@agent-native/core 0.15.13 → 0.16.0

package/dist/workspace-connections/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/workspace-connections/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,OAAO,EACP,UAAU,EACV,iBAAiB,EACjB,cAAc,EACd,aAAa,GAEd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,gCAAgC,GAIjC,MAAM,2BAA2B,CAAC;AAuQnC,IAAI,YAAuC,CAAC;AAE5C,SAAS,yBAAyB;IAChC,OAAO,UAAU,EAAE;QACjB,CAAC,CAAC,8BAA8B;QAChC,CAAC,CAAC,uBAAuB,CAAC;AAC9B,CAAC;AAED,SAAS,8BAA8B;IACrC,OAAO,UAAU,EAAE;QACjB,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,6BAA6B,CAAC;AACpC,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAY;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAE,GAA0B,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC;SACnE,WAAW,EAAE;SACb,IAAI,EAAE,CAAC;IACV,OAAO,CACL,IAAI,KAAK,OAAO;QAChB,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACpC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAAc,EACd,KAAa,EACb,IAAY,EACZ,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,UAAU,EAAE;YACV,CAAC,CAAC,eAAe,KAAK,6BAA6B,IAAI,IAAI,UAAU,EAAE;YACvE,CAAC,CAAC,eAAe,KAAK,eAAe,IAAI,IAAI,UAAU,EAAE,CAC5D,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,MAAc,EACd,KAAa;IAEb,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;IAC1E,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,CAAC,CAAC;IACvE,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,QAAQ,EACR,mCAAmC,CACpC,CAAC;IACF,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,aAAa,EACb,4BAA4B,CAC7B,CAAC;IACF,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,aAAa,EACb,4BAA4B,CAC7B,CAAC;IACF,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,mBAAmB,EACnB,4BAA4B,CAC7B,CAAC;IACF,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,sBAAsB,EACtB,4BAA4B,CAC7B,CAAC;IACF,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC;IAC7E,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,YAAY,EACZ,GAAG,OAAO,EAAE,qBAAqB,CAClC,CAAC;IACF,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,YAAY,EACZ,GAAG,OAAO,EAAE,qBAAqB,CAClC,CAAC;IACF,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,qCAAqC,CAClD,MAAc,EACd,KAAa;IAEb,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,eAAe,EACf,0BAA0B,CAC3B,CAAC;IACF,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;IAC1E,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IACxE,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,aAAa,EACb,4BAA4B,CAC7B,CAAC;IACF,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,aAAa,EACb,4BAA4B,CAC7B,CAAC;IACF,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,sBAAsB,EACtB,4BAA4B,CAC7B,CAAC;IACF,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,kBAAkB,EAClB,0BAA0B,CAC3B,CAAC;IACF,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC;IAC7E,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,YAAY,EACZ,GAAG,OAAO,EAAE,qBAAqB,CAClC,CAAC;IACF,MAAM,YAAY,CAChB,MAAM,EACN,KAAK,EACL,YAAY,EACZ,GAAG,OAAO,EAAE,qBAAqB,CAClC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B;IACnD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,yBAAyB,EAAE,CAAC;YAC1C,MAAM,WAAW,GAAG,8BAA8B,EAAE,CAAC;YACrD,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC;uCACgB,KAAK;;;;;;;;;;;;;yBAanB,OAAO,EAAE;yBACT,OAAO,EAAE;8BACJ,OAAO,EAAE;;;SAG9B,CAAC,CACH,CAAC;YAEF,MAAM,gCAAgC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAEtD,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,0EAA0E,KAAK,kCAAkC,CAClH,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,sEAAsE,KAAK,eAAe,CAC3F,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CAAC;uCACgB,WAAW;;;;;;;;;;;yBAWzB,OAAO,EAAE;yBACT,OAAO,EAAE;;SAEzB,CAAC,CACH,CAAC;YAEF,MAAM,qCAAqC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAEjE,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,uFAAuF,WAAW,0BAA0B,CAC7H,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,2EAA2E,WAAW,gCAAgC,CACvH,CACF,CAAC;YACF,MAAM,cAAc,CAAC,GAAG,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,4EAA4E,WAAW,eAAe,CACvG,CACF,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,+BAA+B;IAItC,MAAM,UAAU,GAAG,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,UAAU;QACV,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAAyD;IAEzD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACpD,CAAC;IACD,OAAO;QACL,GAAG,EAAE,oCAAoC;QACzC,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;SAC7D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,KAAa;IAC5D,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAc;IAEd,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK;SACT,MAAM,CACL,CAAC,KAAK,EAA6C,EAAE,CACnD,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,OAAQ,KAA0C,CAAC,GAAG,KAAK,QAAQ,CACtE;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;SAC5C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IACE,KAAK,KAAK,UAAU;QACpB,KAAK,KAAK,cAAc;QACxB,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,UAAU,EACpB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,MAAM,CACb,KAAgD;IAEhD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,QAAQ;IACR,eAAe;IACf,cAAc;IACd,QAAQ;IACR,UAAU;IACV,YAAY;IACZ,cAAc;IACd,QAAQ;IACR,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,qBAAqB,GAAG,KAAK;IACjE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEtD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACtC,IACE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;YAC3B,CAAC,CAAC,qBAAqB,IAAI,UAAU,KAAK,KAAK,CAAC,EAChD,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CACrB,MAA2C;IAE3C,OAAO,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,KAAK,CAGjD,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAqC;IAErC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAqC,CAAC;IAC9E,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QAC7D,SAAS,CAAC,KAAK,GAAG,YAAY,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,GAA4B;IAC5C,OAAO,4BAA4B,CAAC;QAClC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjE,YAAY,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;QAC1E,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QACnC,MAAM,EAAE,oBAAoB,CAAC,aAAa,CAAU,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,EAAE,eAAe,CAAC,aAAa,CAAU,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpE,WAAW,EAAE,oBAAoB,CAC/B,aAAa,CAAU,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAClD;QACD,cAAc,EAAE,uBAAuB,CACrC,aAAa,CAAU,GAAG,CAAC,oBAAoB,EAAE,EAAE,CAAC,CACrD;QACD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QACzC,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QACrD,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QAC3D,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QAC3D,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC;QACvC,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;KAClE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,GAA4B;IACjD,OAAO,iCAAiC,CAAC;QACvC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QAC7C,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QAC/B,MAAM,EAAE,oBAAoB,CAAC,aAAa,CAAU,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,EAAE,eAAe,CAAC,aAAa,CAAU,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpE,cAAc,EAAE,uBAAuB,CACrC,aAAa,CAAU,GAAG,CAAC,oBAAoB,EAAE,EAAE,CAAC,CACrD;QACD,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAClD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QACzC,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QACrD,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QAC3D,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAA+B;IAE/B,OAAO;QACL,GAAG,UAAU;QACb,MAAM,EAAE,oBAAoB,CAAC,UAAU,CAAC,MAAM,CAAC;QAC/C,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC;QACzC,WAAW,EAAE,oBAAoB,CAAC,UAAU,CAAC,WAAW,CAAC;QACzD,cAAc,EAAE,uBAAuB,CAAC,UAAU,CAAC,cAAc,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAA+B;IAE/B,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1C,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,cAAc,EAAE,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,UAGC,EACD,KAAa,EACb,SAGM,EAAE;IAER,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,yBAAyB;YACjC,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,wDAAwD;YAChE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,sCAAsC,eAAe,GAAG;YAChE,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAC/B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,YAAY,KAAK,UAAU,CAAC,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe,CAC1E,CAAC;IACF,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,wCAAwC,eAAe,GAAG;YAClE,OAAO,EAAE,aAAa,CAAC,EAAE;SAC1B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,SAAS,eAAe,0DAA0D;QAC1F,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,UAGC,EACD,KAAa,EACb,SAGM,EAAE;IAER,OAAO,+BAA+B,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,MAAgB;IACrC,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAwC,EACxC,MAAwD;IAExD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM;KACP,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAC1B,YAAoB,EACpB,MAA4C,EAC5C,KAAc;IAEd,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,YAAoB,EACpB,MAA4C,EAC5C,KAAc;IAEd,OAAO,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAyC,EACzC,KAAa,EACb,MAA4C;IAE5C,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,+BAA+B,CAC/C,UAAU,EACV,eAAe,EACf,MAAM,CACP,CAAC;IACF,OAAO;QACL,GAAG,UAAU;QACb,SAAS;QACT,aAAa,EACX,0BAA0B,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC;YAClE,IAAI;KACP,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,UAAyC,EACzC,KAAa,EACb,MAA4C;IAE5C,MAAM,aAAa,GAAG,0BAA0B,CAC9C,UAAU,CAAC,EAAE,EACb,MAAM,EACN,KAAK,CACN,CAAC;IACF,MAAM,SAAS,GAAG,+BAA+B,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7E,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,YAAY,EAAE,SAAS,CAAC,SAAS;QACjC,UAAU,EACR,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe;QACpE,SAAS;QACT,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,cAAc,EAAE,oBAAoB,CAClC,UAAU,CAAC,cAAc,EACzB,YAAY,CACb;QACD,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,aAAa,EAAE,aAAa;YAC1B,CAAC,CAAC;gBACE,EAAE,EAAE,aAAa,CAAC,EAAE;gBACpB,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,MAAM,EAAE,aAAa,CAAC,MAAM;gBAC5B,cAAc,EAAE,oBAAoB,CAClC,aAAa,CAAC,cAAc,EAC5B,OAAO,CACR;gBACD,SAAS,EAAE,aAAa,CAAC,SAAS;aACnC;YACH,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAyC,EACzC,UAAkB,EAClB,KAAa;IAEb,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,GAAG,KAAK,kBAAkB,UAAU,wBAAwB,CAAC;QACtE,KAAK,SAAS;YACZ,OAAO,GAAG,KAAK,QAAQ,UAAU,2DAA2D,CAAC;QAC/F,KAAK,aAAa;YAChB,OAAO,KAAK,UAAU,uCAAuC,KAAK,sBAAsB,CAAC;QAC3F,KAAK,eAAe,CAAC;QACrB;YACE,OAAO,aAAa,UAAU,yCAAyC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0CAA0C,CAAC,EACzD,UAAU,EACV,KAAK,EACL,WAAW,EACX,MAAM,GAAG,EAAE,EACX,kBAAkB,GAAG,SAAS,GACoB;IAClD,MAAM,oBAAoB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CACvC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,oBAAoB,CAC7D,CAAC;IACF,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAC9C,CAAC,UAAU,EAAE,EAAE,CACb,+BAA+B,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,CAAC;SACjE,SAAS,CACf,CAAC;IACF,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,MAAM,CACpD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,WAAW,CAClD,CAAC;IACF,MAAM,wBAAwB,GAC5B,cAAc,CAAC,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC;IACpD,MAAM,+BAA+B,GACnC,kBAAkB,CAAC,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC;IAC1D,MAAM,UAAU,GAAkC,oBAAoB,CAAC,MAAM;QAC3E,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,kBAAkB,CAAC,MAAM;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,cAAc,CAAC,MAAM;gBACrB,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,eAAe,CAAC;IACxB,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAC9C,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CACpB,0BAA0B,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC;QAChE,CAAC,CAAC,KAAK,GAAG,CAAC;QACX,CAAC,CAAC,KAAK,EACX,CAAC,CACF,CAAC;IACF,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;QACrE,MAAM,aAAa,GAAG,0BAA0B,CAC9C,UAAU,CAAC,EAAE,EACb,MAAM,EACN,eAAe,CAChB,CAAC;QACF,OAAO,CACL,KAAK;YACL,UAAU,CAAC,cAAc,CAAC,MAAM;YAChC,CAAC,aAAa,EAAE,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAC5C,CAAC;IACJ,CAAC,EAAE,CAAC,CAAC,CAAC;IACN,MAAM,kBAAkB,GACtB,kBAAkB,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAErE,OAAO;QACL,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,oBAAoB;QAC9B,UAAU;QACV,iBAAiB,EACf,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,SAAS;YACpD,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,UAAU;QAChB,wBAAwB,EAAE,wBAAwB,CAChD,UAAU,EACV,oBAAoB,EACpB,eAAe,CAChB;QACD,eAAe,EAAE,cAAc,CAAC,MAAM;QACtC,sBAAsB,EAAE,kBAAkB,CAAC,MAAM;QACjD,qBAAqB,EAAE,oBAAoB,CAAC,MAAM;QAClD,wBAAwB;QACxB,+BAA+B;QAC/B,kBAAkB;