@agent-native/dispatch 0.1.1

package/dist/server/lib/workspace-resources-store.d.ts

@@ -0,0 +1,165 @@
+/**
+ * Caller-supplied access context for workspace-resource operations.
+ * Same shape and semantics as VaultCtx — looking up a row by id alone is
+ * unsafe because UUIDs are not authorization. A row matches the ctx if
+ * either the caller owns it or it lives in the caller's active org.
+ */
+export interface WorkspaceResourceCtx {
+    ownerEmail: string;
+    orgId: string | null;
+}
+export declare function requireWorkspaceResourceCtx(): WorkspaceResourceCtx;
+export type WorkspaceResourceKind = "skill" | "instruction" | "agent";
+export type WorkspaceResourceScope = "all" | "selected";
+export interface WorkspaceResourceInput {
+    kind: WorkspaceResourceKind;
+    name: string;
+    description?: string | null;
+    path: string;
+    content: string;
+    scope: WorkspaceResourceScope;
+}
+export declare function listWorkspaceResources(filter?: {
+    kind?: string;
+}): Promise<{
+    id: string;
+    ownerEmail: string;
+    orgId: string;
+    kind: string;
+    name: string;
+    description: string;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}[]>;
+export declare function getWorkspaceResource(resourceId: string, ctx?: WorkspaceResourceCtx): Promise<{
+    id: string;
+    ownerEmail: string;
+    orgId: string;
+    kind: string;
+    name: string;
+    description: string;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export declare function createWorkspaceResource(input: WorkspaceResourceInput): Promise<{
+    id: string;
+    ownerEmail: string;
+    orgId: string;
+    kind: string;
+    name: string;
+    description: string;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export declare function updateWorkspaceResource(resourceId: string, input: Partial<Pick<WorkspaceResourceInput, "name" | "description" | "content" | "scope">>): Promise<{
+    id: string;
+    ownerEmail: string;
+    orgId: string;
+    kind: string;
+    name: string;
+    description: string;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export declare function deleteWorkspaceResource(resourceId: string): Promise<{
+    id: string;
+    ownerEmail: string;
+    orgId: string;
+    kind: string;
+    name: string;
+    description: string;
+    path: string;
+    content: string;
+    scope: string;
+    createdBy: string;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export declare function listResourceGrants(filter?: {
+    resourceId?: string;
+    appId?: string;
+}): Promise<{
+    id: string;
+    ownerEmail: string;
+    orgId: string;
+    resourceId: string;
+    appId: string;
+    status: string;
+    syncedAt: number;
+    createdAt: number;
+    updatedAt: number;
+}[]>;
+export declare function getResourceGrant(grantId: string, ctx?: WorkspaceResourceCtx): Promise<{
+    id: string;
+    ownerEmail: string;
+    orgId: string;
+    resourceId: string;
+    appId: string;
+    status: string;
+    syncedAt: number;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export declare function createResourceGrant(resourceId: string, appId: string): Promise<{
+    id: string;
+    ownerEmail: string;
+    orgId: string;
+    resourceId: string;
+    appId: string;
+    status: string;
+    syncedAt: number;
+    createdAt: number;
+    updatedAt: number;
+}>;
+export declare function revokeResourceGrant(grantId: string, ctx?: WorkspaceResourceCtx): Promise<{
+    id: string;
+    ownerEmail: string;
+    orgId: string;
+    resourceId: string;
+    appId: string;
+    status: string;
+    syncedAt: number;
+    createdAt: number;
+    updatedAt: number;
+}>;
+/**
+ * Push workspace resources to an app via its /_agent-native/resources endpoint.
+ * Resources with scope="all" are always pushed. Resources with scope="selected"
+ * are only pushed if there's an active grant for that app.
+ */
+export declare function syncResourcesToApp(appId: string): Promise<{
+    appId: string;
+    synced: number;
+    resources: string[];
+}>;
+/**
+ * Sync all workspace resources to all apps that have grants or scope="all" resources.
