milens 0.6.2 → 0.6.3

package/dist/gateway/observability.d.ts

@@ -0,0 +1,83 @@
+import type { CostRecord, Intent, Tier } from './types.js';
+import type BetterSqlite3 from 'better-sqlite3';
+export declare class CostTracker {
+    private rawDb;
+    private stmts;
+    constructor(rawDb: BetterSqlite3.Database);
+    private prepareStatements;
+    /** Record a completed request */
+    record(data: {
+        provider: string;
+        model: string;
+        tokensIn: number;
+        tokensOut: number;
+        costEstimate: number;
+        durationMs: number;
+        symbolIds: string[];
+        filePaths: string[];
+        intent: Intent;
+        complexityScore: number;
+        tier: Tier;
+        cacheHit: boolean;
+    }): string;
+    /** Cost breakdown by provider + model */
+    getCostByProvider(windowSql?: string): {
+        provider: string;
+        model: string;
+        request_count: number;
+        total_tokens_in: number;
+        total_tokens_out: number;
+        total_cost: number;
+        avg_duration: number;
+    }[];
+    /** Cost breakdown by file path */
+    getCostByFile(limit?: number, windowSql?: string): {
+        file_path: string;
+        request_count: number;
+        total_tokens: number;
+        total_cost: number;
+    }[];
+    /** Cost breakdown by intent */
+    getCostByIntent(windowSql?: string): {
+        intent: string;
+        request_count: number;
+        total_tokens: number;
+        total_cost: number;
+        avg_complexity: number;
+    }[];
+    /** Cost breakdown by tier */
+    getCostByTier(windowSql?: string): {
+        tier: string;
+        request_count: number;
+        total_cost: number;
+        avg_duration: number;
+    }[];
+    /** Cache hit/miss stats and savings */
+    getCacheSavings(windowSql?: string): {
+        cacheHits: any;
+        cacheMisses: any;
+        costSaved: any;
+        tokensSaved: any;
+        hitRate: number;
+    };
+    /** Most expensive symbols */
+    getTopExpensiveSymbols(limit?: number, windowSql?: string): {
+        symbol_id: string;
+        request_count: number;
+        total_cost: number;
+        total_tokens: number;
+    }[];
+    /** Overall summary */
+    getSummary(windowSql?: string): {
+        totalRequests: any;
+        totalTokensIn: any;
+        totalTokensOut: any;
+        totalCost: any;
+        avgDuration: any;
+        firstRequest: any;
+        lastRequest: any;
+    };
+    /** Get recent requests for debugging */
+    getRecentRequests(limit?: number): CostRecord[];
+}
+//# sourceMappingURL=observability.d.ts.map

package/dist/gateway/observability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.d.ts","sourceRoot":"","sources":["../../src/gateway/observability.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,aAAa,MAAM,gBAAgB,CAAC;AAEhD,qBAAa,WAAW;IAGV,OAAO,CAAC,KAAK;IAFzB,OAAO,CAAC,KAAK,CAA+C;gBAExC,KAAK,EAAE,aAAa,CAAC,QAAQ;IAIjD,OAAO,CAAC,iBAAiB;IAyFzB,iCAAiC;IACjC,MAAM,CAAC,IAAI,EAAE;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,IAAI,CAAC;QACX,QAAQ,EAAE,OAAO,CAAC;KACnB,GAAG,MAAM;IAiBV,yCAAyC;IACzC,iBAAiB,CAAC,SAAS,SAAa,GACS;QAC7C,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAChC,aAAa,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QACzE,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;KAC1C,EAAE;IAGL,kCAAkC;IAClC,aAAa,CAAC,KAAK,SAAK,EAAE,SAAS,SAAa,GACI;QAChD,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;KACpF,EAAE;IAGL,+BAA+B;IAC/B,eAAe,CAAC,SAAS,SAAa,GACS;QAC3C,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;KACzG,EAAE;IAGL,6BAA6B;IAC7B,aAAa,CAAC,SAAS,SAAa,GACS;QACzC,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;KAC/E,EAAE;IAGL,uCAAuC;IACvC,eAAe,CAAC,SAAS,SAAa;;;;;;;IAatC,6BAA6B;IAC7B,sBAAsB,CAAC,KAAK,SAAK,EAAE,SAAS,SAAa,GACD;QACpD,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;KACpF,EAAE;IAGL,sBAAsB;IACtB,UAAU,CAAC,SAAS,SAAa;;;;;;;;;IAajC,wCAAwC;IACxC,iBAAiB,CAAC,KAAK,SAAK,GAAG,UAAU,EAAE;CAkB5C"}