QAClB,kBAAkB;QAClB,sBAAsB,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC;QACjD,6BAA6B,EAAE,kBAAkB,CAAC,MAAM,GAAG,CAAC;QAC5D,4BAA4B,EAAE,oBAAoB,CAAC,MAAM,GAAG,CAAC;QAC7D,QAAQ,EAAE,aAAa,CACrB,cAAc,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CACvB;QAChC,WAAW,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACjD,yBAAyB,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,CAAC,CAC/D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAyC;IACvE,OAAO,aAAa,CAClB,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,IAAI,KAAK,CAAC;SACpD,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CACpC,QAAyC,EACzC,UAAyC,EACzC,SAA+C,EAAE;IAEjD,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB;QACE,GAAG,UAAU,CAAC,cAAc;QAC5B,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;KACnD;SACE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IACF,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,6CAA6C,CAAC,EAC5D,QAAQ,EACR,WAAW,EACX,MAAM,GAAG,EAAE,EACX,KAAK,EACL,kBAAkB,GACmC;IACrD,MAAM,mBAAmB,GAAG,WAAW,CAAC,MAAM,CAC5C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,CACpD,CAAC;IACF,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,CAClD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,UAAU,CACjD,CAAC;IACF,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,MAAM,CACnD,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,MAAM,KAAK,OAAO;QAC7B,UAAU,CAAC,MAAM,KAAK,cAAc;QACpC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAChC,CAAC;IACF,MAAM,WAAW,GAAG,aAAa,CAC/B,iBAAiB,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACvC,6BAA6B,CAC3B,QAAQ,EACR,UAAU,EACV,mBAAmB,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAClD,CACF,CACF,CAAC;IACF,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAC/C,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,MAAM,KAAK,WAAW;QACjC,6BAA6B,CAC3B,QAAQ,EACR,UAAU,EACV,mBAAmB,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAClD,CAAC,MAAM,KAAK,CAAC,CACjB,CAAC;IACF,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,MAAM,CAClD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,UAAU,CACjD,CAAC;IAEF,IAAI,MAAM,GAA+C,gBAAgB,CAAC;IAC1E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,GAAG,OAAO,CAAC;IACnB,CAAC;SAAM,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,iBAAiB,CAAC;IAC7B,CAAC;SAAM,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,GAAG,mBAAmB,CAAC;IAC/B,CAAC;SAAM,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;SAAM,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IAED,OAAO;QACL,MAAM;QACN,eAAe,EAAE,mBAAmB,CAAC,MAAM;QAC3C,qBAAqB,EAAE,iBAAiB,CAAC,MAAM;QAC/C,oBAAoB,EAAE,gBAAgB,CAAC,MAAM;QAC7C,sBAAsB,EAAE,sBAAsB,CAAC,QAAQ,CAAC;QACxD,6BAA6B,EAAE,WAAW;QAC1C,QAAQ,EAAE,KAAK;YACb,CAAC,CAAC,0CAA0C,CAAC;gBACzC,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,KAAK;gBACL,WAAW;gBACX,MAAM;gBACN,kBAAkB;aACnB,CAAC;YACJ,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAAC,EACjE,KAAK,EACL,QAAQ,EACR,UAAU,EACV,WAAW,EACX,eAAe,GAAG,IAAI,EACtB,kBAAkB,GAAG,KAAK,GAC0B;IACpD,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,wBAAwB,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;QACvD,6BAA6B,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;KACnD,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,gCAAgC,CAAC;QACjD,UAAU;QACV,WAAW;KACZ,CAAC;SACC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC;SACnD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,mBAAmB,GAAG,0CAA0C,CAAC;YACrE,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,KAAK;YACL,WAAW;YACX,MAAM;YACN,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,6CAA6C,CAAC;YAC9D,QAAQ,EAAE,IAAI;YACd,WAAW;YACX,MAAM;YACN,KAAK;YACL,kBAAkB;SACnB,CAAC,CAAC;QACH,OAAO;YACL,GAAG,IAAI;YACP,mBAAmB;YACnB,SAAS;SACV,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,OAAO;QACL,KAAK;QACL,SAAS;QACT,WAAW;QACX,MAAM;QACN,MAAM,EAAE;YACN,SAAS,EAAE,SAAS,CAAC,MAAM;YAC3B,WAAW,EAAE,WAAW,CAAC,MAAM;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,SAAS,CAAC,MAAM,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,OAAO,CAC5C,CAAC,MAAM;SACT;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,EACnD,KAAK,EACL,QAAQ,EACR,eAAe,GAAG,KAAK,GACe;IAGtC,MAAM,eAAe,GAAG,uBAAuB,CAC7C,KAAK,EACL,sCAAsC,CACvC,CAAC;IACF,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,wBAAwB,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;QACvD,6BAA6B,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;KACpE,CAAC,CAAC;IAEH,OAAO,WAAW;SACf,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;SAC1E,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,EACrD,KAAK,EACL,QAAQ,EACR,eAAe,GAAG,KAAK,EACvB,YAAY,EACZ,gBAAgB,GAAG,KAAK,GACgB;IACxC,MAAM,eAAe,GAAG,uBAAuB,CAC7C,KAAK,EACL,wCAAwC,CACzC,CAAC;IACF,MAAM,sBAAsB,GAAG,YAAY,EAAE,IAAI,EAAE,CAAC;IACpD,MAAM,oBAAoB,GAAG,MAAM,wBAAwB,CAAC;QAC1D,QAAQ;QACR,eAAe,EAAE,eAAe,IAAI,OAAO,CAAC,sBAAsB,CAAC;KACpE,CAAC,CAAC;IACH,MAAM,oBAAoB,GAAG,sBAAsB;QACjD,CAAC,CAAC,oBAAoB,CAAC,MAAM,CACzB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,sBAAsB,CACzD;QACH,CAAC,CAAC,oBAAoB,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC;QACjD,QAAQ;QACR,KAAK,EAAE,eAAe;QACtB,YAAY,EAAE,sBAAsB;KACrC,CAAC,CAAC;IAEH,IAAI,sBAAsB,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,yBAAyB,sBAAsB,+CAA+C;SACvG,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,oBAAoB,EAAE,CAAC;QAC9C,MAAM,oBAAoB,GAAG,gBAAgB,CAC3C,UAAU,EACV,eAAe,EACf,MAAM,CACP,CAAC;QAEF,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;YAC9C,IAAI,sBAAsB,EAAE,CAAC;gBAC3B,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,oBAAoB;oBAChC,SAAS,EAAE,oBAAoB,CAAC,SAAS;oBACzC,MAAM,EAAE,oBAAoB,CAAC,SAAS,CAAC,MAAM;iBAC9C,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,CAAC,eAAe,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACzD,IAAI,sBAAsB,EAAE,CAAC;gBAC3B,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,oBAAoB;oBAChC,SAAS,EAAE,oBAAoB,CAAC,SAAS;oBACzC,MAAM,EAAE,yBAAyB,UAAU,CAAC,EAAE,gBAAgB;iBAC/D,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,gBAAgB,IAAI,UAAU,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC1D,IAAI,sBAAsB,EAAE,CAAC;gBAC3B,OAAO;oBACL,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,oBAAoB;oBAChC,SAAS,EAAE,oBAAoB,CAAC,SAAS;oBACzC,MAAM,EAAE,yBAAyB,UAAU,CAAC,EAAE,QAAQ,UAAU,CAAC,MAAM,iDAAiD;iBACzH,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,oBAAoB,CAAC,SAAS;YACzC,MAAM,EAAE,oBAAoB,CAAC,SAAS,CAAC,MAAM;SAC9C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,gBAAgB,QAAQ,uCAAuC,eAAe,GAAG;YACnF,CAAC,CAAC,mDAAmD,eAAe,GAAG;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,MAAc,EACd,KAAyD,EACzD,KAAa;IAEb,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,6BAA6B,KAAK,yBAAyB,KAAK,CAAC,GAAG,EAAE;QAC3E,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;KAC7B,CAAC,CAAC;IACH,OAAO,IAAI,GAAG,CACZ,IAAI;SACD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAE,GAA+B,CAAC,aAAa,IAAI,EAAE,CAAC,CAC7D;SACA,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAA2C,EAAE;IAE7C,MAAM,+BAA+B,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,yBAAyB,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,+BAA+B,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAc,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAEpC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,iBAAiB,KAAK,UAAU,OAAO,CAAC,IAAI,CAC/C,OAAO,CACR,2BAA2B;QAC5B,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,QAAQ,CAAC,GAA8B,CAAC,CACzC,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,WAAW,CAAC;IAE/B,MAAM,oBAAoB,GAAG,MAAM,6BAA6B,CAC9D,MAAM,EACN,KAAK,EACL,KAAK,CACN,CAAC;IACF,OAAO,WAAW,CAAC,MAAM,CACvB,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QACnC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtC,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAU;IAEV,MAAM,+BAA+B,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,yBAAyB,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,+BAA+B,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,iBAAiB,KAAK,qBAAqB,KAAK,CAAC,GAAG,UAAU;QACnE,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAqC;IAErC,MAAM,+BAA+B,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,yBAAyB,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,+BAA+B,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC;IAC5E,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;IAE1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,UAAU,KAAK;;;;;yBAKC,KAAK,CAAC,GAAG,EAAE;QAChC,IAAI,EAAE;YACJ,QAAQ;YACR,KAAK;YACL,KAAK,CAAC,SAAS,IAAI,IAAI;YACvB,KAAK,CAAC,YAAY,IAAI,IAAI;YAC1B,MAAM;YACN,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;YAC9B,GAAG;YACH,aAAa;YACb,SAAS;YACT,EAAE;YACF,GAAG,KAAK,CAAC,IAAI;SACd;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC;gBACnB,GAAG,EAAE,eAAe,KAAK;;;;;kEAKiC;gBAC1D,IAAI,EAAE;oBACJ,EAAE;oBACF,QAAQ;oBACR,KAAK;oBACL,KAAK,CAAC,SAAS,IAAI,IAAI;oBACvB,KAAK,CAAC,YAAY,IAAI,IAAI;oBAC1B,MAAM;oBACN,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;oBACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;oBACtB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;oBAC3B,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;oBAC9B,KAAK,CAAC,UAAU;oBAChB,KAAK,CAAC,KAAK;oBACX,GAAG;oBACH,GAAG;oBACH,aAAa;oBACb,SAAS;iBACV;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,yBAAyB,EAAE,qDAAqD,CACjF,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,+BAA+B,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,UAAgD,EAAE;IAElD,MAAM,+BAA+B,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,+BAA+B,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAc,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1C,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,iBAAiB,KAAK,UAAU,OAAO,CAAC,IAAI,CAC/C,OAAO,CACR,2BAA2B;QAC5B,IAAI;KACL,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAA8B,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAAoB,EACpB,KAAa;IAEb,MAAM,+BAA+B,EAAE,CAAC;IACxC,MAAM,sBAAsB,GAAG,uBAAuB,CACpD,YAAY,EACZ,0CAA0C,CAC3C,CAAC;IACF,MAAM,eAAe,GAAG,uBAAuB,CAC7C,KAAK,EACL,mCAAmC,CACpC,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,+BAA+B,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACpC,GAAG,EAAE,iBAAiB,KAAK,+CAA+C,KAAK,CAAC,GAAG,UAAU;QAC7F,IAAI,EAAE,CAAC,sBAAsB,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;KAC/D,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAA0C;IAE1C,MAAM,+BAA+B,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,uBAAuB,CAC1C,KAAK,CAAC,YAAY,EAClB,6CAA6C,CAC9C,CAAC;IACF,MAAM,KAAK,GAAG,uBAAuB,CACnC,KAAK,CAAC,KAAK,EACX,sCAAsC,CACvC,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,yBAAyB,YAAY,+CAA+C,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,+BAA+B,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC;IAC/D,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAErE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,UAAU,KAAK;;;mDAG2B,KAAK,CAAC,GAAG,EAAE;QAC1D,IAAI,EAAE;YACJ,QAAQ;YACR,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;YAC9B,KAAK,CAAC,UAAU;YAChB,GAAG;YACH,YAAY;YACZ,KAAK;YACL,GAAG,KAAK,CAAC,IAAI;SACd;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC;gBACnB,GAAG,EAAE,eAAe,KAAK;;;;sDAIqB;gBAC9C,IAAI,EAAE;oBACJ,EAAE;oBACF,YAAY;oBACZ,QAAQ;oBACR,KAAK;oBACL,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;oBACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;oBACtB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;oBAC9B,KAAK,CAAC,UAAU;oBAChB,KAAK,CAAC,UAAU;oBAChB,KAAK,CAAC,KAAK;oBACX,GAAG;oBACH,GAAG;iBACJ;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,UAAU,KAAK,qDAAqD,CACpH,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,UAAU,KAAK,+BAA+B,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,YAAoB,EACpB,KAAa;IAEb,MAAM,+BAA+B,EAAE,CAAC;IACxC,MAAM,sBAAsB,GAAG,uBAAuB,CACpD,YAAY,EACZ,6CAA6C,CAC9C,CAAC;IACF,MAAM,eAAe,GAAG,uBAAuB,CAC7C,KAAK,EACL,sCAAsC,CACvC,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,+BAA+B,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,eAAe,KAAK,+CAA+C,KAAK,CAAC,GAAG,EAAE;QACnF,IAAI,EAAE,CAAC,sBAAsB,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;KAC/D,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAAU;IACxD,MAAM,+BAA+B,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,yBAAyB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,8BAA8B,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,+BAA+B,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,eAAe,KAAK,qBAAqB,KAAK,CAAC,GAAG,EAAE;QACzD,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,EAAE,eAAe,WAAW,gCAAgC,KAAK,CAAC,GAAG,EAAE;YAC1E,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;AACjC,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport {\n  getDbExec,\n  intType,\n  isPostgres,\n  isUniqueViolation,\n  