@agent-native/core 0.7.51 → 0.7.52

package/dist/deploy/workspace-deploy.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-deploy.js","sourceRoot":"","sources":["../../src/deploy/workspace-deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAIxD,MAAM,4BAA4B,GAAG,mBAAmB,CAAC;AACzD,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IAC9C,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,IAAI;IACJ,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,aAAa;IACb,MAAM;IACN,KAAK;CACN,CAAC,CAAC;AACH,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AAClE,MAAM,2BAA2B,GAAG,eAAe,CAAC;AACpD,MAAM,4BAA4B,GAAG,qBAAqB,CAAC;AAuB3D,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA+B,EAAE;IAEjC,MAAM,aAAa,GACjB,IAAI,CAAC,aAAa,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+BAA+B,aAAa,8CAA8C,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAE7D,MAAM,IAAI,GAAG,EAAE;SACZ,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;SACnE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAEhC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,wBAAwB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,kCAAkC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACjD,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACxD,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,CAAC,GAAG,CACT,+BAA+B,IAAI,CAAC,MAAM,sBAAsB,MAAM,EAAE,CACzE,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,WAAW,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACjE,oBAAoB,CAAC,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3E,CAAC;IACD,0BAA0B,CACxB,aAAa,EACb,OAAO,EACP,IAAI,EACJ,aAAa,EACb,MAAM,CACP,CAAC;IAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,8BAA8B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,0CAA0C,OAAO,oCAAoC,CACtF,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CACT,8EAA8E,CAC/E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,GAAG,CACT,yHAAyH,CAC1H,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,aAAqB,EACrB,GAAW,EACX,MAA6B,EAC7B,QAA6B,EAC7B,aAA0C;IAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,GAAG,GAAsB;QAC7B,GAAG,OAAO,CAAC,GAAG;QACd,YAAY,EAAE,MAAM;QACpB,aAAa,EAAE,IAAI,GAAG,EAAE;QACxB,kBAAkB,EAAE,IAAI,GAAG,EAAE;QAC7B,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;KACxD,CAAC;IAEF,IAAI,MAAM,KAAK,SAAS,IAAI,iCAAiC,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,YAAY;YACd,OAAO,CAAC,GAAG,CAAC,6BAA6B;gBACzC,OAAO,CAAC,GAAG,CAAC,YAAY;gBACxB,GAAG,CAAC,YAAY,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,+BAA+B,GAAG,WAAW,GAAG,YAAY,MAAM,GAAG,CACtE,CAAC;IAEF,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,QAAQ,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE;QAC3C,GAAG,EAAE,aAAa;QAClB,GAAG;QACH,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAC3B,aAAqB,EACrB,GAAW,EACX,OAAe,EACf,MAA6B,EAC7B,aAA0C;IAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,0EAA0E;IAC1E,qEAAqE;IACrE,kCAAkC;IAClC,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,UAAU;SACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;SAChC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,YAAY,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,MAAM,kDAAkD,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACrE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3B,0EAA0E;QAC1E,sEAAsE;QACtE,uEAAuE;QACvE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,gCAAgC,CAAC,aAAa,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,8BAA8B,CAAC,OAAe,EAAE,IAAc;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,WAAW;IACX,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,CAAC;QACV,OAAO;QACP,OAAO,EAAE,EAAE;KACZ,CAAC;IACF,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACvC,CAAC;IAEF,oEAAoE;IACpE,kBAAkB;IAClB,MAAM,OAAO,GAAG,IAAI;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC;SAChE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,IAAI;SAClB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,wBAAwB,CAAC,8BAA8B,CAAC,eAAe,WAAW,CAAC,CAAC,CAAC,4BAA4B,CACpH;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,2BAA2B,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC3D,CAAC,CAAC,2FAA2F,WAAW,CAAC,UAAU,CAAC;CACvH;QACG,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,MAAM,GAAG,GAAG,OAAO;;;;;EAKzB,2BAA2B,GAAG,QAAQ;;0CAEE,0BAA0B,CAAC,IAAI,CAAC;;;;;CAKzE,CAAC;IACA,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAc;IAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3E,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,IAAc;IAC5D,MAAM,KAAK,GAAa;QACtB,qDAAqD;QACrD,iHAAiH;KAClH,CAAC;IAEF,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,iCAAiC,EAAE,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,cAAc,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAW,EAAE,OAAe;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,IAAI,4BAA4B,IAAI,GAAG,EAAE,CAAC;IACrD,OAAO;QACL,GAAG,IAAI,aAAa,EAAE,oBAAoB;QAC1C,GAAG,2BAA2B,CAC5B,GAAG,EACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,4BAA4B,EAAE,GAAG,CAAC,CACtD,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;YAClB,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACnD,OAAO,GAAG,SAAS,IAAI,EAAE,IAAI,SAAS,MAAM,CAAC;QAC/C,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,iCAAiC,GAAG;IACxC,CAAC,UAAU,EAAE,UAAU,CAAC;IACxB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,cAAc,EAAE,SAAS,CAAC;IAC3B,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,YAAY,EAAE,YAAY,CAAC;IAC5B,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,MAAM,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,eAAe;IACf,mBAAmB;IACnB,SAAS;IACT,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;CAC3D,CAAC,CAAC;AAEH,SAAS,+BAA+B,CAAC,IAAc;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAC3B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,IAAI,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,CACnE,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACnC,MAAM,IAAI,KAAK,CACb,oBAAoB,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE,CACvI,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,aAAqB,EACrB,GAAW,EACX,aAA0C,EAC1C,SAAiB;IAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IAC1E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,gCAAgC,GAAG,mBAAmB,GAAG,kDAAkD,CAC5G,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC;IAC5E,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnB,yBAAyB,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,yBAAyB,CAChC,WAAmB,EACnB,GAAW,EACX,aAA0C,EAC1C,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO;IAEvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;IAC3B,MAAM,UAAU,GACd,GAAG,KAAK,UAAU;QAChB,CAAC,CAAC,CAAC,kBAAkB,EAAE,GAAG,QAAQ,IAAI,CAAC;QACvC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC;IAClC,MAAM,uBAAuB,GAC3B,GAAG,KAAK,UAAU;QAChB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;;;;;;;;;;;CAaP,CAAC;IACA,MAAM,WAAW,GACf,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC;IACpE,MAAM,MAAM,GAAG,oBAAoB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;;;;;;;;MAQvD,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;;;;;EAK5F,uBAAuB;;;;;;;yBAOA,WAAW;;;;UAI1B,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,iBAAiB,CAAC;;UAEvC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;;;kBAGlB,IAAI,CAAC,SAAS,CAC5B,4BAA4B,CAAC,GAAG,EAAE,SAAS,CAAC,EAC5C,IAAI,EACJ,CAAC,CACF;SACE,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,MAAM,CAAC;;;CAGhB,CAAC;IACA,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,4BAA4B,CACnC,GAAW,EACX,SAAiB;IAEjB,OAAO;QACL,aAAa;QACb,IAAI,GAAG,WAAW;QAClB,GAAG,2BAA2B,CAAC,GAAG,EAAE,SAAS,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAW,EAAE,SAAiB;IACjE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,EAAE;SACN,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC/C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,OAAO,+BAA+B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC,CAAC;SACD,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAqB;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc;IAC1C,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QAChD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE;QAC7D,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iCAAiC,CAAC,MAAc;IACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,EAAE;aACN,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC;aAClC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,aAAqB,EACrB,OAAe,EACf,IAAc,EACd,aAA0C,EAC1C,MAA6B;IAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAC7B;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,aAAa;KACpB,EACD,IAAI,EACJ,CAAC,CACF,CAAC;IAEF,MAAM,OAAO,GACX,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,IAAI,CAAC,IAAI,CACP,mBAAmB,CAAC,aAAa,CAAC,EAClC,GAAG,GAAG,SAAS,EACf,2BAA2B,EAC3B,4BAA4B,CAC7B,CACF;QACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,IAAI,CAAC,IAAI,CACP,OAAO,EACP,GAAG,EACH,2BAA2B,EAC3B,4BAA4B,CAC7B,CACF,CAAC;IAER,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,aAAqB,EACrB,IAAc;IAEd,MAAM,YAAY,GAAG,gCAAgC,CAAC,aAAa,CAAC,CAAC;IAErE,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,GAAG,GACP,wBAAwB,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACtE,OAAO;YACL,EAAE,EAAE,GAAG;YACP,IAAI,EAAE,GAAG,EAAE,WAAW,IAAI,SAAS,CAAC,GAAG,CAAC;YACxC,WAAW,EAAE,GAAG,EAAE,WAAW,IAAI,EAAE;YACnC,IAAI,EAAE,OAAO;YACb,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,UAAU,EAAE,GAAG,KAAK,UAAU;SAC/B,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,gCAAgC,CACvC,aAAqB;IAErB,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GACZ,yBAAyB,CACvB,IAAI,CAAC,IAAI,CACP,aAAa,EACb,2BAA2B,EAC3B,4BAA4B,CAC7B,CACF;QACD,yBAAyB,CACvB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,4BAA4B,CAAC,CACvD,CAAC;IACJ,MAAM,IAAI,GAAG,OAAO,IAAI,QAAQ,IAAI,EAAE,CAAC;IACvC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAAuB;IAEvB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,IAAY;IAEZ,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,0BAA0B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAW;IAEX,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;QACzC,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,IAAI,GAAG,OAAO;SACjB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,MAAM,GAAG,GAAG,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,EAAE;YACF,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxB,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,GAAG,EAAuC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAE/D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG;QACf,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,IAAI,CACL,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACjE,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,IAAc;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CACpB,YAA+C,EAC/C,IAAc;IAEd,OAAO,CACL,YAAY;QACZ,cAAc,CAAC,IAAI,CAAC;QACpB,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACzC,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CAAC,IAG3C;IACC,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC;QAAE,OAAO;IAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE;QAAE,OAAO;IAC3C,MAAM,IAAI,KAAK,CACb;QACE,0DAA0D;QAC1D,uJAAuJ;QACvJ,0HAA0H;QAC1H,0GAA0G;KAC3G,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,IAGpC;IACC,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACjC,IACE,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM;QAC9B,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACtB,KAAyB;IAEzB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;QACjE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,KAAK,CACb,wCAAwC,KAAK,kDAAkD,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAS,EAAE,CAAS;IAClD,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,IAAY;IACxC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAClC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * `agent-native deploy` — build and deploy every app in a workspace to a\n * single origin. Each app is served from `/<app-name>/*`, so:\n *\n *   https://your-agents.com/mail/*       → apps/mail\n *   https://your-agents.com/calendar/*   → apps/calendar\n *\n * Benefits of same-origin deploy:\n *   - Shared auth cookie → log in once, every app is signed in\n *   - Cross-app A2A is a same-origin fetch (no CORS, no JWT for siblings)\n *   - One DNS record, one TLS cert, one CDN cache\n *\n * Per-app independent deploy is still supported — just cd into the app and\n * run `agent-native build` as before. This orchestrator is for teams that\n * want the whole workspace behind one domain.\n */\nimport { execFileSync } from \"child_process\";\nimport fs from \"fs\";\nimport path from \"path\";\nimport { findWorkspaceRoot } from \"../scripts/utils.js\";\n\nexport type WorkspaceDeployPreset = \"cloudflare_pages\" | \"netlify\";\n\nconst NETLIFY_WORKSPACE_STATIC_DIR = \"_workspace_static\";\nconst NETLIFY_PUBLIC_ASSET_EXTENSIONS = new Set([\n  \"avif\",\n  \"css\",\n  \"gif\",\n  \"ico\",\n  \"jpeg\",\n  \"jpg\",\n  \"js\",\n  \"json\",\n  \"map\",\n  \"mp4\",\n  \"pdf\",\n  \"png\",\n  \"svg\",\n  \"txt\",\n  \"wasm\",\n  \"webm\",\n  \"webmanifest\",\n  \"webp\",\n  \"xml\",\n]);\nconst WORKSPACE_APPS_ENV_KEY = \"AGENT_NATIVE_WORKSPACE_APPS_JSON\";\nconst WORKSPACE_APPS_MANIFEST_DIR = \".agent-native\";\nconst WORKSPACE_APPS_MANIFEST_FILE = \"workspace-apps.json\";\n\ninterface WorkspaceAppManifestEntry {\n  id: string;\n  name: string;\n  description: string;\n  path: string;\n  url?: string;\n  isDispatch: boolean;\n}\n\nexport interface WorkspaceDeployOptions {\n  args?: string[];\n  /** Override the workspace root (defaults to walking up from cwd). */\n  workspaceRoot?: string;\n  /** Only build — don't invoke the deploy platform CLI. */\n  buildOnly?: boolean;\n  /** Target preset. Defaults to `cloudflare_pages`. */\n  preset?: WorkspaceDeployPreset;\n  /** @internal Override process execution in tests. */\n  execFile?: typeof execFileSync;\n}\n\nexport async function runWorkspaceDeploy(\n  opts: WorkspaceDeployOptions = {},\n): Promise<void> {\n  const workspaceRoot =\n    opts.workspaceRoot ?? findWorkspaceRoot(process.cwd()) ?? process.cwd();\n  const appsDir = path.join(workspaceRoot, \"apps\");\n  if (!fs.existsSync(appsDir)) {\n    throw new Error(\n      `No apps/ directory found at ${workspaceRoot}. Run this inside an agent-native workspace.`,\n    );\n  }\n\n  const rawArgs = opts.args ?? [];\n  const args = new Set(rawArgs);\n  const buildOnly = opts.buildOnly ?? args.has(\"--build-only\");\n\n  const apps = fs\n    .readdirSync(appsDir, { withFileTypes: true })\n    .filter((e) => e.isDirectory())\n    .map((e) => e.name)\n    .filter((n) => fs.existsSync(path.join(appsDir, n, \"package.json\")))\n    .sort(compareWorkspaceAppIds);\n\n  if (apps.length === 0) {\n    throw new Error(\n      `Workspace has no apps. Run \\`agent-native add-app\\` to add one.`,\n    );\n  }\n  assertNoReservedWorkspaceAppIds(apps);\n  const workspaceApps = readWorkspaceAppManifest(workspaceRoot, apps);\n\n  const preset = resolvePreset(opts.preset, rawArgs);\n  assertWorkspaceDeployProductionEnv({ buildOnly, preset });\n  const distDir = path.join(workspaceRoot, \"dist\");\n  fs.rmSync(distDir, { recursive: true, force: true });\n  fs.mkdirSync(distDir, { recursive: true });\n\n  if (preset === \"netlify\") {\n    const functionsDir = netlifyFunctionsDir(workspaceRoot);\n    fs.rmSync(functionsDir, { recursive: true, force: true });\n    fs.mkdirSync(functionsDir, { recursive: true });\n  }\n\n  console.log(\n    `[workspace-deploy] Building ${apps.length} app(s) for preset=${preset}`,\n  );\n\n  const execFile = opts.execFile ?? execFileSync;\n  for (const app of apps) {\n    buildOneApp(workspaceRoot, app, preset, execFile, workspaceApps);\n    moveAppBuildIntoDist(workspaceRoot, app, distDir, preset, workspaceApps);\n  }\n  writeWorkspaceAppManifests(\n    workspaceRoot,\n    distDir,\n    apps,\n    workspaceApps,\n    preset,\n  );\n\n  if (preset === \"netlify\") {\n    writeNetlifyRedirects(distDir, apps);\n  } else {\n    writeCloudflareRoutingManifest(distDir, apps);\n  }\n\n  if (buildOnly) {\n    console.log(\n      `\\n[workspace-deploy] Build complete at ${distDir}. Skipping publish (--build-only).`,\n    );\n    return;\n  }\n\n  console.log(`\\n[workspace-deploy] Build complete. Publish with:\\n`);\n  console.log(`  cd ${path.relative(process.cwd(), workspaceRoot) || \".\"}`);\n  if (preset === \"netlify\") {\n    console.log(\n      `  netlify deploy --prod --dir=dist --functions=.netlify/functions-internal\\n`,\n    );\n  } else {\n    console.log(`  wrangler pages deploy dist\\n`);\n  }\n  console.log(\n    `All apps live at https://<origin>/<app-name>/*. Log in once on any app\\nand the session is shared across the workspace.`,\n  );\n}\n\nfunction buildOneApp(\n  workspaceRoot: string,\n  app: string,\n  preset: WorkspaceDeployPreset,\n  execFile: typeof execFileSync,\n  workspaceApps: WorkspaceAppManifestEntry[],\n): void {\n  const appDir = path.join(workspaceRoot, \"apps\", app);\n  const env: NodeJS.ProcessEnv = {\n    ...process.env,\n    NITRO_PRESET: preset,\n    APP_BASE_PATH: `/${app}`,\n    VITE_APP_BASE_PATH: `/${app}`,\n    [WORKSPACE_APPS_ENV_KEY]: JSON.stringify(workspaceApps),\n  };\n\n  if (preset === \"netlify\" && appUsesNetlifyUnpooledDatabaseUrl(appDir)) {\n    env.DATABASE_URL =\n      process.env.NETLIFY_DATABASE_URL_UNPOOLED ??\n      process.env.DATABASE_URL ??\n      env.DATABASE_URL;\n  }\n\n  console.log(\n    `[workspace-deploy] Building ${app} (base=/${app}, preset=${preset})`,\n  );\n\n  cleanAppBuildOutputs(appDir);\n\n  execFile(\"pnpm\", [\"--filter\", app, \"build\"], {\n    cwd: workspaceRoot,\n    env,\n    stdio: \"inherit\",\n  });\n}\n\nfunction moveAppBuildIntoDist(\n  workspaceRoot: string,\n  app: string,\n  distDir: string,\n  preset: WorkspaceDeployPreset,\n  workspaceApps: WorkspaceAppManifestEntry[],\n): void {\n  const appDir = path.join(workspaceRoot, \"apps\", app);\n  // Resolve the per-app build output: prefer dist/ (standard), fall back to\n  // .output/ (Nitro's default). The Cloudflare preset emits into dist/\n  // containing the worker + assets.\n  const candidates = [\"dist\", \".output\"];\n  const src = candidates\n    .map((c) => path.join(appDir, c))\n    .find((p) => fs.existsSync(p));\n  if (!src) {\n    throw new Error(\n      `Expected ${candidates.join(\" or \")} under ${appDir} but none existed. Check the app's build script.`,\n    );\n  }\n  if (preset === \"netlify\") {\n    const mountedSrc = path.join(src, app);\n    const staticSrc = fs.existsSync(mountedSrc) ? mountedSrc : src;\n    const target = path.join(distDir, NETLIFY_WORKSPACE_STATIC_DIR, app);\n    fs.mkdirSync(target, { recursive: true });\n    copyDir(staticSrc, target);\n    // Nitro/Vite mounted builds can contain a nested copy of public assets at\n    // dist/<app>/<app>/...; the workspace root already supplies the outer\n    // mount path, so keeping it would publish duplicate /<app>/<app> URLs.\n    fs.rmSync(path.join(target, app), { recursive: true, force: true });\n    copyNetlifyFunctionIntoWorkspace(workspaceRoot, app, workspaceApps, target);\n  } else {\n    const target = path.join(distDir, app);\n    fs.mkdirSync(target, { recursive: true });\n    copyDir(src, target);\n  }\n}\n\n/**\n * Write the Cloudflare Pages `_routes.json` and a dispatcher `_worker.js` at\n * the workspace dist root so each app is reachable under /<app>/*.\n */\nfunction writeCloudflareRoutingManifest(distDir: string, apps: string[]): void {\n  // _routes.json tells Cloudflare which paths are dynamic (Functions) vs\n  // static. Mark /<app>/* as include so every app's worker handles its\n  // subtree.\n  const include = apps.map((a) => `/${a}/*`).concat([\"/\"]);\n  if (apps.includes(\"dispatch\")) {\n    include.push(\"/_agent-native/*\");\n  }\n  const routes = {\n    version: 1,\n    include,\n    exclude: [],\n  };\n  fs.writeFileSync(\n    path.join(distDir, \"_routes.json\"),\n    JSON.stringify(routes, null, 2) + \"\\n\",\n  );\n\n  // Dispatcher worker: inspects the path and forwards to the matching\n  // per-app worker.\n  const imports = apps\n    .map((a) => `import ${moduleIdent(a)} from \"./${a}/_worker.js\";`)\n    .join(\"\\n\");\n  const dispatch = apps\n    .map(\n      (a) =>\n        `  if (pathname === \"/${a}\" || pathname.startsWith(\"/${a}/\")) return ${moduleIdent(a)}.fetch(request, env, ctx);`,\n    )\n    .join(\"\\n\");\n  const dispatchRootFrameworkRoutes = apps.includes(\"dispatch\")\n    ? `    if (pathname === \"/_agent-native\" || pathname.startsWith(\"/_agent-native/\")) return ${moduleIdent(\"dispatch\")}.fetch(request, env, ctx);\n`\n    : \"\";\n\n  const worker = `${imports}\n\nexport default {\n  async fetch(request, env, ctx) {\n    const { pathname } = new URL(request.url);\n${dispatchRootFrameworkRoutes}${dispatch}\n    if (pathname === \"/\") {\n      return Response.redirect(new URL(\"${cloudflareRootRedirectPath(apps)}\", request.url).toString(), 302);\n    }\n    return new Response(\"Not found\", { status: 404 });\n  },\n};\n`;\n  fs.writeFileSync(path.join(distDir, \"_worker.js\"), worker);\n}\n\nfunction cloudflareRootRedirectPath(apps: string[]): string {\n  return apps.includes(\"dispatch\") ? \"/dispatch/overview\" : `/${apps[0]}/`;\n}\n\nfunction writeNetlifyRedirects(distDir: string, apps: string[]): void {\n  const lines: string[] = [\n    \"# Generated by agent-native deploy --preset netlify\",\n    \"# Static app assets are stored under a safe namespace; dynamic app routes are handled by function route config.