\\n\\nPreview Branches by Supabase.\\nLearn more about [Supabase Branching ↗︎](https://supabase.com/docs/guides/platform/branching).\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"@copilot resolve the merge conflicts in this pull request\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"\\n\\n\\n[![Review Change Stack](https://storage.googleapis.com/coderabbit_public_assets/review-stack-in-coderabbit-ui.svg)](https://app.coderabbit.ai/change-stack/BigSimmo/Database/pull/537?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\\n\\n\\n\\n\\n> [!CAUTION]\\n> ## Review failed\\n> \\n> The head commit changed during the review from a3f498e800c7ce4952d3405c597701b34a327fa2 to 47206d8c2ab04f8a32fd64de8ba2f141999eb3e0.\\n\\n\\n\\n\\n\\n

\\n

✨ Finishing Touches

\\n\\n

\\n

🧪 Generate unit tests (beta)

\\n\\n- [ ] Create PR with unit tests\\n- [ ] Commit unit tests in branch `claude/gate-answer-persistence-flag-4b55da`\\n\\n

\\n

✨ Simplify code

\\n\\n- [ ] Create PR with simplified code\\n- [ ] Commit simplified code in branch `claude/gate-answer-persistence-flag-4b55da`\\n\\n

\\n\\n

\\n\\n\\n\\n\\n---\\n\\n\\n\\n\\n_{Comment `@coderabbitai help` to get the list of available commands.}\\n\\n\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"\\n> @copilot resolve the merge conflicts in this pull request\\n\\nDone — resolved all merge conflicts in `docs/privacy-impact-assessment.md` (47206d8). The 5 conflict regions all arose from `origin/main` adding PIA-1/PIA-5 progress notes (PR #513), an updated `rag_response_cache` retention description, and a revised §11 recommendation; I took the `origin/main` side for each, which is the most current state.\",\"path\":null,\"side\":null,\"line\":null}{\"type\":\"pull_request_comment\",\"body\":\"\\n### 💡 Codex Review\\n\\nhttps://github.com/BigSimmo/Database/blob/c26e54f9d4f8e3ee212864cb076fba0dc7074dd7/src/lib/env.ts#L116-L120\\n**_{_{![P1 Badge](https://img.shields.io/badge/P1-orange?style=flat)}} Gate cached answers behind the retention flag**\\n\\nWhen `RAG_PERSIST_ANSWER_TEXT` is left at its default `false` but `RAG_ANSWER_CACHE_TTL_MS` is enabled (default 300000), answered requests still call `setSharedCachedAnswer` and insert `{ answer: cloneAnswer(answer) }` into `rag_response_cache.payload` (`src/lib/rag-cache.ts:523-524`). I only found lookup-time `expires_at` filtering/invalidation, not a purge that removes expired cache rows, so generated PHI-derived answer text can still remain at rest while this new flag and production-readiness check report answer persistence as off. A focused proof is to run any non-skipped answer request with the default cache TTL and inspect the inserted `rag_response_cache` payload.\\n \\n\\n

ℹ️ About Codex in GitHub

\\n
\\n\\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\\n- Open a pull request for review\\n- Mark a draft as ready\\n- Comment \\\"@codex review\\\".\\n\\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\\n\\n\\n\\n\\nCodex can also answer questions or update the PR. Try commenting \\\"@codex address that feedback\\\".\\n \\n

\",\"path\":null,\"side\":null,\"line\":null}","text_elements",[],{"_735":1741,"_716":717,"_737":723},{"_738":1742,"_740":-5,"_42":-5,"_741":-5,"_742":-5,"_97":509,"_93":744},[1743],{"_46":1737,"_93":1744},"input_text",{"_735":1746,"_716":717,"_737":723},{"_738":1747,"_740":-5,"_42":-5,"_741":-5,"_742":-5,"_97":509,"_93":744},[1748,1749],{"_46":1751,"_93":1744},{"_46":1750,"_93":1744},"\n /workspace/Database\n bash\n 2026-07-12\n Etc/UTC\n","# AGENTS.md instructions for /workspace/Database\n\n\n\n\n# This is NOT the Next.js you know\n\nThis version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` before writing any code. Heed deprecation notices.\n\n\n\n\n\n## Dependency shortcut\n\nWhen the user types exactly `dependency` as the entire task message, after trimming surrounding whitespace, treat it as a shortcut for safe dependency maintenance. This is a Codex chat shortcut, not an app feature, script, automation, or CI workflow.\n\nGoal:\nUpdate direct project dependencies to the newest stable compatible versions, regenerate the existing lockfile, identify source/config/test code that relies on old dependency behavior, make the smallest safe compatibility changes, and verify the result. Do not rewrite the project, switch package managers, discard user work, commit, push, deploy, or run destructive cleanup without explicit confirmation.\n\nStart with read-only inspection:\n\n- Check branch, upstream, worktrees, recent relevant history, and `git status`.\n- If on `main`, `master`, `develop`, `release/*`, or another protected/base branch, create/switch to `codex/dependency-maintenance` before editing, if safe.\n- Inspect manifests, lockfiles, package-manager config, runtime/toolchain files, workspace layout, CI config, scripts, and documented checks.\n- Detect repo-local install/dev/test/build/watch/server processes that could race dependency updates.\n- Preserve all existing staged, unstaged, and untracked user work.\n\nPackage-manager rules:\n\n- Use the package manager already used by the repo: npm, pnpm, yarn, bun, pip, poetry, uv, cargo, go, bundler, gradle, maven, dotnet, or equivalent.\n- Do not switch package managers or create a new lockfile type.\n- Respect engines, runtime versions, lockfiles, workspaces, wrappers, and repo conventions.\n- In monorepos or polyglot repos, update each ecosystem through its native workspace-aware workflow.\n\nDependency update rules:\n\n- Identify outdated direct production and development dependencies.\n- Compare both manifest ranges and locked/installed versions against latest stable compatible releases.\n- Treat “outdated packages found” exit codes as normal where applicable.\n- Avoid prerelease, alpha, beta, canary, rc, next, nightly, and experimental versions unless the stable channel points there and explain why.\n- Do not use force or legacy flags that bypass peer, engine, resolver, or lockfile integrity checks unless explicitly approved.\n- Do not run forced audit fixes or broad destructive codemods.\n- If latest is incompatible, use the newest compatible version and document why.\n- Group risky updates coherently, such as framework plus plugins, test runner plus coverage, lint core plus plugins, or runtime plus adapter packages.\n\nCompatibility audit:\n\n- For every major update and every core framework/runtime/build/test/lint/UI/database update, inspect release notes, migration guides, peer ranges, engines, and changelogs when available.\n- Search source, tests, scripts, config, and CI for imports, APIs, CLI flags, config keys, environment variables, plugin names, generated types, or file paths tied to changed dependencies.\n- If old dependency behavior is used, make the smallest safe migration that preserves behavior.\n- If migration is large, risky, architectural, or product-affecting, stop after discovery and provide a concrete fix plan with affected files, package versions, sequence, and verification commands.\n- Add or adjust focused tests only when needed to prove migrated behavior.\n\nGenerated and sensitive files:\n\n- Do not intentionally keep dependency directories, build outputs, caches, logs, local state, test artifacts, browser artifacts, `.env*`, secrets, keys, tokens, credentials, or machine-local config.\n- Manifest and existing lockfile changes are allowed.\n\nVerification:\n\n- Run a cheap baseline first when useful to distinguish pre-existing failures.\n- After updates, run install/dependency validation, then relevant lint, type check, tests, build, smoke/UI/a11y, codegen, integration checks, or equivalent.\n- For frontend/browser-facing changes, run browser/UI verification when framework, bundler, router, styling, test runner, or browser automation changed.\n- If a check fails, fix dependency-related breakage and rerun the smallest failing check before broader checks.\n- Run non-mutating audit/vulnerability checks when available.\n- Confirm no repo-owned dev server, watcher, or temporary process was left running unless requested.\n\nFinal response for `dependency` must include:\n\n- Branch and worktree state.\n- Package manager, runtime, manifests, and lockfiles detected.\n- Outdated dependencies found.\n- Dependencies updated, old version -> new version.\n- Dependencies not updated and why.\n- Files changed.\n- Compatibility migrations and old APIs found/fixed.\n- Checks run and results.\n- Checks not run and why.\n- Audit/vulnerability summary.\n- Generated/untracked files left behind.\n- Branch movement, external repo changes, or process cleanup observed.\n- Risks or follow-up work.\n- Confirmation that no commit or push was made unless explicitly requested.\n\nAfter setup:\n\n- Verify root `AGENTS.md` contains exactly one `## Dependency shortcut` section.\n- Show the final diff for `AGENTS.md`.\n- Summarize what changed.\n- Confirm no dependency update, install, test, build, audit, commit, or push was performed.\n\n\n\n\n\n## Bug-hunter shortcut\n\nWhen the user types exactly `bug-hunter` as the entire task message, after trimming surrounding whitespace, treat it as a shortcut for targeted defect discovery.\n\nExecution rules:\n\n- Invoke the `bug-hunter` skill first.\n- Prioritize reproducible defects over code style, naming, or formatting feedback.\n- Trace realistic failure paths: invalid input, empty states, retries, race/concurrency issues, stale state/cache, network/auth failures, permissions, and boundary values.\n- For each finding, include trigger, expected behavior, actual risk, and the smallest proof (or targeted test/check) that would catch it.\n- If no high-confidence defect is found, explicitly state that and list the most likely residual risk area.\n\nScope and safety:\n\n- Keep the hunt scoped to code touched by the user request unless the defect clearly crosses module boundaries.\n- Do not make broad refactors while hunting; propose minimal fixes for confirmed issues.\n- Run the smallest focused verification for each confirmed defect, then expand only if needed.\n\n\n\n\n\n## Codex review throttling and routing\n\nDo not review branches opportunistically. Review the current changed diff, PR, or branch only when the user explicitly asks for review/audit/hunter/cleanup/upload work, when CI/check failures are the task, or when the current change touches high-risk areas that require a targeted review before handoff.\n\nUse `docs/codex-review-protocol.md` as the shared review protocol for every repo-local review skill, branch/PR review, audit, bug hunt, release-readiness check, and PR/CI review.\n\nBefore reviewing a branch or PR:\n\n- Check `docs/branch-review-ledger.md` if it exists.\n- Resolve the target with `git rev-parse `.\n- If the same branch/ref and HEAD SHA were already reviewed for the same scope, summarize the prior ledger outcome and skip the repeat review unless the user explicitly requests a fresh pass.\n- If the target HEAD changed, review only the changed scope and update the ledger after the review.\n\nBefore reviewing multiple branches:\n\n- Build a short branch inventory first: branch, upstream, ahead/behind, last commit, and merged status.\n- Skip branches already merged into `main`.\n- Skip unchanged branches already recorded in `docs/branch-review-ledger.md`.\n- Do not re-review every branch after ordinary coding tasks.\n- If a repeated request targets unchanged reviewed branches, summarize the prior result and ask before doing another full pass.\n\nReview routing:\n\n- `diff-review`: Use for explicit review of the current diff, PR, or named branch. Findings first, ordered by severity, with file/line evidence.\n- `bug-hunter`: Use only for the exact `bug-hunter` shortcut or an explicit defect-hunt request. Prioritize reproducible bugs and smallest proof.\n- `repo-auditor`: Use for explicit repo-wide audit/refactor/dead-code/import/dependency-structure requests. Treat outputs as triage, not automatic delete lists.\n- `release-readiness`: Use for explicit release, merge, PR readiness, or handoff confidence requests. Do not run provider-backed gates without confirmation.\n- `branch-cleanup`: Use only when the prompt explicitly asks for branch cleanup/hygiene or branch deletion candidates. Apply `docs/branch-cleanup-guide.md` and the review ledger before inspecting branch diffs.\n- `pr-ci-fix`: Confirmation-required for this repo. GitHub/GitLab API calls, PR comments, CI reruns, commits, and pushes require explicit user approval and must respect the upload/handoff rules.\n\nWhen a branch or PR review completes, record the reviewed branch/ref, HEAD SHA, date, scope, outcome, and checks in `docs/branch-review-ledger.md`.\n\n\n\n\n\n# Local server safety\n\n- If the user says `run`, execute `npm run ensure` and return the printed URL.\n- If the user asks for UI/frontend changes, browser QA, screenshots, mobile checks, or a local app link, run `npm run ensure` before opening or testing the app, even if the user did not say `run`.\n- Never assume `localhost:3000`, `localhost:3001`, or `localhost:3002`.\n- Never attach to a local server unless `/api/local-project-id` confirms it is this project.\n- Do not kill or modify other projects' local servers. If the stable project port is busy, let `npm run ensure` choose the next safe project URL.\n- Do not run a permanent watcher. Only start or verify the server when the current chat task needs the app or the user asks to run it.\n\n\n\n\n\n# Process hardening phases\n\n- For non-trivial source/config/test changes, prefer `npm run verify:cheap` as the first broad gate and `npm run verify:pr-local` before PR handoff when the change is ready. The PR-local gate runs format plus `verify:cheap`, then conditionally adds the production build/client-bundle scan and code-backed offline RAG tests. Browser, dependency-audit, Docker/Supabase replay, and provider-backed checks remain separate gates. Use `npm run verify:pr-local -- --dry-run --files ` to inspect selection without running commands. The broader `--extended` plan is dry-run only unless explicit approval is reflected by `ALLOW_EXTENDED_PR_LOCAL=true`.\n- For UI, frontend, browser, routing, styling, reduced-motion, or forced-colors changes, run `npm run ensure` before browser work and use `npm run verify:ui` as the Chromium UI gate.\n- For release or handoff confidence, use `npm run verify:release`; this includes the full Playwright project set.\n- For clinical ingestion, answer generation, source governance, privacy, production-readiness, or environment changes, run the smallest relevant domain check plus `npm run check:production-readiness`.\n- For pull requests that touch ingestion, answer generation, search/ranking, source rendering, document access, privacy, production env, or clinical output, complete the clinical governance preflight in `.github/pull_request_template.md`.\n- Track known verification debts and staged process improvements in `docs/process-hardening.md` instead of relying on chat-only memory.\n\n\n\n\n\n# Supabase project safety\n\n- This repo targets the live Supabase project `Clinical KB Database`.\n- Expected project ref: `sjrfecxgysukkwxsowpy`.\n- Older unused project ref `qjgitjyhxrwxsrydablr` belongs to `Database`; treat it as stale and do not use it.\n- Run `npm run check:supabase-project` after changing Supabase env values.\n\n\n\n\n\n# API and provider confirmation boundary\n\n- Never run, modify, test, or otherwise interact with OpenAI, Supabase, GitHub/GitLab, hosted CI, production-like services, or provider-backed workflows without explicit user confirmation.\n- Treat indirect API usage inside scripts, tests, release checks, PR tooling, and review automation as confirmation-required too.\n- Prefer local, static, mocked, or offline checks. If a recommended verification would touch a provider, report the command and ask before running it.\n- `npm run check:supabase-project`, live PR/CI tooling, answer-generation checks, ingestion checks against live services, and release gates that call providers are not automatic.\n\n\n\n\n\n# `upload` shortcut\n\nWhen the user types exactly:\n\nupload\n\nas the entire task message, treat it as a shortcut for the safe Git handoff workflow below.\n\nThe goal is to leave useful completed work safely committed and, where safe, pushed to the current feature branch. The goal is not to merge into main, delete branches, discard work, force-push, close PRs, deploy, or perform destructive cleanup without explicit user confirmation.\n\n## Protected and base branches\n\nTreat `main`, `master`, `develop`, and `release/*` as protected/base branches for this workflow.\n\nIf `upload` is run while on `main`, automatically create or use a branch named exactly `temporary` before staging, committing, or pushing, then continue the upload workflow from `temporary`:\n\n- If neither local `temporary` nor `origin/temporary` exists, run `git switch -c temporary`.\n- If local `temporary` exists and is not checked out in another worktree, switch to it only when it is clearly safe.\n- If `origin/temporary` exists, use it only when it is clearly the matching intended branch.\n- If any `temporary` branch state is ambiguous, diverged, checked out elsewhere, or unsafe, stop and ask instead of overwriting.\n\nIf already on a non-protected feature branch, continue using that branch.\n\n## Required inspection\n\nStart with read-only inspection before making changes. Check:\n\n- Current branch or detached HEAD state\n- `git status`\n- Staged, unstaged, and untracked files\n- Recent commits relevant to the current branch\n- Remote configuration and upstream branch\n- Whether the branch is ahead, behind, or diverged\n- Whether the current branch appears protected/base\n- Other Git worktrees, if detectable\n- Available checks such as tests, lint, type check, or build scripts\n- Existing branch, commit, PR, and release-flow conventions\n\nDo not assume branch names, remotes, package managers, test commands, deployment targets, or project structure. Inspect first.\n\n## Safe actions allowed without further confirmation\n\nWhen the repository state makes it clearly safe, you may:\n\n- Stage coherent completed changes that clearly belong together\n- Create one or more logical commits with clear messages based on the diff\n- Fast-forward pull only when there are no local commits or conflict risks\n- Push the current non-protected feature branch if it has a valid upstream\n- Set an upstream for the current feature branch only when the correct remote and branch name are obvious\n- Leave the worktree clean by committing safe completed changes\n\n## Actions requiring explicit confirmation\n\nDo not perform these without asking the user first:\n\n- `git reset --hard`\n- `git clean -fd` or other destructive cleanup\n- Discarding, overwriting, or reverting uncommitted changes\n- Deleting local or remote branches\n- Renaming branches\n- Force-pushing\n- Rebasing a shared/public branch\n- Resolving divergent branch history\n- Merging into `main`, `master`, `develop`, `release/*`, or any protected/base branch\n- Closing pull requests\n- Changing GitHub default branch, branch protection, repository settings, or deployment settings\n- Modifying production data or deployment configuration\n- Committing secrets, credentials, tokens, private keys, or sensitive local configuration\n- Updating branch references where the correct replacement branch is ambiguous\n\nIf any of these seem necessary, stop and report what is risky, why it is risky, the recommended next step, and the exact confirmation needed.\n\n## Mixed, suspicious, or unsafe changes\n\nDo not automatically commit files that look like `.env` files, credentials, secrets, logs, caches, build artifacts, editor or OS files, temporary/debug files, or generated files not normally committed by this project. Report only the path and concern for possible secrets; never print secret values.\n\nIf changes appear unrelated, incomplete, experimental, or WIP, do not commit everything together automatically. Commit only clearly coherent completed changes when safe; otherwise summarize the groups and ask what should be included.\n\n## Branch cleanup and reference updates\n\nDuring `upload`, branch cleanup is limited to the current branch and its upstream unless the user explicitly asks for `branch-cleanup`, branch hygiene, deletion candidates, or stale branch review.\n\nDo not enumerate, diff, or re-review unrelated stale branches during a normal upload/handoff. If the user explicitly asks for branch cleanup, first apply `docs/branch-review-ledger.md` to skip unchanged reviewed branches, then follow `docs/branch-cleanup-guide.md`.\n\nIf stale, inappropriate, merged, or unnecessary current-branch references are detected, list cleanup candidates but do not delete or rename branches automatically.\n\nBefore recommending deletion or rename for the current branch, audit accessible references including `.github/workflows/*`, CI/CD config, deployment config, scripts, package scripts, docs, release notes or release scripts, safe environment/config files, branch-specific config, open PR metadata if accessible, and GitHub branch protection/default branch metadata if safely accessible.\n\nUpdate repo-tracked references to a renamed or replacement branch only when the old branch reference is clearly found, the replacement is obvious, the change is low-risk, and the user has approved the branch rename or deletion. If the replacement is unclear, report the reference and ask what it should point to.\n\n## Syncing and verification\n\nDo not rebase, merge, or resolve remote divergence automatically. Fast-forward pulls are allowed only when clearly safe. Push only the current non-protected feature branch when clearly safe.\n\nRun the smallest relevant checks that are available and appropriate, such as tests, lint, type check, or build checks. Do not claim checks passed unless they were actually run. If checks cannot be run, explain why and state the command that would normally be used.\n\n## Final report\n\nAfter completing `upload`, summarize the current branch and worktree state, whether the worktree is clean, what changed, files committed, commit hash and message if created, whether anything was pushed, remote branch and likely PR target, checks run and results, checks not run and why, current-branch cleanup candidates or why broader branch cleanup was skipped, branch references found or updated, risky actions skipped, and exact confirmation needed for any recommended follow-up.\n\n\n\n\n\n## Codex productivity defaults\n\n- Treat terse prompts as workflow shortcuts when the intent is clear. If the user says `run`, execute `npm run ensure`, verify the project identity through that helper, and return the printed local URL without a long log dump.\n- For non-trivial changes, start from concrete repo state: branch, `git status`, relevant package scripts, recent failures, and local logs such as `dev-server.log` when runtime behavior is involved. For architecture and module orientation, read `docs/codebase-index.md` (routes: `docs/site-map.md`).\n- For UI, browser, styling, routing, accessibility, or screenshot work, run `npm run ensure` before opening the app, then use browser QA and the smallest relevant UI proof before broader gates.\n- Prefer the smallest failing check first. For this repo, use focused Vitest or Playwright targets before widening to `npm run verify:cheap`, `npm run verify:ui`, or `npm run verify:release`.\n- When the user says `safely`, preserve unrelated staged, unstaged, and untracked work; stop only clearly repo-owned transient processes; and verify the result instead of doing broad cleanup.\n- After auth, Supabase, ingestion, answer generation, search/ranking, clinical output, or source-governance changes, run the smallest domain check plus `npm run check:production-readiness`. Run `npm run check:supabase-project` after Supabase env/config changes.\n- For handoff, archive-safety, or upload-style requests, inspect branch/upstream/status first, run the appropriate verification gate, and only commit or push when the request explicitly asks for that workflow.\n- For codebase appraisal exports, stage outside the repo, include `EXPORT_MANIFEST.md`, exclude secrets/dependencies/build outputs/local state, and verify the archive can be opened before handoff.\n- When a repeated repo-specific workflow is discovered, update this file or ask the user whether it should be remembered.\n\n\n\n## Codex GitHub review behavior\n\nThese instructions apply to Codex GitHub pull request reviews and Codex tasks started from PR comments.\n\n- Keep automatic reviews focused and cost-conscious.\n- Prioritize high-confidence findings that affect correctness, security, privacy, data loss, auth/permissions, migrations, API contracts, production reliability, clinical behavior, source governance, or user-facing behavior.\n- Do not comment on formatting, naming, style, minor cleanup, or speculative refactors unless they create a real bug or maintainability risk.\n- Prefer fewer, stronger findings over exhaustive low-value review comments.\n- A finding must cite concrete changed code and explain the failure mode.\n- Do not suggest broad rewrites during review. Recommend the smallest change that resolves the issue.\n- Do not propose or start fixes unless explicitly asked with an `@codex fix...` or `@codex resolve...` comment, or when the repository's Codex auto-resolve workflow posts that command.\n\n### Severity calibration\n\n- P0: active security exposure, data loss/corruption already possible, severe production outage risk, credential leakage, or a critical issue that must be fixed immediately.\n- P1: security vulnerability, auth bypass, data exposure/loss, destructive migration risk, production-breaking regression, public API contract break, severe clinical/user-facing bug, or missing validation with realistic exploit/failure impact.\n- P2: important correctness bug, missing behavior test for meaningful changed behavior, edge case likely to affect users, reliability issue, unsafe assumption, or maintainability issue that will likely cause defects.\n- P3: style, naming, formatting, small cleanup, speculative improvements, or optional refactors. Avoid raising these in automatic reviews unless explicitly requested.\n\nFor GitHub automatic reviews, focus mainly on P1-level findings. If a P2 issue is important enough to block the PR, explain why it should be treated as P1.\n\n### PR risk detection\n\nWhen reviewing, identify whether the PR touches any high-risk area:\n\n- authentication or authorization\n- user data, privacy, or private document access\n- database schema, migrations, RLS, SECURITY DEFINER functions, or Supabase privileges\n- clinical answer generation, source governance, retrieval/ranking, ingestion, or document access\n- payment, billing, subscriptions, or quotas\n- public API contracts\n- production configuration or deployment behavior\n- background jobs, scheduled tasks, workers, or queue processing\n- file upload/download or generated document access\n- AI/API provider calls, paid external services, or credential-dependent workflows\n\nIf a high-risk area is touched, review more carefully for regressions, missing tests, rollback/safety notes, and conservative failure behavior.\n\n### Cost and usage control\n\nAvoid broad repeated review passes. Do not request exhaustive review behavior unless the PR touches security, auth, data loss, migrations, billing, production reliability, clinical output, source governance, or private document access. Prefer targeted validation and targeted review comments.\n\n### Fix behavior\n\nWhen explicitly asked to fix or resolve review findings:\n\n- Always fix P0 and P1 findings using the best minimal fix.\n- For P2 and lower-severity findings, decide whether the issue is worth fixing automatically.\n- Fix a P2 or lower finding only when the fix is clear, scoped, low-risk, and testable.\n- Do not automatically fix a P2 or lower finding when it requires broad refactoring, product judgment, dependency changes, credentials, paid/external APIs, large design decisions, or risky behavior changes.\n- If a P2 or lower finding is not worth fixing automatically, comment with the reason and the recommended human decision, then resolve the review conversation when supported.\n- Preserve unrelated work and avoid opportunistic refactors.\n- Do not add dependencies unless the issue cannot reasonably be fixed without one.\n- Do not change secrets, credentials, environment configuration, billing settings, deployment settings, or external service setup unless explicitly requested.\n- Do not use external APIs, paid services, credentials, secrets, live Supabase projects, or OpenAI provider calls unless explicitly authorized.\n- If a finding is ambiguous, unsafe to fix automatically, or requires a large rewrite, stop and explain the decision instead of guessing.\n- Add or update the smallest relevant test when the issue affects behavior.\n- Run the narrowest relevant validation for the touched surface before broader suites.\n- Summarize fixed issues, changed files, validation run, and any remaining human decisions.\n\n### Review comment lifecycle\n\n- Treat closing review conversations as part of the task when asked to fix or resolve comments.\n- After fixing a P0 or P1 finding, reply with the fix summary and resolve the review conversation when supported by GitHub permissions/tooling.\n- After fixing an approved P2 or lower finding, reply with the fix summary and resolve the review conversation when supported.\n- After deciding not to fix a P2 or lower finding, reply with the reason, note whether it is deferred or not actionable, and resolve the review conversation when supported.\n- Do not leave a review conversation open after it has been fixed or explicitly dispositioned.\n- If GitHub permissions/tooling do not allow resolving a review conversation, leave a clear reply that says the issue is fixed or dispositioned and that the conversation is ready for a human to resolve.\n\n### Automatic resolve trigger\n\nAutomatic Codex review is review-only by default. This repository includes `.github/workflows/codex-autofix-review-comments.yml`, which requests the resolve task automatically after Codex posts a PR review or inline review comment.\n\n- The workflow must only trigger from Codex review bot reviews or comments on open pull requests.\n- Match the trusted Codex connector bot by exact login and bot type; do not use substring login checks.\n- Keep per-pull-request concurrency on the authorized job, not the whole workflow, so unrelated review comments cannot displace a pending Codex request.\n- Pin the supported Node 24-based `actions/github-script` release to its reviewed immutable commit SHA.\n- The workflow must skip review-thread replies and auto-resolve request comments so Codex fix summaries do not re-trigger the workflow.\n- The workflow must ask Codex to resolve only actionable Codex review findings for the triggering pull request and current head using these repository instructions.\n- The workflow may request one repair per pull-request head SHA, capped at three automatic repair cycles per pull request.\n- Only trust a pull-request deduplication marker when it was posted by the GitHub Actions bot.\n- Permission failures while reading or creating pull-request comments must fail the workflow visibly, not return a successful soft-skip.\n- The workflow must not run Codex directly with API credentials.\n- P0 and P1 findings should always be fixed.\n- P2 and lower findings should be fixed only when clear, scoped, low-risk, and testable; otherwise explain the decision and resolve or mark ready for human resolution.\n\n### Primary PR command\n\n`@codex resolve actionable Codex review findings for this pull request and current head using the repository instructions. Always fix P0 and P1 findings. For P2 and lower findings, decide whether each is worth fixing automatically. Fix clear, scoped, low-risk issues with the best minimal change; otherwise reply explaining why the issue is deferred or not actionable. Do not update the branch from main, address unrelated reviews, broaden scope, or create more than one scoped fix commit unless explicitly asked. After each fix or decision, resolve the review conversation if supported. Do not use external APIs, paid services, credentials, dependency changes, or broad refactors unless explicitly authorized. Add targeted tests where behavior changes and run the narrowest relevant validation.`\n\n## Cursor Cloud specific instructions\n\nDurable notes for Cloud Agents. Standard commands live in `README.md` and `package.json`; only non-obvious caveats are captured here.\n\n- Runtime: the app hard-requires Node 24.x / npm 11.x (`engine-strict`, and `scripts/dev-free-port.mjs` exits on any other major). Node 24 is installed via nvm and symlinked into `/usr/local/cargo/bin` (first entry in `PATH`) so `node`/`npm` resolve to v24 in every shell. If a shell ever resolves `/exec-daemon/node` (v22) instead, prepend `\"$HOME/.nvm/versions/node/v24.18.0/bin\"` to `PATH`.\n- Live vs demo mode: the app auto-detects. When the Supabase + OpenAI env vars below are present (set them as Cloud Agent **Secrets** so they inject into `.env.local`/`process.env`), `isDemoMode()` (`src/lib/env.ts`) is false and the app runs against the live `Clinical KB Database` project (~2000 indexed docs) with OpenAI answer generation. When they are absent, dev auto-falls back to demo mode using the synthetic corpus in `src/lib/demo-data.ts` / `public/demo-documents/`. Required for live mode: `NEXT_PUBLIC_SUPABASE_URL`, `SUPABASE_PROJECT_REF`, `SUPABASE_PROJECT_NAME`, `NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY` (`sb_publishable_…`), `SUPABASE_SERVICE_ROLE_KEY` (accepts the `sb_secret_…` secret key), `OPENAI_API_KEY`. Keep `RAG_PROVIDER_MODE=auto` so OpenAI is used with graceful source-only fallback. `E2E_USER_EMAIL`/`E2E_USER_PASSWORD` power CI env-check and Playwright.\n- Live-mode caveat: `RAG_PROVIDER_MODE=auto` attempts OpenAI (fast → strong route); if generation fails the built-in quality gates it silently degrades to a deterministic \"Source-only\" answer that still cites real documents — this is expected, not a failure. The header sign-in UI exposes magic-link + OAuth only (no password field), but the `/api/answer` + retrieval flow works server-side without a browser session.\n- What still won't run in this VM even with secrets: `npm run worker` also needs the Python OCR stack (`worker/python/requirements.txt`) and heavy parsing deps; Supabase edge functions need Deno v2.x + deployment. `verify:release` additionally runs governance/eval gates. Treat missing-secret failures of `check:supabase-project`/`verify:release` in demo mode as expected, not regressions.\n- Dev server: `npm run dev` selects a stable per-project localhost port (e.g. `4461`), binds `0.0.0.0`, and prints the exact URL. Never assume port 3000/3001/3002. `npm run ensure` starts/verifies it in the background.\n- Verification without secrets: `npm run lint`, `npm run typecheck`, and `npm run test` (vitest) all pass offline. `npm run verify:cheap` also runs runtime, GitHub Actions pin, CI-scope, and sitemap checks. `npm run verify:pr-local` adds format, conditional build/client-bundle scanning, and code-backed offline RAG tests; browser, Docker/Supabase, audit, and provider checks remain separate.\n\n",{"_735":1753,"_716":717,"_737":723},{"_738":1754,"_740":-5,"_42":-5,"_741":-5,"_742":-5,"_97":1755,"_93":744},[1756,1757],"developer",{"_46":1759,"_93":1744},{"_46":1758,"_93":1744},"\n## Skills\nA skill is a set of local instructions to follow that is stored in a `SKILL.md` file. Below is the list of skills that can be used. Each entry includes a name, description, and file path so you can open the source for full instructions when using a specific skill.\n### Available skills\n- imagegen: Generate or edit raster images when the task benefits from AI-created bitmap visuals such as photos, illustrations, textures, sprites, mockups, or transparent-background cutouts. Use when Codex should create a brand-new image, transform an existing image, or derive visual variants from references, and the output should be a bitmap asset rather than repo-native code or vector. Do not use when the task is better handled by editing existing SVG/vector/code-native assets, extending an established icon or logo system, or building the visual directly in HTML/CSS/canvas. (file: /opt/codex/skills/.system/imagegen/SKILL.md)\n- openai-docs: Use when the user asks how to build with OpenAI products or APIs and needs up-to-date official documentation with citations, help choosing the latest model for a use case, or model upgrade and prompt-upgrade guidance; prioritize OpenAI docs MCP tools, use bundled references only as helper context, and restrict any fallback browsing to official OpenAI domains. (file: /opt/codex/skills/.system/openai-docs/SKILL.md)\n- plugin-creator: Create and scaffold plugin directories for Codex with a required `.codex-plugin/plugin.json`, optional plugin folders/files, and baseline placeholders you can edit before publishing or testing. Use when Codex needs to create a new local plugin, add optional plugin structure, or generate or update repo-root `.agents/plugins/marketplace.json` entries for plugin ordering and availability metadata. (file: /opt/codex/skills/.system/plugin-creator/SKILL.md)\n- skill-creator: Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Codex's capabilities with specialized knowledge, workflows, or tool integrations. (file: /opt/codex/skills/.system/skill-creator/SKILL.md)\n- skill-installer: Install Codex skills into $CODEX_HOME/skills from a curated list or a GitHub repo path. Use when a user asks to list installable skills, install a curated skill, or install a skill from another repo (including private repos). (file: /opt/codex/skills/.system/skill-installer/SKILL.md)\n### How to use skills\n- Discovery: The list above is the skills available in this session (name + description + file path). Skill bodies live on disk at the listed paths.\n- Trigger rules: If the user names a skill (with `$SkillName` or plain text) OR the task clearly matches a skill's description shown above, you must use that skill for that turn. Multiple mentions mean use them all. Do not carry skills across turns unless re-mentioned.\n- Missing/blocked: If a named skill isn't in the list or the path can't be read, say so briefly and continue with the best fallback.\n- How to use a skill (progressive disclosure):\n 1) After deciding to use a skill, open its `SKILL.md`. Read only enough to follow the workflow.\n 2) When `SKILL.md` references relative paths (e.g., `scripts/foo.py`), resolve them relative to the skill directory listed above first, and only consider other paths if needed.\n 3) If `SKILL.md` points to extra folders such as `references/`, load only the specific files needed for the request; don't bulk-load everything.\n 4) If `scripts/` exist, prefer running or patching them instead of retyping large code blocks.\n 5) If `assets/` or templates exist, reuse them instead of recreating from scratch.\n- Coordination and sequencing:\n - If multiple skills apply, choose the minimal set that covers the request and state the order you'll use them.\n - Announce which skill(s) you're using and why (one short line). If you skip an obvious skill, say why.\n- Context hygiene:\n - Keep context small: summarize long sections instead of pasting them; only load extra files when needed.\n - Avoid deep reference-chasing: prefer opening only files directly linked from `SKILL.md` unless you're blocked.\n - When variants exist (frameworks, providers, domains), pick only the relevant reference file(s) and note that choice.\n- Safety and fallback: If a skill can't be applied cleanly (missing files, unclear instructions), state the issue, pick the next-best approach, and continue.\n","\nFilesystem sandboxing defines which files can be read or written. `sandbox_mode` is `danger-full-access`: No filesystem sandboxing - all commands are permitted. Network access is enabled.\nApproval policy is currently never. Do not provide the `sandbox_permissions` for any reason, commands will be rejected.\n","turn/started",{"_716":717,"_88":1762},{"_104":-5,"_42":723,"_724":1763,"_726":727,"_728":1764},[],"inProgress",{"_728":1766,"_716":717},{"_1767":1768,"_93":1769},"activeFlags",[],"active","thread/started",{"_1772":1773},"thread",{"_1774":-5,"_1775":-5,"_1776":1777,"_1778":727,"_783":784,"_1779":15,"_1780":-5,"_1781":-5,"_1782":-5,"_1783":1784,"_42":717,"_1785":1786,"_364":-5,"_1787":-5,"_256":1788,"_1789":393,"_1790":-5,"_788":1791,"_728":1792,"_1793":-5,"_78":1794,"_1795":727},"agentNickname","agentRole","cliVersion","0.128.0","createdAt","ephemeral","extra","forkedFromId","gitInfo","historyMode","legacy","modelProvider","openai","parentThreadId","/opt/codex/sessions/2026/07/12/rollout-2026-07-12T19-18-25-019f57c4-38fe-7c22-a080-d3f03299c1da.jsonl","preview","recencyAt","vscode",{"_93":732},"threadSource",[],"updatedAt",[],"messages",[1799],{"_42":1800,"_1801":1802,"_1803":1804,"_1805":1804,"_738":1806,"_728":1807,"_740":-5,"_1808":32,"_1809":1810,"_1811":1812,"_1813":-5},"cf78cd9f-5aac-4be9-b312-0eee7193e9cb","author",{"_97":509,"_364":-5,"_1809":1822},"create_time",1783883904.649117,"update_time",{"_1818":46,"_1819":1820},"finished_successfully","weight","metadata",{"_1814":1815},"recipient","all","channel","l1239dk1",{"_1816":1817},"inline_comments",[],"content_type","parts",[1821],"@codex\\n\\nfix this issue below please\\n\\nP1 Badge Gate cached answers behind the retention flag\\nWhen RAG_PERSIST_ANSWER_TEXT is left at its default false but RAG_ANSWER_CACHE_TTL_MS is enabled (default 300000), answered requests still call setSharedCachedAnswer and insert { answer: cloneAnswer(answer) } into rag_response_cache.payload (src/lib/rag-cache.ts:523-524). I only found lookup-time expires_at filtering/invalidation, not a purge that removes expired cache rows, so generated PHI-derived answer text can still remain at rest while this new flag and production-readiness check report answer persistence as off. A focused proof is to run any non-skipped answer request with the default cache TTL and inspect the inserted rag_response_cache payload.\nClaude/gate answer persistence flag 4b55da\n\n## Summary\r\n\r\n-\r\n\r\n## Verification\r\n\r\n- [ ] `npm run verify:pr-local`\r\n\r\nDuring development, use `npm run verify:cheap` as the faster iteration gate before the final PR-local preflight.\r\n\r\n- [ ] `npm run verify:ui` when UI, routing, styling, browser behavior, reduced-motion, or forced-colors behavior changed\r\n- [ ] `npm run verify:release` before release or handoff confidence claims\r\n\r\nFor retrieval, ranking, selection, chunking, source/citation rendering, or answer-contract changes, `verify:pr-local` runs `eval:rag:offline` automatically. Run the offline command directly during iteration before spending a live eval.\r\n\r\n- [ ] **`npm run eval:retrieval:quality` (must stay 36/36) when retrieval, ranking, selection, chunking, or scoring behavior changed** — CI cannot run it (needs live keys), so run it locally and paste the summary. A metadata/governance-weighting change once buried correct docs (recall 1.0→0.76) and only this eval caught it.\r\n- [ ] `npm run eval:rag -- --limit 15` + `npm run eval:quality -- --rag-only` when answer generation, the synthesis prompt, or answer post-processing changed (grounded-supported must not drop; citation-failure 0)\r\n- [ ] `npm run check:production-readiness` when clinical workflow, privacy, environment, Supabase, source governance, or deployment behavior changed\r\n- [ ] `npm run check:deployment-readiness` when deployment startup, hosting, or rollout behavior changed\r\n\r\n## Clinical Governance Preflight\r\n\r\nComplete this section when the change touches ingestion, answer generation, search/ranking, source rendering, document access, privacy, production env, or clinical output.\r\n\r\n- [ ] Source-backed claims still require linked source verification before clinical use\r\n- [ ] No patient-identifiable document workflow was introduced or expanded without explicit governance approval\r\n- [ ] Supabase target remains `Clinical KB Database` (`sjrfecxgysukkwxsowpy`)\r\n- [ ] Service-role keys and private document access remain server-only\r\n- [ ] Demo/synthetic content remains clearly separated from real clinical sources\r\n- [ ] Source metadata, review status, and outdated/unknown-source behavior remain conservative\r\n- [ ] Deployment classification/TGA SaMD impact was checked when clinical decision-support behavior changed\r\n\r\n## Notes\r\n\r\n-\r\n\n[supa]:sjrfecxgysukkwxsowpy\nThis pull request has been ignored for the connected project `sjrfecxgysukkwxsowpy` because there are no changes detected in `supabase` directory. You can change this behaviour in [Project Integrations Settings ↗︎](https://supabase.com/dashboard/project/sjrfecxgysukkwxsowpy/settings/integrations).\n\n