retryOnDdlRace,\n  safeJsonParse,\n  type DbExec,\n} from \"../db/client.js\";\nimport {\n  getRequestOrgId,\n  getRequestUserEmail,\n} from \"../server/request-context.js\";\nimport {\n  listWorkspaceConnectionProviders,\n  type WorkspaceConnectionCapability,\n  type WorkspaceConnectionProvider,\n  type WorkspaceConnectionTemplateUse,\n} from \"../connections/catalog.js\";\n\nexport type WorkspaceConnectionStatus =\n  | \"connected\"\n  | \"checking\"\n  | \"needs_reauth\"\n  | \"error\"\n  | \"disabled\";\n\nexport interface WorkspaceConnectionCredentialRef {\n  key: string;\n  scope?: \"user\" | \"org\" | \"workspace\";\n  provider?: string;\n  label?: string;\n  [key: string]: unknown;\n}\n\nexport interface WorkspaceConnection {\n  id: string;\n  provider: string;\n  label: string;\n  accountId: string | null;\n  accountLabel: string | null;\n  status: WorkspaceConnectionStatus;\n  scopes: string[];\n  config: Record<string, unknown>;\n  allowedApps: string[];\n  credentialRefs: WorkspaceConnectionCredentialRef[];\n  ownerEmail: string;\n  orgId: string | null;\n  createdAt: string;\n  updatedAt: string;\n  lastCheckedAt: string | null;\n  lastError: string | null;\n}\n\nexport type SerializedWorkspaceConnection = WorkspaceConnection;\n\nexport interface WorkspaceConnectionGrant {\n  id: string;\n  connectionId: string;\n  provider: string;\n  appId: string;\n  scopes: string[];\n  config: Record<string, unknown>;\n  credentialRefs: WorkspaceConnectionCredentialRef[];\n  grantedByEmail: string;\n  ownerEmail: string;\n  orgId: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport type SerializedWorkspaceConnectionGrant = WorkspaceConnectionGrant;\n\nexport interface ListWorkspaceConnectionsOptions {\n  provider?: string;\n  appId?: string;\n  includeDisabled?: boolean;\n}\n\nexport interface ListWorkspaceConnectionGrantsOptions {\n  connectionId?: string;\n  appId?: string;\n  provider?: string;\n}\n\nexport interface ListWorkspaceConnectionsForAppOptions {\n  appId: string;\n  provider?: string;\n  includeDisabled?: boolean;\n}\n\nexport interface ResolveWorkspaceConnectionForAppOptions extends ListWorkspaceConnectionsForAppOptions {\n  connectionId?: string;\n  requireConnected?: boolean;\n}\n\nexport interface UpsertWorkspaceConnectionInput {\n  id?: string;\n  provider: string;\n  label?: string;\n  accountId?: string | null;\n  accountLabel?: string | null;\n  status?: WorkspaceConnectionStatus;\n  scopes?: string[];\n  config?: Record<string, unknown>;\n  allowedApps?: string[];\n  credentialRefs?: WorkspaceConnectionCredentialRef[];\n  lastCheckedAt?: Date | number | string | null;\n  lastError?: string | null;\n}\n\nexport interface UpsertWorkspaceConnectionGrantInput {\n  id?: string;\n  connectionId: string;\n  appId: string;\n  provider?: string;\n  scopes?: string[];\n  config?: Record<string, unknown>;\n  credentialRefs?: WorkspaceConnectionCredentialRef[];\n}\n\nexport type WorkspaceConnectionAppAccessMode =\n  | \"all-apps\"\n  | \"allowed-app\"\n  | \"explicit-grant\"\n  | \"unavailable\";\n\nexport interface WorkspaceConnectionAppAccess {\n  appId: string;\n  available: boolean;\n  mode: WorkspaceConnectionAppAccessMode;\n  reason: string;\n  grantId: string | null;\n}\n\nexport type WorkspaceConnectionGrantState =\n  | \"connected\"\n  | \"granted\"\n  | \"needs_grant\"\n  | \"not_connected\";\n\nexport type WorkspaceConnectionGrantAvailability =\n  | \"available\"\n  | \"needs_grant\"\n  | \"not_connected\";\n\nexport type WorkspaceConnectionProviderReadinessStatus =\n  | \"ready\"\n  | \"checking\"\n  | \"needs_credentials\"\n  | \"needs_attention\"\n  | \"disabled\"\n  | \"not_configured\";\n\nexport interface WorkspaceConnectionPublicCredentialRef {\n  key: string;\n  scope?: string;\n  provider?: string;\n  label?: string;\n  source: \"connection\" | \"grant\";\n}\n\nexport interface WorkspaceConnectionExplicitGrantSummary {\n  id: string;\n  appId: string;\n  scopes: string[];\n  credentialRefs: WorkspaceConnectionPublicCredentialRef[];\n  updatedAt: string;\n}\n\nexport interface WorkspaceConnectionForAppSummary {\n  id: string;\n  label: string;\n  provider: string;\n  accountId: string | null;\n  accountLabel: string | null;\n  status: WorkspaceConnectionStatus;\n  grantedToApp: boolean;\n  grantScope: \"all-apps\" | \"selected-apps\";\n  appAccess: WorkspaceConnectionAppAccess;\n  allowedApps: string[];\n  credentialRefs: WorkspaceConnectionPublicCredentialRef[];\n  lastCheckedAt: string | null;\n  lastError: string | null;\n  explicitGrant: WorkspaceConnectionExplicitGrantSummary | null;\n}\n\nexport interface WorkspaceConnectionForApp extends SerializedWorkspaceConnection {\n  appAccess: WorkspaceConnectionAppAccess;\n  explicitGrant: SerializedWorkspaceConnectionGrant | null;\n}\n\nexport interface ResolvedWorkspaceConnectionForApp {\n  available: boolean;\n  connection: WorkspaceConnectionForApp | null;\n  appAccess: WorkspaceConnectionAppAccess | null;\n  reason: string;\n}\n\nexport interface WorkspaceConnectionProviderAppSummary {\n  appId: string;\n  provider: string;\n  grantState: WorkspaceConnectionGrantState;\n  grantAvailability: WorkspaceConnectionGrantAvailability;\n  grantAvailabilityMessage: string;\n  connectionCount: number;\n  grantedConnectionCount: number;\n  activeConnectionCount: number;\n  ungrantedConnectionCount: number;\n  unhealthyGrantedConnectionCount: number;\n  explicitGrantCount: number;\n  credentialRefCount: number;\n  hasWorkspaceConnection: boolean;\n  hasGrantedWorkspaceConnection: boolean;\n  hasActiveWorkspaceConnection: boolean;\n  statuses: WorkspaceConnectionStatus[];\n  connections: WorkspaceConnectionForAppSummary[];\n}\n\nexport interface WorkspaceConnectionProviderReadiness {\n  status: WorkspaceConnectionProviderReadinessStatus;\n  connectionCount: number;\n  activeConnectionCount: number;\n  readyConnectionCount: number;\n  requiredCredentialKeys: string[];\n  missingRequiredCredentialKeys: string[];\n  appGrant: WorkspaceConnectionProviderAppSummary | null;\n}\n\nexport interface WorkspaceConnectionProviderLike {\n  id: string;\n  label?: string;\n  credentialKeys?: readonly {\n    key: string;\n    required?: boolean;\n  }[];\n}\n\nexport interface SummarizeWorkspaceConnectionProviderForAppOptions {\n  providerId: string;\n  appId: string;\n  connections: SerializedWorkspaceConnection[];\n  grants?: SerializedWorkspaceConnectionGrant[];\n  includeConnections?: \"all\" | \"granted\";\n}\n\nexport interface SummarizeWorkspaceConnectionProviderReadinessOptions {\n  provider: WorkspaceConnectionProviderLike;\n  connections: SerializedWorkspaceConnection[];\n  grants?: SerializedWorkspaceConnectionGrant[];\n  appId?: string;\n  includeConnections?: \"all\" | \"granted\";\n}\n\nexport interface ListWorkspaceConnectionProviderCatalogForAppOptions {\n  appId: string;\n  provider?: string;\n  capability?: WorkspaceConnectionCapability;\n  templateUse?: WorkspaceConnectionTemplateUse;\n  includeDisabled?: boolean;\n  includeConnections?: \"all\" | \"granted\";\n}\n\nexport interface WorkspaceConnectionProviderCatalogForAppItem extends WorkspaceConnectionProvider {\n  workspaceConnection: WorkspaceConnectionProviderAppSummary;\n  readiness: WorkspaceConnectionProviderReadiness;\n}\n\nexport interface WorkspaceConnectionProviderCatalogForApp {\n  appId: string;\n  providers: WorkspaceConnectionProviderCatalogForAppItem[];\n  connections: SerializedWorkspaceConnection[];\n  grants: SerializedWorkspaceConnectionGrant[];\n  counts: {\n    providers: number;\n    connections: number;\n    grants: number;\n    readyProviders: number;\n  };\n}\n\nlet _initPromise: Promise<void> | undefined;\n\nfunction workspaceConnectionsTable(): string {\n  return isPostgres()\n    ? \"public.workspace_connections\"\n    : \"workspace_connections\";\n}\n\nfunction workspaceConnectionGrantsTable(): string {\n  return isPostgres()\n    ? \"public.workspace_connection_grants\"\n    : \"workspace_connection_grants\";\n}\n\nfunction isDuplicateColumnError(err: unknown): boolean {\n  const code = String((err as { code?: unknown })?.code ?? \"\");\n  const message = String((err as { message?: unknown })?.message ?? err)\n    .toLowerCase()\n    .trim();\n  return (\n    code === \"42701\" ||\n    message.includes(\"duplicate column\") ||\n    message.includes(\"already exists\")\n  );\n}\n\nasync function ensureColumn(\n  client: DbExec,\n  table: string,\n  name: string,\n  definition: string,\n): Promise<void> {\n  try {\n    await retryOnDdlRace(() =>\n      client.execute(\n        isPostgres()\n          ? `ALTER TABLE ${table} ADD COLUMN IF NOT EXISTS ${name} ${definition}`\n          : `ALTER TABLE ${table} ADD COLUMN ${name} ${definition}`,\n      ),\n    );\n  } catch (err) {\n    if (!isDuplicateColumnError(err)) throw err;\n  }\n}\n\nasync function ensureWorkspaceConnectionColumns(\n  client: DbExec,\n  table: string,\n): Promise<void> {\n  await ensureColumn(client, table, \"provider\", \"TEXT NOT NULL DEFAULT ''\");\n  await ensureColumn(client, table, \"label\", \"TEXT NOT NULL DEFAULT ''\");\n  await ensureColumn(client, table, \"account_id\", \"TEXT\");\n  await ensureColumn(client, table, \"account_label\", \"TEXT\");\n  await ensureColumn(\n    client,\n    table,\n    \"status\",\n    \"TEXT NOT NULL DEFAULT 'connected'\",\n  );\n  await ensureColumn(\n    client,\n    table,\n    \"scopes_json\",\n    \"TEXT NOT NULL DEFAULT '[]'\",\n  );\n  await ensureColumn(\n    client,\n    table,\n    \"config_json\",\n    \"TEXT NOT NULL DEFAULT '{}'\",\n  );\n  await ensureColumn(\n    client,\n    table,\n    \"allowed_apps_json\",\n    \"TEXT NOT NULL DEFAULT '[]'\",\n  );\n  await ensureColumn(\n    client,\n    table,\n    \"credential_refs_json\",\n    \"TEXT NOT NULL DEFAULT '[]'\",\n  );\n  await ensureColumn(client, table, \"owner_email\", \"TEXT NOT NULL DEFAULT ''\");\n  await ensureColumn(client, table, \"org_id\", \"TEXT\");\n  await ensureColumn(\n    client,\n    table,\n    \"created_at\",\n    `${intType()} NOT NULL DEFAULT 0`,\n  );\n  await ensureColumn(\n    client,\n    table,\n    \"updated_at\",\n    `${intType()} NOT NULL DEFAULT 0`,\n  );\n  await ensureColumn(client, table, \"last_checked_at\", intType());\n  await ensureColumn(client, table, \"last_error\", \"TEXT\");\n}\n\nasync function ensureWorkspaceConnectionGrantColumns(\n  client: DbExec,\n  table: string,\n): Promise<void> {\n  await ensureColumn(\n    client,\n    table,\n    \"connection_id\",\n    \"TEXT NOT NULL DEFAULT ''\",\n  );\n  await ensureColumn(client, table, \"provider\", \"TEXT NOT NULL DEFAULT ''\");\n  await ensureColumn(client, table, \"app_id\", \"TEXT NOT NULL DEFAULT ''\");\n  await ensureColumn(\n    client,\n    table,\n    \"scopes_json\",\n    \"TEXT NOT NULL DEFAULT '[]'\",\n  );\n  await ensureColumn(\n    client,\n    table,\n    \"config_json\",\n    \"TEXT NOT NULL DEFAULT '{}'\",\n  );\n  await ensureColumn(\n    client,\n    table,\n    \"credential_refs_json\",\n    \"TEXT NOT NULL DEFAULT '[]'\",\n  );\n  await ensureColumn(\n    client,\n    table,\n    \"granted_by_email\",\n    \"TEXT NOT NULL DEFAULT ''\",\n  );\n  await ensureColumn(client, table, \"owner_email\", \"TEXT NOT NULL DEFAULT ''\");\n  await ensureColumn(client, table, \"org_id\", \"TEXT\");\n  await ensureColumn(\n    client,\n    table,\n    \"created_at\",\n    `${intType()} NOT NULL DEFAULT 0`,\n  );\n  await ensureColumn(\n    client,\n    table,\n    \"updated_at\",\n    `${intType()} NOT NULL DEFAULT 0`,\n  );\n}\n\nexport async function ensureWorkspaceConnectionsTable(): Promise<void> {\n  if (!