opensentinel 3.1.1 → 3.6.1

package/dist/{chunk-XKYRH4FM.js → chunk-NYVBXUGD.js}

@@ -1,9 +1,6 @@
-import {
-  env
-} from "./chunk-ZLZKF2PM.js";
 import {
   __export
-} from "./chunk-PLDDJCW6.js";
+} from "./chunk-UP2VWCW5.js";
 
 // src/db/schema.ts
 var schema_exports = {};
@@ -626,40 +623,17 @@ var incidentTimeline = pgTable(
   (table) => [index("incident_timeline_incident_idx").on(table.incidentId)]
 );
 
-// src/db/index.ts
-import { drizzle } from "drizzle-orm/postgres-js";
-import postgres from "postgres";
-var _client = null;
-var _db = null;
-function getDb() {
-  if (!_db) {
-    _client = postgres(env.DATABASE_URL);
-    _db = drizzle(_client, { schema: schema_exports });
-  }
-  return _db;
-}
-var db = new Proxy(
-  {},
-  {
-    get(_target, prop) {
-      const instance = getDb();
-      const value = instance[prop];
-      if (typeof value === "function") {
-        return value.bind(instance);
-      }
-      return value;
-    }
-  }
-);
-
 export {
+  users,
   conversations,
   messages,
   memories,
+  scheduledTasks,
   toolLogs,
   sessions,
   auditLogs,
   apiKeys,
+  rateLimits,
   metrics,
   errorLogs,
   usagePatterns,
@@ -672,10 +646,17 @@ export {
   agentMessages,
   agentProgress,
   personas,
+  organizations,
+  organizationMembers,
+  sharedMemories,
+  usageQuotas,
   graphEntities,
   graphRelationships,
+  documents,
+  documentChunks,
+  twoFactorAuth,
   securityIncidents,
   incidentTimeline,
-  db
+  schema_exports
 };
-//# sourceMappingURL=chunk-XKYRH4FM.js.map
+//# sourceMappingURL=chunk-NYVBXUGD.js.map

package/dist/chunk-NYVBXUGD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/schema.ts"],"sourcesContent":["import {\n  pgTable,\n  text,\n  timestamp,\n  uuid,\n  integer,\n  jsonb,\n  boolean,\n  vector,\n  index,\n  customType,\n} from \"drizzle-orm/pg-core\";\n\n// Custom tsvector type for full-text search\nconst tsvector = customType<{ data: string }>({\n  dataType() {\n    return \"tsvector\";\n  },\n});\n\n// Users table\nexport const users = pgTable(\"users\", {\n  id: uuid(\"id\").primaryKey().defaultRandom(),\n  telegramId: text(\"telegram_id\").unique(),\n  name: text(\"name\"),\n  preferences: jsonb(\"preferences\").$type<{\n    timezone?: string;\n    language?: string;\n    verbosity?: \"terse\" | \"normal\" | \"detailed\";\n    persona?: \"formal\" | \"casual\" | \"snarky\";\n  }>(),\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n});\n\n// Conversations table\nexport const conversations = pgTable(\"conversations\", {\n  id: uuid(\"id\").primaryKey().defaultRandom(),\n  userId: uuid(\"user_id\").references(() => users.id),\n  title: text(\"title\"),\n  source: text(\"source\").notNull().default(\"telegram\"), // telegram, web, api\n  metadata: jsonb(\"metadata\"),\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n});\n\n// Messages table\nexport const messages = pgTable(\n  \"messages\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    conversationId: uuid(\"conversation_id\")\n      .references(() => conversations.id)\n      .notNull(),\n    role: text(\"role\").notNull().$type<\"user\" | \"assistant\" | \"system\">(),\n    content: text(\"content\").notNull(),\n    tokenCount: integer(\"token_count\"),\n    metadata: jsonb(\"metadata\"),\n    encrypted: boolean(\"encrypted\").default(false).notNull(),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"messages_conversation_idx\").on(table.conversationId)]\n);\n\n// Memories table with vector embeddings for RAG\nexport const memories = pgTable(\n  \"memories\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\").references(() => users.id),\n    type: text(\"type\")\n      .notNull()\n      .$type<\"episodic\" | \"semantic\" | \"procedural\">(),\n    content: text(\"content\").notNull(),\n    embedding: vector(\"embedding\", { dimensions: 1536 }), // OpenAI embedding size\n    searchVector: tsvector(\"search_vector\"), // Full-text search vector (GIN indexed)\n    importance: integer(\"importance\").default(5), // 1-10 scale\n    source: text(\"source\"), // Where this memory came from\n    provenance: text(\"provenance\"), // Origin tracking: \"conversation:id\", \"api:manual\", \"extraction:auto\"\n    metadata: jsonb(\"metadata\"),\n    encrypted: boolean(\"encrypted\").default(false).notNull(),\n    lastAccessed: timestamp(\"last_accessed\").defaultNow(),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"memories_user_idx\").on(table.userId)]\n);\n\n// Scheduled tasks table\nexport const scheduledTasks = pgTable(\"scheduled_tasks\", {\n  id: uuid(\"id\").primaryKey().defaultRandom(),\n  userId: uuid(\"user_id\").references(() => users.id),\n  name: text(\"name\").notNull(),\n  description: text(\"description\"),\n  cronExpression: text(\"cron_expression\"),\n  nextRunAt: timestamp(\"next_run_at\"),\n  lastRunAt: timestamp(\"last_run_at\"),\n  enabled: boolean(\"enabled\").default(true),\n  action: jsonb(\"action\").$type<{\n    type: \"message\" | \"command\" | \"webhook\";\n    payload: Record<string, unknown>;\n  }>(),\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n});\n\n// Tool execution logs\nexport const toolLogs = pgTable(\n  \"tool_logs\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    conversationId: uuid(\"conversation_id\").references(() => conversations.id),\n    toolName: text(\"tool_name\").notNull(),\n    input: jsonb(\"input\"),\n    output: jsonb(\"output\"),\n    success: boolean(\"success\").notNull(),\n    durationMs: integer(\"duration_ms\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"tool_logs_conversation_idx\").on(table.conversationId)]\n);\n\n// ============================================\n// SECURITY TABLES (Phase 1)\n// ============================================\n\n// Sessions table for session management\nexport const sessions = pgTable(\n  \"sessions\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    token: text(\"token\").notNull().unique(),\n    deviceInfo: jsonb(\"device_info\").$type<{\n      userAgent?: string;\n      platform?: string;\n      browser?: string;\n    }>(),\n    ipAddress: text(\"ip_address\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    expiresAt: timestamp(\"expires_at\").notNull(),\n    lastActiveAt: timestamp(\"last_active_at\").defaultNow(),\n  },\n  (table) => [index(\"sessions_user_idx\").on(table.userId)]\n);\n\n// Audit logs table for tracking all actions\nexport const auditLogs = pgTable(\n  \"audit_logs\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\").references(() => users.id),\n    sessionId: uuid(\"session_id\").references(() => sessions.id),\n    action: text(\"action\").notNull(), // 'tool_use', 'login', 'settings_change', etc.\n    resource: text(\"resource\"), // 'shell', 'file', 'memory', etc.\n    resourceId: text(\"resource_id\"), // ID of the affected resource\n    details: jsonb(\"details\"),\n    ipAddress: text(\"ip_address\"),\n    userAgent: text(\"user_agent\"),\n    success: boolean(\"success\").default(true),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    // Tamper-proof chain fields (SOC 2)\n    sequenceNumber: integer(\"sequence_number\"),\n    entryHash: text(\"entry_hash\"),\n    previousHash: text(\"previous_hash\"),\n  },\n  (table) => [\n    index(\"audit_logs_user_idx\").on(table.userId),\n    index(\"audit_logs_action_idx\").on(table.action),\n    index(\"audit_logs_created_idx\").on(table.createdAt),\n    index(\"audit_logs_sequence_idx\").on(table.sequenceNumber),\n  ]\n);\n\n// API keys table for programmatic access\nexport const apiKeys = pgTable(\n  \"api_keys\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    name: text(\"name\").notNull(),\n    keyHash: text(\"key_hash\").notNull(), // bcrypt hash of the key\n    keyPrefix: text(\"key_prefix\").notNull(), // First 8 chars for identification (e.g., \"mb_live_\")\n    permissions: jsonb(\"permissions\").