\",\n  ];\n\n  if (apps.includes(\"dispatch\")) {\n    lines.push(\"/_agent-native/* /.netlify/functions/dispatch-server 200\");\n  }\n\n  for (const app of apps) {\n    lines.push(...netlifyAssetRedirectsFor(app, distDir));\n  }\n\n  if (apps.includes(\"dispatch\")) {\n    lines.push(\"/ /dispatch/overview 302\");\n    lines.push(\"/dispatch /dispatch/overview 302\");\n    for (const [from, to] of DISPATCH_WORKSPACE_ROOT_REDIRECTS) {\n      lines.push(`/${from} /dispatch/${to} 302`);\n    }\n  } else {\n    lines.push(`/ /${apps[0]}/ 302`);\n  }\n\n  fs.writeFileSync(path.join(distDir, \"_redirects\"), lines.join(\"\\n\") + \"\\n\");\n}\n\nfunction netlifyAssetRedirectsFor(app: string, distDir: string): string[] {\n  const from = `/${app}`;\n  const to = `/${NETLIFY_WORKSPACE_STATIC_DIR}/${app}`;\n  return [\n    `${from}/assets/* ${to}/assets/:splat 200`,\n    ...netlifyPublicRootAssetPaths(\n      app,\n      path.join(distDir, NETLIFY_WORKSPACE_STATIC_DIR, app),\n    ).map((assetPath) => {\n      const assetName = assetPath.slice(from.length + 1);\n      return `${assetPath} ${to}/${assetName} 200`;\n    }),\n  ];\n}\n\nconst DISPATCH_WORKSPACE_ROOT_REDIRECTS = [\n  [\"overview\", \"overview\"],\n  [\"login\", \"login\"],\n  [\"signup\", \"signup\"],\n  [\"apps\", \"apps\"],\n  [\"apps/new-app\", \"new-app\"],\n  [\"new-app\", \"new-app\"],\n  [\"vault\", \"vault\"],\n  [\"integrations\", \"integrations\"],\n  [\"agents\", \"agents\"],\n  [\"workspace\", \"workspace\"],\n  [\"messaging\", \"messaging\"],\n  [\"destinations\", \"destinations\"],\n  [\"identities\", \"identities\"],\n  [\"approvals\", \"approvals\"],\n  [\"audit\", \"audit\"],\n  [\"team\", \"team\"],\n];\n\nconst RESERVED_WORKSPACE_APP_IDS = new Set([\n  \"_agent-native\",\n  \"_workspace_static\",\n  \"netlify\",\n  ...DISPATCH_WORKSPACE_ROOT_REDIRECTS.map(([from]) => from),\n]);\n\nfunction assertNoReservedWorkspaceAppIds(apps: string[]): void {\n  const conflicts = apps.filter(\n    (app) => app !== \"dispatch\" && RESERVED_WORKSPACE_APP_IDS.has(app),\n  );\n  if (conflicts.length === 0) return;\n  throw new Error(\n    `Workspace app id ${conflicts.map((id) => `\"${id}\"`).join(\", \")} conflicts with reserved workspace routes. Choose a different app id.`,\n  );\n}\n\nfunction copyNetlifyFunctionIntoWorkspace(\n  workspaceRoot: string,\n  app: string,\n  workspaceApps: WorkspaceAppManifestEntry[],\n  staticDir: string,\n): void {\n  const appDir = path.join(workspaceRoot, \"apps\", app);\n  const src = path.join(appDir, \".netlify\", \"functions-internal\", \"server\");\n  if (!fs.existsSync(src)) {\n    throw new Error(\n      `Expected Netlify function at ${src} after building ${app}. Check the app's build script and NITRO_PRESET.`,\n    );\n  }\n\n  const dest = path.join(netlifyFunctionsDir(workspaceRoot), `${app}-server`);\n  fs.rmSync(dest, { recursive: true, force: true });\n  copyDir(src, dest);\n  patchNetlifyFunctionEntry(dest, app, workspaceApps, staticDir);\n}\n\nfunction patchNetlifyFunctionEntry(\n  functionDir: string,\n  app: string,\n  workspaceApps: WorkspaceAppManifestEntry[],\n  staticDir: string,\n): void {\n  const serverPath = path.join(functionDir, \"server.mjs\");\n  if (!fs.existsSync(serverPath)) return;\n\n  const basePath = `/${app}`;\n  const pathConfig =\n    app === \"dispatch\"\n      ? [\"/_agent-native/*\", `${basePath}/*`]\n      : [basePath, `${basePath}/*`];\n  const normalizeBasePathHelper =\n    app === \"dispatch\"\n      ? \"\"\n      : `\nfunction normalizeBasePathArgs(args) {\n  const request = args[0];\n  if (!request || typeof request.url !== \"string\" || typeof Request !== \"function\") {\n    return args;\n  }\n  const url = new URL(request.url);\n  if (url.pathname === basePath || url.pathname === \\`\\${basePath}/\\`) {\n    url.pathname = \\`\\${basePath}//\\`;\n    return [new Request(url, request), ...args.slice(1)];\n  }\n  return args;\n}\n`;\n  const handlerArgs =\n    app === \"dispatch\" ? \"...args\" : \"...normalizeBasePathArgs(args)\";\n  const server = `const basePath = ${JSON.stringify(basePath)};\n\nfunction setBasePathEnv() {\n  const processRef = globalThis.process ??= { env: {} };\n  processRef.env ??= {};\n  Object.assign(processRef.env, {\n    APP_BASE_PATH: basePath,\n    VITE_APP_BASE_PATH: basePath,\n    ${JSON.stringify(WORKSPACE_APPS_ENV_KEY)}: ${JSON.stringify(JSON.stringify(workspaceApps))},\n  });\n}\n\nsetBasePathEnv();\n${normalizeBasePathHelper}\n\nlet cachedHandler;\n\nexport default async function handler(...args) {\n  setBasePathEnv();\n  cachedHandler ??= (await import(\"./main.mjs\")).default;\n  return cachedHandler(${handlerArgs});\n}\n\nexport const config = {\n  name: ${JSON.stringify(`${app} server handler`)},\n  generator: \"agent-native workspace deploy\",\n  path: ${JSON.stringify(pathConfig)},\n  nodeBundler: \"none\",\n  includedFiles: [\"**\"],\n  excludedPath: ${JSON.stringify(\n    netlifyFunctionExcludedPaths(app, staticDir),\n    null,\n    2,\n  )\n    .split(\"\\n\")\n    .join(\"\\n  \")},\n  preferStatic: false,\n};\n`;\n  fs.rmSync(serverPath, { force: true });\n  fs.writeFileSync(path.join(functionDir, `${app}-server.mjs`), server);\n}\n\nfunction netlifyFunctionExcludedPaths(\n  app: string,\n  staticDir: string,\n): string[] {\n  return [\n    \"/.netlify/*\",\n    `/${app}/assets/*`,\n    ...netlifyPublicRootAssetPaths(app, staticDir),\n  ];\n}\n\nfunction netlifyPublicRootAssetPaths(app: string, staticDir: string): string[] {\n  if (!fs.existsSync(staticDir)) return [];\n  return fs\n    .readdirSync(staticDir, { withFileTypes: true })\n    .filter((entry) => entry.isFile())\n    .map((entry) => entry.name)\n    .filter((name) => {\n      const ext = path.extname(name).slice(1).toLowerCase();\n      return NETLIFY_PUBLIC_ASSET_EXTENSIONS.has(ext);\n    })\n    .sort()\n    .map((name) => `/${app}/${encodeURI(name)}`);\n}\n\nfunction netlifyFunctionsDir(workspaceRoot: string): string {\n  return path.join(workspaceRoot, \".netlify\", \"functions-internal\");\n}\n\nfunction cleanAppBuildOutputs(appDir: string): void {\n  for (const name of [\"dist\", \".output\", \"build\"]) {\n    fs.rmSync(path.join(appDir, name), { recursive: true, force: true });\n  }\n  fs.rmSync(path.join(appDir, \".netlify\", \"functions-internal\"), {\n    recursive: true,\n    force: true,\n  });\n}\n\nfunction appUsesNetlifyUnpooledDatabaseUrl(appDir: string): boolean {\n  const netlifyPath = path.join(appDir, \"netlify.toml\");\n  if (!fs.existsSync(netlifyPath)) return false;\n  try {\n    return fs\n      .readFileSync(netlifyPath, \"utf-8\")\n      .includes(\"NETLIFY_DATABASE_URL_UNPOOLED\");\n  } catch {\n    return false;\n  }\n}\n\nfunction writeWorkspaceAppManifests(\n  workspaceRoot: string,\n  distDir: string,\n  apps: string[],\n  workspaceApps: WorkspaceAppManifestEntry[],\n  preset: WorkspaceDeployPreset,\n): void {\n  const manifest = JSON.stringify(\n    {\n      version: 1,\n      apps: workspaceApps,\n    },\n    null,\n    2,\n  );\n\n  const targets =\n    preset === \"netlify\"\n      ? apps.map((app) =>\n          path.join(\n            netlifyFunctionsDir(workspaceRoot),\n            `${app}-server`,\n            WORKSPACE_APPS_MANIFEST_DIR,\n            WORKSPACE_APPS_MANIFEST_FILE,\n          ),\n        )\n      : apps.map((app) =>\n          path.join(\n            distDir,\n            app,\n            WORKSPACE_APPS_MANIFEST_DIR,\n            WORKSPACE_APPS_MANIFEST_FILE,\n          ),\n        );\n\n  for (const target of targets) {\n    fs.mkdirSync(path.dirname(target), { recursive: true });\n    fs.writeFileSync(target, `${manifest}\\n`);\n  }\n}\n\nfunction readWorkspaceAppManifest(\n  workspaceRoot: string,\n  apps: string[],\n): WorkspaceAppManifestEntry[] {\n  const explicitApps = readExistingWorkspaceAppManifest(workspaceRoot);\n\n  return apps\n    .map((app) => {\n      const appDir = path.join(workspaceRoot, \"apps\", app);\n      const pkg = readPackageJson(path.join(appDir, \"package.json\"));\n      const appPath = `/${app}`;\n      const explicit = explicitApps.get(app);\n      const url =\n        normalizeWorkspaceAppUrl(explicit?.url) ?? workspaceAppUrl(appPath);\n      return {\n        id: app,\n        name: pkg?.displayName || titleCase(app),\n        description: pkg?.description || \"\",\n        path: appPath,\n        ...(url ? { url } : {}),\n        isDispatch: app === \"dispatch\",\n      };\n    })\n    .sort((a, b) => {\n      if (a.id === \"dispatch\") return -1;\n      if (b.id === \"dispatch\") return 1;\n      return a.name.localeCompare(b.name);\n    });\n}\n\nfunction readExistingWorkspaceAppManifest(\n  workspaceRoot: string,\n): Map<string, { url?: string }> {\n  const fromEnv = parseWorkspaceAppsJson(process.env[WORKSPACE_APPS_ENV_KEY]);\n  const fromFile =\n    readWorkspaceAppsFromFile(\n      path.join(\n        workspaceRoot,\n        WORKSPACE_APPS_MANIFEST_DIR,\n        WORKSPACE_APPS_MANIFEST_FILE,\n      ),\n    ) ??\n    readWorkspaceAppsFromFile(\n      path.join(workspaceRoot, WORKSPACE_APPS_MANIFEST_FILE),\n    );\n  const apps = fromEnv ?? fromFile ?? [];\n  return new Map(apps.map((app) => [app.id, app]));\n}\n\nfunction parseWorkspaceAppsJson(\n  raw: string | undefined,\n): Array<{ id: string; url?: string }> | null {\n  if (!raw) return null;\n  try {\n    return parseWorkspaceAppsManifest(JSON.parse(raw));\n  } catch {\n    return null;\n  }\n}\n\nfunction readWorkspaceAppsFromFile(\n  file: string,\n): Array<{ id: string; url?: string }> | null {\n  if (!fs.existsSync(file)) return null;\n  return parseWorkspaceAppsManifest(readPackageJson(file));\n}\n\nfunction parseWorkspaceAppsManifest(\n  parsed: any,\n): Array<{ id: string; url?: string }> | null {\n  const rawApps = Array.isArray(parsed?.apps)\n    ? parsed.apps\n    : Array.isArray(parsed)\n      ? parsed\n      : null;\n  if (!rawApps) return null;\n\n  const apps = rawApps\n    .map((entry) => {\n      if (!entry || typeof entry !== \"object\") return null;\n      const id = typeof entry.id === \"string\" ? entry.id.trim() : \"\";\n      if (!id) return null;\n      const url = normalizeWorkspaceAppUrl(entry.url);\n      return {\n        id,\n        ...(url ? { url } : {}),\n      };\n    })\n    .filter((app): app is { id: string; url?: string } => !!app);\n\n  return apps.length ? apps : null;\n}\n\nfunction workspaceBaseUrl(): string | null {\n  return (\n    process.env.WORKSPACE_GATEWAY_URL ||\n    process.env.APP_URL ||\n    process.env.URL ||\n    process.env.DEPLOY_URL ||\n    process.env.BETTER_AUTH_URL ||\n    null\n  );\n}\n\nfunction workspaceAppUrl(appPath: string): string | undefined {\n  const base = workspaceBaseUrl();\n  if (!base) return undefined;\n  try {\n    return new URL(appPath, `${base.replace(/\\/$/, \"\")}/`).toString();\n  } catch {\n    return undefined;\n  }\n}\n\nfunction normalizeWorkspaceAppUrl(value: unknown): string | undefined {\n  if (typeof value !== \"string\" || !value.trim()) return undefined;\n  try {\n    return new URL(value.trim()).toString().replace(/\\/$/, \"\");\n  } catch {\n    return undefined;\n  }\n}\n\nfunction readPackageJson(file: string): Record<string, any> | null {\n  try {\n    return JSON.parse(fs.readFileSync(file, \"utf8\"));\n  } catch {\n    return null;\n  }\n}\n\nfunction titleCase(value: string): string {\n  return value\n    .split(/[-_\\s]+/)\n    .filter(Boolean)\n    .map((part) => part.charAt(0).toUpperCase() + part.slice(1))\n    .join(\" \");\n}\n\nfunction parsePresetArg(args: string[]): WorkspaceDeployPreset | null {\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n    if (arg === \"--preset\" && args[i + 1]) {\n      return normalizePreset(args[i + 1]);\n    }\n    if (arg.startsWith(\"--preset=\")) {\n      return normalizePreset(arg.slice(\"--preset=\".length));\n    }\n  }\n  return null;\n}\n\nfunction resolvePreset(\n  optionPreset: WorkspaceDeployPreset | undefined,\n  args: string[],\n): WorkspaceDeployPreset {\n  return (\n    optionPreset ??\n    parsePresetArg(args) ??\n    normalizePreset(process.env.NITRO_PRESET) ??\n    \"cloudflare_pages\"\n  );\n}\n\nfunction assertWorkspaceDeployProductionEnv(opts: {\n  buildOnly: boolean;\n  preset: WorkspaceDeployPreset;\n}): void {\n  if (!isProductionWorkspaceDeploy(opts)) return;\n  if (process.env.A2A_SECRET?.trim()) return;\n  throw new Error(\n    [\n      \"A2A_SECRET is required for production workspace deploys.\",\n      \"Workspace Slack, webhook, and cross-app A2A work resumes through signed background processors; without A2A_SECRET those production routes return 503.\",\n      'Set A2A_SECRET in your deploy provider (for example: netlify env:set A2A_SECRET \"$(openssl rand -hex 32)\") and redeploy.',\n      \"For local artifact checks, run agent-native deploy --build-only outside the deploy provider environment.\",\n    ].join(\" \"),\n  );\n}\n\nfunction isProductionWorkspaceDeploy(opts: {\n  buildOnly: boolean;\n  preset: WorkspaceDeployPreset;\n}): boolean {\n  if (!opts.buildOnly) return true;\n  if (\n    opts.preset === \"netlify\" &&\n    process.env.NETLIFY === \"true\" &&\n    process.env.NETLIFY_LOCAL !== \"true\"\n  ) {\n    return true;\n  }\n  if (opts.preset === \"cloudflare_pages\" && process.env.CF_PAGES === \"1\") {\n    return true;\n  }\n  return false;\n}\n\nfunction normalizePreset(\n  value: string | undefined,\n): WorkspaceDeployPreset | null {\n  if (!value) return null;\n  if (value === \"cloudflare_pages\" || value === \"cloudflare-pages\") {\n    return \"cloudflare_pages\";\n  }\n  if (value === \"netlify\") return \"netlify\";\n  throw new Error(\n    `Unsupported workspace deploy preset \"${value}\". Supported presets: cloudflare_pages, netlify.`,\n  );\n}\n\nfunction moduleIdent(app: string): string {\n  return \"app_\" + app.replace(/[^a-zA-Z0-9_]/g, \"_\");\n}\n\nfunction compareWorkspaceAppIds(a: string, b: string): number {\n  if (a === \"dispatch\") return -1;\n  if (b === \"dispatch\") return 1;\n  return a.localeCompare(b);\n}\n\nfunction copyDir(src: string, dest: string): void {\n  fs.mkdirSync(dest, { recursive: true });\n  for (const entry of fs.readdirSync(src, { withFileTypes: true })) {\n    const s = path.join(src, entry.name);\n    const d = path.join(dest, entry.name);\n    if (entry.isSymbolicLink()) {\n      try {\n        const target = fs.readlinkSync(s);\n        fs.symlinkSync(target, d);\n      } catch {\n        fs.copyFileSync(s, d);\n      }\n    } else if (entry.isDirectory()) {\n      copyDir(s, d);\n    } else {\n      fs.copyFileSync(s, d);\n    }\n  }\n}\n"]}
+{"version":3,"file":"workspace-deploy.js","sourceRoot":"","sources":["../../src/deploy/workspace-deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAIxD,MAAM,4BAA4B,GAAG,mBAAmB,CAAC;AACzD,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IAC9C,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,IAAI;IACJ,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,aAAa;IACb,MAAM;IACN,KAAK;CACN,CAAC,CAAC;AACH,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AAClE,MAAM,2BAA2B,GAAG,eAAe,CAAC;AACpD,MAAM,4BAA4B,GAAG,qBAAqB,CAAC;AAuB3D,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA+B,EAAE;IAEjC,MAAM,aAAa,GACjB,IAAI,CAAC,aAAa,IAAI,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+BAA+B,aAAa,8CAA8C,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAE7D,MAAM,IAAI,GAAG,EAAE;SACZ,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;SACnE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAEhC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,wBAAwB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,kCAAkC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACjD,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACxD,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,CAAC,GAAG,CACT,+BAA+B,IAAI,CAAC,MAAM,sBAAsB,MAAM,EAAE,CACzE,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,WAAW,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACjE,oBAAoB,CAAC,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3E,CAAC;IACD,0BAA0B,CACxB,aAAa,EACb,OAAO,EACP,IAAI,EACJ,aAAa,EACb,MAAM,CACP,CAAC;IAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,8BAA8B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,0CAA0C,OAAO,oCAAoC,CACtF,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CACT,8EAA8E,CAC/E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,GAAG,CACT,yHAAyH,CAC1H,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,aAAqB,EACrB,GAAW,EACX,MAA6B,EAC7B,QAA6B,EAC7B,aAA0C;IAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,GAAG,GAAsB;QAC7B,GAAG,OAAO,CAAC,GAAG;QACd,YAAY,EAAE,MAAM;QACpB,aAAa,EAAE,IAAI,GAAG,EAAE;QACxB,kBAAkB,EAAE,IAAI,GAAG,EAAE;QAC7B,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;KACxD,CAAC;IAEF,IAAI,MAAM,KAAK,SAAS,IAAI,iCAAiC,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,YAAY;YACd,OAAO,CAAC,GAAG,CAAC,6BAA6B;gBACzC,OAAO,CAAC,GAAG,CAAC,YAAY;gBACxB,GAAG,CAAC,YAAY,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,+BAA+B,GAAG,WAAW,GAAG,YAAY,MAAM,GAAG,CACtE,CAAC;IAEF,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,QAAQ,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE;QAC3C,GAAG,EAAE,aAAa;QAClB,GAAG;QACH,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAC3B,aAAqB,EACrB,GAAW,EACX,OAAe,EACf,MAA6B,EAC7B,aAA0C;IAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,0EAA0E;IAC1E,qEAAqE;IACrE,kCAAkC;IAClC,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,UAAU;SACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;SAChC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,YAAY,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,MAAM,kDAAkD,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACrE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3B,0EAA0E;QAC1E,sEAAsE;QACtE,uEAAuE;QACvE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,gCAAgC,CAAC,aAAa,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,8BAA8B,CAAC,OAAe,EAAE,IAAc;IACrE,MAAM,oBAAoB,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACpD,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC;QACnC,CAAC,CAAC,IAAI,CAAC;IACT,uEAAuE;IACvE,qEAAqE;IACrE,WAAW;IACX,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/B,IAAI,oBAAoB;YAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,CAAC;QACV,OAAO;QACP,OAAO,EAAE,EAAE;KACZ,CAAC;IACF,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAClC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACvC,CAAC;IAEF,oEAAoE;IACpE,kBAAkB;IAClB,MAAM,OAAO,GAAG,IAAI;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC;SAChE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,IAAI;SAClB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,wBAAwB,CAAC,8BAA8B,CAAC,eAAe,WAAW,CAAC,CAAC,CAAC,4BAA4B,CACpH;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,2BAA2B,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC3D,CAAC,CAAC,kKAAkK,WAAW,CAAC,UAAU,CAAC;CAC9L;QACG,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,wBAAwB,GAAG,oBAAoB;QACnD,CAAC,CAAC,oFAAoF,oBAAoB;CAC7G;QACG,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,MAAM,GAAG,GAAG,OAAO;;;;;EAKzB,2BAA2B,GAAG,wBAAwB,GAAG,QAAQ;;0CAEzB,0BAA0B,CAAC,IAAI,CAAC;;;;;CAKzE,CAAC;IACA,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAc;IAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3E,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,IAAc;IAC5D,MAAM,KAAK,GAAa;QACtB,qDAAqD;QACrD,iHAAiH;KAClH,CAAC;IAEF,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,0BAA0B,YAAY,MAAM,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,iCAAiC,EAAE,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,cAAc,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAW,EAAE,OAAe;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,IAAI,4BAA4B,IAAI,GAAG,EAAE,CAAC;IACrD,OAAO;QACL,GAAG,IAAI,aAAa,EAAE,oBAAoB;QAC1C,GAAG,2BAA2B,CAC5B,GAAG,EACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,4BAA4B,EAAE,GAAG,CAAC,CACtD,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;YAClB,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACnD,OAAO,GAAG,SAAS,IAAI,EAAE,IAAI,SAAS,MAAM,CAAC;QAC/C,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,CAAC;QAClE,IAAI,uBAAuB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAe,EACf,GAAW,EACX,KAAa;IAEb,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,4BAA4B,EAAE,GAAG,EAAE,KAAK,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;KAC/B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,iCAAiC,GAAG;IACxC,CAAC,UAAU,EAAE,UAAU,CAAC;IACxB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,cAAc,EAAE,SAAS,CAAC;IAC3B,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,YAAY,EAAE,YAAY,CAAC;IAC5B,CAAC,WAAW,EAAE,WAAW,CAAC;IAC1B,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,MAAM,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,eAAe;IACf,mBAAmB;IACnB,SAAS;IACT,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;CAC3D,CAAC,CAAC;AAEH,SAAS,+BAA+B,CAAC,IAAc;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAC3B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,IAAI,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,CACnE,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACnC,MAAM,IAAI,KAAK,CACb,oBAAoB,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE,CACvI,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,aAAqB,EACrB,GAAW,EACX,aAA0C,EAC1C,SAAiB;IAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IAC1E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,gCAAgC,GAAG,mBAAmB,GAAG,kDAAkD,CAC5G,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC;IAC5E,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnB,yBAAyB,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,yBAAyB,CAChC,WAAmB,EACnB,GAAW,EACX,aAA0C,EAC1C,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO;IAEvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;IAC3B,MAAM,UAAU,GACd,GAAG,KAAK,UAAU;QAChB,CAAC,CAAC,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,GAAG,QAAQ,IAAI,CAAC;QACzD,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC;IAClC,MAAM,uBAAuB,GAC3B,GAAG,KAAK,UAAU;QAChB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;;;;;;;;;;;CAaP,CAAC;IACA,MAAM,WAAW,GACf,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC;IACpE,MAAM,MAAM,GAAG,oBAAoB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;;;;;;;;MAQvD,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;;;;;EAK5F,uBAAuB;;;;;;;yBAOA,WAAW;;;;UAI1B,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,iBAAiB,CAAC;;UAEvC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;;;kBAGlB,IAAI,CAAC,SAAS,CAC5B,4BAA4B,CAAC,GAAG,EAAE,SAAS,CAAC,EAC5C,IAAI,EACJ,CAAC,CACF;SACE,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,MAAM,CAAC;;;CAGhB,CAAC;IACA,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,4BAA4B,CACnC,GAAW,EACX,SAAiB;IAEjB,OAAO;QACL,aAAa;QACb,IAAI,GAAG,WAAW;QAClB,GAAG,2BAA2B,CAAC,GAAG,EAAE,SAAS,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAW,EAAE,SAAiB;IACjE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,EAAE;SACN,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC/C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;SACjC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,OAAO,+BAA+B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC,CAAC;SACD,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAqB;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,oBAAoB,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc;IAC1C,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QAChD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE;QAC7D,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iCAAiC,CAAC,MAAc;IACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,EAAE;aACN,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC;aAClC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,aAAqB,EACrB,OAAe,EACf,IAAc,EACd,aAA0C,EAC1C,MAA6B;IAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAC7B;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,aAAa;KACpB,EACD,IAAI,EACJ,CAAC,CACF,CAAC;IAEF,MAAM,OAAO,GACX,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,IAAI,CAAC,IAAI,CACP,mBAAmB,CAAC,aAAa,CAAC,EAClC,GAAG,GAAG,SAAS,EACf,2BAA2B,EAC3B,4BAA4B,CAC7B,CACF;QACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,IAAI,CAAC,IAAI,CACP,OAAO,EACP,GAAG,EACH,2BAA2B,EAC3B,4BAA4B,CAC7B,CACF,CAAC;IAER,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,aAAqB,EACrB,IAAc;IAEd,MAAM,YAAY,GAAG,gCAAgC,CAAC,aAAa,CAAC,CAAC;IAErE,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,GAAG,GACP,wBAAwB,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACtE,OAAO;YACL,EAAE,EAAE,GAAG;YACP,IAAI,EAAE,GAAG,EAAE,WAAW,IAAI,SAAS,CAAC,GAAG,CAAC;YACxC,WAAW,EAAE,GAAG,EAAE,WAAW,IAAI,EAAE;YACnC,IAAI,EAAE,OAAO;YACb,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,UAAU,EAAE,GAAG,KAAK,UAAU;SAC/B,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,gCAAgC,CACvC,aAAqB;IAErB,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GACZ,yBAAyB,CACvB,IAAI,CAAC,IAAI,CACP,aAAa,EACb,2BAA2B,EAC3B,4BAA4B,CAC7B,CACF;QACD,yBAAyB,CACvB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,4BAA4B,CAAC,CACvD,CAAC;IACJ,MAAM,IAAI,GAAG,OAAO,IAAI,QAAQ,IAAI,EAAE,CAAC;IACvC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAAuB;IAEvB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,IAAY;IAEZ,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,0BAA0B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAW;IAEX,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;QACzC,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,IAAI,GAAG,OAAO;SACjB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,MAAM,GAAG,GAAG,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,EAAE;YACF,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxB,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,GAAG,EAAuC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAE/D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG;QACf,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,IAAI,CACL,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACjE,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,IAAc;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CACpB,YAA+C,EAC/C,IAAc;IAEd,OAAO,CACL,YAAY;QACZ,cAAc,CAAC,IAAI,CAAC;QACpB,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACzC,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CAAC,IAG3C;IACC,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC;QAAE,OAAO;IAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE;QAAE,OAAO;IAC3C,MAAM,IAAI,KAAK,CACb;QACE,0DAA0D;QAC1D,uJAAuJ;QACvJ,0HAA0H;QAC1H,0GAA0G;KAC3G,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,IAGpC;IACC,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACjC,IACE,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM;QAC9B,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,EACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACtB,KAAyB;IAEzB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;QACjE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,KAAK,CACb,wCAAwC,KAAK,kDAAkD,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAS,EAAE,CAAS;IAClD,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,IAAY;IACxC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAClC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * `agent-native deploy` — build and deploy every app in a workspace to a\n * single origin. Each app is served from `/<app-name>/*`, so:\n *\n *   https://your-agents.com/mail/*       → apps/mail\n *   https://your-agents.com/calendar/*   → apps/calendar\n *\n * Benefits of same-origin deploy:\n *   - Shared auth cookie → log in once, every app is signed in\n *   - Cross-app A2A is a same-origin fetch (no CORS, no JWT for siblings)\n *   - One DNS record, one TLS cert, one CDN cache\n *\n * Per-app independent deploy is still supported — just cd into the app and\n * run `agent-native build` as before. This orchestrator is for teams that\n * want the whole workspace behind one domain.\n */\nimport { execFileSync } from \"child_process\";\nimport fs from \"fs\";\nimport path from \"path\";\nimport { findWorkspaceRoot } from \"../scripts/utils.js\";\n\nexport type WorkspaceDeployPreset = \"cloudflare_pages\" | \"netlify\";\n\nconst NETLIFY_WORKSPACE_STATIC_DIR = \"_workspace_static\";\nconst NETLIFY_PUBLIC_ASSET_EXTENSIONS = new Set([\n  \"avif\",\n  \"css\",\n  \"gif\",\n  \"ico\",\n  \"jpeg\",\n  \"jpg\",\n  \"js\",\n  \"json\",\n  \"map\",\n  \"mp4\",\n  \"pdf\",\n  \"png\",\n  \"svg\",\n  \"txt\",\n  \"wasm\",\n  \"webm\",\n  \"webmanifest\",\n  \"webp\",\n  \"xml\",\n]);\nconst WORKSPACE_APPS_ENV_KEY = \"AGENT_NATIVE_WORKSPACE_APPS_JSON\";\nconst WORKSPACE_APPS_MANIFEST_DIR = \".agent-native\";\nconst WORKSPACE_APPS_MANIFEST_FILE = \"workspace-apps.json\";\n\ninterface WorkspaceAppManifestEntry {\n  id: string;\n  name: string;\n  description: string;\n  path: string;\n  url?: string;\n  isDispatch: boolean;\n}\n\nexport interface WorkspaceDeployOptions {\n  args?: string[];\n  /** Override the workspace root (defaults to walking up from cwd). */\n  workspaceRoot?: string;\n  /** Only build — don't invoke the deploy platform CLI. */\n  buildOnly?: boolean;\n  /** Target preset. Defaults to `cloudflare_pages`. */\n  preset?: WorkspaceDeployPreset;\n  /** @internal Override process execution in tests. */\n  execFile?: typeof execFileSync;\n}\n\nexport async function runWorkspaceDeploy(\n  opts: WorkspaceDeployOptions = {},\n): Promise<void> {\n  const workspaceRoot =\n    opts.workspaceRoot ?? findWorkspaceRoot(process.cwd()) ?? process.cwd();\n  const appsDir = path.join(workspaceRoot, \"apps\");\n  if (!fs.existsSync(appsDir)) {\n    throw new Error(\n      `No apps/ directory found at ${workspaceRoot}. Run this inside an agent-native workspace.`,\n    );\n  }\n\n  const rawArgs = opts.args ?? [];\n  const args = new Set(rawArgs);\n  const buildOnly = opts.buildOnly ?? args.has(\"--build-only\");\n\n  const apps = fs\n    .readdirSync(appsDir, { withFileTypes: true })\n    .filter((e) => e.isDirectory())\n    .map((e) => e.name)\n    .filter((n) => fs.existsSync(path.join(appsDir, n, \"package.json\")))\n    .sort(compareWorkspaceAppIds);\n\n  if (apps.length === 0) {\n    throw new Error(\n      `Workspace has no apps. Run \\`agent-native add-app\\` to add one.`,\n    );\n  }\n  assertNoReservedWorkspaceAppIds(apps);\n  const workspaceApps = readWorkspaceAppManifest(workspaceRoot, apps);\n\n  const preset = resolvePreset(opts.preset, rawArgs);\n  assertWorkspaceDeployProductionEnv({ buildOnly, preset });\n  const distDir = path.join(workspaceRoot, \"dist\");\n  fs.rmSync(distDir, { recursive: true, force: true });\n  fs.mkdirSync(distDir, { recursive: true });\n\n  if (preset === \"netlify\") {\n    const functionsDir = netlifyFunctionsDir(workspaceRoot);\n    fs.rmSync(functionsDir, { recursive: true, force: true });\n    fs.mkdirSync(functionsDir, { recursive: true });\n  }\n\n  console.log(\n    `[workspace-deploy] Building ${apps.length} app(s) for preset=${preset}`,\n  );\n\n  const execFile = opts.execFile ?? execFileSync;\n  for (const app of apps) {\n    buildOneApp(workspaceRoot, app, preset, execFile, workspaceApps);\n    moveAppBuildIntoDist(workspaceRoot, app, distDir, preset, workspaceApps);\n  }\n  writeWorkspaceAppManifests(\n    workspaceRoot,\n    distDir,\n    apps,\n    workspaceApps,\n    preset,\n  );\n\n  if (preset === \"netlify\") {\n    writeNetlifyRedirects(distDir, apps);\n  } else {\n    writeCloudflareRoutingManifest(distDir, apps);\n  }\n\n  if (buildOnly) {\n    console.log(\n      `\\n[workspace-deploy] Build complete at ${distDir}. Skipping publish (--build-only).`,\n    );\n    return;\n  }\n\n  console.log(`\\n[workspace-deploy] Build complete. Publish with:\\n`);\n  console.log(`  cd ${path.relative(process.cwd(), workspaceRoot) || \".\"}`);\n  if (preset === \"netlify\") {\n    console.log(\n      `  netlify deploy --prod --dir=dist --functions=.netlify/functions-internal\\n`,\n    );\n  } else {\n    console.log(`  wrangler pages deploy dist\\n`);\n  }\n  console.log(\n    `All apps live at https://<origin>/<app-name>/*. Log in once on any app\\nand the session is shared across the workspace.`,\n  );\n}\n\nfunction buildOneApp(\n  workspaceRoot: string,\n  app: string,\n  preset: WorkspaceDeployPreset,\n  execFile: typeof execFileSync,\n  workspaceApps: WorkspaceAppManifestEntry[],\n): void {\n  const appDir = path.join(workspaceRoot, \"apps\", app);\n  const env: NodeJS.ProcessEnv = {\n    ...process.env,\n    NITRO_PRESET: preset,\n    APP_BASE_PATH: `/${app}`,\n    VITE_APP_BASE_PATH: `/${app}`,\n    [WORKSPACE_APPS_ENV_KEY]: JSON.stringify(workspaceApps),\n  };\n\n  if (preset === \"netlify\" && appUsesNetlifyUnpooledDatabaseUrl(appDir)) {\n    env.DATABASE_URL =\n      process.env.NETLIFY_DATABASE_URL_UNPOOLED ??\n      process.env.DATABASE_URL ??\n      env.DATABASE_URL;\n  }\n\n  console.log(\n    `[workspace-deploy] Building ${app} (base=/${app}, preset=${preset})`,\n  );\n\n  cleanAppBuildOutputs(appDir);\n\n  execFile(\"pnpm\", [\"--filter\", app, \"build\"], {\n    cwd: workspaceRoot,\n    env,\n    stdio: \"inherit\",\n  });\n}\n\nfunction moveAppBuildIntoDist(\n  workspaceRoot: string,\n  app: string,\n  distDir: string,\n  preset: WorkspaceDeployPreset,\n  workspaceApps: WorkspaceAppManifestEntry[],\n): void {\n  const appDir = path.join(workspaceRoot, \"apps\", app);\n  // Resolve the per-app build output: prefer dist/ (standard), fall back to\n  // .output/ (Nitro's default). The Cloudflare preset emits into dist/\n  // containing the worker + assets.\n  const candidates = [\"dist\", \".output\"];\n  const src = candidates\n    .map((c) => path.join(appDir, c))\n    .find((p) => fs.existsSync(p));\n  if (!src) {\n    throw new Error(\n      `Expected ${candidates.join(\" or \")} under ${appDir} but none existed. Check the app's build script.`,\n    );\n  }\n  if (preset === \"netlify\") {\n    const mountedSrc = path.join(src, app);\n    const staticSrc = fs.existsSync(mountedSrc) ? mountedSrc : src;\n    const target = path.join(distDir, NETLIFY_WORKSPACE_STATIC_DIR, app);\n    fs.mkdirSync(target, { recursive: true });\n    copyDir(staticSrc, target);\n    // Nitro/Vite mounted builds can contain a nested copy of public assets at\n    // dist/<app>/<app>/...; the workspace root already supplies the outer\n    // mount path, so keeping it would publish duplicate /<app>/<app> URLs.\n    fs.rmSync(path.join(target, app), { recursive: true, force: true });\n    copyNetlifyFunctionIntoWorkspace(workspaceRoot, app, workspaceApps, target);\n  } else {\n    const target = path.join(distDir, app);\n    fs.mkdirSync(target, { recursive: true });\n    copyDir(src, target);\n  }\n}\n\n/**\n * Write the Cloudflare Pages `_routes.json` and a dispatcher `_worker.js` at\n * the workspace dist root so each app is reachable under /<app>/*.\n */\nfunction writeCloudflareRoutingManifest(distDir: string, apps: string[]): void {\n  const dispatchFaviconAsset = apps.includes(\"dispatch\")\n    ? dispatchRootFaviconAsset(distDir)\n    : null;\n  // _routes.json tells Cloudflare which paths are dynamic (Functions) vs\n  // static. Mark /<app>/* as include so every app's worker handles its\n  // subtree.\n  const include = apps.map((a) => `/${a}/*`).concat([\"/\"]);\n  if (apps.includes(\"dispatch\")) {\n    include.push(\"/_agent-native/*\");\n    include.push(\"/.well-known/*\");\n    if (dispatchFaviconAsset) include.push(\"/favicon.ico\");\n  }\n  const routes = {\n    version: 1,\n    include,\n    exclude: [],\n  };\n  fs.writeFileSync(\n    path.join(distDir, \"_routes.json\"),\n    JSON.stringify(routes, null, 2) + \"\\n\",\n  );\n\n  // Dispatcher worker: inspects the path and forwards to the matching\n  // per-app worker.\n  const imports = apps\n    .map((a) => `import ${moduleIdent(a)} from \"./${a}/_worker.js\";`)\n    .join(\"\\n\");\n  const dispatch = apps\n    .map(\n      (a) =>\n        `  if (pathname === \"/${a}\" || pathname.startsWith(\"/${a}/\")) return ${moduleIdent(a)}.fetch(request, env, ctx);`,\n    )\n    .join(\"\\n\");\n  const dispatchRootFrameworkRoutes = apps.includes(\"dispatch\")\n    ? `    if (pathname === \"/_agent-native\" || pathname.startsWith(\"/_agent-native/\") || pathname === \"/.well-known\" || pathname.startsWith(\"/.well-known/\")) return ${moduleIdent(\"dispatch\")}.fetch(request, env, ctx);\n`\n    : \"\";\n  const dispatchRootFaviconRoute = dispatchFaviconAsset\n    ? `    if (pathname === \"/favicon.ico\") return Response.redirect(new URL(\"/dispatch/${dispatchFaviconAsset}\", request.url).toString(), 302);\n`\n    : \"\";\n\n  const worker = `${imports}\n\nexport default {\n  async fetch(request, env, ctx) {\n    const { pathname } = new URL(request.url);\n${dispatchRootFrameworkRoutes}${dispatchRootFaviconRoute}${dispatch}\n    if (pathname === \"/\") {\n      return Response.redirect(new URL(\"${cloudflareRootRedirectPath(apps)}\", request.url).toString(), 302);\n    }\n    return new Response(\"Not found\", { status: 404 });\n  },\n};\n`;\n  fs.writeFileSync(path.join(distDir, \"_worker.js\"), worker);\n}\n\nfunction cloudflareRootRedirectPath(apps: string[]): string {\n  return apps.includes(\"dispatch\") ? \"/dispatch/overview\" : `/${apps[0]}/`;\n}\n\nfunction writeNetlifyRedirects(distDir: string, apps: string[]): void {\n  const lines: string[] = [\n    \"# Generated by agent-native deploy --preset netlify\",\n    \"# Static app assets are stored under a safe namespace; dynamic app routes are handled by function route config.\",\n  ];\n\n  if (apps.includes(\"dispatch\")) {\n    lines.push(\"/_agent-native/* /.netlify/functions/dispatch-server 200\");\n    lines.push(\"/.well-known/* /.netlify/functions/dispatch-server 200\");\n    const faviconAsset = dispatchRootFaviconAsset(distDir);\n    if (faviconAsset) {\n      lines.push(`/favicon.ico /dispatch/${faviconAsset} 302`);\n    }\n  }\n\n  for (const app of apps) {\n    lines.push(...netlifyAssetRedirectsFor(app, distDir));\n  }\n\n  if (apps.includes(\"dispatch\")) {\n    lines.push(\"/ /dispatch/overview 302\");\n    lines.push(\"/dispatch /dispatch/overview 302\");\n    for (const [from, to] of DISPATCH_WORKSPACE_ROOT_REDIRECTS) {\n      lines.push(`/${from} /dispatch/${to} 302`);\n    }\n  } else {\n    lines.push(`/ /${apps[0]}/ 302`);\n  }\n\n  fs.writeFileSync(path.join(distDir, \"_redirects\"), lines.join(\"\\n\") + \"\\n\");\n}\n\nfunction netlifyAssetRedirectsFor(app: string, distDir: string): string[] {\n  const from = `/${app}`;\n  const to = `/${NETLIFY_WORKSPACE_STATIC_DIR}/${app}`;\n  return [\n    `${from}/assets/* ${to}/assets/:splat 200`,\n    ...netlifyPublicRootAssetPaths(\n      app,\n      path.join(distDir, NETLIFY_WORKSPACE_STATIC_DIR, app),\n    ).map((assetPath) => {\n      const assetName = assetPath.slice(from.length + 1);\n      return `${assetPath} ${to}/${assetName} 200`;\n    }),\n  ];\n}\n\nfunction dispatchRootFaviconAsset(distDir: string): string | null {\n  for (const asset of [\"favicon.ico\", \"favicon.svg\", \"favicon.png\"]) {\n    if (workspaceAppAssetExists(distDir, \"dispatch\", asset)) return asset;\n  }\n  return null;\n}\n\nfunction workspaceAppAssetExists(\n  distDir: string,\n  app: string,\n  asset: string,\n): boolean {\n  return [\n    path.join(distDir, NETLIFY_WORKSPACE_STATIC_DIR, app, asset),\n    path.join(distDir, app, app, asset),\n    path.join(distDir, app, asset),\n  ].some((candidate) => fs.existsSync(candidate));\n}\n\nconst DISPATCH_WORKSPACE_ROOT_REDIRECTS = [\n  [\"overview\", \"overview\"],\n  [\"login\", \"login\"],\n  [\"signup\", \"signup\"],\n  [\"apps\", \"apps\"],\n  [\"apps/new-app\", \"new-app\"],\n  [\"new-app\", \"new-app\"],\n  [\"vault\", \"vault\"],\n  [\"integrations\", \"integrations\"],\n  [\"agents\", \"agents\"],\n  [\"workspace\", \"workspace\"],\n  [\"messaging\", \"messaging\"],\n  [\"destinations\", \"destinations\"],\n  [\"identities\", \"identities\"],\n  [\"approvals\", \"approvals\"],\n  [\"audit\", \"audit\"],\n  [\"team\", \"team\"],\n];\n\nconst RESERVED_WORKSPACE_APP_IDS = new Set([\n  \"_agent-native\",\n  \"_workspace_static\",\n  \"netlify\",\n  ...DISPATCH_WORKSPACE_ROOT_REDIRECTS.map(([from]) => from),\n]);\n\nfunction assertNoReservedWorkspaceAppIds(apps: string[]): void {\n  const conflicts = apps.filter(\n    (app) => app !== \"dispatch\" && RESERVED_WORKSPACE_APP_IDS.has(app),\n  );\n  if (conflicts.length === 0) return;\n  throw new Error(\n    `Workspace app id ${conflicts.map((id) => `\"${id}\"`).join(\", \")} conflicts with reserved workspace routes. Choose a different app id.`,\n  );\n}\n\nfunction copyNetlifyFunctionIntoWorkspace(\n  workspaceRoot: string,\n  app: string,\n  workspaceApps: WorkspaceAppManifestEntry[],\n  staticDir: string,\n): void {\n  const appDir = path.join(workspaceRoot, \"apps\", app);\n  const src = path.join(appDir, \".netlify\", \"functions-internal\", \"server\");\n  if (!fs.existsSync(src)) {\n    throw new Error(\n      `Expected Netlify function at ${src} after building ${app}. Check the app's build script and NITRO_PRESET.