hazo_audit 1.0.0

package/dist/server/worker.js

@@ -0,0 +1,248 @@
+/**
+ * Audit worker: drains hazo_audit_outbox into hazo_audit_field /
+ * hazo_audit_intent. Uses hazo_connect's claimRows() primitive for
+ * concurrency-safe row claiming with attempt-count + backoff.
+ */
+import 'server-only';
+import { randomUUID } from 'node:crypto';
+import { createCrudService, QueryBuilder } from 'hazo_connect/server';
+import { loadAuditConfig, getOverride } from './config.js';
+import { diffRows } from './diff.js';
+/** JSONB-shaped value → JSON string for adapters that can't bind objects. */
+function toJsonText(v) {
+    if (v == null)
+        return null;
+    if (typeof v === 'string')
+        return v;
+    try {
+        return JSON.stringify(v);
+    }
+    catch {
+        return null;
+    }
+}
+/** Tries to parse a JSON column that may already be parsed as an object. */
+function parseJson(v) {
+    if (v == null)
+        return null;
+    if (typeof v === 'object')
+        return v;
+    if (typeof v === 'string') {
+        try {
+            const parsed = JSON.parse(v);
+            return parsed && typeof parsed === 'object' ? parsed : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+/**
+ * Find the most-recent drained outbox row for a subject (used to chain
+ * before_row when the producer didn't supply one).
+ */
+async function findPriorAfterRow(adapter, subjectKind, subjectId, excludeId) {
+    try {
+        const qb = new QueryBuilder()
+            .from('hazo_audit_outbox')
+            .select('after_row, created_at')
+            .where('subject_kind', 'eq', subjectKind)
+            .where('subject_id', 'eq', subjectId)
+            .where('id', 'neq', excludeId)
+            .where('drained_at', 'is', 'not.null')
+            .order('created_at', 'desc')
+            .limit(1);
+        const rows = await adapter.query(qb, 'GET');
+        if (Array.isArray(rows) && rows.length > 0) {
+            return parseJson(rows[0].after_row);
+        }
+    }
+    catch {
+        // Best-effort; if chaining fails, treat as no prior state.
+    }
+    return null;
+}
+async function processRow(row, appAdapter, auditAdapter, cfg, resolvers) {
+    const override = getOverride(row.table_name, cfg);
+    const resolver = override.resolver ? resolvers[override.resolver] : undefined;
+    // Hydrate before/after — they may arrive as JSON strings on some adapters.
+    let after = parseJson(row.after_row);
+    let before = parseJson(row.before_row);
+    // Lazy before-row chain (PRD §7.3) — only for UPDATE.
+    if (row.op === 'update' && !before) {
+        before = await findPriorAfterRow(appAdapter, row.subject_kind, row.subject_id, row.id);
+    }
+    // For UPDATE, after may be just the patch slice; merge atop the chained
+    // before so unchanged fields aren't reported as changes.
+    if (row.op === 'update' && before && after) {
+        after = { ...before, ...after };
+    }
+    const changes = diffRows({
+        before,
+        after,
+        op: row.op,
+        override,
+        resolver,
+    });
+    // Emit field events.
+    const fieldSvc = createCrudService(auditAdapter, 'hazo_audit_field', {
+        autoId: { enabled: true, column: 'id' },
+    });
+    if (changes.length > 0) {
+        await fieldSvc.insert(changes.map((c) => ({
+            id: randomUUID(),
+            scope_id: row.scope_id,
+            correlation_id: row.correlation_id,
+            subject_kind: row.subject_kind,
+            subject_id: row.subject_id,
+            field_path: c.field_path,
+            op: c.op,
+            before_value: toJsonText(c.before_value),
+            after_value: toJsonText(c.after_value),
+            is_sensitive: c.is_sensitive ? 1 : 0,
+            actor_kind: row.actor_kind,
+            actor_user_id: row.actor_user_id,
+            actor_label: row.actor_label,
+        })));
+    }
+    // Emit intent event if attached to this outbox row.
+    if (row.intent_event) {
+        const intentSvc = createCrudService(auditAdapter, 'hazo_audit_intent', {
+            autoId: { enabled: true, column: 'id' },
+        });
+        await intentSvc.insert({
+            id: randomUUID(),
+            scope_id: row.scope_id,
+            correlation_id: row.correlation_id,
+            event_name: row.intent_event,
+            payload: toJsonText(row.intent_payload),
+            subject_kind: row.subject_kind,
+            subject_id: row.subject_id,
+            actor_kind: row.actor_kind,
+            actor_user_id: row.actor_user_id,
+            actor_label: row.actor_label,
+        });
+    }
+    // Mark outbox row drained.
