libre-webui 0.21.3 → 0.22.1

package/backend/dist/platform/storage/storageFactory.js

@@ -0,0 +1,530 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { hasKeyDependentApplicationState } from '../../utils/dataDirectory.js';
+import { Aes256GcmKeyring, StorageEncryptionError } from './aesGcmKeyring.js';
+import { BlobStoreError, } from './blobStore.js';
+import { LocalEncryptedBlobStore, } from './localEncryptedBlobStore.js';
+import { SqliteEncryptedVectorStore } from './sqliteEncryptedVectorStore.js';
+import { createS3EncryptedBlobStore, } from './s3EncryptedBlobStore.js';
+import { PgVectorStore } from './pgVectorStore.js';
+import { VectorStoreError, } from './vectorStore.js';
+const MAX_PERSISTENT_KEY_FILE_BYTES = 256;
+const STORAGE_KEY_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+const parseHexKey = (value, description) => {
+    if (typeof value !== 'string' || !/^[a-fA-F0-9]{64}$/.test(value)) {
+        throw new StorageEncryptionError(`${description} must be exactly 64 hexadecimal characters`);
+    }
+    return Buffer.from(value, 'hex');
+};
+const parseKeyMap = (rawValue) => {
+    let value;
+    try {
+        value = JSON.parse(rawValue);
+    }
+    catch {
+        throw new StorageEncryptionError('STORAGE_ENCRYPTION_KEYS must be a valid JSON object');
+    }
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new StorageEncryptionError('STORAGE_ENCRYPTION_KEYS must be a JSON object');
+    }
+    const entries = Object.entries(value);
+    if (entries.length === 0 || entries.length > 32) {
+        throw new StorageEncryptionError('STORAGE_ENCRYPTION_KEYS must contain 1-32 keys');
+    }
+    const keys = Object.create(null);
+    try {
+        for (const [keyId, key] of entries) {
+            if (!STORAGE_KEY_ID_PATTERN.test(keyId)) {
+                throw new StorageEncryptionError('STORAGE_ENCRYPTION_KEYS contains an invalid key ID');
+            }
+            keys[keyId] = parseHexKey(key, 'Storage key material');
+        }
+        return keys;
+    }
+    catch (error) {
+        for (const key of Object.values(keys))
+            key.fill(0);
+        throw error;
+    }
+};
+const sameKey = (left, right) => left.length === right.length && crypto.timingSafeEqual(left, right);
+const clearKeys = (keys) => {
+    for (const key of Object.values(keys))
+        key.fill(0);
+};
+const persistentKeyPath = (env) => {
+    const rawDataDirectory = env.DATA_DIR;
+    if (rawDataDirectory === undefined || rawDataDirectory === '')
+        return undefined;
+    if (rawDataDirectory.trim() !== rawDataDirectory ||
+        !path.isAbsolute(rawDataDirectory)) {
+        throw new StorageEncryptionError('DATA_DIR must be an absolute path before storage initialization');
+    }
+    return path.join(path.normalize(rawDataDirectory), '.encryption_key');
+};
+/**
+ * Reads the legacy persistent key without following a final-component symlink
+ * or mutating/generating key material. A changing or loosely permissioned file
+ * fails closed so a privileged path cannot silently select attacker input.
+ */
+const readPersistentStorageKey = (env) => {
+    const keyPath = persistentKeyPath(env);
+    if (!keyPath)
+        return undefined;
+    const noFollow = fs.constants.O_NOFOLLOW ?? 0;
+    let descriptor;
+    let content;
+    try {
+        descriptor = fs.openSync(keyPath, fs.constants.O_RDONLY | noFollow);
+    }
+    catch (error) {
+        if (error &&
+            typeof error === 'object' &&
+            'code' in error &&
+            error.code === 'ENOENT') {
+            return undefined;
+        }
+        throw new StorageEncryptionError('Unable to safely open the persistent storage encryption key');
+    }
+    try {
+        let before = fs.fstatSync(descriptor);
+        const named = fs.lstatSync(keyPath);
+        if (!before.isFile() ||
+            !named.isFile() ||
+            before.dev !== named.dev ||
+            before.ino !== named.ino ||
+            before.nlink !== 1 ||
+            before.size <= 0 ||
+            before.size > MAX_PERSISTENT_KEY_FILE_BYTES) {
+            throw new StorageEncryptionError('Persistent storage encryption key must be a small, single-link regular file');
+        }
+        if (process.platform !== 'win32' && (before.mode & 0o077) !== 0) {
+            // Releases before the 0600 write published this file with default
+            // permissions. A verified regular single-link file owned by this
+            // process is tightened in place; any other loose file fails closed.
+            if (before.uid !== process.getuid?.()) {
+                throw new StorageEncryptionError('Persistent storage encryption key permissions must be 0600 or stricter');
+            }
+            fs.fchmodSync(descriptor, 0o600);
+            before = fs.fstatSync(descriptor);
+        }
+        content = Buffer.alloc(MAX_PERSISTENT_KEY_FILE_BYTES + 1);
+        const bytesRead = fs.readSync(descriptor, content, 0, content.length, 0);
+        const after = fs.fstatSync(descriptor);
+        const namedAfter = fs.lstatSync(keyPath);
+        if (bytesRead > MAX_PERSISTENT_KEY_FILE_BYTES ||
+            before.dev !== after.dev ||
+            before.ino !== after.ino ||
+            before.size !== after.size ||
+            before.mtimeMs !== after.mtimeMs ||
+            before.ctimeMs !== after.ctimeMs ||
+            after.dev !== namedAfter.dev ||
+            after.ino !== namedAfter.ino) {
+            throw new StorageEncryptionError('Persistent storage encryption key changed while being read');
+        }
+        return parseHexKey(content.subarray(0, bytesRead).toString('utf8').trim(), 'Persistent storage encryption key');
+    }
+    catch (error) {
+        if (error instanceof StorageEncryptionError)
+            throw error;
+        throw new StorageEncryptionError('Unable to safely read the persistent storage encryption key');
+    }
+    finally {
+        content?.fill(0);
+        fs.closeSync(descriptor);
+    }
+};
+const syncDirectory = (directory) => {
+    // Windows does not expose a portable directory-fsync operation through
+    // Node. The key file itself is still fsynced before atomic publication.