package/dist/gateway/observability.js

@@ -0,0 +1,152 @@
+// ── Observability — per-function / per-file cost tracking ──
+import { randomUUID } from 'node:crypto';
+export class CostTracker {
+    rawDb;
+    stmts;
+    constructor(rawDb) {
+        this.rawDb = rawDb;
+        this.stmts = this.prepareStatements();
+    }
+    prepareStatements() {
+        return {
+            insert: this.rawDb.prepare(`INSERT INTO gateway_cost_log
+         (request_id, provider, model, tokens_in, tokens_out, cost_estimate, duration_ms,
+          symbol_ids, file_paths, intent, complexity_score, tier, cache_hit)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`),
+            byProvider: this.rawDb.prepare(`SELECT provider, model,
+           COUNT(*) as request_count,
+           SUM(tokens_in) as total_tokens_in,
+           SUM(tokens_out) as total_tokens_out,
+           SUM(cost_estimate) as total_cost,
+           AVG(duration_ms) as avg_duration
+         FROM gateway_cost_log
+         WHERE timestamp >= datetime('now', ?)
+         GROUP BY provider, model
+         ORDER BY total_cost DESC`),
+            byFile: this.rawDb.prepare(`SELECT jf.value as file_path,
+           COUNT(*) as request_count,
+           SUM(cl.tokens_in + cl.tokens_out) as total_tokens,
+           SUM(cl.cost_estimate) as total_cost
+         FROM gateway_cost_log cl, json_each(cl.file_paths) jf
+         WHERE cl.timestamp >= datetime('now', ?)
+         GROUP BY jf.value
+         ORDER BY total_cost DESC
+         LIMIT ?`),
+            byIntent: this.rawDb.prepare(`SELECT intent,
+           COUNT(*) as request_count,
+           SUM(tokens_in + tokens_out) as total_tokens,
+           SUM(cost_estimate) as total_cost,
+           AVG(complexity_score) as avg_complexity
+         FROM gateway_cost_log
+         WHERE timestamp >= datetime('now', ?)
+         GROUP BY intent
+         ORDER BY total_cost DESC`),
+            byTier: this.rawDb.prepare(`SELECT tier,
+           COUNT(*) as request_count,
+           SUM(cost_estimate) as total_cost,
+           AVG(duration_ms) as avg_duration
+         FROM gateway_cost_log
+         WHERE timestamp >= datetime('now', ?)
+         GROUP BY tier`),
+            cacheSavings: this.rawDb.prepare(`SELECT
+           SUM(CASE WHEN cache_hit = 1 THEN 1 ELSE 0 END) as cache_hits,
+           SUM(CASE WHEN cache_hit = 0 THEN 1 ELSE 0 END) as cache_misses,
+           SUM(CASE WHEN cache_hit = 1 THEN cost_estimate ELSE 0 END) as cost_saved,
+           SUM(CASE WHEN cache_hit = 1 THEN tokens_in + tokens_out ELSE 0 END) as tokens_saved
+         FROM gateway_cost_log
+         WHERE timestamp >= datetime('now', ?)`),
+            topSymbols: this.rawDb.prepare(`SELECT js.value as symbol_id,
+           COUNT(*) as request_count,
+           SUM(cl.cost_estimate) as total_cost,
+           SUM(cl.tokens_in + cl.tokens_out) as total_tokens
+         FROM gateway_cost_log cl, json_each(cl.symbol_ids) js
+         WHERE cl.timestamp >= datetime('now', ?)