+    const markQb = new QueryBuilder()
+        .from('hazo_audit_outbox')
+        .where('id', 'eq', row.id);
+    await appAdapter.query(markQb, 'PATCH', {
+        drained_at: new Date().toISOString(),
+        failed_at: null,
+        failure_reason: null,
+    });
+}
+async function markFailure(adapter, id, attemptCount, maxAttempts, reason) {
+    const patch = {
+        failure_reason: reason.slice(0, 1000),
+        last_attempt_at: new Date().toISOString(),
+    };
+    if (attemptCount >= maxAttempts) {
+        patch.failed_at = new Date().toISOString();
+    }
+    const qb = new QueryBuilder()
+        .from('hazo_audit_outbox')
+        .where('id', 'eq', id);
+    await adapter.query(qb, 'PATCH', patch);
+}
+async function reapOnce(adapter, cfg) {
+    const drainedCutoff = new Date(Date.now() - cfg.retention.outbox_drained_ttl_days * 86400000).toISOString();
+    const failedCutoff = new Date(Date.now() - cfg.retention.outbox_failed_ttl_days * 86400000).toISOString();
+    try {
+        const drainedQb = new QueryBuilder()
+            .from('hazo_audit_outbox')
+            .where('drained_at', 'lt', drainedCutoff);
+        await adapter.query(drainedQb, 'DELETE');
+        const failedQb = new QueryBuilder()
+            .from('hazo_audit_outbox')
+            .where('failed_at', 'lt', failedCutoff);
+        await adapter.query(failedQb, 'DELETE');
+    }
+    catch {
+        /* best-effort */
+    }
+}
+export function startAuditWorker(opts) {
+    const cfg = opts.config ?? loadAuditConfig(opts.config_path);
+    const auditAdapter = opts.audit_adapter ?? opts.app_adapter;
+    const pollMs = opts.poll_ms ?? cfg.worker.poll_ms;
+    const maxAttempts = opts.max_attempts ?? cfg.worker.max_attempts;
+    const resolvers = opts.resolvers ?? {};
+    async function runOnce() {
+        let processed = 0;
+        let failed = 0;
+        let claimed = [];
+        try {
+            claimed = (await opts.app_adapter.claimRows({
+                table: 'hazo_audit_outbox',
+                where: {
+                    drained_at: null,
+                    failed_at: null,
+                    attempt_count: { lt: maxAttempts },
+                },
+                set: {
+                    attempt_count: { increment: 1 },
+                    last_attempt_at: { $now: true },
+                },
+                returning: ['*'],
+                limit: 50,
+            }));
+        }
+        catch (err) {
+            const e = err instanceof Error ? err : new Error(String(err));
+            opts.onWorkerError?.(e);
+            return { processed: 0, failed: 0 };
+        }
+        for (const row of claimed) {
+            try {
+                await processRow(row, opts.app_adapter, auditAdapter, cfg, resolvers);
+                processed++;
+            }
+            catch (err) {
+                failed++;
+                const e = err instanceof Error ? err : new Error(String(err));
+                opts.onWorkerError?.(e, row);
+                try {
+                    await markFailure(opts.app_adapter, row.id, row.attempt_count + 1, maxAttempts, e.message);
+                }
+                catch {
+                    /* swallow — next tick will retry */
+                }
+            }
+        }
+        return { processed, failed };
+    }
+    let pollHandle = null;
+    let reaperHandle = null;
+    let stopped = false;
+    if (pollMs > 0) {
+        pollHandle = setInterval(() => {
+            if (stopped)
+                return;
+            runOnce().catch((err) => {
+                const e = err instanceof Error ? err : new Error(String(err));
+                opts.onWorkerError?.(e);
+            });
+        }, pollMs);
+    }
+    if (cfg.worker.reaper_interval_ms > 0) {
+        reaperHandle = setInterval(() => {
+            if (stopped)
+                return;
+            reapOnce(opts.app_adapter, cfg).catch(() => { });
+        }, cfg.worker.reaper_interval_ms);
+    }
+    return {
+        async stop() {
+            stopped = true;
+            if (pollHandle)
+                clearInterval(pollHandle);
+            if (reaperHandle)
+                clearInterval(reaperHandle);
+        },
+        drainOnce: runOnce,
+    };
+}
+//# sourceMappingURL=worker.js.map

package/dist/server/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/server/worker.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,aAAa,CAAC;AACrB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAoB,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAoB,MAAM,WAAW,CAAC;AAqDvD,6EAA6E;AAC7E,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAA4B,CAAC;IAC/D,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAC9B,OAA2B,EAC3B,WAAmB,EACnB,SAAiB,EACjB,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,YAAY,EAAE;aAC1B,IAAI,CAAC,mBAAmB,CAAC;aACzB,MAAM,CAAC,uBAAuB,CAAC;aAC/B,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,WAAW,CAAC;aACxC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,SAAS,CAAC;aACpC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC;aAC7B,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,UAAU,CAAC;aACrC