+    if (process.platform === 'win32')
+        return;
+    let descriptor;
+    try {
+        descriptor = fs.openSync(directory, fs.constants.O_RDONLY);
+        fs.fsyncSync(descriptor);
+    }
+    finally {
+        if (descriptor !== undefined)
+            fs.closeSync(descriptor);
+    }
+};
+/**
+ * Select the legacy application encryption key before stateful modules load.
+ * A fresh installation receives one durably published key; an existing store
+ * without its original key always fails closed. The returned value is suitable
+ * for assigning to ENCRYPTION_KEY and is never logged by this helper.
+ */
+export const provisionLegacyEncryptionKey = (env = process.env) => {
+    const environmentValue = env.ENCRYPTION_KEY;
+    if (environmentValue !== undefined && environmentValue !== '') {
+        if (environmentValue.trim() !== environmentValue) {
+            throw new StorageEncryptionError('ENCRYPTION_KEY must not contain leading or trailing whitespace');
+        }
+    }
+    // Resolve and validate every configured key source before creating a data
+    // directory or publishing a key. In particular, malformed versioned-key
+    // settings must fail without leaving behind state from a rejected launch.
+    const resolvedKeys = resolveStorageKeys(env);
+    if (resolvedKeys) {
+        const legacyKey = resolvedKeys.keys.legacy;
+        if (!legacyKey) {
+            clearKeys(resolvedKeys.keys);
+            throw new StorageEncryptionError('Storage encryption configuration must retain the legacy key');
+        }
+        try {
+            return legacyKey.toString('hex');
+        }
+        finally {
+            clearKeys(resolvedKeys.keys);
+        }
+    }
+    const keyPath = persistentKeyPath(env);
+    if (!keyPath) {
+        throw new StorageEncryptionError('DATA_DIR must be selected before provisioning the encryption key');
+    }
+    const dataDirectory = path.dirname(keyPath);
+    if (hasKeyDependentApplicationState(dataDirectory)) {
+        throw new StorageEncryptionError('Existing encrypted application state requires its original encryption key');
+    }
+    const dataDirectoryExisted = fs.existsSync(dataDirectory);
+    let temporaryPath;
+    let published = false;
+    const generatedKey = crypto.randomBytes(32);
+    try {
+        fs.mkdirSync(dataDirectory, { recursive: true, mode: 0o700 });
+        const directoryStat = fs.lstatSync(dataDirectory);
+        if (!directoryStat.isDirectory() || directoryStat.isSymbolicLink()) {
+            throw new StorageEncryptionError('DATA_DIR must be a physical directory before key provisioning');
+        }
+        if (process.platform !== 'win32')
+            fs.chmodSync(dataDirectory, 0o700);
+        temporaryPath = path.join(dataDirectory, `.encryption_key.${process.pid}.${crypto.randomUUID()}.tmp`);
+        const descriptor = fs.openSync(temporaryPath, fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL, 0o600);
+        try {
+            if (process.platform !== 'win32')
+                fs.fchmodSync(descriptor, 0o600);
+            const serialized = Buffer.from(generatedKey.toString('hex'), 'utf8');
+            try {
+                let offset = 0;
+                while (offset < serialized.length) {
+                    const bytesWritten = fs.writeSync(descriptor, serialized, offset, serialized.length - offset);
+                    if (bytesWritten <= 0) {
+                        throw new StorageEncryptionError('Unable to completely write the persistent encryption key');
+                    }
+                    offset += bytesWritten;
+                }
+                fs.fsyncSync(descriptor);
+            }
+            finally {
+                serialized.fill(0);
+            }
+        }
+        finally {
+            fs.closeSync(descriptor);
+        }
+        // Hard-link publication is an atomic no-overwrite operation. Renaming a
+        // staging file could silently replace a key created by another process.
+        fs.linkSync(temporaryPath, keyPath);
+        published = true;
+        fs.unlinkSync(temporaryPath);
+        temporaryPath = undefined;
+        syncDirectory(dataDirectory);
+        const verified = readPersistentStorageKey(env);
+        if (!verified || !sameKey(generatedKey, verified)) {
+            verified?.fill(0);
+            throw new StorageEncryptionError('The persistent encryption key could not be verified after publication');
+        }
+        verified.fill(0);
+        return generatedKey.toString('hex');
+    }
+    catch (error) {
+        if (temporaryPath) {
+            try {
+                fs.unlinkSync(temporaryPath);
+            }
+            catch {
+                // Preserve the original failure; a private orphan is safer than
+                // continuing with an unpersisted key.
+            }
+        }
+        // Once the canonical name has been published, never remove it during
+        // rollback. Another process may already have selected that exact key; its
+        // removal could make subsequently encrypted state unrecoverable. Startup
+        // still fails closed, and the next launch revalidates the published file.
+        if (!dataDirectoryExisted && !published) {
+            try {
+                fs.rmdirSync(dataDirectory);
+            }
+            catch {
+                // Parent cleanup is best effort and never permits startup to continue.