+         GROUP BY js.value
+         ORDER BY total_cost DESC
+         LIMIT ?`),
+            summary: this.rawDb.prepare(`SELECT
+           COUNT(*) as total_requests,
+           SUM(tokens_in) as total_tokens_in,
+           SUM(tokens_out) as total_tokens_out,
+           SUM(cost_estimate) as total_cost,
+           AVG(duration_ms) as avg_duration,
+           MIN(timestamp) as first_request,
+           MAX(timestamp) as last_request
+         FROM gateway_cost_log
+         WHERE timestamp >= datetime('now', ?)`),
+            recentRequests: this.rawDb.prepare(`SELECT * FROM gateway_cost_log ORDER BY timestamp DESC LIMIT ?`),
+        };
+    }
+    /** Record a completed request */
+    record(data) {
+        const requestId = randomUUID();
+        this.stmts.insert.run(requestId, data.provider, data.model, data.tokensIn, data.tokensOut, data.costEstimate, data.durationMs, JSON.stringify(data.symbolIds), JSON.stringify(data.filePaths), data.intent, data.complexityScore, data.tier, data.cacheHit ? 1 : 0);
+        return requestId;
+    }
+    /** Cost breakdown by provider + model */
+    getCostByProvider(windowSql = '-30 days') {
+        return this.stmts.byProvider.all(windowSql);
+    }
+    /** Cost breakdown by file path */
+    getCostByFile(limit = 20, windowSql = '-30 days') {
+        return this.stmts.byFile.all(windowSql, limit);
+    }
+    /** Cost breakdown by intent */
+    getCostByIntent(windowSql = '-30 days') {
+        return this.stmts.byIntent.all(windowSql);
+    }
+    /** Cost breakdown by tier */
+    getCostByTier(windowSql = '-30 days') {
+        return this.stmts.byTier.all(windowSql);
+    }
+    /** Cache hit/miss stats and savings */
+    getCacheSavings(windowSql = '-30 days') {
+        const row = this.stmts.cacheSavings.get(windowSql);
+        return {
+            cacheHits: row?.cache_hits ?? 0,
+            cacheMisses: row?.cache_misses ?? 0,
+            costSaved: row?.cost_saved ?? 0,
+            tokensSaved: row?.tokens_saved ?? 0,
+            hitRate: row?.cache_hits
+                ? row.cache_hits / (row.cache_hits + row.cache_misses)
+                : 0,
+        };
+    }
+    /** Most expensive symbols */
+    getTopExpensiveSymbols(limit = 10, windowSql = '-30 days') {
+        return this.stmts.topSymbols.all(windowSql, limit);
+    }
+    /** Overall summary */
+    getSummary(windowSql = '-30 days') {
+        const row = this.stmts.summary.get(windowSql);
+        return {
+            totalRequests: row?.total_requests ?? 0,
+            totalTokensIn: row?.total_tokens_in ?? 0,
+            totalTokensOut: row?.total_tokens_out ?? 0,
+            totalCost: row?.total_cost ?? 0,
+            avgDuration: row?.avg_duration ?? 0,
+            firstRequest: row?.first_request ?? null,
+            lastRequest: row?.last_request ?? null,
+        };
+    }
+    /** Get recent requests for debugging */
+    getRecentRequests(limit = 10) {
+        return this.stmts.recentRequests.all(limit).map(r => ({
+            requestId: r.request_id,
+            timestamp: r.timestamp,
+            provider: r.provider,
+            model: r.model,
+            tokensIn: r.tokens_in,
+            tokensOut: r.tokens_out,
+            costEstimate: r.cost_estimate,
+            durationMs: r.duration_ms,
+            symbolIds: JSON.parse(r.symbol_ids || '[]'),
+            filePaths: JSON.parse(r.file_paths || '[]'),
+            intent: r.intent,
+            complexityScore: r.complexity_score,
+            tier: r.tier,
+            cacheHit: !!r.cache_hit,
+        }));
+    }
+}
+//# sourceMappingURL=observability.js.map