`,\n    );\n  }\n\n  const dest = path.join(netlifyFunctionsDir(workspaceRoot), `${app}-server`);\n  fs.rmSync(dest, { recursive: true, force: true });\n  copyDir(src, dest);\n  patchNetlifyFunctionEntry(dest, app, workspaceApps, staticDir);\n}\n\nfunction patchNetlifyFunctionEntry(\n  functionDir: string,\n  app: string,\n  workspaceApps: WorkspaceAppManifestEntry[],\n  staticDir: string,\n): void {\n  const serverPath = path.join(functionDir, \"server.mjs\");\n  if (!fs.existsSync(serverPath)) return;\n\n  const basePath = `/${app}`;\n  const pathConfig =\n    app === \"dispatch\"\n      ? [\"/_agent-native/*\", \"/.well-known/*\", `${basePath}/*`]\n      : [basePath, `${basePath}/*`];\n  const normalizeBasePathHelper =\n    app === \"dispatch\"\n      ? \"\"\n      : `\nfunction normalizeBasePathArgs(args) {\n  const request = args[0];\n  if (!request || typeof request.url !== \"string\" || typeof Request !== \"function\") {\n    return args;\n  }\n  const url = new URL(request.url);\n  if (url.pathname === basePath || url.pathname === \\`\\${basePath}/\\`) {\n    url.pathname = \\`\\${basePath}//\\`;\n    return [new Request(url, request), ...args.slice(1)];\n  }\n  return args;\n}\n`;\n  const handlerArgs =\n    app === \"dispatch\" ? \"...args\" : \"...normalizeBasePathArgs(args)\";\n  const server = `const basePath = ${JSON.stringify(basePath)};\n\nfunction setBasePathEnv() {\n  const processRef = globalThis.process ??= { env: {} };\n  processRef.env ??= {};\n  Object.assign(processRef.env, {\n    APP_BASE_PATH: basePath,\n    VITE_APP_BASE_PATH: basePath,\n    ${JSON.stringify(WORKSPACE_APPS_ENV_KEY)}: ${JSON.stringify(JSON.stringify(workspaceApps))},\n  });\n}\n\nsetBasePathEnv();\n${normalizeBasePathHelper}\n\nlet cachedHandler;\n\nexport default async function handler(...args) {\n  setBasePathEnv();\n  cachedHandler ??= (await import(\"./main.mjs\")).default;\n  return cachedHandler(${handlerArgs});\n}\n\nexport const config = {\n  name: ${JSON.stringify(`${app} server handler`)},\n  generator: \"agent-native workspace deploy\",\n  path: ${JSON.stringify(pathConfig)},\n  nodeBundler: \"none\",\n  includedFiles: [\"**\"],\n  excludedPath: ${JSON.stringify(\n    netlifyFunctionExcludedPaths(app, staticDir),\n    null,\n    2,\n  )\n    .split(\"\\n\")\n    .join(\"\\n  \")},\n  preferStatic: false,\n};\n`;\n  fs.rmSync(serverPath, { force: true });\n  fs.writeFileSync(path.join(functionDir, `${app}-server.mjs`), server);\n}\n\nfunction netlifyFunctionExcludedPaths(\n  app: string,\n  staticDir: string,\n): string[] {\n  return [\n    \"/.netlify/*\",\n    `/${app}/assets/*`,\n    ...netlifyPublicRootAssetPaths(app, staticDir),\n  ];\n}\n\nfunction netlifyPublicRootAssetPaths(app: string, staticDir: string): string[] {\n  if (!fs.existsSync(staticDir)) return [];\n  return fs\n    .readdirSync(staticDir, { withFileTypes: true })\n    .filter((entry) => entry.isFile())\n    .map((entry) => entry.name)\n    .filter((name) => {\n      const ext = path.extname(name).slice(1).toLowerCase();\n      return NETLIFY_PUBLIC_ASSET_EXTENSIONS.has(ext);\n    })\n    .sort()\n    .map((name) => `/${app}/${encodeURI(name)}`);\n}\n\nfunction netlifyFunctionsDir(workspaceRoot: string): string {\n  return path.join(workspaceRoot, \".netlify\", \"functions-internal\");\n}\n\nfunction cleanAppBuildOutputs(appDir: string): void {\n  for (const name of [\"dist\", \".output\", \"build\"]) {\n    fs.rmSync(path.join(appDir, name), { recursive: true, force: true });\n  }\n  fs.rmSync(path.join(appDir, \".netlify\", \"functions-internal\"), {\n    recursive: true,\n    force: true,\n  });\n}\n\nfunction appUsesNetlifyUnpooledDatabaseUrl(appDir: string): boolean {\n  const netlifyPath = path.join(appDir, \"netlify.toml\");\n  if (!fs.existsSync(netlifyPath)) return false;\n  try {\n    return fs\n      .readFileSync(netlifyPath, \"utf-8\")\n      .includes(\"NETLIFY_DATABASE_URL_UNPOOLED\");\n  } catch {\n    return false;\n  }\n}\n\nfunction writeWorkspaceAppManifests(\n  workspaceRoot: string,\n  distDir: string,\n  apps: string[],\n  workspaceApps: WorkspaceAppManifestEntry[],\n  preset: WorkspaceDeployPreset,\n): void {\n  const manifest = JSON.stringify(\n    {\n      version: 1,\n      apps: workspaceApps,\n    },\n    null,\n    2,\n  );\n\n  const targets =\n    preset === \"netlify\"\n      ? apps.map((app) =>\n          path.join(\n            netlifyFunctionsDir(workspaceRoot),\n            `${app}-server`,\n            WORKSPACE_APPS_MANIFEST_DIR,\n            WORKSPACE_APPS_MANIFEST_FILE,\n          ),\n        )\n      : apps.map((app) =>\n          path.join(\n            distDir,\n            app,\n            WORKSPACE_APPS_MANIFEST_DIR,\n            WORKSPACE_APPS_MANIFEST_FILE,\n          ),\n        );\n\n  for (const target of targets) {\n    fs.mkdirSync(path.dirname(target), { recursive: true });\n    fs.writeFileSync(target, `${manifest}\\n`);\n  }\n}\n\nfunction readWorkspaceAppManifest(\n  workspaceRoot: string,\n  apps: string[],\n): WorkspaceAppManifestEntry[] {\n  const explicitApps = readExistingWorkspaceAppManifest(workspaceRoot);\n\n  return apps\n    .map((app) => {\n      const appDir = path.join(workspaceRoot, \"apps\", app);\n      const pkg = readPackageJson(path.join(appDir, \"package.json\"));\n      const appPath = `/${app}`;\n      const explicit = explicitApps.get(app);\n      const url =\n        normalizeWorkspaceAppUrl(explicit?.url) ?? workspaceAppUrl(appPath);\n      return {\n        id: app,\n        name: pkg?.displayName || titleCase(app),\n        description: pkg?.description || \"\",\n        path: appPath,\n        ...(url ? { url } : {}),\n        isDispatch: app === \"dispatch\",\n      };\n    })\n    .sort((a, b) => {\n      if (a.id === \"dispatch\") return -1;\n      if (b.id === \"dispatch\") return 1;\n      return a.name.localeCompare(b.name);\n    });\n}\n\nfunction readExistingWorkspaceAppManifest(\n  workspaceRoot: string,\n): Map<string, { url?: string }> {\n  const fromEnv = parseWorkspaceAppsJson(process.env[WORKSPACE_APPS_ENV_KEY]);\n  const fromFile =\n    readWorkspaceAppsFromFile(\n      path.join(\n        workspaceRoot,\n        WORKSPACE_APPS_MANIFEST_DIR,\n        WORKSPACE_APPS_MANIFEST_FILE,\n      ),\n    ) ??\n    readWorkspaceAppsFromFile(\n      path.join(workspaceRoot, WORKSPACE_APPS_MANIFEST_FILE),\n    );\n  const apps = fromEnv ?? fromFile ?? [];\n  return new Map(apps.map((app) => [app.id, app]));\n}\n\nfunction parseWorkspaceAppsJson(\n  raw: string | undefined,\n): Array<{ id: string; url?: string }> | null {\n  if (!raw) return null;\n  try {\n    return parseWorkspaceAppsManifest(JSON.parse(raw));\n  } catch {\n    return null;\n  }\n}\n\nfunction readWorkspaceAppsFromFile(\n  file: string,\n): Array<{ id: string; url?: string }> | null {\n  if (!fs.existsSync(file)) return null;\n  return parseWorkspaceAppsManifest(readPackageJson(file));\n}\n\nfunction parseWorkspaceAppsManifest(\n  parsed: any,\n): Array<{ id: string; url?: string }> | null {\n  const rawApps = Array.isArray(parsed?.apps)\n    ? parsed.apps\n    : Array.isArray(parsed)\n      ? parsed\n      : null;\n  if (!rawApps) return null;\n\n  const apps = rawApps\n    .map((entry) => {\n      if (!entry || typeof entry !== \"object\") return null;\n      const id = typeof entry.id === \"string\" ? entry.id.trim() : \"\";\n      if (!id) return null;\n      const url = normalizeWorkspaceAppUrl(entry.url);\n      return {\n        id,\n        ...(url ? { url } : {}),\n      };\n    })\n    .filter((app): app is { id: string; url?: string } => !!app);\n\n  return apps.length ? apps : null;\n}\n\nfunction workspaceBaseUrl(): string | null {\n  return (\n    process.env.WORKSPACE_GATEWAY_URL ||\n    process.env.APP_URL ||\n    process.env.URL ||\n    process.env.DEPLOY_URL ||\n    process.env.BETTER_AUTH_URL ||\n    null\n  );\n}\n\nfunction workspaceAppUrl(appPath: string): string | undefined {\n  const base = workspaceBaseUrl();\n  if (!base) return undefined;\n  try {\n    return new URL(appPath, `${base.replace(/\\/$/, \"\")}/`).toString();\n  } catch {\n    return undefined;\n  }\n}\n\nfunction normalizeWorkspaceAppUrl(value: unknown): string | undefined {\n  if (typeof value !== \"string\" || !value.trim()) return undefined;\n  try {\n    return new URL(value.trim()).toString().replace(/\\/$/, \"\");\n  } catch {\n    return undefined;\n  }\n}\n\nfunction readPackageJson(file: string): Record<string, any> | null {\n  try {\n    return JSON.parse(fs.readFileSync(file, \"utf8\"));\n  } catch {\n    return null;\n  }\n}\n\nfunction titleCase(value: string): string {\n  return value\n    .split(/[-_\\s]+/)\n    .filter(Boolean)\n    .map((part) => part.charAt(0).toUpperCase() + part.slice(1))\n    .join(\" \");\n}\n\nfunction parsePresetArg(args: string[]): WorkspaceDeployPreset | null {\n  for (let i = 0; i < args.length; i++) {\n    const arg = args[i];\n    if (arg === \"--preset\" && args[i + 1]) {\n      return normalizePreset(args[i + 1]);\n    }\n    if (arg.startsWith(\"--preset=\")) {\n      return normalizePreset(arg.slice(\"--preset=\".length));\n    }\n  }\n  return null;\n}\n\nfunction resolvePreset(\n  optionPreset: WorkspaceDeployPreset | undefined,\n  args: string[],\n): WorkspaceDeployPreset {\n  return (\n    optionPreset ??\n    parsePresetArg(args) ??\n    normalizePreset(process.env.NITRO_PRESET) ??\n    \"cloudflare_pages\"\n  );\n}\n\nfunction assertWorkspaceDeployProductionEnv(opts: {\n  buildOnly: boolean;\n  preset: WorkspaceDeployPreset;\n}): void {\n  if (!isProductionWorkspaceDeploy(opts)) return;\n  if (process.env.A2A_SECRET?.trim()) return;\n  throw new Error(\n    [\n      \"A2A_SECRET is required for production workspace deploys.\",\n      \"Workspace Slack, webhook, and cross-app A2A work resumes through signed background processors; without A2A_SECRET those production routes return 503.\",\n      'Set A2A_SECRET in your deploy provider (for example: netlify env:set A2A_SECRET \"$(openssl rand -hex 32)\") and redeploy.',\n      \"For local artifact checks, run agent-native deploy --build-only outside the deploy provider environment.\",\n    ].join(\" \"),\n  );\n}\n\nfunction isProductionWorkspaceDeploy(opts: {\n  buildOnly: boolean;\n  preset: WorkspaceDeployPreset;\n}): boolean {\n  if (!opts.buildOnly) return true;\n  if (\n    opts.preset === \"netlify\" &&\n    process.env.NETLIFY === \"true\" &&\n    process.env.NETLIFY_LOCAL !== \"true\"\n  ) {\n    return true;\n  }\n  if (opts.preset === \"cloudflare_pages\" && process.env.CF_PAGES === \"1\") {\n    return true;\n  }\n  return false;\n}\n\nfunction normalizePreset(\n  value: string | undefined,\n): WorkspaceDeployPreset | null {\n  if (!value) return null;\n  if (value === \"cloudflare_pages\" || value === \"cloudflare-pages\") {\n    return \"cloudflare_pages\";\n  }\n  if (value === \"netlify\") return \"netlify\";\n  throw new Error(\n    `Unsupported workspace deploy preset \"${value}\". Supported presets: cloudflare_pages, netlify.`,\n  );\n}\n\nfunction moduleIdent(app: string): string {\n  return \"app_\" + app.replace(/[^a-zA-Z0-9_]/g, \"_\");\n}\n\nfunction compareWorkspaceAppIds(a: string, b: string): number {\n  if (a === \"dispatch\") return -1;\n  if (b === \"dispatch\") return 1;\n  return a.localeCompare(b);\n}\n\nfunction copyDir(src: string, dest: string): void {\n  fs.mkdirSync(dest, { recursive: true });\n  for (const entry of fs.readdirSync(src, { withFileTypes: true })) {\n    const s = path.join(src, entry.name);\n    const d = path.join(dest, entry.name);\n    if (entry.isSymbolicLink()) {\n      try {\n        const target = fs.readlinkSync(s);\n        fs.symlinkSync(target, d);\n      } catch {\n        fs.copyFileSync(s, d);\n      }\n    } else if (entry.isDirectory()) {\n      copyDir(s, d);\n    } else {\n      fs.copyFileSync(s, d);\n    }\n  }\n}\n"]}

package/dist/integrations/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/integrations/plugin.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAEV,yBAAyB,EAE1B,MAAM,YAAY,CAAC;AAiCpB,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAyH9D;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,CAAC,EAAE,yBAAyB,GAClC,cAAc,CA6iBhB;AAED;;GAEG;AACH,eAAO,MAAM,yBAAyB,gBAA6B,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/integrations/plugin.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAEV,yBAAyB,EAE1B,MAAM,YAAY,CAAC;AAiCpB,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAyH9D;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,CAAC,EAAE,yBAAyB,GAClC,cAAc,CA8iBhB;AAED;;GAEG;AACH,eAAO,MAAM,yBAAyB,gBAA6B,CAAC"}

package/dist/integrations/plugin.js

@@ -1,7 +1,7 @@
 import { defineEventHandler, setResponseStatus, getMethod } from "h3";
 import { createRemoteJWKSet, jwtVerify } from "jose";
 import { FRAMEWORK_ROUTE_PREFIX } from "../server/core-routes-plugin.js";
-import { getH3App } from "../server/framework-request-handler.js";
+import { getH3App, markDefaultPluginProvided, } from "../server/framework-request-handler.js";
 import { handleWebhook, processIntegrationTask } from "./webhook-handler.js";
 import { DEFAULT_MODEL } from "../agent/default-model.js";
 import { claimPendingTask, markTaskCompleted, markTaskFailed, } from "./pending-tasks-store.js";
@@ -138,6 +138,7 @@ If a task requires many steps, summarize what you did rather than streaming ever
  */
 export function createIntegrationsPlugin(options) {
     return async (nitroApp) => {
+        markDefaultPluginProvided(nitroApp, "integrations");
         const adapters = options?.adapters ?? getDefaultAdapters();
         const adapterMap = new Map();
         for (const adapter of adapters) {

package/dist/integrations/plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/integrations/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAMlE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EACL,gBAAgB,EAEhB,iBAAiB,EACjB,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAIvE,IAAI,4BAA4B,GAA0C,IAAI,CAAC;AAE/E,SAAS,4BAA4B,CACnC,QAAsC;IAEtC,IAAI,4BAA4B;QAAE,OAAO;IACzC,UAAU,CAAC,GAAG,EAAE;QACd,0BAA0B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACrD,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,4BAA4B,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9C,0BAA0B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACrD,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,WAAW,GAAG,kBAAkB,CACpC,IAAI,GAAG,CAAC,4CAA4C,CAAC,CACtD,CAAC;AACF,MAAM,cAAc,GAAG,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB;IACzD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE;QACtD,MAAM,EAAE,cAAc;QACtB,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,sEAAsE;IACtE,4DAA4D;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACjE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,SAAS,kBAAkB;IACzB,OAAO;QACL,YAAY,EAAE;QACd,eAAe,EAAE;QACjB,eAAe,EAAE;QACjB,iBAAiB,EAAE;QACnB,YAAY,EAAE;KACf,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CAAC,KAAa;IACjD,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAC3D,IAAI,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,sBAAsB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACtD,IAAI,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;oBAC9B,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,wBAAwB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CACtF,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,CACL,0FAA0F;QAC1F,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,MAAM,yBAAyB,GAAG;;;;;;0FAMwD,CAAC;AAE3F;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAmC;IAEnC,OAAO,KAAK,EAAE,QAAa,EAAE,EAAE;QAC7B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;QACtD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,aAAa,CAAC;QAC9C,qEAAqE;QACrE,sEAAsE;QACtE,kEAAkE;QAClE,6DAA6D;QAC7D,mEAAmE;QACnE,cAAc;QACd,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAEzD,0BAA0B;QAC1B,MAAM,gBAAgB,GAAG,OAAO,EAAE,YAAY,IAAI,yBAAyB,CAAC;QAE5E,yEAAyE;QACzE,8EAA8E;QAC9E,MAAM,YAAY,GAAG,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;QAC5C,IAAI,cAAc,GAA4B,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACrD,cAAc,GAAG;gBACf,YAAY,EAAE;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,EAAE,CAAC,IAA4B,EAAE,OAAgB,EAAE,EAAE,CACtD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAc,EAAE,OAAO,EAAE,KAAK,CAAC;iBAChD;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;QACD,MAAM,OAAO,GAAG;YACd,GAAG,YAAY;YACf,GAAG,cAAc;SACK,CAAC;QAEzB,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,sBAAsB,eAAe,CAAC;QAEnD,KAAK,UAAU,cAAc,CAAC,KAAU;YACtC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,KAAK;gBAAE,OAAO,IAAI,CAAC;YAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED;;;;;;;;;;;;;;;;;;;WAmBG;QACH,KAAK,UAAU,aAAa,CAC1B,KAAU;YAEV,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;gBACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YAC9C,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACzD,wDAAwD;YACxD,IAAI,CAAC,GAAG,EAAE,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,mEAAmE;aACtE,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,SAAS,EACb,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAwB,EAAE,CAAC;YACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC5D,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC;gBAC/C,MAAM,CAAC,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,UAAU,CAAC;gBACjE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CACH,CAAC;QAEF,gEAAgE;QAChE,oDAAoD;QACpD,qEAAqE;QACrE,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,oBAAoB,EACxB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACrE,IAAI,CAAC;gBACH,OAAO,MAAM,iBAAiB,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,gEAAgE;QAChE,gDAAgD;QAChD,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,eAAe,EACnB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAwB,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;YACtC,CAAC;YAED,yCAAyC;YACzC,EAAE;YACF,iEAAiE;YACjE,kEAAkE;YAClE,qEAAqE;YACrE,kEAAkE;YAClE,oCAAoC;YACpC,EAAE;YACF,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO;wBACL,KAAK,EACH,4GAA4G;qBAC/G,CAAC;gBACJ,CAAC;gBACD,+EAA+E;YACjF,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,kBAAkB,CAC5B,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CACzC,CAAC;gBACF,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC9C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,8DAA8D;YAC9D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;YAC7D,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,cAAc,CAAC,MAAM,EAAE,qBAAqB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACnE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;gBACvC,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChE,MAAM,sBAAsB,CAAC,IAAI,EAAE;oBACjC,OAAO;oBACP,YAAY,EAAE,gBAAgB,GAAG,SAAS;oBAC1C,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC,CAAC;gBACH,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM,0BAA0B,CAAC;oBAC/B,QAAQ,EAAE,UAAU;oBACpB,KAAK,EAAE,CAAC;iBACT,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACf,OAAO,CAAC,KAAK,CACX,6DAA6D,EAC7D,GAAG,CACJ,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,cAAc,CAClB,MAAM,EACN,GAAG,EAAE,OAAO;oBACV,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;oBACpC,CAAC,CAAC,kBAAkB,CACvB,CAAC;gBACF,iEAAiE;gBACjE,iEAAiE;gBACjE,iEAAiE;gBACjE,2DAA2D;gBAC3D,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBAC3D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,mEAAmE;QACnE,4DAA4D;QAC5D,gEAAgE;QAChE,8DAA8D;QAC9D,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,2BAA2B,EAC/B,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAgC,CAAC;YACpE,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;YAC5C,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;YAC9C,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO;wBACL,KAAK,EACH,4GAA4G;qBAC/G,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,kBAAkB,CAC5B,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CACzC,CAAC;gBACF,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;oBACtD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,MAAM,0BAA0B,CAAC,cAAc,EAAE;gBAC/C,QAAQ,EAAE,UAAU;aACrB,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACtC,CAAC,CAAC,CACH,CAAC;QAEF,iEAAiE;QACjE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,EAAE,EACN,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,iEAAiE;YACjE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE7C,uDAAuD;YACvD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACxD,kEAAkE;YAClE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY;gBAAE,OAAO;YACtC,6DAA6D;YAC7D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc;gBAAE,OAAO;YACxC,yEAAyE;YACzE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,0BAA0B;gBAAE,OAAO;YAEpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,0CAA0C;YAEnE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;YACxC,