+ */
+export declare function syncResourcesToAllApps(): Promise<{
+    appId: string;
+    synced: number;
+}[]>;
+export declare function listWorkspaceResourcesOverview(): Promise<{
+    skillCount: number;
+    instructionCount: number;
+    agentCount: number;
+    totalResources: number;
+    activeGrantCount: number;
+}>;
+//# sourceMappingURL=workspace-resources-store.d.ts.map

package/dist/server/lib/workspace-resources-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-resources-store.d.ts","sourceRoot":"","sources":["../../../src/server/lib/workspace-resources-store.ts"],"names":[],"mappings":"AAWA;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,wBAAgB,2BAA2B,IAAI,oBAAoB,CAGlE;AA+BD,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,aAAa,GAAG,OAAO,CAAC;AACtE,MAAM,MAAM,sBAAsB,GAAG,KAAK,GAAG,UAAU,CAAC;AAExD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,sBAAsB,CAAC;CAC/B;AAED,wBAAsB,sBAAsB,CAAC,MAAM,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;;;;KAWtE;AAED,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,oBAAoD;;;;;;;;;;;;;GAc1D;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,sBAAsB;;;;;;;;;;;;;GA6B1E;AAED,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,OAAO,CACZ,IAAI,CAAC,sBAAsB,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC,CAC3E;;;;;;;;;;;;;GAgCF;AAED,wBAAsB,uBAAuB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;;;GA+B/D;AAID,wBAAsB,kBAAkB,CAAC,MAAM,CAAC,EAAE;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;;;;;;;;;;KAkBA;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,oBAAoD;;;;;;;;;;GAc1D;AAED,wBAAsB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;;;;;;;;;;GA8B1E;AAED,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,oBAAoD;;;;;;;;;;GA0B1D;AAID;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM;;;;GA0FrD;AAED;;GAEG;AACH,wBAAsB,sBAAsB;WAEZ,MAAM;YAAU,MAAM;KAYrD;AAID,wBAAsB,8BAA8B;;;;;;GAkBnD"}

package/dist/server/lib/workspace-resources-store.js

@@ -0,0 +1,310 @@
+import crypto from "node:crypto";
+import { and, desc, eq, isNull, or } from "drizzle-orm";
+import { discoverAgents } from "@agent-native/core/server/agent-discovery";
+import { getDb, schema } from "../../db/index.js";
+import { currentOwnerEmail, currentOrgId, recordAudit, } from "./dispatch-store.js";
+export function requireWorkspaceResourceCtx() {
+    const ownerEmail = currentOwnerEmail();
+    return { ownerEmail, orgId: currentOrgId() };
+}
+/** WHERE clause that limits a workspace-resource row to the caller's scope. */
+function ctxScope(table, ctx) {
+    if (!ctx.orgId) {
+        return and(eq(table.ownerEmail, ctx.ownerEmail), isNull(table.orgId));
+    }
+    return or(eq(table.ownerEmail, ctx.ownerEmail), eq(table.orgId, ctx.orgId));
+}
+function id() {
+    return crypto.randomUUID();
+}
+function now() {
+    return Date.now();
+}
+function orgFilter(table) {
+    const orgId = currentOrgId();
+    return and(eq(table.ownerEmail, currentOwnerEmail()), orgId ? eq(table.orgId, orgId) : isNull(table.orgId));
+}
+export async function listWorkspaceResources(filter) {
+    const db = getDb();
+    const conditions = [orgFilter(schema.workspaceResources)];
+    if (filter?.kind) {
+        conditions.push(eq(schema.workspaceResources.kind, filter.kind));
+    }
+    return db
+        .select()
+        .from(schema.workspaceResources)
+        .where(and(...conditions))
+        .orderBy(desc(schema.workspaceResources.updatedAt));
+}
+export async function getWorkspaceResource(resourceId, ctx = requireWorkspaceResourceCtx()) {
+    const db = getDb();
+    const [row] = await db
+        .select()
+        .from(schema.workspaceResources)
+        .where(and(eq(schema.workspaceResources.id, resourceId), ctxScope(schema.workspaceResources, ctx)))
+        .limit(1);
+    return row ?? null;
+}
+export async function createWorkspaceResource(input) {
+    const db = getDb();
+    const timestamp = now();
+    const resourceId = id();
+    const actor = currentOwnerEmail();
+    await db.insert(schema.workspaceResources).values({
+        id: resourceId,
+        ownerEmail: actor,
+        orgId: currentOrgId(),
+        kind: input.kind,
+        name: input.name,
+        description: input.description || null,
+        path: input.path,
+        content: input.content,
+        scope: input.scope,
+        createdBy: actor,
+        createdAt: timestamp,
+        updatedAt: timestamp,
+    });
+    await recordAudit({
+        action: `workspace.${input.kind}.created`,
+        targetType: `workspace-${input.kind}`,
+        targetId: resourceId,
+        summary: `Created workspace ${input.kind} "${input.name}" (${input.path})`,
+    });
+    return getWorkspaceResource(resourceId);
+}
+export async function updateWorkspaceResource(resourceId, input) {
+    const db = getDb();
+    const ctx = requireWorkspaceResourceCtx();
+    const existing = await getWorkspaceResource(resourceId, ctx);
+    if (!existing)
+        throw new Error("Workspace resource not found");
+    const updates = { updatedAt: now() };
+    if (input.name !== undefined)
+        updates.name = input.name;
+    if (input.description !== undefined)
+        updates.description = input.description || null;
+    if (input.content !== undefined)
+        updates.content = input.content;
+    if (input.scope !== undefined)
+        updates.scope = input.scope;
+    await db
+        .update(schema.workspaceResources)
+        .set(updates)
+        .where(and(eq(schema.workspaceResources.id, resourceId), ctxScope(schema.workspaceResources, ctx)));
+    await recordAudit({
+        action: `workspace.${existing.kind}.updated`,
+        targetType: `workspace-${existing.kind}`,
+        targetId: resourceId,
+        summary: `Updated workspace ${existing.kind} "${input.name || existing.name}"`,
+    });
+    return getWorkspaceResource(resourceId, ctx);
+}
+export async function deleteWorkspaceResource(resourceId) {
+    const db = getDb();
+    const ctx = requireWorkspaceResourceCtx();
+    const existing = await getWorkspaceResource(resourceId, ctx);
+    if (!existing)
+        throw new Error("Workspace resource not found");
+    // Revoke all grants
+    const grants = await listResourceGrants({ resourceId });
+    for (const grant of grants) {
+        if (grant.status === "active") {
+            await revokeResourceGrant(grant.id);
+        }
+    }
+    await db
+        .delete(schema.workspaceResources)
+        .where(and(eq(schema.workspaceResources.id, resourceId), ctxScope(schema.workspaceResources, ctx)));
+    await recordAudit({
+        action: `workspace.${existing.kind}.deleted`,
+        targetType: `workspace-${existing.kind}`,
+        targetId: resourceId,