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC;aAC3B,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAE,IAAI,CAAC,CAAC,CAA6B,CAAC,SAAS,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAkB,EAClB,UAA8B,EAC9B,YAAgC,EAChC,GAAgB,EAChB,SAAuC;IAEvC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE9E,2EAA2E;IAC3E,IAAI,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEvC,sDAAsD;IACtD,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,GAAG,MAAM,iBAAiB,CAC9B,UAAU,EACV,GAAG,CAAC,YAAY,EAChB,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,EAAE,CACP,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,yDAAyD;IACzD,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3C,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAkB,QAAQ,CAAC;QACtC,MAAM;QACN,KAAK;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ;QACR,QAAQ;KACT,CAAC,CAAC;IAEH,qBAAqB;IACrB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,EAAE,kBAAkB,EAAE;QACnE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;KACxC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,QAAQ,CAAC,MAAM,CACnB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClB,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;YACxC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;YACtC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,iBAAiB,CAAC,YAAY,EAAE,mBAAmB,EAAE;YACrE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,SAAS,CAAC,MAAM,CAAC;YACrB,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,UAAU,EAAE,GAAG,CAAC,YAAY;YAC5B,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC;YACvC,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,2BAA2B;IAC3B,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE;SAC9B,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;QACtC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,SAAS,EAAE,IAAI;QACf,cAAc,EAAE,IAAI;KACrB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAA2B,EAC3B,EAAU,EACV,YAAoB,EACpB,WAAmB,EACnB,MAAc;IAEd,MAAM,KAAK,GAA4B;QACrC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QACrC,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC1C,CAAC;IACF,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;QAChC,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,YAAY,EAAE;SAC1B,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACzB,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,OAA2B,EAC3B,GAAgB;IAEhB,MAAM,aAAa,GAAG,IAAI,IAAI,CAC5B,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,uBAAuB,GAAG,QAAU,CAChE,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,YAAY,GAAG,IAAI,IAAI,CAC3B,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,sBAAsB,GAAG,QAAU,CAC/D,CAAC,WAAW,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,YAAY,EAAE;aACjC,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC5C,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE;aAChC,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QAC1C,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAmB;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,CAAC;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IAEvC,KAAK,UAAU,OAAO;QACpB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,OAAO,GAAoB,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAgB;gBACzD,KAAK,EAAE,mBAAmB;gBAC1B,KAAK,EAAE;oBACL,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE,IAAI;oBACf,aAAa,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE;iBACnC;gBACD,GAAG,EAAE;oBACH,aAAa,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;oBAC/B,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBAChC;gBACD,SAAS,EAAE,CAAC,GAAG,CAAC;gBAChB,KAAK,EAAE,EAAE;aACV,CAAC,CAAoB,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACrC,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;gBACtE,SAAS,EAAE,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,EAAE,CAAC;gBACT,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9D,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC7B,IAAI,CAAC;oBACH,MAAM,WAAW,CACf,IAAI,CAAC,WAAW,EAChB,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,aAAa,GAAG,CAAC,EACrB,WAAW,EACX,CAAC,CAAC,OAAO,CACV,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,oCAAoC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,UAAU,GAA0C,IAAI,CAAC;IAC7D,IAAI,YAAY,GAA0C,IAAI,CAAC;IAC/D,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACtB,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9D,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,MAAM,CAAC,CAAC;IACb,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;QACtC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YAC9B,IAAI,OAAO;gBAAE,OAAO;YACpB,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClD,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACpC,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI;YACR,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,UAAU;gBAAE,aAAa,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,YAAY;gBAAE,aAAa,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC;QACD,SAAS,EAAE,OAAO;KACnB,CAAC;AACJ,CAAC"}

package/dist/server/wrap.d.ts

@@ -0,0 +1,32 @@
+/**
+ * wrapWithAudit — returns an adapter proxy that auto-enqueues outbox rows
+ * for every write to a captured table. Reads/getConfig pass through.
