviewDeadlineStage>;
+        action: z.ZodEnum<typeof ReviewEscalationActionKind>;
+    }, z.core.$strip>>>;
+    pauseStates: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type ReviewDeadlinesDeclaration = z.infer<typeof ReviewDeadlinesDeclarationSchema>;
+/** @wildo_source:part:end saas.models.flows-actors.review-deadlines-declaration */
+/** One resolved service target: how far after the request, on which basis, and how early its warning fires. */
+export interface ResolvedReviewDeadlineTarget {
+    readonly afterMs: number;
+    readonly basis: ReviewClockBasis;
+    readonly warnBeforeMs?: number;
+}
+/** A gate's declaration with every default applied. The one shape arming and validation read. */
+export interface ReviewDeadlinePolicy {
+    readonly lapseAfterMs: number;
+    readonly claim: ResolvedReviewDeadlineTarget;
+    readonly decision: ResolvedReviewDeadlineTarget;
+    readonly rules: readonly ReviewEscalationRuleDescriptor[];
+    readonly pauseStates: readonly string[];
+}
+/** A gate's declaration (possibly absent) with every default applied. */
+export declare function resolveReviewDeadlinePolicy(declaration: ReviewDeadlinesDeclaration | undefined): ReviewDeadlinePolicy;
+/** The deadline kind a stage belongs to. */
+export declare function reviewDeadlineKindOfStage(stage: ReviewDeadlineStage): ReviewDeadlineKind;
+/** Whether a stage is a WARNING (before a deadline) rather than the deadline being missed. */
+export declare function isReviewWarningStage(stage: ReviewDeadlineStage): boolean;
+/**
+ * Everything wrong with a gate's deadline declaration, as sentences naming the fix. Empty when it is sound.
+ * Startup refuses a gate with any, so a declaration that can never do what it says never ships:
+ *
+ * - a CALENDAR clock in an application that declares no calendar (#1628 I6) — never silently ELAPSED;
+ * - an ELAPSED target at or after the lapse, which could never fire before the decision ends;
+ * - a warning no earlier than the start of its own clock;
+ * - a rule on a WARNING stage whose `warnBefore` is not declared, which could never fire;
+ * - a REASSIGN rule on an OWNER gate, whose route cannot move.
+ */
+export declare function reviewDeadlinesDeclarationIssues(declaration: ReviewDeadlinesDeclaration | undefined, context: {
+    readonly routeKind: HumanDecision_RouteKind;
+    readonly calendarDeclared: boolean;
+}): string[];
+/**
+ * The instants a decision's clocks were armed with, as the row stores them. Each stage's due instant is
+ * stored rather than recomputed, so the sweep never depends on the gate still resolving, and a deployment
+ * that changes a gate never reshapes a clock that is already running.
+ */
+export interface ArmedReviewDeadlines {
+    readonly lapseAt: Date;
+    readonly claimDeadlineAt: Date;
+    readonly claimWarningAt?: Date;
+    readonly claimBasis: ReviewClockBasis;
+    readonly decisionDeadlineAt: Date;
+    readonly decisionWarningAt?: Date;
+    readonly decisionBasis: ReviewClockBasis;
+}
+/** Arm a decision's clocks at the moment it is requested. */
+export declare function armReviewDeadlines(input: {
+    readonly requestedAt: Date;
+    readonly policy: ReviewDeadlinePolicy;
+    readonly calendar: ReviewCalendar | undefined;
+}): ArmedReviewDeadlines;
+/** The four stage due instants and fired markers of one decision, whichever plane holds them. */
+export interface ReviewDeadlineStageSchedule {
+    readonly dueAt: Readonly<Partial<Record<ReviewDeadlineStage, Date>>>;
+    readonly firedAt: Readonly<Partial<Record<ReviewDeadlineStage, Date>>>;
+    /**
+     * Whether someone has CLAIMED the decision. The CLAIM clock is met by a claim, so neither CLAIM stage
+     * fires while it holds; an UNCLAIM re-opens it.
+     */
+    readonly claimed: boolean;
+    /**
+     * When the decision lapses. A stage due at or after it never fires (#1628 review M3): a CALENDAR target
+     * pushed past a weekend, or a target moved by a pause, can land beyond the lapse, and a reminder that the
+     * decision "can still be answered until it expires" would then describe a decision that has expired.
+     */
+    readonly lapseAt?: Date;
+}
+/** The stages in the order they fire when due together. */
+export declare const REVIEW_DEADLINE_STAGE_ORDER: readonly ReviewDeadlineStage[];
+/** The stages due at `now`, in firing order. */
+export declare function dueReviewDeadlineStages(schedule: ReviewDeadlineStageSchedule, now: Date): ReviewDeadlineStage[];
+/**
+ * The earliest instant any stage may still fire at — what the row's indexed next-due column holds, so the
+ * sweep selects due rows by index. `undefined` when nothing is left to fire.