_initPromise) {\n    _initPromise = (async () => {\n      const client = getDbExec();\n      const table = workspaceConnectionsTable();\n      const grantsTable = workspaceConnectionGrantsTable();\n      await retryOnDdlRace(() =>\n        client.execute(`\n          CREATE TABLE IF NOT EXISTS ${table} (\n            id TEXT PRIMARY KEY,\n            provider TEXT NOT NULL DEFAULT '',\n            label TEXT NOT NULL DEFAULT '',\n            account_id TEXT,\n            account_label TEXT,\n            status TEXT NOT NULL DEFAULT 'connected',\n            scopes_json TEXT NOT NULL DEFAULT '[]',\n            config_json TEXT NOT NULL DEFAULT '{}',\n            allowed_apps_json TEXT NOT NULL DEFAULT '[]',\n            credential_refs_json TEXT NOT NULL DEFAULT '[]',\n            owner_email TEXT NOT NULL DEFAULT '',\n            org_id TEXT,\n            created_at ${intType()} NOT NULL DEFAULT 0,\n            updated_at ${intType()} NOT NULL DEFAULT 0,\n            last_checked_at ${intType()},\n            last_error TEXT\n          )\n        `),\n      );\n\n      await ensureWorkspaceConnectionColumns(client, table);\n\n      await retryOnDdlRace(() =>\n        client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_workspace_connections_scope_provider ON ${table} (org_id, owner_email, provider)`,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_workspace_connections_updated_at ON ${table} (updated_at)`,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(`\n          CREATE TABLE IF NOT EXISTS ${grantsTable} (\n            id TEXT PRIMARY KEY,\n            connection_id TEXT NOT NULL DEFAULT '',\n            provider TEXT NOT NULL DEFAULT '',\n            app_id TEXT NOT NULL DEFAULT '',\n            scopes_json TEXT NOT NULL DEFAULT '[]',\n            config_json TEXT NOT NULL DEFAULT '{}',\n            credential_refs_json TEXT NOT NULL DEFAULT '[]',\n            granted_by_email TEXT NOT NULL DEFAULT '',\n            owner_email TEXT NOT NULL DEFAULT '',\n            org_id TEXT,\n            created_at ${intType()} NOT NULL DEFAULT 0,\n            updated_at ${intType()} NOT NULL DEFAULT 0\n          )\n        `),\n      );\n\n      await ensureWorkspaceConnectionGrantColumns(client, grantsTable);\n\n      await retryOnDdlRace(() =>\n        client.execute(\n          `CREATE UNIQUE INDEX IF NOT EXISTS idx_workspace_connection_grants_connection_app ON ${grantsTable} (connection_id, app_id)`,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_workspace_connection_grants_scope_app ON ${grantsTable} (org_id, owner_email, app_id)`,\n        ),\n      );\n      await retryOnDdlRace(() =>\n        client.execute(\n          `CREATE INDEX IF NOT EXISTS idx_workspace_connection_grants_updated_at ON ${grantsTable} (updated_at)`,\n        ),\n      );\n    })().catch((err) => {\n      _initPromise = undefined;\n      throw err;\n    });\n  }\n  return _initPromise;\n}\n\nfunction requireWorkspaceConnectionScope(): {\n  ownerEmail: string;\n  orgId: string | null;\n} {\n  const ownerEmail = getRequestUserEmail()?.trim().toLowerCase();\n  if (!ownerEmail) {\n    throw new Error(\"Workspace connections require an authenticated user.\");\n  }\n  return {\n    ownerEmail,\n    orgId: getRequestOrgId()?.trim() || null,\n  };\n}\n\nfunction scopedWhere(\n  scope: ReturnType<typeof requireWorkspaceConnectionScope>,\n): { sql: string; args: string[] } {\n  if (scope.orgId) {\n    return { sql: \"org_id = ?\", args: [scope.orgId] };\n  }\n  return {\n    sql: \"owner_email = ? AND org_id IS NULL\",\n    args: [scope.ownerEmail],\n  };\n}\n\nfunction normalizeStringArray(value: unknown): string[] {\n  if (!Array.isArray(value)) return [];\n  return value\n    .filter((entry): entry is string => typeof entry === \"string\")\n    .map((entry) => entry.trim())\n    .filter(Boolean);\n}\n\nfunction normalizeRequiredString(value: unknown, label: string): string {\n  const normalized = typeof value === \"string\" ? value.trim() : \"\";\n  if (!normalized) {\n    throw new Error(`${label} is required.`);\n  }\n  return normalized;\n}\n\nfunction normalizeObject(value: unknown): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return {};\n  return value as Record<string, unknown>;\n}\n\nfunction normalizeCredentialRefs(\n  value: unknown,\n): WorkspaceConnectionCredentialRef[] {\n  if (!Array.isArray(value)) return [];\n  return value\n    .filter(\n      (entry): entry is WorkspaceConnectionCredentialRef =>\n        !!entry &&\n        typeof entry === \"object\" &&\n        !Array.isArray(entry) &&\n        typeof (entry as WorkspaceConnectionCredentialRef).key === \"string\",\n    )\n    .map((entry) => sanitizeCredentialRef(entry))\n    .filter((entry) => entry.key.trim().length > 0);\n}\n\nfunction normalizeStatus(value: unknown): WorkspaceConnectionStatus {\n  if (\n    value === \"checking\" ||\n    value === \"needs_reauth\" ||\n    value === \"error\" ||\n    value === \"disabled\"\n  ) {\n    return value;\n  }\n  return \"connected\";\n}\n\nfunction millis(\n  value: Date | number | string | null | undefined,\n): number | null {\n  if (value == null) return null;\n  if (value instanceof Date) return value.getTime();\n  if (typeof value === \"number\" && Number.isFinite(value)) return value;\n  const parsed = Date.parse(String(value));\n  return Number.isFinite(parsed) ? parsed : null;\n}\n\nfunction iso(value: unknown): string | null {\n  if (value == null) return null;\n  const num = Number(value);\n  if (!Number.isFinite(num) || num <= 0) return null;\n  return new Date(num).toISOString();\n}\n\nconst SECRET_KEYS = new Set([\n  \"apikey\",\n  \"authorization\",\n  \"clientsecret\",\n  \"cookie\",\n  \"password\",\n  \"privatekey\",\n  \"refreshtoken\",\n  \"secret\",\n  \"token\",\n  \"accesstoken\",\n]);\n\nfunction normalizedKey(key: string): string {\n  return key.toLowerCase().replace(/[^a-z0-9]/g, \"\");\n}\n\nfunction sanitizeJson(value: unknown, allowCredentialRefKey = false): unknown {\n  if (Array.isArray(value)) {\n    return value.map((entry) => sanitizeJson(entry, allowCredentialRefKey));\n  }\n  if (!value || typeof value !== \"object\") return value;\n\n  const result: Record<string, unknown> = {};\n  for (const [key, entry] of Object.entries(value)) {\n    const normalized = normalizedKey(key);\n    if (\n      SECRET_KEYS.has(normalized) &&\n      !(allowCredentialRefKey && normalized === \"key\")\n    ) {\n      result[key] = \"[redacted]\";\n      continue;\n    }\n    result[key] = sanitizeJson(entry, allowCredentialRefKey);\n  }\n  return result;\n}\n\nfunction sanitizeConfig(\n  config: Record<string, unknown> | undefined,\n): Record<string, unknown> {\n  return sanitizeJson(normalizeObject(config), false) as Record<\n    string,\n    unknown\n  >;\n}\n\nfunction sanitizeCredentialRef(\n  ref: WorkspaceConnectionCredentialRef,\n): WorkspaceConnectionCredentialRef {\n  const sanitized = sanitizeJson(ref, true) as WorkspaceConnectionCredentialRef;\n  if (Object.prototype.hasOwnProperty.call(sanitized, \"value\")) {\n    sanitized.value = \"[redacted]\";\n  }\n  return sanitized;\n}\n\nfunction parseRow(row: Record<string, unknown>): WorkspaceConnection {\n  return serializeWorkspaceConnection({\n    id: String(row.id),\n    provider: String(row.provider ?? \"\"),\n    label: String(row.label ?? \"\"),\n    accountId: row.account_id == null ? null : String(row.account_id),\n    accountLabel: row.account_label == null ? null : String(row.account_label),\n    status: normalizeStatus(row.status),\n    scopes: normalizeStringArray(safeJsonParse<unknown>(row.scopes_json, [])),\n    config: normalizeObject(safeJsonParse<unknown>(row.config_json, {})),\n    allowedApps: normalizeStringArray(\n      safeJsonParse<unknown>(row.allowed_apps_json, []),\n    ),\n    credentialRefs: normalizeCredentialRefs(\n      safeJsonParse<unknown>(row.credential_refs_json, []),\n    ),\n    ownerEmail: String(row.owner_email ?? \"\"),\n    orgId: row.org_id == null ? null : String(row.org_id),\n    createdAt: iso(row.created_at) ?? new Date(0).toISOString(),\n    updatedAt: iso(row.updated_at) ?? new Date(0).toISOString(),\n    lastCheckedAt: iso(row.last_checked_at),\n    lastError: row.last_error == null ? null : String(row.last_error),\n  });\n}\n\nfunction parseGrantRow(row: Record<string, unknown>): WorkspaceConnectionGrant {\n  return serializeWorkspaceConnectionGrant({\n    id: String(row.id),\n    connectionId: String(row.connection_id ?? \"\"),\n    provider: String(row.provider ?? \"\"),\n    appId: String(row.app_id ?? \"\"),\n    scopes: normalizeStringArray(safeJsonParse<unknown>(row.scopes_json, [])),\n    config: normalizeObject(safeJsonParse<unknown>(row.config_json, {})),\n    credentialRefs: normalizeCredentialRefs(\n      safeJsonParse<unknown>(row.credential_refs_json, []),\n    ),\n    grantedByEmail: String(row.granted_by_email ?? \"\"),\n    ownerEmail: String(row.owner_email ?? \"\"),\n    orgId: row.org_id == null ? null : String(row.org_id),\n    createdAt: iso(row.created_at) ?? new Date(0).toISOString(),\n    updatedAt: iso(row.updated_at) ?? new Date(0).toISOString(),\n  });\n}\n\nexport function serializeWorkspaceConnection(\n  connection: WorkspaceConnection,\n): SerializedWorkspaceConnection {\n  return {\n    ...connection,\n    scopes: normalizeStringArray(connection.scopes),\n    config: sanitizeConfig(connection.config),\n    allowedApps: normalizeStringArray(connection.allowedApps),\n    credentialRefs: normalizeCredentialRefs(connection.credentialRefs),\n  };\n}\n\nexport function serializeWorkspaceConnectionGrant(\n  grant: WorkspaceConnectionGrant,\n): SerializedWorkspaceConnectionGrant {\n  return {\n    ...grant,\n    scopes: normalizeStringArray(grant.scopes),\n    config: sanitizeConfig(grant.config),\n    credentialRefs: normalizeCredentialRefs(grant.credentialRefs),\n  };\n}\n\nexport function getWorkspaceConnectionAppAccess(\n  connection: Pick<\n    SerializedWorkspaceConnection,\n    \"id\" | \"allowedApps\" | \"label\"\n  >,\n  appId: string,\n  grants: Pick<\n    SerializedWorkspaceConnectionGrant,\n    \"id\" | \"connectionId\" | \"appId\"\n  >[] = [],\n): WorkspaceConnectionAppAccess {\n  const normalizedAppId = appId.trim();\n  if (!normalizedAppId) {\n    return {\n      appId: normalizedAppId,\n      available: false,\n      mode: \"unavailable\",\n      reason: \"No app id was provided.\",\n      grantId: null,\n    };\n  }\n\n  if (connection.allowedApps.length === 0) {\n    return {\n      appId: normalizedAppId,\n      available: true,\n      mode: \"all-apps\",\n      reason: \"Connection is available to every app in the workspace.\",\n      grantId: null,\n    };\n  }\n\n  if (connection.allowedApps.includes(normalizedAppId)) {\n    return {\n      appId: normalizedAppId,\n      available: true,\n      mode: \"allowed-app\",\n      reason: `Connection is directly allowed for ${normalizedAppId}.`,\n      grantId: null,\n    };\n  }\n\n  const explicitGrant = grants.find(\n    (grant) =>\n      grant.connectionId === connection.id && grant.appId === normalizedAppId,\n  );\n  if (explicitGrant) {\n    return {\n      appId: normalizedAppId,\n      available: true,\n      mode: \"explicit-grant\",\n      reason: `Connection has an explicit grant for ${normalizedAppId}.`,\n      grantId: explicitGrant.id,\n    };\n  }\n\n  return {\n    appId: normalizedAppId,\n    available: false,\n    mode: \"unavailable\",\n    reason: `Grant ${normalizedAppId} access before this connection can be reused by the app.`,\n    grantId: null,\n  };\n}\n\nexport function workspaceConnectionIsAvailableToApp(\n  connection: Pick<\n    SerializedWorkspaceConnection,\n    \"id\" | \"allowedApps\" | \"label\"\n  >,\n  appId: string,\n  grants: Pick<\n    SerializedWorkspaceConnectionGrant,\n    \"id\" | \"connectionId\" | \"appId\"\n  >[] = [],\n): boolean {\n  return getWorkspaceConnectionAppAccess(connection, appId, grants).available;\n}\n\nfunction uniqueStrings(values: string[]): string[] {\n  return Array.from(\n    new Set(values.map((value) => value.trim()).filter(Boolean)),\n  );\n}\n\nfunction publicCredentialRefs(\n  refs: WorkspaceConnectionCredentialRef[],\n  source: WorkspaceConnectionPublicCredentialRef[\"source\"],\n): WorkspaceConnectionPublicCredentialRef[] {\n  return refs.map((ref) => ({\n    key: ref.key,\n    scope: ref.scope,\n    provider: ref.provider,\n    label: ref.label,\n    source,\n  }));\n}\n\nfunction grantsForConnection(\n  connectionId: string,\n  grants: SerializedWorkspaceConnectionGrant[],\n  appId?: string,\n): SerializedWorkspaceConnectionGrant[] {\n  return grants.filter(\n    (grant) =>\n      grant.connectionId === connectionId && (!appId || grant.appId === appId),\n  );\n}\n\nfunction explicitGrantForConnection(\n  connectionId: string,\n  grants: SerializedWorkspaceConnectionGrant[],\n  appId?: string,\n): SerializedWorkspaceConnectionGrant | undefined {\n  return grantsForConnection(connectionId, grants, appId)[0];\n}\n\nfunction connectionForApp(\n  connection: SerializedWorkspaceConnection,\n  appId: string,\n  grants: SerializedWorkspaceConnectionGrant[],\n): WorkspaceConnectionForApp {\n  const normalizedAppId = appId.trim();\n  const appAccess = getWorkspaceConnectionAppAccess(\n    connection,\n    normalizedAppId,\n    grants,\n  );\n  return {\n    ...connection,\n    appAccess,\n    explicitGrant:\n      explicitGrantForConnection(connection.id, grants, normalizedAppId) ??