package/dist/gateway/observability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.js","sourceRoot":"","sources":["../../src/gateway/observability.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAE9D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,MAAM,OAAO,WAAW;IAGF;IAFZ,KAAK,CAA+C;IAE5D,YAAoB,KAA6B;QAA7B,UAAK,GAAL,KAAK,CAAwB;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACxC,CAAC;IAEO,iBAAiB;QACvB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CACxB;;;wDAGgD,CACjD;YACD,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAC5B;;;;;;;;;kCAS0B,CAC3B;YACD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CACxB;;;;;;;;iBAQS,CACV;YACD,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAC1B;;;;;;;;kCAQ0B,CAC3B;YACD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CACxB;;;;;;uBAMe,CAChB;YACD,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAC9B;;;;;;+CAMuC,CACxC;YACD,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAC5B;;;;;;;;iBAQS,CACV;YACD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CACzB;;;;;;;;;+CASuC,CACxC;YACD,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAChC,gEAAgE,CACjE;SACF,CAAC;IACJ,CAAC;IAED,iCAAiC;IACjC,MAAM,CAAC,IAaN;QACC,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CACnB,SAAS,EACT,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EACzB,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAChD,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAC9B,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACtB,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,yCAAyC;IACzC,iBAAiB,CAAC,SAAS,GAAG,UAAU;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAIvC,CAAC;IACN,CAAC;IAED,kCAAkC;IAClC,aAAa,CAAC,KAAK,GAAG,EAAE,EAAE,SAAS,GAAG,UAAU;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAE1C,CAAC;IACN,CAAC;IAED,+BAA+B;IAC/B,eAAe,CAAC,SAAS,GAAG,UAAU;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAErC,CAAC;IACN,CAAC;IAED,6BAA6B;IAC7B,aAAa,CAAC,SAAS,GAAG,UAAU;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAEnC,CAAC;IACN,CAAC;IAED,uCAAuC;IACvC,eAAe,CAAC,SAAS,GAAG,UAAU;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAQ,CAAC;QAC1D,OAAO;YACL,SAAS,EAAE,GAAG,EAAE,UAAU,IAAI,CAAC;YAC/B,WAAW,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC;YACnC,SAAS,EAAE,GAAG,EAAE,UAAU,IAAI,CAAC;YAC/B,WAAW,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC;YACnC,OAAO,EAAE,GAAG,EAAE,UAAU;gBACtB,CAAC,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC;gBACtD,CAAC,CAAC,CAAC;SACN,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,sBAAsB,CAAC,KAAK,GAAG,EAAE,EAAE,SAAS,GAAG,UAAU;QACvD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAE9C,CAAC;IACN,CAAC;IAED,sBAAsB;IACtB,UAAU,CAAC,SAAS,GAAG,UAAU;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAQ,CAAC;QACrD,OAAO;YACL,aAAa,EAAE,GAAG,EAAE,cAAc,IAAI,CAAC;YACvC,aAAa,EAAE,GAAG,EAAE,eAAe,IAAI,CAAC;YACxC,cAAc,EAAE,GAAG,EAAE,gBAAgB,IAAI,CAAC;YAC1C,SAAS,EAAE,GAAG,EAAE,UAAU,IAAI,CAAC;YAC/B,WAAW,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC;YACnC,YAAY,EAAE,GAAG,EAAE,aAAa,IAAI,IAAI;YACxC,WAAW,EAAE,GAAG,EAAE,YAAY,IAAI,IAAI;SACvC,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,iBAAiB,CAAC,KAAK,GAAG,EAAE;QAC1B,OAAQ,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/D,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,SAAS;YACrB,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,YAAY,EAAE,CAAC,CAAC,aAAa;YAC7B,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC;YAC3C,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC;YAC3C,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,eAAe,EAAE,CAAC,CAAC,gBAAgB;YACnC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;SACxB,CAAC,CAAC,CAAC;IACN,CAAC;CACF"}

package/dist/gateway/privacy.d.ts

@@ -0,0 +1,27 @@
+import type { ChatMessage, PrivacyRule, PrivacyDecision, MessageAnalysis } from './types.js';
+import type BetterSqlite3 from 'better-sqlite3';
+export declare class PrivacyFilter {
+    private rawDb;
+    private defaultRules;
+    private rulesCache;
+    private stmts;
+    constructor(rawDb: BetterSqlite3.Database, defaultRules?: PrivacyRule[]);
+    private prepareStatements;
+    /** Evaluate privacy decision for a request based on referenced files */
+    evaluate(analysis: MessageAnalysis): PrivacyDecision;
+    /** Mask sensitive content in messages — returns masked messages + unmask map */