\n\nPreview Branches by Supabase.\nLearn more about [Supabase Branching ↗︎](https://supabase.com/docs/guides/platform/branching).\n@copilot resolve the merge conflicts in this pull request\n\n\n\n[![Review Change Stack](https://storage.googleapis.com/coderabbit_public_assets/review-stack-in-coderabbit-ui.svg)](https://app.coderabbit.ai/change-stack/BigSimmo/Database/pull/537?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n\n\n\n> [!CAUTION]\n> ## Review failed\n> \n> The head commit changed during the review from a3f498e800c7ce4952d3405c597701b34a327fa2 to 47206d8c2ab04f8a32fd64de8ba2f141999eb3e0.\n\n\n\n\n\n

✨ Finishing Touches

\n\n

🧪 Generate unit tests (beta)

\n\n- [ ] Create PR with unit tests\n- [ ] Commit unit tests in branch `claude/gate-answer-persistence-flag-4b55da`\n\n

✨ Simplify code

\n\n- [ ] Create PR with simplified code\n- [ ] Commit simplified code in branch `claude/gate-answer-persistence-flag-4b55da`\n\n

\n\n

\n\n\n\n\n---\n\n\n\n\n_{Comment `@coderabbitai help` to get the list of available commands.}\n\n\n\n> @copilot resolve the merge conflicts in this pull request\n\nDone — resolved all merge conflicts in `docs/privacy-impact-assessment.md` (47206d8). The 5 conflict regions all arose from `origin/main` adding PIA-1/PIA-5 progress notes (PR #513), an updated `rag_response_cache` retention description, and a revised §11 recommendation; I took the `origin/main` side for each, which is the most current state.\n\n### 💡 Codex Review\n\nhttps://github.com/BigSimmo/Database/blob/c26e54f9d4f8e3ee212864cb076fba0dc7074dd7/src/lib/env.ts#L116-L120\n**_{_{![P1 Badge](https://img.shields.io/badge/P1-orange?style=flat)}} Gate cached answers behind the retention flag**\n\nWhen `RAG_PERSIST_ANSWER_TEXT` is left at its default `false` but `RAG_ANSWER_CACHE_TTL_MS` is enabled (default 300000), answered requests still call `setSharedCachedAnswer` and insert `{ answer: cloneAnswer(answer) }` into `rag_response_cache.payload` (`src/lib/rag-cache.ts:523-524`). I only found lookup-time `expires_at` filtering/invalidation, not a purge that removes expired cache rows, so generated PHI-derived answer text can still remain at rest while this new flag and production-readiness check report answer persistence as off. A focused proof is to run any non-skipped answer request with the default cache TTL and inspect the inserted `rag_response_cache` payload.\n \n\n

ℹ️ About Codex in GitHub

\n
\n\n[Your team has set up Codex to review pull requests in this repo](https://chatgpt.com/codex/cloud/settings/general). Reviews are triggered when you\n- Open a pull request for review\n- Mark a draft as ready\n- Comment \"@codex review\".\n\nIf Codex has suggestions, it will comment; otherwise it will react with 👍.\n\n\n\n\nCodex can also answer questions or update the PR. Try commenting \"@codex address that feedback\".\n \n

