opensentinel 3.6.1 → 3.7.0

package/dist/chunk-SDLOMKCW.js

@@ -0,0 +1,213 @@
+import {
+  createLogger
+} from "./chunk-7BNFELEK.js";
+import {
+  providerRegistry
+} from "./chunk-GW6V4D43.js";
+import {
+  db
+} from "./chunk-5BTVJR7R.js";
+import {
+  m365AnalysisResults
+} from "./chunk-ZIBRVA3Y.js";
+
+// src/integrations/m365/analyzer.ts
+import { eq, desc } from "drizzle-orm";
+var log = createLogger("m365:analyzer");
+var SYSTEM_PROMPT = `You are a security analyst reviewing an email for phishing, business-email-compromise, and credential-harvesting risk.
+
+Return STRICT JSON with this exact shape:
+{
+  "riskScore": <integer 0-100>,
+  "category": <"Safe" | "Suspicious" | "Phishing">,
+  "explanation": [<short strings, each one signal>],
+  "recommendedActions": [<short strings, each one actionable step>]
+}
+
+Scoring guidance:
+- 0-34   Safe: typical business mail, known-good sender patterns, no red flags.
+- 35-69  Suspicious: one or more soft signals (urgency, consumer sender for business content, lookalike domain).
+- 70-100 Phishing: credential harvest, wire-transfer / gift-card fraud, brand impersonation, malicious link patterns.
+
+Be specific in explanations \u2014 name the signal, not a category. Return JSON only, no prose.`;
+async function analyzeEmail(input) {
+  const started = Date.now();
+  const provider = safeGetProvider();
+  if (!provider) {
+    const result = heuristicAnalyze(input);
+    return { ...result, latencyMs: Date.now() - started };
+  }
+  const userContent = JSON.stringify({
+    subject: input.subject,
+    sender: input.sender,
+    body: truncate(input.body ?? "", 8e3),
+    headers: input.headers ?? {}
+  });
+  try {
+    const caps = provider.getCapabilities();
+    const model = caps?.defaultModel || (typeof provider.defaultModel === "string" ? provider.defaultModel : "claude-sonnet-4-6");
+    const response = await provider.createMessage({
+      model,
+      max_tokens: 800,
+      system: SYSTEM_PROMPT,
+      messages: [{ role: "user", content: userContent }]
+    });
+    const text = extractText(response);
+    const parsed = parseJsonResponse(text);
+    if (!parsed) throw new Error("LLM returned unparseable JSON");
+    const result = {
+      riskScore: clampScore(parsed.riskScore),
+      category: normaliseCategory(parsed.category, clampScore(parsed.riskScore)),
+      explanation: Array.isArray(parsed.explanation) ? parsed.explanation.map(String) : [],
+      recommendedActions: Array.isArray(parsed.recommendedActions) ? parsed.recommendedActions.map(String) : [],
+      engine: "llm",
+      model,
+      latencyMs: Date.now() - started
+    };
+    return result;
+  } catch (err) {
+    log.warn("LLM analysis failed, falling back to heuristic", {
+      error: err instanceof Error ? err.message : String(err)
+    });
+    const result = heuristicAnalyze(input);
+    return { ...result, latencyMs: Date.now() - started };
+  }
+}
+async function persistAnalysis(opts) {
+  const inserted = await db.insert(m365AnalysisResults).values({
+    userKey: opts.userKey,
+    inputType: opts.inputType ?? "email",
+    inputId: opts.inputId ?? null,
+    subject: opts.input.subject,
+    sender: opts.input.sender,
+    riskScore: opts.result.riskScore,
+    category: opts.result.category,
+    explanation: opts.result.explanation,
+    recommendedActions: opts.result.recommendedActions,
+    engine: opts.result.engine,
+    model: opts.result.model ?? null,
+    latencyMs: opts.result.latencyMs
+  }).returning({ id: m365AnalysisResults.id });
+  return inserted[0].id;
+}
+async function listAnalyses(userKey, limit = 50) {
+  return db.select().from(m365AnalysisResults).where(eq(m365AnalysisResults.userKey, userKey)).orderBy(desc(m365AnalysisResults.createdAt)).limit(limit);
+}
+var KNOWN_BRANDS = [
+  "paypal.com",
+  "microsoft.com",
+  "apple.com",
+  "amazon.com",
+  "google.com",
+  "netflix.com",
+  "chase.com",
+  "bankofamerica.com"
+];
+function heuristicAnalyze(input) {
+  const explanation = [];
+  let score = 0;
+  const sender = input.sender.toLowerCase();
+  const body = (input.body ?? "").toLowerCase();
+  const subject = input.subject.toLowerCase();
+  const combined = `${body} ${subject}`;
+  if (/(urgent|immediately|act now|wire transfer|gift card|verify your account|password expires)/i.test(combined)) {
+    score += 25;
+    explanation.push("Urgency or credential-harvest phrasing detected.");
+  }
+  if (/(click here|tap here|verify account|reset your password|confirm identity|login to continue|restore access|regain access)/i.test(combined)) {
+    score += 20;
+    explanation.push("Common social-engineering phrases detected.");
+  }
+  if (/(account (has been )?(suspended|terminated|locked|disabled|compromised))/i.test(combined)) {
+    score += 20;
+    explanation.push("Account-status fear phrasing detected.");
+  }
+  for (const brand of KNOWN_BRANDS) {
+    const brandName = brand.split(".")[0];
+    if (sender.includes(brandName) && !sender.endsWith(`@${brand}`) && !sender.endsWith(`.${brand}`)) {
+      score += 50;
+      explanation.push(`Possible impersonation of ${brand} \u2014 sender domain does not match.`);
+      break;
+    }
+  }
+  if (/@(gmail|outlook|hotmail|yahoo|proton)\.com$/.test(sender) && /(invoice|wire|payment|urgent)/i.test(combined)) {
+    score += 15;
+    explanation.push("Consumer mailbox is requesting business payment action.");
+  }
+  const linkCount = (body.match(/https?:\/\/[^\s)<]+/g) || []).length;
+  if (linkCount > 10) {
+    score += 10;
+    explanation.push(`High link density (${linkCount} URLs).`);
+  }
+  score = Math.min(100, score);
+  const category = normaliseCategory(void 0, score);
+  const recommendedActions = category === "Phishing" ? [
+    "Do not click links or open attachments.",
+    "Report to your security team or phishing@ mailbox.",
+    "Verify sender via a trusted out-of-band channel."
+  ] : category === "Suspicious" ? [
+    "Verify sender identity through a known channel before acting.",
+    "Inspect link destinations before clicking."
+  ] : ["No high-risk signals detected \u2014 proceed with normal vigilance."];
+  return {
+    riskScore: score,
+    category,
+    explanation: explanation.length ? explanation : ["No major high-risk indicators detected."],
+    recommendedActions,
+    engine: "heuristic",
+    latencyMs: 0
+  };
+}
+function safeGetProvider() {
+  try {
+    return providerRegistry.getDefault();
+  } catch {
+    return null;
+  }
+}
+function truncate(s, n) {
+  return s.length > n ? s.slice(0, n) + "...[truncated]" : s;
+}
+function clampScore(x) {
+  const n = Number(x);
+  if (!Number.isFinite(n)) return 0;
+  return Math.max(0, Math.min(100, Math.round(n)));
+}
+function normaliseCategory(raw, score) {
+  const v = typeof raw === "string" ? raw.toLowerCase() : "";
+  if (v.includes("phish")) return "Phishing";
+  if (v.includes("suspic")) return "Suspicious";
+  if (v.includes("safe")) return "Safe";
+  if (score >= 70) return "Phishing";
+  if (score >= 35) return "Suspicious";
+  return "Safe";
+}
+function extractText(response) {
+  const r = response;
+  if (!r) return "";
+  if (typeof r.content === "string") return r.content;
+  if (Array.isArray(r.content)) {
+    return r.content.map((b) => typeof b === "string" ? b : b?.text ?? "").join("");
+  }
+  if (typeof r.text === "string") return r.text;
+  return "";
+}
+function parseJsonResponse(text) {
+  if (!text) return null;
+  const match = text.match(/\{[\s\S]*\}/);
+  if (!match) return null;
+  try {
+    return JSON.parse(match[0]);
+  } catch {
+    return null;
+  }
+}
+
+export {
+  analyzeEmail,
+  persistAnalysis,
+  listAnalyses,
+  heuristicAnalyze,
+  parseJsonResponse
+};
+//# sourceMappingURL=chunk-SDLOMKCW.js.map