$type<string[]>(), // ['chat:basic', 'tools:shell', etc.]\n    lastUsedAt: timestamp(\"last_used_at\"),\n    expiresAt: timestamp(\"expires_at\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    revokedAt: timestamp(\"revoked_at\"),\n  },\n  (table) => [index(\"api_keys_user_idx\").on(table.userId)]\n);\n\n// Rate limits table for tracking request rates\nexport const rateLimits = pgTable(\n  \"rate_limits\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    identifier: text(\"identifier\").notNull(), // userId, IP, or API key prefix\n    endpoint: text(\"endpoint\").notNull(), // 'api/chat', 'tool/shell', etc.\n    windowStart: timestamp(\"window_start\").notNull(),\n    requestCount: integer(\"request_count\").default(0),\n    lastRequest: timestamp(\"last_request\"),\n  },\n  (table) => [\n    index(\"rate_limits_identifier_endpoint_idx\").on(\n      table.identifier,\n      table.endpoint\n    ),\n  ]\n);\n\n// ============================================\n// OBSERVABILITY TABLES (Phase 1)\n// ============================================\n\n// Metrics table for performance tracking\nexport const metrics = pgTable(\n  \"metrics\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    name: text(\"name\").notNull(), // 'response_latency', 'token_usage', 'tool_duration', etc.\n    value: integer(\"value\").notNull(),\n    unit: text(\"unit\"), // 'ms', 'tokens', 'bytes', etc.\n    tags: jsonb(\"tags\").$type<Record<string, string>>(), // { tool: 'shell', status: 'success' }\n    timestamp: timestamp(\"timestamp\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"metrics_name_timestamp_idx\").on(table.name, table.timestamp),\n  ]\n);\n\n// Error logs table for centralized error tracking\nexport const errorLogs = pgTable(\n  \"error_logs\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    source: text(\"source\").notNull(), // 'brain', 'tool', 'telegram', 'api', 'scheduler'\n    errorType: text(\"error_type\").notNull(), // 'ApiError', 'ValidationError', etc.\n    errorCode: text(\"error_code\"), // Application-specific error codes\n    message: text(\"message\").notNull(),\n    stack: text(\"stack\"),\n    context: jsonb(\"context\"), // Additional context like request data\n    userId: uuid(\"user_id\").references(() => users.id),\n    conversationId: uuid(\"conversation_id\").references(() => conversations.id),\n    resolved: boolean(\"resolved\").default(false),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"error_logs_source_idx\").on(table.source),\n    index(\"error_logs_created_idx\").on(table.createdAt),\n  ]\n);\n\n// ============================================\n// EVOLUTION SYSTEM TABLES (Phase 2)\n// ============================================\n\n// Usage patterns for evolution tracking\nexport const usagePatterns = pgTable(\n  \"usage_patterns\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    patternType: text(\"pattern_type\").notNull(), // 'tool_usage', 'topic', 'time_of_day', 'complexity'\n    patternKey: text(\"pattern_key\").notNull(), // e.g., 'shell', 'morning', 'coding'\n    patternData: jsonb(\"pattern_data\"),\n    confidence: integer(\"confidence\").default(0), // 0-100\n    firstSeen: timestamp(\"first_seen\").defaultNow().notNull(),\n    lastSeen: timestamp(\"last_seen\").defaultNow(),\n    occurrences: integer(\"occurrences\").default(1),\n  },\n  (table) => [\n    index(\"usage_patterns_user_idx\").on(table.userId),\n    index(\"usage_patterns_type_idx\").on(table.patternType),\n  ]\n);\n\n// Achievements definitions\nexport const achievements = pgTable(\"achievements\", {\n  id: uuid(\"id\").primaryKey().defaultRandom(),\n  code: text(\"code\").notNull().unique(), // 'first_tool_use', 'power_user', 'researcher'\n  name: text(\"name\").notNull(),\n  description: text(\"description\"),\n  iconEmoji: text(\"icon_emoji\"), // Emoji to display\n  category: text(\"category\"), // 'exploration', 'productivity', 'mastery'\n  criteria: jsonb(\"criteria\").$type<{\n    type: string; // 'count', 'streak', 'threshold'\n    metric: string; // 'tool_uses', 'conversations', 'memories'\n    threshold: number;\n    conditions?: Record<string, unknown>;\n  }>(),\n  points: integer(\"points\").default(10),\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n});\n\n// User achievements (unlocked)\nexport const userAchievements = pgTable(\n  \"user_achievements\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    achievementId: uuid(\"achievement_id\")\n      .references(() => achievements.id)\n      .notNull(),\n    unlockedAt: timestamp(\"unlocked_at\").defaultNow().notNull(),\n    progress: integer(\"progress\").default(100), // For progressive achievements\n    notified: boolean(\"notified\").default(false),\n  },\n  (table) => [index(\"user_achievements_user_idx\").on(table.userId)]\n);\n\n// Evolution transformation modes\nexport const evolutionModes = pgTable(\n  \"molt_modes\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    mode: text(\"mode\")\n      .notNull()\n      .$type<\"productivity\" | \"creative\" | \"research\" | \"learning\">(),\n    activatedAt: timestamp(\"activated_at\").defaultNow().notNull(),\n    deactivatedAt: timestamp(\"deactivated_at\"),\n    metadata: jsonb(\"metadata\"),\n  },\n  (table) => [index(\"molt_modes_user_idx\").on(table.userId)]\n);\n\n// Archived memories (for memory shedding)\nexport const archivedMemories = pgTable(\n  \"archived_memories\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    originalMemoryId: uuid(\"original_memory_id\").notNull(),\n    userId: uuid(\"user_id\").references(() => users.id),\n    type: text(\"type\")\n      .notNull()\n      .$type<\"episodic\" | \"semantic\" | \"procedural\">(),\n    content: text(\"content\").notNull(),\n    reason: text(\"reason\"), // 'stale', 'duplicate', 'low_importance', 'user_request'\n    originalCreatedAt: timestamp(\"original_created_at\"),\n    archivedAt: timestamp(\"archived_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"archived_memories_user_idx\").on(table.userId)]\n);\n\n// ============================================\n// CALENDAR & TRIGGERS TABLES (Phase 3)\n// ============================================\n\nexport const calendarTriggers = pgTable(\n  \"calendar_triggers\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    name: text(\"name\").notNull(),\n    calendarSource: text(\"calendar_source\").notNull(), // 'google', 'outlook', 'ical'\n    calendarId: text(\"calendar_id\"),\n    triggerType: text(\"trigger_type\").notNull(), // 'event_start', 'event_end', 'daily_briefing'\n    offsetMinutes: integer(\"offset_minutes\").default(0), // Trigger X minutes before/after\n    action: jsonb(\"action\").