",{},"created",1783884175.1111443,"Completing the task","event_type","info",{"_93":744,"_97":94,"_738":2846},{"_93":1857,"_1858":1859},{"_93":1831,"_1832":1833,"_1834":1835,"_1836":1837,"_1838":-5},"pr","pr_title","Gate shared answer-cache persistence behind RAG_PERSIST_ANSWER_TEXT","pr_message","### Motivation\n- Prevent generated answer text (which can contain PHI) from being written to the shared `rag_response_cache` when answer-text retention is disabled by `RAG_PERSIST_ANSWER_TEXT`.\n- Align the shared cache behavior with the existing durable-log retention flag so the system's privacy posture is consistent and not only read-gated by TTL.\n\n### Description\n- Added an explicit retention gate to shared cache reads and writes by returning early from `getSharedCachedAnswer` and `setSharedCachedAnswer` when `env.RAG_PERSIST_ANSWER_TEXT` is false (`src/lib/rag-cache.ts`).\n- Added focused Vitest coverage that mocks the env and Supabase admin client to verify no `rag_response_cache` inserts occur when retention is disabled and that inserts occur when retention is enabled (`tests/rag-cache-invalidation.test.ts`).\n- Updated the privacy impact assessment to document that `rag_response_cache.payload` is skipped unless `RAG_PERSIST_ANSWER_TEXT` is enabled (`docs/privacy-impact-assessment.md`).\n\n### Testing\n- Ran the new unit tests with `npm test -- --run tests/rag-cache-invalidation.test.ts` and the test file passed (3 tests passed).\n- Ran TypeScript checking with `npm run typecheck` which completed successfully.\n- Per repo guidance, `npm run check:production-readiness` was not executed because it is provider/live-environment adjacent and requires explicit confirmation.","output_diff",{"_93":1836,"_1839":784,"_129":130,"_1840":-5,"_508":1841,"_1842":1843,"_1844":1845,"_1846":1847,"_1848":1849,"_1850":1851,"_1852":1853},"pre_apply_patch","repo_id","preapply_patch_base_commit_sha","diff --git a/docs/privacy-impact-assessment.md b/docs/privacy-impact-assessment.md\nindex fc32a4fdd39967cc1af8c3f8856eb334eeefc67d..fb0435e181b3afd77ad429414544931db3c87118 100644\n--- a/docs/privacy-impact-assessment.md\n+++ b/docs/privacy-impact-assessment.md\n@@ -34,58 +34,58 @@ material.\n - **The M15 HMAC fix is present** ([src/lib/query-privacy.ts:17-23](src/lib/query-privacy.ts)) — the\n stored hash is a keyed HMAC-SHA256 pseudonym **when `RAG_QUERY_HASH_SECRET` is set** (see gap PIA-2).\n - **Retention is automated**: nightly `pg_cron` jobs purge `rag_queries` (30d) and\n `rag_retrieval_logs` (90d). **Verified running on live** (both jobs `active = true`).\n - **OpenAI response storage is off** by default (`OPENAI_STORE_RESPONSES=false`,\n [src/lib/env.ts:55-58](src/lib/env.ts)).\n - Storage buckets are **private**; files are only reachable via short-lived (10 min) server-minted\n signed URLs after an ownership check.\n \n **Top gaps (full register in §10):**\n \n | ID | Risk | One-line |\n | ----- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n | PIA-1 | High | Cross-border disclosure to OpenAI (US) lacks an executed DPA/ZDR contractual basis (APP 8); the user-facing APP 5 notice is now live (PR #513). |\n | PIA-2 | High | Query-hash HMAC would downgrade to **unsalted, dictionary-reversible SHA-256** without `RAG_QUERY_HASH_SECRET` — now **enforced**: production fails closed at boot; operator must place the secret. |\n | PIA-3 | Resolved | Generated answer text is no longer persisted to `rag_queries` by default; answer-text persistence is gated behind `RAG_PERSIST_ANSWER_TEXT` (default off, blocked in production readiness). |\n | PIA-4 | Medium | `rag_query_misses` has **no retention/purge job** (only `rag_queries` and `rag_retrieval_logs` do). |\n | PIA-5 | Medium | Privacy policy + collection notice now live (PR #513); broader data-handling documentation still maturing (APP 1, APP 5). |\n | PIA-6 | Low-Med | OpenAI **prompt-cache retention is forced to 24h** for gpt-5.5 regardless of config — query + retrieved excerpts persist ≤24h at OpenAI. |\n | PIA-7 | Low | `RAG_PERSIST_RAW_QUERY_TEXT=true` would store raw PHI query text with no secondary safeguard beyond the 30-day purge. |\n \n ---\n \n ## 2. System overview and data classification\n \n-| Data category | Where it lives | Sensitivity | Notes |\n-| ------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------- |\n-| Clinical reference corpus (documents, chunks, embeddings, images, tables) | Supabase (Sydney) + storage buckets | Low–Medium | Published guidelines are not PHI; **uploaded** docs _could_ contain PHI. |\n-| Free-text clinical queries | Transient in request; hashed into `rag_queries` / `rag_query_misses` / `rag_retrieval_logs`; sent to OpenAI (US) | **High (potential PHI)** | The primary incidental-PHI vector. |\n-| Generated answers | `rag_queries.answer` (not persisted unless `RAG_PERSIST_ANSWER_TEXT`); `rag_response_cache.payload` (read-TTL, no purge cron) | **High (derived from PHI query + corpus)** | Durable answer log dropped at rest by default (PIA-3); cache row persists until same-key overwrite (TTL gates reads only). |\n-| User identity | Supabase Auth (`auth.users`), `owner_id` foreign keys | Medium (PII) | Email + SSO identity; managed by Supabase Auth. |\n-| Audit trail | `audit_logs` | Medium | Append-only, service-role-only, retained indefinitely by design. |\n-| Operational telemetry | `rag_retrieval_logs`, ingestion job tables | Low–Medium | Redacted query text; per-owner. |\n+| Data category | Where it lives | Sensitivity | Notes |\n+| ------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------- | ------------------------------------------ | ------------------------------------------------------------------------------------------- |\n+| Clinical reference corpus (documents, chunks, embeddings, images, tables) | Supabase (Sydney) + storage buckets | Low–Medium | Published guidelines are not PHI; **uploaded** docs _could_ contain PHI. |\n+| Free-text clinical queries | Transient in request; hashed into `rag_queries` / `rag_query_misses` / `rag_retrieval_logs`; sent to OpenAI (US) | **High (potential PHI)** | The primary incidental-PHI vector. |\n+| Generated answers | `rag_queries.answer` and `rag_response_cache.payload` (both skipped unless `RAG_PERSIST_ANSWER_TEXT`) | **High (derived from PHI query + corpus)** | Durable answer log and shared answer-cache payloads are dropped at rest by default (PIA-3). |\n+| User identity | Supabase Auth (`auth.users`), `owner_id` foreign keys | Medium (PII) | Email + SSO identity; managed by Supabase Auth. |\n+| Audit trail | `audit_logs` | Medium | Append-only, service-role-only, retained indefinitely by design. |\n+| Operational telemetry | `rag_retrieval_logs`, ingestion job tables | Low–Medium | Redacted query text; per-owner. |\n \n **Deployment context (from code):** the answer system prompt positions the assistant as _\"an\n experienced psychiatrist in Perth\"_ ([src/lib/rag.ts:7053](src/lib/rag.ts)) — i.e. a **WA psychiatry**\n use case. Psychiatric context raises the sensitivity ceiling: mental-health information is squarely\n \"sensitive information\" and \"health information\" under the _Privacy Act 1988_ (Cth).\n \n ---\n \n ## 3. Clinical-data flow map\n \n The end-to-end path for a single clinician query. **Bold** nodes are where PHI can land.\n \n ```\n Clinician browser\n │ POST /api/answer { query: \"\", ... }\n ▼\n [Next.js route] src/app/api/answer/route.ts:70\n │ • auth resolved → access.ownerId (or undefined for anon/public) :80\n │ • rate-limit bucket \"answer\" :83\n │ • resolveSearchScope() → owner-scoped candidate document set :93\n ▼\n [RAG pipeline] answerQuestionWithScope() src/lib/rag.ts\n │\n ├──►(A) QUERY EMBEDDING ─────────────────────────────────────────────┐\n │ raw query text → OpenAI embeddings (text-embedding-3-small) │\n@@ -216,51 +216,51 @@ degrade to the unsalted digest. `npm run check:production-readiness` additionall\n guard is wired into the startup path and that the secret is present, and\n [tests/instrumentation.test.ts](tests/instrumentation.test.ts) /\n [tests/env-query-hash-secret.test.ts](tests/env-query-hash-secret.test.ts) cover the fail-closed\n behaviour. The schema stays `z.string().min(16).optional()` so dev/CI keep the legacy digest for\n stored-row joins. **Remaining operator action:** place the secret in the deploy host's secret store —\n the guard and assertion enforce its presence but cannot supply it.\n \n ### 5.2 Redaction helper coverage\n \n `redactLogValue` / `safeErrorLogDetails` ([src/lib/privacy.ts](src/lib/privacy.ts)) strip paths,\n URLs, secrets (incl. `sb_secret_` / `sb_publishable_`), and emails from error details before they are\n logged, and `redactCaptionIdentifiers` strips emails/MRN/NHS-style ids/phone numbers from image\n captions ([privacy.ts:59-74](src/lib/privacy.ts)). These are sound as far as they go, but they are\n **pattern-based** and do not attempt to redact free-text clinical narrative (names in prose, etc.) —\n which is why the query-hash approach (not raw storage) is the right primary control.\n \n ---\n \n ## 6. Retention and purge\n \n | Data | Retention | Mechanism | Live status |\n | -------------------- | ---------------------- | ------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------- |\n | `rag_queries` | 30 days | `purge_expired_rag_queries(30)`, `pg_cron` `purge-expired-rag-queries` @ 03:30 UTC | **Active** (jobid 11, verified live) |\n | `rag_retrieval_logs` | 90 days | `pg_cron` `purge-rag-retrieval-logs` @ 03:00 UTC | **Active** (jobid 12, verified live) |\n | `rag_query_misses` | **None** | — | **No purge job** — see PIA-4 |\n-| `rag_response_cache` | ~5 min TTL (soft) | `expires_at` filtered on read; overwritten per query | Rows expire logically; no hard purge cron (low volume, short TTL) |\n+| `rag_response_cache` | ~5 min TTL (soft) | `expires_at` filtered on read; overwritten per query; answer rows require `RAG_PERSIST_ANSWER_TEXT` | Rows expire logically; no hard purge cron (low volume, short TTL) |\n | `audit_logs` | Indefinite (by design) | Documented in [migration 20260702120000](supabase/migrations/20260702120000_rag_retrieval_logs_retention.sql):8-12 | Intentional; \"do not add purge without compliance review\" |\n \n **Verification (live `cron.job` query, 2026-07-06):**\n \n ```\n jobid 11 purge-expired-rag-queries 30 3 * * * active=true select public.purge_expired_rag_queries(30);\n jobid 12 purge-rag-retrieval-logs 0 3 * * * active=true delete from public.rag_retrieval_logs where created_at < now() - interval '90 days';\n ```\n \n So the answer to \"_is anything scheduled?_\" is **yes** — the two query-log purges are live and active.\n The retention story is sound **except**:\n \n - **PIA-4:** `rag_query_misses` (which stores the same hashed-query + metadata as `rag_queries`) has\n **no** purge job — it accumulates indefinitely. It should get a matching 30–90 day cron.\n - The purge functions are installed conditionally (`if to_regnamespace('cron') is null then return`,\n [migration 20260629060603](supabase/migrations/20260629060603_rag_queries_retention.sql):27-43) —\n fine on live (pg_cron present) but **preview/branch databases silently skip scheduling**. Not a\n production risk, but worth noting for any secondary environment that retains real data.\n \n ---\n \n ## 7. Data residency\n \n - **Supabase project region: `ap-southeast-2` (AWS Asia Pacific, Sydney).** Confirmed via the Supabase\n management API for project `sjrfecxgysukkwxsowpy`. All Postgres data (documents, chunks, embeddings,\n@@ -358,59 +358,58 @@ cross-tenant leaks — they are compliance-posture and PHI-minimisation gaps.\n - **Fix (landed):** `requireQueryHashSecret()` now makes the secret **mandatory in production** — it\n fails closed at startup ([instrumentation.ts](src/instrumentation.ts)) when `NODE_ENV=production` and\n the secret is missing, mirroring the `requireServerEnv` pattern. `check:production-readiness` asserts\n the boot guard is wired in and the secret is present; covered by\n [instrumentation.test.ts](tests/instrumentation.test.ts) and\n [env-query-hash-secret.test.ts](tests/env-query-hash-secret.test.ts).\n - **Remaining (operator):** place `RAG_QUERY_HASH_SECRET` in the deploy host's secret store on the live\n project (the code enforces its presence but cannot supply the value).\n \n ### PIA-3 — Generated answers stored un-redacted in `rag_queries` **(Resolved)**\n \n - **Risk:** The `answer` column held the full generated text, which can restate patient specifics\n echoed from the query; the query itself is hashed but the answer was not. Owner-scoped (not\n cross-tenant) and purged at 30 days, but it was un-redacted PHI-derived content at rest.\n - **Fix (shipped):** Answer-text persistence in the durable log is gated behind a dedicated\n `RAG_PERSIST_ANSWER_TEXT` flag (default **off**), applied centrally in `insertRagQuery` via\n `answerTextForStorage` ([query-privacy.ts](src/lib/query-privacy.ts), [rag.ts](src/lib/rag.ts)) so\n every `logRagQuery` caller is covered, and at the promoted-eval-case write in\n [eval-cases/route.ts](src/app/api/eval-cases/route.ts). With the flag off the column is written as\n `null` and each row records `metadata.answer_retained = false`. The offline eval/quality pipeline\n reads the in-memory answer (`logQuery: false`) and never reads this column back\n ([scripts/eval-rag.ts](scripts/eval-rag.ts), [scripts/eval-answer-quality.ts](scripts/eval-answer-quality.ts),\n [scripts/promote-query-misses.ts](scripts/promote-query-misses.ts)), so persistence-off does not\n affect eval — confirming the pipeline has no real dependency on stored answer text. The flag is\n additionally blocked in a production-like environment by `npm run check:production-readiness`.\n-- **Residual (scoped out):** The answer also lands in `rag_response_cache.payload`\n- ([rag-cache.ts](src/lib/rag-cache.ts)). Its `expires_at` TTL (`RAG_ANSWER_CACHE_TTL_MS`, default\n- 5 min) only gates **reads** — `sharedCacheSelector` filters on `expires_at`, while\n- `replaceSharedCacheRow` deletes only the _same_ cache key before inserting, and there is **no hard\n- purge cron** (see the retention table in §8). So an expired row is not destroyed: a one-off query's\n- answer can persist at rest until a same-key overwrite or a manual invalidation. Nulling the payload\n- would defeat caching, so it is intentionally not gated by this flag; bounding it properly needs a\n- scheduled purge (a PIA-4-style follow-up). This is distinct from — and not covered by — the 30-day\n- durable-log fix above.\n+- **Shared answer cache alignment:** The answer no longer lands in `rag_response_cache.payload`\n+ unless `RAG_PERSIST_ANSWER_TEXT=true` ([rag-cache.ts](src/lib/rag-cache.ts)). Its `expires_at`\n+ TTL (`RAG_ANSWER_CACHE_TTL_MS`, default 5 min) only gates **reads** — `sharedCacheSelector`\n+ filters on `expires_at`, while `replaceSharedCacheRow` deletes only the _same_ cache key before\n+ inserting, and there is **no hard purge cron** (see the retention table in §8). So answer-cache\n+ persistence must remain behind the same explicit answer-retention opt-in. Bounding opted-in shared\n+ answer-cache rows properly still needs a scheduled purge (a PIA-4-style follow-up). This is\n+ distinct from the durable `rag_queries.answer` log fix above.\n \n ### PIA-4 — `rag_query_misses` never purged **(Medium)**\n \n - **Risk:** Hashed-query rows accumulate indefinitely; retention policy is inconsistent with\n `rag_queries`/`rag_retrieval_logs`.\n - **Evidence:** live `cron.job` has no miss-table purge; only jobids 11/12 exist.\n - **Fix:** Add a `pg_cron` purge for `rag_query_misses` (30–90 days) mirroring\n [migration 20260702120000](supabase/migrations/20260702120000_rag_retrieval_logs_retention.sql).\n \n ### PIA-5 — No privacy policy / collection notice / data-handling doc **(Medium)**\n \n - **Risk:** APP 1 (policy) and APP 5 (notification) were unmet; users were not told what is collected,\n retained, or disclosed overseas.\n - **Fix:** Ship a privacy policy + in-product collection notice; document retention windows and the\n OpenAI disclosure. Low engineering cost, high compliance value.\n - **Progress (2026-07-13):** the privacy policy + in-product collection notice are **live on `main`**\n via PR #513 ([privacy page](src/app/privacy/page.tsx), composer notice), closing the core APP 1/APP 5\n notification gap. Residual: broader data-handling documentation (retention windows, breach-response\n runbook) and the APP 8 contractual basis (tracked under PIA-1).\n \n ### PIA-6 — OpenAI prompt-cache retention forced to 24h **(Low-Medium)**\n \n - **Risk:** Query + retrieved excerpts persist at OpenAI for ≤24h via prompt caching even with\n `store:false`; not operator-tunable for gpt-5.5.\n - **Evidence:** [openai.ts:168, 208, 221-222](src/lib/openai.ts).\ndiff --git a/src/lib/rag-cache.ts b/src/lib/rag-cache.ts\nindex b9fce6b598c68160aff92c34e8945dd47d69598e..3cf3c50b7d3bba3cb85bab4fc7511bac212bb955 100644\n--- a/src/lib/rag-cache.ts\n+++ b/src/lib/rag-cache.ts\n@@ -410,51 +410,51 @@ export async function getSharedCachedSearch(\n coverage_gate_decision: payload.telemetry?.coverage_gate_decision,\n coverage_gate_reason: payload.telemetry?.coverage_gate_reason ?? null,\n vector_skipped_reason: payload.telemetry?.vector_skipped_reason ?? null,\n source_image_required: payload.telemetry?.source_image_required ?? false,\n source_image_satisfied: payload.telemetry?.source_image_satisfied ?? false,\n second_stage_rerank_used: payload.telemetry?.second_stage_rerank_used ?? false,\n second_stage_rerank_latency_ms: 0,\n visual_direct_image_count: payload.telemetry?.visual_direct_image_count ?? 0,\n weighted_top_score: payload.telemetry?.weighted_top_score ?? 0,\n rrf_top_score: payload.telemetry?.rrf_top_score ?? 0,\n retrieval_strategy: \"search_cache\" as const,\n },\n };\n } catch {\n return { kind: \"miss\", reason: \"cache_lookup_exception\" };\n }\n }\n \n export async function getSharedCachedAnswer(\n args: Pick<\n SearchChunksArgs,\n \"query\" | \"documentId\" | \"documentIds\" | \"ownerId\" | \"skipCache\" | \"queryMode\" | \"forceEmbedding\"\n >,\n startedAt: number,\n ) {\n- if (args.skipCache || env.RAG_ANSWER_CACHE_TTL_MS <= 0) return null;\n+ if (args.skipCache || env.RAG_ANSWER_CACHE_TTL_MS <= 0 || !env.RAG_PERSIST_ANSWER_TEXT) return null;\n try {\n const indexingVersion = await cacheIndexingVersion(args);\n const { data, error } = await sharedCacheSelector(\n createAdminClient(),\n \"answer\",\n args,\n indexingVersion,\n ).maybeSingle();\n if (error || !data?.payload) return null;\n const answer = cloneAnswer((data.payload as { answer: RagAnswer }).answer);\n answer.routingReason = answer.routingReason\n ? `${answer.routingReason}; shared_answer_cache_hit`\n : \"shared_answer_cache_hit\";\n answer.latencyTimings = {\n ...answer.latencyTimings,\n search_cache_hit: true,\n shared_cache_hit: true,\n shared_cache_status: \"hit\",\n shared_cache_miss_reason: null,\n total_latency_ms: Date.now() - startedAt,\n };\n return answer;\n } catch {\n return null;\n }\n@@ -498,51 +498,51 @@ async function replaceSharedCacheRow(\n }\n \n function setSharedCachedSearch(\n args: SearchChunksArgs,\n results: SearchResult[],\n telemetry: SearchTelemetry,\n queryVariants: string[] = [],\n ) {\n if (args.skipCache || env.RAG_SEARCH_CACHE_TTL_MS <= 0) return;\n void replaceSharedCacheRow(\n \"search\",\n args,\n { results: cloneSearchResults(results), telemetry },\n env.RAG_SEARCH_CACHE_TTL_MS,\n retrievalPlanCacheQuery(args, telemetry.query_class, queryVariants),\n );\n }\n \n function setSharedCachedAnswer(\n args: Pick<\n SearchChunksArgs,\n \"query\" | \"documentId\" | \"documentIds\" | \"ownerId\" | \"skipCache\" | \"queryMode\" | \"forceEmbedding\"\n >,\n answer: RagAnswer,\n ) {\n- if (args.skipCache || env.RAG_ANSWER_CACHE_TTL_MS <= 0) return;\n+ if (args.skipCache || env.RAG_ANSWER_CACHE_TTL_MS <= 0 || !env.RAG_PERSIST_ANSWER_TEXT) return;\n void replaceSharedCacheRow(\"answer\", args, { answer: cloneAnswer(answer) }, env.RAG_ANSWER_CACHE_TTL_MS);\n }\n \n export function invalidateRagCachesForOwner(ownerId?: string | null) {\n if (!ownerId) {\n answerCache.clear();\n answerInflight.clear();\n searchCache.clear();\n cacheIndexingVersionCache.clear();\n void (async () => {\n try {\n await createAdminClient().from(\"rag_response_cache\").delete().in(\"cache_kind\", [\"search\", \"answer\"]);\n } catch (error) {\n // Shared cache invalidation is best effort.\n console.warn(\"Shared cache invalidation failed (all kinds):\", error);\n }\n })();\n return;\n }\n \n const sharedCacheOwnerId = ownerId === \"anonymous\" ? null : ownerId;\n for (const key of answerCache.keys()) {\n if (ragCacheKeyMatchesOwner(key, ownerId)) answerCache.delete(key);\n }\n for (const key of answerInflight.keys()) {\ndiff --git a/tests/rag-cache-invalidation.test.ts b/tests/rag-cache-invalidation.test.ts\nindex 3bcd4a9b742945f20cc4da0fdb292f44718ea10f..19afb0c449f5f7aac9890e07858e2583c2f6a832 100644\n--- a/tests/rag-cache-invalidation.test.ts\n+++ b/tests/rag-cache-invalidation.test.ts\n@@ -11,55 +11,170 @@ class DeleteQuery implements PromiseLike<{ data: null; error: null }> {\n constructor(private readonly calls: FilterCall[]) {}\n \n eq(column: string, value: unknown) {\n this.calls.push({ method: \"eq\", column, value });\n return this;\n }\n \n is(column: string, value: unknown) {\n this.calls.push({ method: \"is\", column, value });\n return this;\n }\n \n in(column: string, value: unknown) {\n this.calls.push({ method: \"in\", column, value });\n return this;\n }\n \n then(\n onfulfilled?: ((value: { data: null; error: null }) => TResult1 | PromiseLike) | null,\n onrejected?: ((reason: unknown) => TResult2 | PromiseLike) | null,\n ): PromiseLike {\n return Promise.resolve({ data: null, error: null }).then(onfulfilled, onrejected);\n }\n }\n \n+class SelectQuery implements PromiseLike<{\n+ data: Array<{ id: string; updated_at: string; metadata: null }>;\n+ error: null;\n+}> {\n+ eq() {\n+ return this;\n+ }\n+\n+ order() {\n+ return this;\n+ }\n+\n+ limit() {\n+ return this;\n+ }\n+\n+ then; error: null }, TResult2 = never>(\n+ onfulfilled?:\n+ | ((value: {\n+ data: Array<{ id: string; updated_at: string; metadata: null }>;\n+ error: null;\n+ }) => TResult1 | PromiseLike)\n+ | null,\n+ onrejected?: ((reason: unknown) => TResult2 | PromiseLike) | null,\n+ ): PromiseLike {\n+ return Promise.resolve({\n+ data: [{ id: \"doc-1\", updated_at: \"2026-01-01T00:00:00.000Z\", metadata: null }],\n+ error: null,\n+ }).then(onfulfilled, onrejected);\n+ }\n+}\n+\n+function mockSharedAnswerCacheEnv(persistAnswerText: boolean, insertedPayloads: unknown[]) {\n+ vi.doMock(\"@/lib/env\", () => ({\n+ env: {\n+ RAG_ANSWER_CACHE_SIZE: 100,\n+ RAG_ANSWER_CACHE_TTL_MS: 300000,\n+ RAG_PERSIST_ANSWER_TEXT: persistAnswerText,\n+ },\n+ }));\n+ vi.doMock(\"@/lib/supabase/admin\", () => ({\n+ createAdminClient: () => ({\n+ from: vi.fn((table: string) => {\n+ if (table === \"documents\") {\n+ return {\n+ select: vi.fn(() => new SelectQuery()),\n+ };\n+ }\n+ if (table === \"rag_response_cache\") {\n+ return {\n+ delete: vi.fn(() => new DeleteQuery([])),\n+ insert: vi.fn((payload: unknown) => {\n+ insertedPayloads.push(payload);\n+ return Promise.resolve({ data: null, error: null });\n+ }),\n+ };\n+ }\n+ throw new Error(`Unexpected table ${table}`);\n+ }),\n+ }),\n+ }));\n+}\n+\n describe(\"RAG cache invalidation\", () => {\n it(\"clears anonymous shared cache rows with owner_id is null instead of writing the anonymous sentinel to UUID filters\", async () => {\n vi.resetModules();\n const calls: FilterCall[][] = [];\n \n vi.doMock(\"@/lib/supabase/admin\", () => ({\n createAdminClient: () => ({\n from: vi.fn((table: string) => ({\n delete: vi.fn(() => {\n expect(table).toBe(\"rag_response_cache\");\n const queryCalls: FilterCall[] = [];\n calls.push(queryCalls);\n return new DeleteQuery(queryCalls);\n }),\n })),\n }),\n }));\n \n const { invalidateRagCachesForDocumentMutation } = await import(\"../src/lib/rag\");\n \n invalidateRagCachesForDocumentMutation(ownerId);\n \n await vi.waitFor(() => expect(calls.length).toBe(2), { timeout: 10000 });\n \n expect(calls[0]).toContainEqual({ method: \"eq\", column: \"owner_id\", value: ownerId });\n expect(calls.flat()).not.toContainEqual({ method: \"eq\", column: \"owner_id\", value: \"anonymous\" });\n expect(calls[1]).toContainEqual({ method: \"is\", column: \"owner_id\", value: null });\n expect(calls[1]).toContainEqual({ method: \"in\", column: \"cache_kind\", value: [\"search\", \"answer\"] });\n });\n+\n+ it(\"does not persist shared answer-cache payloads when answer-text retention is disabled\", async () => {\n+ vi.resetModules();\n+ const insertedPayloads: unknown[] = [];\n+ mockSharedAnswerCacheEnv(false, insertedPayloads);\n+\n+ const { setCachedAnswer } = await import(\"../src/lib/rag-cache\");\n+\n+ await setCachedAnswer(\n+ { query: \"patient-specific answer\", ownerId, queryMode: \"auto\" },\n+ {\n+ answer: \"Generated answer that may echo PHI\",\n+ grounded: true,\n+ confidence: \"high\",\n+ citations: [],\n+ sources: [],\n+ },\n+ );\n+\n+ await new Promise((resolve) => setTimeout(resolve, 0));\n+\n+ expect(insertedPayloads).toHaveLength(0);\n+ });\n+\n+ it(\"persists shared answer-cache payloads only when answer-text retention is explicitly enabled\", async () => {\n+ vi.resetModules();\n+ const insertedPayloads: unknown[] = [];\n+ mockSharedAnswerCacheEnv(true, insertedPayloads);\n+\n+ const { setCachedAnswer } = await import(\"../src/lib/rag-cache\");\n+\n+ await setCachedAnswer(\n+ { query: \"patient-specific answer\", ownerId, queryMode: \"auto\" },\n+ {\n+ answer: \"Generated answer retained by explicit opt-in\",\n+ grounded: true,\n+ confidence: \"high\",\n+ citations: [],\n+ sources: [],\n+ },\n+ );\n+\n+ await vi.waitFor(() => expect(insertedPayloads).toHaveLength(1), { timeout: 10000 });\n+ expect(insertedPayloads[0]).toMatchObject({\n+ cache_kind: \"answer\",\n+ payload: {\n+ answer: {\n+ answer: \"Generated answer retained by explicit opt-in\",\n+ },\n+ },\n+ });\n+ });\n });\n","external_storage_diff",{"_1854":1855,"_1856":-5},"files_modified",3,"lines_added",134,"lines_removed",20,"commit_message","fix(rag): gate shared answer cache persistence","additional_parent_commit_shas",[],"file_id","file_000000009f30722fb89dbfa7dac3bd34","ttl","partial_repo_snapshot","files",[1860,1861,1862],{"_256":2334,"_1864":-5,"_1865":2335,"_1867":-5},{"_256":2215,"_1864":-5,"_1865":2216,"_1867":-5},{"_256":1863,"_1864":-5,"_1865":1866,"_1867":-5},"docs/privacy-impact-assessment.md","contents","line_range_contents",[1868],"missing_reason",{"_1869":1287,"_1870":1871,"_738":1872,"_1873":59},"line_range_start","line_range_end",441,[1874,393,1875,1876,1877,393,1878,1879,1880,1881,393,1882,393,1883,393,1884,1885,1886,393,1887,1888,1889,1890,1891,393,1892,393,1893,1894,1895,1896,1897,1898,1899,1900,1901,1902,1903,1904,1905,1906,393,1907,393,1908,1909,1910,1911,1912,1913,1914,1915,1916,393,1882,393,1917,393,1918,1919,1920,1921,1922,1923,1924,1925,393,1926,1927,1928,1929,393,1882,393,1930,393,1931,393,1932,1933,1934,1935,1936,1937,1938,1939,1935,1940,1941,1942,1943,1944,1945,1946,1947,1948,1949,1950,1951,1952,1953,1954,1941,1955,1956,1957,1958,1959,1960,1961,1941,1962,1963,1964,1935,1965,1932,393,1966,1967,1968,393,1969,1970,393,1882,393,1971,393,1972,393,1973,1974,1975,1976,1977,1978,1979,393,1980,1981,393,1982,393,1983,1984,1985,1986,1987,1988,1989,1990,1991,1992,1993,393,1994,393,1995,1996,1997,393,1998,1999,2000,2001,2002,2003,393,2004,2005,2006,393,1882,393,2007,393,2008,2009,393,2010,2011,2012,2013,2014,2015,393,2016,393,2017,2018,393,2019,2020,2021,2022,2023,2024,2025,2026,1932,393,2027,2028,2029,2030,2031,2032,2033,393,2034,2035,2036,2037,2038,2039,2040,2041,2042,2043,2044,393,2045,393,2046,2047,2048,2049,2050,2051,393,1882,393,2052,393,2053,2054,2055,2056,2057,2058,2059,393,2060,393,1932,2061,2062,1932,393,2063,2064,393,2065,2066,2067,2068,2069,2070,393,1882,393,2071,393,2072,2073,2074,2075,2076,2077,2078,393,2079,2080,393,1882,393,2081,393,2082,2083,2084,2085,2086,2087,2088,2089,2090,2091,2092,2093,2094,2095,393,2096,2097,393,1882,393,2098,393,2099,2100,2101,2102,2103,2104,2105,2106,393,2107,2108,2109,2110,2111,2112,2113,2114,2115,393,2116,2117,2118,2119,2120,2121,2122,393,1882,393,2123,393,2124,393,2125,2126,2127,2128,2129,2130,2131,2132,2133,2134,2135,2136,2137,2138,2139,2140,393,2141,393,2142,2143,2144,2145,2146,2147,2148,2149,2150,2151,2152,2153,393,2154,393,2155,2156,2157,2158,2159,2160,2161,2162,2163,2164,2165,2166,2167,2168,2169,2170,2171,2172,2173,2174,2175,2176,393,2177,393,2178,2179,2180,2181,2182,393,2183,393,2184,2185,2186,2187,2188,2189,2190,2191,393,2192,393,2193,2194,2195,2196,2197,393,2198,393,2199,2200,2201,2202,393,1882,393,2203,393,2204,2205,2206,2207,2208,2209,2210,2211,2212,393,2213,2214],"contains_end_of_file","# Privacy Impact Assessment — Clinical KB Database","**Status:** Draft for review · **Date:** 2026-07-06 · **Branch:** `claude/privacy-tenancy-review`","**Scope:** Clinical data flows through the Clinical KB app (Next.js + Supabase + OpenAI), the live Supabase project `Clinical KB Database` (`sjrfecxgysukkwxsowpy`), and the WA private-clinical deployment context.","**Author:** Automated code-level assessment (multi-agent audit of `src/app/api/**`, `src/lib/*`, `supabase/schema.sql`, `supabase/migrations/**`), cross-checked against the live database.","> **This is not legal advice.** It is a technical privacy assessment written to be handed to a","> privacy officer / legal reviewer. Statements about the _Privacy Act 1988_ (Cth), the Australian","> Privacy Principles (APPs) and WA health-records obligations are engineering interpretations that","> must be confirmed by a qualified adviser before the app is used with real patients.","---","## 1. Executive summary","The app is a **clinical knowledge base** — it indexes clinical reference material (guidelines,","drug monographs, protocols) and answers clinician questions over that corpus with retrieval-augmented","generation. It is **not** a patient record system and, by design, does not ask for patient data.","The dominant privacy risk is therefore **incidental PHI**: a clinician will inevitably type patient","details into a free-text query (\"42yo F on clozapine 400mg with rising WCC, next step?\"). That query","text is (a) sent to OpenAI in the United States, and (b) written to log tables in Supabase. A secondary","risk is PHI inside **uploaded documents** if users upload anything other than published reference","material.","**What is already good:**","- **Data residency**: the Supabase project runs in **`ap-southeast-2` (AWS Sydney, Australia)** —"," clinical data at rest stays onshore. Confirmed live via the Supabase API (project region"," `ap-southeast-2`).","- **Query redaction**: raw query text is **not** persisted by default. Every log write goes through"," `queryTextForStorage()` which stores a hash placeholder unless `RAG_PERSIST_RAW_QUERY_TEXT=true`"," ([src/lib/query-privacy.ts:33](src/lib/query-privacy.ts)).","- **The M15 HMAC fix is present** ([src/lib/query-privacy.ts:17-23](src/lib/query-privacy.ts)) — the"," stored hash is a keyed HMAC-SHA256 pseudonym **when `RAG_QUERY_HASH_SECRET` is set** (see gap PIA-2).","- **Retention is automated**: nightly `pg_cron` jobs purge `rag_queries` (30d) and"," `rag_retrieval_logs` (90d). **Verified running on live** (both jobs `active = true`).","- **OpenAI response storage is off** by default (`OPENAI_STORE_RESPONSES=false`,"," [src/lib/env.ts:55-58](src/lib/env.ts)).","- Storage buckets are **private**; files are only reachable via short-lived (10 min) server-minted"," signed URLs after an ownership check.","**Top gaps (full register in §10):**","| ID | Risk | One-line |","| ----- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |","| PIA-1 | High | Cross-border disclosure to OpenAI (US) lacks an executed DPA/ZDR contractual basis (APP 8); the user-facing APP 5 notice is now live (PR #513). |","| PIA-2 | High | Query-hash HMAC would downgrade to **unsalted, dictionary-reversible SHA-256** without `RAG_QUERY_HASH_SECRET` — now **enforced**: production fails closed at boot; operator must place the secret. |","| PIA-3 | Resolved | Generated answer text is no longer persisted to `rag_queries` by default; answer-text persistence is gated behind `RAG_PERSIST_ANSWER_TEXT` (default off, blocked in production readiness). |","| PIA-4 | Medium | `rag_query_misses` has **no retention/purge job** (only `rag_queries` and `rag_retrieval_logs` do). |","| PIA-5 | Medium | Privacy policy + collection notice now live (PR #513); broader data-handling documentation still maturing (APP 1, APP 5). |","| PIA-6 | Low-Med | OpenAI **prompt-cache retention is forced to 24h** for gpt-5.5 regardless of config — query + retrieved excerpts persist ≤24h at OpenAI. |","| PIA-7 | Low | `RAG_PERSIST_RAW_QUERY_TEXT=true` would store raw PHI query text with no secondary safeguard beyond the 30-day purge. |","## 2. System overview and data classification","| Data category | Where it lives | Sensitivity | Notes |","| ------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------- | ------------------------------------------ | ------------------------------------------------------------------------------------------- |","| Clinical reference corpus (documents, chunks, embeddings, images, tables) | Supabase (Sydney) + storage buckets | Low–Medium | Published guidelines are not PHI; **uploaded** docs _could_ contain PHI. |","| Free-text clinical queries | Transient in request; hashed into `rag_queries` / `rag_query_misses` / `rag_retrieval_logs`; sent to OpenAI (US) | **High (potential PHI)** | The primary incidental-PHI vector. |","| Generated answers | `rag_queries.answer` and `rag_response_cache.payload` (both skipped unless `RAG_PERSIST_ANSWER_TEXT`) | **High (derived from PHI query + corpus)** | Durable answer log and shared answer-cache payloads are dropped at rest by default (PIA-3). |","| User identity | Supabase Auth (`auth.users`), `owner_id` foreign keys | Medium (PII) | Email + SSO identity; managed by Supabase Auth. |","| Audit trail | `audit_logs` | Medium | Append-only, service-role-only, retained indefinitely by design. |","| Operational telemetry | `rag_retrieval_logs`, ingestion job tables | Low–Medium | Redacted query text; per-owner. |","**Deployment context (from code):** the answer system prompt positions the assistant as _\"an","experienced psychiatrist in Perth\"_ ([src/lib/rag.ts:7053](src/lib/rag.ts)) — i.e. a **WA psychiatry**","use case. Psychiatric context raises the sensitivity ceiling: mental-health information is squarely","\"sensitive information\" and \"health information\" under the _Privacy Act 1988_ (Cth).","## 3. Clinical-data flow map","The end-to-end path for a single clinician query. **Bold** nodes are where PHI can land.","```","Clinician browser"," │ POST /api/answer { query: \"\", ... }"," ▼","[Next.js route] src/app/api/answer/route.ts:70"," │ • auth resolved → access.ownerId (or undefined for anon/public) :80"," │ • rate-limit bucket \"answer\" :83"," │ • resolveSearchScope() → owner-scoped candidate document set :93","[RAG pipeline] answerQuestionWithScope() src/lib/rag.ts"," │"," ├──►(A) QUERY EMBEDDING ─────────────────────────────────────────────┐"," │ raw query text → OpenAI embeddings (text-embedding-3-small) │"," │ src/lib/openai.ts:498 embedText → :453 input:batch │ ►► OpenAI API"," │ │ (US region,"," ├──►(B) RETRIEVAL (Supabase RPCs, owner-filtered in SQL) │ api.openai.com)"," │ match_document_chunks* etc. — Sydney, never leaves AU │"," │ │"," ├──►(C) ANSWER SYNTHESIS ─────────────────────────────────────────────┤"," │ **raw query verbatim** (\"Question:\\n${query}\", rag.ts:7144) │"," │ + **retrieved chunk text** (buildRagSourceBlock, rag.ts:6306) │"," │ + system instructions (rag.ts:7053) │"," │ → OpenAI Responses API (gpt-5.5) openai.ts:384 ─┘"," │ store:false (openai.ts:220); prompt_cache_retention:24h (:168)"," ├──►(D) LOCAL LOGGING (Supabase, Sydney, owner-stamped)"," │ insertRagQuery(): rag.ts:1983"," │ • query = **hash placeholder** (queryTextForStorage) ← redacted"," │ • normalized_query= **hash placeholder** ← redacted"," │ • answer = null unless RAG_PERSIST_ANSWER_TEXT ← dropped at rest (PIA-3)"," │ • source_chunk_ids= real chunk UUIDs ← owner's own data"," │ • metadata.query_hash = HMAC/SHA-256 (query-privacy.ts:51)"," └──►(E) RESPONSE CACHE (Supabase rag_response_cache, owner-scoped)"," payload = full answer, TTL ~5 min (RAG_ANSWER_CACHE_TTL_MS)"," keyed by owner_id predicate (rag.ts:1667) — no cross-tenant serve","Clinician browser ← answer + citations","`/api/search` follows the same shape but writes `rag_queries` / `rag_query_misses` /","`rag_retrieval_logs` (all redacted via the same helpers —","[src/app/api/search/route.ts:450-468, 556-559, 638-643](src/app/api/search/route.ts)).","**The two egress points that carry PHI off-app are (A) and (C) — both to OpenAI in the US.**","Everything in Supabase stays in Sydney.","## 4. What reaches OpenAI, and under what terms","### 4.1 What is sent","| Payload | Content | Reference |","| --------------- | ---------------------------------------------------------------------------------------------------- | -------------------------------------------------------------- |","| Embedding input | **Raw query text**, verbatim (normalized whitespace/case only) | [src/lib/openai.ts:498](src/lib/openai.ts) → `embedTexts` :423 |","| Answer input | **Raw query verbatim** (`Question:\\n${args.query}`) | [src/lib/rag.ts:7144](src/lib/rag.ts) |","| Answer input | **Retrieved chunk text** (content, capped ~1800 chars, plus title/page/section/table-facts/captions) | [src/lib/rag.ts:6306-6325](src/lib/rag.ts) |","| Instructions | Static system prompt (\"experienced psychiatrist in Perth…\") | [src/lib/rag.ts:7053](src/lib/rag.ts) |","| Metadata | `{ operation }` only — **no** owner id, **no** patient identifiers added by the app | [src/lib/openai.ts:223](src/lib/openai.ts) |","The app never _adds_ patient identifiers, but it does not scrub them either: **any PHI the clinician","types into the query, or that exists in an indexed excerpt, is transmitted to OpenAI.**","### 4.2 Handling controls on the OpenAI request","- **Model:** `gpt-5.5` for answers, `text-embedding-3-small` for embeddings ([src/lib/env.ts:18-27](src/lib/env.ts)).","- **`store: false`** by default — responses are not retained in OpenAI's dashboard/store"," ([src/lib/openai.ts:220](src/lib/openai.ts), [src/lib/env.ts:55-58](src/lib/env.ts)).","- **`prompt_cache_retention: \"24h\"`** — **forced on for gpt-5.5** regardless of the"," `OPENAI_PROMPT_CACHE_RETENTION` env value ([src/lib/openai.ts:168, 208, 221-222](src/lib/openai.ts))."," Prompt prefixes (which include retrieved excerpts and can include the query) are cacheable at OpenAI"," for up to 24 hours. See PIA-6.","- **No `baseURL` override and no zero-data-retention (ZDR) header** are set in code — the client is a"," plain `new OpenAI({ apiKey, timeout, maxRetries })` ([src/lib/openai.ts:69-73](src/lib/openai.ts)),"," so traffic goes to `api.openai.com` (US) under whatever data-processing terms attach to the API"," **account/organisation**.","### 4.3 Data-processing terms — what code can and cannot tell us","The code shows the _technical_ posture (US endpoint, `store:false`, 24h prompt cache, no ZDR header).","It **cannot** tell us the contractual posture. The following are **operator/legal actions**, not code","facts, and must be confirmed:","- Whether a **Data Processing Addendum (DPA)** / OpenAI Business/Enterprise agreement is in place for"," the account behind `OPENAI_API_KEY`.","- Whether **Zero Data Retention (ZDR)** has been granted for the org (which would also remove the 24h"," prompt-cache window).","- OpenAI's standard API commitment (no training on API data by default; limited abuse-monitoring"," retention) — this needs to be pinned to the specific contract, not assumed.","Under **APP 8 (cross-border disclosure)**, the app operator remains accountable for OpenAI's handling","of the disclosed information unless an APP 8.2 exception applies. This is the single most important","privacy item to close before real patient use (PIA-1).","## 5. Logging and redaction — per-table verification","All three log tables are **owner-stamped** and **RLS-enabled** (owner-read for authenticated users;","service-role for writes). Redaction is applied centrally at every write site.","| Table | Raw query stored? | Redaction mechanism | Other sensitive columns | RLS |","| -------------------- | --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------- |","| `rag_queries` | No (hash placeholder) | `queryTextForStorage` / `normalizedQueryTextForStorage` ([query-privacy.ts](src/lib/query-privacy.ts)); write via `insertRagQuery` ([rag.ts](src/lib/rag.ts)) | `answer` dropped at rest unless `RAG_PERSIST_ANSWER_TEXT` (`answerTextForStorage`, PIA-3); `source_chunk_ids` (own data) | owner-read, [schema.sql:3932](supabase/schema.sql) |","| `rag_query_misses` | No (hash placeholder) | same helpers; writes in [search/route.ts:558-559](src/app/api/search/route.ts), [interaction/route.ts:88-89](src/app/api/search/interaction/route.ts) | `metadata.query_hash` | owner-read, [schema.sql:3935](supabase/schema.sql) |","| `rag_retrieval_logs` | No (hash placeholder) | same helpers; write at [search/route.ts:556-559](src/app/api/search/route.ts) | retrieval telemetry only | owner-read, [schema.sql:3938](supabase/schema.sql) |","| `audit_logs` | N/A (no query text) | action/resource metadata only; error strings pass through `redactLogValue` ([privacy.ts:5-31](src/lib/privacy.ts)) | `owner_id`, `action`, `resource_id` | service-role-only, [schema.sql:3959](supabase/schema.sql) |","### 5.1 M15 HMAC query-hash fix — verified present, enforced in production","The audit's **M15** remediation is in the code","([src/lib/query-privacy.ts:17-23](src/lib/query-privacy.ts)):","```ts","export function hashQueryText(query: string) {"," const normalized = normalizeQueryText(query);"," if (env.RAG_QUERY_HASH_SECRET) {"," return createHmac(\"sha256\", env.RAG_QUERY_HASH_SECRET).update(normalized).digest(\"hex\"); // keyed pseudonym"," }"," return createHash(\"sha256\").update(normalized).digest(\"hex\"); // legacy unsalted fallback","}","- **When `RAG_QUERY_HASH_SECRET` is set:** the stored hash is a keyed HMAC-SHA256 — not"," offline-reversible, not correlatable outside this deployment. ✔ This is the intended fix.","- **When it is unset:** the code **silently falls back to unsalted SHA-256**. A short, low-entropy"," clinical query (\"john smith clozapine\") is then **dictionary-reversible** — an attacker (or a"," curious insider) with read access to the log tables can hash candidate patient/drug strings offline"," and match rows, and can correlate the same query across rows. This defeats the redaction it is"," meant to provide.","**Status (PIA-2 — enforcement landed):** production now **fails closed** when the secret is absent.","`requireQueryHashSecret()` ([src/lib/env.ts](src/lib/env.ts)) throws at server startup","([src/instrumentation.ts](src/instrumentation.ts)) when `NODE_ENV=production` and","`RAG_QUERY_HASH_SECRET` is unset, so a misconfigured clinical server refuses to boot rather than","degrade to the unsalted digest. `npm run check:production-readiness` additionally asserts the boot","guard is wired into the startup path and that the secret is present, and","[tests/instrumentation.test.ts](tests/instrumentation.test.ts) /","[tests/env-query-hash-secret.test.ts](tests/env-query-hash-secret.test.ts) cover the fail-closed","behaviour. The schema stays `z.string().min(16).optional()` so dev/CI keep the legacy digest for","stored-row joins. **Remaining operator action:** place the secret in the deploy host's secret store —","the guard and assertion enforce its presence but cannot supply it.","### 5.2 Redaction helper coverage","`redactLogValue` / `safeErrorLogDetails` ([src/lib/privacy.ts](src/lib/privacy.ts)) strip paths,","URLs, secrets (incl. `sb_secret_` / `sb_publishable_`), and emails from error details before they are","logged, and `redactCaptionIdentifiers` strips emails/MRN/NHS-style ids/phone numbers from image","captions ([privacy.ts:59-74](src/lib/privacy.ts)). These are sound as far as they go, but they are","**pattern-based** and do not attempt to redact free-text clinical narrative (names in prose, etc.) —","which is why the query-hash approach (not raw storage) is the right primary control.","## 6. Retention and purge","| Data | Retention | Mechanism | Live status |","| -------------------- | ---------------------- | ------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------- |","| `rag_queries` | 30 days | `purge_expired_rag_queries(30)`, `pg_cron` `purge-expired-rag-queries` @ 03:30 UTC | **Active** (jobid 11, verified live) |","| `rag_retrieval_logs` | 90 days | `pg_cron` `purge-rag-retrieval-logs` @ 03:00 UTC | **Active** (jobid 12, verified live) |","| `rag_query_misses` | **None** | — | **No purge job** — see PIA-4 |","| `rag_response_cache` | ~5 min TTL (soft) | `expires_at` filtered on read; overwritten per query; answer rows require `RAG_PERSIST_ANSWER_TEXT` | Rows expire logically; no hard purge cron (low volume, short TTL) |","| `audit_logs` | Indefinite (by design) | Documented in [migration 20260702120000](supabase/migrations/20260702120000_rag_retrieval_logs_retention.sql):8-12 | Intentional; \"do not add purge without compliance review\" |","**Verification (live `cron.job` query, 2026-07-06):**","jobid 11 purge-expired-rag-queries 30 3 * * * active=true select public.purge_expired_rag_queries(30);","jobid 12 purge-rag-retrieval-logs 0 3 * * * active=true delete from public.rag_retrieval_logs where created_at < now() - interval '90 days';","So the answer to \"_is anything scheduled?_\" is **yes** — the two query-log purges are live and active.","The retention story is sound **except**:","- **PIA-4:** `rag_query_misses` (which stores the same hashed-query + metadata as `rag_queries`) has"," **no** purge job — it accumulates indefinitely. It should get a matching 30–90 day cron.","- The purge functions are installed conditionally (`if to_regnamespace('cron') is null then return`,"," [migration 20260629060603](supabase/migrations/20260629060603_rag_queries_retention.sql):27-43) —"," fine on live (pg_cron present) but **preview/branch databases silently skip scheduling**. Not a"," production risk, but worth noting for any secondary environment that retains real data.","## 7. Data residency","- **Supabase project region: `ap-southeast-2` (AWS Asia Pacific, Sydney).** Confirmed via the Supabase"," management API for project `sjrfecxgysukkwxsowpy`. All Postgres data (documents, chunks, embeddings,"," logs, auth) and both storage buckets are **onshore in Australia**. This is a strong position for WA"," clinical use and directly supports APP 8 / APP 11 expectations for health information.","- **OpenAI: United States.** Query text + retrieved excerpts are disclosed to `api.openai.com` (no"," regional/EU endpoint or ZDR configured in code). This is the **only** cross-border flow, and it is"," the crux of the APP 8 assessment (PIA-1).","**Net:** data _at rest_ is Australian; data _in transit for inference_ crosses to the US. A privacy","notice must disclose the OpenAI disclosure and its purpose.","## 8. Storage-bucket access paths","- Buckets `clinical-documents` and `clinical-images` are **private**"," ([docs/multi-user-auth-setup.md](docs/multi-user-auth-setup.md) §7).","- No direct client storage access. Files are served only via **server-minted signed URLs** with a"," **10-minute TTL** (`signedUrlTtlSeconds = 60 * 10`,"," [documents/[id]/signed-url/route.ts:14](src/app/api/documents/[id]/signed-url/route.ts),"," [images/[id]/signed-url/route.ts:15](src/app/api/images/[id]/signed-url/route.ts)).","- Every signed-URL mint is **preceded by an ownership check** on the parent document row"," (`withOwnerReadScope(...)` before `createSignedUrl`,"," [documents/[id]/signed-url/route.ts:40-51](src/app/api/documents/[id]/signed-url/route.ts)) — see the"," companion tenancy review for the adversarial verification.","- Storage objects are namespaced by owner (`${uploadOwnerId}/documents/${documentId}/...