package/dist/chunk-SDLOMKCW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/integrations/m365/analyzer.ts"],"sourcesContent":["/**\n * Email risk analysis — LLM first, with a deterministic heuristic fallback.\n *\n * Uses the default LLM provider from providerRegistry (typically Anthropic) to\n * produce structured { riskScore, category, explanation, recommendedActions }.\n * Falls back to regex heuristics when no provider is registered — useful for\n * tests and self-hosted deployments without an LLM key.\n */\n\nimport { db, m365AnalysisResults } from \"../../db\";\nimport { providerRegistry } from \"../../core/providers\";\nimport { eq, desc } from \"drizzle-orm\";\nimport { createLogger } from \"../../core/logger\";\n\nconst log = createLogger(\"m365:analyzer\");\n\nexport interface AnalysisInput {\n  subject: string;\n  sender: string;\n  body?: string;\n  headers?: Record<string, string>;\n}\n\nexport type AnalysisCategory = \"Safe\" | \"Suspicious\" | \"Phishing\" | \"Error\";\n\nexport interface AnalysisResult {\n  riskScore: number; // 0-100\n  category: AnalysisCategory;\n  explanation: string[];\n  recommendedActions: string[];\n  engine: \"llm\" | \"heuristic\";\n  model?: string;\n  latencyMs: number;\n}\n\nconst SYSTEM_PROMPT = `You are a security analyst reviewing an email for phishing, business-email-compromise, and credential-harvesting risk.\n\nReturn STRICT JSON with this exact shape:\n{\n  \"riskScore\": <integer 0-100>,\n  \"category\": <\"Safe\" | \"Suspicious\" | \"Phishing\">,\n  \"explanation\": [<short strings, each one signal>],\n  \"recommendedActions\": [<short strings, each one actionable step>]\n}\n\nScoring guidance:\n- 0-34   Safe: typical business mail, known-good sender patterns, no red flags.\n- 35-69  Suspicious: one or more soft signals (urgency, consumer sender for business content, lookalike domain).\n- 70-100 Phishing: credential harvest, wire-transfer / gift-card fraud, brand impersonation, malicious link patterns.\n\nBe specific in explanations — name the signal, not a category. Return JSON only, no prose.`;\n\nexport async function analyzeEmail(input: AnalysisInput): Promise<AnalysisResult> {\n  const started = Date.now();\n  const provider = safeGetProvider();\n\n  if (!provider) {\n    const result = heuristicAnalyze(input);\n    return { ...result, latencyMs: Date.now() - started };\n  }\n\n  const userContent = JSON.stringify({\n    subject: input.subject,\n    sender: input.sender,\n    body: truncate(input.body ?? \"\", 8000),\n    headers: input.headers ?? {},\n  });\n\n  try {\n    const caps = provider.getCapabilities();\n    const model =\n      (caps as any)?.defaultModel ||\n      (typeof (provider as any).defaultModel === \"string\" ? (provider as any).defaultModel : \"claude-sonnet-4-6\");\n\n    const response = await provider.createMessage({\n      model,\n      max_tokens: 800,\n      system: SYSTEM_PROMPT,\n      messages: [{ role: \"user\", content: userContent }],\n    });\n\n    const text = extractText(response);\n    const parsed = parseJsonResponse(text);\n    if (!parsed) throw new Error(\"LLM returned unparseable JSON\");\n\n    const result: AnalysisResult = {\n      riskScore: clampScore(parsed.riskScore),\n      category: normaliseCategory(parsed.category, clampScore(parsed.riskScore)),\n      explanation: Array.isArray(parsed.explanation) ? parsed.explanation.map(String) : [],\n      recommendedActions: Array.isArray(parsed.recommendedActions)\n        ? parsed.recommendedActions.map(String)\n        : [],\n      engine: \"llm\",\n      model,\n      latencyMs: Date.now() - started,\n    };\n    return result;\n  } catch (err) {\n    log.warn(\"LLM analysis failed, falling back to heuristic\", {\n      error: err instanceof Error ? err.message : String(err),\n    });\n    const result = heuristicAnalyze(input);\n    return { ...result, latencyMs: Date.now() - started };\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Persistence\n// ---------------------------------------------------------------------------\n\nexport interface PersistOpts {\n  userKey: string;\n  input: AnalysisInput;\n  inputId?: string;\n  inputType?: \"email\" | \"file\" | \"document\";\n  result: AnalysisResult;\n}\n\nexport async function persistAnalysis(opts: PersistOpts): Promise<string> {\n  const inserted = await db\n    .insert(m365AnalysisResults)\n    .values({\n      userKey: opts.userKey,\n      inputType: opts.inputType ?? \"email\",\n      inputId: opts.inputId ?? null,\n      subject: opts.input.subject,\n      sender: opts.input.sender,\n      riskScore: opts.result.riskScore,\n      category: opts.result.category,\n      explanation: opts.result.explanation,\n      recommendedActions: opts.result.recommendedActions,\n      engine: opts.result.engine,\n      model: opts.result.model ?? null,\n      latencyMs: opts.result.latencyMs,\n    })\n    .returning({ id: m365AnalysisResults.id });\n  return inserted[0].id;\n}\n\nexport async function listAnalyses(userKey: string, limit = 50) {\n  return db\n    .select()\n    .from(m365AnalysisResults)\n    .where(eq(m365AnalysisResults.userKey, userKey))\n    .orderBy(desc(m365AnalysisResults.createdAt))\n    .limit(limit);\n}\n\n// ---------------------------------------------------------------------------\n// Heuristic fallback\n// ---------------------------------------------------------------------------\n\nconst KNOWN_BRANDS = [\n  \"paypal.com\",\n  \"microsoft.com\",\n  \"apple.com\",\n  \"amazon.com\",\n  \"google.com\",\n  \"netflix.com\",\n  \"chase.com\",\n  \"bankofamerica.com\",\n];\n\nexport function heuristicAnalyze(input: AnalysisInput): AnalysisResult {\n  const explanation: string[] = [];\n  let score = 0;\n\n  const sender = input.sender.toLowerCase();\n  const body = (input.body ?? \"\").toLowerCase();\n  const subject = input.subject.toLowerCase();\n  const combined = `${body} ${subject}`;\n\n  if (/(urgent|immediately|act now|wire transfer|gift card|verify your account|password expires)/i.test(combined)) {\n    score += 25;\n    explanation.push(\"Urgency or credential-harvest phrasing detected.\");\n  }\n\n  if (/(click here|tap here|verify account|reset your password|confirm identity|login to continue|restore access|regain access)/i.test(combined)) {\n    score += 20;\n    explanation.push(\"Common social-engineering phrases detected.\");\n  }\n\n  if (/(account (has been )?(suspended|terminated|locked|disabled|compromised))/i.test(combined)) {\n    score += 20;\n    explanation.push(\"Account-status fear phrasing detected.\");\n  }\n\n  for (const brand of KNOWN_BRANDS) {\n    const brandName = brand.split(\".\")[0];\n    if (sender.includes(brandName) && !sender.endsWith(`@${brand}`) && !sender.endsWith(`.${brand}`)) {\n      score += 50;\n      explanation.push(`Possible impersonation of ${brand} — sender domain does not match.`);\n      break;\n    }\n  }\n\n  if (/@(gmail|outlook|hotmail|yahoo|proton)\\.com$/.test(sender) && /(invoice|wire|payment|urgent)/i.test(combined)) {\n    score += 15;\n    explanation.push(\"Consumer mailbox is requesting business payment action.\");\n  }\n\n  const linkCount = (body.match(/https?:\\/\\/[^\\s)<]+/g) || []).length;\n  if (linkCount > 10) {\n    score += 10;\n    explanation.push(`High link density (${linkCount} URLs).`);\n  }\n\n  score = Math.min(100, score);\n  const category = normaliseCategory(undefined, score);\n\n  const recommendedActions: string[] =\n    category === \"Phishing\"\n      ? [\n          \"Do not click links or open attachments.\",\n          \"Report to your security team or phishing@ mailbox.\",\n          \"Verify sender via a trusted out-of-band channel.\",\n        ]\n      : category === \"Suspicious\"\n        ? [\n            \"Verify sender identity through a known channel before acting.\",\n            \"Inspect link destinations before clicking.\",\n          ]\n        : [\"No high-risk signals detected — proceed with normal vigilance.\"];\n\n  return {\n    riskScore: score,\n    category,\n    explanation: explanation.length ? explanation : [\"No major high-risk indicators detected.\"],\n    recommendedActions,\n    engine: \"heuristic\",\n    latencyMs: 0,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// internals\n// ---------------------------------------------------------------------------\n\nfunction safeGetProvider() {\n  try {\n    return providerRegistry.getDefault();\n  } catch {\n    return null;\n  }\n}\n\nfunction truncate(s: string, n: number): string {\n  return s.length > n ? s.slice(0, n) + \"...[truncated]\" : s;\n}\n\nfunction clampScore(x: unknown): number {\n  const n = Number(x);\n  if (!Number.isFinite(n)) return 0;\n  return Math.max(0, Math.min(100, Math.round(n)));\n}\n\nfunction normaliseCategory(raw: unknown, score: number): AnalysisCategory {\n  const v = typeof raw === \"string\" ? raw.toLowerCase() : \"\";\n  if (v.includes(\"phish\")) return \"Phishing\";\n  if (v.includes(\"suspic\")) return \"Suspicious\";\n  if (v.includes(\"safe\")) return \"Safe\";\n  if (score >= 70) return \"Phishing\";\n  if (score >= 35) return \"Suspicious\";\n  return \"Safe\";\n}\n\nfunction extractText(response: unknown): string {\n  // Provider response may be { content: string | blocks[] } or shaped differently.\n  const r = response as any;\n  if (!r) return \"\";\n  if (typeof r.content === \"string\") return r.content;\n  if (Array.isArray(r.content)) {\n    return r.content\n      .map((b: any) => (typeof b === \"string\" ? b : b?.text ?? \"\"))\n      .join(\"\");\n  }\n  if (typeof r.text === \"string\") return r.text;\n  return \"\";\n}\n\nexport function parseJsonResponse(text: string): {\n  riskScore?: unknown;\n  category?: unknown;\n  explanation?: unknown;\n  recommendedActions?: unknown;\n} | null {\n  if (!text) return null;\n  // Extract the first {...} block — tolerant of LLMs that wrap with code fences or prose.\n  const match = text.match(/\\{[\\s\\S]*\\}/);\n  if (!match) return null;\n  try {\n    return JSON.parse(match[0]);\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAWA,SAAS,IAAI,YAAY;AAGzB,IAAM,MAAM,aAAa,eAAe;AAqBxC,IAAM,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBtB,eAAsB,aAAa,OAA+C;AAChF,QAAM,UAAU,KAAK,IAAI;AACzB,QAAM,WAAW,gBAAgB;AAEjC,MAAI,CAAC,UAAU;AACb,UAAM,SAAS,iBAAiB,KAAK;AACrC,WAAO,EAAE,GAAG,QAAQ,WAAW,KAAK,IAAI,IAAI,QAAQ;AAAA,EACtD;AAEA,QAAM,cAAc,KAAK,UAAU;AAAA,IACjC,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,MAAM,SAAS,MAAM,QAAQ,IAAI,GAAI;AAAA,IACrC,SAAS,MAAM,WAAW,CAAC;AAAA,EAC7B,CAAC;AAED,MAAI;AACF,UAAM,OAAO,SAAS,gBAAgB;AACtC,UAAM,QACH,MAAc,iBACd,OAAQ,SAAiB,iBAAiB,WAAY,SAAiB,eAAe;AAEzF,UAAM,WAAW,MAAM,SAAS,cAAc;AAAA,MAC5C;AAAA,MACA,YAAY;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU,CAAC,EAAE,MAAM,QAAQ,SAAS,YAAY,CAAC;AAAA,IACnD,CAAC;AAED,UAAM,OAAO,YAAY,QAAQ;AACjC,UAAM,SAAS,kBAAkB,IAAI;AACrC,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,+BAA+B;AAE5D,UAAM,SAAyB;AAAA,MAC7B,WAAW,WAAW,OAAO,SAAS;AAAA,MACtC,UAAU,kBAAkB,OAAO,UAAU,WAAW,OAAO,SAAS,CAAC;AAAA,MACzE,aAAa,MAAM,QAAQ,OAAO,WAAW,IAAI,OAAO,YAAY,IAAI,MAAM,IAAI,CAAC;AAAA,MACnF,oBAAoB,MAAM,QAAQ,OAAO,kBAAkB,IACvD,OAAO,mBAAmB,IAAI,MAAM,IACpC,CAAC;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA,WAAW,KAAK,IAAI,IAAI;AAAA,IAC1B;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,KAAK,kDAAkD;AAAA,MACzD,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACxD,CAAC;AACD,UAAM,SAAS,iBAAiB,KAAK;AACrC,WAAO,EAAE,GAAG,QAAQ,WAAW,KAAK,IAAI,IAAI,QAAQ;AAAA,EACtD;AACF;AAcA,eAAsB,gBAAgB,MAAoC;AACxE,QAAM,WAAW,MAAM,GACpB,OAAO,mBAAmB,EAC1B,OAAO;AAAA,IACN,SAAS,KAAK;AAAA,IACd,WAAW,KAAK,aAAa;AAAA,IAC7B,SAAS,KAAK,WAAW;AAAA,IACzB,SAAS,KAAK,MAAM;AAAA,IACpB,QAAQ,KAAK,MAAM;AAAA,IACnB,WAAW,KAAK,OAAO;AAAA,IACvB,UAAU,KAAK,OAAO;AAAA,IACtB,aAAa,KAAK,OAAO;AAAA,IACzB,oBAAoB,KAAK,OAAO;AAAA,IAChC,QAAQ,KAAK,OAAO;AAAA,IACpB,OAAO,KAAK,OAAO,SAAS;AAAA,IAC5B,WAAW,KAAK,OAAO;AAAA,EACzB,CAAC,EACA,UAAU,EAAE,IAAI,oBAAoB,GAAG,CAAC;AAC3C,SAAO,SAAS,CAAC,EAAE;AACrB;AAEA,eAAsB,aAAa,SAAiB,QAAQ,IAAI;AAC9D,SAAO,GACJ,OAAO,EACP,KAAK,mBAAmB,EACxB,MAAM,GAAG,oBAAoB,SAAS,OAAO,CAAC,EAC9C,QAAQ,KAAK,oBAAoB,SAAS,CAAC,EAC3C,MAAM,KAAK;AAChB;AAMA,IAAM,eAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,SAAS,iBAAiB,OAAsC;AACrE,QAAM,cAAwB,CAAC;AAC/B,MAAI,QAAQ;AAEZ,QAAM,SAAS,MAAM,OAAO,YAAY;AACxC,QAAM,QAAQ,MAAM,QAAQ,IAAI,YAAY;AAC5C,QAAM,UAAU,MAAM,QAAQ,YAAY;AAC1C,QAAM,WAAW,GAAG,IAAI,IAAI,OAAO;AAEnC,MAAI,6FAA6F,KAAK,QAAQ,GAAG;AAC/G,aAAS;AACT,gBAAY,KAAK,kDAAkD;AAAA,EACrE;AAEA,MAAI,4HAA4H,KAAK,QAAQ,GAAG;AAC9I,aAAS;AACT,gBAAY,KAAK,6CAA6C;AAAA,EAChE;AAEA,MAAI,4EAA4E,KAAK,QAAQ,GAAG;AAC9F,aAAS;AACT,gBAAY,KAAK,wCAAwC;AAAA,EAC3D;AAEA,aAAW,SAAS,cAAc;AAChC,UAAM,YAAY,MAAM,MAAM,GAAG,EAAE,CAAC;AACpC,QAAI,OAAO,SAAS,SAAS,KAAK,CAAC,OAAO,SAAS,IAAI,KAAK,EAAE,KAAK,CAAC,OAAO,SAAS,IAAI,KAAK,EAAE,GAAG;AAChG,eAAS;AACT,kBAAY,KAAK,6BAA6B,KAAK,uCAAkC;AACrF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,8CAA8C,KAAK,MAAM,KAAK,iCAAiC,KAAK,QAAQ,GAAG;AACjH,aAAS;AACT,gBAAY,KAAK,yDAAyD;AAAA,EAC5E;AAEA,QAAM,aAAa,KAAK,MAAM,sBAAsB,KAAK,CAAC,GAAG;AAC7D,MAAI,YAAY,IAAI;AAClB,aAAS;AACT,gBAAY,KAAK,sBAAsB,SAAS,SAAS;AAAA,EAC3D;AAEA,UAAQ,KAAK,IAAI,KAAK,KAAK;AAC3B,QAAM,WAAW,kBAAkB,QAAW,KAAK;AAEnD,QAAM,qBACJ,aAAa,aACT;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,EACF,IACA,aAAa,eACX;AAAA,IACE;AAAA,IACA;AAAA,EACF,IACA,CAAC,qEAAgE;AAEzE,SAAO;AAAA,IACL,WAAW;AAAA,IACX;AAAA,IACA,aAAa,YAAY,SAAS,cAAc,CAAC,yCAAyC;AAAA,IAC1F;AAAA,IACA,QAAQ;AAAA,IACR,WAAW;AAAA,EACb;AACF;AAMA,SAAS,kBAAkB;AACzB,MAAI;AACF,WAAO,iBAAiB,WAAW;AAAA,EACrC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,SAAS,GAAW,GAAmB;AAC9C,SAAO,EAAE,SAAS,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,mBAAmB;AAC3D;AAEA,SAAS,WAAW,GAAoB;AACtC,QAAM,IAAI,OAAO,CAAC;AAClB,MAAI,CAAC,OAAO,SAAS,CAAC,EAAG,QAAO;AAChC,SAAO,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC;AACjD;AAEA,SAAS,kBAAkB,KAAc,OAAiC;AACxE,QAAM,IAAI,OAAO,QAAQ,WAAW,IAAI,YAAY,IAAI;AACxD,MAAI,EAAE,SAAS,OAAO,EAAG,QAAO;AAChC,MAAI,EAAE,SAAS,QAAQ,EAAG,QAAO;AACjC,MAAI,EAAE,SAAS,MAAM,EAAG,QAAO;AAC/B,MAAI,SAAS,GAAI,QAAO;AACxB,MAAI,SAAS,GAAI,QAAO;AACxB,SAAO;AACT;AAEA,SAAS,YAAY,UAA2B;AAE9C,QAAM,IAAI;AACV,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,OAAO,EAAE,YAAY,SAAU,QAAO,EAAE;AAC5C,MAAI,MAAM,QAAQ,EAAE,OAAO,GAAG;AAC5B,WAAO,EAAE,QACN,IAAI,CAAC,MAAY,OAAO,MAAM,WAAW,IAAI,GAAG,QAAQ,EAAG,EAC3D,KAAK,EAAE;AAAA,EACZ;AACA,MAAI,OAAO,EAAE,SAAS,SAAU,QAAO,EAAE;AACzC,SAAO;AACT;AAEO,SAAS,kBAAkB,MAKzB;AACP,MAAI,CAAC,KAAM,QAAO;AAElB,QAAM,QAAQ,KAAK,MAAM,aAAa;AACtC,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,WAAO,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/{chunk-7MZN73J2.js → chunk-TKBVW7ZJ.js}