+    maskMessages(messages: ChatMessage[], rules: PrivacyRule[]): {
+        masked: ChatMessage[];
+        unmaskMap: Map<string, string>;
+    };
+    /** Restore original content from masked tokens */
+    unmask(text: string, unmaskMap: Map<string, string>): string;
+    /** Add a privacy rule (persisted to DB) */
+    addRule(rule: PrivacyRule): void;
+    /** Remove a privacy rule */
+    removeRule(pathPattern: string): boolean;
+    /** List all rules */
+    listRules(): PrivacyRule[];
+    private loadRules;
+}
+//# sourceMappingURL=privacy.d.ts.map

package/dist/gateway/privacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../src/gateway/privacy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAiB,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC5G,OAAO,KAAK,aAAa,MAAM,gBAAgB,CAAC;AAEhD,qBAAa,aAAa;IAKtB,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,YAAY;IALtB,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,KAAK,CAAiD;gBAGpD,KAAK,EAAE,aAAa,CAAC,QAAQ,EAC7B,YAAY,GAAE,WAAW,EAAO;IAK1C,OAAO,CAAC,iBAAiB;IAUzB,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,eAAe;IA6BpD,gFAAgF;IAChF,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG;QAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE;IAsBtH,kDAAkD;IAClD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM;IAQ5D,2CAA2C;IAC3C,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAKhC,4BAA4B;IAC5B,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAMxC,qBAAqB;IACrB,SAAS,IAAI,WAAW,EAAE;IAI1B,OAAO,CAAC,SAAS;CAUlB"}

package/dist/gateway/privacy.js

@@ -0,0 +1,139 @@
+// ── Privacy filter — path-based sensitivity rules with masking ──
+import { randomBytes } from 'node:crypto';
+export class PrivacyFilter {
+    rawDb;
+    defaultRules;
+    rulesCache = null;
+    stmts;
+    constructor(rawDb, defaultRules = []) {
+        this.rawDb = rawDb;
+        this.defaultRules = defaultRules;
+        this.stmts = this.prepareStatements();
+    }
+    prepareStatements() {
+        return {
+            listRules: this.rawDb.prepare('SELECT * FROM gateway_privacy_rules ORDER BY path_pattern'),
+            addRule: this.rawDb.prepare(`INSERT OR REPLACE INTO gateway_privacy_rules (path_pattern, action, reason) VALUES (?, ?, ?)`),
+            removeRule: this.rawDb.prepare('DELETE FROM gateway_privacy_rules WHERE path_pattern = ?'),
+        };
+    }
+    /** Evaluate privacy decision for a request based on referenced files */
+    evaluate(analysis) {
+        const rules = this.loadRules();
+        const matched = [];
+        let highestAction = 'allow';
+        for (const file of analysis.files) {
+            for (const rule of rules) {
+                if (matchGlob(file, rule.pathPattern)) {
+                    matched.push(rule);
+                    highestAction = promoteAction(highestAction, rule.action);
+                }
+            }
+        }
+        // Also check symbol file paths
+        for (const sym of analysis.symbols) {
+            for (const rule of rules) {
+                if (matchGlob(sym.filePath, rule.pathPattern)) {
+                    if (!matched.some(m => m.pathPattern === rule.pathPattern)) {
+                        matched.push(rule);
+                        highestAction = promoteAction(highestAction, rule.action);
+                    }
+                }
+            }
+        }
+        return { action: highestAction, matchedRules: matched };
+    }
+    /** Mask sensitive content in messages — returns masked messages + unmask map */
+    maskMessages(messages, rules) {
+        const unmaskMap = new Map();
+        const masked = messages.map(msg => {
+            const content = typeof msg.content === 'string' ? msg.content : '';
+            if (!content)
+                return msg;
+            let result = content;
+            for (const rule of rules) {
+                if (rule.action !== 'mask')
+                    continue;