`,"," [upload/route.ts:134](src/app/api/upload/route.ts)), and the DB additionally carries owner-scoped"," storage RLS policies ([schema.sql:3967-3973](supabase/schema.sql)) as a backstop for any future"," client-direct access.","Signed-URL handling is well-scoped. The residual consideration is only that a 10-minute URL, once","minted, is bearer-usable by anyone it is shared with in that window — acceptable for this use case.","## 9. Assessment against Australian Privacy Act / WA health obligations","**Framework.** Private-sector health service providers are **APP entities regardless of turnover** —","the small-business exemption does **not** apply where health services are provided and health","information is handled (_Privacy Act 1988_ (Cth), s6D(4)(b)). Health/mental-health information is","**\"sensitive information\"** attracting the highest APP protections. WA has no equivalent of Victoria's","_Health Records Act 2001_ or NSW's _HRIP Act 2002_ for the private sector; the _Privacy Act_ + APPs are","the operative framework for a WA private clinician. (The WA _Privacy and Responsible Information Sharing","Act 2024_ targets WA **public-sector** entities and may apply to public-health deployments — confirm","with counsel if this is deployed inside a WA Health service.)","| APP | Obligation | Status in this app | Gap |","| ----------------------------------------- | ---------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------- |","| **APP 1** — open & transparent management | Have a clear, up-to-date APP privacy policy | Privacy policy now ships (PR #513, [src/app/privacy/page.tsx](src/app/privacy/page.tsx)) — see PIA-1 progress note | Resolved (PIA-1) |","| **APP 3** — collection of sensitive info | Collect health info only with consent + where reasonably necessary | App does not solicit PHI; incidental via free-text. No consent gate/notice on the query box | PIA-5 |","| **APP 5** — notification of collection | Tell individuals what's collected & disclosed (incl. overseas) | Collection notice and OpenAI disclosure now surfaced (PR #513, composer notice) — see PIA-1 progress note | Resolved (PIA-1) |","| **APP 6** — use/disclosure | Use only for the primary purpose or a permitted secondary purpose | Query used for answer generation (primary). Log retention = quality/eval (secondary) — defensible but should be documented | PIA-5 |","| **APP 8** — cross-border disclosure | Discloser stays accountable for the overseas recipient unless an exception applies | Disclosure to OpenAI (US); no code-visible DPA/ZDR; accountability unclear | **PIA-1** |","| **APP 11** — security & destruction | Reasonable security; destroy/de-identify when no longer needed | Strong: Sydney residency, RLS, private storage, query hashing, 30/90-day purge, durable answer log dropped at rest by default (PIA-3 closed). Weakened by PIA-2 (conditional HMAC), PIA-4 (misses never purged), and `rag_response_cache` (read-TTL but no purge cron — see §8) | PIA-2/4 |","| **NDB scheme** (Pt IIIC) | Notify OAIC + individuals of eligible breaches of health info | No documented breach-response runbook tied to these tables | Recommend adding |","**Overall:** the _engineering_ controls for data-at-rest are strong and largely APP-11-aligned. The","material shortfall is **governance/contractual** — the APP 8 cross-border DPA/ZDR basis (the APP 1/5","collection notices are now live on `main`; see PIA-1 progress) — plus the **hardening** item still","open (conditional HMAC). Un-redacted answer retention (PIA-3) is now closed for the durable log; the","`rag_response_cache` still retains answers until a same-key overwrite (read-TTL only, no purge cron —","see §8). None of these are cross-tenant data-leak bugs — the tenancy review found **zero** confirmed","cross-tenant leaks — they are compliance-posture and PHI-minimisation gaps.","## 10. Gap register (ranked by risk)","### PIA-1 — Cross-border disclosure to OpenAI lacks visible DPA/ZDR + notice **(High)**","- **Risk:** Health/PHI in queries and excerpts is disclosed to OpenAI (US) with no code-visible"," contractual data-processing terms and no user notice → APP 8 accountability exposure and APP 5"," notification gap.","- **Evidence:** plain client to `api.openai.com` ([openai.ts:69-73](src/lib/openai.ts)); raw query +"," excerpts sent ([rag.ts:7144, 6306](src/lib/rag.ts)); no ZDR/baseURL.","- **Fix (ranked):** (1) Execute an OpenAI DPA and, ideally, obtain **ZDR** for the org; record it in"," `docs/`. (2) Add an APP-5 **collection/OpenAI-disclosure notice** at the query UI and in a privacy"," policy. (3) Consider an **on-query PHI reminder** (\"do not enter identifiable patient details\")."," (4) Optionally, a lightweight PHI-scrub / entity-strip on the outbound query as defence-in-depth.","- **Progress (2026-07-13):** fixes (2)+(3) are **live on `main`** via PR #513"," ([src/app/privacy/page.tsx](src/app/privacy/page.tsx), composer notice) — so APP 5/1 is met. Fix (1),"," the contractual basis, is captured decision-ready"," in **[docs/openai-cross-border-basis.md](docs/openai-cross-border-basis.md)**, which also records that"," the app's egress endpoints (`/v1/responses`, `/v1/embeddings`) are **ZDR-eligible** and that OpenAI now"," offers **Australia data residency** (storage) — an option that postdates this PIA. The remaining step"," (execute DPA / apply ZDR / counsel sign-off) is operator/legal, not code.","### PIA-2 — Query-hash HMAC silently downgrades without the secret **(High — enforcement landed)**","- **Risk:** If `RAG_QUERY_HASH_SECRET` is unset in prod, stored query hashes are unsalted SHA-256 →"," dictionary-reversible and cross-row correlatable, defeating the redaction (undoes M15).","- **Evidence:** [query-privacy.ts:17-23](src/lib/query-privacy.ts); the secret is"," `z.string().min(16).optional()` in [env.ts](src/lib/env.ts).","- **Fix (landed):** `requireQueryHashSecret()` now makes the secret **mandatory in production** — it"," fails closed at startup ([instrumentation.ts](src/instrumentation.ts)) when `NODE_ENV=production` and"," the secret is missing, mirroring the `requireServerEnv` pattern. `check:production-readiness` asserts"," the boot guard is wired in and the secret is present; covered by"," [instrumentation.test.ts](tests/instrumentation.test.ts) and"," [env-query-hash-secret.test.ts](tests/env-query-hash-secret.test.ts).","- **Remaining (operator):** place `RAG_QUERY_HASH_SECRET` in the deploy host's secret store on the live"," project (the code enforces its presence but cannot supply the value).","### PIA-3 — Generated answers stored un-redacted in `rag_queries` **(Resolved)**","- **Risk:** The `answer` column held the full generated text, which can restate patient specifics"," echoed from the query; the query itself is hashed but the answer was not. Owner-scoped (not"," cross-tenant) and purged at 30 days, but it was un-redacted PHI-derived content at rest.","- **Fix (shipped):** Answer-text persistence in the durable log is gated behind a dedicated"," `RAG_PERSIST_ANSWER_TEXT` flag (default **off**), applied centrally in `insertRagQuery` via"," `answerTextForStorage` ([query-privacy.ts](src/lib/query-privacy.ts), [rag.ts](src/lib/rag.ts)) so"," every `logRagQuery` caller is covered, and at the promoted-eval-case write in"," [eval-cases/route.ts](src/app/api/eval-cases/route.ts). With the flag off the column is written as"," `null` and each row records `metadata.answer_retained = false`. The offline eval/quality pipeline"," reads the in-memory answer (`logQuery: false`) and never reads this column back"," ([scripts/eval-rag.ts](scripts/eval-rag.ts), [scripts/eval-answer-quality.ts](scripts/eval-answer-quality.ts),"," [scripts/promote-query-misses.ts](scripts/promote-query-misses.ts)), so persistence-off does not"," affect eval — confirming the pipeline has no real dependency on stored answer text. The flag is"," additionally blocked in a production-like environment by `npm run check:production-readiness`.","- **Shared answer cache alignment:** The answer no longer lands in `rag_response_cache.payload`"," unless `RAG_PERSIST_ANSWER_TEXT=true` ([rag-cache.ts](src/lib/rag-cache.ts)). Its `expires_at`"," TTL (`RAG_ANSWER_CACHE_TTL_MS`, default 5 min) only gates **reads** — `sharedCacheSelector`"," filters on `expires_at`, while `replaceSharedCacheRow` deletes only the _same_ cache key before"," inserting, and there is **no hard purge cron** (see the retention table in §8). So answer-cache"," persistence must remain behind the same explicit answer-retention opt-in. Bounding opted-in shared"," answer-cache rows properly still needs a scheduled purge (a PIA-4-style follow-up). This is"," distinct from the durable `rag_queries.answer` log fix above.","### PIA-4 — `rag_query_misses` never purged **(Medium)**","- **Risk:** Hashed-query rows accumulate indefinitely; retention policy is inconsistent with"," `rag_queries`/`rag_retrieval_logs`.","- **Evidence:** live `cron.job` has no miss-table purge; only jobids 11/12 exist.","- **Fix:** Add a `pg_cron` purge for `rag_query_misses` (30–90 days) mirroring"," [migration 20260702120000](supabase/migrations/20260702120000_rag_retrieval_logs_retention.sql).","### PIA-5 — No privacy policy / collection notice / data-handling doc **(Medium)**","- **Risk:** APP 1 (policy) and APP 5 (notification) were unmet; users were not told what is collected,"," retained, or disclosed overseas.","- **Fix:** Ship a privacy policy + in-product collection notice; document retention windows and the"," OpenAI disclosure. Low engineering cost, high compliance value.","- **Progress (2026-07-13):** the privacy policy + in-product collection notice are **live on `main`**"," via PR #513 ([privacy page](src/app/privacy/page.tsx), composer notice), closing the core APP 1/APP 5"," notification gap. Residual: broader data-handling documentation (retention windows, breach-response"," runbook) and the APP 8 contractual basis (tracked under PIA-1).","### PIA-6 — OpenAI prompt-cache retention forced to 24h **(Low-Medium)**","- **Risk:** Query + retrieved excerpts persist at OpenAI for ≤24h via prompt caching even with"," `store:false`; not operator-tunable for gpt-5.5.","- **Evidence:** [openai.ts:168, 208, 221-222](src/lib/openai.ts).","- **Fix:** Resolve via **ZDR** (removes the window) as part of PIA-1; document the 24h window in the"," meantime. If a shorter window becomes configurable, expose it.","### PIA-7 — `RAG_PERSIST_RAW_QUERY_TEXT=true` stores raw PHI query text **(Low, config-gated)**","- **Risk:** Flipping the flag persists raw queries with only the 30-day purge as a safeguard.","- **Evidence:** [query-privacy.ts:33-47](src/lib/query-privacy.ts), [env.ts:96-99](src/lib/env.ts).","- **Fix:** Keep it **off** in production; if ever enabled, require a documented retention/consent basis"," and consider a shorter purge window for raw-text rows.","## 11. Recommendation","Before the app is used with real patients in a WA clinical setting, close **PIA-1** (execute the","cross-border DPA/ZDR contractual basis — the APP 5 user notice is already live) and **PIA-2** (place","the mandatory HMAC secret in the deploy host's secret store; the fail-closed boot guard is now","enforced in code) as launch-blockers. **PIA-3** is closed (the durable `rag_queries.answer` log is no","longer persisted by default; gated behind `RAG_PERSIST_ANSWER_TEXT`); **PIA-4** remains as a fast","follow-up (purge `rag_query_misses`, and add a `rag_response_cache` purge cron), and complete the","**PIA-5** residual data-handling documentation. The data-at-rest security posture (Sydney residency,","RLS, private storage, query hashing, automated purge) is already strong and should be highlighted in","the privacy policy as evidence of \"reasonable steps\" under APP 11.","See the companion **[tenancy defense-in-depth review](docs/tenancy-defense-in-depth-review.md)** for the","cross-tenant isolation analysis referenced above.","tests/rag-cache-invalidation.test.ts",[2217],{"_1869":1287,"_1870":2218,"_738":2219,"_1873":59},180,[2220,393,2221,393,2222,2223,2224,2225,393,2226,2227,393,2228,2229,2230,2024,393,2231,2232,2230,2024,393,2233,2234,2230,2024,393,2235,2236,2237,2238,2239,2024,2026,393,2240,2241,2242,2243,2244,2230,2024,393,2245,2230,2024,393,2246,2230,2024,393,2247,2248,2249,2250,2251,2252,2253,2237,2238,2254,2255,2256,2257,2024,2026,393,2258,2259,2260,2261,2262,2263,2264,2265,2266,2267,2268,2269,2270,2271,2272,2273,2274,2270,2275,2276,2277,2278,2279,2272,2273,2280,2281,2282,2265,2026,393,2283,2284,2285,2286,393,2287,2288,2289,2290,2291,2292,2293,2294,2295,2296,2281,2297,393,2298,393,2299,393,2300,393,2301,2302,2303,2304,2305,393,2306,2285,2307,2308,393,2309,393,2310,2311,2312,2313,2314,2315,2316,2317,2318,2319,393,2320,393,2321,2305,393,2322,2285,2307,2323,393,2309,393,2310,2311,2312,2324,2314,2315,2316,2317,2318,2319,393,2325,2326,2327,2328,2329,2330,2331,2318,2332,2305,2333],"import { describe, expect, it, vi } from \"vitest\";","const ownerId = \"aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa\";","type FilterCall ="," | { method: \"eq\"; column: string; value: unknown }"," | { method: \"is\"; column: string; value: unknown }"," | { method: \"in\"; column: string; value: unknown };","class DeleteQuery implements PromiseLike<{ data: null; error: null }> {"," constructor(private readonly calls: FilterCall[]) {}"," eq(column: string, value: unknown) {"," this.calls.push({ method: \"eq\", column, value });"," return this;"," is(column: string, value: unknown) {"," this.calls.push({ method: \"is\", column, value });"," in(column: string, value: unknown) {"," this.calls.push({ method: \"in\", column, value });"," then("," onfulfilled?: ((value: { data: null; error: null }) => TResult1 | PromiseLike) | null,"," onrejected?: ((reason: unknown) => TResult2 | PromiseLike) | null,"," ): PromiseLike {"," return Promise.resolve({ data: null, error: null }).then(onfulfilled, onrejected);","class SelectQuery implements PromiseLike<{"," data: Array<{ id: string; updated_at: string; metadata: null }>;"," error: null;","}> {"," eq() {"," order() {"," limit() {"," then; error: null }, TResult2 = never>("," onfulfilled?:"," | ((value: {"," data: Array<{ id: string; updated_at: string; metadata: null }>;"," error: null;"," }) => TResult1 | PromiseLike)"," | null,"," return Promise.resolve({"," data: [{ id: \"doc-1\", updated_at: \"2026-01-01T00:00:00.000Z\", metadata: null }],"," error: null,"," }).then(onfulfilled, onrejected);","function mockSharedAnswerCacheEnv(persistAnswerText: boolean, insertedPayloads: unknown[]) {"," vi.doMock(\"@/lib/env\", () => ({"," env: {"," RAG_ANSWER_CACHE_SIZE: 100,"," RAG_ANSWER_CACHE_TTL_MS: 300000,"," RAG_PERSIST_ANSWER_TEXT: persistAnswerText,"," },"," }));"," vi.doMock(\"@/lib/supabase/admin\", () => ({"," createAdminClient: () => ({"," from: vi.fn((table: string) => {"," if (table === \"documents\") {"," return {"," select: vi.fn(() => new SelectQuery()),"," };"," }"," if (table === \"rag_response_cache\") {"," delete: vi.fn(() => new DeleteQuery([])),"," insert: vi.fn((payload: unknown) => {"," insertedPayloads.push(payload);"," return Promise.resolve({ data: null, error: null });"," }),"," throw new Error(`Unexpected table ${table}`);"," }),"," }),","describe(\"RAG cache invalidation\", () => {"," it(\"clears anonymous shared cache rows with owner_id is null instead of writing the anonymous sentinel to UUID filters\", async () => {"," vi.resetModules();"," const calls: FilterCall[][] = [];"," vi.doMock(\"@/lib/supabase/admin\", () => ({"," createAdminClient: () => ({"," from: vi.fn((table: string) => ({"," delete: vi.fn(() => {"," expect(table).toBe(\"rag_response_cache\");"," const queryCalls: FilterCall[] = [];"," calls.push(queryCalls);"," return new DeleteQuery(queryCalls);"," }),"," })),"," }));"," const { invalidateRagCachesForDocumentMutation } = await import(\"../src/lib/rag\");"," invalidateRagCachesForDocumentMutation(ownerId);"," await vi.waitFor(() => expect(calls.length).toBe(2), { timeout: 10000 });"," expect(calls[0]).toContainEqual({ method: \"eq\", column: \"owner_id\", value: ownerId });"," expect(calls.flat()).not.toContainEqual({ method: \"eq\", column: \"owner_id\", value: \"anonymous\" });"," expect(calls[1]).toContainEqual({ method: \"is\", column: \"owner_id\", value: null });"," expect(calls[1]).toContainEqual({ method: \"in\", column: \"cache_kind\", value: [\"search\", \"answer\"] });"," });"," it(\"does not persist shared answer-cache payloads when answer-text retention is disabled\", async () => {"," const insertedPayloads: unknown[] = [];"," mockSharedAnswerCacheEnv(false, insertedPayloads);"," const { setCachedAnswer } = await import(\"../src/lib/rag-cache\");"," await setCachedAnswer("," { query: \"patient-specific answer\", ownerId, queryMode: \"auto\" },"," {"," answer: \"Generated answer that may echo PHI\","," grounded: true,"," confidence: \"high\","," citations: [],"," sources: [],"," },"," );"," await new Promise((resolve) => setTimeout(resolve, 0));"," expect(insertedPayloads).toHaveLength(0);"," it(\"persists shared answer-cache payloads only when answer-text retention is explicitly enabled\", async () => {"," mockSharedAnswerCacheEnv(true, insertedPayloads);"," answer: \"Generated answer retained by explicit opt-in\","," await vi.waitFor(() => expect(insertedPayloads).toHaveLength(1), { timeout: 10000 });"," expect(insertedPayloads[0]).toMatchObject({"," cache_kind: \"answer\","," payload: {"," answer: {"," answer: \"Generated answer retained by explicit opt-in\","," },"," });","});","src/lib/rag-cache.ts",[2336],{"_1869":1287,"_1870":2337,"_738":2338,"_1873":59},710,[2339,2340,2341,2342,2343,2344,2345,2346,2347,2348,2349,2350,2351,2352,393,2353,2354,2355,2356,2357,2358,2359,2360,2361,2362,393,2363,2364,2365,2366,2367,2368,2369,2026,393,2370,2371,2026,393,2372,2373,2026,393,2374,2375,2026,393,2376,2377,2378,2379,2380,2381,2382,2383,2384,2385,2026,393,2386,2387,2026,393,2388,2389,2390,2391,2392,2393,393,2394,2395,2396,2397,2398,2399,2024,2400,2401,2398,2399,2024,393,2402,2403,2404,2405,2406,2407,2408,2026,393,2409,2389,2410,2411,2412,2413,2414,393,2415,2416,2417,2024,393,2400,2394,2418,2419,2420,2421,2305,393,2422,2423,2424,2425,2024,2426,2026,393,2427,2428,2026,393,2429,2430,2431,2432,2433,2434,2435,2436,2437,2438,2439,2440,2441,2442,2443,2378,2444,2445,2446,2447,2448,2449,2450,2451,2452,2453,2454,2455,2456,2457,2385,2458,2026,393,2459,2379,2380,2381,2382,2460,2385,2026,393,2461,2462,2026,393,2463,2464,2465,2466,2467,2468,2407,2026,393,2469,2470,2442,2443,2471,2472,393,2473,2474,2396,2397,2475,2399,2024,2400,2401,2475,2399,2024,393,2464,2476,2477,2478,2479,2480,2481,2482,2483,2484,2485,2486,2487,2264,2407,2026,393,2488,2470,2489,2490,2443,2412,2491,2492,393,2400,2493,2494,2495,2496,2497,2421,2305,393,2498,2499,2424,2500,2024,2501,2026,393,2502,2503,2504,2505,2506,2507,2508,2509,2510,2511,393,2512,2513,2514,2515,2516,2517,2378,2518,2519,2520,2521,2522,2523,2524,2525,2526,2527,393,2528,2529,2026,393,2530,2531,2532,2533,393,2534,2535,2536,2537,2538,2539,2540,2541,2542,2543,2544,2545,2546,2547,2548,2549,2550,2551,2552,2553,2554,2555,2556,2557,2558,2559,2560,2024,2561,2562,2563,2564,2565,2566,2567,2026,393,2568,2470,2442,2443,2569,2570,2571,2572,2573,2574,2575,2400,2576,2577,2578,2579,2580,2581,2582,2583,2584,2585,2586,2587,2588,2589,2590,2591,2592,2593,2594,2595,2596,2597,2598,2599,2600,2601,2602,2603,2604,2558,2024,2535,2605,2606,2607,2608,2609,2610,2611,2612,2613,2614,2615,2616,2558,2617,2618,2619,2620,2621,2622,2623,2624,2625,2626,2627,2628,2629,2630,2631,2632,2633,2634,2635,2636,2637,2638,2639,2640,2641,2642,2643,2644,2645,2646,2647,2648,2649,2650,2651,2652,2653,2654,2655,2656,2657,2658,2659,2660,2318,2661,2559,2662,2024,2026,393,2663,2430,2431,2664,2441,2390,2378,2665,2535,2666,2605,2606,2667,2608,2609,2611,2668,2669,2670,2671,2672,2673,2674,2479,2675,2676,2487,2677,2661,2678,2559,2399,2024,2026,393,2679,2514,2515,2680,2681,2517,2378,2682,2535,2536,2666,2683,2684,2685,2686,2687,2688,2689,2690,2691,2692,2693,2694,2695,2696,2697,2698,2699,2700,2701,2702,2332,2559,2703,2024,2026,393,2704,2470,2489,2490,2443,2378,2705,2706,2707,2708,2709,2710,2711,2566,2026,393,2712,2430,2431,2664,2441,2410,2378,2713,2714,2026,393,2715,2716,2717,2718,2719,2720,2721,2722,2723,2724,2725,2726,2601,2727,2728,2024,393,2729,2730,2731,2024,2732,2733,2024,2734,2735,2024,2736,2737,2024,2738,2578,2739,2740,2741,2742,2743,2744,2745,2746,2558,2747,2026,393,2748,2738,2578,2749,2581,2750,2751,2752,2744,2745,2753,2558,2747,2026,393,2754,2755,2756,2026,393,2757,2758,2026,393,2759,2489,2760,2761,2378,2762,2763,2764,2765,2379,2766,2767,2768,2769,2770,2771,2772,2385,2026,393,2773,2513,2489,2760,2774,2378,2762,2775,2776,2777,2778,2779,2780,2566,2781,393,2535,2782,2783,2784,2785,2786,2787,2788,393,2789,393,2790,2791,2792,2793,2794,2795,2319,2796,2797,2798,2799,2800,2801,2802,2803,2596,2558,393,2804,2805,2806,2807,2808,2809,2810,2811,2812,2813,2814,2815,2816,2817,2818,2819,2820,2821,2822,393,2823,2824,2825,2826,2827,2332,2559,2828,2024,2026,393,2829,2830,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,2024,2842,2843,2844,2845,2305,2026],"import { createHash } from \"node:crypto\";","import { createAdminClient } from \"@/lib/supabase/admin\";","import { buildClinicalTextSearchQuery } from \"@/lib/clinical-search\";","import { readExpiringCacheEntry, writeBoundedExpiringCacheEntry } from \"@/lib/bounded-ttl-cache\";","import { ragDeepMemoryVersion } from \"@/lib/deep-memory\";","import { env } from \"@/lib/env\";","import { queryCacheKeyForStorage } from \"@/lib/query-privacy\";","import { ragCacheKeyMatchesOwner } from \"@/lib/rag-cache-utils\";","import { compactContextText } from \"@/lib/rag-source-block\";","import { committedIndexGeneration } from \"@/lib/reindex-pipeline\";","import { normalizeSourceMetadata } from \"@/lib/source-metadata\";","import { retrievalPlanForQueryClass, type SearchChunksArgs, type SearchTelemetry } from \"@/lib/rag-contracts\";","import type { Json } from \"@/lib/supabase/database.types\";","import type { RagAnswer, RagQueryClass, SearchResult } from \"@/lib/types\";","const answerCache = new Map();","export const answerInflight = new Map>();","const searchCache = new Map<"," string,"," { expiresAt: number; results: SearchResult[]; telemetry: SearchTelemetry; indexingVersion: string }",">();","const ragCacheDependencyVersion = \"rag-cache-v12\";","const cacheIndexingVersionTtlMs = 5000;","const cacheIndexingVersionMaxEntries = 512;","const cacheIndexingVersionCache = new Map();","function scopeKey(args: Pick) {"," const scope = args.documentIds?.length"," ? [...args.documentIds].sort().join(\",\")"," : args.documentId"," ? args.documentId"," : \"all-documents\";"," return scope;","function normalizedCacheQuery(query: string) {"," return buildClinicalTextSearchQuery(query).toLowerCase().replace(/\\s+/g, \" \").trim();","function cacheIndexingVersionCacheKey(args: Pick) {"," return [args.ownerId ?? \"anonymous\", scopeKey(args)].join(\"|\");","function modeKey(args: Pick) {"," return args.queryMode ?? \"auto\";","export function scopedAnswerCacheKey("," args: Pick,",") {"," return ["," ragCacheDependencyVersion,"," args.ownerId ?? \"anonymous\","," scopeKey(args),"," modeKey(args),"," args.query.trim().toLowerCase().replace(/\\s+/g, \" \"),"," ].join(\"|\");","export function cloneAnswer(answer: RagAnswer) {"," return structuredClone(answer);","export async function getCachedAnswer("," args: Pick,"," startedAt: number,","): Promise {"," if (args.skipCache) return null;"," if (env.RAG_ANSWER_CACHE_TTL_MS <= 0 || env.RAG_ANSWER_CACHE_SIZE <= 0) return null;"," const key = scopedAnswerCacheKey(args);"," const cached = answerCache.get(key);"," if (!cached) return null;"," if (cached.expiresAt <= Date.now()) {"," answerCache.delete(key);"," return null;"," const indexingVersion = await cacheIndexingVersion(args);"," if (cached.indexingVersion !== indexingVersion) {"," const answer = cloneAnswer(cached.answer);"," answer.routingReason = answer.routingReason ? `${answer.routingReason}; answer_cache_hit` : \"answer_cache_hit\";"," answer.latencyTimings = {"," ...answer.latencyTimings,"," total_latency_ms: Date.now() - startedAt,"," };"," return answer;","export async function setCachedAnswer("," answer: RagAnswer,"," options?: { indexingVersionAtRetrievalStart?: string | null },","): Promise {"," if (args.skipCache) return;"," if (env.RAG_ANSWER_CACHE_TTL_MS <= 0 || env.RAG_ANSWER_CACHE_SIZE <= 0) return;"," if (options?.indexingVersionAtRetrievalStart) {"," const currentIndexingVersion = await cacheIndexingVersion(args);"," if (currentIndexingVersion !== options.indexingVersionAtRetrievalStart) return;"," answerCache.set(key, {"," expiresAt: Date.now() + env.RAG_ANSWER_CACHE_TTL_MS,"," answer: cloneAnswer(answer),"," indexingVersion,"," while (answerCache.size > env.RAG_ANSWER_CACHE_SIZE) {"," const oldestKey = answerCache.keys().next().value;"," if (!oldestKey) break;"," answerCache.delete(oldestKey);"," setSharedCachedAnswer(args, answer);","function stableHash(value: string) {"," return createHash(\"sha256\").update(value).digest(\"hex\").slice(0, 16);","export function retrievalPlanCacheQuery("," args: Pick<"," SearchChunksArgs,"," | \"query\""," | \"documentId\""," | \"documentIds\""," | \"ownerId\""," | \"queryMode\""," | \"topK\""," | \"minSimilarity\""," | \"forceEmbedding\""," | \"lexicalOnly\""," >,"," queryClass?: RagQueryClass,"," queryVariants: string[] = [],"," const normalizedQuery = normalizedCacheQuery(args.query);"," const variantHash = stableHash(queryVariants.join(\"\\n\"));"," const cacheKey = ["," `plan:${retrievalPlanForQueryClass(queryClass)}`,"," `class:${queryClass ?? \"unknown\"}`,"," `query:${normalizedQuery}`,"," `variants:${variantHash}`,"," `mode:${modeKey(args)}`,"," `topK:${args.topK ?? 8}`,"," `min:${args.minSimilarity ?? 0.15}`,"," `forceEmbedding:${args.forceEmbedding ? \"1\" : \"0\"}`,"," `lexicalOnly:${args.lexicalOnly ? \"1\" : \"0\"}`,"," `rag:${ragDeepMemoryVersion}`,"," `force:${args.forceEmbedding ? 1 : 0}`,"," return queryCacheKeyForStorage(cacheKey);","function scopedSearchCacheKey(args: SearchChunksArgs, queryClass?: RagQueryClass, queryVariants: string[] = []) {"," retrievalPlanCacheQuery(args, queryClass, queryVariants),","function cloneSearchResults(results: SearchResult[]) {"," return structuredClone(results);","function normalizeCacheStorageTelemetry(telemetry: SearchTelemetry): SearchTelemetry {"," return {"," ...telemetry,"," shared_cache_hit: false,"," shared_cache_status: undefined,"," shared_cache_miss_reason: null,","export async function getCachedSearch("," args: SearchChunksArgs,","): Promise<{ results: SearchResult[]; telemetry: SearchTelemetry } | null> {"," if (args.skipCache || env.RAG_SEARCH_CACHE_TTL_MS <= 0 || env.RAG_SEARCH_CACHE_SIZE <= 0) return null;"," const key = scopedSearchCacheKey(args, queryClass, queryVariants);"," const cached = searchCache.get(key);"," searchCache.delete(key);"," results: cloneSearchResults(cached.results),"," telemetry: {"," ...cached.telemetry,"," search_cache_hit: true,"," retrieval_strategy: \"search_cache\" as const,"," text_fast_path_latency_ms: 0,"," embedding_latency_ms: 0,"," supabase_rpc_latency_ms: 0,"," rerank_latency_ms: 0,"," shared_cache_hit: false,"," shared_cache_status: undefined,"," shared_cache_miss_reason: null,","export async function setCachedSearch("," results: SearchResult[],"," telemetry: SearchTelemetry,"," if (args.skipCache || env.RAG_SEARCH_CACHE_TTL_MS <= 0 || env.RAG_SEARCH_CACHE_SIZE <= 0) return;"," const cacheTelemetry = normalizeCacheStorageTelemetry(telemetry);"," const key = scopedSearchCacheKey(args, telemetry.query_class, queryVariants);"," searchCache.set(key, {"," expiresAt: Date.now() + env.RAG_SEARCH_CACHE_TTL_MS,"," results: cloneSearchResults(results),"," telemetry: { ...cacheTelemetry },"," while (searchCache.size > env.RAG_SEARCH_CACHE_SIZE) {"," const oldestKey = searchCache.keys().next().value;"," searchCache.delete(oldestKey);"," setSharedCachedSearch(args, results, cacheTelemetry, queryVariants);","type SharedCacheKind = \"search\" | \"answer\";","type SharedCacheMissReason ="," | \"cache_lookup_error\""," | \"cache_lookup_exception\""," | \"cache_payload_invalid\""," | \"no_entry\""," | \"expired\""," | \"indexing_version_mismatch\""," | \"dependency_version_mismatch\""," | \"unknown_filter_miss\";","function sharedCacheSelector("," supabase: ReturnType,"," kind: SharedCacheKind,"," args: Pick,"," indexingVersion: string,"," normalizedQuery: string = queryCacheKeyForStorage(normalizedCacheQuery(`${modeKey(args)} ${args.query}`)),"," let query = supabase"," .from(\"rag_response_cache\")"," .select(\"payload\")"," .eq(\"cache_kind\", kind)"," .eq(\"scope_key\", scopeKey(args))"," .eq(\"normalized_query\", normalizedQuery)"," .eq(\"indexing_version\", indexingVersion)"," .eq(\"dependency_version\", ragCacheDependencyVersion)"," .gt(\"expires_at\", new Date().toISOString())"," .limit(1);"," query = args.ownerId ? query.eq(\"owner_id\", args.ownerId) : query.is(\"owner_id\", null);"," return query;","export async function cacheIndexingVersion(args: Pick) {"," const cacheKey = cacheIndexingVersionCacheKey(args);"," const cached = readExpiringCacheEntry(cacheIndexingVersionCache, cacheKey);"," if (cached) return cached.value;"," let value = `${ragDeepMemoryVersion}:index-stamp-unavailable`;"," try {"," const supabase = createAdminClient();"," const documentFilters = args.documentIds?.length ? args.documentIds : args.documentId ? [args.documentId] : null;"," let query = supabase"," .from(\"documents\")"," .select(\"id,updated_at,metadata\")"," .eq(\"status\", \"indexed\")"," .order(\"updated_at\", { ascending: false })"," .limit(1);"," if (args.ownerId) query = query.eq(\"owner_id\", args.ownerId);"," if (documentFilters?.length) query = query.in(\"id\", documentFilters);"," const { data, error } = await query;"," if (error || !data?.length) {"," value = `${ragDeepMemoryVersion}:no-indexed-documents`;"," } else {"," const latest = data[0] as { id?: string; updated_at?: string | null; metadata?: unknown };"," const metadata = normalizeSourceMetadata(latest.metadata);"," const indexedAt = metadata.indexed_at ?? latest.updated_at ?? \"unknown\";"," const generationId ="," latest.metadata && typeof latest.metadata === \"object\" && \"index_generation_id\" in latest.metadata"," ? String((latest.metadata as { index_generation_id?: unknown }).index_generation_id ?? \"\")"," : \"\";"," value = `${ragDeepMemoryVersion}:${latest.id ?? \"all\"}:${indexedAt}:${generationId}`;"," }"," } catch {"," value = `${ragDeepMemoryVersion}:index-stamp-unavailable`;"," writeBoundedExpiringCacheEntry("," cacheIndexingVersionCache,"," cacheKey,"," { value, expiresAt: Date.now() + cacheIndexingVersionTtlMs },"," cacheIndexingVersionMaxEntries,"," );"," return value;","export async function getSharedCachedSearch(","): Promise<"," | { kind: \"hit\"; results: SearchResult[]; telemetry: SearchTelemetry }"," | { kind: \"miss\"; reason: SharedCacheMissReason }"," | null","> {"," if (args.skipCache || env.RAG_SEARCH_CACHE_TTL_MS <= 0) return null;"," const normalizedQuery = retrievalPlanCacheQuery(args, queryClass, queryVariants);"," async function probeSharedCacheMissReason(reasonFromLookup?: SharedCacheMissReason): Promise {"," if (reasonFromLookup) return reasonFromLookup;"," try {"," const supabase = createAdminClient();"," let probeQuery = supabase"," .from(\"rag_response_cache\")"," .select(\"indexing_version,dependency_version,expires_at\")"," .eq(\"cache_kind\", \"search\")"," .eq(\"scope_key\", scopeKey(args))"," .eq(\"normalized_query\", normalizedQuery)"," .order(\"expires_at\", { ascending: false })"," .limit(5);"," probeQuery = args.ownerId ? probeQuery.eq(\"owner_id\", args.ownerId) : probeQuery.is(\"owner_id\", null);"," const { data, error } = await probeQuery;"," if (error) return \"cache_lookup_error\";"," if (!data?.length) return \"no_entry\";"," const now = Date.now();"," const nonExpired = data.find((entry) => {"," const expiresAt = Date.parse(String(entry.expires_at ?? \"\"));"," return Number.isFinite(expiresAt) && expiresAt > now;"," });"," if (!nonExpired) return \"expired\";"," if (String(nonExpired.indexing_version ?? \"\") !== indexingVersion) return \"indexing_version_mismatch\";"," if (String(nonExpired.dependency_version ?? \"\") !== ragCacheDependencyVersion) {"," return \"dependency_version_mismatch\";"," }"," return \"unknown_filter_miss\";"," } catch {"," return \"cache_lookup_exception\";"," const { data, error } = await sharedCacheSelector("," createAdminClient(),"," \"search\","," args,"," indexingVersion,"," normalizedQuery,"," ).maybeSingle();"," if (error) return { kind: \"miss\", reason: await probeSharedCacheMissReason(\"cache_lookup_error\") };"," if (!data?.payload) return { kind: \"miss\", reason: await probeSharedCacheMissReason() };"," const payload = data.payload as { results?: SearchResult[]; telemetry?: Partial };"," if (!Array.isArray(payload.results)) {"," return { kind: \"miss\", reason: await probeSharedCacheMissReason(\"cache_payload_invalid\") };"," return {"," kind: \"hit\","," results: cloneSearchResults(payload.results),"," telemetry: {"," search_cache_hit: true,"," shared_cache_hit: true,"," shared_cache_status: \"hit\","," shared_cache_miss_reason: null,"," query_class: payload.telemetry?.query_class,"," vector_candidate_count: payload.telemetry?.vector_candidate_count,"," text_candidate_count: payload.telemetry?.text_candidate_count,"," embedding_field_count: payload.telemetry?.embedding_field_count,"," retrieval_query_variant_count: payload.telemetry?.retrieval_query_variant_count ?? 0,"," text_fast_path_latency_ms: 0,"," text_candidate_budget: payload.telemetry?.text_candidate_budget,"," text_fast_path_reason: payload.telemetry?.text_fast_path_reason ?? null,"," embedding_skipped: true,"," embedding_skip_reason: payload.telemetry?.embedding_skip_reason ?? \"search_cache\","," embedding_latency_ms: 0,"," embedding_cache_hit: false,"," supabase_rpc_latency_ms: 0,"," rerank_latency_ms: 0,"," memory_card_count: payload.telemetry?.memory_card_count ?? 0,"," memory_top_score: payload.telemetry?.memory_top_score ?? 0,"," index_unit_count: payload.telemetry?.index_unit_count ?? 0,"," index_unit_top_score: payload.telemetry?.index_unit_top_score ?? 0,"," retrieval_plan: payload.telemetry?.retrieval_plan ?? retrievalPlanForQueryClass(payload.telemetry?.query_class),"," retrieval_intent: payload.telemetry?.retrieval_intent,"," retrieval_selection: payload.telemetry?.retrieval_selection,"," retrieval_layer_counts: payload.telemetry?.retrieval_layer_counts ?? {},"," retrieval_layer_top_scores: payload.telemetry?.retrieval_layer_top_scores ?? {},"," retrieval_layer_latencies_ms: payload.telemetry?.retrieval_layer_latencies_ms ?? {},"," retrieval_provenance_counts: payload.telemetry?.retrieval_provenance_counts ?? {},"," coverage_gate_decision: payload.telemetry?.coverage_gate_decision,"," coverage_gate_reason: payload.telemetry?.coverage_gate_reason ?? null,"," vector_skipped_reason: payload.telemetry?.vector_skipped_reason ?? null,"," source_image_required: payload.telemetry?.source_image_required ?? false,"," source_image_satisfied: payload.telemetry?.source_image_satisfied ?? false,"," second_stage_rerank_used: payload.telemetry?.second_stage_rerank_used ?? false,"," second_stage_rerank_latency_ms: 0,"," visual_direct_image_count: payload.telemetry?.visual_direct_image_count ?? 0,"," weighted_top_score: payload.telemetry?.weighted_top_score ?? 0,"," rrf_top_score: payload.telemetry?.rrf_top_score ?? 0,"," retrieval_strategy: \"search_cache\" as const,"," };"," return { kind: \"miss\", reason: \"cache_lookup_exception\" };","export async function getSharedCachedAnswer("," \"query\" | \"documentId\" | \"documentIds\" | \"ownerId\" | \"skipCache\" | \"queryMode\" | \"forceEmbedding\""," if (args.skipCache || env.RAG_ANSWER_CACHE_TTL_MS <= 0 || !env.RAG_PERSIST_ANSWER_TEXT) return null;"," const indexingVersion = await cacheIndexingVersion(args);"," \"answer\","," if (error || !data?.payload) return null;"," const answer = cloneAnswer((data.payload as { answer: RagAnswer }).answer);"," answer.routingReason = answer.routingReason"," ? `${answer.routingReason}; shared_answer_cache_hit`"," : \"shared_answer_cache_hit\";"," answer.latencyTimings = {"," ...answer.latencyTimings,"," shared_cache_hit: true,"," shared_cache_status: \"hit\","," total_latency_ms: Date.now() - startedAt,"," return answer;","async function replaceSharedCacheRow("," payload: unknown,"," ttlMs: number,"," if (ttlMs <= 0) return;"," let deleteQuery = supabase"," .from(\"rag_response_cache\")"," .delete()"," .eq(\"cache_kind\", kind)"," .eq(\"scope_key\", scopeKey(args))"," .eq(\"normalized_query\", normalizedQuery)"," .eq(\"indexing_version\", indexingVersion)"," .eq(\"dependency_version\", ragCacheDependencyVersion);"," deleteQuery = args.ownerId ? deleteQuery.eq(\"owner_id\", args.ownerId) : deleteQuery.is(\"owner_id\", null);"," await deleteQuery;"," await supabase.from(\"rag_response_cache\").insert({"," owner_id: args.ownerId ?? null,"," cache_kind: kind,"," scope_key: scopeKey(args),"," normalized_query: normalizedQuery,"," indexing_version: indexingVersion,"," dependency_version: ragCacheDependencyVersion,"," // JSON-serializable by contract of the response cache."," payload: payload as Json,"," expires_at: new Date(Date.now() + ttlMs).toISOString(),"," // Shared cache must never be part of the correctness path.","function setSharedCachedSearch("," if (args.skipCache || env.RAG_SEARCH_CACHE_TTL_MS <= 0) return;"," void replaceSharedCacheRow("," \"search\","," args,"," { results: cloneSearchResults(results), telemetry },"," env.RAG_SEARCH_CACHE_TTL_MS,"," retrievalPlanCacheQuery(args, telemetry.query_class, queryVariants),","function setSharedCachedAnswer("," if (args.skipCache || env.RAG_ANSWER_CACHE_TTL_MS <= 0 || !env.RAG_PERSIST_ANSWER_TEXT) return;"," void replaceSharedCacheRow(\"answer\", args, { answer: cloneAnswer(answer) }, env.RAG_ANSWER_CACHE_TTL_MS);","export function invalidateRagCachesForOwner(ownerId?: string | null) {"," if (!ownerId) {"," answerCache.clear();"," answerInflight.clear();"," searchCache.clear();"," cacheIndexingVersionCache.clear();"," void (async () => {"," try {"," await createAdminClient().from(\"rag_response_cache\").delete().in(\"cache_kind\", [\"search\", \"answer\"]);"," } catch (error) {"," // Shared cache invalidation is best effort."," console.warn(\"Shared cache invalidation failed (all kinds):\", error);"," })();"," return;"," const sharedCacheOwnerId = ownerId === \"anonymous\" ? null : ownerId;"," for (const key of answerCache.keys()) {"," if (ragCacheKeyMatchesOwner(key, ownerId)) answerCache.delete(key);"," for (const key of answerInflight.keys()) {"," if (ragCacheKeyMatchesOwner(key, ownerId)) answerInflight.delete(key);"," for (const key of searchCache.keys()) {"," if (ragCacheKeyMatchesOwner(key, ownerId)) searchCache.delete(key);"," for (const key of cacheIndexingVersionCache.keys()) {"," if (ragCacheKeyMatchesOwner(key, ownerId)) cacheIndexingVersionCache.delete(key);"," void (async () => {"," const deleteQuery = createAdminClient().from(\"rag_response_cache\").delete();"," const scopedQuery = sharedCacheOwnerId"," ? deleteQuery.eq(\"owner_id\", sharedCacheOwnerId)"," : deleteQuery.is(\"owner_id\", null);"," await scopedQuery.in(\"cache_kind\", [\"search\", \"answer\"]);"," } catch (error) {"," // Shared cache invalidation is best effort."," console.warn(\"Shared cache invalidation failed for owner:\", error);"," })();","function invalidateAnonymousSharedRagCaches() {"," await createAdminClient()"," .delete()"," .is(\"owner_id\", null)"," .in(\"cache_kind\", [\"search\", \"answer\"]);"," console.warn(\"Shared cache invalidation failed for anonymous:\", error);","export function invalidateRagCachesForDocumentMutation(ownerId: string) {"," invalidateRagCachesForOwner(ownerId);"," invalidateAnonymousSharedRagCaches();","function sourceContextPackLimit(queryClass: RagQueryClass, options: { crossDocument?: boolean } = {}) {"," return options.crossDocument || queryClass === \"comparison\" || queryClass === \"broad_summary\" ? 8 : 5;","export function packedContextCacheKey("," queryClass: RagQueryClass,"," options: { crossDocument?: boolean; documentIds?: string[] } = {},"," const contextLimit = sourceContextPackLimit(queryClass, options);"," const scopeKey = options.documentIds?.length"," ? stableHash([...new Set(options.documentIds)].sort().join(\"|\"))"," : \"all-documents\";"," queryClass,"," options.crossDocument ? \"cross-document\" : \"single-document\","," `scope:${scopeKey}`,"," contextLimit,"," ...results"," .slice(0, contextLimit)"," .map((result) => `${result.id}:${result.document_id}:${result.chunk_index}:${result.page_number ?? \"na\"}`),","export async function packAdjacentSourceContext("," options: { crossDocument?: boolean } = {},"," const targetResults = results.slice(0, contextLimit);"," const documentIds = Array.from(new Set(targetResults.map((result) => result.document_id)));"," const chunkIndexes = Array.from("," new Set("," targetResults.flatMap((result) => [result.chunk_index - 1, result.chunk_index + 1]).filter((index) => index >= 0),"," ),"," if (documentIds.length === 0 || chunkIndexes.length === 0) return results;"," const { data, error } = await supabase"," .from(\"document_chunks\")"," .select(\"id,document_id,page_number,chunk_index,section_heading,content,retrieval_synopsis,index_generation_id\")"," .in(\"document_id\", documentIds)"," .in(\"chunk_index\", chunkIndexes)"," .order(\"chunk_index\", { ascending: true })"," .limit(80);"," if (error || !data?.length) return results;"," const chunksByDocumentAndIndex = new Map<"," string,"," { id: string; section_heading: string | null; content: string; retrieval_synopsis?: string | null }"," >();"," const committedGenerationByDocument = new Map("," targetResults.map((result) => [result.document_id, committedIndexGeneration(result.source_metadata)] as const),"," for (const chunk of data) {"," const committedGeneration = committedGenerationByDocument.get(chunk.document_id);"," if (chunk.index_generation_id && chunk.index_generation_id !== committedGeneration) continue;"," chunksByDocumentAndIndex.set(`${chunk.document_id}:${chunk.chunk_index}`, {"," id: chunk.id,"," section_heading: chunk.section_heading,"," content: chunk.content,"," retrieval_synopsis: chunk.retrieval_synopsis ?? null,"," const targetIds = new Set(targetResults.map((result) => result.id));"," return results.map((result) => {"," if (!targetIds.has(result.id)) return result;"," const adjacent = [result.chunk_index - 1, result.chunk_index + 1]"," .map((index) => chunksByDocumentAndIndex.get(`${result.document_id}:${index}`))"," .filter("," ("," chunk,"," ): chunk is {"," id: string;"," section_heading: string | null;"," content: string;"," retrieval_synopsis?: string | null;"," } => Boolean(chunk && chunk.id !== result.id && chunk.content.trim()),"," )"," .map((chunk) => {"," const heading = chunk.section_heading ? `${chunk.section_heading}: ` : \"\";"," return compactContextText(`${heading}${chunk.retrieval_synopsis || chunk.content}`, 520);"," });"," if (adjacent.length === 0) return result;"," return {"," ...result,"," adjacent_context: adjacent.join(\" \"),"," };"," return results;","// The numeric-faithfulness gate must verify answer figures against the SAME text","// the model was shown. Generation runs on the packed context (packAdjacentSourceContext","// merges neighbour-chunk text into adjacent_context), but answer.sources is the","// unpacked answer-input set — so a dose/threshold the model faithfully copied from a","// neighbour chunk would be absent from the finalize-time verification corpus and wrongly","// flagged unverified, blanking a correct answer. Overlay the packed adjacent_context onto","// the answer-input results (by chunk id) to rebuild the exact verification corpus, WITHOUT","// mutating answer.sources itself (the route-boundary client trim and eval byte-identity","// both depend on answer.sources staying unpacked — see answer-client-payload.ts).","export function attachAdjacentContext(results: SearchResult[], packed: SearchResult[]): SearchResult[] {"," const adjacentById = new Map();"," for (const source of packed) {"," if (source.adjacent_context) adjacentById.set(source.id, source.adjacent_context);"," if (adjacentById.size === 0) return results;"," return results.map((result) => {"," const adjacent = adjacentById.get(result.id);"," return adjacent && adjacent !== result.adjacent_context ? { ...result, adjacent_context: adjacent } : result;",[2847,2848,2849,2850,2851,2852,2853,2854,2855,2856,2857],{"_1818":46,"_46":2876},{"_1818":2859,"_256":2334,"_1869":2874,"_1870":2875},{"_1818":2859,"_256":2334,"_1869":2872,"_1870":2873},{"_1818":46,"_46":2871},{"_1818":2859,"_256":2215,"_1869":2869,"_1870":2870},{"_1818":2859,"_256":2215,"_1869":2867,"_1870":2868},{"_1818":46,"_46":2866},{"_1818":2859,"_256":1863,"_1869":2864,"_1870":2865},{"_1818":2859,"_256":1863,"_1869":2862,"_1870":2863},{"_1818":2859,"_256":1863,"_1869":2860,"_1870":2861},{"_1818":46,"_46":2858},"\n* Committed the changes on the current branch with commit `60d4708 fix(rag): gate shared answer cache persistence`.\n* Created the follow-up PR via `make_pr` with title: **Fix shared answer cache retention gate**.\n\n**Testing**\n* ⚠️ `npm test -- --run tests/rag-cache-invalidation.test.ts` initially could not run because `node_modules` was missing and the shell resolved Node 20 before setup.\n* ✅ `npm ci`\n* ✅ `npm test -- --run tests/rag-cache-invalidation.test.ts`\n* ✅ `npm run typecheck`\n* ⚠️ `npm run check:production-readiness` not run because repo instructions mark this provider/live-environment-adjacent check as confirmation-required.","repo_file_citation",383,390,236,241,60,63,"\n* Updated the privacy impact assessment so generated-answer storage and `rag_response_cache` retention documentation now match the new shared-cache retention gate. ",129,179,68,97,"\n* Added focused Vitest coverage proving shared answer-cache payloads are not inserted when answer-text retention is disabled, and are inserted only after explicit opt-in. ",516,524,428,435,"### Summary\n* Gated shared persisted answer-cache reads and writes behind `RAG_PERSIST_ANSWER_TEXT`, preventing default TTL-enabled answer caching from writing generated answer text into `rag_response_cache.payload` at rest when retention is disabled. ",{"_93":509,"_42":85,"_97":509,"_2879":2880,"_2881":2882,"_2883":2884,"_133":-5,"_120":2885},[84],"input_items",[2903,2904,2905,2906,2907,2908,2909],"external_post_config",{"_2886":2887,"_446":379,"_2888":489,"_457":-5,"_1839":440,"_2889":-5,"_2890":-5,"_2891":2892,"_2893":2894,"_2895":-5,"_2896":-5,"_2897":2898,"_2899":15,"_2900":59,"_2901":54,"_2902":15},"user_model_slug","slug",1783883896.628194,"installation_id",131602480,"pr_number","gitlab_service_account_project_id","review_trigger","comment_id",4952433758,"comment_type","issue","pr_write_guard_token","pending_pr_reaction_id","pending_comment_reaction_id",381617977,"comment_if_no_findings","comment_on_error","share_url","is_parallel_review",{"_93":744,"_97":509,"_738":2921},{"_496":497,"_498":499,"_2918":503,"_2919":130,"_505":-5,"_93":2920},{"_93":2910,"_498":2917,"_256":-5,"_2912":-5,"_2913":-5},{"_93":2910,"_498":2916,"_256":-5,"_2912":-5,"_2913":-5},{"_93":2910,"_498":2915,"_256":-5,"_2912":-5,"_2913":-5},{"_93":2910,"_498":2914,"_256":-5,"_2912":-5,"_2913":-5},{"_93":2910,"_498":2911,"_256":-5,"_2912":-5,"_2913":-5},"pull_request_comment","\n### 💡 Codex Review\n\nhttps://github.com/BigSimmo/Database/blob/c26e54f9d4f8e3ee212864cb076fba0dc7074dd7/src/lib/env.ts#L116-L120\n**_{_{![P1 Badge](https://img.shields.io/badge/P1-orange?style=flat)}} Gate cached answers behind the retention flag**\n\nWhen `RAG_PERSIST_ANSWER_TEXT` is left at its default `false` but `RAG_ANSWER_CACHE_TTL_MS` is enabled (default 300000), answered requests still call `setSharedCachedAnswer` and insert `{ answer: cloneAnswer(answer) }` into `rag_response_cache.payload` (`src/lib/rag-cache.ts:523-524`). I only found lookup-time `expires_at` filtering/invalidation, not a purge that removes expired cache rows, so generated PHI-derived answer text can still remain at rest while this new flag and production-readiness check report answer persistence as off. A focused proof is to run any non-skipped answer request with the default cache TTL and inspect the inserted `rag_response_cache` payload.\n \n\n