@@ -1,12 +1,12 @@
 import {
   metric
-} from "./chunk-6LTLIYAQ.js";
+} from "./chunk-YEDEAX6Y.js";
 import {
   db
-} from "./chunk-S4NJJS5C.js";
+} from "./chunk-5BTVJR7R.js";
 import {
   errorLogs
-} from "./chunk-NYVBXUGD.js";
+} from "./chunk-ZIBRVA3Y.js";
 
 // src/core/observability/error-tracker.ts
 import { eq, and, gte, lte, desc } from "drizzle-orm";
@@ -159,4 +159,4 @@ export {
   cleanupOldErrors,
   errorContext
 };
-//# sourceMappingURL=chunk-7MZN73J2.js.map
+//# sourceMappingURL=chunk-TKBVW7ZJ.js.map

package/dist/{chunk-A24GPVLY.js → chunk-V3OKHQUX.js}

@@ -1,16 +1,16 @@
 import {
   resolveEntity
-} from "./chunk-AR34B6XR.js";
+} from "./chunk-2I5QHYG6.js";
 import {
   db
-} from "./chunk-S4NJJS5C.js";
+} from "./chunk-5BTVJR7R.js";
 import {
   env
-} from "./chunk-PUNIMPMY.js";
+} from "./chunk-4KIHDIXZ.js";
 import {
   graphEntities,
   graphRelationships
-} from "./chunk-NYVBXUGD.js";
+} from "./chunk-ZIBRVA3Y.js";
 
 // src/core/intelligence/enrichment-pipeline.ts
 import { eq as eq2, sql } from "drizzle-orm";
@@ -2440,4 +2440,4 @@ export {
   enrichEntity,
   batchEnrich
 };
-//# sourceMappingURL=chunk-A24GPVLY.js.map
+//# sourceMappingURL=chunk-V3OKHQUX.js.map

package/dist/{chunk-NMSHVO5O.js → chunk-WMDVOWN6.js}

@@ -1,12 +1,12 @@
 import {
   transcribeAudio
-} from "./chunk-4YJRBMMA.js";
+} from "./chunk-BNZHWAZC.js";
 import {
   scheduleReminder
-} from "./chunk-MFK34XSY.js";
+} from "./chunk-GJETKBOY.js";
 import {
   chatWithTools
-} from "./chunk-6JY4HNUH.js";
+} from "./chunk-ZMML6T63.js";
 
 // src/inputs/slack/index.ts
 import { createRequire } from "module";
@@ -800,4 +800,4 @@ export {
   createSlackBot,
   slack_default
 };
-//# sourceMappingURL=chunk-NMSHVO5O.js.map
+//# sourceMappingURL=chunk-WMDVOWN6.js.map

package/dist/{chunk-643M3AP5.js → chunk-WMFYI7XC.js}

@@ -1,23 +1,23 @@
 import {
   metric
-} from "./chunk-6LTLIYAQ.js";
+} from "./chunk-YEDEAX6Y.js";
 import {
   costTracker
-} from "./chunk-BMOUYXLX.js";
+} from "./chunk-6ZNCY2GI.js";
 import {
   audit
-} from "./chunk-KABG5PG3.js";
+} from "./chunk-BBN4VCNK.js";
 import {
   db
-} from "./chunk-S4NJJS5C.js";
+} from "./chunk-5BTVJR7R.js";
 import {
   env
-} from "./chunk-PUNIMPMY.js";
+} from "./chunk-4KIHDIXZ.js";
 import {
   agentMessages,
   agentProgress,
   subAgents
-} from "./chunk-NYVBXUGD.js";
+} from "./chunk-ZIBRVA3Y.js";
 
 // src/core/agents/agent-manager.ts
 import { eq, and, desc } from "drizzle-orm";
@@ -561,4 +561,4 @@ export {
   updateAgentTokens,
   agent_manager_default
 };
-//# sourceMappingURL=chunk-643M3AP5.js.map
+//# sourceMappingURL=chunk-WMFYI7XC.js.map

package/dist/{chunk-6LTLIYAQ.js → chunk-YEDEAX6Y.js}

@@ -1,9 +1,9 @@
 import {
   db
-} from "./chunk-S4NJJS5C.js";
+} from "./chunk-5BTVJR7R.js";
 import {
   metrics
-} from "./chunk-NYVBXUGD.js";
+} from "./chunk-ZIBRVA3Y.js";
 
 // src/core/observability/metrics.ts
 import { eq, and, gte, lte, desc } from "drizzle-orm";
@@ -191,4 +191,4 @@ export {
   getSystemMetrics,
   cleanupOldMetrics
 };
-//# sourceMappingURL=chunk-6LTLIYAQ.js.map
+//# sourceMappingURL=chunk-YEDEAX6Y.js.map

package/dist/{chunk-NYVBXUGD.js → chunk-ZIBRVA3Y.js}

@@ -20,6 +20,9 @@ __export(schema_exports, {
   graphEntities: () => graphEntities,
   graphRelationships: () => graphRelationships,
   incidentTimeline: () => incidentTimeline,
+  m365AnalysisResults: () => m365AnalysisResults,
+  m365Connections: () => m365Connections,
+  m365OauthStates: () => m365OauthStates,
   memories: () => memories,
   messages: () => messages,
   metrics: () => metrics,
@@ -622,6 +625,59 @@ var incidentTimeline = pgTable(
   },
   (table) => [index("incident_timeline_incident_idx").on(table.incidentId)]
 );
+var m365OauthStates = pgTable(
+  "m365_oauth_states",
+  {
+    state: text("state").primaryKey(),
+    codeVerifier: text("code_verifier").notNull(),
+    userKey: text("user_key"),
+    returnTo: text("return_to"),
+    createdAt: timestamp("created_at").defaultNow().notNull(),
+    expiresAt: timestamp("expires_at").notNull()
+  },
+  (table) => [index("m365_oauth_states_expires_idx").on(table.expiresAt)]
+);
+var m365Connections = pgTable(
+  "m365_connections",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    userKey: text("user_key").notNull().unique(),
+    microsoftUserId: text("microsoft_user_id"),
+    email: text("email"),
+    displayName: text("display_name"),
+    accessTokenEncrypted: text("access_token_encrypted").notNull(),
+    refreshTokenEncrypted: text("refresh_token_encrypted"),
+    scope: text("scope"),
+    tokenType: text("token_type").default("Bearer"),
+    expiresAt: timestamp("expires_at").notNull(),
+    createdAt: timestamp("created_at").defaultNow().notNull(),
+    updatedAt: timestamp("updated_at").defaultNow().notNull()
+  },
+  (table) => [index("m365_connections_user_idx").on(table.userKey)]
+);
+var m365AnalysisResults = pgTable(
+  "m365_analysis_results",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    userKey: text("user_key").notNull(),
+    inputType: text("input_type").notNull().$type(),
+    inputId: text("input_id"),
+    subject: text("subject"),
+    sender: text("sender"),
+    riskScore: integer("risk_score").notNull(),
+    category: text("category").notNull().$type(),
+    explanation: jsonb("explanation").$type(),
+    recommendedActions: jsonb("recommended_actions").$type(),
+    engine: text("engine").notNull().$type(),
+    model: text("model"),
+    latencyMs: integer("latency_ms"),
+    createdAt: timestamp("created_at").defaultNow().notNull()
+  },
+  (table) => [
+    index("m365_analysis_user_idx").on(table.userKey),
+    index("m365_analysis_created_idx").on(table.createdAt)
+  ]
+);
 
 export {
   users,
@@ -657,6 +713,9 @@ export {
   twoFactorAuth,
   securityIncidents,
   incidentTimeline,
+  m365OauthStates,
+  m365Connections,
+  m365AnalysisResults,
   schema_exports
 };
-//# sourceMappingURL=chunk-NYVBXUGD.js.map
+//# sourceMappingURL=chunk-ZIBRVA3Y.js.map