$type<{\n      type: \"message\" | \"tool\" | \"webhook\";\n      payload: Record<string, unknown>;\n    }>(),\n    enabled: boolean(\"enabled\").default(true),\n    lastTriggered: timestamp(\"last_triggered\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"calendar_triggers_user_idx\").on(table.userId)]\n);\n\n// ============================================\n// SUB-AGENT TABLES (Phase 4)\n// ============================================\n\nexport const subAgents = pgTable(\n  \"sub_agents\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    parentConversationId: uuid(\"parent_conversation_id\").references(\n      () => conversations.id\n    ),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    type: text(\"type\")\n      .notNull()\n      .$type<\"research\" | \"coding\" | \"writing\" | \"analysis\">(),\n    name: text(\"name\").notNull(),\n    status: text(\"status\")\n      .notNull()\n      .$type<\"pending\" | \"running\" | \"completed\" | \"failed\" | \"cancelled\">(),\n    objective: text(\"objective\").notNull(),\n    context: jsonb(\"context\"),\n    result: jsonb(\"result\"),\n    tokenBudget: integer(\"token_budget\").default(50000),\n    tokensUsed: integer(\"tokens_used\").default(0),\n    timeBudgetMs: integer(\"time_budget_ms\").default(3600000), // 1 hour default\n    startedAt: timestamp(\"started_at\"),\n    completedAt: timestamp(\"completed_at\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"sub_agents_user_idx\").on(table.userId),\n    index(\"sub_agents_status_idx\").on(table.status),\n  ]\n);\n\nexport const agentMessages = pgTable(\n  \"agent_messages\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    agentId: uuid(\"agent_id\")\n      .references(() => subAgents.id)\n      .notNull(),\n    role: text(\"role\")\n      .notNull()\n      .$type<\"user\" | \"assistant\" | \"system\" | \"tool_result\">(),\n    content: text(\"content\").notNull(),\n    metadata: jsonb(\"metadata\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"agent_messages_agent_idx\").on(table.agentId)]\n);\n\nexport const agentProgress = pgTable(\n  \"agent_progress\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    agentId: uuid(\"agent_id\")\n      .references(() => subAgents.id)\n      .notNull(),\n    step: integer(\"step\").notNull(),\n    description: text(\"description\").notNull(),\n    status: text(\"status\")\n      .notNull()\n      .$type<\"pending\" | \"running\" | \"completed\" | \"failed\">(),\n    output: jsonb(\"output\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"agent_progress_agent_idx\").on(table.agentId)]\n);\n\n// ============================================\n// PERSONALITY TABLES (Phase 5)\n// ============================================\n\nexport const personas = pgTable(\n  \"personas\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\").references(() => users.id), // null = system persona\n    name: text(\"name\").notNull(),\n    description: text(\"description\"),\n    basePrompt: text(\"base_prompt\").notNull(),\n    isDefault: boolean(\"is_default\").default(false),\n    isSystem: boolean(\"is_system\").default(false), // Built-in personas\n    settings: jsonb(\"settings\").$type<{\n      verbosity: \"terse\" | \"normal\" | \"detailed\";\n      humor: \"off\" | \"subtle\" | \"full\";\n      formality: \"formal\" | \"casual\" | \"professional\";\n      emoji: boolean;\n      proactivity: \"minimal\" | \"moderate\" | \"proactive\";\n    }>(),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"personas_user_idx\").on(table.userId)]\n);\n\n// ============================================\n// ENTERPRISE TABLES (Phase 6)\n// ============================================\n\nexport const organizations = pgTable(\"organizations\", {\n  id: uuid(\"id\").primaryKey().defaultRandom(),\n  name: text(\"name\").notNull(),\n  slug: text(\"slug\").unique(),\n  settings: jsonb(\"settings\"),\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  updatedAt: timestamp(\"updated_at\").defaultNow(),\n});\n\nexport const organizationMembers = pgTable(\n  \"organization_members\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    organizationId: uuid(\"organization_id\")\n      .references(() => organizations.id)\n      .notNull(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    role: text(\"role\").notNull().$type<\"owner\" | \"admin\" | \"member\" | \"viewer\">(),\n    joinedAt: timestamp(\"joined_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"org_members_org_idx\").on(table.organizationId),\n    index(\"org_members_user_idx\").on(table.userId),\n  ]\n);\n\nexport const sharedMemories = pgTable(\n  \"shared_memories\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    organizationId: uuid(\"organization_id\")\n      .references(() => organizations.id)\n      .notNull(),\n    memoryId: uuid(\"memory_id\")\n      .references(() => memories.id)\n      .notNull(),\n    sharedBy: uuid(\"shared_by\")\n      .references(() => users.id)\n      .notNull(),\n    sharedAt: timestamp(\"shared_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"shared_memories_org_idx\").on(table.organizationId)]\n);\n\nexport const usageQuotas = pgTable(\n  \"usage_quotas\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\").references(() => users.id),\n    organizationId: uuid(\"organization_id\").references(() => organizations.id),\n    quotaType: text(\"quota_type\").notNull(), // 'tokens_daily', 'tokens_monthly', 'agents_concurrent'\n    limitValue: integer(\"limit_value\").notNull(),\n    currentValue: integer(\"current_value\").default(0),\n    resetAt: timestamp(\"reset_at\"),\n    updatedAt: timestamp(\"updated_at\").defaultNow(),\n  },\n  (table) => [\n    index(\"usage_quotas_user_idx\").on(table.userId),\n    index(\"usage_quotas_org_idx\").on(table.organizationId),\n  ]\n);\n\n// ============================================\n// KNOWLEDGE GRAPH TABLES\n// ============================================\n\n// Graph entities — people, projects, topics, events, organizations, locations\nexport const graphEntities = pgTable(\n  \"graph_entities\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\").references(() => users.id),\n    type: text(\"type\")\n      .notNull()\n      .$type<\"person\" | \"project\" | \"topic\" | \"event\" | \"organization\" | \"location\">(),\n    name: text(\"name\").notNull(),\n    aliases: jsonb(\"aliases\").$type<string[]>().default([]),\n    description: text(\"description\"),\n    attributes: jsonb(\"attributes\").$type<Record<string, unknown>>().default({}),\n    importance: integer(\"importance\").default(50), // 0-100\n    mentionCount: integer(\"mention_count\").default(1),\n    embedding: vector(\"embedding\", { dimensions: 1536 }),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"graph_entities_user_idx\").on(table.userId),\n    index(\"graph_entities_type_idx\").on(table.type),\n    index(\"graph_entities_name_idx\").on(table.name),\n  ]\n);\n\n// Graph relationships — connections between entities\nexport const graphRelationships = pgTable(\n  \"graph_relationships\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    sourceEntityId: uuid(\"source_entity_id\")\n      .references(() => graphEntities.id, { onDelete: \"cascade\" })\n      .notNull(),\n    targetEntityId: uuid(\"target_entity_id\")\n      .references(() => graphEntities.id, { onDelete: \"cascade\" })\n      .notNull(),\n    type: text(\"type\")\n      .notNull()\n      .$type<\n        | \"knows\" | \"works_with\" | \"works_on\" | \"family\" | \"friend\"\n        | \"colleague\" | \"manages\" | \"reports_to\" | \"belongs_to\"\n        | \"related_to\" | \"located_in\" | \"interested_in\" | \"expert_in\"\n        | \"mentioned_in\" | \"participates_in\"\n      >(),\n    strength: integer(\"strength\").default(50), // 0-100\n    bidirectional: boolean(\"bidirectional\").default(false),\n    context: text(\"context\"),\n    attributes: jsonb(\"attributes\").