ℹ️ About Codex in GitHub

","side","line","\n> @copilot resolve the merge conflicts in this pull request\n\nDone — resolved all merge conflicts in `docs/privacy-impact-assessment.md` (47206d8). The 5 conflict regions all arose from `origin/main` adding PIA-1/PIA-5 progress notes (PR #513), an updated `rag_response_cache` retention description, and a revised §11 recommendation; I took the `origin/main` side for each, which is the most current state.","\n\n\n[![Review Change Stack](https://storage.googleapis.com/coderabbit_public_assets/review-stack-in-coderabbit-ui.svg)](https://app.coderabbit.ai/change-stack/BigSimmo/Database/pull/537?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n\n\n\n> [!CAUTION]\n> ## Review failed\n> \n> The head commit changed during the review from a3f498e800c7ce4952d3405c597701b34a327fa2 to 47206d8c2ab04f8a32fd64de8ba2f141999eb3e0.\n\n\n\n\n\n

✨ Finishing Touches

\n\n

🧪 Generate unit tests (beta)

\n\n- [ ] Create PR with unit tests\n- [ ] Commit unit tests in branch `claude/gate-answer-persistence-flag-4b55da`\n\n

✨ Simplify code

\n\n- [ ] Create PR with simplified code\n- [ ] Commit simplified code in branch `claude/gate-answer-persistence-flag-4b55da`\n\n

\n\n

\n\n\n\n\n---\n\n\n\n\n_{Comment `@coderabbitai help` to get the list of available commands.}\n\n","@copilot resolve the merge conflicts in this pull request","[supa]:sjrfecxgysukkwxsowpy\nThis pull request has been ignored for the connected project `sjrfecxgysukkwxsowpy` because there are no changes detected in `supabase` directory. You can change this behaviour in [Project Integrations Settings ↗︎](https://supabase.com/dashboard/project/sjrfecxgysukkwxsowpy/settings/integrations).\n\n