\n      null,\n  };\n}\n\nfunction serializeConnectionForApp(\n  connection: SerializedWorkspaceConnection,\n  appId: string,\n  grants: SerializedWorkspaceConnectionGrant[],\n): WorkspaceConnectionForAppSummary {\n  const explicitGrant = explicitGrantForConnection(\n    connection.id,\n    grants,\n    appId,\n  );\n  const appAccess = getWorkspaceConnectionAppAccess(connection, appId, grants);\n  return {\n    id: connection.id,\n    label: connection.label,\n    provider: connection.provider,\n    accountId: connection.accountId,\n    accountLabel: connection.accountLabel,\n    status: connection.status,\n    grantedToApp: appAccess.available,\n    grantScope:\n      connection.allowedApps.length === 0 ? \"all-apps\" : \"selected-apps\",\n    appAccess,\n    allowedApps: connection.allowedApps,\n    credentialRefs: publicCredentialRefs(\n      connection.credentialRefs,\n      \"connection\",\n    ),\n    lastCheckedAt: connection.lastCheckedAt,\n    lastError: connection.lastError,\n    explicitGrant: explicitGrant\n      ? {\n          id: explicitGrant.id,\n          appId: explicitGrant.appId,\n          scopes: explicitGrant.scopes,\n          credentialRefs: publicCredentialRefs(\n            explicitGrant.credentialRefs,\n            \"grant\",\n          ),\n          updatedAt: explicitGrant.updatedAt,\n        }\n      : null,\n  };\n}\n\nfunction grantAvailabilityMessage(\n  grantState: WorkspaceConnectionGrantState,\n  providerId: string,\n  appId: string,\n): string {\n  switch (grantState) {\n    case \"connected\":\n      return `${appId} has an active ${providerId} workspace connection.`;\n    case \"granted\":\n      return `${appId} has ${providerId} access, but the granted connection is not connected yet.`;\n    case \"needs_grant\":\n      return `A ${providerId} workspace connection exists; grant ${appId} access to reuse it.`;\n    case \"not_connected\":\n    default:\n      return `No shared ${providerId} workspace connection is available yet.`;\n  }\n}\n\nexport function summarizeWorkspaceConnectionProviderForApp({\n  providerId,\n  appId,\n  connections,\n  grants = [],\n  includeConnections = \"granted\",\n}: SummarizeWorkspaceConnectionProviderForAppOptions): WorkspaceConnectionProviderAppSummary {\n  const normalizedProviderId = providerId.trim();\n  const normalizedAppId = appId.trim();\n  const allConnections = connections.filter(\n    (connection) => connection.provider === normalizedProviderId,\n  );\n  const grantedConnections = allConnections.filter(\n    (connection) =>\n      getWorkspaceConnectionAppAccess(connection, normalizedAppId, grants)\n        .available,\n  );\n  const connectedConnections = grantedConnections.filter(\n    (connection) => connection.status === \"connected\",\n  );\n  const ungrantedConnectionCount =\n    allConnections.length - grantedConnections.length;\n  const unhealthyGrantedConnectionCount =\n    grantedConnections.length - connectedConnections.length;\n  const grantState: WorkspaceConnectionGrantState = connectedConnections.length\n    ? \"connected\"\n    : grantedConnections.length\n      ? \"granted\"\n      : allConnections.length\n        ? \"needs_grant\"\n        : \"not_connected\";\n  const explicitGrantCount = allConnections.reduce(\n    (count, connection) =>\n      explicitGrantForConnection(connection.id, grants, normalizedAppId)\n        ? count + 1\n        : count,\n    0,\n  );\n  const credentialRefCount = allConnections.reduce((count, connection) => {\n    const explicitGrant = explicitGrantForConnection(\n      connection.id,\n      grants,\n      normalizedAppId,\n    );\n    return (\n      count +\n      connection.credentialRefs.length +\n      (explicitGrant?.credentialRefs.length ?? 0)\n    );\n  }, 0);\n  const visibleConnections =\n    includeConnections === \"all\" ? allConnections : grantedConnections;\n\n  return {\n    appId: normalizedAppId,\n    provider: normalizedProviderId,\n    grantState,\n    grantAvailability:\n      grantState === \"connected\" || grantState === \"granted\"\n        ? \"available\"\n        : grantState,\n    grantAvailabilityMessage: grantAvailabilityMessage(\n      grantState,\n      normalizedProviderId,\n      normalizedAppId,\n    ),\n    connectionCount: allConnections.length,\n    grantedConnectionCount: grantedConnections.length,\n    activeConnectionCount: connectedConnections.length,\n    ungrantedConnectionCount,\n    unhealthyGrantedConnectionCount,\n    explicitGrantCount,\n    credentialRefCount,\n    hasWorkspaceConnection: allConnections.length > 0,\n    hasGrantedWorkspaceConnection: grantedConnections.length > 0,\n    hasActiveWorkspaceConnection: connectedConnections.length > 0,\n    statuses: uniqueStrings(\n      allConnections.map((connection) => connection.status),\n    ) as WorkspaceConnectionStatus[],\n    connections: visibleConnections.map((connection) =>\n      serializeConnectionForApp(connection, normalizedAppId, grants),\n    ),\n  };\n}\n\nfunction requiredCredentialKeys(provider: WorkspaceConnectionProviderLike) {\n  return uniqueStrings(\n    (provider.credentialKeys ?? [])\n      .filter((credential) => credential.required ?? false)\n      .map((credential) => credential.key),\n  );\n}\n\nfunction missingRequiredCredentialKeys(\n  provider: WorkspaceConnectionProviderLike,\n  connection: SerializedWorkspaceConnection,\n  grants: SerializedWorkspaceConnectionGrant[] = [],\n): string[] {\n  const available = new Set(\n    [\n      ...connection.credentialRefs,\n      ...grants.flatMap((grant) => grant.credentialRefs),\n    ]\n      .map((ref) => ref.key.trim())\n      .filter(Boolean),\n  );\n  return requiredCredentialKeys(provider).filter((key) => !available.has(key));\n}\n\nexport function summarizeWorkspaceConnectionProviderReadiness({\n  provider,\n  connections,\n  grants = [],\n  appId,\n  includeConnections,\n}: SummarizeWorkspaceConnectionProviderReadinessOptions): WorkspaceConnectionProviderReadiness {\n  const providerConnections = connections.filter(\n    (connection) => connection.provider === provider.id,\n  );\n  const activeConnections = providerConnections.filter(\n    (connection) => connection.status !== \"disabled\",\n  );\n  const attentionConnections = activeConnections.filter(\n    (connection) =>\n      connection.status === \"error\" ||\n      connection.status === \"needs_reauth\" ||\n      Boolean(connection.lastError),\n  );\n  const missingKeys = uniqueStrings(\n    activeConnections.flatMap((connection) =>\n      missingRequiredCredentialKeys(\n        provider,\n        connection,\n        grantsForConnection(connection.id, grants, appId),\n      ),\n    ),\n  );\n  const readyConnections = activeConnections.filter(\n    (connection) =>\n      connection.status === \"connected\" &&\n      missingRequiredCredentialKeys(\n        provider,\n        connection,\n        grantsForConnection(connection.id, grants, appId),\n      ).length === 0,\n  );\n  const checkingConnections = activeConnections.filter(\n    (connection) => connection.status === \"checking\",\n  );\n\n  let status: WorkspaceConnectionProviderReadinessStatus = \"not_configured\";\n  if (readyConnections.length > 0) {\n    status = \"ready\";\n  } else if (attentionConnections.length > 0) {\n    status = \"needs_attention\";\n  } else if (missingKeys.length > 0) {\n    status = \"needs_credentials\";\n  } else if (checkingConnections.length > 0) {\n    status = \"checking\";\n  } else if (providerConnections.length > 0) {\n    status = \"disabled\";\n  }\n\n  return {\n    status,\n    connectionCount: providerConnections.length,\n    activeConnectionCount: activeConnections.length,\n    readyConnectionCount: readyConnections.length,\n    requiredCredentialKeys: requiredCredentialKeys(provider),\n    missingRequiredCredentialKeys: missingKeys,\n    appGrant: appId\n      ? summarizeWorkspaceConnectionProviderForApp({\n          providerId: provider.id,\n          appId,\n          connections,\n          grants,\n          includeConnections,\n        })\n      : null,\n  };\n}\n\nexport async function listWorkspaceConnectionProviderCatalogForApp({\n  appId,\n  provider,\n  capability,\n  templateUse,\n  includeDisabled = true,\n  includeConnections = \"all\",\n}: ListWorkspaceConnectionProviderCatalogForAppOptions): Promise<WorkspaceConnectionProviderCatalogForApp> {\n  const [connections, grants] = await Promise.all([\n    listWorkspaceConnections({ provider, includeDisabled }),\n    listWorkspaceConnectionGrants({ provider, appId }),\n  ]);\n  const providers = listWorkspaceConnectionProviders({\n    capability,\n    templateUse,\n  })\n    .filter((item) => !provider || item.id === provider)\n    .map((item) => {\n      const workspaceConnection = summarizeWorkspaceConnectionProviderForApp({\n        providerId: item.id,\n        appId,\n        connections,\n        grants,\n        includeConnections,\n      });\n      const readiness = summarizeWorkspaceConnectionProviderReadiness({\n        provider: item,\n        connections,\n        grants,\n        appId,\n        includeConnections,\n      });\n      return {\n        ...item,\n        workspaceConnection,\n        readiness,\n      };\n    });\n\n  return {\n    appId,\n    providers,\n    connections,\n    grants,\n    counts: {\n      providers: providers.length,\n      connections: connections.length,\n      grants: grants.length,\n      readyProviders: providers.filter(\n        (item) => item.readiness.status === \"ready\",\n      ).length,\n    },\n  };\n}\n\nexport async function listWorkspaceConnectionsForApp({\n  appId,\n  provider,\n  includeDisabled = false,\n}: ListWorkspaceConnectionsForAppOptions): Promise<\n  WorkspaceConnectionForApp[]\n> {\n  const normalizedAppId = normalizeRequiredString(\n    appId,\n    \"listWorkspaceConnectionsForApp appId\",\n  );\n  const [connections, grants] = await Promise.all([\n    listWorkspaceConnections({ provider, includeDisabled }),\n    listWorkspaceConnectionGrants({ provider, appId: normalizedAppId }),\n  ]);\n\n  return connections\n    .map((connection) => connectionForApp(connection, normalizedAppId, grants))\n    .filter((connection) => connection.appAccess.available);\n}\n\nexport async function resolveWorkspaceConnectionForApp({\n  appId,\n  provider,\n  includeDisabled = false,\n  connectionId,\n  requireConnected = false,\n}: ResolveWorkspaceConnectionForAppOptions): Promise<ResolvedWorkspaceConnectionForApp> {\n  const normalizedAppId = normalizeRequiredString(\n    appId,\n    \"resolveWorkspaceConnectionForApp appId\",\n  );\n  const normalizedConnectionId = connectionId?.trim();\n  const requestedConnections = await listWorkspaceConnections({\n    provider,\n    includeDisabled: includeDisabled || Boolean(normalizedConnectionId),\n  });\n  const candidateConnections = normalizedConnectionId\n    ? requestedConnections.filter(\n        (connection) => connection.id === normalizedConnectionId,\n      )\n    : requestedConnections;\n  const grants = await listWorkspaceConnectionGrants({\n    provider,\n    appId: normalizedAppId,\n    connectionId: normalizedConnectionId,\n  });\n\n  if (normalizedConnectionId && candidateConnections.length === 0) {\n    return {\n      available: false,\n      connection: null,\n      appAccess: null,\n      reason: `Workspace connection \"${normalizedConnectionId}\" was not found in the current request scope.`,\n    };\n  }\n\n  for (const connection of candidateConnections) {\n    const connectionWithAccess = connectionForApp(\n      connection,\n      normalizedAppId,\n      grants,\n    );\n\n    if (!connectionWithAccess.appAccess.available) {\n      if (normalizedConnectionId) {\n        return {\n          available: false,\n          connection: connectionWithAccess,\n          appAccess: connectionWithAccess.appAccess,\n          reason: connectionWithAccess.appAccess.reason,\n        };\n      }\n      continue;\n    }\n\n    if (!includeDisabled && connection.status === \"disabled\") {\n      if (normalizedConnectionId) {\n        return {\n          available: false,\n          connection: connectionWithAccess,\n          appAccess: connectionWithAccess.appAccess,\n          reason: `Workspace connection \"${connection.id}\" is disabled.`,\n        };\n      }\n      continue;\n    }\n\n    if (requireConnected && connection.status !== \"connected\") {\n      if (normalizedConnectionId) {\n        return {\n          available: false,\n          connection: connectionWithAccess,\n          appAccess: connectionWithAccess.appAccess,\n          reason: `Workspace connection \"${connection.id}\" is ${connection.status}; a connected workspace connection is required.