$type<Record<string, unknown>>().default({}),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"graph_rel_source_idx\").on(table.sourceEntityId),\n    index(\"graph_rel_target_idx\").on(table.targetEntityId),\n    index(\"graph_rel_type_idx\").on(table.type),\n  ]\n);\n\n// ============================================\n// DOCUMENT KNOWLEDGE BASE TABLES\n// ============================================\n\nexport const documents = pgTable(\n  \"documents\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    name: text(\"name\").notNull(),\n    filename: text(\"filename\"),\n    mimeType: text(\"mime_type\"),\n    fileSize: integer(\"file_size\"),\n    source: text(\"source\"), // 'upload', 'url', 'api'\n    sourceUrl: text(\"source_url\"),\n    metadata: jsonb(\"metadata\"),\n    status: text(\"status\")\n      .notNull()\n      .$type<\"pending\" | \"processing\" | \"completed\" | \"failed\">()\n      .default(\"pending\"),\n    errorMessage: text(\"error_message\"),\n    chunkCount: integer(\"chunk_count\").default(0),\n    totalTokens: integer(\"total_tokens\").default(0),\n    userId: uuid(\"user_id\").references(() => users.id),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n    processedAt: timestamp(\"processed_at\"),\n  },\n  (table) => [\n    index(\"documents_user_idx\").on(table.userId),\n    index(\"documents_status_idx\").on(table.status),\n  ]\n);\n\nexport const documentChunks = pgTable(\n  \"document_chunks\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    documentId: uuid(\"document_id\")\n      .references(() => documents.id, { onDelete: \"cascade\" })\n      .notNull(),\n    chunkIndex: integer(\"chunk_index\").notNull(),\n    content: text(\"content\").notNull(),\n    embedding: vector(\"embedding\", { dimensions: 1536 }),\n    tokenCount: integer(\"token_count\"),\n    metadata: jsonb(\"metadata\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"document_chunks_document_idx\").on(table.documentId),\n  ]\n);\n\n// ============================================\n// TYPE EXPORTS\n// ============================================\n\nexport type User = typeof users.$inferSelect;\nexport type NewUser = typeof users.$inferInsert;\nexport type Conversation = typeof conversations.$inferSelect;\nexport type NewConversation = typeof conversations.$inferInsert;\nexport type Message = typeof messages.$inferSelect;\nexport type NewMessage = typeof messages.$inferInsert;\nexport type Memory = typeof memories.$inferSelect;\nexport type NewMemory = typeof memories.$inferInsert;\n\n// Security types\nexport type Session = typeof sessions.$inferSelect;\nexport type NewSession = typeof sessions.$inferInsert;\nexport type AuditLog = typeof auditLogs.$inferSelect;\nexport type NewAuditLog = typeof auditLogs.$inferInsert;\nexport type ApiKey = typeof apiKeys.$inferSelect;\nexport type NewApiKey = typeof apiKeys.$inferInsert;\n\n// Observability types\nexport type Metric = typeof metrics.$inferSelect;\nexport type NewMetric = typeof metrics.$inferInsert;\nexport type ErrorLog = typeof errorLogs.$inferSelect;\nexport type NewErrorLog = typeof errorLogs.$inferInsert;\n\n// Evolution system types\nexport type UsagePattern = typeof usagePatterns.$inferSelect;\nexport type NewUsagePattern = typeof usagePatterns.$inferInsert;\nexport type Achievement = typeof achievements.$inferSelect;\nexport type NewAchievement = typeof achievements.$inferInsert;\nexport type UserAchievement = typeof userAchievements.$inferSelect;\nexport type EvolutionMode = typeof evolutionModes.$inferSelect;\nexport type NewEvolutionMode = typeof evolutionModes.$inferInsert;\n\n// Sub-agent types\nexport type SubAgent = typeof subAgents.$inferSelect;\nexport type NewSubAgent = typeof subAgents.$inferInsert;\nexport type AgentMessage = typeof agentMessages.$inferSelect;\nexport type AgentProgress = typeof agentProgress.$inferSelect;\n\n// Personality types\nexport type Persona = typeof personas.$inferSelect;\nexport type NewPersona = typeof personas.$inferInsert;\n\n// Enterprise types\nexport type Organization = typeof organizations.$inferSelect;\nexport type NewOrganization = typeof organizations.$inferInsert;\nexport type OrganizationMember = typeof organizationMembers.$inferSelect;\n\n// Knowledge graph types\nexport type GraphEntity = typeof graphEntities.$inferSelect;\nexport type NewGraphEntity = typeof graphEntities.$inferInsert;\nexport type GraphRelationship = typeof graphRelationships.$inferSelect;\nexport type NewGraphRelationship = typeof graphRelationships.$inferInsert;\n\n// Document knowledge base types\nexport type Document = typeof documents.$inferSelect;\nexport type NewDocument = typeof documents.$inferInsert;\nexport type DocumentChunk = typeof documentChunks.$inferSelect;\nexport type NewDocumentChunk = typeof documentChunks.$inferInsert;\n\n// ============================================\n// SOC 2 COMPLIANCE TABLES\n// ============================================\n\n// Two-factor authentication (persisted, encrypted secrets)\nexport const twoFactorAuth = pgTable(\n  \"two_factor_auth\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id, { onDelete: \"cascade\" })\n      .notNull()\n      .unique(),\n    secretEncrypted: text(\"secret_encrypted\").notNull(),\n    recoveryCodes: jsonb(\"recovery_codes\").$type<string[]>().notNull(),\n    enabledAt: timestamp(\"enabled_at\").notNull(),\n    lastVerifiedAt: timestamp(\"last_verified_at\"),\n    keyVersion: integer(\"key_version\").default(1).notNull(),\n    metadata: jsonb(\"metadata\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"two_factor_auth_user_idx\").on(table.userId)]\n);\n\n// Security incidents tracking\nexport const securityIncidents = pgTable(\n  \"security_incidents\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    incidentNumber: text(\"incident_number\").notNull().unique(),\n    title: text(\"title\").notNull(),\n    description: text(\"description\").notNull(),\n    type: text(\"type\")\n      .notNull()\n      .$type<\n        | \"brute_force\"\n        | \"unauthorized_access\"\n        | \"data_breach\"\n        | \"suspicious_activity\"\n        | \"system_compromise\"\n        | \"policy_violation\"\n      >(),\n    severity: text(\"severity\")\n      .notNull()\n      .$type<\"low\" | \"medium\" | \"high\" | \"critical\">(),\n    status: text(\"status\")\n      .notNull()\n      .$type<\"open\" | \"investigating\" | \"contained\" | \"resolved\" | \"closed\">()\n      .default(\"open\"),\n    userId: uuid(\"user_id\").references(() => users.id),\n    assignedTo: uuid(\"assigned_to\").references(() => users.id),\n    source: text(\"source\").notNull(),\n    sourceData: jsonb(\"source_data\"),\n    impactAssessment: text(\"impact_assessment\"),\n    containmentActions: jsonb(\"containment_actions\"),\n    resolutionNotes: text(\"resolution_notes\"),\n    relatedIncidents: jsonb(\"related_incidents\").$type<string[]>(),\n    metadata: jsonb(\"metadata\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n    investigatedAt: timestamp(\"investigated_at\"),\n    containedAt: timestamp(\"contained_at\"),\n    resolvedAt: timestamp(\"resolved_at\"),\n    closedAt: timestamp(\"closed_at\"),\n  },\n  (table) => [\n    index(\"security_incidents_status_idx\").on(table.status),\n    index(\"security_incidents_severity_idx\").on(table.severity),\n    index(\"security_incidents_created_idx\").on(table.createdAt),\n  ]\n);\n\n// Incident timeline events\nexport const incidentTimeline = pgTable(\n  \"incident_timeline\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    incidentId: uuid(\"incident_id\")\n      .references(() => securityIncidents.id, { onDelete: \"cascade\" })\n      .notNull(),\n    eventType: text(\"event_type\")\n      .notNull()\n      .