+            }
+        }
+        if (error instanceof StorageEncryptionError)
+            throw error;
+        throw new StorageEncryptionError('Unable to durably provision the application encryption key');
+    }
+    finally {
+        generatedKey.fill(0);
+    }
+};
+const resolveStorageKeys = (env) => {
+    const rawKeyMap = env.STORAGE_ENCRYPTION_KEYS?.trim();
+    const requestedActiveKeyId = env.STORAGE_ENCRYPTION_ACTIVE_KEY_ID?.trim();
+    const rawEnvironmentKey = env.ENCRYPTION_KEY?.trim();
+    let environmentKey = rawEnvironmentKey
+        ? parseHexKey(rawEnvironmentKey, 'ENCRYPTION_KEY')
+        : undefined;
+    let persistentKey;
+    let versionedKeys;
+    try {
+        persistentKey = readPersistentStorageKey(env);
+        if (environmentKey &&
+            persistentKey &&
+            !sameKey(environmentKey, persistentKey)) {
+            throw new StorageEncryptionError('ENCRYPTION_KEY differs from the persistent storage encryption key');
+        }
+        const legacyKey = environmentKey ?? persistentKey;
+        if (rawKeyMap || requestedActiveKeyId) {
+            if (!rawKeyMap || !requestedActiveKeyId) {
+                throw new StorageEncryptionError('Versioned storage keys require a key map and active key ID');
+            }
+            versionedKeys = parseKeyMap(rawKeyMap);
+            if (!STORAGE_KEY_ID_PATTERN.test(requestedActiveKeyId) ||
+                !Object.prototype.hasOwnProperty.call(versionedKeys, requestedActiveKeyId)) {
+                throw new StorageEncryptionError('The active storage key ID is invalid or unavailable');
+            }
+            if (!legacyKey) {
+                throw new StorageEncryptionError('Versioned storage keys currently require a stable ENCRYPTION_KEY or DATA_DIR/.encryption_key legacy key');
+            }
+            if (!versionedKeys.legacy || !sameKey(versionedKeys.legacy, legacyKey)) {
+                throw new StorageEncryptionError('Versioned storage keys must retain the configured legacy key as key ID legacy');
+            }
+            environmentKey?.fill(0);
+            environmentKey = undefined;
+            persistentKey?.fill(0);
+            persistentKey = undefined;
+            const keys = versionedKeys;
+            versionedKeys = undefined;
+            return {
+                source: 'versioned-keyring',
+                activeKeyId: requestedActiveKeyId,
+                keys,
+            };
+        }
+        if (environmentKey) {
+            persistentKey?.fill(0);
+            persistentKey = undefined;
+            const key = environmentKey;
+            environmentKey = undefined;
+            return {
+                source: 'legacy-encryption-key',
+                activeKeyId: 'legacy',
+                keys: { legacy: key },
+            };
+        }
+        if (persistentKey) {
+            const key = persistentKey;
+            persistentKey = undefined;
+            return {
+                source: 'persistent-key-file',
+                activeKeyId: 'legacy',
+                keys: { legacy: key },
+            };
+        }
+        return undefined;
+    }
+    catch (error) {
+        environmentKey?.fill(0);
+        persistentKey?.fill(0);
+        if (versionedKeys)
+            clearKeys(versionedKeys);
+        throw error;
+    }
+};
+const fingerprintKeys = (keys) => Object.entries(keys)
+    .sort(([left], [right]) => left.localeCompare(right))
+    .map(([keyId, key]) => ({
+    keyId,
+    sha256Prefix: crypto
+        .createHash('sha256')
+        .update(key)
+        .digest('hex')
+        .slice(0, 16),
+}));
+/**
+ * Returns only non-secret key-set identity for recovery diagnostics. Invalid
+ * input is never reflected into the result and key bytes are never returned.
+ */
+export const inspectStorageKeyConfiguration = (env = process.env) => {
+    try {
+        const resolved = resolveStorageKeys(env);
+        if (!resolved) {
+            return {
+                status: 'missing',
+                source: 'none',
+                activeKeyId: null,
+                keyFingerprints: [],
+            };
+        }
+        try {
+            return {
+                status: 'configured',
+                source: resolved.source,
+                activeKeyId: resolved.activeKeyId,
+                keyFingerprints: fingerprintKeys(resolved.keys),
+            };
+        }
+        finally {
+            clearKeys(resolved.keys);
+        }
+    }
+    catch (error) {
+        const source = env.STORAGE_ENCRYPTION_KEYS?.trim() ||
+            env.STORAGE_ENCRYPTION_ACTIVE_KEY_ID?.trim()
+            ? 'versioned-keyring'
+            : env.ENCRYPTION_KEY?.trim()
+                ? 'legacy-encryption-key'
+                : env.DATA_DIR?.trim()
+                    ? 'persistent-key-file'
+                    : 'none';
+        return {
+            status: 'invalid',
+            source,
+            activeKeyId: null,
+            keyFingerprints: [],
+            // StorageEncryptionError messages are static descriptions and never
+            // carry key material; anything else stays unreflected.
+            ...(error instanceof StorageEncryptionError
+                ? { reason: error.message }
+                : {}),
+        };
+    }
+};
+/**
+ * Builds a fail-closed storage keyring. Existing ENCRYPTION_KEY and
+ * DATA_DIR/.encryption_key deployments remain usable, while a JSON key map
+ * enables rotation without losing reads. This factory never writes key data.
+ */
+export const createStorageKeyringFromEnvironment = (env = process.env) => {
+    const resolved = resolveStorageKeys(env);
+    if (!resolved) {
+        throw new StorageEncryptionError('Storage encryption requires STORAGE_ENCRYPTION_KEYS, ENCRYPTION_KEY, or DATA_DIR/.encryption_key');
+    }
+    try {
+        return new Aes256GcmKeyring(resolved.activeKeyId, resolved.keys);
+    }
+    finally {
+        clearKeys(resolved.keys);
+    }
+};
+/**
+ * Read the legacy application key for the offline SQLite migration command.