`,\n        };\n      }\n      continue;\n    }\n\n    return {\n      available: true,\n      connection: connectionWithAccess,\n      appAccess: connectionWithAccess.appAccess,\n      reason: connectionWithAccess.appAccess.reason,\n    };\n  }\n\n  return {\n    available: false,\n    connection: null,\n    appAccess: null,\n    reason: provider\n      ? `No available ${provider} workspace connection was found for ${normalizedAppId}.`\n      : `No available workspace connection was found for ${normalizedAppId}.`,\n  };\n}\n\nasync function getGrantedConnectionIdsForApp(\n  client: DbExec,\n  scope: ReturnType<typeof requireWorkspaceConnectionScope>,\n  appId: string,\n): Promise<Set<string>> {\n  const table = workspaceConnectionGrantsTable();\n  const where = scopedWhere(scope);\n  const { rows } = await client.execute({\n    sql: `SELECT connection_id FROM ${table} WHERE app_id = ? AND ${where.sql}`,\n    args: [appId, ...where.args],\n  });\n  return new Set(\n    rows\n      .map((row) =>\n        String((row as Record<string, unknown>).connection_id ?? \"\"),\n      )\n      .filter(Boolean),\n  );\n}\n\nexport async function listWorkspaceConnections(\n  options: ListWorkspaceConnectionsOptions = {},\n): Promise<SerializedWorkspaceConnection[]> {\n  await ensureWorkspaceConnectionsTable();\n  const client = getDbExec();\n  const table = workspaceConnectionsTable();\n  const scope = requireWorkspaceConnectionScope();\n  const where = scopedWhere(scope);\n  const clauses = [where.sql];\n  const args: unknown[] = [...where.args];\n  const appId = options.appId?.trim();\n\n  if (options.provider) {\n    clauses.push(\"provider = ?\");\n    args.push(options.provider);\n  }\n  if (!options.includeDisabled) {\n    clauses.push(\"status != ?\");\n    args.push(\"disabled\");\n  }\n\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM ${table} WHERE ${clauses.join(\n      \" AND \",\n    )} ORDER BY updated_at DESC`,\n    args,\n  });\n\n  const connections = rows.map((row) =>\n    parseRow(row as Record<string, unknown>),\n  );\n  if (!appId) return connections;\n\n  const grantedConnectionIds = await getGrantedConnectionIdsForApp(\n    client,\n    scope,\n    appId,\n  );\n  return connections.filter(\n    (connection) =>\n      connection.allowedApps.length === 0 ||\n      connection.allowedApps.includes(appId) ||\n      grantedConnectionIds.has(connection.id),\n  );\n}\n\nexport async function getWorkspaceConnection(\n  id: string,\n): Promise<SerializedWorkspaceConnection | null> {\n  await ensureWorkspaceConnectionsTable();\n  const client = getDbExec();\n  const table = workspaceConnectionsTable();\n  const scope = requireWorkspaceConnectionScope();\n  const where = scopedWhere(scope);\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM ${table} WHERE id = ? AND ${where.sql} LIMIT 1`,\n    args: [id, ...where.args],\n  });\n  if (rows.length === 0) return null;\n  return parseRow(rows[0] as Record<string, unknown>);\n}\n\nexport async function upsertWorkspaceConnection(\n  input: UpsertWorkspaceConnectionInput,\n): Promise<SerializedWorkspaceConnection> {\n  await ensureWorkspaceConnectionsTable();\n  const provider = input.provider.trim();\n  if (!provider) {\n    throw new Error(\"upsertWorkspaceConnection requires a provider.\");\n  }\n\n  const client = getDbExec();\n  const table = workspaceConnectionsTable();\n  const scope = requireWorkspaceConnectionScope();\n  const where = scopedWhere(scope);\n  const id = input.id?.trim() || randomUUID();\n  const now = Date.now();\n  const label = input.label?.trim() || input.accountLabel?.trim() || provider;\n  const status = normalizeStatus(input.status);\n  const scopes = normalizeStringArray(input.scopes);\n  const config = sanitizeConfig(input.config);\n  const allowedApps = normalizeStringArray(input.allowedApps);\n  const credentialRefs = normalizeCredentialRefs(input.credentialRefs);\n  const lastCheckedAt = millis(input.lastCheckedAt);\n  const lastError = input.lastError ?? null;\n\n  const update = await client.execute({\n    sql: `UPDATE ${table}\n      SET provider = ?, label = ?, account_id = ?, account_label = ?,\n        status = ?, scopes_json = ?, config_json = ?, allowed_apps_json = ?,\n        credential_refs_json = ?, updated_at = ?, last_checked_at = ?,\n        last_error = ?\n      WHERE id = ? AND ${where.sql}`,\n    args: [\n      provider,\n      label,\n      input.accountId ?? null,\n      input.accountLabel ?? null,\n      status,\n      JSON.stringify(scopes),\n      JSON.stringify(config),\n      JSON.stringify(allowedApps),\n      JSON.stringify(credentialRefs),\n      now,\n      lastCheckedAt,\n      lastError,\n      id,\n      ...where.args,\n    ],\n  });\n\n  if (update.rowsAffected === 0) {\n    try {\n      await client.execute({\n        sql: `INSERT INTO ${table}\n          (id, provider, label, account_id, account_label, status,\n            scopes_json, config_json, allowed_apps_json, credential_refs_json,\n            owner_email, org_id, created_at, updated_at, last_checked_at,\n            last_error)\n          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n        args: [\n          id,\n          provider,\n          label,\n          input.accountId ?? null,\n          input.accountLabel ?? null,\n          status,\n          JSON.stringify(scopes),\n          JSON.stringify(config),\n          JSON.stringify(allowedApps),\n          JSON.stringify(credentialRefs),\n          scope.ownerEmail,\n          scope.orgId,\n          now,\n          now,\n          lastCheckedAt,\n          lastError,\n        ],\n      });\n    } catch (err) {\n      if (isUniqueViolation(err)) {\n        throw new Error(\n          `Workspace connection \"${id}\" already exists outside the current request scope.`,\n        );\n      }\n      throw err;\n    }\n  }\n\n  const connection = await getWorkspaceConnection(id);\n  if (!connection) {\n    throw new Error(`Workspace connection \"${id}\" was not found after upsert.`);\n  }\n  return connection;\n}\n\nexport async function listWorkspaceConnectionGrants(\n  options: ListWorkspaceConnectionGrantsOptions = {},\n): Promise<SerializedWorkspaceConnectionGrant[]> {\n  await ensureWorkspaceConnectionsTable();\n  const client = getDbExec();\n  const table = workspaceConnectionGrantsTable();\n  const scope = requireWorkspaceConnectionScope();\n  const where = scopedWhere(scope);\n  const clauses = [where.sql];\n  const args: unknown[] = [...where.args];\n  const connectionId = options.connectionId?.trim();\n  const appId = options.appId?.trim();\n  const provider = options.provider?.trim();\n\n  if (connectionId) {\n    clauses.push(\"connection_id = ?\");\n    args.push(connectionId);\n  }\n  if (appId) {\n    clauses.push(\"app_id = ?\");\n    args.push(appId);\n  }\n  if (provider) {\n    clauses.push(\"provider = ?\");\n    args.push(provider);\n  }\n\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM ${table} WHERE ${clauses.join(\n      \" AND \",\n    )} ORDER BY updated_at DESC`,\n    args,\n  });\n\n  return rows.map((row) => parseGrantRow(row as Record<string, unknown>));\n}\n\nexport async function getWorkspaceConnectionGrant(\n  connectionId: string,\n  appId: string,\n): Promise<SerializedWorkspaceConnectionGrant | null> {\n  await ensureWorkspaceConnectionsTable();\n  const normalizedConnectionId = normalizeRequiredString(\n    connectionId,\n    \"getWorkspaceConnectionGrant connectionId\",\n  );\n  const normalizedAppId = normalizeRequiredString(\n    appId,\n    \"getWorkspaceConnectionGrant appId\",\n  );\n  const client = getDbExec();\n  const table = workspaceConnectionGrantsTable();\n  const scope = requireWorkspaceConnectionScope();\n  const where = scopedWhere(scope);\n  const { rows } = await client.execute({\n    sql: `SELECT * FROM ${table} WHERE connection_id = ? AND app_id = ? AND ${where.sql} LIMIT 1`,\n    args: [normalizedConnectionId, normalizedAppId, ...where.args],\n  });\n  if (rows.length === 0) return null;\n  return parseGrantRow(rows[0] as Record<string, unknown>);\n}\n\nexport async function upsertWorkspaceConnectionGrant(\n  input: UpsertWorkspaceConnectionGrantInput,\n): Promise<SerializedWorkspaceConnectionGrant> {\n  await ensureWorkspaceConnectionsTable();\n  const connectionId = normalizeRequiredString(\n    input.connectionId,\n    \"upsertWorkspaceConnectionGrant connectionId\",\n  );\n  const appId = normalizeRequiredString(\n    input.appId,\n    \"upsertWorkspaceConnectionGrant appId\",\n  );\n\n  const connection = await getWorkspaceConnection(connectionId);\n  if (!connection) {\n    throw new Error(\n      `Workspace connection \"${connectionId}\" was not found in the current request scope.`,\n    );\n  }\n\n  const client = getDbExec();\n  const table = workspaceConnectionGrantsTable();\n  const scope = requireWorkspaceConnectionScope();\n  const where = scopedWhere(scope);\n  const id = input.id?.trim() || randomUUID();\n  const now = Date.now();\n  const provider = input.provider?.trim() || connection.provider;\n  const scopes = normalizeStringArray(input.scopes);\n  const config = sanitizeConfig(input.config);\n  const credentialRefs = normalizeCredentialRefs(input.credentialRefs);\n\n  const update = await client.execute({\n    sql: `UPDATE ${table}\n      SET provider = ?, scopes_json = ?, config_json = ?,\n        credential_refs_json = ?, granted_by_email = ?, updated_at = ?\n      WHERE connection_id = ? AND app_id = ? AND ${where.sql}`,\n    args: [\n      provider,\n      JSON.stringify(scopes),\n      JSON.stringify(config),\n      JSON.stringify(credentialRefs),\n      scope.ownerEmail,\n      now,\n      connectionId,\n      appId,\n      ...where.args,\n    ],\n  });\n\n  if (update.rowsAffected === 0) {\n    try {\n      await client.execute({\n        sql: `INSERT INTO ${table}\n          (id, connection_id, provider, app_id, scopes_json, config_json,\n            credential_refs_json, granted_by_email, owner_email, org_id,\n            created_at, updated_at)\n          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n        args: [\n          id,\n          connectionId,\n          provider,\n          appId,\n          JSON.stringify(scopes),\n          JSON.stringify(config),\n          JSON.stringify(credentialRefs),\n          scope.ownerEmail,\n          scope.ownerEmail,\n          scope.orgId,\n          now,\n          now,\n        ],\n      });\n    } catch (err) {\n      if (isUniqueViolation(err)) {\n        throw new Error(\n          `Workspace connection grant for \"${connectionId}\" and \"${appId}\" already exists outside the current request scope.`,\n        );\n      }\n      throw err;\n    }\n  }\n\n  const grant = await getWorkspaceConnectionGrant(connectionId, appId);\n  if (!grant) {\n    throw new Error(\n      `Workspace connection grant for \"${connectionId}\" and \"${appId}\" was not found after upsert.`,\n    );\n  }\n  return grant;\n}\n\nexport async function revokeWorkspaceConnectionGrant(\n  connectionId: string,\n  appId: string,\n): Promise<boolean> {\n  await ensureWorkspaceConnectionsTable();\n  const normalizedConnectionId = normalizeRequiredString(\n    connectionId,\n    \"revokeWorkspaceConnectionGrant connectionId\",\n  );\n  const normalizedAppId = normalizeRequiredString(\n    appId,\n    \"revokeWorkspaceConnectionGrant appId\",\n  );\n  const client = getDbExec();\n  const table = workspaceConnectionGrantsTable();\n  const scope = requireWorkspaceConnectionScope();\n  const where = scopedWhere(scope);\n  const result = await client.execute({\n    sql: `DELETE FROM ${table} WHERE connection_id = ? AND app_id = ? AND ${where.sql}`,\n    args: [normalizedConnectionId, normalizedAppId, ...where.args],\n  });\n  return result.rowsAffected > 0;\n}\n\nexport async function deleteWorkspaceConnection(id: string): Promise<boolean> {\n  await ensureWorkspaceConnectionsTable();\n  const client = getDbExec();\n  const table = workspaceConnectionsTable();\n  const grantsTable = workspaceConnectionGrantsTable();\n  const scope = requireWorkspaceConnectionScope();\n  const where = scopedWhere(scope);\n  const result = await client.execute({\n    sql: `DELETE FROM ${table} WHERE id = ? AND ${where.sql}`,\n    args: [id, ...where.args],\n  });\n  if (result.rowsAffected > 0) {\n    await client.execute({\n      sql: `DELETE FROM ${grantsTable} WHERE connection_id = ? AND ${where.sql}`,\n      args: [id, ...where.args],\n    });\n  }\n  return result.rowsAffected > 0;\n}\n"]}