+                result = maskPatternOccurrences(result, rule.pathPattern, unmaskMap);
+            }
+            // Mask inline @sensitive annotations
+            result = maskSensitiveAnnotations(result, unmaskMap);
+            return { ...msg, content: result };
+        });
+        return { masked, unmaskMap };
+    }
+    /** Restore original content from masked tokens */
+    unmask(text, unmaskMap) {
+        let result = text;
+        for (const [token, original] of unmaskMap) {
+            result = result.replaceAll(token, original);
+        }
+        return result;
+    }
+    /** Add a privacy rule (persisted to DB) */
+    addRule(rule) {
+        this.stmts.addRule.run(rule.pathPattern, rule.action, rule.reason ?? null);
+        this.rulesCache = null;
+    }
+    /** Remove a privacy rule */
+    removeRule(pathPattern) {
+        const r = this.stmts.removeRule.run(pathPattern);
+        this.rulesCache = null;
+        return r.changes > 0;
+    }
+    /** List all rules */
+    listRules() {
+        return this.loadRules();
+    }
+    loadRules() {
+        if (this.rulesCache)
+            return this.rulesCache;
+        const dbRules = this.stmts.listRules.all().map(r => ({
+            pathPattern: r.path_pattern,
+            action: r.action,
+            reason: r.reason ?? undefined,
+        }));
+        this.rulesCache = [...this.defaultRules, ...dbRules];
+        return this.rulesCache;
+    }
+}
+// ── Helpers ──
+/** Simple glob matching: supports * and ** */
+function matchGlob(filePath, pattern) {
+    const regex = pattern
+        .replace(/[.+^${}()|[\]\\]/g, '\\$&') // Escape special regex chars
+        .replace(/\*\*/g, '{{GLOBSTAR}}') // Temp placeholder
+        .replace(/\*/g, '[^/]*') // Single glob
+        .replace(/{{GLOBSTAR}}/g, '.*'); // Double glob
+    return new RegExp(`^${regex}$`).test(filePath);
+}
+/** Promote to higher severity: block > local-only > mask > allow */
+function promoteAction(current, incoming) {
+    const priority = { allow: 0, mask: 1, 'local-only': 2, block: 3 };
+    return (priority[incoming] ?? 0) > (priority[current] ?? 0) ? incoming : current;
+}
+/** Replace occurrences matching a glob pattern in text with masked tokens */
+function maskPatternOccurrences(text, pathPattern, unmaskMap) {
+    // Extract a searchable pattern from the glob (e.g., "secrets/**" → "secrets/")
+    const literalPrefix = pathPattern.replace(/\*.*$/, '');
+    if (!literalPrefix || !text.includes(literalPrefix))
+        return text;
+    // Find all file-path-like substrings starting with the literal prefix
+    const filePathRe = new RegExp(literalPrefix.replace(/[.+^${}()|[\]\\]/g, '\\$&') + '[\\w/._-]*', 'g');
+    return text.replace(filePathRe, match => {
+        if (!matchGlob(match, pathPattern))
+            return match;
+        const token = `[REDACTED_${randomBytes(4).toString('hex')}]`;
+        unmaskMap.set(token, match);
+        return token;
+    });
+}
+/** Mask content wrapped in @sensitive{...} annotations */
+function maskSensitiveAnnotations(text, unmaskMap) {
+    return text.replace(/@sensitive\{([^}]+)\}/g, (_match, inner) => {
+        const token = `[REDACTED_${randomBytes(4).toString('hex')}]`;
+        unmaskMap.set(token, inner);
+        return token;
+    });
+}
+//# sourceMappingURL=privacy.js.map

package/dist/gateway/privacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.js","sourceRoot":"","sources":["../../src/gateway/privacy.ts"],"names":[],"mappings":"AAAA,mEAAmE;AAEnE,OAAO,EAAc,WAAW,EAAE,MAAM,aAAa,CAAC;AAItD,MAAM,OAAO,aAAa;IAKd;IACA;IALF,UAAU,GAAyB,IAAI,CAAC;IACxC,KAAK,CAAiD;IAE9D,YACU,KAA6B,EAC7B,eAA8B,EAAE;QADhC,UAAK,GAAL,KAAK,CAAwB;QAC7B,iBAAY,GAAZ,YAAY,CAAoB;QAExC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACxC,CAAC;IAEO,iBAAiB;QACvB,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,2DAA2D,CAAC;YAC1F,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CACzB,8FAA8F,CAC/F;YACD,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,0DAA0D,CAAC