+ * This is deliberately read-only: it never provisions state, and callers
+ * must keep the returned secret out of logs and reports.
+ */
+export const resolveLegacyEncryptionKeyForMigration = (env) => {
+    const resolved = resolveStorageKeys(env);
+    if (!resolved?.keys.legacy) {
+        if (resolved)
+            clearKeys(resolved.keys);
+        throw new StorageEncryptionError('SQLite migration requires the source legacy encryption key');
+    }
+    try {
+        return resolved.keys.legacy.toString('hex');
+    }
+    finally {
+        clearKeys(resolved.keys);
+    }
+};
+export const createBlobStore = (options) => {
+    const env = options.env ?? process.env;
+    const backend = env.BLOB_STORE_BACKEND?.trim().toLowerCase() || 'local';
+    if (backend === 's3') {
+        if (!options.postgresDatabase) {
+            throw new BlobStoreError('invalid-input', 'BLOB_STORE_BACKEND=s3 requires the shared PostgreSQL database');
+        }
+        return createS3EncryptedBlobStore({
+            database: options.postgresDatabase,
+            keyring: createStorageKeyringFromEnvironment(env),
+            env: env,
+            ...(options.quotaPolicy ? { quotaPolicy: options.quotaPolicy } : {}),
+            ...(options.chunkBytes !== undefined
+                ? { chunkBytes: options.chunkBytes }
+                : {}),
+            ...(options.maxObjectBytes !== undefined
+                ? { maxObjectBytes: options.maxObjectBytes }
+                : {}),
+        });
+    }
+    if (backend !== 'local') {
+        throw new BlobStoreError('invalid-input', 'BLOB_STORE_BACKEND must be local or s3');
+    }
+    const localOptions = {
+        rootDirectory: options.rootDirectory,
+        keyring: createStorageKeyringFromEnvironment(env),
+        ...(options.quotaPolicy ? { quotaPolicy: options.quotaPolicy } : {}),
+        ...(options.chunkBytes !== undefined
+            ? { chunkBytes: options.chunkBytes }
+            : {}),
+        ...(options.maxObjectBytes !== undefined
+            ? { maxObjectBytes: options.maxObjectBytes }
+            : {}),
+    };
+    return new LocalEncryptedBlobStore(localOptions);
+};
+export const createVectorStore = (options) => {
+    const env = options.env ?? process.env;
+    const backend = env.VECTOR_STORE_BACKEND?.trim().toLowerCase() || 'embedded';
+    if (backend === 'pgvector') {
+        if (!options.postgresDatabase) {
+            throw new VectorStoreError('invalid-input', 'VECTOR_STORE_BACKEND=pgvector requires the shared PostgreSQL database');
+        }
+        return new PgVectorStore({
+            database: options.postgresDatabase,
+            ...(options.principalResolver
+                ? { principalResolver: options.principalResolver }
+                : {}),
+        });
+    }
+    if (backend !== 'embedded') {
+        throw new VectorStoreError('invalid-input', 'VECTOR_STORE_BACKEND must be embedded or pgvector');
+    }
+    if (!options.database) {
+        throw new VectorStoreError('invalid-input', 'VECTOR_STORE_BACKEND=embedded requires the selected SQLite database');
+    }
+    return new SqliteEncryptedVectorStore({
+        database: options.database,
+        keyring: createStorageKeyringFromEnvironment(env),
+        ...(options.principalResolver
+            ? { principalResolver: options.principalResolver }
+            : {}),
+        ...(options.maxCandidates !== undefined
+            ? { maxCandidates: options.maxCandidates }
+            : {}),
+        ...(options.maxCandidateBytes !== undefined
+            ? { maxCandidateBytes: options.maxCandidateBytes }
+            : {}),
+        ...(options.maxScoringComponents !== undefined
+            ? { maxScoringComponents: options.maxScoringComponents }
+            : {}),
+    });
+};
+//# sourceMappingURL=storageFactory.js.map

package/backend/dist/platform/storage/storageFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storageFactory.js","sourceRoot":"","sources":["../../../src/platform/storage/storageFactory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAM7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EACL,cAAc,GAGf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,GAExB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EACL,0BAA0B,GAE3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,gBAAgB,GAGjB,MAAM,kBAAkB,CAAC;AAuE1B,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAC1C,MAAM,sBAAsB,GAAG,mCAAmC,CAAC;AAEnE,MAAM,WAAW,GAAG,CAAC,KAAc,EAAE,WAAmB,EAAU,EAAE;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,sBAAsB,CAC9B,GAAG,WAAW,4CAA4C,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,QAAgB,EAA0B,EAAE;IAC/D,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAY,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,CAC9B,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,sBAAsB,CAC9B,+CAA+C,CAChD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,sBAAsB,CAC9B,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAC;IAC3D,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,sBAAsB,CAC9B,oDAAoD,CACrD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,KAAa,EAAW,EAAE,CACvD,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAEtE,MAAM,SAAS,GAAG,CAAC,IAAsC,EAAQ,EAAE;IACjE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CACxB,GAA8B,EACV,EAAE;IACtB,MAAM,gBAAgB,GAAG,GAAG,CAAC,QAAQ,CAAC;IACtC,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,EAAE;QAC3D,OAAO,SAAS,CAAC;IACnB,IACE,gBAAgB,CAAC,IAAI,EAAE,KAAK,gBAAgB;QAC5C,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAClC,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,CAC/B,GAA8B,EACV,EAAE;IACtB,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAE/B,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;IAC9C,IAAI,UAAkB,CAAC;IACvB,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,MAAM,IAAI,KAAK;YACf,KAAK,CAAC,IAAI,KAAK,QAAQ,EACvB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;YAChB,CAAC,KAAK,CAAC,MAAM,EAAE;YACf,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACxB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACxB,MAAM,CAAC,KAAK,KAAK,CAAC;YAClB,MAAM,CAAC,IAAI,IAAI,CAAC;YAChB,MAAM,CAAC,IAAI,GAAG,6BAA6B,EAC3C,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,kEAAkE;YAClE,iEAAiE;YACjE,oEAAoE;YACpE,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,sBAAsB,CAC9B,wEAAwE,CACzE,CAAC;YACJ,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzC,IACE,SAAS,GAAG,6BAA6B;YACzC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACxB,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YACxB,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YAC1B,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAChC,KAAK,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG;YAC5B,KAAK,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,EAC5B,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAChB,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EACtD,mCAAmC,CACpC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAC;QACzD,MAAM,IAAI,sBAAsB,CAC9B,6DAA6D,CAC9D,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAQ,EAAE;IAChD,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3D,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC;AACH,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,GAAG,GAA8B,OAAO,CAAC,GAAG,EACpC,EAAE;IACV,MAAM,gBAAgB,GAAG,GAAG,CAAC,cAAc,CAAC;IAC5C,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;QAC9D,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,gBAAgB,EAAE,CAAC;YACjD,MAAM,IAAI,sBAAsB,CAC9B,gEAAgE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,IAAI,sBAAsB,CAC9B,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,sBAAsB,CAC9B,kEAAkE,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,+BAA+B,CAAC,aAAa,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,sBAAsB,CAC9B,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,oBAAoB,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,aAAiC,CAAC;IACtC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;YACnE,MAAM,IAAI,sBAAsB,CAC9B,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAErE,aAAa,GAAG,IAAI,CAAC,IAAI,CACvB,aAAa,EACb,mBAAmB,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,CAC5D,CAAC;QACF,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAC5B,aAAa,EACb,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAClE,KAAK,CACN,CAAC;QACF,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;YACrE,IAAI,CAAC;gBACH,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,OAAO,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;oBAClC,MAAM,YAAY,GAAG,EAAE,CAAC,SAAS,CAC/B,UAAU,EACV,UAAU,EACV,MAAM,EACN,UAAU,CAAC,MAAM,GAAG,MAAM,CAC3B,CAAC;oBACF,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;wBACtB,MAAM,IAAI,sBAAsB,CAC9B,0DAA0D,CAC3D,CAAC;oBACJ,CAAC;oBACD,MAAM,IAAI,YAAY,CAAC;gBACzB,CAAC;gBACD,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC3B,CAAC;oBAAS,CAAC;gBACT,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACpC,SAAS,GAAG,IAAI,CAAC;QACjB,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC7B,aAAa,GAAG,SAAS,CAAC;QAC1B,aAAa,CAAC,aAAa,CAAC,CAAC;QAE7B,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClD,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,sBAAsB,CAC9B,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,sCAAsC;YACxC,CAAC;QACH,CAAC;QACD,qEAAqE;QACrE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,CAAC,oBAAoB,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,uEAAuE;YACzE,CAAC;QACH,CAAC;QACD,IAAI,KAAK,YAAY,sBAAsB;YAAE,MAAM,KAAK,CAAC;QACzD,MAAM,IAAI,sBAAsB,CAC9B,4DAA4D,CAC7D,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,GAA8B,EACG,EAAE;IACnC,MAAM,SAAS,GAAG,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;IACtD,MAAM,oBAAoB,GAAG,GAAG,CAAC,gCAAgC,EAAE,IAAI,EAAE,CAAC;IAC1E,MAAM,iBAAiB,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,cAAc,GAAG,iBAAiB;QACpC,CAAC,CAAC,WAAW,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;QAClD,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,aAAiC,CAAC;IACtC,IAAI,aAAiD,CAAC;IACtD,IAAI,CAAC;QACH,aAAa,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAE9C,IACE,cAAc;YACd,aAAa;YACb,CAAC,OAAO,CAAC,cAAc,EAAE,aAAa,CAAC,EACvC,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,cAAc,IAAI,aAAa,CAAC;QAElD,IAAI,SAAS,IAAI,oBAAoB,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACxC,MAAM,IAAI,sBAAsB,CAC9B,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YACD,aAAa,