\n\nPreview Branches by Supabase.\nLearn more about [Supabase Branching ↗︎](https://supabase.com/docs/guides/platform/branching).","base_ref","head_ref","pull_request_info",[2922],{"_1818":46,"_46":2923},"@codex\\n\\nfix this issue below please\\n\\nP1 Badge Gate cached answers behind the retention flag\\nWhen RAG_PERSIST_ANSWER_TEXT is left at its default false but RAG_ANSWER_CACHE_TTL_MS is enabled (default 300000), answered requests still call setSharedCachedAnswer and insert { answer: cloneAnswer(answer) } into rag_response_cache.payload (src/lib/rag-cache.ts:523-524). I only found lookup-time expires_at filtering/invalidation, not a purge that removes expired cache rows, so generated PHI-derived answer text can still remain at rest while this new flag and production-readiness check report answer persistence as off. A focused proof is to run any non-skipped answer request with the default cache TTL and inspect the inserted rag_response_cache payload.",[3868,3869,3870],[],{"_1823":1824,"_46":1825,"_1826":1827},{"_1797":3859},{"_517":3858},{"_517":3053},{"_488":489,"_479":490,"_491":492,"_493":15,"_494":59,"_495":15,"_496":497,"_498":499,"_500":450,"_501":128,"_502":503,"_504":130,"_505":506,"_507":-5,"_508":-5,"_509":3052,"_511":512,"_513":32,"_514":32,"_515":32},{"_42":124,"_376":377,"_378":379,"_380":15,"_381":382,"_383":384,"_385":3041,"_387":-5,"_388":-5,"_389":15,"_390":3042,"_392":393,"_394":393,"_395":3043,"_397":3044,"_399":3045,"_401":-5,"_402":403,"_404":405,"_406":407,"_408":3046,"_55":-5,"_120":410,"_411":3047,"_413":3048,"_415":416,"_417":15,"_418":15},{"_134":3034},[2934,2935,2936,2937,2938,2939,2940,2941,2942,2943,2944,2945,2946,2947,2948,2949,2950,2951,2952,2953,2954,2955,2956,2957,2958,2959,2960,2961,2962,2963,2964,2965,2966,2967,2968,2969,2970,2971,2972,2973,2974,2975,2976,2977,2978,2979,2980,2981,2982,2983,2984,2985,2986,2987,2988,2989,2990,2991,2992,2993,2994,2995,2996,2997,2998,2999,3000,3001,3002,3003,3004,3005,3006,3007,3008,3009,3010,3011,3012,3013,3014,3015,3016,3017,3018,3019,3020,3021,3022,3023,3024,3025,3026,3027,3028,3029,3030,3031,3032,3033],{"_243":355,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":354,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":353,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":352,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":351,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":350,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":349,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":348,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":347,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":346,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":345,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":344,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":343,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":342,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":341,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":340,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":339,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":338,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":337,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":336,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":335,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":334,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":333,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":332,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":331,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":330,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":329,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":328,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":327,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":326,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":325,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":324,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":323,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":322,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":321,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":320,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":319,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":318,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":317,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":316,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":315,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":314,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":313,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":312,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":311,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":310,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":309,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":308,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":307,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":306,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":305,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":304,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":303,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":302,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":301,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":300,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":299,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":298,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":297,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":296,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":295,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":294,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":293,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":292,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":291,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":290,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":289,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":288,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":287,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":286,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":285,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":284,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":283,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":282,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":281,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":280,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":279,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":278,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":277,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":276,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":275,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":274,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":273,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":272,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":271,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":270,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":269,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":268,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":267,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":266,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":265,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":264,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":263,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":262,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":261,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":260,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":259,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":258,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":257,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":244,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},[3035,3036,3037],{"_360":3040,"_362":373},{"_360":3039,"_362":369},{"_360":3038,"_362":363},{"_364":365,"_93":366,"_120":367},{"_364":370,"_93":366,"_120":371},{"_364":374,"_93":366,"_120":375},{"_481":482,"_483":69,"_484":-5,"_485":-5,"_486":-5,"_487":-5},[440],{"_440":3049},{"_422":423,"_424":425,"_426":427,"_428":429,"_430":431,"_432":433,"_434":435,"_436":437,"_438":439},{},[],{"_421":59},{"_419":59,"_420":393},{"_42":442,"_364":443,"_444":3050,"_446":379,"_447":448,"_449":450,"_451":452,"_453":454,"_455":456,"_457":458,"_459":-5,"_460":-5,"_461":-5,"_462":-5,"_463":-5,"_464":-5,"_465":-5,"_255":466,"_467":-5,"_55":3051},{"_473":474,"_42":475,"_93":476,"_477":478,"_479":480},{"_469":15,"_470":15,"_471":15,"_472":15},{"_473":474,"_364":474,"_516":-5,"_477":478,"_42":475},[3054,3055,3056,3057,3058,3059,3060,3061,3062,3063,3064,3065,3066,3067,3068,3069,3070,3071,3072,3073,3074,3075,3076,3077,3078,3079,3080,3081,3082,3083,3084,3085,3086,3087,3088,3089,3090,3091,3092,3093,3094,3095,3096,3097,3098,3099,3100,3101,3102,3103,3104,3105,3106,3107,3108,3109,3110,3111,3112,3113,3114,3115,3116,3117,3118,3119,3120,3121,3122,3123,3124,3125,3126,3127,3128,3129,3130,3131,3132,3133,3134,3135,3136,3137,3138,3139,3140,3141,3142,3143,3144,3145,3146,3147,3148,3149,3150,3151,3152,3153,3154,3155,3156,3157,3158,3159,3160,3161,3162,3163,3164,3165,3166,3167,3168,3169,3170,3171,3172,3173,3174,3175,3176,3177,3178,3179,3180,3181,3182,3183,3184,3185,3186,3187,3188,3189,3190,3191,3192,3193,3194,3195,3196,3197,3198,3199,3200,3201,3202,3203,3204,3205,3206,3207,3208,3209,3210,3211,3212,3213,3214,3215,3216,3217,3218,3219,3220,3221,3222,3223,3224,3225,3226,3227,3228,3229,3230,3231,3232,3233,3234,3235,3236,3237,3238,3239,3240,3241,3242,3243,3244,3245,3246,3247],{"_249":1770,"_714":3854},{"_249":729,"_714":3851},{"_249":1760,"_714":3848},{"_249":733,"_714":3843},{"_249":733,"_714":3838},{"_249":733,"_714":3834},{"_249":748,"_714":3829},{"_249":748,"_714":3825},{"_249":733,"_714":3822},{"_249":733,"_714":3820},{"_249":733,"_714":3818},{"_249":748,"_714":3814},{"_249":733,"_714":3812},{"_249":733,"_714":3810},{"_249":748,"_714":3806},{"_249":748,"_714":3802},{"_249":733,"_714":3799},{"_249":733,"_714":3797},{"_249":733,"_714":3795},{"_249":733,"_714":3793},{"_249":748,"_714":3789},{"_249":733,"_714":3787},{"_249":748,"_714":3782},{"_249":733,"_714":3780},{"_249":748,"_714":3776},{"_249":733,"_714":3774},{"_249":748,"_714":3770},{"_249":733,"_714":3766},{"_249":733,"_714":3764},{"_249":748,"_714":3760},{"_249":733,"_714":3758},{"_249":748,"_714":3754},{"_249":733,"_714":3751},{"_249":733,"_714":3749},{"_249":748,"_714":3742},{"_249":733,"_714":3740},{"_249":748,"_714":3736},{"_249":733,"_714":3732},{"_249":733,"_714":3730},{"_249":748,"_714":3726},{"_249":733,"_714":3724},{"_249":748,"_714":3720},{"_249":733,"_714":3717},{"_249":733,"_714":3715},{"_249":748,"_714":3710},{"_249":733,"_714":3708},{"_249":733,"_714":3706},{"_249":748,"_714":3702},{"_249":733,"_714":3700},{"_249":748,"_714":3696},{"_249":733,"_714":3692},{"_249":733,"_714":3690},{"_249":748,"_714":3685},{"_249":733,"_714":3683},{"_249":748,"_714":3679},{"_249":733,"_714":3675},{"_249":733,"_714":3673},{"_249":748,"_714":3669},{"_249":733,"_714":3667},{"_249":733,"_714":3665},{"_249":748,"_714":3660},{"_249":733,"_714":3658},{"_249":748,"_714":3654},{"_249":733,"_714":3651},{"_249":733,"_714":3649},{"_249":748,"_714":3644},{"_249":733,"_714":3642},{"_249":748,"_714":3638},{"_249":733,"_714":3635},{"_249":733,"_714":3633},{"_249":748,"_714":3627},{"_249":733,"_714":3625},{"_249":748,"_714":3621},{"_249":733,"_714":3618},{"_249":733,"_714":3616},{"_249":748,"_714":3611},{"_249":733,"_714":3609},{"_249":748,"_714":3605},{"_249":733,"_714":3602},{"_249":733,"_714":3600},{"_249":748,"_714":3596},{"_249":733,"_714":3594},{"_249":748,"_714":3590},{"_249":733,"_714":3587},{"_249":733,"_714":3585},{"_249":748,"_714":3580},{"_249":733,"_714":3578},{"_249":748,"_714":3574},{"_249":733,"_714":3571},{"_249":733,"_714":3569},{"_249":733,"_714":3567},{"_249":748,"_714":3563},{"_249":748,"_714":3559},{"_249":733,"_714":3555},{"_249":733,"_714":3553},{"_249":733,"_714":3551},{"_249":748,"_714":3547},{"_249":748,"_714":3543},{"_249":733,"_714":3539},{"_249":733,"_714":3537},{"_249":748,"_714":3533},{"_249":733,"_714":3531},{"_249":748,"_714":3527},{"_249":733,"_714":3524},{"_249":733,"_714":3522},{"_249":733,"_714":3520},{"_249":748,"_714":3516},{"_249":733,"_714":3513},{"_249":733,"_714":3511},{"_249":733,"_714":3509},{"_249":748,"_714":3505},{"_249":748,"_714":3501},{"_249":733,"_714":3497},{"_249":733,"_714":3495},{"_249":733,"_714":3493},{"_249":748,"_714":3489},{"_249":748,"_714":3485},{"_249":733,"_714":3482},{"_249":733,"_714":3480},{"_249":748,"_714":3476},{"_249":733,"_714":3474},{"_249":748,"_714":3470},{"_249":733,"_714":3467},{"_249":733,"_714":3465},{"_249":748,"_714":3460},{"_249":733,"_714":3458},{"_249":748,"_714":3454},{"_249":733,"_714":3451},{"_249":733,"_714":3449},{"_249":733,"_714":3447},{"_249":748,"_714":3443},{"_249":748,"_714":3439},{"_249":733,"_714":3435},{"_249":733,"_714":3433},{"_249":733,"_714":3431},{"_249":748,"_714":3427},{"_249":733,"_714":3424},{"_249":733,"_714":3422},{"_249":733,"_714":3420},{"_249":748,"_714":3416},{"_249":748,"_714":3412},{"_249":733,"_714":3409},{"_249":733,"_714":3407},{"_249":748,"_714":3403},{"_249":733,"_714":3401},{"_249":748,"_714":3397},{"_249":733,"_714":3393},{"_249":733,"_714":3391},{"_249":733,"_714":3389},{"_249":748,"_714":3385},{"_249":748,"_714":3381},{"_249":733,"_714":3378},{"_249":733,"_714":3376},{"_249":733,"_714":3374},{"_249":733,"_714":3372},{"_249":748,"_714":3368},{"_249":733,"_714":3366},{"_249":748,"_714":3362},{"_249":748,"_714":3358},{"_249":733,"_714":3354},{"_249":733,"_714":3352},{"_249":748,"_714":3348},{"_249":733,"_714":3346},{"_249":748,"_714":3342},{"_249":733,"_714":3339},{"_249":733,"_714":3337},{"_249":748,"_714":3333},{"_249":733,"_714":3331},{"_249":748,"_714":3327},{"_249":733,"_714":3324},{"_249":733,"_714":3322},{"_249":748,"_714":3315},{"_249":733,"_714":3313},{"_249":748,"_714":3309},{"_249":733,"_714":3306},{"_249":733,"_714":3304},{"_249":748,"_714":3300},{"_249":733,"_714":3298},{"_249":748,"_714":3294},{"_249":733,"_714":3290},{"_249":733,"_714":3288},{"_249":748,"_714":3284},{"_249":733,"_714":3282},{"_249":748,"_714":3278},{"_249":733,"_714":3275},{"_249":733,"_714":3273},{"_249":748,"_714":3269},{"_249":733,"_714":3267},{"_249":748,"_714":3263},{"_249":733,"_714":3259},{"_249":748,"_714":3257},{"_249":733,"_714":3253},{"_249":729,"_714":3251},{"_249":713,"_714":3248},{"_716":717,"_88":3249},{"_719":720,"_721":722,"_104":-5,"_42":723,"_724":3250,"_726":727,"_728":114},[],{"_728":3252,"_716":717},{"_93":732},{"_735":3254,"_716":717,"_737":723},{"_738":3255,"_740":-5,"_42":-5,"_741":-5,"_742":743,"_97":94,"_93":744},[3256],{"_46":746,"_93":747},{"_735":3258,"_716":717,"_737":723},{"_42":751,"_742":743,"_46":746,"_93":752},{"_735":3260,"_716":717,"_737":723},{"_738":-5,"_755":756,"_42":-5,"_741":-5,"_757":3261,"_93":759},[3262],{"_46":761,"_93":762},{"_735":3264,"_716":717,"_737":723},{"_738":3265,"_42":766,"_757":3266,"_93":759},[],[761],{"_735":3268,"_716":717,"_737":723},{"_770":771,"_42":-5,"_741":-5,"_772":773,"_93":774},{"_735":3270,"_716":717,"_737":723},{"_777":778,"_779":780,"_781":3271,"_783":784,"_721":32,"_785":32,"_42":771,"_786":787,"_788":789,"_728":114,"_93":790},[3272],{"_779":792,"_93":793},{"_735":3274,"_716":717,"_737":723},{"_796":797,"_770":771,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3276,"_716":717,"_737":723},{"_738":-5,"_755":803,"_42":-5,"_741":-5,"_757":3277,"_93":759},[],{"_735":3279,"_716":717,"_737":723},{"_738":3280,"_42":808,"_757":3281,"_93":759},[],[],{"_735":3283,"_716":717,"_737":723},{"_770":812,"_42":-5,"_741":-5,"_772":813,"_93":774},{"_735":3285,"_716":717,"_737":723},{"_777":816,"_779":817,"_781":3286,"_783":784,"_721":32,"_785":32,"_42":812,"_786":819,"_788":789,"_728":114,"_93":790},[3287],{"_779":821,"_93":793},{"_735":3289,"_716":717,"_737":723},{"_796":824,"_770":812,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3291,"_716":717,"_737":723},{"_738":-5,"_755":827,"_42":-5,"_741":-5,"_757":3292,"_93":759},[3293],{"_46":830,"_93":762},{"_735":3295,"_716":717,"_737":723},{"_738":3296,"_42":834,"_757":3297,"_93":759},[],[830],{"_735":3299,"_716":717,"_737":723},{"_770":838,"_42":-5,"_741":-5,"_772":839,"_93":774},{"_735":3301,"_716":717,"_737":723},{"_777":842,"_779":843,"_781":3302,"_783":784,"_721":32,"_785":32,"_42":838,"_786":845,"_788":789,"_728":114,"_93":790},[3303],{"_779":847,"_93":793},{"_735":3305,"_716":717,"_737":723},{"_796":850,"_770":838,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3307,"_716":717,"_737":723},{"_738":-5,"_755":853,"_42":-5,"_741":-5,"_757":3308,"_93":759},[],{"_735":3310,"_716":717,"_737":723},{"_738":3311,"_42":858,"_757":3312,"_93":759},[],[],{"_735":3314,"_716":717,"_737":723},{"_770":862,"_42":-5,"_741":-5,"_772":863,"_93":774},{"_735":3316,"_716":717,"_737":723},{"_866":-5,"_796":3317,"_721":868,"_104":-5,"_42":862,"_869":-5,"_870":-5,"_871":3318,"_873":874,"_728":114,"_875":874,"_93":876},{"_496":881,"_498":882},{"_877":-5,"_738":3319,"_879":3320},[3321],{"_496":881,"_498":882},{"_93":46,"_46":884},{"_735":3323,"_716":717,"_737":723},{"_796":887,"_770":862,"_42":-5,"_741":-5,"_364":874,"_799":888,"_93":800},{"_735":3325,"_716":717,"_737":723},{"_738":-5,"_755":891,"_42":-5,"_741":-5,"_757":3326,"_93":759},[],{"_735":3328,"_716":717,"_737":723},{"_738":3329,"_42":896,"_757":3330,"_93":759},[],[],{"_735":3332,"_716":717,"_737":723},{"_770":900,"_42":-5,"_741":-5,"_772":901,"_93":774},{"_735":3334,"_716":717,"_737":723},{"_777":904,"_779":905,"_781":3335,"_783":784,"_721":32,"_785":32,"_42":900,"_786":907,"_788":789,"_728":114,"_93":790},[3336],{"_779":909,"_93":793},{"_735":3338,"_716":717,"_737":723},{"_796":912,"_770":900,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3340,"_716":717,"_737":723},{"_738":-5,"_755":915,"_42":-5,"_741":-5,"_757":3341,"_93":759},[],{"_735":3343,"_716":717,"_737":723},{"_738":3344,"_42":920,"_757":3345,"_93":759},[],[],{"_735":3347,"_716":717,"_737":723},{"_770":924,"_42":-5,"_741":-5,"_772":925,"_93":774},{"_735":3349,"_716":717,"_737":723},{"_777":928,"_779":929,"_781":3350,"_783":784,"_721":32,"_785":32,"_42":924,"_786":931,"_788":789,"_728":114,"_93":790},[3351],{"_779":933,"_93":793},{"_735":3353,"_716":717,"_737":723},{"_796":936,"_770":924,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3355,"_716":717,"_737":723},{"_738":-5,"_755":939,"_42":-5,"_741":-5,"_757":3356,"_93":759},[3357],{"_46":942,"_93":762},{"_735":3359,"_716":717,"_737":723},{"_738":3360,"_42":946,"_757":3361,"_93":759},[],[942],{"_735":3363,"_716":717,"_737":723},{"_777":950,"_779":951,"_781":3364,"_783":784,"_721":953,"_785":32,"_42":954,"_786":955,"_788":789,"_728":114,"_93":790},[3365],{"_779":957,"_93":793},{"_735":3367,"_716":717,"_737":723},{"_770":954,"_42":-5,"_741":-5,"_772":960,"_93":774},{"_735":3369,"_716":717,"_737":723},{"_777":963,"_779":964,"_781":3370,"_783":784,"_721":966,"_785":32,"_42":967,"_786":968,"_788":789,"_728":114,"_93":790},[3371],{"_779":970,"_93":793},{"_735":3373,"_716":717,"_737":723},{"_770":967,"_42":-5,"_741":-5,"_772":973,"_93":774},{"_735":3375,"_716":717,"_737":723},{"_796":976,"_770":954,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3377,"_716":717,"_737":723},{"_796":979,"_770":967,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3379,"_716":717,"_737":723},{"_738":-5,"_755":982,"_42":-5,"_741":-5,"_757":3380,"_93":759},[],{"_735":3382,"_716":717,"_737":723},{"_738":3383,"_42":987,"_757":3384,"_93":759},[],[],{"_735":3386,"_716":717,"_737":723},{"_777":991,"_779":992,"_781":3387,"_783":784,"_721":994,"_785":32,"_42":995,"_786":996,"_788":789,"_728":114,"_93":790},[3388],{"_779":998,"_93":793},{"_735":3390,"_716":717,"_737":723},{"_770":995,"_42":-5,"_741":-5,"_772":1001,"_93":774},{"_735":3392,"_716":717,"_737":723},{"_796":1004,"_770":995,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3394,"_716":717,"_737":723},{"_738":-5,"_755":1007,"_42":-5,"_741":-5,"_757":3395,"_93":759},[3396],{"_46":1010,"_93":762},{"_735":3398,"_716":717,"_737":723},{"_738":3399,"_42":1014,"_757":3400,"_93":759},[],[1010],{"_735":3402,"_716":717,"_737":723},{"_770":1018,"_42":-5,"_741":-5,"_772":1019,"_93":774},{"_735":3404,"_716":717,"_737":723},{"_777":1022,"_779":1023,"_781":3405,"_783":784,"_721":32,"_785":32,"_42":1018,"_786":1025,"_788":789,"_728":114,"_93":790},[3406],{"_779":1027,"_93":793},{"_735":3408,"_716":717,"_737":723},{"_796":1030,"_770":1018,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3410,"_716":717,"_737":723},{"_738":-5,"_755":1033,"_42":-5,"_741":-5,"_757":3411,"_93":759},[],{"_735":3413,"_716":717,"_737":723},{"_738":3414,"_42":1038,"_757":3415,"_93":759},[],[],{"_735":3417,"_716":717,"_737":723},{"_777":950,"_779":951,"_781":3418,"_783":784,"_721":1043,"_785":32,"_42":1044,"_786":1045,"_788":789,"_728":114,"_93":790},[3419],{"_779":957,"_93":793},{"_735":3421,"_716":717,"_737":723},{"_770":1049,"_42":-5,"_741":-5,"_772":1050,"_93":774},{"_735":3423,"_716":717,"_737":723},{"_796":1053,"_770":1049,"_42":-5,"_741":-5,"_364":1054,"_799":-5,"_93":800},{"_735":3425,"_716":717,"_737":723},{"_738":-5,"_755":1057,"_42":-5,"_741":-5,"_757":3426,"_93":759},[],{"_735":3428,"_716":717,"_737":723},{"_738":3429,"_42":1062,"_757":3430,"_93":759},[],[],{"_735":3432,"_716":717,"_737":723},{"_770":1044,"_42":-5,"_741":-5,"_772":1066,"_93":774},{"_735":3434,"_716":717,"_737":723},{"_796":1069,"_770":1044,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3436,"_716":717,"_737":723},{"_738":-5,"_755":1072,"_42":-5,"_741":-5,"_757":3437,"_93":759},[3438],{"_46":1075,"_93":762},{"_735":3440,"_716":717,"_737":723},{"_738":3441,"_42":1079,"_757":3442,"_93":759},[],[1075],{"_735":3444,"_716":717,"_737":723},{"_777":1083,"_779":964,"_781":3445,"_783":784,"_721":1085,"_785":32,"_42":1086,"_786":1087,"_788":789,"_728":114,"_93":790},[3446],{"_779":970,"_93":793},{"_735":3448,"_716":717,"_737":723},{"_770":1086,"_42":-5,"_741":-5,"_772":1091,"_93":774},{"_735":3450,"_716":717,"_737":723},{"_796":1094,"_770":1086,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3452,"_716":717,"_737":723},{"_738":-5,"_755":1097,"_42":-5,"_741":-5,"_757":3453,"_93":759},[],{"_735":3455,"_716":717,"_737":723},{"_738":3456,"_42":1102,"_757":3457,"_93":759},[],[],{"_735":3459,"_716":717,"_737":723},{"_770":1106,"_42":-5,"_741":-5,"_772":1107,"_93":774},{"_735":3461,"_716":717,"_737":723},{"_777":1110,"_779":1111,"_781":3462,"_783":784,"_721":32,"_785":32,"_42":1106,"_786":1113,"_788":789,"_728":114,"_93":790},[3463,3464],{"_779":1120,"_364":1117,"_256":1121,"_93":1119},{"_779":1116,"_364":1117,"_256":1118,"_93":1119},{"_735":3466,"_716":717,"_737":723},{"_796":1124,"_770":1106,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3468,"_716":717,"_737":723},{"_738":-5,"_755":1127,"_42":-5,"_741":-5,"_757":3469,"_93":759},[],{"_735":3471,"_716":717,"_737":723},{"_738":3472,"_42":1132,"_757":3473,"_93":759},[],[],{"_735":3475,"_716":717,"_737":723},{"_770":1136,"_42":-5,"_741":-5,"_772":1137,"_93":774},{"_735":3477,"_716":717,"_737":723},{"_777":1140,"_779":1141,"_781":3478,"_783":784,"_721":32,"_785":32,"_42":1136,"_786":1143,"_788":789,"_728":114,"_93":790},[3479],{"_779":1145,"_256":1146,"_93":1147},{"_735":3481,"_716":717,"_737":723},{"_796":1150,"_770":1136,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3483,"_716":717,"_737":723},{"_738":-5,"_755":1153,"_42":-5,"_741":-5,"_757":3484,"_93":759},[],{"_735":3486,"_716":717,"_737":723},{"_738":3487,"_42":1158,"_757":3488,"_93":759},[],[],{"_735":3490,"_716":717,"_737":723},{"_777":1162,"_779":1163,"_781":3491,"_783":784,"_721":1165,"_785":32,"_42":1166,"_786":1167,"_788":789,"_728":114,"_93":790},[3492],{"_779":1169,"_93":793},{"_735":3494,"_716":717,"_737":723},{"_770":1166,"_42":-5,"_741":-5,"_772":1172,"_93":774},{"_735":3496,"_716":717,"_737":723},{"_796":1175,"_770":1166,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3498,"_716":717,"_737":723},{"_738":-5,"_755":1178,"_42":-5,"_741":-5,"_757":3499,"_93":759},[3500],{"_46":1181,"_93":762},{"_735":3502,"_716":717,"_737":723},{"_738":3503,"_42":1185,"_757":3504,"_93":759},[],[1181],{"_735":3506,"_716":717,"_737":723},{"_777":1189,"_779":1190,"_781":3507,"_783":784,"_721":1192,"_785":32,"_42":1193,"_786":1194,"_788":789,"_728":114,"_93":790},[3508],{"_779":1196,"_93":793},{"_735":3510,"_716":717,"_737":723},{"_770":1199,"_42":-5,"_741":-5,"_772":1200,"_93":774},{"_735":3512,"_716":717,"_737":723},{"_796":1203,"_770":1199,"_42":-5,"_741":-5,"_364":1054,"_799":-5,"_93":800},{"_735":3514,"_716":717,"_737":723},{"_738":-5,"_755":1206,"_42":-5,"_741":-5,"_757":3515,"_93":759},[],{"_735":3517,"_716":717,"_737":723},{"_738":3518,"_42":1211,"_757":3519,"_93":759},[],[],{"_735":3521,"_716":717,"_737":723},{"_770":1193,"_42":-5,"_741":-5,"_772":1215,"_93":774},{"_735":3523,"_716":717,"_737":723},{"_796":1218,"_770":1193,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3525,"_716":717,"_737":723},{"_738":-5,"_755":1221,"_42":-5,"_741":-5,"_757":3526,"_93":759},[],{"_735":3528,"_716":717,"_737":723},{"_738":3529,"_42":1226,"_757":3530,"_93":759},[],[],{"_735":3532,"_716":717,"_737":723},{"_770":1230,"_42":-5,"_741":-5,"_772":1231,"_93":774},{"_735":3534,"_716":717,"_737":723},{"_777":1234,"_779":1235,"_781":3535,"_783":784,"_721":32,"_785":32,"_42":1230,"_786":1237,"_788":789,"_728":114,"_93":790},[3536],{"_779":1239,"_93":793},{"_735":3538,"_716":717,"_737":723},{"_796":1242,"_770":1230,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3540,"_716":717,"_737":723},{"_738":-5,"_755":1245,"_42":-5,"_741":-5,"_757":3541,"_93":759},[3542],{"_46":1248,"_93":762},{"_735":3544,"_716":717,"_737":723},{"_738":3545,"_42":1252,"_757":3546,"_93":759},[],[1248],{"_735":3548,"_716":717,"_737":723},{"_777":1256,"_779":1257,"_781":3549,"_783":784,"_721":1259,"_785":32,"_42":1260,"_786":1261,"_788":789,"_728":114,"_93":790},[3550],{"_779":1263,"_93":793},{"_735":3552,"_716":717,"_737":723},{"_770":1260,"_42":-5,"_741":-5,"_772":1266,"_93":774},{"_735":3554,"_716":717,"_737":723},{"_796":1269,"_770":1260,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3556,"_716":717,"_737":723},{"_738":-5,"_755":1272,"_42":-5,"_741":-5,"_757":3557,"_93":759},[3558],{"_46":1275,"_93":762},{"_735":3560,"_716":717,"_737":723},{"_738":3561,"_42":1279,"_757":3562,"_93":759},[],[1275],{"_735":3564,"_716":717,"_737":723},{"_777":1283,"_779":1284,"_781":3565,"_783":784,"_721":1286,"_785":1287,"_42":1288,"_786":1289,"_788":789,"_728":1290,"_93":790},[3566],{"_779":1292,"_93":793},{"_735":3568,"_716":717,"_737":723},{"_770":1288,"_42":-5,"_741":-5,"_772":1295,"_93":774},{"_735":3570,"_716":717,"_737":723},{"_796":1298,"_770":1288,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3572,"_716":717,"_737":723},{"_738":-5,"_755":1301,"_42":-5,"_741":-5,"_757":3573,"_93":759},[],{"_735":3575,"_716":717,"_737":723},{"_738":3576,"_42":1306,"_757":3577,"_93":759},[],[],{"_735":3579,"_716":717,"_737":723},{"_770":1310,"_42":-5,"_741":-5,"_364":-5,"_772":1311,"_93":1312},{"_735":3581,"_716":717,"_737":723},{"_1315":3582,"_42":1310,"_728":114,"_93":1317},[3583],{"_508":1319,"_9":3584,"_256":1321},{"_1322":-5,"_93":1323},{"_735":3586,"_716":717,"_737":723},{"_770":1310,"_42":-5,"_1326":1327,"_741":-5,"_364":1328,"_799":-5,"_728":114,"_93":1329},{"_735":3588,"_716":717,"_737":723},{"_738":-5,"_755":1332,"_42":-5,"_741":-5,"_757":3589,"_93":759},[],{"_735":3591,"_716":717,"_737":723},{"_738":3592,"_42":1337,"_757":3593,"_93":759},[],[],{"_735":3595,"_716":717,"_737":723},{"_770":1341,"_42":-5,"_741":-5,"_772":1342,"_93":774},{"_735":3597,"_716":717,"_737":723},{"_777":1345,"_779":1346,"_781":3598,"_783":784,"_721":32,"_785":32,"_42":1341,"_786":1348,"_788":789,"_728":114,"_93":790},[3599],{"_779":1350,"_364":1351,"_256":1321,"_93":1119},{"_735":3601,"_716":717,"_737":723},{"_796":1354,"_770":1341,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3603,"_716":717,"_737":723},{"_738":-5,"_755":1357,"_42":-5,"_741":-5,"_757":3604,"_93":759},[],{"_735":3606,"_716":717,"_737":723},{"_738":3607,"_42":1362,"_757":3608,"_93":759},[],[],{"_735":3610,"_716":717,"_737":723},{"_770":1366,"_42":-5,"_741":-5,"_364":-5,"_772":1311,"_93":1312},{"_735":3612,"_716":717,"_737":723},{"_1315":3613,"_42":1366,"_728":114,"_93":1317},[3614],{"_508":1371,"_9":3615,"_256":1321},{"_1322":-5,"_93":1323},{"_735":3617,"_716":717,"_737":723},{"_770":1366,"_42":-5,"_1326":1375,"_741":-5,"_364":1328,"_799":-5,"_728":114,"_93":1329},{"_735":3619,"_716":717,"_737":723},{"_738":-5,"_755":1378,"_42":-5,"_741":-5,"_757":3620,"_93":759},[],{"_735":3622,"_716":717,"_737":723},{"_738":3623,"_42":1383,"_757":3624,"_93":759},[],[],{"_735":3626,"_716":717,"_737":723},{"_770":1387,"_42":-5,"_741":-5,"_772":1388,"_93":774},{"_735":3628,"_716":717,"_737":723},{"_777":1391,"_779":1392,"_781":3629,"_783":784,"_721":32,"_785":32,"_42":1387,"_786":1394,"_788":789,"_728":114,"_93":790},[3630,3631,3632],{"_779":1400,"_364":1351,"_256":1321,"_93":1119},{"_779":1399,"_364":1351,"_256":1321,"_93":1119},{"_779":1398,"_364":1351,"_256":1321,"_93":1119},{"_735":3634,"_716":717,"_737":723},{"_796":1403,"_770":1387,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3636,"_716":717,"_737":723},{"_738":-5,"_755":1406,"_42":-5,"_741":-5,"_757":3637,"_93":759},[],{"_735":3639,"_716":717,"_737":723},{"_738":3640,"_42":1411,"_757":3641,"_93":759},[],[],{"_735":3643,"_716":717,"_737":723},{"_770":1415,"_42":-5,"_741":-5,"_364":-5,"_772":1416,"_93":1312},{"_735":3645,"_716":717,"_737":723},{"_1315":3646,"_42":1415,"_728":114,"_93":1317},[3647],{"_508":1421,"_9":3648,"_256":1423},{"_1322":-5,"_93":1323},{"_735":3650,"_716":717,"_737":723},{"_770":1415,"_42":-5,"_1326":1426,"_741":-5,"_364":1328,"_799":-5,"_728":114,"_93":1329},{"_735":3652,"_716":717,"_737":723},{"_738":-5,"_755":1429,"_42":-5,"_741":-5,"_757":3653,"_93":759},[],{"_735":3655,"_716":717,"_737":723},{"_738":3656,"_42":1434,"_757":3657,"_93":759},[],[],{"_735":3659,"_716":717,"_737":723},{"_770":1438,"_42":-5,"_741":-5,"_364":-5,"_772":1439,"_93":1312},{"_735":3661,"_716":717,"_737":723},{"_1315":3662,"_42":1438,"_728":114,"_93":1317},[3663],{"_508":1444,"_9":3664,"_256":1446},{"_1322":-5,"_93":1323},{"_735":3666,"_716":717,"_737":723},{"_770":1438,"_42":-5,"_1326":1449,"_741":-5,"_364":1328,"_799":-5,"_728":114,"_93":1329},{"_735":3668,"_716":717,"_737":723},{"_770":1452,"_42":-5,"_741":-5,"_772":1453,"_93":774},{"_735":3670,"_716":717,"_737":723},{"_777":1456,"_779":1457,"_781":3671,"_783":784,"_721":32,"_785":32,"_42":1452,"_786":1459,"_788":789,"_728":114,"_93":790},[3672],{"_779":1461,"_364":1462,"_256":1446,"_93":1119},{"_735":3674,"_716":717,"_737":723},{"_796":1465,"_770":1452,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3676,"_716":717,"_737":723},{"_738":-5,"_755":1468,"_42":-5,"_741":-5,"_757":3677,"_93":759},[3678],{"_46":1471,"_93":762},{"_735":3680,"_716":717,"_737":723},{"_738":3681,"_42":1475,"_757":3682,"_93":759},[],[1471],{"_735":3684,"_716":717,"_737":723},{"_770":1479,"_42":-5,"_741":-5,"_364":-5,"_772":1439,"_93