+ *
+ * Failure semantics (PRD §7.4): outbox enqueue failures are reported via
+ * onAuditFailure but never throw into the user write path. Subject extraction
+ * failures log a skipped-warning and continue without auditing.
+ */
+import 'server-only';
+import type { HazoConnectAdapter } from 'hazo_connect';
+import { type AuditConfig } from './config.js';
+import { type OutboxFailureHandler } from './outbox.js';
+import type { PathResolver } from '../index.js';
+export interface WrapWithAuditOptions {
+    /** Adapter used to write outbox rows. Defaults to the wrapped adapter. */
+    auditAdapter?: HazoConnectAdapter;
+    /** Named JSONB path resolvers, referenced by name in INI per-table config. */
+    resolvers?: Record<string, PathResolver>;
+    /** Called for any outbox enqueue failure; never re-thrown. */
+    onAuditFailure?: OutboxFailureHandler;
+    /** Optional INI path override. Defaults to standard search order. */
+    config_path?: string;
+    /** Pre-loaded config (escape hatch for tests). Bypasses file IO. */
+    config?: AuditConfig;
+    /** Optional logger for skip warnings / debug. */
+    logger?: {
+        debug?: (msg: string, data?: Record<string, unknown>) => void;
+        warn?: (msg: string, data?: Record<string, unknown>) => void;
+    };
+}
+export declare function wrapWithAudit(adapter: HazoConnectAdapter, opts?: WrapWithAuditOptions): HazoConnectAdapter;
+//# sourceMappingURL=wrap.d.ts.map

package/dist/server/wrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap.d.ts","sourceRoot":"","sources":["../../src/server/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,aAAa,CAAC;AAErB,OAAO,KAAK,EACV,kBAAkB,EAEnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAiB,KAAK,oBAAoB,EAAkB,MAAM,aAAa,CAAC;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzC,8DAA8D;IAC9D,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,iDAAiD;IACjD,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC9D,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KAC9D,CAAC;CACH;AAmLD,wBAAgB,aAAa,CAC3B,OAAO,EAAE,kBAAkB,EAC3B,IAAI,GAAE,oBAAyB,GAC9B,kBAAkB,CA8GpB"}

package/dist/server/wrap.js

@@ -0,0 +1,232 @@
+/**
+ * wrapWithAudit — returns an adapter proxy that auto-enqueues outbox rows
+ * for every write to a captured table. Reads/getConfig pass through.
+ *
+ * Failure semantics (PRD §7.4): outbox enqueue failures are reported via
+ * onAuditFailure but never throw into the user write path. Subject extraction
+ * failures log a skipped-warning and continue without auditing.
+ */
+import 'server-only';
+import { randomUUID } from 'node:crypto';
+import { loadAuditConfig, shouldCapture, getSubjectKind, getSubjectIdColumn, getOverride, } from './config.js';
+import { getAuditContext, takeAuditHints } from './context.js';
+import { enqueueOutbox } from './outbox.js';
+const WRITE_METHODS = new Set(['POST', 'PATCH', 'PUT', 'DELETE']);
+function defaultActor() {
+    const ctx = getAuditContext();
+    return {
+        actor_kind: ctx?.actor_kind ?? 'background_job',
+        actor_user_id: ctx?.actor_user_id ?? null,
+        actor_label: ctx?.actor_label ?? null,
+        scope_id: ctx?.scope_id ?? null,
+        correlation_id: ctx?.correlation_id ?? randomUUID(),
+    };
+}
+/**
+ * Find the value of the configured subject id column in a WHERE clause
+ * containing an `eq` filter. Returns undefined if not present.