+        summary: `Deleted workspace ${existing.kind} "${existing.name}" (${existing.path})`,
+    });
+    return existing;
+}
+// ─── Grants ──────────────────────────────────────────────────────
+export async function listResourceGrants(filter) {
+    const db = getDb();
+    const conditions = [orgFilter(schema.workspaceResourceGrants)];
+    if (filter?.resourceId) {
+        conditions.push(eq(schema.workspaceResourceGrants.resourceId, filter.resourceId));
+    }
+    if (filter?.appId) {
+        conditions.push(eq(schema.workspaceResourceGrants.appId, filter.appId));
+    }
+    return db
+        .select()
+        .from(schema.workspaceResourceGrants)
+        .where(and(...conditions))
+        .orderBy(desc(schema.workspaceResourceGrants.updatedAt));
+}
+export async function getResourceGrant(grantId, ctx = requireWorkspaceResourceCtx()) {
+    const db = getDb();
+    const [row] = await db
+        .select()
+        .from(schema.workspaceResourceGrants)
+        .where(and(eq(schema.workspaceResourceGrants.id, grantId), ctxScope(schema.workspaceResourceGrants, ctx)))
+        .limit(1);
+    return row ?? null;
+}
+export async function createResourceGrant(resourceId, appId) {
+    const db = getDb();
+    const ctx = requireWorkspaceResourceCtx();
+    const resource = await getWorkspaceResource(resourceId, ctx);
+    if (!resource)
+        throw new Error("Workspace resource not found");
+    const timestamp = now();
+    const grantId = id();
+    const actor = currentOwnerEmail();
+    await db.insert(schema.workspaceResourceGrants).values({
+        id: grantId,
+        ownerEmail: actor,
+        orgId: currentOrgId(),
+        resourceId,
+        appId,
+        status: "active",
+        syncedAt: null,
+        createdAt: timestamp,
+        updatedAt: timestamp,
+    });
+    await recordAudit({
+        action: `workspace.${resource.kind}.granted`,
+        targetType: `workspace-${resource.kind}-grant`,
+        targetId: grantId,
+        summary: `Granted workspace ${resource.kind} "${resource.name}" to ${appId}`,
+    });
+    return getResourceGrant(grantId);
+}
+export async function revokeResourceGrant(grantId, ctx = requireWorkspaceResourceCtx()) {
+    const db = getDb();
+    const grant = await getResourceGrant(grantId, ctx);
+    if (!grant)
+        throw new Error("Grant not found");
+    const resource = await getWorkspaceResource(grant.resourceId);
+    await db
+        .update(schema.workspaceResourceGrants)
+        .set({ status: "revoked", updatedAt: now() })
+        .where(and(eq(schema.workspaceResourceGrants.id, grantId), ctxScope(schema.workspaceResourceGrants, ctx)));
+    await recordAudit({
+        action: `workspace.${resource?.kind || "resource"}.grant-revoked`,
+        targetType: "workspace-resource-grant",
+        targetId: grantId,
+        summary: `Revoked workspace ${resource?.kind || "resource"} "${resource?.name || grant.resourceId}" from ${grant.appId}`,
+    });
+    return getResourceGrant(grantId, ctx);
+}
+// ─── Sync ──────────────────────────────────────────────────────
+/**
+ * Push workspace resources to an app via its /_agent-native/resources endpoint.
+ * Resources with scope="all" are always pushed. Resources with scope="selected"
+ * are only pushed if there's an active grant for that app.
+ */
+export async function syncResourcesToApp(appId) {
+    const agents = await discoverAgents("dispatch");
+    const agent = agents.find((a) => a.id === appId);
+    if (!agent)
+        throw new Error(`App "${appId}" not found in agent registry`);
+    const allResources = await listWorkspaceResources();
+    const grants = await listResourceGrants({ appId });
+    const activeGrantResourceIds = new Set(grants.filter((g) => g.status === "active").map((g) => g.resourceId));
+    // Determine which resources to push
+    const toPush = allResources.filter((r) => r.scope === "all" ||
+        (r.scope === "selected" && activeGrantResourceIds.has(r.id)));
+    if (toPush.length === 0) {
+        return { appId, synced: 0, resources: [] };
+    }
+    const syncedPaths = [];
+    const db = getDb();
+    const timestamp = now();
+    for (const resource of toPush) {
+        try {
+            // Push via the resources API — create as shared resource
+            const res = await fetch(`${agent.url}/_agent-native/resources`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    path: resource.path,
+                    content: resource.content,
+                    shared: true,
+                    mimeType: "text/markdown",
+                }),
+            });
+            if (res.ok || res.status === 409) {
+                // 409 = already exists, try updating
+                if (res.status === 409) {
+                    // Fetch existing to get ID, then update
+                    const listRes = await fetch(`${agent.url}/_agent-native/resources?scope=shared&path=${encodeURIComponent(resource.path)}`);
+                    if (listRes.ok) {
+                        const items = await listRes.json();
+                        const existing = Array.isArray(items)
+                            ? items.find((i) => i.path === resource.path)
+                            : null;
+                        if (existing) {
+                            await fetch(`${agent.url}/_agent-native/resources/${existing.id}`, {
+                                method: "PUT",
+                                headers: { "Content-Type": "application/json" },
+                                body: JSON.stringify({ content: resource.content }),
+                            });
+                        }
+                    }
+                }
+                syncedPaths.push(resource.path);
+                // Update grant syncedAt if applicable
+                const grant = grants.find((g) => g.resourceId === resource.id && g.status === "active");
+                if (grant) {
+                    await db
+                        .update(schema.workspaceResourceGrants)
+                        .set({ syncedAt: timestamp, updatedAt: timestamp })
+                        .where(eq(schema.workspaceResourceGrants.id, grant.id));
+                }
+            }
+        }
+        catch {
+            // Skip unreachable — don't fail the whole sync
+        }
+    }
+    await recordAudit({
+        action: "workspace.resources.synced",
+        targetType: "workspace-resource-sync",
+        targetId: appId,
+        summary: `Synced ${syncedPaths.length} workspace resource(s) to ${appId}: ${syncedPaths.join(", ")}`,
+    });
+    return { appId, synced: syncedPaths.length, resources: syncedPaths };
+}
+/**
+ * Sync all workspace resources to all apps that have grants or scope="all" resources.