+ */
+export declare function nextReviewDeadlineDueAt(schedule: ReviewDeadlineStageSchedule): Date | undefined;
+/** The service-target instants a pause moves. The lapse is deliberately absent: a pause never moves it (#1628 I4). */
+export interface ReviewServiceTargetInstants {
+    readonly claimDeadlineAt?: Date;
+    readonly claimWarningAt?: Date;
+    readonly claimBasis: ReviewClockBasis;
+    readonly decisionDeadlineAt?: Date;
+    readonly decisionWarningAt?: Date;
+    readonly decisionBasis: ReviewClockBasis;
+}
+/**
+ * The service targets after a pause from `pausedAt` to `resumedAt`. Each clock stopped at `pausedAt`: an
+ * instant still ahead of it keeps the time that was left, counted on its own basis, from `resumedAt`. An
+ * instant already behind it has passed and does not move.
+ */
+export declare function resumeReviewServiceTargets(targets: ReviewServiceTargetInstants, pausedAt: Date, resumedAt: Date, calendar: ReviewCalendar | undefined): ReviewServiceTargetInstants;
+/**
+ * Whether each armed service target was MET or MISSED, as the RESOLVED event records it.
+ *
+ * - DECISION is missed when its MISSED stage fired, when the decision lapsed (nobody decided), or when it
+ *   ended after the deadline.
+ * - CLAIM is met when the decision was claimed, or settled by a person, by the CLAIM deadline; missed when
+ *   its MISSED stage fired, or when it was taken — or lapsed — only after the deadline.
+ *
+ * - A WITHDRAWN decision was taken by nobody and answered by nobody, so it is measured only where a
+ *   deadline had ALREADY been missed before the withdrawal; a clock it was withdrawn inside is omitted,
+ *   never reported as met.
+ *
+ * The deadlines passed in must already include any pause, including one still open when the decision
+ * ended (see `resumeReviewServiceTargets`): a clock that was stopped cannot have been missed while it was.
+ *
+ * A clock that was never armed (a row from before #1628) is omitted rather than guessed.
+ */
+export declare function reviewDeadlineOutcomesOf(input: {
+    readonly claimDeadlineAt?: Date;
+    readonly decisionDeadlineAt?: Date;
+    readonly claimMissedFiredAt?: Date;
+    readonly decisionMissedFiredAt?: Date;
+    /** When the decision was claimed, if it is claimed as it ends. */
+    readonly claimedAt?: Date;
+    readonly outcome: HumanDecision_Outcome;
+    readonly resolvedAt: Date;
+}): Partial<Record<ReviewDeadlineKind, ReviewDeadlineOutcome>>;
+//# sourceMappingURL=review-deadlines.shared.schemas.d.ts.map

package/dist/esm/flows-actors/review-deadlines.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-deadlines.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/flows-actors/review-deadlines.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAiB/M,uHAAuH;AACvH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUvE;AAED,qDAAqD;AACrD,eAAO,MAAM,oBAAoB,aAE/B,CAAC;AAMH,sEAAsE;AACtE,oBAAY,eAAe;IACzB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,MAAM,WAAW;CAClB;AA+BD,kJAAkJ;AAClJ;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;iBAY/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,sEAAsE;AAEtE,kHAAkH;AAClH,qBAAa,mBAAoB,SAAQ,KAAK;CAAG;AAsGjD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CA6BnG;AAED,4GAA4G;AAC5G,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,CAe9F;AAED,sGAAsG;AACtG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,CAIvI;AAaD,+JAA+J;AAC/J,wFAAwF;AACxF,eAAO,MAAM,sCAAsC,MAAM,CAAC;AAC1D,qGAAqG;AACrG,eAAO,MAAM,yCAAyC,OAAO,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,sBAAsB;;mBAGjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,6DAA6D;AAC7D,eAAO,MAAM,0BAA0B;;;;;;iBAMrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAExF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;iBAM3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,mFAAmF;AAEnF,+GAA+G;AAC/G,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,iGAAiG;AACjG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAoBD,yEAAyE;AACzE,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,0BAA0B,GAAG,SAAS,GAAG,oBAAoB,CAUrH;AAED,4CAA4C;AAC5C,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,mBAAmB,GAAG,kBAAkB,CAaxF;AAED,8FAA8F;AAC9F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAExE;AAOD;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAC9C,WAAW,EAAE,0BAA0B,GAAG,SAAS,EACnD,OAAO,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,GAC3F,MAAM,EAAE,CAyCV;AAMD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,CAAC;IAClC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;CAC1C;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,CAAC;CAC/C,GAAG,oBAAoB,CAavB;AAED,iGAAiG;AACjG,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACrE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACvE;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;CACzB;AAED,2DAA2D;AAC3D,eAAO,MAAM,2BAA2B,EAAE,SAAS,mBAAmB,EAKpE,CAAC;AAuBH,gDAAgD;AAChD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,2BAA2B,EAAE,GAAG,EAAE,IAAI,GAAG,mBAAmB,EAAE,CAE/G;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,IAAI,GAAG,SAAS,CAQ/F;AAED,sHAAsH;AACtH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC;IACnC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,EACpC,QAAQ,EAAE,IAAI,EACd,SAAS,EAAE,IAAI,EACf,QAAQ,EAAE,cAAc,GAAG,SAAS,GACnC,2BAA2B,CAY7B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC;IACnC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC;IACtC,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B,GAAG,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC,CAmB7D"}