package/dist/chunk-ZIBRVA3Y.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/schema.ts"],"sourcesContent":["import {\r\n  pgTable,\r\n  text,\r\n  timestamp,\r\n  uuid,\r\n  integer,\r\n  jsonb,\r\n  boolean,\r\n  vector,\r\n  index,\r\n  customType,\r\n} from \"drizzle-orm/pg-core\";\r\n\r\n// Custom tsvector type for full-text search\r\nconst tsvector = customType<{ data: string }>({\r\n  dataType() {\r\n    return \"tsvector\";\r\n  },\r\n});\r\n\r\n// Users table\r\nexport const users = pgTable(\"users\", {\r\n  id: uuid(\"id\").primaryKey().defaultRandom(),\r\n  telegramId: text(\"telegram_id\").unique(),\r\n  name: text(\"name\"),\r\n  preferences: jsonb(\"preferences\").$type<{\r\n    timezone?: string;\r\n    language?: string;\r\n    verbosity?: \"terse\" | \"normal\" | \"detailed\";\r\n    persona?: \"formal\" | \"casual\" | \"snarky\";\r\n  }>(),\r\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\r\n});\r\n\r\n// Conversations table\r\nexport const conversations = pgTable(\"conversations\", {\r\n  id: uuid(\"id\").primaryKey().defaultRandom(),\r\n  userId: uuid(\"user_id\").references(() => users.id),\r\n  title: text(\"title\"),\r\n  source: text(\"source\").notNull().default(\"telegram\"), // telegram, web, api\r\n  metadata: jsonb(\"metadata\"),\r\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\r\n});\r\n\r\n// Messages table\r\nexport const messages = pgTable(\r\n  \"messages\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    conversationId: uuid(\"conversation_id\")\r\n      .references(() => conversations.id)\r\n      .notNull(),\r\n    role: text(\"role\").notNull().$type<\"user\" | \"assistant\" | \"system\">(),\r\n    content: text(\"content\").notNull(),\r\n    tokenCount: integer(\"token_count\"),\r\n    metadata: jsonb(\"metadata\"),\r\n    encrypted: boolean(\"encrypted\").default(false).notNull(),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"messages_conversation_idx\").on(table.conversationId)]\r\n);\r\n\r\n// Memories table with vector embeddings for RAG\r\nexport const memories = pgTable(\r\n  \"memories\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\").references(() => users.id),\r\n    type: text(\"type\")\r\n      .notNull()\r\n      .$type<\"episodic\" | \"semantic\" | \"procedural\">(),\r\n    content: text(\"content\").notNull(),\r\n    embedding: vector(\"embedding\", { dimensions: 1536 }), // OpenAI embedding size\r\n    searchVector: tsvector(\"search_vector\"), // Full-text search vector (GIN indexed)\r\n    importance: integer(\"importance\").default(5), // 1-10 scale\r\n    source: text(\"source\"), // Where this memory came from\r\n    provenance: text(\"provenance\"), // Origin tracking: \"conversation:id\", \"api:manual\", \"extraction:auto\"\r\n    metadata: jsonb(\"metadata\"),\r\n    encrypted: boolean(\"encrypted\").default(false).notNull(),\r\n    lastAccessed: timestamp(\"last_accessed\").defaultNow(),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"memories_user_idx\").on(table.userId)]\r\n);\r\n\r\n// Scheduled tasks table\r\nexport const scheduledTasks = pgTable(\"scheduled_tasks\", {\r\n  id: uuid(\"id\").primaryKey().defaultRandom(),\r\n  userId: uuid(\"user_id\").references(() => users.id),\r\n  name: text(\"name\").notNull(),\r\n  description: text(\"description\"),\r\n  cronExpression: text(\"cron_expression\"),\r\n  nextRunAt: timestamp(\"next_run_at\"),\r\n  lastRunAt: timestamp(\"last_run_at\"),\r\n  enabled: boolean(\"enabled\").default(true),\r\n  action: jsonb(\"action\").$type<{\r\n    type: \"message\" | \"command\" | \"webhook\";\r\n    payload: Record<string, unknown>;\r\n  }>(),\r\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n});\r\n\r\n// Tool execution logs\r\nexport const toolLogs = pgTable(\r\n  \"tool_logs\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    conversationId: uuid(\"conversation_id\").references(() => conversations.id),\r\n    toolName: text(\"tool_name\").notNull(),\r\n    input: jsonb(\"input\"),\r\n    output: jsonb(\"output\"),\r\n    success: boolean(\"success\").notNull(),\r\n    durationMs: integer(\"duration_ms\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"tool_logs_conversation_idx\").on(table.conversationId)]\r\n);\r\n\r\n// ============================================\r\n// SECURITY TABLES (Phase 1)\r\n// ============================================\r\n\r\n// Sessions table for session management\r\nexport const sessions = pgTable(\r\n  \"sessions\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\")\r\n      .references(() => users.id)\r\n      .notNull(),\r\n    token: text(\"token\").notNull().unique(),\r\n    deviceInfo: jsonb(\"device_info\").$type<{\r\n      userAgent?: string;\r\n      platform?: string;\r\n      browser?: string;\r\n    }>(),\r\n    ipAddress: text(\"ip_address\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n    expiresAt: timestamp(\"expires_at\").notNull(),\r\n    lastActiveAt: timestamp(\"last_active_at\").defaultNow(),\r\n  },\r\n  (table) => [index(\"sessions_user_idx\").on(table.userId)]\r\n);\r\n\r\n// Audit logs table for tracking all actions\r\nexport const auditLogs = pgTable(\r\n  \"audit_logs\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\").references(() => users.id),\r\n    sessionId: uuid(\"session_id\").references(() => sessions.id),\r\n    action: text(\"action\").notNull(), // 'tool_use', 'login', 'settings_change', etc.\r\n    resource: text(\"resource\"), // 'shell', 'file', 'memory', etc.\r\n    resourceId: text(\"resource_id\"), // ID of the affected resource\r\n    details: jsonb(\"details\"),\r\n    ipAddress: text(\"ip_address\"),\r\n    userAgent: text(\"user_agent\"),\r\n    success: boolean(\"success\").default(true),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n    // Tamper-proof chain fields (SOC 2)\r\n    sequenceNumber: integer(\"sequence_number\"),\r\n    entryHash: text(\"entry_hash\"),\r\n    previousHash: text(\"previous_hash\"),\r\n  },\r\n  (table) => [\r\n    index(\"audit_logs_user_idx\").on(table.userId),\r\n    index(\"audit_logs_action_idx\").on(table.action),\r\n    index(\"audit_logs_created_idx\").on(table.createdAt),\r\n    index(\"audit_logs_sequence_idx\").on(table.sequenceNumber),\r\n  ]\r\n);\r\n\r\n// API keys table for programmatic access\r\nexport const apiKeys = pgTable(\r\n  \"api_keys\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\")\r\n      .references(() => users.id)\r\n      .notNull(),\r\n    name: text(\"name\").notNull(),\r\n    keyHash: text(\"key_hash\").notNull(), // bcrypt hash of the key\r\n    keyPrefix: text(\"key_prefix\").notNull(), // First 8 chars for identification (e.g., \"mb_live_\")\r\n    permissions: jsonb(\"permissions\").$type<string[]>(), // ['chat:basic', 'tools:shell', etc.]\r\n    lastUsedAt: timestamp(\"last_used_at\"),\r\n    expiresAt: timestamp(\"expires_at\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n    revokedAt: timestamp(\"revoked_at\"),\r\n  },\r\n  (table) => [index(\"api_keys_user_idx\").on(table.userId)]\r\n);\r\n\r\n// Rate limits table for tracking request rates\r\nexport const rateLimits = pgTable(\r\n  \"rate_limits\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    identifier: text(\"identifier\").notNull(), // userId, IP, or API key prefix\r\n    endpoint: text(\"endpoint\").notNull(), // 'api/chat', 'tool/shell', etc.\r\n    windowStart: timestamp(\"window_start\").notNull(),\r\n    requestCount: integer(\"request_count\").default(0),\r\n    lastRequest: timestamp(\"last_request\"),\r\n  },\r\n  (table) => [\r\n    index(\"rate_limits_identifier_endpoint_idx\").on(\r\n      table.identifier,\r\n      table.endpoint\r\n    ),\r\n  ]\r\n);\r\n\r\n// ============================================\r\n// OBSERVABILITY TABLES (Phase 1)\r\n// ============================================\r\n\r\n// Metrics table for performance tracking\r\nexport const metrics = pgTable(\r\n  \"metrics\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    name: text(\"name\").notNull(), // 'response_latency', 'token_usage', 'tool_duration', etc.\r\n    value: integer(\"value\").notNull(),\r\n    unit: text(\"unit\"), // 'ms', 'tokens', 'bytes', etc.\r\n    tags: jsonb(\"tags\").$type<Record<string, string>>(), // { tool: 'shell', status: 'success' }\r\n    timestamp: timestamp(\"timestamp\").defaultNow().notNull(),\r\n  },\r\n  (table) => [\r\n    index(\"metrics_name_timestamp_idx\").on(table.name, table.timestamp),\r\n  ]\r\n);\r\n\r\n// Error logs table for centralized error tracking\r\nexport const errorLogs = pgTable(\r\n  \"error_logs\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    source: text(\"source\").notNull(), // 'brain', 'tool', 'telegram', 'api', 'scheduler'\r\n    errorType: text(\"error_type\").notNull(), // 'ApiError', 'ValidationError', etc.\r\n    errorCode: text(\"error_code\"), // Application-specific error codes\r\n    message: text(\"message\").notNull(),\r\n    stack: text(\"stack\"),\r\n    context: jsonb(\"context\"), // Additional context like request data\r\n    userId: uuid(\"user_id\").references(() => users.id),\r\n    conversationId: uuid(\"conversation_id\").references(() => conversations.id),\r\n    resolved: boolean(\"resolved\").default(false),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [\r\n    index(\"error_logs_source_idx\").on(table.source),\r\n    index(\"error_logs_created_idx\").on(table.createdAt),\r\n  ]\r\n);\r\n\r\n// ============================================\r\n// EVOLUTION SYSTEM TABLES (Phase 2)\r\n// ============================================\r\n\r\n// Usage patterns for evolution tracking\r\nexport const usagePatterns = pgTable(\r\n  \"usage_patterns\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\")\r\n      .references(() => users.id)\r\n      .notNull(),\r\n    patternType: text(\"pattern_type\").notNull(), // 'tool_usage', 'topic', 'time_of_day', 'complexity'\r\n    patternKey: text(\"pattern_key\").notNull(), // e.g., 'shell', 'morning', 'coding'\r\n    patternData: jsonb(\"pattern_data\"),\r\n    confidence: integer(\"confidence\").default(0), // 0-100\r\n    firstSeen: timestamp(\"first_seen\").defaultNow().notNull(),\r\n    lastSeen: timestamp(\"last_seen\").defaultNow(),\r\n    occurrences: integer(\"occurrences\").default(1),\r\n  },\r\n  (table) => [\r\n    index(\"usage_patterns_user_idx\").on(table.userId),\r\n    index(\"usage_patterns_type_idx\").on(table.patternType),\r\n  ]\r\n);\r\n\r\n// Achievements definitions\r\nexport const achievements = pgTable(\"achievements\", {\r\n  id: uuid(\"id\").primaryKey().defaultRandom(),\r\n  code: text(\"code\").notNull().unique(), // 'first_tool_use', 'power_user', 'researcher'\r\n  name: text(\"name\").notNull(),\r\n  description: text(\"description\"),\r\n  iconEmoji: text(\"icon_emoji\"), // Emoji to display\r\n  category: text(\"category\"), // 'exploration', 'productivity', 'mastery'\r\n  criteria: jsonb(\"criteria\").