+ */
+function extractSubjectIdFromWhere(conditions, idColumn) {
+    const match = conditions.find((c) => c.field === idColumn && (c.operator === 'eq' || c.operator === 'in'));
+    if (!match)
+        return undefined;
+    if (match.operator === 'in') {
+        return Array.isArray(match.value) && match.value.length === 1
+            ? String(match.value[0])
+            : undefined;
+    }
+    return match.value != null ? String(match.value) : undefined;
+}
+function extractSubjectIdFromRow(row, idColumn) {
+    if (!row)
+        return undefined;
+    const v = row[idColumn];
+    return v == null ? undefined : String(v);
+}
+/**
+ * Best-effort: derive the list of (subject_id, before_row, after_row) tuples
+ * from one underlying write call. R1 supports single-row writes; bulk writes
+ * are skipped unless the table opts into `fanout_bulk_writes`.
+ */
+async function deriveOutboxRows(args) {
+    const { method, table, body, result, whereConditions, cfg, logger } = args;
+    const override = getOverride(table, cfg);
+    const idColumn = getSubjectIdColumn(table, cfg);
+    const op = method === 'POST' ? 'insert' : method === 'DELETE' ? 'delete' : 'update';
+    // ── INSERT ───────────────────────────────────────────────────────────────
+    if (op === 'insert') {
+        const inserted = Array.isArray(result)
+            ? result
+            : result && typeof result === 'object'
+                ? [result]
+                : [];
+        const bodyArr = Array.isArray(body)
+            ? body
+            : body && typeof body === 'object'
+                ? [body]
+                : [];
+        // If response is empty (no Prefer: return=representation), we can only
+        // recover ids from the body. For single-row POST, this works if the caller
+        // provided an id explicitly.
+        const rows = inserted.length > 0 ? inserted : bodyArr;
+        if (rows.length === 0) {
+            logger?.warn?.('audit.skipped_unsupported_shape', {
+                table,
+                op,
+                reason: 'insert returned no rows and body is empty',
+            });
+            return [];
+        }
+        if (rows.length > 1 && !override.fanout_bulk_writes) {
+            logger?.warn?.('audit.skipped_unsupported_shape', {
+                table,
+                op,
+                reason: 'bulk insert; enable fanout_bulk_writes to capture',
+                count: rows.length,
+            });
+            return [];
+        }
+        const out = [];
+        for (const row of rows) {
+            const id = extractSubjectIdFromRow(row, idColumn);
+            if (!id) {
+                logger?.warn?.('audit.skipped_unsupported_shape', {
+                    table,
+                    op,
+                    reason: `insert response missing ${idColumn}`,
+                });
+                continue;
+            }
+            out.push({ op, subject_id: id, after_row: row, before_row: null });
+        }
+        return out;
+    }
+    // ── UPDATE / DELETE ──────────────────────────────────────────────────────
+    const id = extractSubjectIdFromWhere(whereConditions, idColumn);
+    if (!id) {
+        // Non-id WHERE clause — bulk update/delete shape. Skip unless opted in.
+        if (!override.fanout_bulk_writes) {
+            logger?.warn?.('audit.skipped_unsupported_shape', {
+                table,
+                op,
+                reason: `where clause lacks eq on ${idColumn}`,
+            });
+            return [];
+        }
+        // Fanout path not implemented for R1 (PRD §7.5 marks as opt-in extension).
+        // Would require pre-write GET; punt with a warning.
+        logger?.warn?.('audit.skipped_unsupported_shape', {
+            table,
+            op,
+            reason: 'fanout_bulk_writes via pre-write GET not implemented in R1',
+        });
+        return [];
+    }
+    if (op === 'delete') {
+        return [{ op, subject_id: id, after_row: null, before_row: null }];
+    }
+    // update — body is the patch; expose it as after_row's patch slice.
+    // Note: it's a partial; worker chains before_row from prior outbox row.
+    const patch = body && typeof body === 'object' && !Array.isArray(body)
+        ? body
+        : {};
+    const merged = {
+        ...patch,
+        [idColumn]: id,
+    };
+    // If caller used `Prefer: return=representation`, prefer the actual row.