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACvC,IACE,CAAC,sBAAsB,CAAC,IAAI,CAAC,oBAAoB,CAAC;gBAClD,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CACnC,aAAa,EACb,oBAAoB,CACrB,EACD,CAAC;gBACD,MAAM,IAAI,sBAAsB,CAC9B,qDAAqD,CACtD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,sBAAsB,CAC9B,yGAAyG,CAC1G,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,sBAAsB,CAC9B,+EAA+E,CAChF,CAAC;YACJ,CAAC;YACD,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,cAAc,GAAG,SAAS,CAAC;YAC3B,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,aAAa,GAAG,SAAS,CAAC;YAC1B,MAAM,IAAI,GAAG,aAAa,CAAC;YAC3B,aAAa,GAAG,SAAS,CAAC;YAC1B,OAAO;gBACL,MAAM,EAAE,mBAAmB;gBAC3B,WAAW,EAAE,oBAAoB;gBACjC,IAAI;aACL,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,aAAa,GAAG,SAAS,CAAC;YAC1B,MAAM,GAAG,GAAG,cAAc,CAAC;YAC3B,cAAc,GAAG,SAAS,CAAC;YAC3B,OAAO;gBACL,MAAM,EAAE,uBAAuB;gBAC/B,WAAW,EAAE,QAAQ;gBACrB,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;aACtB,CAAC;QACJ,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,aAAa,CAAC;YAC1B,aAAa,GAAG,SAAS,CAAC;YAC1B,OAAO;gBACL,MAAM,EAAE,qBAAqB;gBAC7B,WAAW,EAAE,QAAQ;gBACrB,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE;aACtB,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,aAAa;YAAE,SAAS,CAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,IAAsC,EACJ,EAAE,CACpC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;KACjB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;KACpD,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACtB,KAAK;IACL,YAAY,EAAE,MAAM;SACjB,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;CAChB,CAAC,CAAC,CAAC;AAER;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,GAAG,GAA8B,OAAO,CAAC,GAAG,EACT,EAAE;IACrC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,IAAI;gBACjB,eAAe,EAAE,EAAE;aACpB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,eAAe,EAAE,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC;aAChD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE;YACnC,GAAG,CAAC,gCAAgC,EAAE,IAAI,EAAE;YAC1C,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE;gBAC1B,CAAC,CAAC,uBAAuB;gBACzB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE;oBACpB,CAAC,CAAC,qBAAqB;oBACvB,CAAC,CAAC,MAAM,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM;YACN,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,EAAE;YACnB,oEAAoE;YACpE,uDAAuD;YACvD,GAAG,CAAC,KAAK,YAAY,sBAAsB;gBACzC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE;gBAC3B,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CACjD,GAAG,GAA8B,OAAO,CAAC,GAAG,EAC1B,EAAE;IACpB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,sBAAsB,CAC9B,kGAAkG,CACnG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CACpD,GAA8B,EACtB,EAAE;IACV,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3B,IAAI,QAAQ;YAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,IAAI,sBAAsB,CAC9B,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAqC,EAC1B,EAAE;IACb,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC;IACxE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,0BAA0B,CAAC;YAChC,QAAQ,EAAE,OAAO,CAAC,gBAAgB;YAClC,OAAO,EAAE,mCAAmC,CAAC,GAAG,CAAC;YACjD,GAAG,EAAE,GAAwB;YAC7B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;gBACpC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,wCAAwC,CACzC,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAmC;QACnD,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,OAAO,EAAE,mCAAmC,CAAC,GAAG,CAAC;QACjD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;YACtC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,OAAO,IAAI,uBAAuB,CAAC,YAAY,CAAC,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAA0C,EAC7B,EAAE;IACf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC;IAC7E,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,IAAI,gBAAgB,CACxB,eAAe,EACf,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,aAAa,CAAC;YACvB,QAAQ,EAAE,OAAO,CAAC,gBAAgB;YAClC,GAAG,CAAC,OAAO,CAAC,iBAAiB;gBAC3B,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,gBAAgB,CACxB,eAAe,EACf,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,gBAAgB,CACxB,eAAe,EACf,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,0BAA0B,CAAC;QACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,mCAAmC,CAAC,GAAG,CAAC;QACjD,GAAG,CAAC,OAAO,CAAC,iBAAiB;YAC3B,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,oBAAoB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC,CAAC"}

package/backend/dist/platform/storage/storageSchemaContracts.d.ts

@@ -0,0 +1,22 @@
+/**
+ * This table is deliberately backend-neutral. It is the durable link between
+ * an application resource and a private blob; physical S3 keys and local paths
+ * never cross this boundary.
+ */
+export declare const SQLITE_BLOB_REFERENCE_SCHEMA_SQL = "\n  CREATE TABLE IF NOT EXISTS platform_blob_references (\n    blob_id TEXT PRIMARY KEY,\n    owner_user_id TEXT NOT NULL,\n    resource_type TEXT NOT NULL,\n    resource_id TEXT NOT NULL,\n    purpose TEXT NOT NULL,\n    created_at INTEGER NOT NULL,\n    UNIQUE(resource_type, resource_id, purpose)\n  );\n\n  CREATE INDEX IF NOT EXISTS idx_platform_blob_references_owner\n    ON platform_blob_references(owner_user_id, purpose, created_at);\n  CREATE INDEX IF NOT EXISTS idx_platform_blob_references_resource\n    ON platform_blob_references(resource_type, resource_id);\n";