;SAC3F,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,QAAQ,CAAC,QAAyB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,IAAI,aAAa,GAA4B,OAAO,CAAC;QAErD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;oBACtC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnB,aAAa,GAAG,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC9C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC3D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACnB,aAAa,GAAG,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;IAC1D,CAAC;IAED,gFAAgF;IAChF,YAAY,CAAC,QAAuB,EAAE,KAAoB;QACxD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE5C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YAChC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,OAAO;gBAAE,OAAO,GAAG,CAAC;YAEzB,IAAI,MAAM,GAAG,OAAO,CAAC;YACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;oBAAE,SAAS;gBACrC,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACvE,CAAC;YAED,qCAAqC;YACrC,MAAM,GAAG,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAErD,OAAO,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,kDAAkD;IAClD,MAAM,CAAC,IAAY,EAAE,SAA8B;QACjD,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1C,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2CAA2C;IAC3C,OAAO,CAAC,IAAiB;QACvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAED,4BAA4B;IAC5B,UAAU,CAAC,WAAmB;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,qBAAqB;IACrB,SAAS;QACP,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAC5C,MAAM,OAAO,GAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9D,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,MAAM,EAAE,CAAC,CAAC,MAAuB;YACjC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;SAC9B,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF;AAED,gBAAgB;AAEhB,8CAA8C;AAC9C,SAAS,SAAS,CAAC,QAAgB,EAAE,OAAe;IAClD,MAAM,KAAK,GAAG,OAAO;SAClB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAG,6BAA6B;SACpE,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAS,mBAAmB;SAC5D,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAkB,cAAc;SACvD,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAU,cAAc;IAC1D,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,oEAAoE;AACpE,SAAS,aAAa,CAAC,OAAgC,EAAE,QAAuB;IAC9E,MAAM,QAAQ,GAA2B,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC1F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAwB,CAAC;AACpG,CAAC;AAED,6EAA6E;AAC7E,SAAS,sBAAsB,CAAC,IAAY,EAAE,WAAmB,EAAE,SAA8B;IAC/F,+EAA+E;IAC/E,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjE,sEAAsE;IACtE,MAAM,UAAU,GAAG,IAAI,MAAM,CAC3B,aAAa,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,GAAG,YAAY,EACjE,GAAG,CACJ,CAAC;IAEF,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE;QACtC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,KAAK,GAAG,aAAa,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QAC7D,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0DAA0D;AAC1D,SAAS,wBAAwB,CAAC,IAAY,EAAE,SAA8B;IAC5E,OAAO,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC9D,MAAM,KAAK,GAAG,aAAa,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QAC7D,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/gateway/providers.d.ts

@@ -0,0 +1,66 @@
+import type { ProviderConfig, ProviderState, ProviderStatus, Tier, ChatRequest, SSEChunk, SSEChoiceDelta, ChatResponse } from './types.js';
+export interface ChatResult {
+    response: ChatResponse;
+    durationMs: number;
+}
+export interface StreamChunk {
+    chunk: SSEChunk;
+    raw?: string;
+}
+export declare abstract class BaseAdapter {
+    protected config: ProviderConfig;
+    constructor(config: ProviderConfig);
+    abstract chat(req: ChatRequest): Promise<ChatResult>;
+    abstract chatStream(req: ChatRequest): AsyncGenerator<StreamChunk>;
+    protected fetchWithTimeout(url: string, init: RequestInit): Promise<Response>;
+    protected makeSSEChunk(delta: SSEChoiceDelta, model: string): SSEChunk;
+}
+export declare class OpenAIAdapter extends BaseAdapter {
+    chat(req: ChatRequest): Promise<ChatResult>;