":1312},{"_735":3686,"_716":717,"_737":723},{"_1315":3687,"_42":1479,"_728":114,"_93":1317},[3688],{"_508":1484,"_9":3689,"_256":1446},{"_1322":-5,"_93":1323},{"_735":3691,"_716":717,"_737":723},{"_770":1479,"_42":-5,"_1326":1488,"_741":-5,"_364":1328,"_799":-5,"_728":114,"_93":1329},{"_735":3693,"_716":717,"_737":723},{"_738":-5,"_755":1491,"_42":-5,"_741":-5,"_757":3694,"_93":759},[3695],{"_46":1494,"_93":762},{"_735":3697,"_716":717,"_737":723},{"_738":3698,"_42":1498,"_757":3699,"_93":759},[],[1494],{"_735":3701,"_716":717,"_737":723},{"_770":1502,"_42":-5,"_741":-5,"_772":1503,"_93":774},{"_735":3703,"_716":717,"_737":723},{"_777":1506,"_779":1507,"_781":3704,"_783":784,"_721":32,"_785":32,"_42":1502,"_786":1509,"_788":789,"_728":114,"_93":790},[3705],{"_779":1511,"_364":1512,"_256":1513,"_93":1119},{"_735":3707,"_716":717,"_737":723},{"_796":1516,"_770":1502,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3709,"_716":717,"_737":723},{"_770":1519,"_42":-5,"_741":-5,"_772":1520,"_93":774},{"_735":3711,"_716":717,"_737":723},{"_777":1523,"_779":1524,"_781":3712,"_783":784,"_721":32,"_785":32,"_42":1519,"_786":1526,"_788":789,"_728":114,"_93":790},[3713,3714],{"_779":1530,"_256":1512,"_1531":1532,"_93":1533},{"_779":1529,"_364":1512,"_256":1513,"_93":1119},{"_735":3716,"_716":717,"_737":723},{"_796":1536,"_770":1519,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3718,"_716":717,"_737":723},{"_738":-5,"_755":1539,"_42":-5,"_741":-5,"_757":3719,"_93":759},[],{"_735":3721,"_716":717,"_737":723},{"_738":3722,"_42":1544,"_757":3723,"_93":759},[],[],{"_735":3725,"_716":717,"_737":723},{"_770":1548,"_42":-5,"_741":-5,"_772":1549,"_93":774},{"_735":3727,"_716":717,"_737":723},{"_777":1552,"_779":1553,"_781":3728,"_783":784,"_721":32,"_785":32,"_42":1548,"_786":1555,"_788":789,"_728":114,"_93":790},[3729],{"_779":1557,"_256":1558,"_1531":1559,"_93":1533},{"_735":3731,"_716":717,"_737":723},{"_796":1562,"_770":1548,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3733,"_716":717,"_737":723},{"_738":-5,"_755":1565,"_42":-5,"_741":-5,"_757":3734,"_93":759},[3735],{"_46":1568,"_93":762},{"_735":3737,"_716":717,"_737":723},{"_738":3738,"_42":1572,"_757":3739,"_93":759},[],[1568],{"_735":3741,"_716":717,"_737":723},{"_770":1576,"_42":-5,"_741":-5,"_772":1577,"_93":774},{"_735":3743,"_716":717,"_737":723},{"_777":1580,"_779":1581,"_781":3744,"_783":784,"_721":32,"_785":32,"_42":1576,"_786":1583,"_788":789,"_728":114,"_93":790},[3745,3746,3747,3748],{"_779":1592,"_364":1462,"_256":1446,"_93":1119},{"_779":1591,"_364":1462,"_256":1446,"_93":1119},{"_779":1590,"_364":1462,"_256":1446,"_93":1119},{"_779":1588,"_364":1589,"_256":1423,"_93":1119},{"_735":3750,"_716":717,"_737":723},{"_796":1595,"_770":1576,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3752,"_716":717,"_737":723},{"_738":-5,"_755":1598,"_42":-5,"_741":-5,"_757":3753,"_93":759},[],{"_735":3755,"_716":717,"_737":723},{"_738":3756,"_42":1603,"_757":3757,"_93":759},[],[],{"_735":3759,"_716":717,"_737":723},{"_770":1607,"_42":-5,"_741":-5,"_772":1608,"_93":774},{"_735":3761,"_716":717,"_737":723},{"_777":1611,"_779":1141,"_781":3762,"_783":784,"_721":32,"_785":32,"_42":1607,"_786":1613,"_788":789,"_728":114,"_93":790},[3763],{"_779":1145,"_256":1146,"_93":1147},{"_735":3765,"_716":717,"_737":723},{"_796":1150,"_770":1607,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3767,"_716":717,"_737":723},{"_738":-5,"_755":1619,"_42":-5,"_741":-5,"_757":3768,"_93":759},[3769],{"_46":1622,"_93":762},{"_735":3771,"_716":717,"_737":723},{"_738":3772,"_42":1626,"_757":3773,"_93":759},[],[1622],{"_735":3775,"_716":717,"_737":723},{"_770":1630,"_42":-5,"_741":-5,"_772":1631,"_93":774},{"_735":3777,"_716":717,"_737":723},{"_777":1634,"_779":1635,"_781":3778,"_783":784,"_721":32,"_785":32,"_42":1630,"_786":1637,"_788":789,"_728":114,"_93":790},[3779],{"_779":1639,"_256":1640,"_1531":1641,"_93":1533},{"_735":3781,"_716":717,"_737":723},{"_770":1644,"_42":-5,"_741":-5,"_772":1645,"_93":774},{"_735":3783,"_716":717,"_737":723},{"_777":1648,"_779":1649,"_781":3784,"_783":784,"_721":512,"_785":32,"_42":1644,"_786":1651,"_788":789,"_728":114,"_93":790},[3785,3786],{"_779":1655,"_364":1656,"_256":1657,"_93":1119},{"_779":1654,"_364":1462,"_256":1446,"_93":1119},{"_735":3788,"_716":717,"_737":723},{"_770":1660,"_42":-5,"_741":-5,"_772":1661,"_93":774},{"_735":3790,"_716":717,"_737":723},{"_777":1664,"_779":1665,"_781":3791,"_783":784,"_721":32,"_785":32,"_42":1660,"_786":1667,"_788":789,"_728":114,"_93":790},[3792],{"_779":1669,"_364":1670,"_256":1671,"_93":1119},{"_735":3794,"_716":717,"_737":723},{"_796":1674,"_770":1630,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3796,"_716":717,"_737":723},{"_796":1677,"_770":1644,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3798,"_716":717,"_737":723},{"_796":1680,"_770":1660,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3800,"_716":717,"_737":723},{"_738":-5,"_755":1683,"_42":-5,"_741":-5,"_757":3801,"_93":759},[],{"_735":3803,"_716":717,"_737":723},{"_738":3804,"_42":1688,"_757":3805,"_93":759},[],[],{"_735":3807,"_716":717,"_737":723},{"_777":1692,"_779":1693,"_781":3808,"_783":784,"_721":1695,"_785":32,"_42":1696,"_786":1697,"_788":789,"_728":114,"_93":790},[3809],{"_779":1699,"_93":793},{"_735":3811,"_716":717,"_737":723},{"_770":1702,"_42":-5,"_741":-5,"_772":1703,"_93":774},{"_735":3813,"_716":717,"_737":723},{"_770":1696,"_42":-5,"_741":-5,"_772":1706,"_93":774},{"_735":3815,"_716":717,"_737":723},{"_777":1709,"_779":1710,"_781":3816,"_783":784,"_721":32,"_785":32,"_42":1702,"_786":1712,"_788":789,"_728":114,"_93":790},[3817],{"_779":1714,"_93":793},{"_735":3819,"_716":717,"_737":723},{"_796":1717,"_770":1702,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3821,"_716":717,"_737":723},{"_796":1720,"_770":1696,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":3823,"_716":717,"_737":723},{"_738":-5,"_755":1723,"_42":-5,"_741":-5,"_757":3824,"_93":759},[],{"_735":3826,"_716":717,"_737":723},{"_738":3827,"_42":1728,"_757":3828,"_93":759},[],[],{"_735":3830,"_716":717,"_737":723},{"_1732":-5,"_738":3831,"_42":1734,"_93":1735},[3832],{"_46":1737,"_1738":3833,"_93":46},[],{"_735":3835,"_716":717,"_737":723},{"_738":3836,"_740":-5,"_42":-5,"_741":-5,"_742":-5,"_97":509,"_93":744},[3837],{"_46":1737,"_93":1744},{"_735":3839,"_716":717,"_737":723},{"_738":3840,"_740":-5,"_42":-5,"_741":-5,"_742":-5,"_97":509,"_93":744},[3841,3842],{"_46":1751,"_93":1744},{"_46":1750,"_93":1744},{"_735":3844,"_716":717,"_737":723},{"_738":3845,"_740":-5,"_42":-5,"_741":-5,"_742":-5,"_97":1755,"_93":744},[3846,3847],{"_46":1759,"_93":1744},{"_46":1758,"_93":1744},{"_716":717,"_88":3849},{"_104":-5,"_42":723,"_724":3850,"_726":727,"_728":1764},[],{"_728":3852,"_716":717},{"_1767":3853,"_93":1769},[],{"_1772":3855},{"_1774":-5,"_1775":-5,"_1776":1777,"_1778":727,"_783":784,"_1779":15,"_1780":-5,"_1781":-5,"_1782":-5,"_1783":1784,"_42":717,"_1785":1786,"_364":-5,"_1787":-5,"_256":1788,"_1789":393,"_1790":-5,"_788":1791,"_728":3856,"_1793":-5,"_78":3857,"_1795":727},{"_93":732},[],[],[3860],{"_42":1800,"_1801":3861,"_1803":1804,"_1805":1804,"_738":3862,"_728":1807,"_740":-5,"_1808":32,"_1809":3863,"_1811":1812,"_1813":-5},{"_97":509,"_364":-5,"_1809":3867},{"_1818":46,"_1819":3866},{"_1814":3864},{"_1816":3865},[],[1821],{},{"_93":744,"_97":94,"_738":3887},{"_93":1857,"_1858":3874},{"_93":1831,"_1832":1833,"_1834":1835,"_1836":3871,"_1838":-5},{"_93":1836,"_1839":784,"_129":130,"_1840":-5,"_508":1841,"_1842":3872,"_1844":1845,"_1846":1847,"_1848":1849,"_1850":1851,"_1852":3873},{"_1854":1855,"_1856":-5},[],[3875,3876,3877],{"_256":2334,"_1864":-5,"_1865":3884,"_1867":-5},{"_256":2215,"_1864":-5,"_1865":3881,"_1867":-5},{"_256":1863,"_1864":-5,"_1865":3878,"_1867":-5},[3879],{"_1869":1287,"_1870":1871,"_738":3880,"_1873":59},[1874,393,1875,1876,1877,393,1878,1879,1880,1881,393,1882,393,1883,393,1884,1885,1886,393,1887,1888,1889,1890,1891,393,1892,393,1893,1894,1895,1896,1897,1898,1899,1900,1901,1902,1903,1904,1905,1906,393,1907,393,1908,1909,1910,1911,1912,1913,1914,1915,1916,393,1882,393,1917,393,1918,1919,1920,1921,1922,1923,1924,1925,393,1926,1927,1928,1929,393,1882,393,1930,393,1931,393,1932,1933,1934,1935,1936,1937,1938,1939,1935,1940,1941,1942,1943,1944,1945,1946,1947,1948,1949,1950,1951,1952,1953,1954,1941,1955,1956,1957,1958,1959,1960,1961,1941,1962,1963,1964,1935,1965,1932,393,1966,1967,1968,393,1969,1970,393,1882,393,1971,393,1972,393,1973,1974,1975,1976,1977,1978,1979,393,1980,1981,393,1982,393,1983,1984,1985,1986,1987,1988,1989,1990,1991,1992,1993,393,1994,393,1995,1996,1997,393,1998,1999,2000,2001,2002,2003,393,2004,2005,2006,393,1882,393,2007,393,2008,2009,393,2010,2011,2012,2013,2014,2015,393,2016,393,2017,2018,393,2019,2020,2021,2022,2023,2024,2025,2026,1932,393,2027,2028,2029,2030,2031,2032,2033,393,2034,2035,2036,2037,2038,2039,2040,2041,2042,2043,2044,393,2045,393,2046,2047,2048,2049,2050,2051,393,1882,393,2052,393,2053,2054,2055,2056,2057,2058,2059,393,2060,393,1932,2061,2062,1932,393,2063,2064,393,2065,2066,2067,2068,2069,2070,393,1882,393,2071,393,2072,2073,2074,2075,2076,2077,2078,393,2079,2080,393,1882,393,2081,393,2082,2083,2084,2085,2086,2087,2088,2089,2090,2091,2092,2093,2094,2095,393,2096,2097,393,1882,393,2098,393,2099,2100,2101,2102,2103,2104,2105,2106,393,2107,2108,2109,2110,2111,2112,2113,2114,2115,393,2116,2117,2118,2119,2120,2121,2122,393,1882,393,2123,393,2124,393,2125,2126,2127,2128,2129,2130,2131,2132,2133,2134,2135,2136,2137,2138,2139,2140,393,2141,393,2142,2143,2144,2145,2146,2147,2148,2149,2150,2151,2152,2153,393,2154,393,2155,2156,2157,2158,2159,2160,2161,2162,2163,2164,2165,2166,2167,2168,2169,2170,2171,2172,2173,2174,2175,2176,393,2177,393,2178,2179,2180,2181,2182,393,2183,393,2184,2185,2186,2187,2188,2189,2190,2191,393,2192,393,2193,2194,2195,2196,2197,393,2198,393,2199,2200,2201,2202,393,1882,393,2203,393,2204,2205,2206,2207,2208,2209,2210,2211,2212,393,2213,2214],[3882],{"_1869":1287,"_1870":2218,"_738":3883,"_1873":59},[2220,393,2221,393,2222,2223,2224,2225,393,2226,2227,393,2228,2229,2230,2024,393,2231,2232,2230,2024,393,2233,2234,2230,2024,393,2235,2236,2237,2238,2239,2024,2026,393,2240,2241,2242,2243,2244,2230,2024,393,2245,2230,2024,393,2246,2230,2024,393,2247,2248,2249,2250,2251,2252,2253,2237,2238,2254,2255,2256,2257,2024,2026,393,2258,2259,2260,2261,2262,2263,2264,2265,2266,2267,2268,2269,2270,2271,2272,2273,2274,2270,2275,2276,2277,2278,2279,2272,2273,2280,2281,2282,2265,2026,393,2283,2284,2285,2286,393,2287,2288,2289,2290,2291,2292,2293,2294,2295,2296,2281,2297,393,2298,393,2299,393,2300,393,2301,2302,2303,2304,2305,393,2306,2285,2307,2308,393,2309,393,2310,2311,2312,2313,2314,2315,2316,2317,2318,2319,393,2320,393,2321,2305,393,2322,2285,2307,2323,393,2309,393,2310,2311,2312,2324,2314,2315,2316,2317,2318,2319,393,2325,2326,2327,2328,2329,2330,2331,2318,2332,2305,2333],[3885],{"_1869":1287,"_1870":2337,"_738":3886,"_1873":59},[2339,2340,2341,2342,2343,2344,2345,2346,2347,2348,2349,2350,2351,2352,393,2353,2354,2355,2356,2357,2358,2359,2360,2361,2362,393,2363,2364,2365,2366,2367,2368,2369,2026,393,2370,2371,2026,393,2372,2373,2026,393,2374,2375,2026,393,2376,2377,2378,2379,2380,2381,2382,2383,2384,2385,2026,393,2386,2387,2026,393,2388,2389,2390,2391,2392,2393,393,2394,2395,2396,2397,2398,2399,2024,2400,2401,2398,2399,2024,393,2402,2403,2404,2405,2406,2407,2408,2026,393,2409,2389,2410,2411,2412,2413,2414,393,2415,2416,2417,2024,393,2400,2394,2418,2419,2420,2421,2305,393,2422,2423,2424,2425,2024,2426,2026,393,2427,2428,2026,393,2429,2430,2431,2432,2433,2434,2435,2436,2437,2438,2439,2440,2441,2442,2443,2378,2444,2445,2446,2447,2448,2449,2450,2451,2452,2453,2454,2455,2456,2457,2385,2458,2026,393,2459,2379,2380,2381,2382,2460,2385,2026,393,2461,2462,2026,393,2463,2464,2465,2466,2467,2468,2407,2026,393,2469,2470,2442,2443,2471,2472,393,2473,2474,2396,2397,2475,2399,2024,2400,2401,2475,2399,2024,393,2464,2476,2477,2478,2479,2480,2481,2482,2483,2484,2485,2486,2487,2264,2407,2026,393,2488,2470,2489,2490,2443,2412,2491,2492,393,2400,2493,2494,2495,2496,2497,2421,2305,393,2498,2499,2424,2500,2024,2501,2026,393,2502,2503,2504,2505,2506,2507,2508,2509,2510,2511,393,2512,2513,2514,2515,2516,2517,2378,2518,2519,2520,2521,2522,2523,2524,2525,2526,2527,393,2528,2529,2026,393,2530,2531,2532,2533,393,2534,2535,2536,2537,2538,2539,2540,2541,2542,2543,2544,2545,2546,2547,2548,2549,2550,2551,2552,2553,2554,2555,2556,2557,2558,2559,2560,2024,2561,2562,2563,2564,2565,2566,2567,2026,393,2568,2470,2442,2443,2569,2570,2571,2572,2573,2574,2575,2400,2576,2577,2578,2579,2580,2581,2582,2583,2584,2585,2586,2587,2588,2589,2590,2591,2592,2593,2594,2595,2596,2597,2598,2599,2600,2601,2602,2603,2604,2558,2024,2535,2605,2606,2607,2608,2609,2610,2611,2612,2613,2614,2615,2616,2558,2617,2618,2619,2620,2621,2622,2623,2624,2625,2626,2627,2628,2629,2630,2631,2632,2633,2634,2635,2636,2637,2638,2639,2640,2641,2642,2643,2644,2645,2646,2647,2648,2649,2650,2651,2652,2653,2654,2655,2656,2657,2658,2659,2660,2318,2661,2559,2662,2024,2026,393,2663,2430,2431,2664,2441,2390,2378,2665,2535,2666,2605,2606,2667,2608,2609,2611,2668,2669,2670,2671,2672,2673,2674,2479,2675,2676,2487,2677,2661,2678,2559,2399,2024,2026,393,2679,2514,2515,2680,2681,2517,2378,2682,2535,2536,2666,2683,2684,2685,2686,2687,2688,2689,2690,2691,2692,2693,2694,2695,2696,2697,2698,2699,2700,2701,2702,2332,2559,2703,2024,2026,393,2704,2470,2489,2490,2443,2378,2705,2706,2707,2708,2709,2710,2711,2566,2026,393,2712,2430,2431,2664,2441,2410,2378,2713,2714,2026,393,2715,2716,2717,2718,2719,2720,2721,2722,2723,2724,2725,2726,2601,2727,2728,2024,393,2729,2730,2731,2024,2732,2733,2024,2734,2735,2024,2736,2737,2024,2738,2578,2739,2740,2741,2742,2743,2744,2745,2746,2558,2747,2026,393,2748,2738,2578,2749,2581,2750,2751,2752,2744,2745,2753,2558,2747,2026,393,2754,2755,2756,2026,393,2757,2758,2026,393,2759,2489,2760,2761,2378,2762,2763,2764,2765,2379,2766,2767,2768,2769,2770,2771,2772,2385,2026,393,2773,2513,2489,2760,2774,2378,2762,2775,2776,2777,2778,2779,2780,2566,2781,393,2535,2782,2783,2784,2785,2786,2787,2788,393,2789,393,2790,2791,2792,2793,2794,2795,2319,2796,2797,2798,2799,2800,2801,2802,2803,2596,2558,393,2804,2805,2806,2807,2808,2809,2810,2811,2812,2813,2814,2815,2816,2817,2818,2819,2820,2821,2822,393,2823,2824,2825,2826,2827,2332,2559,2828,2024,2026,393,2829,2830,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,2024,2842,2843,2844,2845,2305,2026],[3888,3889,3890,3891,3892,3893,3894,3895,3896,3897,3898],{"_1818":46,"_46":2876},{"_1818":2859,"_256":2334,"_1869":2874,"_1870":2875},{"_1818":2859,"_256":2334,"_1869":2872,"_1870":2873},{"_1818":46,"_46":2871},{"_1818":2859,"_256":2215,"_1869":2869,"_1870":2870},{"_1818":2859,"_256":2215,"_1869":2867,"_1870":2868},{"_1818":46,"_46":2866},{"_1818":2859,"_256":1863,"_1869":2864,"_1870":2865},{"_1818":2859,"_256":1863,"_1869":2862,"_1870":2863},{"_1818":2859,"_256":1863,"_1869":2860,"_1870":2861},{"_1818":46,"_46":2858},[4843,4844,4845],[],{"_1823":1824,"_46":1825,"_1826":1827},{"_1797":4834},{"_517":4833},{"_517":4028},{"_488":489,"_479":490,"_491":492,"_493":15,"_494":59,"_495":15,"_496":497,"_498":499,"_500":450,"_501":128,"_502":503,"_504":130,"_505":506,"_507":-5,"_508":-5,"_509":4027,"_511":512,"_513":32,"_514":32,"_515":32},{"_42":124,"_376":377,"_378":379,"_380":15,"_381":382,"_383":384,"_385":4016,"_387":-5,"_388":-5,"_389":15,"_390":4017,"_392":393,"_394":393,"_395":4018,"_397":4019,"_399":4020,"_401":-5,"_402":403,"_404":405,"_406":407,"_408":4021,"_55":-5,"_120":410,"_411":4022,"_413":4023,"_415":416,"_417":15,"_418":15},{"_134":4009},[3909,3910,3911,3912,3913,3914,3915,3916,3917,3918,3919,3920,3921,3922,3923,3924,3925,3926,3927,3928,3929,3930,3931,3932,3933,3934,3935,3936,3937,3938,3939,3940,3941,3942,3943,3944,3945,3946,3947,3948,3949,3950,3951,3952,3953,3954,3955,3956,3957,3958,3959,3960,3961,3962,3963,3964,3965,3966,3967,3968,3969,3970,3971,3972,3973,3974,3975,3976,3977,3978,3979,3980,3981,3982,3983,3984,3985,3986,3987,3988,3989,3990,3991,3992,3993,3994,3995,3996,3997,3998,3999,4000,4001,4002,4003,4004,4005,4006,4007,4008],{"_243":355,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":354,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":353,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":352,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":351,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":350,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":349,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":348,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":347,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":346,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":345,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":344,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":343,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":342,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":341,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":340,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":339,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":338,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":337,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":336,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":335,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":334,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":333,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":332,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":331,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":330,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":329,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":328,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":327,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":326,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":325,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":324,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":323,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":322,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":321,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":320,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":319,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":318,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":317,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":316,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":315,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":314,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":313,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":312,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":311,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":310,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":309,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":308,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":307,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":306,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":305,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":304,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":303,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":302,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":301,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":300,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":299,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":298,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":297,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":296,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":295,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":294,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":293,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":292,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":291,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":290,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":289,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":288,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":287,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":286,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":285,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":284,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":283,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":282,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":281,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":280,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":279,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":278,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":277,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":276,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":275,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":274,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":273,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":272,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":271,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":270,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":269,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":268,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":267,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":266,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":265,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":264,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":263,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":262,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":261,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":260,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":259,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":258,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":257,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},{"_243":244,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":32,"_256":-5},[4010,4011,4012],{"_360":4015,"_362":373},{"_360":4014,"_362":369},{"_360":4013,"_362":363},{"_364":365,"_93":366,"_120":367},{"_364":370,"_93":366,"_120":371},{"_364":374,"_93":366,"_120":375},{"_481":482,"_483":69,"_484":-5,"_485":-5,"_486":-5,"_487":-5},[440],{"_440":4024},{"_422":423,"_424":425,"_426":427,"_428":429,"_430":431,"_432":433,"_434":435,"_436":437,"_438":439},{},[],{"_421":59},{"_419":59,"_420":393},{"_42":442,"_364":443,"_444":4025,"_446":379,"_447":448,"_449":450,"_451":452,"_453":454,"_455":456,"_457":458,"_459":-5,"_460":-5,"_461":-5,"_462":-5,"_463":-5,"_464":-5,"_465":-5,"_255":466,"_467":-5,"_55":4026},{"_473":474,"_42":475,"_93":476,"_477":478,"_479":480},{"_469":15,"_470":15,"_471":15,"_472":15},{"_473":474,"_364":474,"_516":-5,"_477":478,"_42":475},[4029,4030,4031,4032,4033,4034,4035,4036,4037,4038,4039,4040,4041,4042,4043,4044,4045,4046,4047,4048,4049,4050,4051,4052,4053,4054,4055,4056,4057,4058,4059,4060,4061,4062,4063,4064,4065,4066,4067,4068,4069,4070,4071,4072,4073,4074,4075,4076,4077,4078,4079,4080,4081,4082,4083,4084,4085,4086,4087,4088,4089,4090,4091,4092,4093,4094,4095,4096,4097,4098,4099,4100,4101,4102,4103,4104,4105,4106,4107,4108,4109,4110,4111,4112,4113,4114,4115,4116,4117,4118,4119,4120,4121,4122,4123,4124,4125,4126,4127,4128,4129,4130,4131,4132,4133,4134,4135,4136,4137,4138,4139,4140,4141,4142,4143,4144,4145,4146,4147,4148,4149,4150,4151,4152,4153,4154,4155,4156,4157,4158,4159,4160,4161,4162,4163,4164,4165,4166,4167,4168,4169,4170,4171,4172,4173,4174,4175,4176,4177,4178,4179,4180,4181,4182,4183,4184,4185,4186,4187,4188,4189,4190,4191,4192,4193,4194,4195,4196,4197,4198,4199,4200,4201,4202,4203,4204,4205,4206,4207,4208,4209,4210,4211,4212,4213,4214,4215,4216,4217,4218,4219,4220,4221,4222],{"_249":1770,"_714":4829},{"_249":729,"_714":4826},{"_249":1760,"_714":4823},{"_249":733,"_714":4818},{"_249":733,"_714":4813},{"_249":733,"_714":4809},{"_249":748,"_714":4804},{"_249":748,"_714":4800},{"_249":733,"_714":4797},{"_249":733,"_714":4795},{"_249":733,"_714":4793},{"_249":748,"_714":4789},{"_249":733,"_714":4787},{"_249":733,"_714":4785},{"_249":748,"_714":4781},{"_249":748,"_714":4777},{"_249":733,"_714":4774},{"_249":733,"_714":4772},{"_249":733,"_714":4770},{"_249":733,"_714":4768},{"_249":748,"_714":4764},{"_249":733,"_714":4762},{"_249":748,"_714":4757},{"_249":733,"_714":4755},{"_249":748,"_714":4751},{"_249":733,"_714":4749},{"_249":748,"_714":4745},{"_249":733,"_714":4741},{"_249":733,"_714":4739},{"_249":748,"_714":4735},{"_249":733,"_714":4733},{"_249":748,"_714":4729},{"_249":733,"_714":4726},{"_249":733,"_714":4724},{"_249":748,"_714":4717},{"_249":733,"_714":4715},{"_249":748,"_714":4711},{"_249":733,"_714":4707},{"_249":733,"_714":4705},{"_249":748,"_714":4701},{"_249":733,"_714":4699},{"_249":748,"_714":4695},{"_249":733,"_714":4692},{"_249":733,"_714":4690},{"_249":748,"_714":4685},{"_249":733,"_714":4683},{"_249":733,"_714":4681},{"_249":748,"_714":4677},{"_249":733,"_714":4675},{"_249":748,"_714":4671},{"_249":733,"_714":4667},{"_249":733,"_714":4665},{"_249":748,"_714":4660},{"_249":733,"_714":4658},{"_249":748,"_714":4654},{"_249":733,"_714":4650},{"_249":733,"_714":4648},{"_249":748,"_714":4644},{"_249":733,"_714":4642},{"_249":733,"_714":4640},{"_249":748,"_714":4635},{"_249":733,"_714":4633},{"_249":748,"_714":4629},{"_249":733,"_714":4626},{"_249":733,"_714":4624},{"_249":748,"_714":4619},{"_249":733,"_714":4617},{"_249":748,"_714":4613},{"_249":733,"_714":4610},{"_249":733,"_714":4608},{"_249":748,"_714":4602},{"_249":733,"_714":4600},{"_249":748,"_714":4596},{"_249":733,"_714":4593},{"_249":733,"_714":4591},{"_249":748,"_714":4586},{"_249":733,"_714":4584},{"_249":748,"_714":4580},{"_249":733,"_714":4577},{"_249":733,"_714":4575},{"_249":748,"_714":4571},{"_249":733,"_714":4569},{"_249":748,"_714":4565},{"_249":733,"_714":4562},{"_249":733,"_714":4560},{"_249":748,"_714":4555},{"_249":733,"_714":4553},{"_249":748,"_714":4549},{"_249":733,"_714":4546},{"_249":733,"_714":4544},{"_249":733,"_714":4542},{"_249":748,"_714":4538},{"_249":748,"_714":4534},{"_249":733,"_714":4530},{"_249":733,"_714":4528},{"_249":733,"_714":4526},{"_249":748,"_714":4522},{"_249":748,"_714":4518},{"_249":733,"_714":4514},{"_249":733,"_714":4512},{"_249":748,"_714":4508},{"_249":733,"_714":4506},{"_249":748,"_714":4502},{"_249":733,"_714":4499},{"_249":733,"_714":4497},{"_249":733,"_714":4495},{"_249":748,"_714":4491},{"_249":733,"_714":4488},{"_249":733,"_714":4486},{"_249":733,"_714":4484},{"_249":748,"_714":4480},{"_249":748,"_714":4476},{"_249":733,"_714":4472},{"_249":733,"_714":4470},{"_249":733,"_714":4468},{"_249":748,"_714":4464},{"_249":748,"_714":4460},{"_249":733,"_714":4457},{"_249":733,"_714":4455},{"_249":748,"_714":4451},{"_249":733,"_714":4449},{"_249":748,"_714":4445},{"_249":733,"_714":4442},{"_249":733,"_714":4440},{"_249":748,"_714":4435},{"_249":733,"_714":4433},{"_249":748,"_714":4429},{"_249":733,"_714":4426},{"_249":733,"_714":4424},{"_249":733,"_714":4422},{"_249":748,"_714":4418},{"_249":748,"_714":4414},{"_249":733,"_714":4410},{"_249":733,"_714":4408},{"_249":733,"_714":4406},{"_249":748,"_714":4402},{"_249":733,"_714":4399},{"_249":733,"_714":4397},{"_249":733,"_714":4395},{"_249":748,"_714":4391},{"_249":748,"_714":4387},{"_249":733,"_714":4384},{"_249":733,"_714":4382},{"_249":748,"_714":4378},{"_249":733,"_714":4376},{"_249":748,"_714":4372},{"_249":733,"_714":4368},{"_249":733,"_714":4366},{"_249":733,"_714":4364},{"_249":748,"_714":4360},{"_249":748,"_714":4356},{"_249":733,"_714":4353},{"_249":733,"_714":4351},{"_249":733,"_714":4349},{"_249":733,"_714":4347},{"_249":748,"_714":4343},{"_249":733,"_714":4341},{"_249":748,"_714":4337},{"_249":748,"_714":4333},{"_249":733,"_714":4329},{"_249":733,"_714":4327},{"_249":748,"_714":4323},{"_249":733,"_714":4321},{"_249":748,"_714":4317},{"_249":733,"_714":4314},{"_249":733,"_714":4312},{"_249":748,"_714":4308},{"_249":733,"_714":4306},{"_249":748,"_714":4302},{"_249":733,"_714":4299},{"_249":733,"_714":4297},{"_249":748,"_714":4290},{"_249":733,"_714":4288},{"_249":748,"_714":4284},{"_249":733,"_714":4281},{"_249":733,"_714":4279},{"_249":748,"_714":4275},{"_249":733,"_714":4273},{"_249":748,"_714":4269},{"_249":733,"_714":4265},{"_249":733,"_714":4263},{"_249":748,"_714":4259},{"_249":733,"_714":4257},{"_249":748,"_714":4253},{"_249":733,"_714":4250},{"_249":733,"_714":4248},{"_249":748,"_714":4244},{"_249":733,"_714":4242},{"_249":748,"_714":4238},{"_249":733,"_714":4234},{"_249":748,"_714":4232},{"_249":733,"_714":4228},{"_249":729,"_714":4226},{"_249":713,"_714":4223},{"_716":717,"_88":4224},{"_719":720,"_721":722,"_104":-5,"_42":723,"_724":4225,"_726":727,"_728":114},[],{"_728":4227,"_716":717},{"_93":732},{"_735":4229,"_716":717,"_737":723},{"_738":4230,"_740":-5,"_42":-5,"_741":-5,"_742":743,"_97":94,"_93":744},[4231],{"_46":746,"_93":747},{"_735":4233,"_716":717,"_737":723},{"_42":751,"_742":743,"_46":746,"_93":752},{"_735":4235,"_716":717,"_737":723},{"_738":-5,"_755":756,"_42":-5,"_741":-5,"_757":4236,"_93":759},[4237],{"_46":761,"_93":762},{"_735":4239,"_716":717,"_737":723},{"_738":4240,"_42":766,"_757":4241,"_93":759},[],[761],{"_735":4243,"_716":717,"_737":723},{"_770":771,"_42":-5,"_741":-5,"_772":773,"_93":774},{"_735":4245,"_716":717,"_737":723},{"_777":778,"_779":780,"_781":4246,"_783":784,"_721":32,"_785":32,"_42":771,"_786":787,"_788":789,"_728":114,"_93":790},[4247],{"_779":792,"_93":793},{"_735":4249,"_716":717,"_737":723},{"_796":797,"_770":771,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4251,"_716":717,"_737":723},{"_738":-5,"_755":803,"_42":-5,"_741":-5,"_757":4252,"_93":759},[],{"_735":4254,"_716":717,"_737":723},{"_738":4255,"_42":808,"_757":4256,"_93":759},[],[],{"_735":4258,"_716":717,"_737":723},{"_770":812,"_42":-5,"_741":-5,"_772":813,"_93":774},{"_735":4260,"_716":717,"_737":723},{"_777":816,"_779":817,"_781":4261,"_783":784,"_721":32,"_785":32,"_42":812,"_786":819,"_788":789,"_728":114,"_93":790},[4262],{"_779":821,"_93":793},{"_735":4264,"_716":717,"_737":723},{"_796":824,"_770":812,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4266,"_716":717,"_737":723},{"_738":-5,"_755":827,"_42":-5,"_741":-5,"_757":4267,"_93":759},[4268],{"_46":830,"_93":762},{"_735":4270,"_716":717,"_737":723},{"_738":4271,"_42":834,"_757":4272,"_93":759},[],[830],{"_735":4274,"_716":717,"_737":723},{"_770":838,"_42":-5,"_741":-5,"_772":839,"_93":774},{"_735":4276,"_716":717,"_737":723},{"_777":842,"_779":843,"_781":4277,"_783":784,"_721":32,"_785":32,"_42":838,"_786":845,"_788":789,"_728":114,"_93":790},[4278],{"_779":847,"_93":793},{"_735":4280,"_716":717,"_737":723},{"_796":850,"_770":838,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4282,"_716":717,"_737":723},{"_738":-5,"_755":853,"_42":-5,"_741":-5,"_757":4283,"_93":759},[],{"_735":4285,"_716":717,"_737":723},{"_738":4286,"_42":858,"_757":4287,"_93":759},[],[],{"_735":4289,"_716":717,"_737":723},{"_770":862,"_42":-5,"_741":-5,"_772":863,"_93":774},{"_735":4291,"_716":717,"_737":723},{"_866":-5,"_796":4292,"_721":868,"_104":-5,"_42":862,"_869":-5,"_870":-5,"_871":4293,"_873":874,"_728":114,"_875":874,"_93":876},{"_496":881,"_498":882},{"_877":-5,"_738":4294,"_879":4295},