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,QAAQ,EAAE,EAAE,CAAC;YACpD,CAAC;YAED,yCAAyC;YACzC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG;oBACrB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM;oBACvB,QAAQ;iBACT,CAAC;YACJ,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5C,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;gBACrE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBACpD,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC;gBAC/C,MAAM,CAAC,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,QAAQ,UAAU,CAAC;gBACzD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9C,kEAAkE;gBAClE,kEAAkE;gBAClE,iEAAiE;gBACjE,iEAAiE;gBACjE,sCAAsC;gBACtC,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;oBAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;oBACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;4BAC1C,6DAA6D;4BAC7D,qDAAqD;4BACrD,gCAAgC;4BAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;4BAC9B,OAAO;gCACL,EAAE,EAAE,KAAK;gCACT,KAAK,EACH,8DAA8D;6BACjE,CAAC;wBACJ,CAAC;wBACD,gEAAgE;wBAChE,mDAAmD;wBACnD,sBAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;4BACrC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;wBAC1D,CAAC,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC;oBAClE,IAAI,CAAC;wBACH,MAAM,yBAAyB,CAAC,UAAU,CAAC,CAAC;oBAC9C,CAAC;oBAAC,OAAO,GAAQ,EAAE,CAAC;wBAClB,OAAO,CAAC,IAAI,CACV,qCAAqC,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CACnE,CAAC;wBACF,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;oBAC9C,CAAC;oBACD,sBAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACrC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;oBAC1D,CAAC,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,wEAAwE;gBACxE,uDAAuD;gBACvD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;oBACzB,OAAO,YAAY,CAAC,QAAQ,IAAI,IAAI,CAAC;gBACvC,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBACpD,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;oBACjC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,eAAe,QAAQ,iBAAiB,EAAE,CAAC;gBAC7D,CAAC;gBAED,gEAAgE;gBAChE,kEAAkE;gBAClE,gEAAgE;gBAChE,+DAA+D;gBAC/D,oDAAoD;gBACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBACnD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;gBAChD,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,GAAG,eAAe,QAAQ,EAAE,CAAC;gBACtC,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACH,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC/C,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CACX,oDAAoD,EACpD,GAAG,CACJ,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;gBACtD,MAAM,YAAY,GAAG,gBAAgB,GAAG,SAAS,CAAC;gBAClD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE;oBACxC,OAAO;oBACP,YAAY;oBACZ,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,UAAU,EAAE,KAAK;oBACjB,aAAa,EAAE,OAAO,EAAE,aAAa;oBACrC,QAAQ;iBACT,CAAC,CAAC;gBACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxC,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,8DAA8D;gBAC9D,8DAA8D;gBAC9D,0CAA0C;gBAC1C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,qBAAqB,CACzB,QAAQ,EACR,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB,SAAS,EACT,OAAO,EAAE,KAAK,CACf,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,qBAAqB,CACzB,QAAQ,EACR,EAAE,OAAO,EAAE,KAAK,EAAE,EAClB,SAAS,EACT,OAAO,EAAE,KAAK,CACf,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;oBAClC,MAAM,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,mBAAmB,CAAC;oBACrD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;oBAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;oBACxD,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,+BAA+B,KAAK,aAAa,EACjD;4BACE,MAAM,EAAE,MAAM;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;4BAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;yBAC1C,CACF,CAAC;wBACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;wBAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;oBAC1D,CAAC;oBAAC,OAAO,GAAQ,EAAE,CAAC;wBAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;oBAChC,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;YAC9D,CAAC;YAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAChC,CAAC,CAAC,CACH,CAAC;QAEF,iEAAiE;QACjE,wEAAwE;QACxE,mEAAmE;QACnE,qEAAqE;QACrE,8CAA8C;QAC9C,yBAAyB,CAAC;YACxB,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;SAC7C,CAAC,CAAC;QACH,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAEzC,iEAAiE;QACjE,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,sDAAsD;YACtD,UAAU,CAAC,GAAG,EAAE;gBACd,iEAAiE;gBACjE,mEAAmE;gBACnE,oEAAoE;gBACpE,mEAAmE;gBACnE,8CAA8C;gBAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBAC7C,MAAM,UAAU,GAAG,OAAO;oBACxB,CAAC,CAAC,GAAG,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB;oBACjE,CAAC,CAAC,SAAS,CAAC;gBAEd,qBAAqB,CAAC;oBACpB,YAAY,EAAE,gBAAgB;oBAC9B,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,UAAU,EAAE,yBAAyB;oBACrC,UAAU;iBACX,CAAC,CAAC;YACL,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;YACnB,OAAO,CAAC,GAAG,CACT,kDAAkD,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/F,CAAC;IACN,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,wBAAwB,EAAE,CAAC;AAEpE,wCAAwC;AACxC,SAAS,UAAU,CAAC,KAAU;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CACjC,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU;YAC/B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YACnB,CAAC,CAAE,OAAkC,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;QACvD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC;QACnD,OAAO,yBAAyB,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC","sourcesContent":["import { defineEventHandler, setResponseStatus, getMethod } from \"h3\";\nimport { createRemoteJWKSet, jwtVerify } from \"jose\";\nimport { FRAMEWORK_ROUTE_PREFIX } from \"../server/core-routes-plugin.js\";\nimport { getH3App } from \"../server/framework-request-handler.js\";\nimport type {\n  PlatformAdapter,\n  IntegrationsPluginOptions,\n  IntegrationStatus,\n} from \"./types.js\";\nimport { handleWebhook, processIntegrationTask } from \"./webhook-handler.js\";\nimport { DEFAULT_MODEL } from \"../agent/default-model.js\";\nimport {\n  claimPendingTask,\n  getPendingTask,\n  markTaskCompleted,\n  markTaskFailed,\n} from \"./pending-tasks-store.js\";\nimport { extractBearerToken, verifyInternalToken } from \"./internal-token.js\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport { getRequestHeader } from \"h3\";\nimport { getIntegrationConfig, saveIntegrationConfig } from \"./config-store.js\";\nimport { slackAdapter } from \"./adapters/slack.js\";\nimport { telegramAdapter } from \"./adapters/telegram.js\";\nimport { whatsappAdapter } from \"./adapters/whatsapp.js\";\nimport { googleDocsAdapter } from \"./adapters/google-docs.js\";\nimport { emailAdapter } from \"./adapters/email.js\";\nimport {\n  startGoogleDocsPoller,\n  handlePushNotification,\n} from \"./google-docs-poller.js\";\nimport { startPendingTasksRetryJob } from \"./pending-tasks-retry-job.js\";\nimport {\n  processA2AContinuationById,\n  processDueA2AContinuations,\n} from \"./a2a-continuation-processor.js\";\nimport { resourceGetByPath, SHARED_OWNER } from \"../resources/store.js\";\nimport { getTaskQueueStats } from \"./task-queue-stats.js\";\nimport { getSession } from \"../server/auth.js\";\nimport { getOrgContext } from \"../org/context.js\";\nimport { withConfiguredAppBasePath } from \"../server/app-base-path.js\";\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\nlet a2aContinuationRetryInterval: ReturnType<typeof setInterval> | null = null;\n\nfunction startA2AContinuationRetryJob(\n  adapters: Map<string, PlatformAdapter>,\n): void {\n  if (a2aContinuationRetryInterval) return;\n  setTimeout(() => {\n    processDueA2AContinuations({ adapters }).catch((err) => {\n      console.error(\"[integrations] A2A continuation retry job failed:\", err);\n    });\n  }, 10_000);\n  a2aContinuationRetryInterval = setInterval(() => {\n    processDueA2AContinuations({ adapters }).catch((err) => {\n      console.error(\"[integrations] A2A continuation retry job failed:\", err);\n    });\n  }, 60_000);\n}\n\n// ─── Google Pub/Sub OIDC verifier (for Drive changes.watch push) ────────────\n// Cache Google's public keys for OIDC verification. jose handles TTL +\n// refresh internally — same pattern as templates/mail/.../gmail/push.post.ts.\n// Used to verify Google Pub/Sub push notifications carry a valid bearer token\n// signed by a configured service account. Without this, the webhook is wide\n// open to anonymous callers who can force a Drive sync (H7 in the audit).\nconst GOOGLE_JWKS = createRemoteJWKSet(\n  new URL(\"https://www.googleapis.com/oauth2/v3/certs\"),\n);\nconst GOOGLE_ISSUERS = [\"https://accounts.google.com\", \"accounts.google.com\"];\n\n/**\n * Verify a Pub/Sub OIDC bearer token. Throws on any verification failure.\n * Requires GOOGLE_DOCS_PUSH_AUDIENCE and GOOGLE_DOCS_PUSH_SIGNER_EMAIL to be\n * set; if either is missing in production, the webhook handler refuses the\n * request entirely (so a misconfigured deployment fails closed, surfacing in\n * Pub/Sub's delivery metrics).\n */\nasync function verifyGoogleDocsPushToken(authHeader: string): Promise<void> {\n  if (!authHeader.startsWith(\"Bearer \")) {\n    throw new Error(\"missing bearer token\");\n  }\n  const token = authHeader.slice(7);\n  const audience = process.env.GOOGLE_DOCS_PUSH_AUDIENCE;\n  if (!audience) {\n    throw new Error(\"GOOGLE_DOCS_PUSH_AUDIENCE not configured\");\n  }\n  const { payload } = await jwtVerify(token, GOOGLE_JWKS, {\n    issuer: GOOGLE_ISSUERS,\n    audience,\n  });\n  if (payload.email_verified !== true) {\n    throw new Error(\"email_verified claim is not true\");\n  }\n  // Pin to a specific service account — without this, any Google-issued\n  // token with the right audience could trigger a Drive sync.\n  const expectedSigner = process.env.GOOGLE_DOCS_PUSH_SIGNER_EMAIL;\n  if (!expectedSigner) {\n    throw new Error(\"GOOGLE_DOCS_PUSH_SIGNER_EMAIL not configured\");\n  }\n  if (payload.email !== expectedSigner) {\n    throw new Error(`unexpected signer: ${String(payload.email)}`);\n  }\n}\n\n/** Built-in adapters, instantiated lazily */\nfunction getDefaultAdapters(): PlatformAdapter[] {\n  return [\n    slackAdapter(),\n    telegramAdapter(),\n    whatsappAdapter(),\n    googleDocsAdapter(),\n    emailAdapter(),\n  ];\n}\n\n/**\n * Load resources for the integration agent's system prompt.\n * Mirrors the pattern from agent-chat-plugin.ts.\n */\nasync function loadResourcesForPrompt(owner: string): Promise<string> {\n  const resourceNames = [\"AGENTS.md\", \"LEARNINGS.md\"];\n  const sections: string[] = [];\n\n  for (const name of resourceNames) {\n    try {\n      const shared = await resourceGetByPath(SHARED_OWNER, name);\n      if (shared?.content?.trim()) {\n        sections.push(\n          `<resource name=\"${name}\" scope=\"shared\">\\n${shared.content.trim()}\\n</resource>`,\n        );\n      }\n    } catch {}\n\n    if (owner !== SHARED_OWNER) {\n      try {\n        const personal = await resourceGetByPath(owner, name);\n        if (personal?.content?.trim()) {\n          sections.push(\n            `<resource name=\"${name}\" scope=\"personal\">\\n${personal.content.trim()}\\n</resource>`,\n          );\n        }\n      } catch {}\n    }\n  }\n\n  if (sections.length === 0) return \"\";\n  return (\n    \"\\n\\nThe following resources contain template-specific instructions and user context.\\n\\n\" +\n    sections.join(\"\\n\\n\")\n  );\n}\n\nconst INTEGRATION_SYSTEM_PROMPT = `You are an AI agent responding via a messaging platform integration (Slack, Telegram, WhatsApp, etc.).\n\nYou have the same capabilities as the web chat agent. Use your tools to help the user.\n\nKeep responses concise — messaging platforms have character limits and users expect shorter replies than in a web interface. Use markdown sparingly (bold and lists are fine, but avoid complex formatting that may not render well on all platforms).\n\nIf a task requires many steps, summarize what you did rather than streaming every detail.`;\n\n/**\n * Creates a Nitro plugin that mounts messaging platform integration webhook routes.\n *\n * Routes:\n *   POST   /_agent-native/integrations/:platform/webhook  — receive platform webhooks\n *   GET    /_agent-native/integrations/status              — all integrations status\n *   GET    /_agent-native/integrations/:platform/status    — single platform status\n *   POST   /_agent-native/integrations/:platform/enable    — enable integration\n *   POST   /_agent-native/integrations/:platform/disable   — disable integration\n *   POST   /_agent-native/integrations/:platform/setup     — platform-specific setup\n */\nexport function createIntegrationsPlugin(\n  options?: IntegrationsPluginOptions,\n): NitroPluginDef {\n  return async (nitroApp: any) => {\n    const adapters = options?.adapters ?? getDefaultAdapters();\n    const adapterMap = new Map<string, PlatformAdapter>();\n    for (const adapter of adapters) {\n      adapterMap.set(adapter.platform, adapter);\n    }\n\n    const model = options?.model ?? DEFAULT_MODEL;\n    // Read the API key at REQUEST time, not plugin-init time. On Netlify\n    // Lambda the plugin module loads in a context where env vars from the\n    // site's runtime config may not yet be populated, so capturing at\n    // init can leave us with an empty string forever. The getter\n    // re-resolves on every webhook so freshly-set secrets work without\n    // a redeploy.\n    const getApiKey = () =>\n      options?.apiKey ?? process.env.ANTHROPIC_API_KEY ?? \"\";\n\n    // Build the system prompt\n    const baseSystemPrompt = options?.systemPrompt ?? INTEGRATION_SYSTEM_PROMPT;\n\n    // Resolve actions — auto-include call-agent so the integration agent can\n    // delegate to other A2A apps, matching the behavior of the agent-chat plugin.\n    const localActions = options?.actions ?? {};\n    let callAgentEntry: Record<string, unknown> = {};\n    try {\n      const mod = await import(\"../scripts/call-agent.js\");\n      callAgentEntry = {\n        \"call-agent\": {\n          tool: mod.tool,\n          run: (args: Record<string, string>, context: unknown) =>\n            mod.run(args, context as any, options?.appId),\n        },\n      };\n    } catch {\n      // call-agent script not available — skip\n    }\n    const actions = {\n      ...localActions,\n      ...callAgentEntry,\n    } as typeof localActions;\n\n    const h3 = getH3App(nitroApp);\n    const P = `${FRAMEWORK_ROUTE_PREFIX}/integrations`;\n\n    async function requireSession(event: any): Promise<boolean> {\n      const session = await getSession(event).catch(() => null);\n      if (session?.email) return true;\n      setResponseStatus(event, 401);\n      return false;\n    }\n\n    /**\n     * Gate destructive integration writes (enable/disable, setup,\n     * setIntegrationConfig…) behind an org-owner/admin check.\n     *\n     * `integration_configs` is keyed `(platform, config_key)` with no\n     * owner column in the PRIMARY KEY — so this row is effectively\n     * deployment-wide. Any signed-in user toggling /enable or /disable\n     * would otherwise affect every other user (a regular org member could\n     * disable Slack/email org-wide, write a malicious allowlist for\n     * inbound email, etc.). This check enforces that only owners and\n     * admins of the user's active org may mutate integration config.\n     *\n     * Solo / no-org sessions (i.e. ctx.orgId == null) are allowed — that's\n     * the local-dev / single-user case where there's no privilege gradient\n     * to enforce. The deployment is single-tenant by definition there.\n     *\n     * Returns an `{ ok: true }` on pass, or `{ ok: false, error }` with the\n     * status already set on the event. The error string lines up with the\n     * status code (401 → \"unauthorized\"; 403 → admin-required message).\n     */\n    async function checkOrgAdmin(\n      event: any,\n    ): Promise<{ ok: true } | { ok: false; error: string }> {\n      const session = await getSession(event).catch(() => null);\n      if (!session?.email) {\n        setResponseStatus(event, 401);\n        return { ok: false, error: \"unauthorized\" };\n      }\n      const ctx = await getOrgContext(event).catch(() => null);\n      // Solo (no org membership) — single-tenant flow, allow.\n      if (!ctx?.orgId) return { ok: true };\n      if (ctx.role === \"owner\" || ctx.role === \"admin\") return { ok: true };\n      setResponseStatus(event, 403);\n      return {\n        ok: false,\n        error:\n          \"Only organization owners and admins can mutate integration config\",\n      };\n    }\n\n    // ─── Status endpoint (all integrations) ───────────────────────\n    h3.use(\n      `${P}/status`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"GET\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n        if (!(await requireSession(event))) return { error: \"unauthorized\" };\n        const baseUrl = getBaseUrl(event);\n        const statuses: IntegrationStatus[] = [];\n        for (const adapter of adapters) {\n          const status = await adapter.getStatus(baseUrl);\n          const config = await getIntegrationConfig(adapter.platform);\n          status.enabled = !!config?.configData?.enabled;\n          status.webhookUrl = `${baseUrl}${P}/${adapter.platform}/webhook`;\n          if (!status.requiredEnvKeys) {\n            try {\n              status.requiredEnvKeys = adapter.getRequiredEnvKeys();\n            } catch {\n              status.requiredEnvKeys = [];\n            }\n          }\n          statuses.push(status);\n        }\n        return statuses;\n      }),\n    );\n\n    // ─── Task queue status (observability) ───────────────────────\n    // GET /_agent-native/integrations/task-queue/status\n    // Returns counts + recent failures for the integration_pending_tasks\n    // queue. Requires a normal session — this exposes operational data, not\n    // platform secrets. If the queue table doesn't exist yet (no inbound\n    // webhook has been processed), returns zeroed stats rather than 500.\n    h3.use(\n      `${P}/task-queue/status`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"GET\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n        if (!(await requireSession(event))) return { error: \"unauthorized\" };\n        try {\n          return await getTaskQueueStats();\n        } catch (err: any) {\n          setResponseStatus(event, 500);\n          return { error: err?.message ?? String(err) };\n        }\n      }),\n    );\n\n    // ─── Process pending task (cross-platform task queue) ────────\n    // POST /_agent-native/integrations/process-task\n    // Internal endpoint invoked via fire-and-forget self-webhook from the\n    // public webhook handler. Auth: HMAC bearer signed with A2A_SECRET.\n    // Each invocation runs the agent loop in a fresh function execution.\n    h3.use(\n      `${P}/process-task`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"POST\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n\n        const body = (await readBody(event)) as { taskId?: string };\n        const taskId = body?.taskId;\n        if (!taskId) {\n          setResponseStatus(event, 400);\n          return { error: \"taskId required\" };\n        }\n\n        // Auth: HMAC token bound to the task id.\n        //\n        // In production we MUST require A2A_SECRET — a publicly-callable\n        // process-task endpoint lets attackers re-trigger any queued task\n        // by guessing or sniffing its id (C3 in the webhook security audit).\n        // The atomic SQL claim only prevents *double*-processing, not the\n        // first attacker-driven processing.\n        //\n        // In dev we keep the loose posture so contributors don't have to\n        // configure A2A_SECRET to play with the integration locally.\n        if (!process.env.A2A_SECRET) {\n          if (process.env.NODE_ENV === \"production\") {\n            setResponseStatus(event, 503);\n            return {\n              error:\n                \"A2A_SECRET not configured — internal token signing is required to process integration tasks in production.\",\n            };\n          }\n          // Dev: fall through unsigned (the atomic claim still gates double-processing).