+    chatStream(req: ChatRequest): AsyncGenerator<StreamChunk>;
+    private headers;
+    private parseSSEStream;
+}
+export declare class AnthropicAdapter extends BaseAdapter {
+    chat(req: ChatRequest): Promise<ChatResult>;
+    chatStream(req: ChatRequest): AsyncGenerator<StreamChunk>;
+    private headers;
+}
+export declare class GeminiAdapter extends BaseAdapter {
+    chat(req: ChatRequest): Promise<ChatResult>;
+    chatStream(req: ChatRequest): AsyncGenerator<StreamChunk>;
+    private buildUrl;
+}
+export declare class ProviderRegistry {
+    private providers;
+    private adapters;
+    private roundRobinIndex;
+    addProvider(config: ProviderConfig): void;
+    removeProvider(id: string): void;
+    getAdapter(id: string): BaseAdapter | undefined;
+    getState(id: string): ProviderState | undefined;
+    /** Get all providers for a tier, ordered by round-robin */
+    getByTier(tier: Tier): ProviderConfig[];
+    /** Build a fallback chain: requested tier → lower tiers */
+    buildFallbackChain(startTier: Tier): ProviderConfig[];
+    /** Mark a provider as used, update stats */
+    recordUse(id: string, tokens: number): void;
+    /** Mark a provider failure */
+    recordFailure(id: string, error: string): void;
+    /** List all model IDs across all providers */
+    listModels(): Array<{
+        id: string;
+        provider: string;
+        tier: Tier;
+    }>;
+    /** Find which provider has a specific model */
+    findByModel(model: string): ProviderConfig | undefined;
+    /** Get health status for all providers */
+    getHealthStatus(): Array<{
+        id: string;
+        status: ProviderStatus;
+        tier: Tier;
+        requests: number;
+    }>;
+}
+//# sourceMappingURL=providers.d.ts.map

package/dist/gateway/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/gateway/providers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,cAAc,EAAE,aAAa,EAAE,cAAc,EAAkB,IAAI,EACnE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EACpD,MAAM,YAAY,CAAC;AAUpB,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,YAAY,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,8BAAsB,WAAW;IACnB,SAAS,CAAC,MAAM,EAAE,cAAc;gBAAtB,MAAM,EAAE,cAAc;IAE5C,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IACpD,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC;cAElD,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYnF,SAAS,CAAC,YAAY,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ;CASvE;AAKD,qBAAa,aAAc,SAAQ,WAAW;IACtC,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAoB1C,UAAU,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC;IAkBhE,OAAO,CAAC,OAAO;YAQA,cAAc;CA+B9B;AAID,qBAAa,gBAAiB,SAAQ,WAAW;IACzC,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IA+B1C,UAAU,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC;IAgDhE,OAAO,CAAC,OAAO;CAQhB;AAID,qBAAa,aAAc,SAAQ,WAAW;IACtC,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IA+B1C,UAAU,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC;IAkDhE,OAAO,CAAC,QAAQ;CAKjB;AAID,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,SAAS,CAAoC;IACrD,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,eAAe,CAA6B;IAEpD,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAYzC,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAKhC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAI/C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAI/C,2DAA2D;IAC3D,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,cAAc,EAAE;IAQvC,2DAA2D;IAC3D,kBAAkB,CAAC,SAAS,EAAE,IAAI,GAAG,cAAc,EAAE;IAWrD,4CAA4C;IAC5C,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAU3C,8BAA8B;IAC9B,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAoB9C,8CAA8C;IAC9C,UAAU,IAAI,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC;IAUjE,+CAA+C;IAC/C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAStD,0CAA0C;IAC1C,eAAe,IAAI,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,CAAC;QAAC,IAAI,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAQ/F"}