$type<{\r\n    type: string; // 'count', 'streak', 'threshold'\r\n    metric: string; // 'tool_uses', 'conversations', 'memories'\r\n    threshold: number;\r\n    conditions?: Record<string, unknown>;\r\n  }>(),\r\n  points: integer(\"points\").default(10),\r\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n});\r\n\r\n// User achievements (unlocked)\r\nexport const userAchievements = pgTable(\r\n  \"user_achievements\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\")\r\n      .references(() => users.id)\r\n      .notNull(),\r\n    achievementId: uuid(\"achievement_id\")\r\n      .references(() => achievements.id)\r\n      .notNull(),\r\n    unlockedAt: timestamp(\"unlocked_at\").defaultNow().notNull(),\r\n    progress: integer(\"progress\").default(100), // For progressive achievements\r\n    notified: boolean(\"notified\").default(false),\r\n  },\r\n  (table) => [index(\"user_achievements_user_idx\").on(table.userId)]\r\n);\r\n\r\n// Evolution transformation modes\r\nexport const evolutionModes = pgTable(\r\n  \"molt_modes\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\")\r\n      .references(() => users.id)\r\n      .notNull(),\r\n    mode: text(\"mode\")\r\n      .notNull()\r\n      .$type<\"productivity\" | \"creative\" | \"research\" | \"learning\">(),\r\n    activatedAt: timestamp(\"activated_at\").defaultNow().notNull(),\r\n    deactivatedAt: timestamp(\"deactivated_at\"),\r\n    metadata: jsonb(\"metadata\"),\r\n  },\r\n  (table) => [index(\"molt_modes_user_idx\").on(table.userId)]\r\n);\r\n\r\n// Archived memories (for memory shedding)\r\nexport const archivedMemories = pgTable(\r\n  \"archived_memories\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    originalMemoryId: uuid(\"original_memory_id\").notNull(),\r\n    userId: uuid(\"user_id\").references(() => users.id),\r\n    type: text(\"type\")\r\n      .notNull()\r\n      .$type<\"episodic\" | \"semantic\" | \"procedural\">(),\r\n    content: text(\"content\").notNull(),\r\n    reason: text(\"reason\"), // 'stale', 'duplicate', 'low_importance', 'user_request'\r\n    originalCreatedAt: timestamp(\"original_created_at\"),\r\n    archivedAt: timestamp(\"archived_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"archived_memories_user_idx\").on(table.userId)]\r\n);\r\n\r\n// ============================================\r\n// CALENDAR & TRIGGERS TABLES (Phase 3)\r\n// ============================================\r\n\r\nexport const calendarTriggers = pgTable(\r\n  \"calendar_triggers\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\")\r\n      .references(() => users.id)\r\n      .notNull(),\r\n    name: text(\"name\").notNull(),\r\n    calendarSource: text(\"calendar_source\").notNull(), // 'google', 'outlook', 'ical'\r\n    calendarId: text(\"calendar_id\"),\r\n    triggerType: text(\"trigger_type\").notNull(), // 'event_start', 'event_end', 'daily_briefing'\r\n    offsetMinutes: integer(\"offset_minutes\").default(0), // Trigger X minutes before/after\r\n    action: jsonb(\"action\").$type<{\r\n      type: \"message\" | \"tool\" | \"webhook\";\r\n      payload: Record<string, unknown>;\r\n    }>(),\r\n    enabled: boolean(\"enabled\").default(true),\r\n    lastTriggered: timestamp(\"last_triggered\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"calendar_triggers_user_idx\").on(table.userId)]\r\n);\r\n\r\n// ============================================\r\n// SUB-AGENT TABLES (Phase 4)\r\n// ============================================\r\n\r\nexport const subAgents = pgTable(\r\n  \"sub_agents\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    parentConversationId: uuid(\"parent_conversation_id\").references(\r\n      () => conversations.id\r\n    ),\r\n    userId: uuid(\"user_id\")\r\n      .references(() => users.id)\r\n      .notNull(),\r\n    type: text(\"type\")\r\n      .notNull()\r\n      .$type<\"research\" | \"coding\" | \"writing\" | \"analysis\">(),\r\n    name: text(\"name\").notNull(),\r\n    status: text(\"status\")\r\n      .notNull()\r\n      .$type<\"pending\" | \"running\" | \"completed\" | \"failed\" | \"cancelled\">(),\r\n    objective: text(\"objective\").notNull(),\r\n    context: jsonb(\"context\"),\r\n    result: jsonb(\"result\"),\r\n    tokenBudget: integer(\"token_budget\").default(50000),\r\n    tokensUsed: integer(\"tokens_used\").default(0),\r\n    timeBudgetMs: integer(\"time_budget_ms\").default(3600000), // 1 hour default\r\n    startedAt: timestamp(\"started_at\"),\r\n    completedAt: timestamp(\"completed_at\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [\r\n    index(\"sub_agents_user_idx\").on(table.userId),\r\n    index(\"sub_agents_status_idx\").on(table.status),\r\n  ]\r\n);\r\n\r\nexport const agentMessages = pgTable(\r\n  \"agent_messages\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    agentId: uuid(\"agent_id\")\r\n      .references(() => subAgents.id)\r\n      .notNull(),\r\n    role: text(\"role\")\r\n      .notNull()\r\n      .$type<\"user\" | \"assistant\" | \"system\" | \"tool_result\">(),\r\n    content: text(\"content\").notNull(),\r\n    metadata: jsonb(\"metadata\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"agent_messages_agent_idx\").on(table.agentId)]\r\n);\r\n\r\nexport const agentProgress = pgTable(\r\n  \"agent_progress\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    agentId: uuid(\"agent_id\")\r\n      .references(() => subAgents.id)\r\n      .notNull(),\r\n    step: integer(\"step\").notNull(),\r\n    description: text(\"description\").notNull(),\r\n    status: text(\"status\")\r\n      .notNull()\r\n      .$type<\"pending\" | \"running\" | \"completed\" | \"failed\">(),\r\n    output: jsonb(\"output\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"agent_progress_agent_idx\").on(table.agentId)]\r\n);\r\n\r\n// ============================================\r\n// PERSONALITY TABLES (Phase 5)\r\n// ============================================\r\n\r\nexport const personas = pgTable(\r\n  \"personas\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\").references(() => users.id), // null = system persona\r\n    name: text(\"name\").notNull(),\r\n    description: text(\"description\"),\r\n    basePrompt: text(\"base_prompt\").notNull(),\r\n    isDefault: boolean(\"is_default\").default(false),\r\n    isSystem: boolean(\"is_system\").default(false), // Built-in personas\r\n    settings: jsonb(\"settings\").$type<{\r\n      verbosity: \"terse\" | \"normal\" | \"detailed\";\r\n      humor: \"off\" | \"subtle\" | \"full\";\r\n      formality: \"formal\" | \"casual\" | \"professional\";\r\n      emoji: boolean;\r\n      proactivity: \"minimal\" | \"moderate\" | \"proactive\";\r\n    }>(),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"personas_user_idx\").on(table.userId)]\r\n);\r\n\r\n// ============================================\r\n// ENTERPRISE TABLES (Phase 6)\r\n// ============================================\r\n\r\nexport const organizations = pgTable(\"organizations\", {\r\n  id: uuid(\"id\").primaryKey().defaultRandom(),\r\n  name: text(\"name\").notNull(),\r\n  slug: text(\"slug\").unique(),\r\n  settings: jsonb(\"settings\"),\r\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  updatedAt: timestamp(\"updated_at\").defaultNow(),\r\n});\r\n\r\nexport const organizationMembers = pgTable(\r\n  \"organization_members\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    organizationId: uuid(\"organization_id\")\r\n      .references(() => organizations.id)\r\n      .notNull(),\r\n    userId: uuid(\"user_id\")\r\n      .references(() => users.id)\r\n      .notNull(),\r\n    role: text(\"role\").notNull().$type<\"owner\" | \"admin\" | \"member\" | \"viewer\">(),\r\n    joinedAt: timestamp(\"joined_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [\r\n    index(\"org_members_org_idx\").on(table.organizationId),\r\n    index(\"org_members_user_idx\").on(table.userId),\r\n  ]\r\n);\r\n\r\nexport const sharedMemories = pgTable(\r\n  \"shared_memories\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    organizationId: uuid(\"organization_id\")\r\n      .references(() => organizations.id)\r\n      .notNull(),\r\n    memoryId: uuid(\"memory_id\")\r\n      .references(() => memories.id)\r\n      .notNull(),\r\n    sharedBy: uuid(\"shared_by\")\r\n      .references(() => users.id)\r\n      .notNull(),\r\n    sharedAt: timestamp(\"shared_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"shared_memories_org_idx\").on(table.organizationId)]\r\n);\r\n\r\nexport const usageQuotas = pgTable(\r\n  \"usage_quotas\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\").references(() => users.id),\r\n    organizationId: uuid(\"organization_id\").references(() => organizations.id),\r\n    quotaType: text(\"quota_type\").notNull(), // 'tokens_daily', 'tokens_monthly', 'agents_concurrent'\r\n    limitValue: integer(\"limit_value\").notNull(),\r\n    currentValue: integer(\"current_value\").default(0),\r\n    resetAt: timestamp(\"reset_at\"),\r\n    updatedAt: timestamp(\"updated_at\").defaultNow(),\r\n  },\r\n  (table) => [\r\n    index(\"usage_quotas_user_idx\").on(table.userId),\r\n    index(\"usage_quotas_org_idx\").on(table.organizationId),\r\n  ]\r\n);\r\n\r\n// ============================================\r\n// KNOWLEDGE GRAPH TABLES\r\n// ============================================\r\n\r\n// Graph entities — people, projects, topics, events, organizations, locations\r\nexport const graphEntities = pgTable(\r\n  \"graph_entities\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\").references(() => users.id),\r\n    type: text(\"type\")\r\n      .notNull()\r\n      .