+ */
+export async function syncResourcesToAllApps() {
+    const agents = await discoverAgents("dispatch");
+    const results = [];
+    for (const agent of agents) {
+        try {
+            const result = await syncResourcesToApp(agent.id);
+            results.push({ appId: result.appId, synced: result.synced });
+        }
+        catch {
+            results.push({ appId: agent.id, synced: 0 });
+        }
+    }
+    return results;
+}
+// ─── Overview ──────────────────────────────────────────────────────
+export async function listWorkspaceResourcesOverview() {
+    const [resources, grants] = await Promise.all([
+        listWorkspaceResources(),
+        listResourceGrants(),
+    ]);
+    const skills = resources.filter((r) => r.kind === "skill");
+    const instructions = resources.filter((r) => r.kind === "instruction");
+    const agents = resources.filter((r) => r.kind === "agent");
+    const activeGrants = grants.filter((g) => g.status === "active");
+    return {
+        skillCount: skills.length,
+        instructionCount: instructions.length,
+        agentCount: agents.length,
+        totalResources: resources.length,
+        activeGrantCount: activeGrants.length,
+    };
+}
+//# sourceMappingURL=workspace-resources-store.js.map

package/dist/server/lib/workspace-resources-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-resources-store.js","sourceRoot":"","sources":["../../../src/server/lib/workspace-resources-store.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAc7B,MAAM,UAAU,2BAA2B;IACzC,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,+EAA+E;AAC/E,SAAS,QAAQ,CACf,KAAQ,EACR,GAAyB;IAEzB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,EAAE;IACT,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,GAAG;IACV,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,SAAS,CAA4C,KAAQ;IACpE,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO,GAAG,CACR,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,EACzC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CACrD,CAAC;AACJ,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAA0B;IACrE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC1D,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAQ,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;SAC/B,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;SACzB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,MAA4B,2BAA2B,EAAE;IAEzD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;SAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,CAAC,EAC5C,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,GAAG,CAAC,CACzC,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAA6B;IACzE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,UAAU,GAAG,EAAE,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAElC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;QAChD,EAAE,EAAE,UAAU;QACd,UAAU,EAAE,KAAK;QACjB,KAAK,EAAE,YAAY,EAAE;QACrB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;QACtC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IAEH,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,aAAa,KAAK,CAAC,IAAI,UAAU;QACzC,UAAU,EAAE,aAAa,KAAK,CAAC,IAAI,EAAE;QACrC,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,qBAAqB,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,GAAG;KAC3E,CAAC,CAAC;IAEH,OAAO,oBAAoB,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAkB,EAClB,KAEC;IAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,2BAA2B,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE/D,MAAM,OAAO,GAA4B,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;IAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QACjC,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACjE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAE3D,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;SACjC,GAAG,CAAC,OAAO,CAAC;SACZ,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,CAAC,EAC5C,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,GAAG,CAAC,CACzC,CACF,CAAC;IAEJ,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,aAAa,QAAQ,CAAC,IAAI,UAAU;QAC5C,UAAU,EAAE,aAAa,QAAQ,CAAC,IAAI,EAAE;QACxC,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,qBAAqB,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,GAAG;KAC/E,CAAC,CAAC;IAEH,OAAO,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAAkB;IAC9D,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,2BAA2B,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE/D,oBAAoB;IACpB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;SACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,CAAC,EAC5C,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,GAAG,CAAC,CACzC,CACF,CAAC;IAEJ,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,aAAa,QAAQ,CAAC,IAAI,UAAU;QAC5C,UAAU,EAAE,aAAa,QAAQ,CAAC,IAAI,EAAE;QACxC,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,qBAAqB,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,MAAM,QAAQ,CAAC,IAAI,GAAG;KACpF,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oEAAoE;AAEpE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAGxC;IACC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;QACvB,UAAU,CAAC,IAAI,CACb,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAQ,CACxE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;QAClB,UAAU,CAAC,IAAI,CACb,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAQ,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;SACpC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;SACzB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,MAA4B,2BAA2B,EAAE;IAEzD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;SACpC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,EAAE,EAAE,OAAO,CAAC,EAC9C,