+/** Added after the immutable v5 blob-reference protocol. */
+export declare const SQLITE_BLOB_QUOTA_SCHEMA_SQL = "\n  CREATE TABLE IF NOT EXISTS platform_blob_quota_usage (\n    owner_user_id TEXT PRIMARY KEY,\n    stored_bytes INTEGER NOT NULL DEFAULT 0 CHECK(stored_bytes >= 0),\n    reserved_bytes INTEGER NOT NULL DEFAULT 0 CHECK(reserved_bytes >= 0),\n    updated_at INTEGER NOT NULL\n  );\n\n  CREATE TABLE IF NOT EXISTS platform_blob_quota_reservations (\n    id TEXT PRIMARY KEY,\n    owner_user_id TEXT NOT NULL,\n    purpose TEXT NOT NULL,\n    reserved_bytes INTEGER NOT NULL CHECK(reserved_bytes >= 0),\n    consumed_bytes INTEGER NOT NULL CHECK(consumed_bytes >= 0),\n    expires_at INTEGER NOT NULL,\n    created_at INTEGER NOT NULL,\n    updated_at INTEGER NOT NULL\n  );\n\n  CREATE INDEX IF NOT EXISTS idx_platform_blob_quota_reservations_expiry\n    ON platform_blob_quota_reservations(expires_at, id);\n  CREATE INDEX IF NOT EXISTS idx_platform_blob_quota_reservations_owner\n    ON platform_blob_quota_reservations(owner_user_id, expires_at);\n\n  CREATE TABLE IF NOT EXISTS platform_blob_quota_objects (\n    blob_id TEXT PRIMARY KEY,\n    owner_user_id TEXT NOT NULL,\n    purpose TEXT NOT NULL,\n    stored_bytes INTEGER NOT NULL CHECK(stored_bytes >= 0),\n    created_at INTEGER NOT NULL\n  );\n\n  CREATE INDEX IF NOT EXISTS idx_platform_blob_quota_objects_owner\n    ON platform_blob_quota_objects(owner_user_id, purpose, created_at);\n";
+export declare const POSTGRES_BLOB_SCHEMA_SQL = "\n  CREATE TABLE platform_blob_objects (\n    id TEXT PRIMARY KEY,\n    owner_user_id TEXT NOT NULL,\n    purpose TEXT NOT NULL,\n    object_key TEXT NOT NULL UNIQUE,\n    encrypted_bytes BIGINT NOT NULL CHECK (encrypted_bytes >= 0),\n    plaintext_bytes BIGINT NOT NULL CHECK (plaintext_bytes >= 0),\n    plaintext_sha256 TEXT NOT NULL CHECK (plaintext_sha256 ~ '^[0-9a-f]{64}$'),\n    ciphertext_sha256 TEXT NOT NULL CHECK (ciphertext_sha256 ~ '^[0-9a-f]{64}$'),\n    wrapped_data_key JSONB NOT NULL,\n    metadata_iv BYTEA NOT NULL,\n    metadata_tag BYTEA NOT NULL,\n    encrypted_metadata BYTEA NOT NULL,\n    state TEXT NOT NULL CHECK (state IN ('ready', 'deleting')),\n    created_at BIGINT NOT NULL,\n    updated_at BIGINT NOT NULL\n  );\n\n  CREATE INDEX idx_platform_blob_objects_owner\n    ON platform_blob_objects(owner_user_id, purpose, created_at);\n  CREATE INDEX idx_platform_blob_objects_state\n    ON platform_blob_objects(state, updated_at);\n\n  CREATE TABLE platform_generated_media (\n    id TEXT PRIMARY KEY,\n    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n    kind TEXT NOT NULL CHECK (kind IN ('image', 'audio', 'video')),\n    encrypted_prompt TEXT NOT NULL,\n    model TEXT NOT NULL,\n    plugin_id TEXT,\n    blob_id TEXT NOT NULL REFERENCES platform_blob_objects(id) ON DELETE RESTRICT,\n    mime_type TEXT NOT NULL,\n    size_label TEXT,\n    quality TEXT,\n    encrypted_metadata TEXT,\n    created_at BIGINT NOT NULL\n  );\n\n  CREATE INDEX idx_platform_generated_media_user\n    ON platform_generated_media(user_id, kind, created_at DESC);\n  CREATE INDEX idx_platform_generated_media_blob\n    ON platform_generated_media(blob_id);\n\n  CREATE TABLE platform_blob_references (\n    blob_id TEXT PRIMARY KEY,\n    owner_user_id TEXT NOT NULL,\n    resource_type TEXT NOT NULL,\n    resource_id TEXT NOT NULL,\n    purpose TEXT NOT NULL,\n    created_at BIGINT NOT NULL,\n    UNIQUE(resource_type, resource_id, purpose)\n  );\n\n  CREATE INDEX idx_platform_blob_references_owner\n    ON platform_blob_references(owner_user_id, purpose, created_at);\n  CREATE INDEX idx_platform_blob_references_resource\n    ON platform_blob_references(resource_type, resource_id);\n\n  CREATE TABLE platform_blob_quota_usage (\n    owner_user_id TEXT PRIMARY KEY,\n    stored_bytes BIGINT NOT NULL DEFAULT 0 CHECK(stored_bytes >= 0),\n    reserved_bytes BIGINT NOT NULL DEFAULT 0 CHECK(reserved_bytes >= 0),\n    updated_at BIGINT NOT NULL\n  );\n\n  CREATE TABLE platform_blob_quota_reservations (\n    id TEXT PRIMARY KEY,\n    owner_user_id TEXT NOT NULL,\n    purpose TEXT NOT NULL,\n    reserved_bytes BIGINT NOT NULL CHECK(reserved_bytes >= 0),\n    consumed_bytes BIGINT NOT NULL CHECK(consumed_bytes >= 0),\n    expires_at BIGINT NOT NULL,\n    created_at BIGINT NOT NULL,\n    updated_at BIGINT NOT NULL\n  );\n\n  CREATE INDEX idx_platform_blob_quota_reservations_expiry\n    ON platform_blob_quota_reservations(expires_at, id);\n  CREATE INDEX idx_platform_blob_quota_reservations_owner\n    ON platform_blob_quota_reservations(owner_user_id, expires_at);\n\n  CREATE TABLE platform_blob_quota_objects (\n    blob_id TEXT PRIMARY KEY,\n    owner_user_id TEXT NOT NULL,\n    purpose TEXT NOT NULL,\n    stored_bytes BIGINT NOT NULL CHECK(stored_bytes >= 0),\n    created_at BIGINT NOT NULL\n  );\n\n  CREATE INDEX idx_platform_blob_quota_objects_owner\n    ON platform_blob_quota_objects(owner_user_id, purpose, created_at);\n\n  CREATE TABLE platform_media_generation_jobs (\n    id TEXT PRIMARY KEY,\n    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n    provider_job_id TEXT NOT NULL,\n    plugin_id TEXT NOT NULL,\n    model TEXT NOT NULL,\n    encrypted_prompt TEXT NOT NULL,\n    status TEXT NOT NULL CHECK(status IN ('pending', 'in_progress', 'completed', 'failed')),\n    encrypted_options TEXT,\n    gallery_id TEXT REFERENCES platform_generated_media(id) ON DELETE SET NULL,\n    encrypted_error TEXT,\n    created_at BIGINT NOT NULL,\n    updated_at BIGINT NOT NULL\n  );\n\n  CREATE UNIQUE INDEX idx_platform_media_jobs_provider\n    ON platform_media_generation_jobs(user_id, plugin_id, provider_job_id);\n  CREATE INDEX idx_platform_media_jobs_user_status\n    ON platform_media_generation_jobs(user_id, status, updated_at DESC);\n";