$type<\n        | \"created\"\n        | \"status_change\"\n        | \"assignment\"\n        | \"comment\"\n        | \"action_taken\"\n        | \"escalation\"\n        | \"resolution\"\n      >(),\n    description: text(\"description\").notNull(),\n    performedBy: uuid(\"performed_by\").references(() => users.id),\n    metadata: jsonb(\"metadata\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"incident_timeline_incident_idx\").on(table.incidentId)]\n);\n\n// SOC 2 types\nexport type TwoFactorAuthRecord = typeof twoFactorAuth.$inferSelect;\nexport type NewTwoFactorAuthRecord = typeof twoFactorAuth.$inferInsert;\nexport type SecurityIncident = typeof securityIncidents.$inferSelect;\nexport type NewSecurityIncident = typeof securityIncidents.$inferInsert;\nexport type IncidentTimelineEvent = typeof incidentTimeline.$inferSelect;\n"],"mappings":";;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,IAAM,WAAW,WAA6B;AAAA,EAC5C,WAAW;AACT,WAAO;AAAA,EACT;AACF,CAAC;AAGM,IAAM,QAAQ,QAAQ,SAAS;AAAA,EACpC,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,YAAY,KAAK,aAAa,EAAE,OAAO;AAAA,EACvC,MAAM,KAAK,MAAM;AAAA,EACjB,aAAa,MAAM,aAAa,EAAE,MAK/B;AAAA,EACH,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,gBAAgB,QAAQ,iBAAiB;AAAA,EACpD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,EACjD,OAAO,KAAK,OAAO;AAAA,EACnB,QAAQ,KAAK,QAAQ,EAAE,QAAQ,EAAE,QAAQ,UAAU;AAAA;AAAA,EACnD,UAAU,MAAM,UAAU;AAAA,EAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EACnC,WAAW,MAAM,cAAc,EAAE,EACjC,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,MAAuC;AAAA,IACpE,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,YAAY,QAAQ,aAAa;AAAA,IACjC,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,QAAQ,WAAW,EAAE,QAAQ,KAAK,EAAE,QAAQ;AAAA,IACvD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,2BAA2B,EAAE,GAAG,MAAM,cAAc,CAAC;AACzE;AAGO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA8C;AAAA,IACjD,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,WAAW,OAAO,aAAa,EAAE,YAAY,KAAK,CAAC;AAAA;AAAA,IACnD,cAAc,SAAS,eAAe;AAAA;AAAA,IACtC,YAAY,QAAQ,YAAY,EAAE,QAAQ,CAAC;AAAA;AAAA,IAC3C,QAAQ,KAAK,QAAQ;AAAA;AAAA,IACrB,YAAY,KAAK,YAAY;AAAA;AAAA,IAC7B,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,QAAQ,WAAW,EAAE,QAAQ,KAAK,EAAE,QAAQ;AAAA,IACvD,cAAc,UAAU,eAAe,EAAE,WAAW;AAAA,IACpD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAGO,IAAM,iBAAiB,QAAQ,mBAAmB;AAAA,EACvD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,EACjD,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,aAAa,KAAK,aAAa;AAAA,EAC/B,gBAAgB,KAAK,iBAAiB;AAAA,EACtC,WAAW,UAAU,aAAa;AAAA,EAClC,WAAW,UAAU,aAAa;AAAA,EAClC,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI;AAAA,EACxC,QAAQ,MAAM,QAAQ,EAAE,MAGrB;AAAA,EACH,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EAAE,WAAW,MAAM,cAAc,EAAE;AAAA,IACzE,UAAU,KAAK,WAAW,EAAE,QAAQ;AAAA,IACpC,OAAO,MAAM,OAAO;AAAA,IACpB,QAAQ,MAAM,QAAQ;AAAA,IACtB,SAAS,QAAQ,SAAS,EAAE,QAAQ;AAAA,IACpC,YAAY,QAAQ,aAAa;AAAA,IACjC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,cAAc,CAAC;AAC1E;AAOO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,OAAO,KAAK,OAAO,EAAE,QAAQ,EAAE,OAAO;AAAA,IACtC,YAAY,MAAM,aAAa,EAAE,MAI9B;AAAA,IACH,WAAW,KAAK,YAAY;AAAA,IAC5B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,QAAQ;AAAA,IAC3C,cAAc,UAAU,gBAAgB,EAAE,WAAW;AAAA,EACvD;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAGO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,WAAW,KAAK,YAAY,EAAE,WAAW,MAAM,SAAS,EAAE;AAAA,IAC1D,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA;AAAA,IAC/B,UAAU,KAAK,UAAU;AAAA;AAAA,IACzB,YAAY,KAAK,aAAa;AAAA;AAAA,IAC9B,SAAS,MAAM,SAAS;AAAA,IACxB,WAAW,KAAK,YAAY;AAAA,IAC5B,WAAW,KAAK,YAAY;AAAA,IAC5B,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI;AAAA,IACxC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA;AAAA,IAExD,gBAAgB,QAAQ,iBAAiB;AAAA,IACzC,WAAW,KAAK,YAAY;AAAA,IAC5B,cAAc,KAAK,eAAe;AAAA,EACpC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qBAAqB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC5C,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC9C,MAAM,wBAAwB,EAAE,GAAG,MAAM,SAAS;AAAA,IAClD,MAAM,yBAAyB,EAAE,GAAG,MAAM,cAAc;AAAA,EAC1D;AACF;AAGO,IAAM,UAAU;AAAA,EACrB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,SAAS,KAAK,UAAU,EAAE,QAAQ;AAAA;AAAA,IAClC,WAAW,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACtC,aAAa,MAAM,aAAa,EAAE,MAAgB;AAAA;AAAA,IAClD,YAAY,UAAU,cAAc;AAAA,IACpC,WAAW,UAAU,YAAY;AAAA,IACjC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY;AAAA,EACnC;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAGO,IAAM,aAAa;AAAA,EACxB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,YAAY,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACvC,UAAU,KAAK,UAAU,EAAE,QAAQ;AAAA;AAAA,IACnC,aAAa,UAAU,cAAc,EAAE,QAAQ;AAAA,IAC/C,cAAc,QAAQ,eAAe,EAAE,QAAQ,CAAC;AAAA,IAChD,aAAa,UAAU,cAAc;AAAA,EACvC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qCAAqC,EAAE;AAAA,MAC3C,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAOO,IAAM,UAAU;AAAA,EACrB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA;AAAA,IAC3B,OAAO,QAAQ,OAAO,EAAE,QAAQ;AAAA,IAChC,MAAM,KAAK,MAAM;AAAA;AAAA,IACjB,MAAM,MAAM,MAAM,EAAE,MAA8B;AAAA;AAAA,IAClD,WAAW,UAAU,WAAW,EAAE,WAAW,EAAE,QAAQ;AAAA,EACzD;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,MAAM,SAAS;AAAA,EACpE;AACF;AAGO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA;AAAA,IAC/B,WAAW,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACtC,WAAW,KAAK,YAAY;AAAA;AAAA,IAC5B,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,OAAO,KAAK,OAAO;AAAA,IACnB,SAAS,MAAM,SAAS;AAAA;AAAA,IACxB,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,gBAAgB,KAAK,iBAAiB,EAAE,WAAW,MAAM,cAAc,EAAE;AAAA,IACzE,UAAU,QAAQ,UAAU,EAAE,QAAQ,KAAK;AAAA,IAC3C,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC9C,MAAM,wBAAwB,EAAE,GAAG,MAAM,SAAS;AAAA,EACpD;AACF;AAOO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,aAAa,KAAK,cAAc,EAAE,QAAQ;AAAA;AAAA,IAC1C,YAAY,KAAK,aAAa,EAAE,QAAQ;AAAA;AAAA,IACxC,aAAa,MAAM,cAAc;AAAA,IACjC,YAAY,QAAQ,YAAY,EAAE,QAAQ,CAAC;AAAA;AAAA,IAC3C,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,UAAU,UAAU,WAAW,EAAE,WAAW;AAAA,IAC5C,aAAa,QAAQ,aAAa,EAAE,QAAQ,CAAC;AAAA,EAC/C;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,yBAAyB,EAAE,GAAG,MAAM,MAAM;AAAA,IAChD,MAAM,yBAAyB,EAAE,GAAG,MAAM,WAAW;AAAA,EACvD;AACF;AAGO,IAAM,eAAe,QAAQ,gBAAgB;AAAA,EAClD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO;AAAA;AAAA,EACpC,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,aAAa,KAAK,aAAa;AAAA,EAC/B,WAAW,KAAK,YAAY;AAAA;AAAA,EAC5B,UAAU,KAAK,UAAU;AAAA;AAAA,EACzB,UAAU,MAAM,UAAU,EAAE,MAKzB;AAAA,EACH,QAAQ,QAAQ,QAAQ,EAAE,QAAQ,EAAE;AAAA,EACpC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,eAAe,KAAK,gBAAgB,EACjC,WAAW,MAAM,aAAa,EAAE,EAChC,QAAQ;AAAA,IACX,YAAY,UAAU,aAAa,EAAE,WAAW,EAAE,QAAQ;AAAA,IAC1D,UAAU,QAAQ,UAAU,EAAE,QAAQ,GAAG;AAAA;AAAA,IACzC,UAAU,QAAQ,UAAU,EAAE,QAAQ,KAAK;AAAA,EAC7C;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC;AAClE;AAGO,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA6D;AAAA,IAChE,aAAa,UAAU,cAAc,EAAE,WAAW,EAAE,QAAQ;AAAA,IAC5D,eAAe,UAAU,gBAAgB;AAAA,IACzC,UAAU,MAAM,UAAU;AAAA,EAC5B;