QAAQ,CAAC,MAAM,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAC9C,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAkB,EAAE,KAAa;IACzE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,2BAA2B,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE/D,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,EAAE,EAAE,CAAC;IACrB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAElC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC;QACrD,EAAE,EAAE,OAAO;QACX,UAAU,EAAE,KAAK;QACjB,KAAK,EAAE,YAAY,EAAE;QACrB,UAAU;QACV,KAAK;QACL,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IAEH,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,aAAa,QAAQ,CAAC,IAAI,UAAU;QAC5C,UAAU,EAAE,aAAa,QAAQ,CAAC,IAAI,QAAQ;QAC9C,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,qBAAqB,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE;KAC7E,CAAC,CAAC;IAEH,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,MAA4B,2BAA2B,EAAE;IAEzD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAE/C,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAE9D,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC;SACtC,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;SAC5C,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,EAAE,EAAE,OAAO,CAAC,EAC9C,QAAQ,CAAC,MAAM,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAC9C,CACF,CAAC;IAEJ,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,aAAa,QAAQ,EAAE,IAAI,IAAI,UAAU,gBAAgB;QACjE,UAAU,EAAE,0BAA0B;QACtC,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,qBAAqB,QAAQ,EAAE,IAAI,IAAI,UAAU,KAAK,QAAQ,EAAE,IAAI,IAAI,KAAK,CAAC,UAAU,UAAU,KAAK,CAAC,KAAK,EAAE;KACzH,CAAC,CAAC;IAEH,OAAO,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,kEAAkE;AAElE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAa;IACpD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,+BAA+B,CAAC,CAAC;IAE1E,MAAM,YAAY,GAAG,MAAM,sBAAsB,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,sBAAsB,GAAG,IAAI,GAAG,CACpC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CACrE,CAAC;IAEF,oCAAoC;IACpC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAChC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,KAAK,KAAK,KAAK;QACjB,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAC/D,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IAExB,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,yDAAyD;YACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,0BAA0B,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,eAAe;iBAC1B,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjC,qCAAqC;gBACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,wCAAwC;oBACxC,MAAM,OAAO,GAAG,MAAM,KAAK,CACzB,GAAG,KAAK,CAAC,GAAG,8CAA8C,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAC9F,CAAC;oBACF,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;wBACf,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;wBACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;4BACnC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;4BAClD,CAAC,CAAC,IAAI,CAAC;wBACT,IAAI,QAAQ,EAAE,CAAC;4BACb,MAAM,KAAK,CACT,GAAG,KAAK,CAAC,GAAG,4BAA4B,QAAQ,CAAC,EAAE,EAAE,EACrD;gCACE,MAAM,EAAE,KAAK;gCACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gCAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;6BACpD,CACF,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAEhC,sCAAsC;gBACtC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAC7D,CAAC;gBACF,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,EAAE;yBACL,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC;yBACtC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;yBAClD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IAED,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,4BAA4B;QACpC,UAAU,EAAE,yBAAyB;QACrC,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,UAAU,WAAW,CAAC,MAAM,6BAA6B,KAAK,KAAK,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACrG,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,OAAO,GAA6C,EAAE,CAAC;IAE7D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sEAAsE;AAEtE,MAAM,CAAC,KAAK,UAAU,8BAA8B;IAClD,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,sBAAsB,EAAE;QACxB,kBAAkB,EAAE;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAEjE,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,gBAAgB,EAAE,YAAY,CAAC,MAAM;QACrC,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,cAAc,EAAE,SAAS,CAAC,MAAM;QAChC,gBAAgB,EAAE,YAAY,CAAC,MAAM;KACtC,CAAC;AACJ,CAAC","sourcesContent":["import crypto from \"node:crypto\";\nimport { and, desc, eq, isNull, or } from \"drizzle-orm\";\nimport { discoverAgents } from \"@agent-native/core/server/agent-discovery\";\nimport { getDb, schema } from \"../../db/index.js\";\nimport {\n  currentOwnerEmail,\n  currentOrgId,\n  recordAudit,\n} from \"./dispatch-store.js\";\nimport { recordVaultAudit } from \"./vault-store.js\";\n\n/**\n * Caller-supplied access context for workspace-resource operations.\n * Same shape and semantics as VaultCtx — looking up a row by id alone is\n * unsafe because UUIDs are not authorization. A row matches the ctx if\n * either the caller owns it or it lives in the caller's active org.