package/docs/content/agent-teams.md

@@ -18,6 +18,12 @@ This keeps the main thread focused, lets sub-agents run in parallel, and gives y
 
 Sub-agent state is persisted in the `application_state` SQL table (under `agent-task:<taskId>`), so tasks survive serverless cold starts and work across multiple processes.
 
+Agent Teams runs on the same core `run-manager` harness as hosted agent chat:
+events are streamed and persisted, aborts propagate through SQL, heartbeats mark
+active work, and stale runs can be reaped consistently. New background-agent UIs
+should reuse `run-manager` or `spawnTask()` instead of introducing a separate
+runner with its own lifecycle rules.
+
 ## When to spawn a sub-agent {#when-to-spawn}
 
 Spawn when the task:

package/docs/content/cloneable-saas.md

@@ -18,6 +18,7 @@ Each one is a real app you could use today, and the launching pad for your own v
 | **Mail**      | An agent-native Superhuman. Inbox, labels, AI triage, keyboard-first, drafts and sends through the agent.      |
 | **Calendar**  | An agent-native Google Calendar. Events, sync, public booking links, agent-driven scheduling.                  |
 | **Content**   | An agent-native Notion / Google Docs. Markdown + Tiptap editor, Notion sync, real-time multi-user collab.      |
+| **Brain**     | A whole-company memory app: full-page company chat, cited decisions, review queue, and approved sources.       |
 | **Slides**    | An agent-native Google Slides. React-based decks the agent generates and edits directly.                       |
 | **Video**     | An agent-native video editor on Remotion. Prompt for a cut, the agent assembles it.                            |
 | **Analytics** | An agent-native Amplitude/Mixpanel. Connect data sources, prompt for charts, pin to dashboards.                |