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC;AAC3D;AAGO,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,kBAAkB,KAAK,oBAAoB,EAAE,QAAQ;AAAA,IACrD,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA8C;AAAA,IACjD,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,QAAQ,KAAK,QAAQ;AAAA;AAAA,IACrB,mBAAmB,UAAU,qBAAqB;AAAA,IAClD,YAAY,UAAU,aAAa,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC5D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC;AAClE;AAMO,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,gBAAgB,KAAK,iBAAiB,EAAE,QAAQ;AAAA;AAAA,IAChD,YAAY,KAAK,aAAa;AAAA,IAC9B,aAAa,KAAK,cAAc,EAAE,QAAQ;AAAA;AAAA,IAC1C,eAAe,QAAQ,gBAAgB,EAAE,QAAQ,CAAC;AAAA;AAAA,IAClD,QAAQ,MAAM,QAAQ,EAAE,MAGrB;AAAA,IACH,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI;AAAA,IACxC,eAAe,UAAU,gBAAgB;AAAA,IACzC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC;AAClE;AAMO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,sBAAsB,KAAK,wBAAwB,EAAE;AAAA,MACnD,MAAM,cAAc;AAAA,IACtB;AAAA,IACA,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAAsD;AAAA,IACzD,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAoE;AAAA,IACvE,WAAW,KAAK,WAAW,EAAE,QAAQ;AAAA,IACrC,SAAS,MAAM,SAAS;AAAA,IACxB,QAAQ,MAAM,QAAQ;AAAA,IACtB,aAAa,QAAQ,cAAc,EAAE,QAAQ,GAAK;AAAA,IAClD,YAAY,QAAQ,aAAa,EAAE,QAAQ,CAAC;AAAA,IAC5C,cAAc,QAAQ,gBAAgB,EAAE,QAAQ,IAAO;AAAA;AAAA,IACvD,WAAW,UAAU,YAAY;AAAA,IACjC,aAAa,UAAU,cAAc;AAAA,IACrC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qBAAqB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC5C,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,EAChD;AACF;AAEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,SAAS,KAAK,UAAU,EACrB,WAAW,MAAM,UAAU,EAAE,EAC7B,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAAuD;AAAA,IAC1D,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,0BAA0B,EAAE,GAAG,MAAM,OAAO,CAAC;AACjE;AAEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,SAAS,KAAK,UAAU,EACrB,WAAW,MAAM,UAAU,EAAE,EAC7B,QAAQ;AAAA,IACX,MAAM,QAAQ,MAAM,EAAE,QAAQ;AAAA,IAC9B,aAAa,KAAK,aAAa,EAAE,QAAQ;AAAA,IACzC,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAsD;AAAA,IACzD,QAAQ,MAAM,QAAQ;AAAA,IACtB,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,0BAA0B,EAAE,GAAG,MAAM,OAAO,CAAC;AACjE;AAMO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA;AAAA,IACjD,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,aAAa,KAAK,aAAa;AAAA,IAC/B,YAAY,KAAK,aAAa,EAAE,QAAQ;AAAA,IACxC,WAAW,QAAQ,YAAY,EAAE,QAAQ,KAAK;AAAA,IAC9C,UAAU,QAAQ,WAAW,EAAE,QAAQ,KAAK;AAAA;AAAA,IAC5C,UAAU,MAAM,UAAU,EAAE,MAMzB;AAAA,IACH,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAMO,IAAM,gBAAgB,QAAQ,iBAAiB;AAAA,EACpD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,MAAM,KAAK,MAAM,EAAE,OAAO;AAAA,EAC1B,UAAU,MAAM,UAAU;AAAA,EAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD,WAAW,UAAU,YAAY,EAAE,WAAW;AAChD,CAAC;AAEM,IAAM,sBAAsB;AAAA,EACjC;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EACnC,WAAW,MAAM,cAAc,EAAE,EACjC,QAAQ;AAAA,IACX,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,MAA+C;AAAA,IAC5E,UAAU,UAAU,WAAW,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qBAAqB,EAAE,GAAG,MAAM,cAAc;AAAA,IACpD,MAAM,sBAAsB,EAAE,GAAG,MAAM,MAAM;AAAA,EAC/C;AACF;AAEO,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EACnC,WAAW,MAAM,cAAc,EAAE,EACjC,QAAQ;AAAA,IACX,UAAU,KAAK,WAAW,EACvB,WAAW,MAAM,SAAS,EAAE,EAC5B,QAAQ;AAAA,IACX,UAAU,KAAK,WAAW,EACvB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,UAAU,UAAU,WAAW,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,yBAAyB,EAAE,GAAG,MAAM,cAAc,CAAC;AACvE;AAEO,IAAM,cAAc;AAAA,EACzB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,gBAAgB,KAAK,iBAAiB,EAAE,WAAW,MAAM,cAAc,EAAE;AAAA,IACzE,WAAW,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACtC,YAAY,QAAQ,aAAa,EAAE,QAAQ;AAAA,IAC3C,cAAc,QAAQ,eAAe,EAAE,QAAQ,CAAC;AAAA,IAChD,SAAS,UAAU,UAAU;AAAA,IAC7B,WAAW,UAAU,YAAY,EAAE,WAAW;AAAA,EAChD;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC9C,MAAM,sBAAsB,EAAE,GAAG,MAAM,cAAc;AAAA,EACvD;AACF;AAOO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA8E;AAAA,IACjF,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,SAAS,MAAM,SAAS,EAAE,MAAgB,EAAE,QAAQ,CAAC,CAAC;AAAA,IACtD,aAAa,KAAK,aAAa;AAAA,IAC/B,YAAY,MAAM,YAAY,EAAE,MAA+B,EAAE,QAAQ,CAAC,CAAC;AAAA,IAC3E,YAAY,QAAQ,YAAY,EAAE,QAAQ,EAAE;AAAA;AAAA,IAC5C,cAAc,QAAQ,eAAe,EAAE,QAAQ,CAAC;AAAA,IAChD,WAAW,OAAO,aAAa,EAAE,YAAY,KAAK,CAAC;AAAA,IACnD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,yBAAyB,EAAE,GAAG,MAAM,MAAM;AAAA,IAChD,MAAM,yBAAyB,EAAE,GAAG,MAAM,IAAI;AAAA,IAC9C,MAAM,yBAAyB,EAAE,GAAG,MAAM,IAAI;AAAA,EAChD;AACF;AAGO,IAAM,qBAAqB;AAAA,EAChC;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,kBAAkB,EACpC,WAAW,MAAM,cAAc,IAAI,EAAE,UAAU,UAAU,CAAC,EAC1D,QAAQ;AAAA,IACX,gBAAgB,KAAK,kBAAkB,EACpC,WAAW,MAAM,cAAc,IAAI,EAAE,UAAU,UAAU,CAAC,EAC1D,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAKC;AAAA,IACJ,UAAU,QAAQ,UAAU,EAAE,QAAQ,EAAE;AAAA;AAAA,IACxC,eAAe,QAAQ,eAAe,EAAE,QAAQ,KAAK;AAAA,IACrD,SAAS,KAAK,SAAS;AAAA,IACvB,YAAY,MAAM,YAAY,EAAE,MAA+B,EAAE,QAAQ,CAAC,CAAC;AAAA,IAC3E,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,sBAAsB,EAAE,GAAG,MAAM,cAAc;AAAA,IACrD,MAAM,sBAAsB,EAAE,GAAG,MAAM,cAAc;AAAA,IACrD,MAAM,oBAAoB,EAAE,GAAG,MAAM,IAAI;AAAA,EAC3C;AACF;AAMO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,UAAU,KAAK,UAAU;AAAA,IACzB,UAAU,KAAK,WAAW;AAAA,IAC1B,UAAU,QAAQ,WAAW;AAAA,IAC7B,QAAQ,KAAK,QAAQ;AAAA;AAAA,IACrB,WAAW,KAAK,YAAY;AAAA,IAC5B,UAAU,MAAM,UAAU;AAAA,IAC1B,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAyD,EACzD,QAAQ,SAAS;AAAA,IACpB,cAAc,KAAK,eAAe;AAAA,IAClC,YAAY,QAAQ,aAAa,EAAE,QAAQ,CAAC;AAAA,IAC5C,aAAa,QAAQ,cAAc,EAAE,QAAQ,CAAC;AAAA,IAC9C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,aAAa,UAAU,cAAc;AAAA,EACvC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,oBAAoB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC3C,MAAM,sBAAsB,EAAE,GAAG,MAAM,MAAM;AAAA,EAC/C;AACF;AAEO,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,YAAY,KAAK,aAAa,EAC3B,WAAW,MAAM,UAAU,IAAI,EAAE,UAAU,UAAU,CAAC,EACtD,QAAQ;AAAA,IACX,YAAY,QAAQ,aAAa,EAAE,QAAQ;AAAA,IAC3C,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,WAAW,OAAO,aAAa,EAAE,YAAY,KAAK,CAAC;AAAA,IACnD,YAAY,QAAQ,aAAa;AAAA,IACjC,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,8BAA8B,EAAE,GAAG,MAAM,UAAU;AAAA,EAC3D;AACF;AAsEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,IAAI,EAAE,UAAU,UAAU,CAAC,EAClD,QAAQ,EACR,OAAO;AAAA,IACV,iBAAiB,KAAK,kBAAkB,EAAE,QAAQ;AAAA,IAClD,eAAe,MAAM,gBAAgB,EAAE,MAAgB,EAAE,QAAQ;AAAA,IACjE,WAAW,UAAU,YAAY,EAAE,QAAQ;AAAA,IAC3C,gBAAgB,UAAU,kBAAkB;AAAA,IAC5C,YAAY,QAAQ,aAAa,EAAE,QAAQ,CAAC,EAAE,QAAQ;AAAA,IACtD,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC;AAChE;AAGO,IAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EAAE,QAAQ,EAAE,OAAO;AAAA,IACzD,OAAO,KAAK,OAAO,EAAE,QAAQ;AAAA,IAC7B,aAAa,KAAK,aAAa,EAAE,QAAQ;AAAA,IACzC,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAOC;AAAA,IACJ,UAAU,KAAK,UAAU,EACtB,QAAQ,EACR,MAA8C;AAAA,IACjD,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAsE,EACtE,QAAQ,MAAM;AAAA,IACjB,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,YAAY,KAAK,aAAa,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACzD,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA,IAC/B,YAAY,MAAM,aAAa;AAAA,IAC/B,kBAAkB,KAAK,mBAAmB;AAAA,IAC1C,oBAAoB,MAAM,qBAAqB;AAAA,IAC/C,iBAAiB,KAAK,kBAAkB;AAAA,IACxC,kBAAkB,MAAM,mBAAmB,EAAE,MAAgB;AAAA,IAC7D,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,gBAAgB,UAAU,iBAAiB;AAAA,IAC3C,aAAa,UAAU,cAAc;AAAA,IACrC,YAAY,UAAU,aAAa;AAAA,IACnC,UAAU,UAAU,WAAW;AAAA,EACjC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,+BAA+B,EAAE,GAAG,MAAM,MAAM;AAAA,IACtD,MAAM,iCAAiC,EAAE,GAAG,MAAM,QAAQ;AAAA,IAC1D,MAAM,gCAAgC,EAAE,GAAG,MAAM,SAAS;AAAA,EAC5D;AACF;AAGO,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,YAAY,KAAK,aAAa,EAC3B,WAAW,MAAM,kBAAkB,IAAI,EAAE,UAAU,UAAU,CAAC,EAC9D,QAAQ;AAAA,IACX,WAAW,KAAK,YAAY,EACzB,QAAQ,EACR,MAQC;AAAA,IACJ,aAAa,KAAK,aAAa,EAAE,QAAQ;AAAA,IACzC,aAAa,KAAK,cAAc,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IAC3D,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,gCAAgC,EAAE,GAAG,MAAM,UAAU,CAAC;AAC1E;","names":[]}