+    const resultRow = Array.isArray(result)
+        ? result[0]
+        : result;
+    const after = resultRow && Object.keys(resultRow).length > 0 ? resultRow : merged;
+    return [{ op, subject_id: id, after_row: after, before_row: null }];
+}
+export function wrapWithAudit(adapter, opts = {}) {
+    const cfg = opts.config ?? loadAuditConfig(opts.config_path);
+    const auditAdapter = opts.auditAdapter ?? adapter;
+    const wrapped = {
+        async query(builder, method = 'GET', body) {
+            const m = method.toUpperCase();
+            const result = await adapter.query(builder, method, body);
+            if (!WRITE_METHODS.has(m))
+                return result;
+            const qb = builder;
+            const table = qb.getTable?.() ?? null;
+            if (!table || !shouldCapture(table, cfg))
+                return result;
+            try {
+                const whereConditions = qb.getWhereConditions?.() ?? [];
+                const rows = await deriveOutboxRows({
+                    method: m,
+                    table,
+                    body,
+                    result,
+                    whereConditions,
+                    cfg,
+                    baseAdapter: adapter,
+                    logger: opts.logger,
+                });
+                const actor = defaultActor();
+                const hints = takeAuditHints();
+                await Promise.all(rows.map((r) => enqueueOutbox(auditAdapter, {
+                    ...actor,
+                    table_name: table,
+                    subject_kind: getSubjectKind(table, cfg),
+                    subject_id: r.subject_id,
+                    op: r.op,
+                    before_row: hints?.before_row ?? r.before_row,
+                    after_row: r.after_row,
+                    intent_event: hints?.intent_event ?? null,
+                    intent_payload: hints?.intent_payload ?? null,
+                }, opts.onAuditFailure)));
+            }
+            catch (err) {
+                const e = err instanceof Error ? err : new Error(String(err));
+                opts.onAuditFailure?.(e, { table, op: m });
+            }
+            return result;
+        },
+        async rawQuery(endpoint, options) {
+            // Raw queries bypass the QueryBuilder so we can't infer table/intent.
+            // Pass through — apps using raw queries opt out of audit by design.
+            return adapter.rawQuery(endpoint, options);
+        },
+        async getConfig() {
+            return adapter.getConfig();
+        },
+        async claimRows(claimOpts) {
+            const result = await adapter.claimRows(claimOpts);
+            if (!shouldCapture(claimOpts.table, cfg))
+                return result;
+            // claimRows acts as a witnessed UPDATE on each row. Emit one outbox row
+            // per claimed row (id-keyed). after_row = the returned row.
+            try {
+                const idColumn = getSubjectIdColumn(claimOpts.table, cfg);
+                const actor = defaultActor();
+                const rows = Array.isArray(result) ? result : [];
+                await Promise.all(rows.map((row) => {
+                    const r = row;
+                    const id = extractSubjectIdFromRow(r, idColumn);
+                    if (!id)
+                        return Promise.resolve();
+                    return enqueueOutbox(auditAdapter, {
+                        ...actor,
+                        table_name: claimOpts.table,
+                        subject_kind: getSubjectKind(claimOpts.table, cfg),
+                        subject_id: id,
+                        op: 'update',
+                        after_row: r,
+                        before_row: null,
+                    }, opts.onAuditFailure);
+                }));
+            }
+            catch (err) {
+                const e = err instanceof Error ? err : new Error(String(err));
+                opts.onAuditFailure?.(e, { table: claimOpts.table, op: 'claimRows' });
+            }
+            return result;
+        },
+    };
+    return wrapped;
+}
+//# sourceMappingURL=wrap.js.map

package/dist/server/wrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap.js","sourceRoot":"","sources":["../../src/server/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,aAAa,CAAC;AACrB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EACL,eAAe,EACf,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,WAAW,GAEZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,aAAa,EAA6C,MAAM,aAAa,CAAC;AA0BvF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAElE,SAAS,YAAY;IAOnB,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;IAC9B,OAAO;QACL,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,gBAAgB;QAC/C,aAAa,EAAE,GAAG,EAAE,aAAa,IAAI,IAAI;QACzC,WAAW,EAAE,GAAG,EAAE,WAAW,IAAI,IAAI;QACrC,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI;QAC/B,cAAc,EAAE,GAAG,EAAE,cAAc,IAAI,UAAU,EAAE;KACpD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAChC,UAA4B,EAC5