\n */\nexport interface WorkspaceResourceCtx {\n  ownerEmail: string;\n  orgId: string | null;\n}\n\nexport function requireWorkspaceResourceCtx(): WorkspaceResourceCtx {\n  const ownerEmail = currentOwnerEmail();\n  return { ownerEmail, orgId: currentOrgId() };\n}\n\n/** WHERE clause that limits a workspace-resource row to the caller's scope. */\nfunction ctxScope<T extends { ownerEmail: any; orgId: any }>(\n  table: T,\n  ctx: WorkspaceResourceCtx,\n) {\n  if (!ctx.orgId) {\n    return and(eq(table.ownerEmail, ctx.ownerEmail), isNull(table.orgId));\n  }\n  return or(eq(table.ownerEmail, ctx.ownerEmail), eq(table.orgId, ctx.orgId));\n}\n\nfunction id() {\n  return crypto.randomUUID();\n}\n\nfunction now() {\n  return Date.now();\n}\n\nfunction orgFilter<T extends { ownerEmail: any; orgId: any }>(table: T) {\n  const orgId = currentOrgId();\n  return and(\n    eq(table.ownerEmail, currentOwnerEmail()),\n    orgId ? eq(table.orgId, orgId) : isNull(table.orgId),\n  );\n}\n\n// ─── Workspace Resources CRUD ──────────────────────────────────\n\nexport type WorkspaceResourceKind = \"skill\" | \"instruction\" | \"agent\";\nexport type WorkspaceResourceScope = \"all\" | \"selected\";\n\nexport interface WorkspaceResourceInput {\n  kind: WorkspaceResourceKind;\n  name: string;\n  description?: string | null;\n  path: string;\n  content: string;\n  scope: WorkspaceResourceScope;\n}\n\nexport async function listWorkspaceResources(filter?: { kind?: string }) {\n  const db = getDb();\n  const conditions = [orgFilter(schema.workspaceResources)];\n  if (filter?.kind) {\n    conditions.push(eq(schema.workspaceResources.kind, filter.kind) as any);\n  }\n  return db\n    .select()\n    .from(schema.workspaceResources)\n    .where(and(...conditions))\n    .orderBy(desc(schema.workspaceResources.updatedAt));\n}\n\nexport async function getWorkspaceResource(\n  resourceId: string,\n  ctx: WorkspaceResourceCtx = requireWorkspaceResourceCtx(),\n) {\n  const db = getDb();\n  const [row] = await db\n    .select()\n    .from(schema.workspaceResources)\n    .where(\n      and(\n        eq(schema.workspaceResources.id, resourceId),\n        ctxScope(schema.workspaceResources, ctx),\n      ),\n    )\n    .limit(1);\n  return row ?? null;\n}\n\nexport async function createWorkspaceResource(input: WorkspaceResourceInput) {\n  const db = getDb();\n  const timestamp = now();\n  const resourceId = id();\n  const actor = currentOwnerEmail();\n\n  await db.insert(schema.workspaceResources).values({\n    id: resourceId,\n    ownerEmail: actor,\n    orgId: currentOrgId(),\n    kind: input.kind,\n    name: input.name,\n    description: input.description || null,\n    path: input.path,\n    content: input.content,\n    scope: input.scope,\n    createdBy: actor,\n    createdAt: timestamp,\n    updatedAt: timestamp,\n  });\n\n  await recordAudit({\n    action: `workspace.${input.kind}.created`,\n    targetType: `workspace-${input.kind}`,\n    targetId: resourceId,\n    summary: `Created workspace ${input.kind} \"${input.name}\" (${input.path})`,\n  });\n\n  return getWorkspaceResource(resourceId);\n}\n\nexport async function updateWorkspaceResource(\n  resourceId: string,\n  input: Partial<\n    Pick<WorkspaceResourceInput, \"name\" | \"description\" | \"content\" | \"scope\">\n  >,\n) {\n  const db = getDb();\n  const ctx = requireWorkspaceResourceCtx();\n  const existing = await getWorkspaceResource(resourceId, ctx);\n  if (!existing) throw new Error(\"Workspace resource not found\");\n\n  const updates: Record<string, unknown> = { updatedAt: now() };\n  if (input.name !== undefined) updates.name = input.name;\n  if (input.description !== undefined)\n    updates.description = input.description || null;\n  if (input.content !== undefined) updates.content = input.content;\n  if (input.scope !== undefined) updates.scope = input.scope;\n\n  await db\n    .update(schema.workspaceResources)\n    .set(updates)\n    .where(\n      and(\n        eq(schema.workspaceResources.id, resourceId),\n        ctxScope(schema.workspaceResources, ctx),\n      ),\n    );\n\n  await recordAudit({\n    action: `workspace.${existing.kind}.updated`,\n    targetType: `workspace-${existing.kind}`,\n    targetId: resourceId,\n    summary: `Updated workspace ${existing.kind} \"${input.name || existing.name}\"`,\n  });\n\n  return getWorkspaceResource(resourceId, ctx);\n}\n\nexport async function deleteWorkspaceResource(resourceId: string) {\n  const db = getDb();\n  const ctx = requireWorkspaceResourceCtx();\n  const existing = await getWorkspaceResource(resourceId, ctx);\n  if (!existing) throw new Error(\"Workspace resource not found\");\n\n  // Revoke all grants\n  const grants = await listResourceGrants({ resourceId });\n  for (const grant of grants) {\n    if (grant.status === \"active\") {\n      await revokeResourceGrant(grant.id);\n    }\n  }\n\n  await db\n    .delete(schema.workspaceResources)\n    .where(\n      and(\n        eq(schema.workspaceResources.id, resourceId),\n        ctxScope(schema.workspaceResources, ctx),\n      ),\n    );\n\n  await recordAudit({\n    action: `workspace.${existing.kind}.deleted`,\n    targetType: `workspace-${existing.kind}`,\n    targetId: resourceId,\n    summary: `Deleted workspace ${existing.kind} \"${existing.name}\" (${existing.path})`,\n  });\n\n  return existing;\n}\n\n// ─── Grants ──────────────────────────────────────────────────────\n\nexport async function listResourceGrants(filter?: {\n  resourceId?: string;\n  appId?: string;\n}) {\n  const db = getDb();\n  const conditions = [orgFilter(schema.workspaceResourceGrants)];\n  if (filter?.resourceId) {\n    conditions.push(\n      eq(schema.workspaceResourceGrants.resourceId, filter.resourceId) as any,\n    );\n  }\n  if (filter?.appId) {\n    conditions.push(\n      eq(schema.workspaceResourceGrants.appId, filter.appId) as any,\n    );\n  }\n  return db\n    .select()\n    .from(schema.workspaceResourceGrants)\n    .where(and(...conditions))\n    .orderBy(desc(schema.workspaceResourceGrants.updatedAt));\n}\n\nexport async function getResourceGrant(\n  grantId: string,\n  ctx: WorkspaceResourceCtx = requireWorkspaceResourceCtx(),\n) {\n  const db = getDb();\n  const [row] = await db\n    .select()\n    .from(schema.workspaceResourceGrants)\n    .where(\n      and(\n        eq(schema.workspaceResourceGrants.id, grantId),\n        ctxScope(schema.workspaceResourceGrants, ctx),\n      ),\n    )\n    .limit(1);\n  return row ?? null;\n}\n\nexport async function createResourceGrant(resourceId: string, appId: string) {\n  const db = getDb();\n  const ctx = requireWorkspaceResourceCtx();\n  const resource = await getWorkspaceResource(resourceId, ctx);\n  if (!resource) throw new Error(\"Workspace resource not found\");\n\n  const timestamp = now();\n  const grantId = id();\n  const actor = currentOwnerEmail();\n\n  await db.insert(schema.workspaceResourceGrants).values({\n    id: grantId,\n    ownerEmail: actor,\n    orgId: currentOrgId(),\n    resourceId,\n    appId,\n    status: \"active\",\n    syncedAt: null,\n    createdAt: timestamp,\n    updatedAt: timestamp,\n  });\n\n  await recordAudit({\n    action: `workspace.${resource.kind}.granted`,\n    targetType: `workspace-${resource.kind}-grant`,\n    targetId: grantId,\n    summary: `Granted workspace ${resource.kind} \"${resource.name}\" to ${appId}`,\n  });\n\n  return getResourceGrant(grantId);\n}\n\nexport async function revokeResourceGrant(\n  grantId: string,\n  ctx: WorkspaceResourceCtx = requireWorkspaceResourceCtx(),\n) {\n  const db = getDb();\n  const grant = await getResourceGrant(grantId, ctx);\n  if (!grant) throw new Error(\"Grant not found\");\n\n  const resource = await getWorkspaceResource(grant.resourceId);\n\n  await db\n    .update(schema.workspaceResourceGrants)\n    .set({ status: \"revoked\", updatedAt: now() })\n    .where(\n      and(\n        eq(schema.workspaceResourceGrants.id, grantId),\n        ctxScope(schema.workspaceResourceGrants, ctx),\n      ),\n    );\n\n  await recordAudit({\n    action: `workspace.${resource?.kind || \"resource\"}.grant-revoked`,\n    targetType: \"workspace-resource-grant\",\n    targetId: grantId,\n    summary: `Revoked workspace ${resource?.kind || \"resource\"} \"${resource?.name || grant.resourceId}\" from ${grant.appId}`,\n  });\n\n  return getResourceGrant(grantId, ctx);\n}\n\n// ─── Sync ──────────────────────────────────────────────────────\n\n/**\n * Push workspace resources to an app via its /_agent-native/resources endpoint.\n * Resources with scope=\"all\" are always pushed. Resources with scope=\"selected\"\n * are only pushed if there's an active grant for that app.\n */\nexport async function syncResourcesToApp(appId: string) {\n  const agents = await discoverAgents(\"dispatch\");\n  const agent = agents.find((a) => a.id === appId);\n  if (!agent) throw new Error(`App \"${appId}\" not found in agent registry`);\n\n  const allResources = await listWorkspaceResources();\n  const grants = await listResourceGrants({ appId });\n  const activeGrantResourceIds = new Set(\n    grants.filter((g) => g.status === \"active\").map((g) => g.resourceId),\n  );\n\n  // Determine which resources to push\n  const toPush = allResources.filter(\n    (r) =>\n      r.scope === \"all\" ||\n      (r.scope === \"selected\" && activeGrantResourceIds.has(r.id)),\n  );\n\n  if (toPush.length === 0) {\n    return { appId, synced: 0, resources: [] };\n  }\n\n  const syncedPaths: string[] = [];\n  const db = getDb();\n  const timestamp = now();\n\n  for (const resource of toPush) {\n    try {\n      // Push via the resources API — create as shared resource\n      const res = await fetch(`${agent.url}/_agent-native/resources`, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify({\n          path: resource.path,\n          content: resource.content,\n          shared: true,\n          mimeType: \"text/markdown\",\n        }),\n      });\n\n      if (res.ok || res.status === 409) {\n        // 409 = already exists, try updating\n        if (res.status === 409) {\n          // Fetch existing to get ID, then update\n          const listRes = await fetch(\n            `${agent.url}/_agent-native/resources?scope=shared&path=${encodeURIComponent(resource.path)}`,\n          );\n          if (listRes.ok) {\n            const items = await listRes.json();\n            const existing = Array.isArray(items)\n              ? items.find((i: any) => i.path === resource.path)\n              : null;\n            if (existing) {\n              await fetch(\n                `${agent.url}/_agent-native/resources/${existing.id}`,\n                {\n                  method: \"PUT\",\n                  headers: { \"Content-Type\": \"application/json\" },\n                  body: JSON.stringify({ content: resource.content }),\n                },\n              );\n            }\n          }\n        }\n        syncedPaths.push(resource.path);\n\n        // Update grant syncedAt if applicable\n        const grant = grants.find(\n          (g) => g.resourceId === resource.id && g.status === \"active\",\n        );\n        if (grant) {\n          await db\n            .update(schema.workspaceResourceGrants)\n            .set({ syncedAt: timestamp, updatedAt: timestamp })\n            .where(eq(schema.workspaceResourceGrants.id, grant.id));\n        }\n      }\n    } catch {\n      // Skip unreachable — don't fail the whole sync\n    }\n  }\n\n  await recordAudit({\n    action: \"workspace.resources.synced\",\n    targetType: \"workspace-resource-sync\",\n    targetId: appId,\n    summary: `Synced ${syncedPaths.length} workspace resource(s) to ${appId}: ${syncedPaths.join(\", \")}`,\n  });\n\n  return { appId, synced: syncedPaths.length, resources: syncedPaths };\n}\n\n/**\n * Sync all workspace resources to all apps that have grants or scope=\"all\" resources.