package/dist/chunk-ODCFS5WD.js

@@ -0,0 +1,463 @@
+// src/core/intelligence/risk-engine.ts
+var DEFAULT_CONFIG = {
+  maxCostPerRequest: 5,
+  maxCostPerHour: 50,
+  maxCostPerDay: 200,
+  maxToolsPerMinute: 30,
+  maxToolsPerHour: 500,
+  maxMessagesPerMinute: 60,
+  blockedTools: [],
+  blockedPatterns: [],
+  safeMode: false,
+  killSwitch: false,
+  customChecks: [],
+  maxTradeSize: 100,
+  maxDailyTradeSpend: 500,
+  maxTradesPerHour: 5
+};
+var costTracker = {
+  hourly: /* @__PURE__ */ new Map(),
+  daily: /* @__PURE__ */ new Map()
+};
+var rateTracker = /* @__PURE__ */ new Map();
+var tradeSpendTracker = {
+  daily: /* @__PURE__ */ new Map(),
+  hourlyCount: /* @__PURE__ */ new Map()
+};
+var auditLog = [];
+var RiskEngine = class {
+  config;
+  checks = [];
+  constructor(config = {}) {
+    this.config = { ...DEFAULT_CONFIG, ...config };
+    this.initializeBuiltInChecks();
+    this.checks.push(...this.config.customChecks);
+  }
+  initializeBuiltInChecks() {
+    this.checks.push({
+      name: "kill_switch",
+      description: "Emergency kill switch - blocks all actions",
+      severity: "critical",
+      check: () => !this.config.killSwitch,
+      failMessage: "Kill switch is active. All actions are blocked."
+    });
+    this.checks.push({
+      name: "safe_mode",
+      description: "Safe mode restricts to read-only operations",
+      severity: "high",
+      check: (ctx) => {
+        if (!this.config.safeMode) return true;
+        const readOnlyActions = [
+          "read",
+          "search",
+          "list",
+          "get",
+          "query",
+          "analyze",
+          "view"
+        ];
+        return readOnlyActions.some(
+          (a) => ctx.action.toLowerCase().includes(a)
+        );
+      },
+      failMessage: "Safe mode is active. Only read-only operations are allowed."
+    });
+    this.checks.push({
+      name: "blocked_tools",
+      description: "Prevents execution of blocked tools",
+      severity: "high",
+      check: (ctx) => !ctx.toolName || !this.config.blockedTools.includes(ctx.toolName),
+      failMessage: "This tool is blocked by the risk policy."
+    });
+    this.checks.push({
+      name: "blocked_patterns",
+      description: "Prevents actions matching blocked patterns",
+      severity: "high",
+      check: (ctx) => {
+        const inputStr = JSON.stringify(ctx.input || {});
+        return !this.config.blockedPatterns.some(
+          (pattern) => new RegExp(pattern, "i").test(inputStr)
+        );
+      },
+      failMessage: "Input matches a blocked pattern."
+    });
+    this.checks.push({
+      name: "cost_per_request",
+      description: "Limits cost per individual request",
+      severity: "medium",
+      check: (ctx) => !ctx.estimatedCost || ctx.estimatedCost <= this.config.maxCostPerRequest,
+      failMessage: `Request exceeds maximum cost of $${this.config.maxCostPerRequest}.`
+    });
+    this.checks.push({
+      name: "hourly_cost_limit",
+      description: "Limits total cost per hour",
+      severity: "high",
+      check: (ctx) => {
+        const key = ctx.userId || "global";
+        const now = Date.now();
+        const hourMs = 3600 * 1e3;
+        const entry = costTracker.hourly.get(key);
+        if (!entry || now - entry.windowStart > hourMs) {
+          return true;
+        }
+        return entry.total + (ctx.estimatedCost || 0) <= this.config.maxCostPerHour;
+      },
+      failMessage: `Hourly cost limit of $${this.config.maxCostPerHour} exceeded.`
+    });
+    this.checks.push({
+      name: "daily_cost_limit",
+      description: "Limits total cost per day",
+      severity: "high",
+      check: (ctx) => {
+        const key = ctx.userId || "global";
+        const now = Date.now();
+        const dayMs = 86400 * 1e3;
+        const entry = costTracker.daily.get(key);
+        if (!entry || now - entry.windowStart > dayMs) {
+          return true;
+        }
+        return entry.total + (ctx.estimatedCost || 0) <= this.config.maxCostPerDay;
+      },
+      failMessage: `Daily cost limit of $${this.config.maxCostPerDay} exceeded.`
+    });
+    this.checks.push({
+      name: "tool_rate_limit_minute",
+      description: "Limits tool executions per minute",
+      severity: "medium",
+      check: (ctx) => {
+        if (!ctx.toolName) return true;
+        return this.checkRate(
+          `tool:${ctx.userId || "global"}`,
+          60 * 1e3,
+          this.config.maxToolsPerMinute
+        );
+      },
+      failMessage: `Tool execution rate limit exceeded (${this.config.maxToolsPerMinute}/min).`
+    });
+    this.checks.push({
+      name: "tool_rate_limit_hour",
+      description: "Limits tool executions per hour",
+      severity: "medium",
+      check: (ctx) => {
+        if (!ctx.toolName) return true;
+        return this.checkRate(
+          `tool_hourly:${ctx.userId || "global"}`,
+          3600 * 1e3,
+          this.config.maxToolsPerHour
+        );
+      },
+      failMessage: `Tool execution hourly limit exceeded (${this.config.maxToolsPerHour}/hr).`
+    });
+    this.checks.push({
+      name: "message_rate_limit",
+      description: "Limits messages per minute",
+      severity: "medium",
+      check: (ctx) => {
+        if (ctx.action !== "send_message") return true;
+        return this.checkRate(
+          `msg:${ctx.userId || "global"}`,
+          60 * 1e3,
+          this.config.maxMessagesPerMinute
+        );
+      },
+      failMessage: `Message rate limit exceeded (${this.config.maxMessagesPerMinute}/min).`
+    });
+    this.checks.push({
+      name: "command_injection",
+      description: "Prevents command injection in tool inputs",
+      severity: "critical",
+      check: (ctx) => {
+        if (!ctx.input) return true;
+        const dangerousPatterns = [
+          /;\s*(rm|del|format|mkfs|dd)\s/i,
+          /\|\s*(bash|sh|cmd|powershell)/i,
+          /`[^`]*`/,
+          /\$\([^)]*\)/,
+          />\s*\/dev\//i
+        ];
+        const inputStr = JSON.stringify(ctx.input);
+        return !dangerousPatterns.some((p) => p.test(inputStr));
+      },
+      failMessage: "Potential command injection detected in input."
+    });
+    this.checks.push({
+      name: "sensitive_data",
+      description: "Prevents leaking sensitive data patterns",
+      severity: "high",
+      check: (ctx) => {
+        if (!ctx.input) return true;
+        const sensitivePatterns = [
+          /\b\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}\b/,
+          // credit card
+          /\b\d{3}-\d{2}-\d{4}\b/,
+          // SSN
+          /-----BEGIN\s+(RSA\s+)?PRIVATE\s+KEY-----/
+          // private key
+        ];
+        const inputStr = JSON.stringify(ctx.input);
+        return !sensitivePatterns.some((p) => p.test(inputStr));
+      },
+      failMessage: "Sensitive data pattern detected in input."