\n        } else {\n          const tok = extractBearerToken(\n            getRequestHeader(event, \"authorization\"),\n          );\n          if (!tok || !verifyInternalToken(taskId, tok)) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid or expired internal token\" };\n          }\n        }\n\n        // Atomic claim: only one invocation gets to process this task\n        const task = await claimPendingTask(taskId);\n        if (!task) {\n          setResponseStatus(event, 200);\n          return { ok: true, skipped: \"already-claimed-or-missing\" };\n        }\n\n        try {\n          const adapter = adapterMap.get(task.platform);\n          if (!adapter) {\n            await markTaskFailed(taskId, `Unknown platform: ${task.platform}`);\n            setResponseStatus(event, 404);\n            return { error: \"Unknown platform\" };\n          }\n          const resources = await loadResourcesForPrompt(task.ownerEmail);\n          await processIntegrationTask(task, {\n            adapter,\n            systemPrompt: baseSystemPrompt + resources,\n            actions,\n            model,\n            apiKey: getApiKey(),\n            engine: options?.engine,\n            ownerEmail: task.ownerEmail,\n          });\n          await markTaskCompleted(taskId);\n          await processDueA2AContinuations({\n            adapters: adapterMap,\n            limit: 2,\n          }).catch((err) => {\n            console.error(\n              \"[integrations] A2A continuation opportunistic sweep failed:\",\n              err,\n            );\n          });\n          return { ok: true, taskId };\n        } catch (err: any) {\n          await markTaskFailed(\n            taskId,\n            err?.message\n              ? String(err.message).slice(0, 1000)\n              : \"processor failed\",\n          );\n          // Log the detail server-side; never return the raw error message\n          // to the caller. Raw messages have leaked DB error codes, schema\n          // names, and stack hints in the past (L3 in the webhook security\n          // audit). Sentry / log providers still see the full error.\n          console.error(\"[integrations] process-task failure:\", err);\n          setResponseStatus(event, 500);\n          return { error: \"Internal task failed\" };\n        }\n      }),\n    );\n\n    // ─── Process deferred A2A continuation ──────────────────────────\n    // POST /_agent-native/integrations/process-a2a-continuation\n    // Internal endpoint invoked when call-agent timed out inside an\n    // integration processor but the remote A2A task kept running.\n    h3.use(\n      `${P}/process-a2a-continuation`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"POST\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n\n        const body = (await readBody(event)) as { continuationId?: string };\n        const continuationId = body?.continuationId;\n        if (!continuationId) {\n          setResponseStatus(event, 400);\n          return { error: \"continuationId required\" };\n        }\n\n        if (!process.env.A2A_SECRET) {\n          if (process.env.NODE_ENV === \"production\") {\n            setResponseStatus(event, 503);\n            return {\n              error:\n                \"A2A_SECRET not configured — internal token signing is required to process A2A continuations in production.\",\n            };\n          }\n        } else {\n          const tok = extractBearerToken(\n            getRequestHeader(event, \"authorization\"),\n          );\n          if (!tok || !verifyInternalToken(continuationId, tok)) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid or expired internal token\" };\n          }\n        }\n\n        await processA2AContinuationById(continuationId, {\n          adapters: adapterMap,\n        });\n        return { ok: true, continuationId };\n      }),\n    );\n\n    // ─── Per-platform catch-all ───────────────────────────────────\n    // Handles: webhook, status, enable, disable, setup for each platform\n    h3.use(\n      `${P}`,\n      defineEventHandler(async (event) => {\n        const method = getMethod(event);\n        // event.path is stripped to the remainder after the mount prefix\n        const raw = (event.path || \"/\").split(\"?\")[0].replace(/^\\//, \"\");\n        const parts = raw.split(\"/\").filter(Boolean);\n\n        // Already handled by the dedicated /status route above\n        if (parts[0] === \"status\" && parts.length === 1) return;\n        // Already handled by the dedicated /task-queue/status route above\n        if (parts[0] === \"task-queue\") return;\n        // Already handled by the dedicated /process-task route above\n        if (parts[0] === \"process-task\") return;\n        // Already handled by the dedicated /process-a2a-continuation route above\n        if (parts[0] === \"process-a2a-continuation\") return;\n\n        const platform = parts[0];\n        const action = parts[1]; // webhook, status, enable, disable, setup\n\n        if (!platform) {\n          setResponseStatus(event, 404);\n          return { error: \"Platform required\" };\n        }\n\n        const adapter = adapterMap.get(platform);\n        if (!adapter) {\n          setResponseStatus(event, 404);\n          return { error: `Unknown platform: ${platform}` };\n        }\n\n        // Set params for handlers that read them\n        if (event.context) {\n          event.context.params = {\n            ...event.context.params,\n            platform,\n          };\n        }\n\n        // ─── GET /:platform/status ─────────────────────────────\n        if (action === \"status\" && method === \"GET\") {\n          if (!(await requireSession(event))) return { error: \"unauthorized\" };\n          const baseUrl = getBaseUrl(event);\n          const status = await adapter.getStatus(baseUrl);\n          const config = await getIntegrationConfig(platform);\n          status.enabled = !!config?.configData?.enabled;\n          status.webhookUrl = `${baseUrl}${P}/${platform}/webhook`;\n          if (!status.requiredEnvKeys) {\n            try {\n              status.requiredEnvKeys = adapter.getRequiredEnvKeys();\n            } catch {\n              status.requiredEnvKeys = [];\n            }\n          }\n          return status;\n        }\n\n        // ─── POST /:platform/webhook ───────────────────────────\n        if (action === \"webhook\" && method === \"POST\") {\n          // Google Docs push notifications bypass the normal webhook flow —\n          // they're opaque \"something changed\" pings, not message payloads.\n          // We MUST verify the Pub/Sub OIDC token here. Without it, anyone\n          // could POST any body to this URL and force a Drive changes pull\n          // (H7 in the webhook security audit).\n          if (platform === \"google-docs\") {\n            const audience = process.env.GOOGLE_DOCS_PUSH_AUDIENCE;\n            if (!audience) {\n              if (process.env.NODE_ENV === \"production\") {\n                // Fail closed in prod so a misconfigured deployment surfaces\n                // in Pub/Sub's delivery metrics rather than silently\n                // accepting anonymous requests.\n                setResponseStatus(event, 503);\n                return {\n                  ok: false,\n                  error:\n                    \"google-docs push endpoint disabled (audience not configured)\",\n                };\n              }\n              // Dev: keep the loose posture so contributors can play with the\n              // integration locally without configuring Pub/Sub.\n              handlePushNotification().catch((err) => {\n                console.error(\"[google-docs] Push handler error:\", err);\n              });\n              return \"ok\";\n            }\n            const authHeader = getRequestHeader(event, \"authorization\") || \"\";\n            try {\n              await verifyGoogleDocsPushToken(authHeader);\n            } catch (err: any) {\n              console.warn(\n                `[google-docs] OIDC verify failed: ${err?.message ?? String(err)}`,\n              );\n              setResponseStatus(event, 401);\n              return { ok: false, error: \"unauthorized\" };\n            }\n            handlePushNotification().catch((err) => {\n              console.error(\"[google-docs] Push handler error:\", err);\n            });\n            return \"ok\";\n          }\n\n          // Handle platform verification challenges (e.g. Slack url_verification)\n          // before checking enable state or parsing the message.\n          const verification = await adapter.handleVerification(event);\n          if (verification.handled) {\n            return verification.response ?? \"ok\";\n          }\n\n          const config = await getIntegrationConfig(platform);\n          if (!config?.configData?.enabled) {\n            setResponseStatus(event, 404);\n            return { error: `Integration ${platform} is not enabled` };\n          }\n\n          // Verify the webhook signature BEFORE parsing. We pre-parse the\n          // body here (so handleWebhook can skip its second readBody, which\n          // hangs on streaming providers), and that means handleWebhook's\n          // own verifyWebhook step is bypassed. Without this call anyone\n          // could POST a forged Slack/Telegram/email payload.\n          const isValid = await adapter.verifyWebhook(event);\n          if (!isValid) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid webhook signature\" };\n          }\n\n          const incoming = await adapter.parseIncomingMessage(event);\n          if (!incoming) {\n            setResponseStatus(event, 200);\n            return \"ok\";\n          }\n          let owner = `integration@${platform}`;\n          if (options?.resolveOwner) {\n            try {\n              owner = await options.resolveOwner(incoming);\n            } catch (err) {\n              console.error(\n                `[integrations] resolveOwner failed, using default:`,\n                err,\n              );\n            }\n          }\n          const resources = await loadResourcesForPrompt(owner);\n          const systemPrompt = baseSystemPrompt + resources;\n          const result = await handleWebhook(event, {\n            adapter,\n            systemPrompt,\n            actions,\n            model,\n            apiKey: getApiKey(),\n            engine: options?.engine,\n            ownerEmail: owner,\n            beforeProcess: options?.beforeProcess,\n            incoming,\n          });\n          setResponseStatus(event, result.status);\n          return result.body;\n        }\n\n        // ─── POST /:platform/enable ────────────────────────────\n        if (action === \"enable\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          // Stamp the org-admin who toggled this so downstream code can\n          // tell who is responsible — useful for audit logs even though\n          // the row itself remains deployment-wide.\n          const session = await getSession(event).catch(() => null);\n          await saveIntegrationConfig(\n            platform,\n            { enabled: true },\n            \"default\",\n            session?.email,\n          );\n          return { ok: true, platform, enabled: true };\n        }\n\n        // ─── POST /:platform/disable ───────────────────────────\n        if (action === \"disable\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          const session = await getSession(event).catch(() => null);\n          await saveIntegrationConfig(\n            platform,\n            { enabled: false },\n            \"default\",\n            session?.email,\n          );\n          return { ok: true, platform, enabled: false };\n        }\n\n        // ─── POST /:platform/setup ─────────────────────────────\n        if (action === \"setup\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          if (platform === \"telegram\") {\n            const baseUrl = getBaseUrl(event);\n            const webhookUrl = `${baseUrl}${P}/telegram/webhook`;\n            const token = process.env.TELEGRAM_BOT_TOKEN;\n            if (!token) {\n              setResponseStatus(event, 400);\n              return { error: \"TELEGRAM_BOT_TOKEN not configured\" };\n            }\n            try {\n              const res = await fetch(\n                `https://api.telegram.org/bot${token}/setWebhook`,\n                {\n                  method: \"POST\",\n                  headers: { \"Content-Type\": \"application/json\" },\n                  body: JSON.stringify({ url: webhookUrl }),\n                },\n              );\n              const data = await res.json();\n              return { ok: true, platform, webhookUrl, result: data };\n            } catch (err: any) {\n              setResponseStatus(event, 500);\n              return { error: err.message };\n            }\n          }\n          return { ok: true, platform, message: \"No setup required\" };\n        }\n\n        setResponseStatus(event, 404);\n        return { error: \"Not found\" };\n      }),\n    );\n\n    // ─── Start pending-tasks retry sweeper ────────────────────────\n    // Sweeps the integration_pending_tasks queue every 60s and re-fires the\n    // processor for any tasks that got stuck (initial dispatch lost or\n    // processor killed mid-flight). No-ops gracefully if the queue table\n    // hasn't been created yet on this deployment.\n    startPendingTasksRetryJob({\n      webhookBaseUrl: process.env.WEBHOOK_BASE_URL,\n    });\n    startA2AContinuationRetryJob(adapterMap);\n\n    // ─── Start Google Docs poller/push ────────────────────────────\n    if (adapterMap.has(\"google-docs\")) {\n      // Defer startup slightly so the server is fully ready\n      setTimeout(() => {\n        // We don't know the base URL at plugin init time — it depends on\n        // the incoming request. For push mode, the webhook URL needs to be\n        // resolved. We pass it as a special option; the poller will attempt\n        // to register a watch when the first request reveals the base URL,\n        // or use the WEBHOOK_BASE_URL env var if set.\n        const baseUrl = process.env.WEBHOOK_BASE_URL;\n        const webhookUrl = baseUrl\n          ? `${withConfiguredAppBasePath(baseUrl)}${P}/google-docs/webhook`\n          : undefined;\n\n        startGoogleDocsPoller({\n          systemPrompt: baseSystemPrompt,\n          actions,\n          model,\n          apiKey: getApiKey(),\n          ownerEmail: \"integration@google-docs\",\n          webhookUrl,\n        });\n      }, 2000);\n    }\n\n    if (process.env.DEBUG)\n      console.log(\n        `[integrations] Mounted integration routes for: ${adapters.map((a) => a.platform).join(\", \")}`,\n      );\n  };\n}\n\n/**\n * Default integrations plugin — auto-mounts all adapters.\n */\nexport const defaultIntegrationsPlugin = createIntegrationsPlugin();\n\n/** Extract base URL from the request */\nfunction getBaseUrl(event: any): string {\n  try {\n    const headers = event.node?.req?.headers || event.headers || {};\n    const getHeader = (name: string) =>\n      typeof headers.get === \"function\"\n        ? headers.get(name)\n        : (headers as Record<string, string>)[name];\n    const proto = getHeader(\"x-forwarded-proto\") || \"http\";\n    const host = getHeader(\"host\") || \"localhost:3000\";\n    return withConfiguredAppBasePath(`${proto}://${host}`);\n  } catch {\n    return withConfiguredAppBasePath(\"http://localhost:3000\");\n  }\n}\n"]}
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/integrations/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EACL,QAAQ,EACR,yBAAyB,GAC1B,MAAM,wCAAwC,CAAC;AAMhD,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EACL,gBAAgB,EAEhB,iBAAiB,EACjB,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAIvE,IAAI,4BAA4B,GAA0C,IAAI,CAAC;AAE/E,SAAS,4BAA4B,CACnC,QAAsC;IAEtC,IAAI,4BAA4B;QAAE,OAAO;IACzC,UAAU,CAAC,GAAG,EAAE;QACd,0BAA0B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACrD,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,4BAA4B,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9C,0BAA0B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACrD,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,MAAM,WAAW,GAAG,kBAAkB,CACpC,IAAI,GAAG,CAAC,4CAA4C,CAAC,CACtD,CAAC;AACF,MAAM,cAAc,GAAG,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB;IACzD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE;QACtD,MAAM,EAAE,cAAc;QACtB,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,sEAAsE;IACtE,4DAA4D;IAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACjE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,SAAS,kBAAkB;IACzB,OAAO;QACL,YAAY,EAAE;QACd,eAAe,EAAE;QACjB,eAAe,EAAE;QACjB,iBAAiB,EAAE;QACnB,YAAY,EAAE;KACf,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CAAC,KAAa;IACjD,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAC3D,IAAI,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,sBAAsB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBACtD,IAAI,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;oBAC9B,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,wBAAwB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CACtF,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,CACL,0FAA0F;QAC1F,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,MAAM,yBAAyB,GAAG;;;;;;0FAMwD,CAAC;AAE3F;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAmC;IAEnC,OAAO,KAAK,EAAE,QAAa,EAAE,EAAE;QAC7B,yBAAyB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;QACtD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,aAAa,CAAC;QAC9C,qEAAqE;QACrE,sEAAsE;QACtE,kEAAkE;QAClE,6DAA6D;QAC7D,mEAAmE;QACnE,cAAc;QACd,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAEzD,0BAA0B;QAC1B,MAAM,gBAAgB,GAAG,OAAO,EAAE,YAAY,IAAI,yBAAyB,CAAC;QAE5E,yEAAyE;QACzE,8EAA8E;QAC9E,MAAM,YAAY,GAAG,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;QAC5C,IAAI,cAAc,GAA4B,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACrD,cAAc,GAAG;gBACf,YAAY,EAAE;oBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,EAAE,CAAC,IAA4B,EAAE,OAAgB,EAAE,EAAE,CACtD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAc,EAAE,OAAO,EAAE,KAAK,CAAC;iBAChD;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;QACD,MAAM,OAAO,GAAG;YACd,GAAG,YAAY;YACf,GAAG,cAAc;SACK,CAAC;QAEzB,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,sBAAsB,eAAe,CAAC;QAEnD,KAAK,UAAU,cAAc,CAAC,KAAU;YACtC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,KAAK;gBAAE,OAAO,IAAI,CAAC;YAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED;;;;;;;;;;;;;;;;;;;WAmBG;QACH,KAAK,UAAU,aAAa,CAC1B,KAAU;YAEV,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;gBACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YAC9C,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACzD,wDAAwD;YACxD,IAAI,CAAC,GAAG,EAAE,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,mEAAmE;aACtE,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,SAAS,EACb,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAwB,EAAE,CAAC;YACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC5D,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC;gBAC/C,MAAM,CAAC,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,UAAU,CAAC;gBACjE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CACH,CAAC;QAEF,gEAAgE;QAChE,oDAAoD;QACpD,qEAAqE;QACrE,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,oBAAoB,EACxB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YACrE,IAAI,CAAC;gBACH,OAAO,MAAM,iBAAiB,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,gEAAgE;QAChE,gDAAgD;QAChD,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,eAAe,EACnB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAwB,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;YACtC,CAAC;YAED,yCAAyC;YACzC,EAAE;YACF,iEAAiE;YACjE,kEAAkE;YAClE,qEAAqE;YACrE,kEAAkE;YAClE,oCAAoC;YACpC,EAAE;YACF,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO;wBACL,KAAK,EACH,4GAA4G;qBAC/G,CAAC;gBACJ,CAAC;gBACD,+EAA+E;YACjF,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,kBAAkB,CAC5B,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CACzC,CAAC;gBACF,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC9C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,8DAA8D;YAC9D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;YAC7D,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,cAAc,CAAC,MAAM,EAAE,qBAAqB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACnE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;gBACvC,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChE,MAAM,sBAAsB,CAAC,IAAI,EAAE;oBACjC,OAAO;oBACP,YAAY,EAAE,gBAAgB,GAAG,SAAS;oBAC1C,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC,CAAC;gBACH,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM,0BAA0B,CAAC;oBAC/B,QAAQ,EAAE,UAAU;oBACpB,KAAK,EAAE,CAAC;iBACT,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACf,OAAO,CAAC,KAAK,CACX,6DAA6D,EAC7D,GAAG,CACJ,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,cAAc,CAClB,MAAM,EACN,GAAG,EAAE,OAAO;oBACV,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;oBACpC,CAAC,CAAC,kBAAkB,CACvB,CAAC;gBACF,iEAAiE;gBACjE,iEAAiE;gBACjE,iEAAiE;gBACjE,2DAA2D;gBAC3D,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBAC3D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,mEAAmE;QACnE,4DAA4D;QAC5D,gEAAgE;QAChE,8DAA8D;QAC9D,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,2BAA2B,EAC/B,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAgC,CAAC;YACpE,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;YAC5C,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;YAC9C,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC1C,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO;wBACL,KAAK,EACH,4GAA4G;qBAC/G,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,kBAAkB,CAC5B,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CACzC,CAAC;gBACF,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;oBACtD,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,MAAM,0BAA0B,CAAC,cAAc,EAAE;gBAC/C,QAAQ,EAAE,UAAU;aACrB,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACtC,CAAC,CAAC,CACH,CAAC;QAEF,iEAAiE;QACjE,qEAAqE;QACrE,EAAE,CAAC,GAAG,CACJ,GAAG,CAAC,EAAE,EACN,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,iEAAiE;YACjE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACjE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE7C,uDAAuD;YACvD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACxD,kEAAkE;YAClE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY;gBAAE,OAAO;YACtC,6DAA6D;YAC7D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,cAAc;gBAAE,OAAO;YACxC,yEAAyE;YACzE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,0BAA0B;gBAAE,OAAO;YAEpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,0CAA0C;YAEnE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;YACxC,CAAC;YAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,qBAAqB,QAAQ,EAAE,EAAE,CAAC;YACpD,CAAC;YAED,yCAAyC;YACzC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG;oBACrB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM;oBACvB,QAAQ;iBACT,CAAC;YACJ,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5C,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;gBACrE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBACpD,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC;gBAC/C,MAAM,CAAC,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,QAAQ,UAAU,CAAC;gBACzD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,CAAC,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;oBACxD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9C,kEAAkE;gBAClE,kEAAkE;gBAClE,iEAAiE;gBACjE,iEAAiE;gBACjE,sCAAsC;gBACtC,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;oBAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;oBACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;4BAC1C,6DAA6D;4BAC7D,qDAAqD;4BACrD,gCAAgC;4BAChC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;4BAC9B,OAAO;gCACL,EAAE,EAAE,KAAK;gCACT,KAAK,EACH,8DAA8D;6BACjE,CAAC;wBACJ,CAAC;wBACD,gEAAgE;wBAChE,mDAAmD;wBACnD,sBAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;4BACrC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;wBAC1D,CAAC,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC;oBAClE,IAAI,CAAC;wBACH,MAAM,yBAAyB,CAAC,UAAU,CAAC,CAAC;oBAC9C,CAAC;oBAAC,OAAO,GAAQ,EAAE,CAAC;wBAClB,OAAO,CAAC,IAAI,CACV,qCAAqC,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CACnE,CAAC;wBACF,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;oBAC9C,CAAC;oBACD,sBAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACrC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;oBAC1D,CAAC,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,wEAAwE;gBACxE,uDAAuD;gBACvD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;oBACzB,OAAO,YAAY,CAAC,QAAQ,IAAI,IAAI,CAAC;gBACvC,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBACpD,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;oBACjC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,eAAe,QAAQ,iBAAiB,EAAE,CAAC;gBAC7D,CAAC;gBAED,gEAAgE;gBAChE,kEAAkE;gBAClE,gEAAgE;gBAChE,+DAA+D;gBAC/D,oDAAoD;gBACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBACnD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;gBAChD,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC9B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,KAAK,GAAG,eAAe,QAAQ,EAAE,CAAC;gBACtC,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACH,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC/C,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CACX,oDAAoD,EACpD,GAAG,CACJ,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;gBACtD,MAAM,YAAY,GAAG,gBAAgB,GAAG,SAAS,CAAC;gBAClD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE;oBACxC,OAAO;oBACP,YAAY;oBACZ,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,MAAM,EAAE,OAAO,EAAE,MAAM;oBACvB,UAAU,EAAE,KAAK;oBACjB,aAAa,EAAE,OAAO,EAAE,aAAa;oBACrC,QAAQ;iBACT,CAAC,CAAC;gBACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxC,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,8DAA8D;gBAC9D,8DAA8D;gBAC9D,0CAA0C;gBAC1C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,qBAAqB,CACzB,QAAQ,EACR,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB,SAAS,EACT,OAAO,EAAE,KAAK,CACf,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,qBAAqB,CACzB,QAAQ,EACR,EAAE,OAAO,EAAE,KAAK,EAAE,EAClB,SAAS,EACT,OAAO,EAAE,KAAK,CACf,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC;YAED,0DAA0D;YAC1D,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,UAAU,CAAC,EAAE,KAAK,KAAK;oBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;gBAChE,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;oBAClC,MAAM,UAAU,GAAG,GAAG,OAAO,GAAG,CAAC,mBAAmB,CAAC;oBACrD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;oBAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;oBACxD,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,+BAA+B,KAAK,aAAa,EACjD;4BACE,MAAM,EAAE,MAAM;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;4BAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;yBAC1C,CACF,CAAC;wBACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;wBAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;oBAC1D,CAAC;oBAAC,OAAO,GAAQ,EAAE,CAAC;wBAClB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;oBAChC,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;YAC9D,CAAC;YAED,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAChC,CAAC,CAAC,CACH,CAAC;QAEF,iEAAiE;QACjE,wEAAwE;QACxE,mEAAmE;QACnE,qEAAqE;QACrE,8CAA8C;QAC9C,yBAAyB,CAAC;YACxB,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;SAC7C,CAAC,CAAC;QACH,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAEzC,iEAAiE;QACjE,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,sDAAsD;YACtD,UAAU,CAAC,GAAG,EAAE;gBACd,iEAAiE;gBACjE,mEAAmE;gBACnE,oEAAoE;gBACpE,mEAAmE;gBACnE,8CAA8C;gBAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBAC7C,MAAM,UAAU,GAAG,OAAO;oBACxB,CAAC,CAAC,GAAG,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB;oBACjE,CAAC,CAAC,SAAS,CAAC;gBAEd,qBAAqB,CAAC;oBACpB,YAAY,EAAE,gBAAgB;oBAC9B,OAAO;oBACP,KAAK;oBACL,MAAM,EAAE,SAAS,EAAE;oBACnB,UAAU,EAAE,yBAAyB;oBACrC,UAAU;iBACX,CAAC,CAAC;YACL,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;YACnB,OAAO,CAAC,GAAG,CACT,kDAAkD,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/F,CAAC;IACN,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,wBAAwB,EAAE,CAAC;AAEpE,wCAAwC;AACxC,SAAS,UAAU,CAAC,KAAU;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CACjC,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU;YAC/B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YACnB,CAAC,CAAE,OAAkC,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;QACvD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC;QACnD,OAAO,yBAAyB,CAAC,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC","sourcesContent":["import { defineEventHandler, setResponseStatus, getMethod } from \"h3\";\nimport { createRemoteJWKSet, jwtVerify } from \"jose\";\nimport { FRAMEWORK_ROUTE_PREFIX } from \"../server/core-routes-plugin.js\";\nimport {\n  getH3App,\n  markDefaultPluginProvided,\n} from \"../server/framework-request-handler.js\";\nimport type {\n  PlatformAdapter,\n  IntegrationsPluginOptions,\n  IntegrationStatus,\n} from \"./types.js\";\nimport { handleWebhook, processIntegrationTask } from \"./webhook-handler.js\";\nimport { DEFAULT_MODEL } from \"../agent/default-model.js\";\nimport {\n  claimPendingTask,\n  getPendingTask,\n  markTaskCompleted,\n  markTaskFailed,\n} from \"./pending-tasks-store.js\";\nimport { extractBearerToken, verifyInternalToken } from \"./internal-token.js\";\nimport { readBody } from \"../server/h3-helpers.js\";\nimport { getRequestHeader } from \"h3\";\nimport { getIntegrationConfig, saveIntegrationConfig } from \"./config-store.js\";\nimport { slackAdapter } from \"./adapters/slack.js\";\nimport { telegramAdapter } from \"./adapters/telegram.js\";\nimport { whatsappAdapter } from \"./adapters/whatsapp.js\";\nimport { googleDocsAdapter } from \"./adapters/google-docs.js\";\nimport { emailAdapter } from \"./adapters/email.js\";\nimport {\n  startGoogleDocsPoller,\n  handlePushNotification,\n} from \"./google-docs-poller.js\";\nimport { startPendingTasksRetryJob } from \"./pending-tasks-retry-job.js\";\nimport {\n  processA2AContinuationById,\n  processDueA2AContinuations,\n} from \"./a2a-continuation-processor.js\";\nimport { resourceGetByPath, SHARED_OWNER } from \"../resources/store.js\";\nimport { getTaskQueueStats } from \"./task-queue-stats.js\";\nimport { getSession } from \"../server/auth.js\";\nimport { getOrgContext } from \"../org/context.js\";\nimport { withConfiguredAppBasePath } from \"../server/app-base-path.js\";\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\nlet a2aContinuationRetryInterval: ReturnType<typeof setInterval> | null = null;\n\nfunction startA2AContinuationRetryJob(\n  adapters: Map<string, PlatformAdapter>,\n): void {\n  if (a2aContinuationRetryInterval) return;\n  setTimeout(() => {\n    processDueA2AContinuations({ adapters }).catch((err) => {\n      console.error(\"[integrations] A2A continuation retry job failed:\", err);\n    });\n  }, 10_000);\n  a2aContinuationRetryInterval = setInterval(() => {\n    processDueA2AContinuations({ adapters }).catch((err) => {\n      console.error(\"[integrations] A2A continuation retry job failed:\", err);\n    });\n  }, 60_000);\n}\n\n// ─── Google Pub/Sub OIDC verifier (for Drive changes.watch push) ────────────\n// Cache Google's public keys for OIDC verification. jose handles TTL +\n// refresh internally — same pattern as templates/mail/.../gmail/push.post.ts.\n// Used to verify Google Pub/Sub push notifications carry a valid bearer token\n// signed by a configured service account. Without this, the webhook is wide\n// open to anonymous callers who can force a Drive sync (H7 in the audit).\nconst GOOGLE_JWKS = createRemoteJWKSet(\n  new URL(\"https://www.googleapis.com/oauth2/v3/certs\"),\n);\nconst GOOGLE_ISSUERS = [\"https://accounts.google.com\", \"accounts.google.com\"];\n\n/**\n * Verify a Pub/Sub OIDC bearer token. Throws on any verification failure.\n * Requires GOOGLE_DOCS_PUSH_AUDIENCE and GOOGLE_DOCS_PUSH_SIGNER_EMAIL to be\n * set; if either is missing in production, the webhook handler refuses the\n * request entirely (so a misconfigured deployment fails closed, surfacing in\n * Pub/Sub's delivery metrics).\n */\nasync function verifyGoogleDocsPushToken(authHeader: string): Promise<void> {\n  if (!authHeader.startsWith(\"Bearer \")) {\n    throw new Error(\"missing bearer token\");\n  }\n  const token = authHeader.slice(7);\n  const audience = process.env.GOOGLE_DOCS_PUSH_AUDIENCE;\n  if (!audience) {\n    throw new Error(\"GOOGLE_DOCS_PUSH_AUDIENCE not configured\");\n  }\n  const { payload } = await jwtVerify(token, GOOGLE_JWKS, {\n    issuer: GOOGLE_ISSUERS,\n    audience,\n  });\n  if (payload.email_verified !== true) {\n    throw new Error(\"email_verified claim is not true\");\n  }\n  // Pin to a specific service account — without this, any Google-issued\n  // token with the right audience could trigger a Drive sync.\n  const expectedSigner = process.env.GOOGLE_DOCS_PUSH_SIGNER_EMAIL;\n  if (!expectedSigner) {\n    throw new Error(\"GOOGLE_DOCS_PUSH_SIGNER_EMAIL not configured\");\n  }\n  if (payload.email !== expectedSigner) {\n    throw new Error(`unexpected signer: ${String(payload.email)}`);\n  }\n}\n\n/** Built-in adapters, instantiated lazily */\nfunction getDefaultAdapters(): PlatformAdapter[] {\n  return [\n    slackAdapter(),\n    telegramAdapter(),\n    whatsappAdapter(),\n    googleDocsAdapter(),\n    emailAdapter(),\n  ];\n}\n\n/**\n * Load resources for the integration agent's system prompt.\n * Mirrors the pattern from agent-chat-plugin.ts.\n */\nasync function loadResourcesForPrompt(owner: string): Promise<string> {\n  const resourceNames = [\"AGENTS.md\", \"LEARNINGS.md\"];\n  const sections: string[] = [];\n\n  for (const name of resourceNames) {\n    try {\n      const shared = await resourceGetByPath(SHARED_OWNER, name);\n      if (shared?.content?.trim()) {\n        sections.push(\n          `<resource name=\"${name}\" scope=\"shared\">\\n${shared.content.trim()}\\n</resource>`,\n        );\n      }\n    } catch {}\n\n    if (owner !== SHARED_OWNER) {\n      try {\n        const personal = await resourceGetByPath(owner, name);\n        if (personal?.content?.trim()) {\n          sections.push(\n            `<resource name=\"${name}\" scope=\"personal\">\\n${personal.content.trim()}\\n</resource>`,\n          );\n        }\n      } catch {}\n    }\n  }\n\n  if (sections.length === 0) return \"\";\n  return (\n    \"\\n\\nThe following resources contain template-specific instructions and user context.\\n\\n\" +\n    sections.join(\"\\n\\n\")\n  );\n}\n\nconst INTEGRATION_SYSTEM_PROMPT = `You are an AI agent responding via a messaging platform integration (Slack, Telegram, WhatsApp, etc.).\n\nYou have the same capabilities as the web chat agent. Use your tools to help the user.\n\nKeep responses concise — messaging platforms have character limits and users expect shorter replies than in a web interface. Use markdown sparingly (bold and lists are fine, but avoid complex formatting that may not render well on all platforms).\n\nIf a task requires many steps, summarize what you did rather than streaming every detail.`;\n\n/**\n * Creates a Nitro plugin that mounts messaging platform integration webhook routes.\n *\n * Routes:\n *   POST   /_agent-native/integrations/:platform/webhook  — receive platform webhooks\n *   GET    /_agent-native/integrations/status              — all integrations status\n *   GET    /_agent-native/integrations/:platform/status    — single platform status\n *   POST   /_agent-native/integrations/:platform/enable    — enable integration\n *   POST   /_agent-native/integrations/:platform/disable   — disable integration\n *   POST   /_agent-native/integrations/:platform/setup     — platform-specific setup\n */\nexport function createIntegrationsPlugin(\n  options?: IntegrationsPluginOptions,\n): NitroPluginDef {\n  return async (nitroApp: any) => {\n    markDefaultPluginProvided(nitroApp, \"integrations\");\n    const adapters = options?.adapters ?? getDefaultAdapters();\n    const adapterMap = new Map<string, PlatformAdapter>();\n    for (const adapter of adapters) {\n      adapterMap.set(adapter.platform, adapter);\n    }\n\n    const model = options?.model ?? DEFAULT_MODEL;\n    // Read the API key at REQUEST time, not plugin-init time. On Netlify\n    // Lambda the plugin module loads in a context where env vars from the\n    // site's runtime config may not yet be populated, so capturing at\n    // init can leave us with an empty string forever. The getter\n    // re-resolves on every webhook so freshly-set secrets work without\n    // a redeploy.\n    const getApiKey = () =>\n      options?.apiKey ?? process.env.ANTHROPIC_API_KEY ?? \"\";\n\n    // Build the system prompt\n    const baseSystemPrompt = options?.systemPrompt ?? INTEGRATION_SYSTEM_PROMPT;\n\n    // Resolve actions — auto-include call-agent so the integration agent can\n    // delegate to other A2A apps, matching the behavior of the agent-chat plugin.\n    const localActions = options?.actions ?? {};\n    let callAgentEntry: Record<string, unknown> = {};\n    try {\n      const mod = await import(\"../scripts/call-agent.js\");\n      callAgentEntry = {\n        \"call-agent\": {\n          tool: mod.tool,\n          run: (args: Record<string, string>, context: unknown) =>\n            mod.run(args, context as any, options?.appId),\n        },\n      };\n    } catch {\n      // call-agent script not available — skip\n    }\n    const actions = {\n      ...localActions,\n      ...callAgentEntry,\n    } as typeof localActions;\n\n    const h3 = getH3App(nitroApp);\n    const P = `${FRAMEWORK_ROUTE_PREFIX}/integrations`;\n\n    async function requireSession(event: any): Promise<boolean> {\n      const session = await getSession(event).catch(() => null);\n      if (session?.email) return true;\n      setResponseStatus(event, 401);\n      return false;\n    }\n\n    /**\n     * Gate destructive integration writes (enable/disable, setup,\n     * setIntegrationConfig…) behind an org-owner/admin check.\n     *\n     * `integration_configs` is keyed `(platform, config_key)` with no\n     * owner column in the PRIMARY KEY — so this row is effectively\n     * deployment-wide. Any signed-in user toggling /enable or /disable\n     * would otherwise affect every other user (a regular org member could\n     * disable Slack/email org-wide, write a malicious allowlist for\n     * inbound email, etc.). This check enforces that only owners and\n     * admins of the user's active org may mutate integration config.\n     *\n     * Solo / no-org sessions (i.e. ctx.orgId == null) are allowed — that's\n     * the local-dev / single-user case where there's no privilege gradient\n     * to enforce. The deployment is single-tenant by definition there.\n     *\n     * Returns an `{ ok: true }` on pass, or `{ ok: false, error }` with the\n     * status already set on the event. The error string lines up with the\n     * status code (401 → \"unauthorized\"; 403 → admin-required message).\n     */\n    async function checkOrgAdmin(\n      event: any,\n    ): Promise<{ ok: true } | { ok: false; error: string }> {\n      const session = await getSession(event).catch(() => null);\n      if (!session?.email) {\n        setResponseStatus(event, 401);\n        return { ok: false, error: \"unauthorized\" };\n      }\n      const ctx = await getOrgContext(event).catch(() => null);\n      // Solo (no org membership) — single-tenant flow, allow.\n      if (!ctx?.orgId) return { ok: true };\n      if (ctx.role === \"owner\" || ctx.role === \"admin\") return { ok: true };\n      setResponseStatus(event, 403);\n      return {\n        ok: false,\n        error:\n          \"Only organization owners and admins can mutate integration config\",\n      };\n    }\n\n    // ─── Status endpoint (all integrations) ───────────────────────\n    h3.use(\n      `${P}/status`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"GET\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n        if (!(await requireSession(event))) return { error: \"unauthorized\" };\n        const baseUrl = getBaseUrl(event);\n        const statuses: IntegrationStatus[] = [];\n        for (const adapter of adapters) {\n          const status = await adapter.getStatus(baseUrl);\n          const config = await getIntegrationConfig(adapter.platform);\n          status.enabled = !!config?.configData?.enabled;\n          status.webhookUrl = `${baseUrl}${P}/${adapter.platform}/webhook`;\n          if (!status.requiredEnvKeys) {\n            try {\n              status.requiredEnvKeys = adapter.getRequiredEnvKeys();\n            } catch {\n              status.requiredEnvKeys = [];\n            }\n          }\n          statuses.push(status);\n        }\n        return statuses;\n      }),\n    );\n\n    // ─── Task queue status (observability) ───────────────────────\n    // GET /_agent-native/integrations/task-queue/status\n    // Returns counts + recent failures for the integration_pending_tasks\n    // queue. Requires a normal session — this exposes operational data, not\n    // platform secrets. If the queue table doesn't exist yet (no inbound\n    // webhook has been processed), returns zeroed stats rather than 500.\n    h3.use(\n      `${P}/task-queue/status`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"GET\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n        if (!(await requireSession(event))) return { error: \"unauthorized\" };\n        try {\n          return await getTaskQueueStats();\n        } catch (err: any) {\n          setResponseStatus(event, 500);\n          return { error: err?.message ?? String(err) };\n        }\n      }),\n    );\n\n    // ─── Process pending task (cross-platform task queue) ────────\n    // POST /_agent-native/integrations/process-task\n    // Internal endpoint invoked via fire-and-forget self-webhook from the\n    // public webhook handler. Auth: HMAC bearer signed with A2A_SECRET.\n    // Each invocation runs the agent loop in a fresh function execution.