$type<\"person\" | \"project\" | \"topic\" | \"event\" | \"organization\" | \"location\">(),\r\n    name: text(\"name\").notNull(),\r\n    aliases: jsonb(\"aliases\").$type<string[]>().default([]),\r\n    description: text(\"description\"),\r\n    attributes: jsonb(\"attributes\").$type<Record<string, unknown>>().default({}),\r\n    importance: integer(\"importance\").default(50), // 0-100\r\n    mentionCount: integer(\"mention_count\").default(1),\r\n    embedding: vector(\"embedding\", { dimensions: 1536 }),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [\r\n    index(\"graph_entities_user_idx\").on(table.userId),\r\n    index(\"graph_entities_type_idx\").on(table.type),\r\n    index(\"graph_entities_name_idx\").on(table.name),\r\n  ]\r\n);\r\n\r\n// Graph relationships — connections between entities\r\nexport const graphRelationships = pgTable(\r\n  \"graph_relationships\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    sourceEntityId: uuid(\"source_entity_id\")\r\n      .references(() => graphEntities.id, { onDelete: \"cascade\" })\r\n      .notNull(),\r\n    targetEntityId: uuid(\"target_entity_id\")\r\n      .references(() => graphEntities.id, { onDelete: \"cascade\" })\r\n      .notNull(),\r\n    type: text(\"type\")\r\n      .notNull()\r\n      .$type<\r\n        | \"knows\" | \"works_with\" | \"works_on\" | \"family\" | \"friend\"\r\n        | \"colleague\" | \"manages\" | \"reports_to\" | \"belongs_to\"\r\n        | \"related_to\" | \"located_in\" | \"interested_in\" | \"expert_in\"\r\n        | \"mentioned_in\" | \"participates_in\"\r\n      >(),\r\n    strength: integer(\"strength\").default(50), // 0-100\r\n    bidirectional: boolean(\"bidirectional\").default(false),\r\n    context: text(\"context\"),\r\n    attributes: jsonb(\"attributes\").$type<Record<string, unknown>>().default({}),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [\r\n    index(\"graph_rel_source_idx\").on(table.sourceEntityId),\r\n    index(\"graph_rel_target_idx\").on(table.targetEntityId),\r\n    index(\"graph_rel_type_idx\").on(table.type),\r\n  ]\r\n);\r\n\r\n// ============================================\r\n// DOCUMENT KNOWLEDGE BASE TABLES\r\n// ============================================\r\n\r\nexport const documents = pgTable(\r\n  \"documents\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    name: text(\"name\").notNull(),\r\n    filename: text(\"filename\"),\r\n    mimeType: text(\"mime_type\"),\r\n    fileSize: integer(\"file_size\"),\r\n    source: text(\"source\"), // 'upload', 'url', 'api'\r\n    sourceUrl: text(\"source_url\"),\r\n    metadata: jsonb(\"metadata\"),\r\n    status: text(\"status\")\r\n      .notNull()\r\n      .$type<\"pending\" | \"processing\" | \"completed\" | \"failed\">()\r\n      .default(\"pending\"),\r\n    errorMessage: text(\"error_message\"),\r\n    chunkCount: integer(\"chunk_count\").default(0),\r\n    totalTokens: integer(\"total_tokens\").default(0),\r\n    userId: uuid(\"user_id\").references(() => users.id),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\r\n    processedAt: timestamp(\"processed_at\"),\r\n  },\r\n  (table) => [\r\n    index(\"documents_user_idx\").on(table.userId),\r\n    index(\"documents_status_idx\").on(table.status),\r\n  ]\r\n);\r\n\r\nexport const documentChunks = pgTable(\r\n  \"document_chunks\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    documentId: uuid(\"document_id\")\r\n      .references(() => documents.id, { onDelete: \"cascade\" })\r\n      .notNull(),\r\n    chunkIndex: integer(\"chunk_index\").notNull(),\r\n    content: text(\"content\").notNull(),\r\n    embedding: vector(\"embedding\", { dimensions: 1536 }),\r\n    tokenCount: integer(\"token_count\"),\r\n    metadata: jsonb(\"metadata\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [\r\n    index(\"document_chunks_document_idx\").on(table.documentId),\r\n  ]\r\n);\r\n\r\n// ============================================\r\n// TYPE EXPORTS\r\n// ============================================\r\n\r\nexport type User = typeof users.$inferSelect;\r\nexport type NewUser = typeof users.$inferInsert;\r\nexport type Conversation = typeof conversations.$inferSelect;\r\nexport type NewConversation = typeof conversations.$inferInsert;\r\nexport type Message = typeof messages.$inferSelect;\r\nexport type NewMessage = typeof messages.$inferInsert;\r\nexport type Memory = typeof memories.$inferSelect;\r\nexport type NewMemory = typeof memories.$inferInsert;\r\n\r\n// Security types\r\nexport type Session = typeof sessions.$inferSelect;\r\nexport type NewSession = typeof sessions.$inferInsert;\r\nexport type AuditLog = typeof auditLogs.$inferSelect;\r\nexport type NewAuditLog = typeof auditLogs.$inferInsert;\r\nexport type ApiKey = typeof apiKeys.$inferSelect;\r\nexport type NewApiKey = typeof apiKeys.$inferInsert;\r\n\r\n// Observability types\r\nexport type Metric = typeof metrics.$inferSelect;\r\nexport type NewMetric = typeof metrics.$inferInsert;\r\nexport type ErrorLog = typeof errorLogs.$inferSelect;\r\nexport type NewErrorLog = typeof errorLogs.$inferInsert;\r\n\r\n// Evolution system types\r\nexport type UsagePattern = typeof usagePatterns.$inferSelect;\r\nexport type NewUsagePattern = typeof usagePatterns.$inferInsert;\r\nexport type Achievement = typeof achievements.$inferSelect;\r\nexport type NewAchievement = typeof achievements.$inferInsert;\r\nexport type UserAchievement = typeof userAchievements.$inferSelect;\r\nexport type EvolutionMode = typeof evolutionModes.$inferSelect;\r\nexport type NewEvolutionMode = typeof evolutionModes.$inferInsert;\r\n\r\n// Sub-agent types\r\nexport type SubAgent = typeof subAgents.$inferSelect;\r\nexport type NewSubAgent = typeof subAgents.$inferInsert;\r\nexport type AgentMessage = typeof agentMessages.$inferSelect;\r\nexport type AgentProgress = typeof agentProgress.$inferSelect;\r\n\r\n// Personality types\r\nexport type Persona = typeof personas.$inferSelect;\r\nexport type NewPersona = typeof personas.$inferInsert;\r\n\r\n// Enterprise types\r\nexport type Organization = typeof organizations.$inferSelect;\r\nexport type NewOrganization = typeof organizations.$inferInsert;\r\nexport type OrganizationMember = typeof organizationMembers.$inferSelect;\r\n\r\n// Knowledge graph types\r\nexport type GraphEntity = typeof graphEntities.$inferSelect;\r\nexport type NewGraphEntity = typeof graphEntities.$inferInsert;\r\nexport type GraphRelationship = typeof graphRelationships.$inferSelect;\r\nexport type NewGraphRelationship = typeof graphRelationships.$inferInsert;\r\n\r\n// Document knowledge base types\r\nexport type Document = typeof documents.$inferSelect;\r\nexport type NewDocument = typeof documents.$inferInsert;\r\nexport type DocumentChunk = typeof documentChunks.$inferSelect;\r\nexport type NewDocumentChunk = typeof documentChunks.$inferInsert;\r\n\r\n// ============================================\r\n// SOC 2 COMPLIANCE TABLES\r\n// ============================================\r\n\r\n// Two-factor authentication (persisted, encrypted secrets)\r\nexport const twoFactorAuth = pgTable(\r\n  \"two_factor_auth\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userId: uuid(\"user_id\")\r\n      .references(() => users.id, { onDelete: \"cascade\" })\r\n      .notNull()\r\n      .unique(),\r\n    secretEncrypted: text(\"secret_encrypted\").notNull(),\r\n    recoveryCodes: jsonb(\"recovery_codes\").$type<string[]>().notNull(),\r\n    enabledAt: timestamp(\"enabled_at\").notNull(),\r\n    lastVerifiedAt: timestamp(\"last_verified_at\"),\r\n    keyVersion: integer(\"key_version\").default(1).notNull(),\r\n    metadata: jsonb(\"metadata\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"two_factor_auth_user_idx\").on(table.userId)]\r\n);\r\n\r\n// Security incidents tracking\r\nexport const securityIncidents = pgTable(\r\n  \"security_incidents\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    incidentNumber: text(\"incident_number\").notNull().unique(),\r\n    title: text(\"title\").notNull(),\r\n    description: text(\"description\").notNull(),\r\n    type: text(\"type\")\r\n      .notNull()\r\n      .$type<\r\n        | \"brute_force\"\r\n        | \"unauthorized_access\"\r\n        | \"data_breach\"\r\n        | \"suspicious_activity\"\r\n        | \"system_compromise\"\r\n        | \"policy_violation\"\r\n      >(),\r\n    severity: text(\"severity\")\r\n      .notNull()\r\n      .$type<\"low\" | \"medium\" | \"high\" | \"critical\">(),\r\n    status: text(\"status\")\r\n      .notNull()\r\n      .$type<\"open\" | \"investigating\" | \"contained\" | \"resolved\" | \"closed\">()\r\n      .default(\"open\"),\r\n    userId: uuid(\"user_id\").references(() => users.id),\r\n    assignedTo: uuid(\"assigned_to\").references(() => users.id),\r\n    source: text(\"source\").notNull(),\r\n    sourceData: jsonb(\"source_data\"),\r\n    impactAssessment: text(\"impact_assessment\"),\r\n    containmentActions: jsonb(\"containment_actions\"),\r\n    resolutionNotes: text(\"resolution_notes\"),\r\n    relatedIncidents: jsonb(\"related_incidents\").$type<string[]>(),\r\n    metadata: jsonb(\"metadata\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\r\n    investigatedAt: timestamp(\"investigated_at\"),\r\n    containedAt: timestamp(\"contained_at\"),\r\n    resolvedAt: timestamp(\"resolved_at\"),\r\n    closedAt: timestamp(\"closed_at\"),\r\n  },\r\n  (table) => [\r\n    index(\"security_incidents_status_idx\").on(table.status),\r\n    index(\"security_incidents_severity_idx\").on(table.severity),\r\n    index(\"security_incidents_created_idx\").on(table.createdAt),\r\n  ]\r\n);\r\n\r\n// Incident timeline events\r\nexport const incidentTimeline = pgTable(\r\n  \"incident_timeline\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    incidentId: uuid(\"incident_id\")\r\n      .references(() => securityIncidents.id, { onDelete: \"cascade\" })\r\n      .notNull(),\r\n    eventType: text(\"event_type\")\r\n      .notNull()\r\n      .