+export declare const POSTGRES_VECTOR_SCHEMA_SQL = "\n  CREATE EXTENSION IF NOT EXISTS vector;\n\n  CREATE TABLE platform_vector_entries (\n    namespace TEXT NOT NULL,\n    id TEXT NOT NULL,\n    owner_user_id TEXT NOT NULL,\n    resource_id TEXT NOT NULL,\n    model TEXT NOT NULL,\n    dimensions INTEGER NOT NULL CHECK (dimensions > 0 AND dimensions <= 16000),\n    embedding_version TEXT NOT NULL,\n    source_revision TEXT NOT NULL,\n    embedding vector NOT NULL,\n    attributes JSONB NOT NULL DEFAULT '{}'::jsonb,\n    created_at BIGINT NOT NULL,\n    updated_at BIGINT NOT NULL,\n    PRIMARY KEY (namespace, owner_user_id, id),\n    CHECK (vector_dims(embedding) = dimensions),\n    CHECK (jsonb_typeof(attributes) = 'object')\n  );\n\n  CREATE TABLE platform_vector_acl (\n    namespace TEXT NOT NULL,\n    owner_user_id TEXT NOT NULL,\n    vector_id TEXT NOT NULL,\n    principal_type TEXT NOT NULL CHECK (principal_type IN ('user', 'group')),\n    principal_id TEXT NOT NULL,\n    PRIMARY KEY (\n      namespace,\n      owner_user_id,\n      vector_id,\n      principal_type,\n      principal_id\n    ),\n    FOREIGN KEY (namespace, owner_user_id, vector_id)\n      REFERENCES platform_vector_entries(namespace, owner_user_id, id)\n      ON DELETE CASCADE\n  );\n\n  CREATE INDEX idx_platform_vectors_scope\n    ON platform_vector_entries(\n      namespace,\n      model,\n      dimensions,\n      embedding_version,\n      owner_user_id\n    );\n  CREATE INDEX idx_platform_vectors_resource\n    ON platform_vector_entries(namespace, resource_id, owner_user_id);\n  CREATE INDEX idx_platform_vectors_attributes\n    ON platform_vector_entries USING GIN(attributes jsonb_path_ops);\n  CREATE INDEX idx_platform_vector_acl_principal\n    ON platform_vector_acl(\n      principal_type,\n      principal_id,\n      namespace,\n      owner_user_id,\n      vector_id\n    );\n\n  CREATE TABLE platform_persona_memories (\n    id TEXT PRIMARY KEY,\n    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n    persona_id TEXT NOT NULL REFERENCES personas(id) ON DELETE CASCADE,\n    encrypted_content TEXT NOT NULL,\n    timestamp BIGINT NOT NULL,\n    encrypted_context TEXT,\n    importance_score DOUBLE PRECISION NOT NULL DEFAULT 0.5\n      CHECK(importance_score >= 0 AND importance_score <= 1),\n    memory_type TEXT NOT NULL DEFAULT 'general'\n      CHECK(memory_type IN ('fact', 'preference', 'experience', 'emotional', 'context', 'instruction', 'general')),\n    access_count BIGINT NOT NULL DEFAULT 0 CHECK(access_count >= 0),\n    last_accessed BIGINT,\n    decay_factor DOUBLE PRECISION NOT NULL DEFAULT 1.0\n      CHECK(decay_factor >= 0 AND decay_factor <= 1),\n    encrypted_consolidated_from TEXT\n  );\n\n  CREATE INDEX idx_platform_persona_memories_owner\n    ON platform_persona_memories(user_id, persona_id, timestamp DESC);\n  CREATE INDEX idx_platform_persona_memories_core\n    ON platform_persona_memories(user_id, persona_id, memory_type, importance_score DESC);\n\n  CREATE TABLE platform_persona_states (\n    persona_id TEXT PRIMARY KEY REFERENCES personas(id) ON DELETE CASCADE,\n    user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n    encrypted_runtime_state TEXT NOT NULL,\n    encrypted_mutation_log TEXT NOT NULL,\n    last_updated BIGINT NOT NULL,\n    version INTEGER NOT NULL DEFAULT 1 CHECK(version >= 1)\n  );\n\n  CREATE INDEX idx_platform_persona_states_user\n    ON platform_persona_states(user_id, last_updated DESC);\n";
+export interface StoragePostgresMigration {
+    version: number;
+    name: string;
+    checksum: string;
+    sql: string;
+    rollbackPlan: string;
+    minimumCompatibleVersion: number;
+}
+/** Checksums are immutable release artifacts: SHA-256(version\nname\nsql). */
+export declare const POSTGRES_BLOB_MIGRATION: StoragePostgresMigration;
+export declare const POSTGRES_VECTOR_MIGRATION: StoragePostgresMigration;
+//# sourceMappingURL=storageSchemaContracts.d.ts.map

package/backend/dist/platform/storage/storageSchemaContracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storageSchemaContracts.d.ts","sourceRoot":"","sources":["../../../src/platform/storage/storageSchemaContracts.ts"],"names":[],"mappings":"AAiBA;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,mkBAe5C,CAAC;AAEF,4DAA4D;AAC5D,eAAO,MAAM,4BAA4B,y0CAkCxC,CAAC;AAEF,eAAO,MAAM,wBAAwB,ytIAgHpC,CAAC;AAEF,eAAO,MAAM,0BAA0B,q3GA8FtC,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,EAAE,wBAQrC,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,wBAQvC,CAAC"}