\n    h3.use(\n      `${P}/process-task`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"POST\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n\n        const body = (await readBody(event)) as { taskId?: string };\n        const taskId = body?.taskId;\n        if (!taskId) {\n          setResponseStatus(event, 400);\n          return { error: \"taskId required\" };\n        }\n\n        // Auth: HMAC token bound to the task id.\n        //\n        // In production we MUST require A2A_SECRET — a publicly-callable\n        // process-task endpoint lets attackers re-trigger any queued task\n        // by guessing or sniffing its id (C3 in the webhook security audit).\n        // The atomic SQL claim only prevents *double*-processing, not the\n        // first attacker-driven processing.\n        //\n        // In dev we keep the loose posture so contributors don't have to\n        // configure A2A_SECRET to play with the integration locally.\n        if (!process.env.A2A_SECRET) {\n          if (process.env.NODE_ENV === \"production\") {\n            setResponseStatus(event, 503);\n            return {\n              error:\n                \"A2A_SECRET not configured — internal token signing is required to process integration tasks in production.\",\n            };\n          }\n          // Dev: fall through unsigned (the atomic claim still gates double-processing).\n        } else {\n          const tok = extractBearerToken(\n            getRequestHeader(event, \"authorization\"),\n          );\n          if (!tok || !verifyInternalToken(taskId, tok)) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid or expired internal token\" };\n          }\n        }\n\n        // Atomic claim: only one invocation gets to process this task\n        const task = await claimPendingTask(taskId);\n        if (!task) {\n          setResponseStatus(event, 200);\n          return { ok: true, skipped: \"already-claimed-or-missing\" };\n        }\n\n        try {\n          const adapter = adapterMap.get(task.platform);\n          if (!adapter) {\n            await markTaskFailed(taskId, `Unknown platform: ${task.platform}`);\n            setResponseStatus(event, 404);\n            return { error: \"Unknown platform\" };\n          }\n          const resources = await loadResourcesForPrompt(task.ownerEmail);\n          await processIntegrationTask(task, {\n            adapter,\n            systemPrompt: baseSystemPrompt + resources,\n            actions,\n            model,\n            apiKey: getApiKey(),\n            engine: options?.engine,\n            ownerEmail: task.ownerEmail,\n          });\n          await markTaskCompleted(taskId);\n          await processDueA2AContinuations({\n            adapters: adapterMap,\n            limit: 2,\n          }).catch((err) => {\n            console.error(\n              \"[integrations] A2A continuation opportunistic sweep failed:\",\n              err,\n            );\n          });\n          return { ok: true, taskId };\n        } catch (err: any) {\n          await markTaskFailed(\n            taskId,\n            err?.message\n              ? String(err.message).slice(0, 1000)\n              : \"processor failed\",\n          );\n          // Log the detail server-side; never return the raw error message\n          // to the caller. Raw messages have leaked DB error codes, schema\n          // names, and stack hints in the past (L3 in the webhook security\n          // audit). Sentry / log providers still see the full error.\n          console.error(\"[integrations] process-task failure:\", err);\n          setResponseStatus(event, 500);\n          return { error: \"Internal task failed\" };\n        }\n      }),\n    );\n\n    // ─── Process deferred A2A continuation ──────────────────────────\n    // POST /_agent-native/integrations/process-a2a-continuation\n    // Internal endpoint invoked when call-agent timed out inside an\n    // integration processor but the remote A2A task kept running.\n    h3.use(\n      `${P}/process-a2a-continuation`,\n      defineEventHandler(async (event) => {\n        if (getMethod(event) !== \"POST\") {\n          setResponseStatus(event, 405);\n          return { error: \"Method not allowed\" };\n        }\n\n        const body = (await readBody(event)) as { continuationId?: string };\n        const continuationId = body?.continuationId;\n        if (!continuationId) {\n          setResponseStatus(event, 400);\n          return { error: \"continuationId required\" };\n        }\n\n        if (!process.env.A2A_SECRET) {\n          if (process.env.NODE_ENV === \"production\") {\n            setResponseStatus(event, 503);\n            return {\n              error:\n                \"A2A_SECRET not configured — internal token signing is required to process A2A continuations in production.\",\n            };\n          }\n        } else {\n          const tok = extractBearerToken(\n            getRequestHeader(event, \"authorization\"),\n          );\n          if (!tok || !verifyInternalToken(continuationId, tok)) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid or expired internal token\" };\n          }\n        }\n\n        await processA2AContinuationById(continuationId, {\n          adapters: adapterMap,\n        });\n        return { ok: true, continuationId };\n      }),\n    );\n\n    // ─── Per-platform catch-all ───────────────────────────────────\n    // Handles: webhook, status, enable, disable, setup for each platform\n    h3.use(\n      `${P}`,\n      defineEventHandler(async (event) => {\n        const method = getMethod(event);\n        // event.path is stripped to the remainder after the mount prefix\n        const raw = (event.path || \"/\").split(\"?\")[0].replace(/^\\//, \"\");\n        const parts = raw.split(\"/\").filter(Boolean);\n\n        // Already handled by the dedicated /status route above\n        if (parts[0] === \"status\" && parts.length === 1) return;\n        // Already handled by the dedicated /task-queue/status route above\n        if (parts[0] === \"task-queue\") return;\n        // Already handled by the dedicated /process-task route above\n        if (parts[0] === \"process-task\") return;\n        // Already handled by the dedicated /process-a2a-continuation route above\n        if (parts[0] === \"process-a2a-continuation\") return;\n\n        const platform = parts[0];\n        const action = parts[1]; // webhook, status, enable, disable, setup\n\n        if (!platform) {\n          setResponseStatus(event, 404);\n          return { error: \"Platform required\" };\n        }\n\n        const adapter = adapterMap.get(platform);\n        if (!adapter) {\n          setResponseStatus(event, 404);\n          return { error: `Unknown platform: ${platform}` };\n        }\n\n        // Set params for handlers that read them\n        if (event.context) {\n          event.context.params = {\n            ...event.context.params,\n            platform,\n          };\n        }\n\n        // ─── GET /:platform/status ─────────────────────────────\n        if (action === \"status\" && method === \"GET\") {\n          if (!(await requireSession(event))) return { error: \"unauthorized\" };\n          const baseUrl = getBaseUrl(event);\n          const status = await adapter.getStatus(baseUrl);\n          const config = await getIntegrationConfig(platform);\n          status.enabled = !!config?.configData?.enabled;\n          status.webhookUrl = `${baseUrl}${P}/${platform}/webhook`;\n          if (!status.requiredEnvKeys) {\n            try {\n              status.requiredEnvKeys = adapter.getRequiredEnvKeys();\n            } catch {\n              status.requiredEnvKeys = [];\n            }\n          }\n          return status;\n        }\n\n        // ─── POST /:platform/webhook ───────────────────────────\n        if (action === \"webhook\" && method === \"POST\") {\n          // Google Docs push notifications bypass the normal webhook flow —\n          // they're opaque \"something changed\" pings, not message payloads.\n          // We MUST verify the Pub/Sub OIDC token here. Without it, anyone\n          // could POST any body to this URL and force a Drive changes pull\n          // (H7 in the webhook security audit).\n          if (platform === \"google-docs\") {\n            const audience = process.env.GOOGLE_DOCS_PUSH_AUDIENCE;\n            if (!audience) {\n              if (process.env.NODE_ENV === \"production\") {\n                // Fail closed in prod so a misconfigured deployment surfaces\n                // in Pub/Sub's delivery metrics rather than silently\n                // accepting anonymous requests.\n                setResponseStatus(event, 503);\n                return {\n                  ok: false,\n                  error:\n                    \"google-docs push endpoint disabled (audience not configured)\",\n                };\n              }\n              // Dev: keep the loose posture so contributors can play with the\n              // integration locally without configuring Pub/Sub.\n              handlePushNotification().catch((err) => {\n                console.error(\"[google-docs] Push handler error:\", err);\n              });\n              return \"ok\";\n            }\n            const authHeader = getRequestHeader(event, \"authorization\") || \"\";\n            try {\n              await verifyGoogleDocsPushToken(authHeader);\n            } catch (err: any) {\n              console.warn(\n                `[google-docs] OIDC verify failed: ${err?.message ?? String(err)}`,\n              );\n              setResponseStatus(event, 401);\n              return { ok: false, error: \"unauthorized\" };\n            }\n            handlePushNotification().catch((err) => {\n              console.error(\"[google-docs] Push handler error:\", err);\n            });\n            return \"ok\";\n          }\n\n          // Handle platform verification challenges (e.g. Slack url_verification)\n          // before checking enable state or parsing the message.\n          const verification = await adapter.handleVerification(event);\n          if (verification.handled) {\n            return verification.response ?? \"ok\";\n          }\n\n          const config = await getIntegrationConfig(platform);\n          if (!config?.configData?.enabled) {\n            setResponseStatus(event, 404);\n            return { error: `Integration ${platform} is not enabled` };\n          }\n\n          // Verify the webhook signature BEFORE parsing. We pre-parse the\n          // body here (so handleWebhook can skip its second readBody, which\n          // hangs on streaming providers), and that means handleWebhook's\n          // own verifyWebhook step is bypassed. Without this call anyone\n          // could POST a forged Slack/Telegram/email payload.\n          const isValid = await adapter.verifyWebhook(event);\n          if (!isValid) {\n            setResponseStatus(event, 401);\n            return { error: \"Invalid webhook signature\" };\n          }\n\n          const incoming = await adapter.parseIncomingMessage(event);\n          if (!incoming) {\n            setResponseStatus(event, 200);\n            return \"ok\";\n          }\n          let owner = `integration@${platform}`;\n          if (options?.resolveOwner) {\n            try {\n              owner = await options.resolveOwner(incoming);\n            } catch (err) {\n              console.error(\n                `[integrations] resolveOwner failed, using default:`,\n                err,\n              );\n            }\n          }\n          const resources = await loadResourcesForPrompt(owner);\n          const systemPrompt = baseSystemPrompt + resources;\n          const result = await handleWebhook(event, {\n            adapter,\n            systemPrompt,\n            actions,\n            model,\n            apiKey: getApiKey(),\n            engine: options?.engine,\n            ownerEmail: owner,\n            beforeProcess: options?.beforeProcess,\n            incoming,\n          });\n          setResponseStatus(event, result.status);\n          return result.body;\n        }\n\n        // ─── POST /:platform/enable ────────────────────────────\n        if (action === \"enable\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          // Stamp the org-admin who toggled this so downstream code can\n          // tell who is responsible — useful for audit logs even though\n          // the row itself remains deployment-wide.\n          const session = await getSession(event).catch(() => null);\n          await saveIntegrationConfig(\n            platform,\n            { enabled: true },\n            \"default\",\n            session?.email,\n          );\n          return { ok: true, platform, enabled: true };\n        }\n\n        // ─── POST /:platform/disable ───────────────────────────\n        if (action === \"disable\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          const session = await getSession(event).catch(() => null);\n          await saveIntegrationConfig(\n            platform,\n            { enabled: false },\n            \"default\",\n            session?.email,\n          );\n          return { ok: true, platform, enabled: false };\n        }\n\n        // ─── POST /:platform/setup ─────────────────────────────\n        if (action === \"setup\" && method === \"POST\") {\n          const adminCheck = await checkOrgAdmin(event);\n          if (adminCheck.ok === false) return { error: adminCheck.error };\n          if (platform === \"telegram\") {\n            const baseUrl = getBaseUrl(event);\n            const webhookUrl = `${baseUrl}${P}/telegram/webhook`;\n            const token = process.env.TELEGRAM_BOT_TOKEN;\n            if (!token) {\n              setResponseStatus(event, 400);\n              return { error: \"TELEGRAM_BOT_TOKEN not configured\" };\n            }\n            try {\n              const res = await fetch(\n                `https://api.telegram.org/bot${token}/setWebhook`,\n                {\n                  method: \"POST\",\n                  headers: { \"Content-Type\": \"application/json\" },\n                  body: JSON.stringify({ url: webhookUrl }),\n                },\n              );\n              const data = await res.json();\n              return { ok: true, platform, webhookUrl, result: data };\n            } catch (err: any) {\n              setResponseStatus(event, 500);\n              return { error: err.message };\n            }\n          }\n          return { ok: true, platform, message: \"No setup required\" };\n        }\n\n        setResponseStatus(event, 404);\n        return { error: \"Not found\" };\n      }),\n    );\n\n    // ─── Start pending-tasks retry sweeper ────────────────────────\n    // Sweeps the integration_pending_tasks queue every 60s and re-fires the\n    // processor for any tasks that got stuck (initial dispatch lost or\n    // processor killed mid-flight). No-ops gracefully if the queue table\n    // hasn't been created yet on this deployment.\n    startPendingTasksRetryJob({\n      webhookBaseUrl: process.env.WEBHOOK_BASE_URL,\n    });\n    startA2AContinuationRetryJob(adapterMap);\n\n    // ─── Start Google Docs poller/push ────────────────────────────\n    if (adapterMap.has(\"google-docs\")) {\n      // Defer startup slightly so the server is fully ready\n      setTimeout(() => {\n        // We don't know the base URL at plugin init time — it depends on\n        // the incoming request. For push mode, the webhook URL needs to be\n        // resolved. We pass it as a special option; the poller will attempt\n        // to register a watch when the first request reveals the base URL,\n        // or use the WEBHOOK_BASE_URL env var if set.\n        const baseUrl = process.env.WEBHOOK_BASE_URL;\n        const webhookUrl = baseUrl\n          ? `${withConfiguredAppBasePath(baseUrl)}${P}/google-docs/webhook`\n          : undefined;\n\n        startGoogleDocsPoller({\n          systemPrompt: baseSystemPrompt,\n          actions,\n          model,\n          apiKey: getApiKey(),\n          ownerEmail: \"integration@google-docs\",\n          webhookUrl,\n        });\n      }, 2000);\n    }\n\n    if (process.env.DEBUG)\n      console.log(\n        `[integrations] Mounted integration routes for: ${adapters.map((a) => a.platform).join(\", \")}`,\n      );\n  };\n}\n\n/**\n * Default integrations plugin — auto-mounts all adapters.\n */\nexport const defaultIntegrationsPlugin = createIntegrationsPlugin();\n\n/** Extract base URL from the request */\nfunction getBaseUrl(event: any): string {\n  try {\n    const headers = event.node?.req?.headers || event.headers || {};\n    const getHeader = (name: string) =>\n      typeof headers.get === \"function\"\n        ? headers.get(name)\n        : (headers as Record<string, string>)[name];\n    const proto = getHeader(\"x-forwarded-proto\") || \"http\";\n    const host = getHeader(\"host\") || \"localhost:3000\";\n    return withConfiguredAppBasePath(`${proto}://${host}`);\n  } catch {\n    return withConfiguredAppBasePath(\"http://localhost:3000\");\n  }\n}\n"]}

package/dist/integrations/webhook-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-handler.d.ts","sourceRoot":"","sources":["../../src/integrations/webhook-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGnE,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAYtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAU5D,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,0BAA0B,CAAC;AAwBlC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,eAAe,CAAC;IACzB,oCAAoC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,MAAM,CAAC,EACH,WAAW,GACX,MAAM,GACN;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,yEAAyE;IACzE,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,eAAe,KACrB,OAAO,CACR;QACE,OAAO,EAAE,IAAI,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GACD;QAAE,OAAO,EAAE,KAAK,CAAA;KAAE,CACrB,CAAC;CACH;AA0CD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAsE5C;AAgHD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA2BrD;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CASf"}
+{"version":3,"file":"webhook-handler.d.ts","sourceRoot":"","sources":["../../src/integrations/webhook-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGnE,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAYtC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAU5D,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,0BAA0B,CAAC;AA8BlC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,eAAe,CAAC;IACzB,oCAAoC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,MAAM,CAAC,EACH,WAAW,GACX,MAAM,GACN;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,yEAAyE;IACzE,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,eAAe,KACrB,OAAO,CACR;QACE,OAAO,EAAE,IAAI,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GACD;QAAE,OAAO,EAAE,KAAK,CAAA;KAAE,CACrB,CAAC;CACH;AAmDD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAsE5C;AAgHD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA2BrD;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/integrations/webhook-handler.js

@@ -17,6 +17,7 @@ import { FRAMEWORK_ROUTE_PREFIX } from "../server/core-routes-plugin.js";
 import { withConfiguredAppBasePath } from "../server/app-base-path.js";
 import { A2A_CONTINUATION_QUEUED_MARKER } from "./a2a-continuation-marker.js";
 import { collectFinalResponseTextFromAgentEvents } from "../a2a/response-text.js";
+import { appendA2AArtifactLinks, } from "../a2a/artifact-response.js";
 const PROCESSOR_DISPATCH_SETTLE_WAIT_MS = 1_500;
 /**
  * Build a stable per-event dedup key from the incoming message. The same
@@ -49,6 +50,12 @@ function isMultiTenantDeploy() {
         return false;
     return !isLocalDatabase();
 }
+function collectToolResultSummaries(completedRun) {
+    return completedRun.events
+        .map((runEvent) => runEvent.event)
+        .filter((event) => event.type === "tool_done")
+        .map((event) => ({ tool: event.tool, result: event.result }));
+}
 async function resolveIntegrationApiKey(engineOption, ownerEmail, fallbackApiKey) {
     const engineName = explicitEngineName(engineOption);
     if (engineName) {
@@ -439,6 +446,9 @@ async function processIncomingMessage(incoming, options, opts = {}) {
                 // preview card.
                 const baseUrl = process.env.APP_URL || process.env.URL || "";
                 const appBaseUrl = baseUrl ? withConfiguredAppBasePath(baseUrl) : "";
+                if (!suppressPlatformReply) {
+                    responseText = appendA2AArtifactLinks(responseText, collectToolResultSummaries(completedRun), { baseUrl: appBaseUrl || undefined });
+                }
                 const threadDeepLinkUrl = appBaseUrl && threadId
                     ? `${appBaseUrl}/?thread=${threadId}`
                     : undefined;