$type<\r\n        | \"created\"\r\n        | \"status_change\"\r\n        | \"assignment\"\r\n        | \"comment\"\r\n        | \"action_taken\"\r\n        | \"escalation\"\r\n        | \"resolution\"\r\n      >(),\r\n    description: text(\"description\").notNull(),\r\n    performedBy: uuid(\"performed_by\").references(() => users.id),\r\n    metadata: jsonb(\"metadata\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"incident_timeline_incident_idx\").on(table.incidentId)]\r\n);\r\n\r\n// SOC 2 types\r\nexport type TwoFactorAuthRecord = typeof twoFactorAuth.$inferSelect;\r\nexport type NewTwoFactorAuthRecord = typeof twoFactorAuth.$inferInsert;\r\nexport type SecurityIncident = typeof securityIncidents.$inferSelect;\r\nexport type NewSecurityIncident = typeof securityIncidents.$inferInsert;\r\nexport type IncidentTimelineEvent = typeof incidentTimeline.$inferSelect;\r\n\r\n// ---------------------------------------------------------------------------\r\n// Microsoft 365 / Entra ID integration\r\n// ---------------------------------------------------------------------------\r\n\r\n// Pending OAuth states — CSRF + PKCE. Short-lived (expires in minutes).\r\n// We reject callbacks whose state is not present or expired.\r\nexport const m365OauthStates = pgTable(\r\n  \"m365_oauth_states\",\r\n  {\r\n    state: text(\"state\").primaryKey(),\r\n    codeVerifier: text(\"code_verifier\").notNull(),\r\n    userKey: text(\"user_key\"),\r\n    returnTo: text(\"return_to\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n    expiresAt: timestamp(\"expires_at\").notNull(),\r\n  },\r\n  (table) => [index(\"m365_oauth_states_expires_idx\").on(table.expiresAt)]\r\n);\r\n\r\n// Per-user Microsoft 365 OAuth connections. Tokens are encrypted at rest.\r\nexport const m365Connections = pgTable(\r\n  \"m365_connections\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userKey: text(\"user_key\").notNull().unique(),\r\n    microsoftUserId: text(\"microsoft_user_id\"),\r\n    email: text(\"email\"),\r\n    displayName: text(\"display_name\"),\r\n    accessTokenEncrypted: text(\"access_token_encrypted\").notNull(),\r\n    refreshTokenEncrypted: text(\"refresh_token_encrypted\"),\r\n    scope: text(\"scope\"),\r\n    tokenType: text(\"token_type\").default(\"Bearer\"),\r\n    expiresAt: timestamp(\"expires_at\").notNull(),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [index(\"m365_connections_user_idx\").on(table.userKey)]\r\n);\r\n\r\n// Persisted analysis history — lets the dashboard show prior verdicts.\r\nexport const m365AnalysisResults = pgTable(\r\n  \"m365_analysis_results\",\r\n  {\r\n    id: uuid(\"id\").primaryKey().defaultRandom(),\r\n    userKey: text(\"user_key\").notNull(),\r\n    inputType: text(\"input_type\").notNull().$type<\"email\" | \"file\" | \"document\">(),\r\n    inputId: text(\"input_id\"),\r\n    subject: text(\"subject\"),\r\n    sender: text(\"sender\"),\r\n    riskScore: integer(\"risk_score\").notNull(),\r\n    category: text(\"category\").notNull().$type<\"Safe\" | \"Suspicious\" | \"Phishing\" | \"Error\">(),\r\n    explanation: jsonb(\"explanation\").$type<string[]>(),\r\n    recommendedActions: jsonb(\"recommended_actions\").$type<string[]>(),\r\n    engine: text(\"engine\").notNull().$type<\"llm\" | \"heuristic\">(),\r\n    model: text(\"model\"),\r\n    latencyMs: integer(\"latency_ms\"),\r\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\r\n  },\r\n  (table) => [\r\n    index(\"m365_analysis_user_idx\").on(table.userKey),\r\n    index(\"m365_analysis_created_idx\").on(table.createdAt),\r\n  ]\r\n);\r\n\r\nexport type M365Connection = typeof m365Connections.$inferSelect;\r\nexport type NewM365Connection = typeof m365Connections.$inferInsert;\r\nexport type M365OauthState = typeof m365OauthStates.$inferSelect;\r\nexport type NewM365OauthState = typeof m365OauthStates.$inferInsert;\r\nexport type M365AnalysisResult = typeof m365AnalysisResults.$inferSelect;\r\nexport type NewM365AnalysisResult = typeof m365AnalysisResults.$inferInsert;\r\n"],"mappings":";;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,IAAM,WAAW,WAA6B;AAAA,EAC5C,WAAW;AACT,WAAO;AAAA,EACT;AACF,CAAC;AAGM,IAAM,QAAQ,QAAQ,SAAS;AAAA,EACpC,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,YAAY,KAAK,aAAa,EAAE,OAAO;AAAA,EACvC,MAAM,KAAK,MAAM;AAAA,EACjB,aAAa,MAAM,aAAa,EAAE,MAK/B;AAAA,EACH,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,gBAAgB,QAAQ,iBAAiB;AAAA,EACpD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,EACjD,OAAO,KAAK,OAAO;AAAA,EACnB,QAAQ,KAAK,QAAQ,EAAE,QAAQ,EAAE,QAAQ,UAAU;AAAA;AAAA,EACnD,UAAU,MAAM,UAAU;AAAA,EAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EACnC,WAAW,MAAM,cAAc,EAAE,EACjC,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,MAAuC;AAAA,IACpE,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,YAAY,QAAQ,aAAa;AAAA,IACjC,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,QAAQ,WAAW,EAAE,QAAQ,KAAK,EAAE,QAAQ;AAAA,IACvD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,2BAA2B,EAAE,GAAG,MAAM,cAAc,CAAC;AACzE;AAGO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA8C;AAAA,IACjD,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,WAAW,OAAO,aAAa,EAAE,YAAY,KAAK,CAAC;AAAA;AAAA,IACnD,cAAc,SAAS,eAAe;AAAA;AAAA,IACtC,YAAY,QAAQ,YAAY,EAAE,QAAQ,CAAC;AAAA;AAAA,IAC3C,QAAQ,KAAK,QAAQ;AAAA;AAAA,IACrB,YAAY,KAAK,YAAY;AAAA;AAAA,IAC7B,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,QAAQ,WAAW,EAAE,QAAQ,KAAK,EAAE,QAAQ;AAAA,IACvD,cAAc,UAAU,eAAe,EAAE,WAAW;AAAA,IACpD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAGO,IAAM,iBAAiB,QAAQ,mBAAmB;AAAA,EACvD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,EACjD,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,aAAa,KAAK,aAAa;AAAA,EAC/B,gBAAgB,KAAK,iBAAiB;AAAA,EACtC,WAAW,UAAU,aAAa;AAAA,EAClC,WAAW,UAAU,aAAa;AAAA,EAClC,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI;AAAA,EACxC,QAAQ,MAAM,QAAQ,EAAE,MAGrB;AAAA,EACH,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EAAE,WAAW,MAAM,cAAc,EAAE;AAAA,IACzE,UAAU,KAAK,WAAW,EAAE,QAAQ;AAAA,IACpC,OAAO,MAAM,OAAO;AAAA,IACpB,QAAQ,MAAM,QAAQ;AAAA,IACtB,SAAS,QAAQ,SAAS,EAAE,QAAQ;AAAA,IACpC,YAAY,QAAQ,aAAa;AAAA,IACjC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,cAAc,CAAC;AAC1E;AAOO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,OAAO,KAAK,OAAO,EAAE,QAAQ,EAAE,OAAO;AAAA,IACtC,YAAY,MAAM,aAAa,EAAE,MAI9B;AAAA,IACH,WAAW,KAAK,YAAY;AAAA,IAC5B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,QAAQ;AAAA,IAC3C,cAAc,UAAU,gBAAgB,EAAE,WAAW;AAAA,EACvD;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAGO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,WAAW,KAAK,YAAY,EAAE,WAAW,MAAM,SAAS,EAAE;AAAA,IAC1D,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA;AAAA,IAC/B,UAAU,KAAK,UAAU;AAAA;AAAA,IACzB,YAAY,KAAK,aAAa;AAAA;AAAA,IAC9B,SAAS,MAAM,SAAS;AAAA,IACxB,WAAW,KAAK,YAAY;AAAA,IAC5B,WAAW,KAAK,YAAY;AAAA,IAC5B,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI;AAAA,IACxC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA;AAAA,IAExD,gBAAgB,QAAQ,iBAAiB;AAAA,IACzC,WAAW,KAAK,YAAY;AAAA,IAC5B,cAAc,KAAK,eAAe;AAAA,EACpC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qBAAqB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC5C,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC9C,MAAM,wBAAwB,EAAE,GAAG,MAAM,SAAS;AAAA,IAClD,MAAM,yBAAyB,EAAE,GAAG,MAAM,cAAc;AAAA,EAC1D;AACF;AAGO,IAAM,UAAU;AAAA,EACrB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,SAAS,KAAK,UAAU,EAAE,QAAQ;AAAA;AAAA,IAClC,WAAW,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACtC,aAAa,MAAM,aAAa,EAAE,MAAgB;AAAA;AAAA,IAClD,YAAY,UAAU,cAAc;AAAA,IACpC,WAAW,UAAU,YAAY;AAAA,IACjC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY;AAAA,EACnC;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAGO,IAAM,aAAa;AAAA,EACxB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,YAAY,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACvC,UAAU,KAAK,UAAU,EAAE,QAAQ;AAAA;AAAA,IACnC,aAAa,UAAU,cAAc,EAAE,QAAQ;AAAA,IAC/C,cAAc,QAAQ,eAAe,EAAE,QAAQ,CAAC;AAAA,IAChD,aAAa,UAAU,cAAc;AAAA,EACvC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qCAAqC,EAAE;AAAA,MAC3C,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAOO,IAAM,UAAU;AAAA,EACrB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA;AAAA,IAC3B,OAAO,QAAQ,OAAO,EAAE,QAAQ;AAAA,IAChC,MAAM,KAAK,MAAM;AAAA;AAAA,IACjB,MAAM,MAAM,MAAM,EAAE,MAA8B;AAAA;AAAA,IAClD,WAAW,UAAU,WAAW,EAAE,WAAW,EAAE,QAAQ;AAAA,EACzD;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,MAAM,SAAS;AAAA,EACpE;AACF;AAGO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA;AAAA,IAC/B,WAAW,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACtC,WAAW,KAAK,YAAY;AAAA;AAAA,IAC5B,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,OAAO,KAAK,OAAO;AAAA,IACnB,SAAS,MAAM,SAAS;AAAA;AAAA,IACxB,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,gBAAgB,KAAK,iBAAiB,EAAE,WAAW,MAAM,cAAc,EAAE;AAAA,IACzE,UAAU,QAAQ,UAAU,EAAE,QAAQ,KAAK;AAAA,IAC3C,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC9C,MAAM,wBAAwB,EAAE,GAAG,MAAM,SAAS;AAAA,EACpD;AACF;AAOO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,aAAa,KAAK,cAAc,EAAE,QAAQ;AAAA;AAAA,IAC1C,YAAY,KAAK,aAAa,EAAE,QAAQ;AAAA;AAAA,IACxC,aAAa,MAAM,cAAc;AAAA,IACjC,YAAY,QAAQ,YAAY,EAAE,QAAQ,CAAC;AAAA;AAAA,IAC3C,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,UAAU,UAAU,WAAW,EAAE,WAAW;AAAA,IAC5C,aAAa,QAAQ,aAAa,EAAE,QAAQ,CAAC;AAAA,EAC/C;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,yBAAyB,EAAE,GAAG,MAAM,MAAM;AAAA,IAChD,MAAM,yBAAyB,EAAE,GAAG,MAAM,WAAW;AAAA,EACvD;AACF;AAGO,IAAM,eAAe,QAAQ,gBAAgB;AAAA,EAClD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO;AAAA;AAAA,EACpC,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,aAAa,KAAK,aAAa;AAAA,EAC/B,WAAW,KAAK,YAAY;AAAA;AAAA,EAC5B,UAAU,KAAK,UAAU;AAAA;AAAA,EACzB,UAAU,MAAM,UAAU,EAAE,MAKzB;AAAA,EACH,QAAQ,QAAQ,QAAQ,EAAE,QAAQ,EAAE;AAAA,EACpC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,eAAe,KAAK,gBAAgB,EACjC,WAAW,MAAM,aAAa,EAAE,EAChC,QAAQ;AAAA,IACX,YAAY,UAAU,aAAa,EAAE,WAAW,EAAE,QAAQ;AAAA,IAC1D,UAAU,QAAQ,UAAU,EAAE,QAAQ,GAAG;AAAA;AAAA,IACzC,UAAU,QAAQ,UAAU,EAAE,QAAQ,KAAK;AAAA,EAC7C;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC;AAClE;AAGO,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA6D;AAAA,IAChE,aAAa,UAAU,cAAc,EAAE,WAAW,EAAE,QAAQ;AAAA,IAC5D,eAAe,UAAU,gBAAgB;AAAA,IACzC,UAAU,MAAM,UAAU;AAAA,EAC5B;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC;AAC3D;AAGO,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,kBAAkB,KAAK,oBAAoB,EAAE,QAAQ;AAAA,IACrD,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA8C;AAAA,IACjD,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,QAAQ,KAAK,QAAQ;AAAA;AAAA,IACrB,mBAAmB,UAAU,qBAAqB;AAAA,IAClD,YAAY,UAAU,aAAa,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC5D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC;AAClE;AAMO,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,gBAAgB,KAAK,iBAAiB,EAAE,QAAQ;AAAA;AAAA,IAChD,YAAY,KAAK,aAAa;AAAA,IAC9B,aAAa,KAAK,cAAc,EAAE,QAAQ;AAAA;AAAA,IAC1C,eAAe,QAAQ,gBAAgB,EAAE,QAAQ,CAAC;AAAA;AAAA,IAClD,QAAQ,MAAM,QAAQ,EAAE,MAGrB;AAAA,IACH,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI;AAAA,IACxC,eAAe,UAAU,gBAAgB;AAAA,IACzC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC;AAClE;AAMO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,sBAAsB,KAAK,wBAAwB,EAAE;AAAA,MACnD,MAAM,cAAc;AAAA,IACtB;AAAA,IACA,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAAsD;AAAA,IACzD,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAoE;AAAA,IACvE,WAAW,KAAK,WAAW,EAAE,QAAQ;AAAA,IACrC,SAAS,MAAM,SAAS;AAAA,IACxB,QAAQ,MAAM,QAAQ;AAAA,IACtB,aAAa,QAAQ,cAAc,EAAE,QAAQ,GAAK;AAAA,IAClD,YAAY,QAAQ,aAAa,EAAE,QAAQ,CAAC;AAAA,IAC5C,cAAc,QAAQ,gBAAgB,EAAE,QAAQ,IAAO;AAAA;AAAA,IACvD,WAAW,UAAU,YAAY;AAAA,IACjC,aAAa,UAAU,cAAc;AAAA,IACrC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qBAAqB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC5C,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,EAChD;AACF;AAEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,SAAS,KAAK,UAAU,EACrB,WAAW,MAAM,UAAU,EAAE,EAC7B,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAAuD;AAAA,IAC1D,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,0BAA0B,EAAE,GAAG,MAAM,OAAO,CAAC;AACjE;AAEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,SAAS,KAAK,UAAU,EACrB,WAAW,MAAM,UAAU,EAAE,EAC7B,QAAQ;AAAA,IACX,MAAM,QAAQ,MAAM,EAAE,QAAQ;AAAA,IAC9B,aAAa,KAAK,aAAa,EAAE,QAAQ;AAAA,IACzC,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAsD;AAAA,IACzD,QAAQ,MAAM,QAAQ;AAAA,IACtB,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,0BAA0B,EAAE,GAAG,MAAM,OAAO,CAAC;AACjE;AAMO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA;AAAA,IACjD,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,aAAa,KAAK,aAAa;AAAA,IAC/B,YAAY,KAAK,aAAa,EAAE,QAAQ;AAAA,IACxC,WAAW,QAAQ,YAAY,EAAE,QAAQ,KAAK;AAAA,IAC9C,UAAU,QAAQ,WAAW,EAAE,QAAQ,KAAK;AAAA;AAAA,IAC5C,UAAU,MAAM,UAAU,EAAE,MAMzB;AAAA,IACH,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAMO,IAAM,gBAAgB,QAAQ,iBAAiB;AAAA,EACpD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,MAAM,KAAK,MAAM,EAAE,OAAO;AAAA,EAC1B,UAAU,MAAM,UAAU;AAAA,EAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD,WAAW,UAAU,YAAY,EAAE,WAAW;AAChD,CAAC;AAEM,IAAM,sBAAsB;AAAA,EACjC;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EACnC,WAAW,MAAM,cAAc,EAAE,EACjC,QAAQ;AAAA,IACX,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,MAA+C;AAAA,IAC5E,UAAU,UAAU,WAAW,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qBAAqB,EAAE,GAAG,MAAM,cAAc;AAAA,IACpD,MAAM,sBAAsB,EAAE,GAAG,MAAM,MAAM;AAAA,EAC/C;AACF;AAEO,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EACnC,WAAW,MAAM,cAAc,EAAE,EACjC,QAAQ;AAAA,IACX,UAAU,KAAK,WAAW,EACvB,WAAW,MAAM,SAAS,EAAE,EAC5B,QAAQ;AAAA,IACX,UAAU,KAAK,WAAW,EACvB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,UAAU,UAAU,WAAW,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,yBAAyB,EAAE,GAAG,MAAM,cAAc,CAAC;AACvE;AAEO,IAAM,cAAc;AAAA,EACzB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,gBAAgB,KAAK,iBAAiB,EAAE,WAAW,MAAM,cAAc,EAAE;AAAA,IACzE,WAAW,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACtC,YAAY,QAAQ,aAAa,EAAE,QAAQ;AAAA,IAC3C,cAAc,QAAQ,eAAe,EAAE,QAAQ,CAAC;AAAA,IAChD,SAAS,UAAU,UAAU;AAAA,IAC7B,WAAW,UAAU,YAAY,EAAE,WAAW;AAAA,EAChD;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC9C,MAAM,sBAAsB,EAAE,GAAG,MAAM,cAAc;AAAA,EACvD;AACF;AAOO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA8E;AAAA,IACjF,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,SAAS,MAAM,SAAS,EAAE,MAAgB,EAAE,QAAQ,CAAC,CAAC;AAAA,IACtD,aAAa,KAAK,aAAa;AAAA,IAC/B,YAAY,MAAM,YAAY,EAAE,MAA+B,EAAE,QAAQ,CAAC,CAAC;AAAA,IAC3E,YAAY,QAAQ,YAAY,EAAE,QAAQ,EAAE;AAAA;AAAA,IAC5C,cAAc,QAAQ,eAAe,EAAE,QAAQ,CAAC;AAAA,IAChD,WAAW,OAAO,aAAa,EAAE,YAAY,KAAK,CAAC;AAAA,IACnD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,yBAAyB,EAAE,GAAG,MAAM,MAAM;AAAA,IAChD,MAAM,yBAAyB,EAAE,GAAG,MAAM,IAAI;AAAA,IAC9C,MAAM,yBAAyB,EAAE,GAAG,MAAM,IAAI;AAAA,EAChD;AACF;AAGO,IAAM,qBAAqB;AAAA,EAChC;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,kBAAkB,EACpC,WAAW,MAAM,cAAc,IAAI,EAAE,UAAU,UAAU,CAAC,EAC1D,QAAQ;AAAA,IACX,gBAAgB,KAAK,kBAAkB,EACpC,WAAW,MAAM,cAAc,IAAI,EAAE,UAAU,UAAU,CAAC,EAC1D,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAKC;AAAA,IACJ,UAAU,QAAQ,UAAU,EAAE,QAAQ,EAAE;AAAA;AAAA,IACxC,eAAe,QAAQ,eAAe,EAAE,QAAQ,KAAK;AAAA,IACrD,SAAS,KAAK,SAAS;AAAA,IACvB,YAAY,MAAM,YAAY,EAAE,MAA+B,EAAE,QAAQ,CAAC,CAAC;AAAA,IAC3E,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,sBAAsB,EAAE,GAAG,MAAM,cAAc;AAAA,IACrD,MAAM,sBAAsB,EAAE,GAAG,MAAM,cAAc;AAAA,IACrD,MAAM,oBAAoB,EAAE,GAAG,MAAM,IAAI;AAAA,EAC3C;AACF;AAMO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,UAAU,KAAK,UAAU;AAAA,IACzB,UAAU,KAAK,WAAW;AAAA,IAC1B,UAAU,QAAQ,WAAW;AAAA,IAC7B,QAAQ,KAAK,QAAQ;AAAA;AAAA,IACrB,WAAW,KAAK,YAAY;AAAA,IAC5B,UAAU,MAAM,UAAU;AAAA,IAC1B,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAyD,EACzD,QAAQ,SAAS;AAAA,IACpB,cAAc,KAAK,eAAe;AAAA,IAClC,YAAY,QAAQ,aAAa,EAAE,QAAQ,CAAC;AAAA,IAC5C,aAAa,QAAQ,cAAc,EAAE,QAAQ,CAAC;AAAA,IAC9C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,aAAa,UAAU,cAAc;AAAA,EACvC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,oBAAoB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC3C,MAAM,sBAAsB,EAAE,GAAG,MAAM,MAAM;AAAA,EAC/C;AACF;AAEO,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,YAAY,KAAK,aAAa,EAC3B,WAAW,MAAM,UAAU,IAAI,EAAE,UAAU,UAAU,CAAC,EACtD,QAAQ;AAAA,IACX,YAAY,QAAQ,aAAa,EAAE,QAAQ;AAAA,IAC3C,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,WAAW,OAAO,aAAa,EAAE,YAAY,KAAK,CAAC;AAAA,IACnD,YAAY,QAAQ,aAAa;AAAA,IACjC,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,8BAA8B,EAAE,GAAG,MAAM,UAAU;AAAA,EAC3D;AACF;AAsEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,IAAI,EAAE,UAAU,UAAU,CAAC,EAClD,QAAQ,EACR,OAAO;AAAA,IACV,iBAAiB,KAAK,kBAAkB,EAAE,QAAQ;AAAA,IAClD,eAAe,MAAM,gBAAgB,EAAE,MAAgB,EAAE,QAAQ;AAAA,IACjE,WAAW,UAAU,YAAY,EAAE,QAAQ;AAAA,IAC3C,gBAAgB,UAAU,kBAAkB;AAAA,IAC5C,YAAY,QAAQ,aAAa,EAAE,QAAQ,CAAC,EAAE,QAAQ;AAAA,IACtD,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC;AAChE;AAGO,IAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EAAE,QAAQ,EAAE,OAAO;AAAA,IACzD,OAAO,KAAK,OAAO,EAAE,QAAQ;AAAA,IAC7B,aAAa,KAAK,aAAa,EAAE,QAAQ;AAAA,IACzC,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAOC;AAAA,IACJ,UAAU,KAAK,UAAU,EACtB,QAAQ,EACR,MAA8C;AAAA,IACjD,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAsE,EACtE,QAAQ,MAAM;AAAA,IACjB,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,YAAY,KAAK,aAAa,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACzD,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA,IAC/B,YAAY,MAAM,aAAa;AAAA,IAC/B,kBAAkB,KAAK,mBAAmB;AAAA,IAC1C,oBAAoB,MAAM,qBAAqB;AAAA,IAC/C,iBAAiB,KAAK,kBAAkB;AAAA,IACxC,kBAAkB,MAAM,mBAAmB,EAAE,MAAgB;AAAA,IAC7D,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,gBAAgB,UAAU,iBAAiB;AAAA,IAC3C,aAAa,UAAU,cAAc;AAAA,IACrC,YAAY,UAAU,aAAa;AAAA,IACnC,UAAU,UAAU,WAAW;AAAA,EACjC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,+BAA+B,EAAE,GAAG,MAAM,MAAM;AAAA,IACtD,MAAM,iCAAiC,EAAE,GAAG,MAAM,QAAQ;AAAA,IAC1D,MAAM,gCAAgC,EAAE,GAAG,MAAM,SAAS;AAAA,EAC5D;AACF;AAGO,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,YAAY,KAAK,aAAa,EAC3B,WAAW,MAAM,kBAAkB,IAAI,EAAE,UAAU,UAAU,CAAC,EAC9D,QAAQ;AAAA,IACX,WAAW,KAAK,YAAY,EACzB,QAAQ,EACR,MAQC;AAAA,IACJ,aAAa,KAAK,aAAa,EAAE,QAAQ;AAAA,IACzC,aAAa,KAAK,cAAc,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IAC3D,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,gCAAgC,EAAE,GAAG,MAAM,UAAU,CAAC;AAC1E;AAeO,IAAM,kBAAkB;AAAA,EAC7B;AAAA,EACA;AAAA,IACE,OAAO,KAAK,OAAO,EAAE,WAAW;AAAA,IAChC,cAAc,KAAK,eAAe,EAAE,QAAQ;AAAA,IAC5C,SAAS,KAAK,UAAU;AAAA,IACxB,UAAU,KAAK,WAAW;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,QAAQ;AAAA,EAC7C;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,+BAA+B,EAAE,GAAG,MAAM,SAAS,CAAC;AACxE;AAGO,IAAM,kBAAkB;AAAA,EAC7B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,SAAS,KAAK,UAAU,EAAE,QAAQ,EAAE,OAAO;AAAA,IAC3C,iBAAiB,KAAK,mBAAmB;AAAA,IACzC,OAAO,KAAK,OAAO;AAAA,IACnB,aAAa,KAAK,cAAc;AAAA,IAChC,sBAAsB,KAAK,wBAAwB,EAAE,QAAQ;AAAA,IAC7D,uBAAuB,KAAK,yBAAyB;AAAA,IACrD,OAAO,KAAK,OAAO;AAAA,IACnB,WAAW,KAAK,YAAY,EAAE,QAAQ,QAAQ;AAAA,IAC9C,WAAW,UAAU,YAAY,EAAE,QAAQ;AAAA,IAC3C,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,2BAA2B,EAAE,GAAG,MAAM,OAAO,CAAC;AAClE;AAGO,IAAM,sBAAsB;AAAA,EACjC;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,SAAS,KAAK,UAAU,EAAE,QAAQ;AAAA,IAClC,WAAW,KAAK,YAAY,EAAE,QAAQ,EAAE,MAAqC;AAAA,IAC7E,SAAS,KAAK,UAAU;AAAA,IACxB,SAAS,KAAK,SAAS;AAAA,IACvB,QAAQ,KAAK,QAAQ;AAAA,IACrB,WAAW,QAAQ,YAAY,EAAE,QAAQ;AAAA,IACzC,UAAU,KAAK,UAAU,EAAE,QAAQ,EAAE,MAAoD;AAAA,IACzF,aAAa,MAAM,aAAa,EAAE,MAAgB;AAAA,IAClD,oBAAoB,MAAM,qBAAqB,EAAE,MAAgB;AAAA,IACjE,QAAQ,KAAK,QAAQ,EAAE,QAAQ,EAAE,MAA2B;AAAA,IAC5D,OAAO,KAAK,OAAO;AAAA,IACnB,WAAW,QAAQ,YAAY;AAAA,IAC/B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,wBAAwB,EAAE,GAAG,MAAM,OAAO;AAAA,IAChD,MAAM,2BAA2B,EAAE,GAAG,MAAM,SAAS;AAAA,EACvD;AACF;","names":[]}