package/docs/content/code-agents-ui.md

@@ -0,0 +1,261 @@
+---
+title: "Agent-Native Code UI"
+description: "Build and customize Agent-Native Code surfaces with the shared UI package, Desktop host bridge, CLI run store, and hidden code template."
+---
+
+# Agent-Native Code UI
+
+Agent-Native Code is the Agent-Native coding surface: a local Claude Code/Codex-style workspace for coding sessions, slash commands, migrations, audits, transcripts, and follow-ups.
+
+There are three layers:
+
+- **CLI**: `npx @agent-native/core@latest code` starts and resumes runs.
+- **Desktop**: the left-sidebar Code surface adds native terminal launch, app webviews, and desktop deep links.
+- **Shared UI**: `@agent-native/code-agents-ui` renders the reusable React surface.
+
+The shared UI is host-driven. It does not know whether it is running in Electron, a browser template, or a future hosted shell. Hosts provide a `CodeAgentsHost` implementation.
+
+```ts
+import { CodeAgentsApp, type CodeAgentsHost } from "@agent-native/code-agents-ui";
+import "@agent-native/code-agents-ui/styles.css";
+
+const host: CodeAgentsHost = {
+  listRuns: (goalId) => listRunsSomehow(goalId),
+  listCodePacks: () => listCodePacksSomehow(),
+  createRun: (request) => createRunSomehow(request),
+  readTranscript: (request) => readTranscriptSomehow(request),
+  appendFollowUp: (request) => appendFollowUpSomehow(request),
+  updateRun: (request) => updateRunSomehow(request),
+  retryRun: (request) => retryRunSomehow(request),
+  rerunRun: (request) => rerunRunSomehow(request),
+  controlRun: (goalId, runId, command, permissionMode) =>
+    controlRunSomehow({ goalId, runId, command, permissionMode }),
+};
+
+export function CodeSurface() {
+  return <CodeAgentsApp apps={[]} host={host} />;
+}
+```
+
+## Desktop Host
+
+Desktop uses the shared UI but keeps privileged capabilities in Electron:
+
+- opening a native terminal
+- rendering optional app-backed surfaces with `AppWebview`
+- handling `agentnative://open?...` links
+- tracking local run processes
+- recording steering vs queued follow-ups for active runs
+- retrying and re-running native Code sessions, including `/migrate` and `/audit`
+- stopping a process it started
+
+That separation matters. The UI can be reused by templates, but native process control should stay in Desktop or CLI.
+
+## Browser Template
+
+The hidden `code` template is a starting point for building your own Agent-Native Code UI:
+
+```bash
+npx @agent-native/core@latest create my-code-ui --template code
+cd my-code-ui
+pnpm install
+pnpm dev
+```
+
+Inside the framework repo, run it directly with:
+
+```bash
+cd templates/code
+pnpm install
+pnpm dev
+```
+
+The template wraps the local run store through normal actions:
+
+- `list-code-agent-runs`
+- `list-code-agent-packs`
+- `create-code-agent-run`
+- `read-code-agent-transcript`
+- `append-code-agent-follow-up`
+- `update-code-agent-run`
+- `control-code-agent-run`
+
+It uses `@agent-native/core/code-agents`, which exposes the same file-backed run store and executor used by the CLI.
+
+## Run Store
+
+Local Agent-Native Code runs are stored at:
+
+```text
+~/.agent-native/code-agents
+```
+
+Set `AGENT_NATIVE_CODE_AGENTS_HOME` to isolate a template or test run store.
+
+```bash
+AGENT_NATIVE_CODE_AGENTS_HOME=./data/code-agents pnpm dev
+```
+
+## Host Contract
+
+`CodeAgentsHost` is intentionally small:
+
+| Method                                                | Purpose                                                |
+| ----------------------------------------------------- | ------------------------------------------------------ |
+| `listRuns(goalId?)`                                   | List sessions for the selected goal                    |
+| `listCodePacks?()`                                    | List `.agents/commands` and `.agents/skills`           |
+| `createRun(request)`                                  | Start a new run                                        |
+| `readTranscript(request)`                             | Read transcript/tool/status events                     |
+| `appendFollowUp(request)`                             | Add a follow-up, either steering active work or queued |
+| `updateRun(request)`                                  | Update mode or run metadata                            |
+| `retryRun?(request)`                                  | Retry the selected run in place                        |
+| `rerunRun?(request)`                                  | Start a new run from a previous prompt                 |
+| `controlRun(goalId, runId, command, permissionMode?)` | Resume, approve, refresh, or stop                      |
+| `openTerminal?(request)`                              | Optional native terminal hook                          |
+
+Browser hosts should return a graceful `openTerminal` error instead of trying to emulate native terminal launch.
+
+## Shared Composer
+
+Agent-Native Code uses the same `AgentComposerFrame` + `PromptComposer` /
+`TiptapComposer` stack as the framework agent sidebar. Do not fork a separate
+textarea, shell, upload picker, voice button, model picker, or Enter-to-submit
+implementation for Code-like surfaces. If a host needs one extra control, pass
+it through the shared composer extension points so the sidebar, Code UI, and
+Brain chat keep the same interaction model and visual field.
+
+Brain's Ask route uses `AgentChatSurface`, which is already backed by the
+standard sidebar composer. Code uses `PromptComposer` directly because the host
+owns run creation, transcripts, and follow-up delivery.
+
+Code-specific UI belongs around the composer, not inside a forked chatfield. The
+shared Code UI may add slots for:
+
+- Auto / Plan mode controls.
+- The selected cwd, project picker, and run metadata.
+- Host-only affordances such as opening a terminal.
+
+Everything else stays in the shared composer: attachments, references, slash and
+skill insertion, pasted-text handling, voice dictation, drafts, keyboard
+shortcuts, and submission semantics.
+
+## Slash Commands
+
+Agent-Native Code treats migration as a capability, not a separate app category. `/migrate` can be a built-in goal, a project command, or a custom instruction pack on top of the same host contract.
+
+Project-specific commands live in:
+
+```text
+.agents/commands/*.md
+```
+
+Use these for team workflows such as release checks, migration variants, framework upgrades, or audits.
+
+Project skills live in:
+
+```text
+.agents/skills/*/SKILL.md
+```
+
+When the host implements `listCodePacks`, the shared UI shows project commands and skills in the rail. Command rows insert `/<command>`, and skill rows insert a focused “Use the <skill> skill…” prompt so the rail stays actionable. Built-in names such as `/migrate`, `/audit`, `/status`, and `/resume` stay reserved for the global Agent-Native Code controls.
+
+Do not create a separate slash-command registry for a new Code host. Project
+commands and skills are discovered from `.agents/commands/*.md` and
+`.agents/skills/*/SKILL.md`; the UI should render those packs and insert prompts
+through the shared composer.
+
+## Background Agent Harness
+
+Background coding-agent work should reuse the same harness as the rest of
+Agent-Native:
+
+- Use the Code run store/executor for local Code sessions.
+- Use core `run-manager` for hosted agent runs so streams, aborts, heartbeats,
+  resumability, soft timeouts, and stuck-run cleanup behave consistently.
+- Use `agent-teams` / `spawnTask()` when the UI is delegating work to a
+  background sub-agent from a normal app chat.
+
+Do not add a parallel background-agent runner just because a new surface needs a
+different layout. Build a host adapter or UI slot on top of the shared harness
+instead.
+
+## Follow-Ups
+
+Follow-ups on active runs support two delivery modes:
+
+- **Send now** records a steering prompt that the active runner applies at the next safe continuation point.
+- **Queue** runs after the current turn finishes.
+
+Inactive runs keep the compatible behavior: the follow-up is appended and the run resumes immediately.
+
+## Remote Dispatch
+
+Desktop can expose the local Code Agent runner to a deployed Dispatch relay so a
+phone or Telegram chat can start, monitor, and continue sessions while the
+computer is awake.
+
+The connection is outbound-only from Desktop:
+
+1. Desktop pairs with Dispatch and stores a device token locally.
+2. Desktop long-polls `/_agent-native/integrations/remote/poll`.
+3. Mobile Sessions and Telegram `/code` enqueue commands in the relay database.
+4. Desktop claims commands, drives the local run store, and posts results and
+   transcript events back to Dispatch.
+5. Mobile reads `hosts`, `runs`, and `transcript` from Dispatch; it never talks
+   directly to the desktop.
+
+The canonical remote relay endpoints are:
+
+| Method     | Route                                                    | Caller          | Purpose                                     |
+| ---------- | -------------------------------------------------------- | --------------- | ------------------------------------------- |
+| `POST`     | `/_agent-native/integrations/remote/register`            | Desktop session | Pair a desktop host and return a token once |
+| `GET`      | `/_agent-native/integrations/remote/hosts`               | Mobile/session  | List paired hosts                           |
+| `DELETE`   | `/_agent-native/integrations/remote/devices/:id`         | Mobile/session  | Revoke a paired host                        |
+| `POST`     | `/_agent-native/integrations/remote/devices/:id/revoke`  | Mobile/session  | Revoke a paired host                        |
+| `POST/GET` | `/_agent-native/integrations/remote/poll`                | Desktop token   | Claim work                                  |
+| `POST`     | `/_agent-native/integrations/remote/result`              | Desktop token   | Complete or fail work                       |
+| `POST`     | `/_agent-native/integrations/remote/run-events`          | Desktop token   | Mirror transcript events                    |
+| `GET`      | `/_agent-native/integrations/remote/runs`                | Mobile/session  | List sessions                               |
+| `GET`      | `/_agent-native/integrations/remote/runs/:id`            | Mobile/session  | Read session summary                        |
+| `GET`      | `/_agent-native/integrations/remote/runs/:id/transcript` | Mobile/session  | Read mirrored transcript                    |
+| `POST`     | `/_agent-native/integrations/remote/push/register`       | Mobile/session  | Register Expo/mobile push token             |
+
+Telegram uses the same relay through Dispatch. Supported commands are:
+
+```text
+/code <prompt>
+/code list
+/code status <run>
+/code continue <run> <text>
+/code approve <id>
+/code deny <id>
+/code stop <run>
+```
+
+### Smoke checklist
+
+Before shipping a remote-control change, run the automated relay route smoke in
+`remote-plugin.spec.ts`, then do one real-device pass:
+
+1. Pair Desktop from Settings and confirm the host appears in mobile Sessions.
+2. Start a session from mobile and confirm Desktop claims it.
+3. Send `/code <prompt>` from Telegram and confirm it queues to the same host.
+4. Verify transcript mirroring, follow-up, approve or deny, and stop.
+5. Revoke the host from mobile and confirm new commands stay queued/offline
+   instead of being sent to the revoked device.
+6. Enable mobile push alerts and confirm command completion creates a push
+   outbox row.
+
+## Styling
+
+Import the package stylesheet:
+
+```ts
+import "@agent-native/code-agents-ui/styles.css";
+```
+
+The stylesheet uses the same shadcn-style HSL custom properties as the templates and Desktop shell. Prefer changing tokens or small class overrides in the host app before forking the shared UI.
+
+## Limits
+
+The browser template is local-first. It can start and resume runs while its local Node server is alive. For native process lifecycle, terminal launch, and app webviews, use Desktop.

package/docs/content/dispatch.md

@@ -47,11 +47,48 @@ The behavioral rule lives in the dispatch agent's instructions: domain work belo
 
 ### Workspace resources
 
-Skills, agent profiles, and instructions can be authored once in Dispatch and granted out to the rest of the workspace. `sync-workspace-resources-to-all` pushes them to every app's `.agents/` directory so every agent in every app picks them up. This is how a team-wide change ("always use British English in customer-facing replies") propagates without editing ten repos.
+Skills, guardrail instructions, agent profiles, and reference resources can be authored once in Dispatch and inherited by the rest of the workspace. Resources with **All apps** scope are global: Dispatch stores them once at workspace scope, and every app agent reads them at runtime. They are not copied into each app, and there is no manual workspace-resource sync step. App shared resources and personal resources can override or narrow the workspace defaults locally. Selected resources use explicit per-app grants for app-specific exceptions.
+
+Use the canonical paths to control how agents consume them:
+
+- `AGENTS.md` or `instructions/<slug>.md` for always-on guardrails loaded by every app agent
+- `skills/<slug>/SKILL.md` for on-demand skills available through `/` commands and the prompt skill index
+- `context/<slug>.md` for brand, persona, positioning, messaging, company facts, and other reference material the agent reads when relevant
+- `agents/<slug>.md` for reusable custom agent profiles
+
+Starter global resources usually look like:
+
+```text
+context/company.md
+context/brand.md
+context/messaging.md
+instructions/guardrails.md
+skills/company-voice/SKILL.md
+```
+
+Set these to **All apps** when every app should inherit the same company facts, brand rules, messaging, safety constraints, and customer-facing writing style. Use selected-app grants only for resources that are genuinely app-specific.
+
+The **Resources** page highlights this starter pack in a Global context section so admins can quickly see which files exist, whether they are scoped to all apps, restore missing starter files without overwriting existing ones, and edit their contents. Expand any resource to preview its effective runtime stack for a selected app/user: workspace default, organization/app override, then personal override. Each app card also has a **Context** view that shows exactly what that app receives: inherited workspace resources, selected grants, and auto-loaded instructions. Use a resource row's **Stack** control to inspect which layer wins for that app.
+
+This is how a team-wide change ("always use British English in customer-facing replies") or a shared brand guideline propagates without editing ten repos.
+
+### Dreams
+
+Dispatch Dreams review prior agent runs, feedback, evals, and repeated failures to propose durable improvements. A dream report is a review surface, not a silent rewrite: it can suggest personal memory updates, stale-memory cleanup, shared `LEARNINGS.md` edits, workspace instruction/skill/knowledge/agent resources, or recurring jobs, and each proposal links back to the runs that justify it. Shared instructions and team-wide resources require review before they are applied, especially when the evidence came from inbound Slack, email, Telegram, WhatsApp, or web content.
+
+Before proposing a write, Dreams compare the evidence against the personal memory index, existing `memory/*.md` notes, and shared `LEARNINGS.md`. If a lesson is already captured, the report records that it was skipped; if a related personal memory looks stale, the proposal targets that existing note instead of creating a duplicate. Dream reports deduplicate repeated evidence by thread, signal type, and normalized quote, strip injected context from correction detection, and summarize raw eval/tool rows into readable bullets. If a pass finds signals but creates no proposals, guardrail notes explain which evidence was suppressed.
+
+Use Dreams as the workspace's offline reflection loop: "what did agents keep getting wrong this week?", "what should we remember?", and "which repeated workflow should become a skill or scheduled job?"
+
+Start from the **Dreams** tab in Dispatch. Run a manual pass first, open a proposal review sheet to compare the current target with the proposed content and source evidence, then apply only the changes you want to keep. Once the reports are consistently useful, Dispatch can create a recurring dream job that keeps producing proposals without auto-applying shared or instruction-level changes. Workspace-instruction proposals require durable evidence from at least two threads or two source apps, while eval-only noise, account setup issues, quota limits, and single-app UI wording corrections remain out of all-app instructions.
+
+When a workspace has several thread-debug sources, Dreams can scan them together with `sourceId: "all"` or an explicit `sourceIds` list. Each source gets its own timeout, start stagger, concurrency cap, per-thread timeout, and persisted health row, so a slow or unavailable production database produces a partial result instead of blocking the whole dream pass.
+
+Recurring dream settings are stored at user or org scope and can be edited from the Dreams settings sheet. They control the cron schedule, source selection, per-source timeout, source concurrency, source start stagger, per-thread timeout, candidate limit, and minimum candidate threshold. The default recurring shape is a weekly all-source review that writes proposals only; applying shared or workspace-resource proposals still goes through review and approval.
 
 ### Approval flow
 
-Dispatch can gate sensitive runtime changes behind admin review. Today this covers **saved destinations** (the Slack channels and email addresses the agent can proactively send to) and **dispatch approval policy** itself. When the policy is enabled, the change is queued and the agent surfaces an inline approval preview directly in chat — admins approve or reject without leaving the conversation. Resource-wide approval interception is planned but not yet shipped.
+Dispatch can gate sensitive runtime changes behind admin review. Today this covers **saved destinations** (the Slack channels and email addresses the agent can proactively send to), shared/team **dream proposals**, All-app **workspace resource** creates/updates/deletes, and **dispatch approval policy** itself. When the policy is enabled, the change is queued and the agent surfaces an inline approval preview directly in chat — admins approve or reject without leaving the conversation.
 
 ## How a Slack message flows through Dispatch {#flow}
 
@@ -83,7 +120,7 @@ Three short steps:
 2. **Connect messaging.** Open **Settings → Messaging** in Dispatch and click connect for Slack, Email, Telegram, or WhatsApp. The form fields match the env vars in the [Messaging](/docs/messaging) doc — refer there for what each platform needs.
 3. **Add other apps.** Run `npx @agent-native/core add-app` from the workspace root for each domain app. They auto-appear as A2A peers in Dispatch's `list-workspace-apps` — no manual registration, no agent-card editing. Dispatch will start delegating to them as soon as their agent cards are reachable.
 
-Then add credentials to the vault, sync them to apps, and (optionally) author workspace skills under **Resources** and sync them out. If you need per-app secret isolation, switch the vault access setting to manual before granting individual apps.
+Then add credentials to the vault and (optionally) author global workspace resources under **Resources**. Vault keys can still be synced or granted depending on access mode; All-app workspace resources are inherited automatically. If you need per-app secret isolation, switch the vault access setting to manual before granting individual apps.
 
 ## See also {#see-also}