[4296],{"_496":881,"_498":882},{"_93":46,"_46":884},{"_735":4298,"_716":717,"_737":723},{"_796":887,"_770":862,"_42":-5,"_741":-5,"_364":874,"_799":888,"_93":800},{"_735":4300,"_716":717,"_737":723},{"_738":-5,"_755":891,"_42":-5,"_741":-5,"_757":4301,"_93":759},[],{"_735":4303,"_716":717,"_737":723},{"_738":4304,"_42":896,"_757":4305,"_93":759},[],[],{"_735":4307,"_716":717,"_737":723},{"_770":900,"_42":-5,"_741":-5,"_772":901,"_93":774},{"_735":4309,"_716":717,"_737":723},{"_777":904,"_779":905,"_781":4310,"_783":784,"_721":32,"_785":32,"_42":900,"_786":907,"_788":789,"_728":114,"_93":790},[4311],{"_779":909,"_93":793},{"_735":4313,"_716":717,"_737":723},{"_796":912,"_770":900,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4315,"_716":717,"_737":723},{"_738":-5,"_755":915,"_42":-5,"_741":-5,"_757":4316,"_93":759},[],{"_735":4318,"_716":717,"_737":723},{"_738":4319,"_42":920,"_757":4320,"_93":759},[],[],{"_735":4322,"_716":717,"_737":723},{"_770":924,"_42":-5,"_741":-5,"_772":925,"_93":774},{"_735":4324,"_716":717,"_737":723},{"_777":928,"_779":929,"_781":4325,"_783":784,"_721":32,"_785":32,"_42":924,"_786":931,"_788":789,"_728":114,"_93":790},[4326],{"_779":933,"_93":793},{"_735":4328,"_716":717,"_737":723},{"_796":936,"_770":924,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4330,"_716":717,"_737":723},{"_738":-5,"_755":939,"_42":-5,"_741":-5,"_757":4331,"_93":759},[4332],{"_46":942,"_93":762},{"_735":4334,"_716":717,"_737":723},{"_738":4335,"_42":946,"_757":4336,"_93":759},[],[942],{"_735":4338,"_716":717,"_737":723},{"_777":950,"_779":951,"_781":4339,"_783":784,"_721":953,"_785":32,"_42":954,"_786":955,"_788":789,"_728":114,"_93":790},[4340],{"_779":957,"_93":793},{"_735":4342,"_716":717,"_737":723},{"_770":954,"_42":-5,"_741":-5,"_772":960,"_93":774},{"_735":4344,"_716":717,"_737":723},{"_777":963,"_779":964,"_781":4345,"_783":784,"_721":966,"_785":32,"_42":967,"_786":968,"_788":789,"_728":114,"_93":790},[4346],{"_779":970,"_93":793},{"_735":4348,"_716":717,"_737":723},{"_770":967,"_42":-5,"_741":-5,"_772":973,"_93":774},{"_735":4350,"_716":717,"_737":723},{"_796":976,"_770":954,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4352,"_716":717,"_737":723},{"_796":979,"_770":967,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4354,"_716":717,"_737":723},{"_738":-5,"_755":982,"_42":-5,"_741":-5,"_757":4355,"_93":759},[],{"_735":4357,"_716":717,"_737":723},{"_738":4358,"_42":987,"_757":4359,"_93":759},[],[],{"_735":4361,"_716":717,"_737":723},{"_777":991,"_779":992,"_781":4362,"_783":784,"_721":994,"_785":32,"_42":995,"_786":996,"_788":789,"_728":114,"_93":790},[4363],{"_779":998,"_93":793},{"_735":4365,"_716":717,"_737":723},{"_770":995,"_42":-5,"_741":-5,"_772":1001,"_93":774},{"_735":4367,"_716":717,"_737":723},{"_796":1004,"_770":995,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4369,"_716":717,"_737":723},{"_738":-5,"_755":1007,"_42":-5,"_741":-5,"_757":4370,"_93":759},[4371],{"_46":1010,"_93":762},{"_735":4373,"_716":717,"_737":723},{"_738":4374,"_42":1014,"_757":4375,"_93":759},[],[1010],{"_735":4377,"_716":717,"_737":723},{"_770":1018,"_42":-5,"_741":-5,"_772":1019,"_93":774},{"_735":4379,"_716":717,"_737":723},{"_777":1022,"_779":1023,"_781":4380,"_783":784,"_721":32,"_785":32,"_42":1018,"_786":1025,"_788":789,"_728":114,"_93":790},[4381],{"_779":1027,"_93":793},{"_735":4383,"_716":717,"_737":723},{"_796":1030,"_770":1018,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4385,"_716":717,"_737":723},{"_738":-5,"_755":1033,"_42":-5,"_741":-5,"_757":4386,"_93":759},[],{"_735":4388,"_716":717,"_737":723},{"_738":4389,"_42":1038,"_757":4390,"_93":759},[],[],{"_735":4392,"_716":717,"_737":723},{"_777":950,"_779":951,"_781":4393,"_783":784,"_721":1043,"_785":32,"_42":1044,"_786":1045,"_788":789,"_728":114,"_93":790},[4394],{"_779":957,"_93":793},{"_735":4396,"_716":717,"_737":723},{"_770":1049,"_42":-5,"_741":-5,"_772":1050,"_93":774},{"_735":4398,"_716":717,"_737":723},{"_796":1053,"_770":1049,"_42":-5,"_741":-5,"_364":1054,"_799":-5,"_93":800},{"_735":4400,"_716":717,"_737":723},{"_738":-5,"_755":1057,"_42":-5,"_741":-5,"_757":4401,"_93":759},[],{"_735":4403,"_716":717,"_737":723},{"_738":4404,"_42":1062,"_757":4405,"_93":759},[],[],{"_735":4407,"_716":717,"_737":723},{"_770":1044,"_42":-5,"_741":-5,"_772":1066,"_93":774},{"_735":4409,"_716":717,"_737":723},{"_796":1069,"_770":1044,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4411,"_716":717,"_737":723},{"_738":-5,"_755":1072,"_42":-5,"_741":-5,"_757":4412,"_93":759},[4413],{"_46":1075,"_93":762},{"_735":4415,"_716":717,"_737":723},{"_738":4416,"_42":1079,"_757":4417,"_93":759},[],[1075],{"_735":4419,"_716":717,"_737":723},{"_777":1083,"_779":964,"_781":4420,"_783":784,"_721":1085,"_785":32,"_42":1086,"_786":1087,"_788":789,"_728":114,"_93":790},[4421],{"_779":970,"_93":793},{"_735":4423,"_716":717,"_737":723},{"_770":1086,"_42":-5,"_741":-5,"_772":1091,"_93":774},{"_735":4425,"_716":717,"_737":723},{"_796":1094,"_770":1086,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4427,"_716":717,"_737":723},{"_738":-5,"_755":1097,"_42":-5,"_741":-5,"_757":4428,"_93":759},[],{"_735":4430,"_716":717,"_737":723},{"_738":4431,"_42":1102,"_757":4432,"_93":759},[],[],{"_735":4434,"_716":717,"_737":723},{"_770":1106,"_42":-5,"_741":-5,"_772":1107,"_93":774},{"_735":4436,"_716":717,"_737":723},{"_777":1110,"_779":1111,"_781":4437,"_783":784,"_721":32,"_785":32,"_42":1106,"_786":1113,"_788":789,"_728":114,"_93":790},[4438,4439],{"_779":1120,"_364":1117,"_256":1121,"_93":1119},{"_779":1116,"_364":1117,"_256":1118,"_93":1119},{"_735":4441,"_716":717,"_737":723},{"_796":1124,"_770":1106,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4443,"_716":717,"_737":723},{"_738":-5,"_755":1127,"_42":-5,"_741":-5,"_757":4444,"_93":759},[],{"_735":4446,"_716":717,"_737":723},{"_738":4447,"_42":1132,"_757":4448,"_93":759},[],[],{"_735":4450,"_716":717,"_737":723},{"_770":1136,"_42":-5,"_741":-5,"_772":1137,"_93":774},{"_735":4452,"_716":717,"_737":723},{"_777":1140,"_779":1141,"_781":4453,"_783":784,"_721":32,"_785":32,"_42":1136,"_786":1143,"_788":789,"_728":114,"_93":790},[4454],{"_779":1145,"_256":1146,"_93":1147},{"_735":4456,"_716":717,"_737":723},{"_796":1150,"_770":1136,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4458,"_716":717,"_737":723},{"_738":-5,"_755":1153,"_42":-5,"_741":-5,"_757":4459,"_93":759},[],{"_735":4461,"_716":717,"_737":723},{"_738":4462,"_42":1158,"_757":4463,"_93":759},[],[],{"_735":4465,"_716":717,"_737":723},{"_777":1162,"_779":1163,"_781":4466,"_783":784,"_721":1165,"_785":32,"_42":1166,"_786":1167,"_788":789,"_728":114,"_93":790},[4467],{"_779":1169,"_93":793},{"_735":4469,"_716":717,"_737":723},{"_770":1166,"_42":-5,"_741":-5,"_772":1172,"_93":774},{"_735":4471,"_716":717,"_737":723},{"_796":1175,"_770":1166,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4473,"_716":717,"_737":723},{"_738":-5,"_755":1178,"_42":-5,"_741":-5,"_757":4474,"_93":759},[4475],{"_46":1181,"_93":762},{"_735":4477,"_716":717,"_737":723},{"_738":4478,"_42":1185,"_757":4479,"_93":759},[],[1181],{"_735":4481,"_716":717,"_737":723},{"_777":1189,"_779":1190,"_781":4482,"_783":784,"_721":1192,"_785":32,"_42":1193,"_786":1194,"_788":789,"_728":114,"_93":790},[4483],{"_779":1196,"_93":793},{"_735":4485,"_716":717,"_737":723},{"_770":1199,"_42":-5,"_741":-5,"_772":1200,"_93":774},{"_735":4487,"_716":717,"_737":723},{"_796":1203,"_770":1199,"_42":-5,"_741":-5,"_364":1054,"_799":-5,"_93":800},{"_735":4489,"_716":717,"_737":723},{"_738":-5,"_755":1206,"_42":-5,"_741":-5,"_757":4490,"_93":759},[],{"_735":4492,"_716":717,"_737":723},{"_738":4493,"_42":1211,"_757":4494,"_93":759},[],[],{"_735":4496,"_716":717,"_737":723},{"_770":1193,"_42":-5,"_741":-5,"_772":1215,"_93":774},{"_735":4498,"_716":717,"_737":723},{"_796":1218,"_770":1193,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4500,"_716":717,"_737":723},{"_738":-5,"_755":1221,"_42":-5,"_741":-5,"_757":4501,"_93":759},[],{"_735":4503,"_716":717,"_737":723},{"_738":4504,"_42":1226,"_757":4505,"_93":759},[],[],{"_735":4507,"_716":717,"_737":723},{"_770":1230,"_42":-5,"_741":-5,"_772":1231,"_93":774},{"_735":4509,"_716":717,"_737":723},{"_777":1234,"_779":1235,"_781":4510,"_783":784,"_721":32,"_785":32,"_42":1230,"_786":1237,"_788":789,"_728":114,"_93":790},[4511],{"_779":1239,"_93":793},{"_735":4513,"_716":717,"_737":723},{"_796":1242,"_770":1230,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4515,"_716":717,"_737":723},{"_738":-5,"_755":1245,"_42":-5,"_741":-5,"_757":4516,"_93":759},[4517],{"_46":1248,"_93":762},{"_735":4519,"_716":717,"_737":723},{"_738":4520,"_42":1252,"_757":4521,"_93":759},[],[1248],{"_735":4523,"_716":717,"_737":723},{"_777":1256,"_779":1257,"_781":4524,"_783":784,"_721":1259,"_785":32,"_42":1260,"_786":1261,"_788":789,"_728":114,"_93":790},[4525],{"_779":1263,"_93":793},{"_735":4527,"_716":717,"_737":723},{"_770":1260,"_42":-5,"_741":-5,"_772":1266,"_93":774},{"_735":4529,"_716":717,"_737":723},{"_796":1269,"_770":1260,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4531,"_716":717,"_737":723},{"_738":-5,"_755":1272,"_42":-5,"_741":-5,"_757":4532,"_93":759},[4533],{"_46":1275,"_93":762},{"_735":4535,"_716":717,"_737":723},{"_738":4536,"_42":1279,"_757":4537,"_93":759},[],[1275],{"_735":4539,"_716":717,"_737":723},{"_777":1283,"_779":1284,"_781":4540,"_783":784,"_721":1286,"_785":1287,"_42":1288,"_786":1289,"_788":789,"_728":1290,"_93":790},[4541],{"_779":1292,"_93":793},{"_735":4543,"_716":717,"_737":723},{"_770":1288,"_42":-5,"_741":-5,"_772":1295,"_93":774},{"_735":4545,"_716":717,"_737":723},{"_796":1298,"_770":1288,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4547,"_716":717,"_737":723},{"_738":-5,"_755":1301,"_42":-5,"_741":-5,"_757":4548,"_93":759},[],{"_735":4550,"_716":717,"_737":723},{"_738":4551,"_42":1306,"_757":4552,"_93":759},[],[],{"_735":4554,"_716":717,"_737":723},{"_770":1310,"_42":-5,"_741":-5,"_364":-5,"_772":1311,"_93":1312},{"_735":4556,"_716":717,"_737":723},{"_1315":4557,"_42":1310,"_728":114,"_93":1317},[4558],{"_508":1319,"_9":4559,"_256":1321},{"_1322":-5,"_93":1323},{"_735":4561,"_716":717,"_737":723},{"_770":1310,"_42":-5,"_1326":1327,"_741":-5,"_364":1328,"_799":-5,"_728":114,"_93":1329},{"_735":4563,"_716":717,"_737":723},{"_738":-5,"_755":1332,"_42":-5,"_741":-5,"_757":4564,"_93":759},[],{"_735":4566,"_716":717,"_737":723},{"_738":4567,"_42":1337,"_757":4568,"_93":759},[],[],{"_735":4570,"_716":717,"_737":723},{"_770":1341,"_42":-5,"_741":-5,"_772":1342,"_93":774},{"_735":4572,"_716":717,"_737":723},{"_777":1345,"_779":1346,"_781":4573,"_783":784,"_721":32,"_785":32,"_42":1341,"_786":1348,"_788":789,"_728":114,"_93":790},[4574],{"_779":1350,"_364":1351,"_256":1321,"_93":1119},{"_735":4576,"_716":717,"_737":723},{"_796":1354,"_770":1341,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4578,"_716":717,"_737":723},{"_738":-5,"_755":1357,"_42":-5,"_741":-5,"_757":4579,"_93":759},[],{"_735":4581,"_716":717,"_737":723},{"_738":4582,"_42":1362,"_757":4583,"_93":759},[],[],{"_735":4585,"_716":717,"_737":723},{"_770":1366,"_42":-5,"_741":-5,"_364":-5,"_772":1311,"_93":1312},{"_735":4587,"_716":717,"_737":723},{"_1315":4588,"_42":1366,"_728":114,"_93":1317},[4589],{"_508":1371,"_9":4590,"_256":1321},{"_1322":-5,"_93":1323},{"_735":4592,"_716":717,"_737":723},{"_770":1366,"_42":-5,"_1326":1375,"_741":-5,"_364":1328,"_799":-5,"_728":114,"_93":1329},{"_735":4594,"_716":717,"_737":723},{"_738":-5,"_755":1378,"_42":-5,"_741":-5,"_757":4595,"_93":759},[],{"_735":4597,"_716":717,"_737":723},{"_738":4598,"_42":1383,"_757":4599,"_93":759},[],[],{"_735":4601,"_716":717,"_737":723},{"_770":1387,"_42":-5,"_741":-5,"_772":1388,"_93":774},{"_735":4603,"_716":717,"_737":723},{"_777":1391,"_779":1392,"_781":4604,"_783":784,"_721":32,"_785":32,"_42":1387,"_786":1394,"_788":789,"_728":114,"_93":790},[4605,4606,4607],{"_779":1400,"_364":1351,"_256":1321,"_93":1119},{"_779":1399,"_364":1351,"_256":1321,"_93":1119},{"_779":1398,"_364":1351,"_256":1321,"_93":1119},{"_735":4609,"_716":717,"_737":723},{"_796":1403,"_770":1387,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4611,"_716":717,"_737":723},{"_738":-5,"_755":1406,"_42":-5,"_741":-5,"_757":4612,"_93":759},[],{"_735":4614,"_716":717,"_737":723},{"_738":4615,"_42":1411,"_757":4616,"_93":759},[],[],{"_735":4618,"_716":717,"_737":723},{"_770":1415,"_42":-5,"_741":-5,"_364":-5,"_772":1416,"_93":1312},{"_735":4620,"_716":717,"_737":723},{"_1315":4621,"_42":1415,"_728":114,"_93":1317},[4622],{"_508":1421,"_9":4623,"_256":1423},{"_1322":-5,"_93":1323},{"_735":4625,"_716":717,"_737":723},{"_770":1415,"_42":-5,"_1326":1426,"_741":-5,"_364":1328,"_799":-5,"_728":114,"_93":1329},{"_735":4627,"_716":717,"_737":723},{"_738":-5,"_755":1429,"_42":-5,"_741":-5,"_757":4628,"_93":759},[],{"_735":4630,"_716":717,"_737":723},{"_738":4631,"_42":1434,"_757":4632,"_93":759},[],[],{"_735":4634,"_716":717,"_737":723},{"_770":1438,"_42":-5,"_741":-5,"_364":-5,"_772":1439,"_93":1312},{"_735":4636,"_716":717,"_737":723},{"_1315":4637,"_42":1438,"_728":114,"_93":1317},[4638],{"_508":1444,"_9":4639,"_256":1446},{"_1322":-5,"_93":1323},{"_735":4641,"_716":717,"_737":723},{"_770":1438,"_42":-5,"_1326":1449,"_741":-5,"_364":1328,"_799":-5,"_728":114,"_93":1329},{"_735":4643,"_716":717,"_737":723},{"_770":1452,"_42":-5,"_741":-5,"_772":1453,"_93":774},{"_735":4645,"_716":717,"_737":723},{"_777":1456,"_779":1457,"_781":4646,"_783":784,"_721":32,"_785":32,"_42":1452,"_786":1459,"_788":789,"_728":114,"_93":790},[4647],{"_779":1461,"_364":1462,"_256":1446,"_93":1119},{"_735":4649,"_716":717,"_737":723},{"_796":1465,"_770":1452,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4651,"_716":717,"_737":723},{"_738":-5,"_755":1468,"_42":-5,"_741":-5,"_757":4652,"_93":759},[4653],{"_46":1471,"_93":762},{"_735":4655,"_716":717,"_737":723},{"_738":4656,"_42":1475,"_757":4657,"_93":759},[],[1471],{"_735":4659,"_716":717,"_737":723},{"_770":1479,"_42":-5,"_741":-5,"_364":-5,"_772":1439,"_93":1312},{"_735":4661,"_716":717,"_737":723},{"_1315":4662,"_42":1479,"_728":114,"_93":1317},[4663],{"_508":1484,"_9":4664,"_256":1446},{"_1322":-5,"_93":1323},{"_735":4666,"_716":717,"_737":723},{"_770":1479,"_42":-5,"_1326":1488,"_741":-5,"_364":1328,"_799":-5,"_728":114,"_93":1329},{"_735":4668,"_716":717,"_737":723},{"_738":-5,"_755":1491,"_42":-5,"_741":-5,"_757":4669,"_93":759},[4670],{"_46":1494,"_93":762},{"_735":4672,"_716":717,"_737":723},{"_738":4673,"_42":1498,"_757":4674,"_93":759},[],[1494],{"_735":4676,"_716":717,"_737":723},{"_770":1502,"_42":-5,"_741":-5,"_772":1503,"_93":774},{"_735":4678,"_716":717,"_737":723},{"_777":1506,"_779":1507,"_781":4679,"_783":784,"_721":32,"_785":32,"_42":1502,"_786":1509,"_788":789,"_728":114,"_93":790},[4680],{"_779":1511,"_364":1512,"_256":1513,"_93":1119},{"_735":4682,"_716":717,"_737":723},{"_796":1516,"_770":1502,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4684,"_716":717,"_737":723},{"_770":1519,"_42":-5,"_741":-5,"_772":1520,"_93":774},{"_735":4686,"_716":717,"_737":723},{"_777":1523,"_779":1524,"_781":4687,"_783":784,"_721":32,"_785":32,"_42":1519,"_786":1526,"_788":789,"_728":114,"_93":790},[4688,4689],{"_779":1530,"_256":1512,"_1531":1532,"_93":1533},{"_779":1529,"_364":1512,"_256":1513,"_93":1119},{"_735":4691,"_716":717,"_737":723},{"_796":1536,"_770":1519,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4693,"_716":717,"_737":723},{"_738":-5,"_755":1539,"_42":-5,"_741":-5,"_757":4694,"_93":759},[],{"_735":4696,"_716":717,"_737":723},{"_738":4697,"_42":1544,"_757":4698,"_93":759},[],[],{"_735":4700,"_716":717,"_737":723},{"_770":1548,"_42":-5,"_741":-5,"_772":1549,"_93":774},{"_735":4702,"_716":717,"_737":723},{"_777":1552,"_779":1553,"_781":4703,"_783":784,"_721":32,"_785":32,"_42":1548,"_786":1555,"_788":789,"_728":114,"_93":790},[4704],{"_779":1557,"_256":1558,"_1531":1559,"_93":1533},{"_735":4706,"_716":717,"_737":723},{"_796":1562,"_770":1548,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4708,"_716":717,"_737":723},{"_738":-5,"_755":1565,"_42":-5,"_741":-5,"_757":4709,"_93":759},[4710],{"_46":1568,"_93":762},{"_735":4712,"_716":717,"_737":723},{"_738":4713,"_42":1572,"_757":4714,"_93":759},[],[1568],{"_735":4716,"_716":717,"_737":723},{"_770":1576,"_42":-5,"_741":-5,"_772":1577,"_93":774},{"_735":4718,"_716":717,"_737":723},{"_777":1580,"_779":1581,"_781":4719,"_783":784,"_721":32,"_785":32,"_42":1576,"_786":1583,"_788":789,"_728":114,"_93":790},[4720,4721,4722,4723],{"_779":1592,"_364":1462,"_256":1446,"_93":1119},{"_779":1591,"_364":1462,"_256":1446,"_93":1119},{"_779":1590,"_364":1462,"_256":1446,"_93":1119},{"_779":1588,"_364":1589,"_256":1423,"_93":1119},{"_735":4725,"_716":717,"_737":723},{"_796":1595,"_770":1576,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4727,"_716":717,"_737":723},{"_738":-5,"_755":1598,"_42":-5,"_741":-5,"_757":4728,"_93":759},[],{"_735":4730,"_716":717,"_737":723},{"_738":4731,"_42":1603,"_757":4732,"_93":759},[],[],{"_735":4734,"_716":717,"_737":723},{"_770":1607,"_42":-5,"_741":-5,"_772":1608,"_93":774},{"_735":4736,"_716":717,"_737":723},{"_777":1611,"_779":1141,"_781":4737,"_783":784,"_721":32,"_785":32,"_42":1607,"_786":1613,"_788":789,"_728":114,"_93":790},[4738],{"_779":1145,"_256":1146,"_93":1147},{"_735":4740,"_716":717,"_737":723},{"_796":1150,"_770":1607,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4742,"_716":717,"_737":723},{"_738":-5,"_755":1619,"_42":-5,"_741":-5,"_757":4743,"_93":759},[4744],{"_46":1622,"_93":762},{"_735":4746,"_716":717,"_737":723},{"_738":4747,"_42":1626,"_757":4748,"_93":759},[],[1622],{"_735":4750,"_716":717,"_737":723},{"_770":1630,"_42":-5,"_741":-5,"_772":1631,"_93":774},{"_735":4752,"_716":717,"_737":723},{"_777":1634,"_779":1635,"_781":4753,"_783":784,"_721":32,"_785":32,"_42":1630,"_786":1637,"_788":789,"_728":114,"_93":790},[4754],{"_779":1639,"_256":1640,"_1531":1641,"_93":1533},{"_735":4756,"_716":717,"_737":723},{"_770":1644,"_42":-5,"_741":-5,"_772":1645,"_93":774},{"_735":4758,"_716":717,"_737":723},{"_777":1648,"_779":1649,"_781":4759,"_783":784,"_721":512,"_785":32,"_42":1644,"_786":1651,"_788":789,"_728":114,"_93":790},[4760,4761],{"_779":1655,"_364":1656,"_256":1657,"_93":1119},{"_779":1654,"_364":1462,"_256":1446,"_93":1119},{"_735":4763,"_716":717,"_737":723},{"_770":1660,"_42":-5,"_741":-5,"_772":1661,"_93":774},{"_735":4765,"_716":717,"_737":723},{"_777":1664,"_779":1665,"_781":4766,"_783":784,"_721":32,"_785":32,"_42":1660,"_786":1667,"_788":789,"_728":114,"_93":790},[4767],{"_779":1669,"_364":1670,"_256":1671,"_93":1119},{"_735":4769,"_716":717,"_737":723},{"_796":1674,"_770":1630,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4771,"_716":717,"_737":723},{"_796":1677,"_770":1644,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4773,"_716":717,"_737":723},{"_796":1680,"_770":1660,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4775,"_716":717,"_737":723},{"_738":-5,"_755":1683,"_42":-5,"_741":-5,"_757":4776,"_93":759},[],{"_735":4778,"_716":717,"_737":723},{"_738":4779,"_42":1688,"_757":4780,"_93":759},[],[],{"_735":4782,"_716":717,"_737":723},{"_777":1692,"_779":1693,"_781":4783,"_783":784,"_721":1695,"_785":32,"_42":1696,"_786":1697,"_788":789,"_728":114,"_93":790},[4784],{"_779":1699,"_93":793},{"_735":4786,"_716":717,"_737":723},{"_770":1702,"_42":-5,"_741":-5,"_772":1703,"_93":774},{"_735":4788,"_716":717,"_737":723},{"_770":1696,"_42":-5,"_741":-5,"_772":1706,"_93":774},{"_735":4790,"_716":717,"_737":723},{"_777":1709,"_779":1710,"_781":4791,"_783":784,"_721":32,"_785":32,"_42":1702,"_786":1712,"_788":789,"_728":114,"_93":790},[4792],{"_779":1714,"_93":793},{"_735":4794,"_716":717,"_737":723},{"_796":1717,"_770":1702,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4796,"_716":717,"_737":723},{"_796":1720,"_770":1696,"_42":-5,"_741":-5,"_364":798,"_799":-5,"_93":800},{"_735":4798,"_716":717,"_737":723},{"_738":-5,"_755":1723,"_42":-5,"_741":-5,"_757":4799,"_93":759},[],{"_735":4801,"_716":717,"_737":723},{"_738":4802,"_42":1728,"_757":4803,"_93":759},[],[],{"_735":4805,"_716":717,"_737":723},{"_1732":-5,"_738":4806,"_42":1734,"_93":1735},[4807],{"_46":1737,"_1738":4808,"_93":46},[],{"_735":4810,"_716":717,"_737":723},{"_738":4811,"_740":-5,"_42":-5,"_741":-5,"_742":-5,"_97":509,"_93":744},[4812],{"_46":1737,"_93":1744},{"_735":4814,"_716":717,"_737":723},{"_738":4815,"_740":-5,"_42":-5,"_741":-5,"_742":-5,"_97":509,"_93":744},[4816,4817],{"_46":1751,"_93":1744},{"_46":1750,"_93":1744},{"_735":4819,"_716":717,"_737":723},{"_738":4820,"_740":-5,"_42":-5,"_741":-5,"_742":-5,"_97":1755,"_93":744},[4821,4822],{"_46":1759,"_93":1744},{"_46":1758,"_93":1744},{"_716":717,"_88":4824},{"_104":-5,"_42":723,"_724":4825,"_726":727,"_728":1764},[],{"_728":4827,"_716":717},{"_1767":4828,"_93":1769},[],{"_1772":4830},{"_1774":-5,"_1775":-5,"_1776":1777,"_1778":727,"_783":784,"_1779":15,"_1780":-5,"_1781":-5,"_1782":-5,"_1783":1784,"_42":717,"_1785":1786,"_364":-5,"_1787":-5,"_256":1788,"_1789":393,"_1790":-5,"_788":1791,"_728":4831,"_1793":-5,"_78":4832,"_1795":727},{"_93":732},[],[],[4835],{"_42":1800,"_1801":4836,"_1803":1804,"_1805":1804,"_738":4837,"_728":1807,"_740":-5,"_1808":32,"_1809":4838,"_1811":1812,"_1813":-5},{"_97":509,"_364":-5,"_1809":4842},{"_1818":46,"_1819":4841},{"_1814":4839},{"_1816":4840},[],[1821],{},{"_93":744,"_97":94,"_738":4862},{"_93":1857,"_1858":4849},{"_93":1831,"_1832":1833,"_1834":1835,"_1836":4846,"_1838":-5},{"_93":1836,"_1839":784,"_129":130,"_1840":-5,"_508":1841,"_1842":4847,"_1844":1845,"_1846":1847,"_1848":1849,"_1850":1851,"_1852":4848},{"_1854":1855,"_1856":-5},[],[4850,4851,4852],{"_256":2334,"_1864":-5,"_1865":4859,"_1867":-5},{"_256":2215,"_1864":-5,"_1865":4856,"_1867":-5},{"_256":1863,"_1864":-5,"_1865":4853,"_1867":-5},[4854],{"_1869":1287,"_1870":1871,"_738":4855,"_1873":59},[1874,393,1875,1876,1877,393,1878,1879,1880,1881,393,1882,393,1883,393,1884,1885,1886,393,1887,1888,1889,1890,1891,393,1892,393,1893,1894,1895,1896,1897,1898,1899,1900,1901,1902,1903,1904,1905,1906,393,1907,393,1908,1909,1910,1911,1912,1913,1914,1915,1916,393,1882,393,1917,393,1918,1919,1920,1921,1922,1923,1924,1925,393,1926,1927,1928,1929,393,1882,393,1930,393,1931,393,1932,1933,1934,1935,1936,1937,1938,1939,1935,1940,1941,1942,1943,1944,1945,1946,1947,1948,1949,1950,1951,1952,1953,1954,1941,1955,1956,1957,1958,1959,1960,1961,1941,1962,1963,1964,1935,1965,1932,393,1966,1967,1968,393,1969,1970,393,1882,393,1971,393,1972,393,1973,1974,1975,1976,1977,1978,1979,393,1980,1981,393,1982,393,1983,1984,1985,1986,1987,1988,1989,1990,1991,1992,1993,393,1994,393,1995,1996,1997,393,1998,1999,2000,2001,2002,2003,393,2004,2005,2006,393,1882,393,2007,393,2008,2009,393,2010,2011,2012,2013,2014,2015,393,2016,393,2017,2018,393,2019,2020,2021,2022,2023,2024,2025,2026,1932,393,2027,2028,2029,2030,2031,2032,2033,393,2034,2035,2036,2037,2038,2039,2040,2041,2042,2043,2044,393,2045,393,2046,2047,2048,2049,2050,2051,393,1882,393,2052,393,2053,2054,2055,2056,2057,2058,2059,393,2060,393,1932,2061,2062,1932,393,2063,2064,393,2065,2066,2067,2068,2069,2070,393,1882,393,2071,393,2072,2073,2074,2075,2076,2077,2078,393,2079,2080,393,1882,393,2081,393,2082,2083,2084,2085,2086,2087,2088,2089,2090,2091,2092,2093,2094,2095,393,2096,2097,393,1882,393,2098,393,2099,2100,2101,2102,2103,2104,2105,2106,393,2107,2108,2109,2110,2111,2112,2113,2114,2115,393,2116,2117,2118,2119,2120,2121,2122,393,1882,393,2123,393,2124,393,2125,2126,2127,2128,2129,2130,2131,2132,2133,2134,2135,2136,2137,2138,2139,2140,393,2141,393,2142,2143,2144,2145,2146,2147,2148,2149,2150,2151,2152,2153,393,2154,393,2155,2156,2157,2158,2159,2160,2161,2162,2163,2164,2165,2166,2167,2168,2169,2170,2171,2172,2173,2174,2175,2176,393,2177,393,2178,2179,2180,2181,2182,393,2183,393,2184,2185,2186,2187,2188,2189,2190,2191,393,2192,393,2193,2194,2195,2196,2197,393,2198,393,2199,2200,2201,2202,393,1882,393,2203,393,2204,2205,2206,2207,2208,2209,2210,2211,2212,393,2213,2214],[4857],{"_1869":1287,"_1870":2218,"_738":4858,"_1873":59},[2220,393,2221,393,2222,2223,2224,2225,393,2226,2227,393,2228,2229,2230,2024,393,2231,2232,2230,2024,393,2233,2234,2230,2024,393,2235,2236,2237,2238,2239,2024,2026,393,2240,2241,2242,2243,2244,2230,2024,393,2245,2230,2024,393,2246,2230,2024,393,2247,2248,2249,2250,2251,2252,2253,2237,2238,2254,2255,2256,2257,2024,2026,393,2258,2259,2260,2261,2262,2263,2264,2265,2266,2267,2268,2269,2270,2271,2272,2273,2274,2270,2275,2276,2277,2278,2279,2272,2273,2280,2281,2282,2265,2026,393,2283,2284,2285,2286,393,2287,2288,2289,2290,2291,2292,2293,2294,2295,2296,2281,2297,393,2298,393,2299,393,2300,393,2301,2302,2303,2304,2305,393,2306,2285,2307,2308,393,2309,393,2310,2311,2312,2313,2314,2315,2316,2317,2318,2319,393,2320,393,2321,2305,393,2322,2285,2307,2323,393,2309,393,2310,2311,2312,2324,2314,2315,2316,2317,2318,2319,393,2325,2326,2327,2328,2329,2330,2331,2318,2332,2305,2333],[4860],{"_1869":1287,"_1870":2337,"_738":4861,"_1873":59},[2339,2340,2341,2342,2343,2344,2345,2346,2347,2348,2349,2350,2351,2352,393,2353,2354,2355,2356,2357,2358,2359,2360,2361,2362,393,2363,2364,2365,2366,2367,2368,2369,2026,393,2370,2371,2026,393,2372,2373,2026,393,2374,2375,2026,393,2376,2377,2378,2379,2380,2381,2382,2383,2384,2385,2026,393,2386,2387,2026,393,2388,2389,2390,2391,2392,2393,393,2394,2395,2396,2397,2398,2399,2024,2400,2401,2398,2399,2024,393,2402,2403,2404,2405,2406,2407,2408,2026,393,2409,2389,2410,2411,2412,2413,2414,393,2415,2416,2417,2024,393,2400,2394,2418,2419,2420,2421,2305,393,2422,2423,2424,2425,2024,2426,2026,393,2427,2428,2026,393,2429,2430,2431,2432,2433,2434,2435,2436,2437,2438,2439,2440,2441,2442,2443,2378,2444,2445,2446,2447,2448,2449,2450,2451,2452,2453,2454,2455,2456,2457,2385,2458,2026,393,2459,2379,2380,2381,2382,2460,2385,2026,393,2461,2462,2026,393,2463,2464,2465,2466,2467,2468,2407,2026,393,2469,2470,2442,2443,2471,2472,393,2473,2474,2396,2397,2475,2399,2024,2400,2401,2475,2399,2024,393,2464,2476,2477,2478,2479,2480,2481,2482,2483,2484,2485,2486,2487,2264,2407,2026,393,2488,2470,2489,2490,2443,2412,2491,2492,393,2400,2493,2494,2495,2496,2497,2421,2305,393,2498,2499,2424,2500,2024,2501,2026,393,2502,2503,2504,2505,2506,2507,2508,2509,2510,2511,393,2512,2513,2514,2515,2516,2517,2378,2518,2519,2520,2521,2522,2523,2524,2525,2526,2527,393,2528,2529,2026,393,2530,2531,2532,2533,393,2534,2535,2536,2537,2538,2539,2540,2541,2542,2543,2544,2545,2546,2547,2548,2549,2550,2551,2552,2553,2554,2555,2556,2557,2558,2559,2560,2024,2561,2562,2563,2564,2565,2566,2567,2026,393,2568,2470,2442,2443,2569,2570,2571,2572,2573,2574,2575,2400,2576,2577,2578,2579,2580,2581,2582,2583,2584,2585,2586,2587,2588,2589,2590,2591,2592,2593,2594,2595,2596,2597,2598,2599,2600,2601,2602,2603,2604,2558,2024,2535,2605,2606,2607,2608,2609,2610,2611,2612,2613,2614,2615,2616,2558,2617,2618,2619,2620,2621,2622,2623,2624,2625,2626,2627,2628,2629,2630,2631,2632,2633,2634,2635,2636,2637,2638,2639,2640,2641,2642,2643,2644,2645,2646,2647,2648,2649,2650,2651,2652,2653,2654,2655,2656,2657,2658,2659,2660,2318,2661,2559,2662,2024,2026,393,2663,2430,2431,2664,2441,2390,2378,2665,2535,2666,2605,2606,2667,2608,2609,2611,2668,2669,2670,2671,2672,2673,2674,2479,2675,2676,2487,2677,2661,2678,2559,2399,2024,2026,393,2679,2514,2515,2680,2681,2517,2378,2682,2535,2536,2666,2683,2684,2685,2686,2687,2688,2689,2690,2691,2692,2693,2694,2695,2696,2697,2698,2699,2700,2701,2702,2332,2559,2703,2024,2026,393,2704,2470,2489,2490,2443,2378,2705,2706,2707,2708,2709,2710,2711,2566,2026,393,2712,2430,2431,2664,2441,2410,2378,2713,2714,2026,393,2715,2716,2717,2718,2719,2720,2721,2722,2723,2724,2725,2726,2601,2727,2728,2024,393,2729,2730,2731,2024,2732,2733,2024,2734,2735,2024,2736,2737,2024,2738,2578,2739,2740,2741,2742,2743,2744,2745,2746,2558,2747,2026,393,2748,2738,2578,2749,2581,2750,2751,2752,2744,2745,2753,2558,2747,2026,393,2754,2755,2756,2026,393,2757,2758,2026,393,2759,2489,2760,2761,2378,2762,2763,2764,2765,2379,2766,2767,2768,2769,2770,2771,2772,2385,2026,393,2773,2513,2489,2760,2774,2378,2762,2775,2776,2777,2778,2779,2780,2566,2781,393,2535,2782,2783,2784,2785,2786,2787,2788,393,2789,393,2790,2791,2792,2793,2794,2795,2319,2796,2797,2798,2799,2800,2801,2802,2803,2596,2558,393,2804,2805,2806,2807,2808,2809,2810,2811,2812,2813,2814,2815,2816,2817,2818,2819,2820,2821,2822,393,2823,2824,2825,2826,2827,2332,2559,2828,2024,2026,393,2829,2830,2831,2832,2833,2834,2835,2836,2837,2838,2839,2840,2841,2024,2842,2843,2844,2845,2305,2026],[4863,4864,4865,4866,4867,4868,4869,4870,4871,4872,4873],{"_1818":46,"_46":2876},{"_1818":2859,"_256":2334,"_1869":2874,"_1870":2875},{"_1818":2859,"_256":2334,"_1869":2872,"_1870":2873},{"_1818":46,"_46":2871},{"_1818":2859,"_256":2215,"_1869":2869,"_1870":2870},{"_1818":2859,"_256":2215,"_1869":2867,"_1870":2868},{"_1818":46,"_46":2866},{"_1818":2859,"_256":1863,"_1869":2864,"_1870":2865},{"_1818":2859,"_256":1863,"_1869":2862,"_1870":2863},{"_1818":2859,"_256":1863,"_1869":2860,"_1870":2861},{"_1818":46,"_46":2858},[4876,4877,4878,4879,4880,4881,4882],{"_2886":2887,"_446":379,"_2888":489,"_457":-5,"_1839":440,"_2889":-5,"_2890":-5,"_2891":2892,"_2893":2894,"_2895":-5,"_2896":-5,"_2897":2898,"_2899":15,"_2900":59,"_2901":54,"_2902":15},{"_93":744,"_97":509,"_738":4883},{"_496":497,"_498":499,"_2918":503,"_2919":130,"_505":-5,"_93":2920},{"_93":2910,"_498":2917,"_256":-5,"_2912":-5,"_2913":-5},{"_93":2910,"_498":2916,"_256":-5,"_2912":-5,"_2913":-5},{"_93":2910,"_498":2915,"_256":-5,"_2912":-5,"_2913":-5},{"_93":2910,"_498":2914,"_256":-5,"_2912":-5,"_2913":-5},{"_93":2910,"_498":2911,"_256":-5,"_2912":-5,"_2913":-5},[4884],{"_1818":46,"_46":2923},"task_e_6a53e877218883228b6982b75e61363b",1783883895.131098,"GitHub Mention: Claude/gate answer persistence flag 4b55da","has_generated_title","has_unread_turn","denormalized_metadata",{"_4916":32,"_4917":4918,"_4919":-5,"_4920":-5,"_4910":4921,"_4922":-5,"_4923":-5,"_4924":-5,"_4925":-5},"task_status_display",{"_4904":4905,"_4906":379,"_131":128,"_4907":-5,"_4908":1831},"creator_workspace","external_pull_requests",[4897],{"_42":4898,"_4899":84,"_4900":4901,"_4902":130},"github-1243497866-537","assistant_turn_id","pull_request",{"_488":489,"_479":490,"_491":492,"_493":15,"_494":59,"_495":15,"_496":497,"_498":499,"_500":450,"_501":128,"_502":503,"_504":130,"_505":506,"_507":-5,"_508":-5,"_509":4903,"_511":512,"_513":32,"_514":32,"_515":32},"codex_updated_sha",{"_473":474,"_364":474,"_516":-5,"_477":478,"_42":475},"latest_turn_status_display",{"_4909":84,"_113":114,"_4910":4911,"_95":4912,"_4913":-5,"_4914":-5,"_4915":1831,"_115":-5},"environment_label","fix_task_id","initial_intent","turn_id","diff_stats",{"_1844":1845,"_1846":1847,"_1848":1849},[],"image_asset_pointer_citations","issue_counts","intent","num_follow_ups","repo_name_map",{},"last_user_turn_created_at","last_turn_status",{"_1844":-5,"_1846":-5,"_1848":-5},"last_pushed_turn_id","start_branch_name","pushed_branch_name","cached_pull_request_data","dd",{"_4937":4938,"_4939":4940},"disablePrefetch","shouldPrefetchAccount","shouldPrefetchUser","shouldPrefetchSystemHints","promoteCss","disableSSR","stripModulepreloadImports","statsigGateEvaluationsPromise",["P",4936],"traceId","13434509718802759230","traceTime",1784379875815]