B,QAAgB;IAEhB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAC5E,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAC3D,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,SAAS,uBAAuB,CAC9B,GAAwC,EACxC,QAAgB;IAEhB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAS/B;IAQC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3E,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEhD,MAAM,EAAE,GACN,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE3E,4EAA4E;IAC5E,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACpC,CAAC,CAAE,MAAoC;YACvC,CAAC,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBACtC,CAAC,CAAC,CAAC,MAAiC,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,CAAC,CAAE,IAAkC;YACrC,CAAC,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAClC,CAAC,CAAC,CAAC,IAA+B,CAAC;gBACnC,CAAC,CAAC,EAAE,CAAC;QAEP,uEAAuE;QACvE,2EAA2E;QAC3E,6BAA6B;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE;gBAChD,KAAK;gBACL,EAAE;gBACF,MAAM,EAAE,2CAA2C;aACpD,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;YACpD,MAAM,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE;gBAChD,KAAK;gBACL,EAAE;gBACF,MAAM,EAAE,mDAAmD;gBAC3D,KAAK,EAAE,IAAI,CAAC,MAAM;aACnB,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,GAAG,GAAiD,EAAE,CAAC;QAC7D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,uBAAuB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAClD,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE;oBAChD,KAAK;oBACL,EAAE;oBACF,MAAM,EAAE,2BAA2B,QAAQ,EAAE;iBAC9C,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,4EAA4E;IAC5E,MAAM,EAAE,GAAG,yBAAyB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAEhE,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,wEAAwE;QACxE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;YACjC,MAAM,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE;gBAChD,KAAK;gBACL,EAAE;gBACF,MAAM,EAAE,4BAA4B,QAAQ,EAAE;aAC/C,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,2EAA2E;QAC3E,oDAAoD;QACpD,MAAM,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE;YAChD,KAAK;YACL,EAAE;YACF,MAAM,EAAE,4DAA4D;SACrE,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,oEAAoE;IACpE,wEAAwE;IACxE,MAAM,KAAK,GACT,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACtD,CAAC,CAAE,IAAgC;QACnC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,MAAM,GAA4B;QACtC,GAAG,KAAK;QACR,CAAC,QAAQ,CAAC,EAAE,EAAE;KACf,CAAC;IACF,yEAAyE;IACzE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrC,CAAC,CAAE,MAAM,CAAC,CAAC,CAAyC;QACpD,CAAC,CAAE,MAA8C,CAAC;IACpD,MAAM,KAAK,GAAG,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAClF,OAAO,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAA2B,EAC3B,OAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC;IAElD,MAAM,OAAO,GAAuB;QAClC,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,MAAM,GAAG,KAAK,EAAE,IAAc;YAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAE1D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC;YAEzC,MAAM,EAAE,GAAG,OAA2B,CAAC;YACvC,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;YACtC,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC;YAExD,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,EAAE,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC;gBACxD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC;oBAClC,MAAM,EAAE,CAAC;oBACT,KAAK;oBACL,IAAI;oBACJ,MAAM;oBACN,eAAe;oBACf,GAAG;oBACH,WAAW,EAAE,OAAO;oBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAE/B,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACb,aAAa,CACX,YAAY,EACZ;oBACE,GAAG,KAAK;oBACR,UAAU,EAAE,KAAK;oBACjB,YAAY,EAAE,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC;oBACxC,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,CAAC,CAAC,UAAU;oBAC7C,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,IAAI;oBACzC,cAAc,EAAE,KAAK,EAAE,cAAc,IAAI,IAAI;iBACjC,EACd,IAAI,CAAC,cAAc,CACpB,CACF,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9D,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7C,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,OAAqB;YACpD,sEAAsE;YACtE,oEAAoE;YACpE,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,KAAK,CAAC,SAAS;YACb,OAAO,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,SAAS,CACb,SAAyD;YAEzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAI,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC;YAExD,wEAAwE;YACxE,4DAA4D;YAC5D,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC1D,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;oBACf,MAAM,CAAC,GAAG,GAA8B,CAAC;oBACzC,MAAM,EAAE,GAAG,uBAAuB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;oBAChD,IAAI,CAAC,EAAE;wBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;oBAClC,OAAO,aAAa,CAClB,YAAY,EACZ;wBACE,GAAG,KAAK;wBACR,UAAU,EAAE,SAAS,CAAC,KAAK;wBAC3B,YAAY,EAAE,cAAc,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;wBAClD,UAAU,EAAE,EAAE;wBACd,EAAE,EAAE,QAAQ;wBACZ,SAAS,EAAE,CAAC;wBACZ,UAAU,EAAE,IAAI;qBACJ,EACd,IAAI,CAAC,cAAc,CACpB,CAAC;gBACJ,CAAC,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9D,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}