+    });
+    this.checks.push({
+      name: "trade_size_limit",
+      description: "Blocks orders exceeding maximum single trade size",
+      severity: "critical",
+      check: (ctx) => {
+        if (ctx.toolName !== "crypto_exchange") return true;
+        const input = ctx.input || {};
+        if (input.action !== "place_order") return true;
+        const estimatedTotal = input._estimatedTotal || 0;
+        if (estimatedTotal <= 0) return true;
+        return estimatedTotal <= this.config.maxTradeSize;
+      },
+      failMessage: `Trade exceeds maximum single order size of $${this.config.maxTradeSize}.`
+    });
+    this.checks.push({
+      name: "daily_trade_spend_limit",
+      description: "Blocks when daily trade spending cap exceeded",
+      severity: "critical",
+      check: (ctx) => {
+        if (ctx.toolName !== "crypto_exchange") return true;
+        const input = ctx.input || {};
+        if (input.action !== "place_order") return true;
+        const estimatedTotal = input._estimatedTotal || 0;
+        if (estimatedTotal <= 0) return true;
+        const key = ctx.userId || "global";
+        const now = Date.now();
+        const dayMs = 86400 * 1e3;
+        const entry = tradeSpendTracker.daily.get(key);
+        if (!entry || now - entry.windowStart > dayMs) {
+          return true;
+        }
+        return entry.total + estimatedTotal <= this.config.maxDailyTradeSpend;
+      },
+      failMessage: `Daily trade spend limit of $${this.config.maxDailyTradeSpend} exceeded.`
+    });
+    this.checks.push({
+      name: "trade_rate_limit",
+      description: "Blocks when hourly trade count exceeded",
+      severity: "high",
+      check: (ctx) => {
+        if (ctx.toolName !== "crypto_exchange") return true;
+        const input = ctx.input || {};
+        if (input.action !== "place_order") return true;
+        const key = ctx.userId || "global";
+        const now = Date.now();
+        const hourMs = 3600 * 1e3;
+        const entry = tradeSpendTracker.hourlyCount.get(key);
+        if (!entry || now - entry.windowStart > hourMs) {
+          return true;
+        }
+        return entry.count < this.config.maxTradesPerHour;
+      },
+      failMessage: `Trade rate limit exceeded (${this.config.maxTradesPerHour}/hr).`
+    });
+  }
+  checkRate(key, windowMs, maxCount) {
+    const now = Date.now();
+    let entry = rateTracker.get(key);
+    if (!entry) {
+      entry = { timestamps: [] };
+      rateTracker.set(key, entry);
+    }
+    entry.timestamps = entry.timestamps.filter((t) => now - t < windowMs);
+    return entry.timestamps.length < maxCount;
+  }
+  recordRate(key) {
+    let entry = rateTracker.get(key);
+    if (!entry) {
+      entry = { timestamps: [] };
+      rateTracker.set(key, entry);
+    }
+    entry.timestamps.push(Date.now());
+  }
+  /**
+   * Evaluate all risk checks for an action
+   * This is the main entry point - NON-BYPASSABLE
+   */
+  async evaluate(context) {
+    const results = [];
+    let allowed = true;
+    for (const check of this.checks) {
+      let passed;
+      try {
+        passed = await check.check(context);
+      } catch {
+        passed = false;
+      }
+      results.push({
+        name: check.name,
+        passed,
+        severity: check.severity,
+        message: passed ? void 0 : check.failMessage
+      });
+      if (!passed && (check.severity === "critical" || check.severity === "high")) {
+        allowed = false;
+      }
+    }
+    const decision = {
+      allowed,
+      checks: results,
+      timestamp: /* @__PURE__ */ new Date(),
+      context
+    };
+    auditLog.push(decision);
+    if (auditLog.length > 1e4) {
+      auditLog.splice(0, auditLog.length - 5e3);
+    }
+    if (allowed) {
+      if (context.toolName) {
+        this.recordRate(`tool:${context.userId || "global"}`);
+        this.recordRate(`tool_hourly:${context.userId || "global"}`);
+      }
+      if (context.action === "send_message") {
+        this.recordRate(`msg:${context.userId || "global"}`);
+      }
+      if (context.estimatedCost) {
+        this.recordCost(context.userId || "global", context.estimatedCost);
+      }
+    }
+    return decision;
+  }
+  recordCost(userId, cost) {
+    const now = Date.now();
+    const hourMs = 3600 * 1e3;
+    const dayMs = 86400 * 1e3;
+    let hourly = costTracker.hourly.get(userId);
+    if (!hourly || now - hourly.windowStart > hourMs) {
+      hourly = { total: 0, windowStart: now };
+      costTracker.hourly.set(userId, hourly);
+    }
+    hourly.total += cost;
+    let daily = costTracker.daily.get(userId);
+    if (!daily || now - daily.windowStart > dayMs) {
+      daily = { total: 0, windowStart: now };
+      costTracker.daily.set(userId, daily);
+    }
+    daily.total += cost;
+  }
+  /**
+   * Add a custom risk check
+   */
+  addCheck(check) {
+    this.checks.push(check);
+  }
+  /**
+   * Activate kill switch
+   */
+  activateKillSwitch() {
+    this.config.killSwitch = true;
+  }
+  /**
+   * Deactivate kill switch
+   */
+  deactivateKillSwitch() {
+    this.config.killSwitch = false;
+  }
+  /**
+   * Enable safe mode
+   */
+  enableSafeMode() {
+    this.config.safeMode = true;
+  }
+  /**
+   * Disable safe mode
+   */
+  disableSafeMode() {
+    this.config.safeMode = false;
+  }
+  /**
+   * Block a tool
+   */
+  blockTool(toolName) {
+    if (!this.config.blockedTools.includes(toolName)) {
+      this.config.blockedTools.push(toolName);
+    }
+  }
+  /**
+   * Unblock a tool
+   */
+  unblockTool(toolName) {
+    this.config.blockedTools = this.config.blockedTools.filter(
+      (t) => t !== toolName
+    );
+  }
+  /**
+   * Get recent audit log
+   */
+  getAuditLog(limit = 100) {
+    return auditLog.slice(-limit);
+  }
+  /**
+   * Get current configuration
+   */
+  getConfig() {
+    return { ...this.config };
+  }
+  /**
+   * Update configuration
+   */
+  updateConfig(updates) {
+    Object.assign(this.config, updates);
+  }
+  /**
+   * Record trade spend after a successful trade execution.
+   * Call this after a trade completes to track daily/hourly limits.
+   */
+  recordTradeSpend(userId, amountUsd) {
+    const now = Date.now();
+    const dayMs = 86400 * 1e3;
+    const hourMs = 3600 * 1e3;
+    let daily = tradeSpendTracker.daily.get(userId);
+    if (!daily || now - daily.windowStart > dayMs) {
+      daily = { total: 0, windowStart: now };
+      tradeSpendTracker.daily.set(userId, daily);
+    }
+    daily.total += amountUsd;
+    let hourly = tradeSpendTracker.hourlyCount.get(userId);
+    if (!hourly || now - hourly.windowStart > hourMs) {
+      hourly = { count: 0, windowStart: now };
+      tradeSpendTracker.hourlyCount.set(userId, hourly);
+    }
+    hourly.count += 1;
+  }
+  /**
+   * Register risk engine as a hook on tool:execute to intercept
+   * financial tool calls at the hook level.
+   */
+  registerAsHook(hookMgr) {
+    return hookMgr.register({
+      event: "tool:execute",
+      phase: "before",
+      name: "risk-engine-financial",
+      priority: 3,
+      // Run before tool sandbox (priority 5)
+      handler: async (context) => {
+        const toolName = context.data.toolName || "";
+        const input = context.data.input || {};
+        if (toolName !== "crypto_exchange") return context;
+        const decision = await this.evaluate({
+          action: "tool_execute",
+          userId: context.userId,
+          toolName,
+          input
+        });
+        if (!decision.allowed) {
+          context.cancelled = true;
+          const failedChecks = decision.checks.filter((c) => !c.passed).map((c) => c.message).join("; ");
+          context.cancelReason = `[RiskEngine] BLOCKED: ${failedChecks}`;
+          console.log(`[RiskEngine] Blocked ${toolName}: ${failedChecks}`);
+        }
+        return context;
+      }
+    });
+  }
+};
+var riskEngine = new RiskEngine();
+
+export {
+  RiskEngine,
+  riskEngine
+};
+//# sourceMappingURL=chunk-ODCFS5WD.js.map