\n */\nexport async function syncResourcesToAllApps() {\n  const agents = await discoverAgents(\"dispatch\");\n  const results: Array<{ appId: string; synced: number }> = [];\n\n  for (const agent of agents) {\n    try {\n      const result = await syncResourcesToApp(agent.id);\n      results.push({ appId: result.appId, synced: result.synced });\n    } catch {\n      results.push({ appId: agent.id, synced: 0 });\n    }\n  }\n\n  return results;\n}\n\n// ─── Overview ──────────────────────────────────────────────────────\n\nexport async function listWorkspaceResourcesOverview() {\n  const [resources, grants] = await Promise.all([\n    listWorkspaceResources(),\n    listResourceGrants(),\n  ]);\n\n  const skills = resources.filter((r) => r.kind === \"skill\");\n  const instructions = resources.filter((r) => r.kind === \"instruction\");\n  const agents = resources.filter((r) => r.kind === \"agent\");\n  const activeGrants = grants.filter((g) => g.status === \"active\");\n\n  return {\n    skillCount: skills.length,\n    instructionCount: instructions.length,\n    agentCount: agents.length,\n    totalResources: resources.length,\n    activeGrantCount: activeGrants.length,\n  };\n}\n"]}

package/dist/server/plugins/agent-chat.d.ts

@@ -0,0 +1,3 @@
+declare const _default: (nitroApp: any) => void | Promise<void>;
+export default _default;
+//# sourceMappingURL=agent-chat.d.ts.map

package/dist/server/plugins/agent-chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-chat.d.ts","sourceRoot":"","sources":["../../../src/server/plugins/agent-chat.ts"],"names":[],"mappings":";AAIA,wBA+BG"}

package/dist/server/plugins/agent-chat.js

@@ -0,0 +1,36 @@
+import { createAgentChatPlugin } from "@agent-native/core/server";
+import { getOrgContext } from "@agent-native/core/org";
+import { dispatchActions } from "../../actions/index.js";
+export default createAgentChatPlugin({
+    appId: "dispatch",
+    // Without this, AGENT_ORG_ID is never set on agent action calls and every
+    // row written through the frontend (vault secrets, destinations, workspace
+    // resources) lands with org_id=NULL — breaking data isolation across orgs.
+    resolveOrgId: async (event) => {
+        const ctx = await getOrgContext(event);
+        return ctx.orgId;
+    },
+    // Read actions directly from the package's own action map rather than from
+    // a build-time-generated `.generated/actions-registry.ts` (the latter is a
+    // template-only construct that the Vite plugin emits next to actions/).
+    actions: dispatchActions,
+    systemPrompt: `You are the central dispatch for this workspace.
+
+Default posture:
+- Treat Slack and Telegram as shared entrypoints into the workspace.
+- Heavily delegate domain work to specialized agents through A2A when another app owns the job.
+- Keep durable memory and operating instructions in resources rather than ephemeral chat.
+- Prefer replying in the current external thread unless the user explicitly asks you to send to a saved destination.
+
+Use the standard workspace primitives:
+- Read and update resources like AGENTS.md, LEARNINGS.md, jobs/*.md, agents/*.md, and remote-agents/*.json when appropriate.
+- Use recurring jobs for scheduled behavior.
+- Use custom agent profiles in agents/*.md for local spawned work and remote-agents/*.json for remote A2A apps.
+- When answering whether workspace apps expose agent cards or A2A endpoints, call list-workspace-apps with includeAgentCards=true. If you have not requested that probe, absence of agent-card fields means unchecked, not unavailable.
+
+When a user asks for something like a digest, reminder, routing rule, or saved behavior:
+- First decide whether it should be a resource, a recurring job, a destination, or a delegated task.
+- Keep responses concise and operational.
+- Avoid inventing integrations or destinations that are not configured yet.`,
+});
+//# sourceMappingURL=agent-chat.js.map

package/dist/server/plugins/agent-chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-chat.js","sourceRoot":"","sources":["../../../src/server/plugins/agent-chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,eAAe,qBAAqB,CAAC;IACnC,KAAK,EAAE,UAAU;IACjB,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,EAAE,eAAe;IACxB,YAAY,EAAE;;;;;;;;;;;;;;;;;4EAiB4D;CAC3E,CAAC,CAAC","sourcesContent":["import { createAgentChatPlugin } from \"@agent-native/core/server\";\nimport { getOrgContext } from \"@agent-native/core/org\";\nimport { dispatchActions } from \"../../actions/index.js\";\n\nexport default createAgentChatPlugin({\n  appId: \"dispatch\",\n  // Without this, AGENT_ORG_ID is never set on agent action calls and every\n  // row written through the frontend (vault secrets, destinations, workspace\n  // resources) lands with org_id=NULL — breaking data isolation across orgs.\n  resolveOrgId: async (event) => {\n    const ctx = await getOrgContext(event);\n    return ctx.orgId;\n  },\n  // Read actions directly from the package's own action map rather than from\n  // a build-time-generated `.generated/actions-registry.ts` (the latter is a\n  // template-only construct that the Vite plugin emits next to actions/).\n  actions: dispatchActions,\n  systemPrompt: `You are the central dispatch for this workspace.\n\nDefault posture:\n- Treat Slack and Telegram as shared entrypoints into the workspace.\n- Heavily delegate domain work to specialized agents through A2A when another app owns the job.\n- Keep durable memory and operating instructions in resources rather than ephemeral chat.\n- Prefer replying in the current external thread unless the user explicitly asks you to send to a saved destination.\n\nUse the standard workspace primitives:\n- Read and update resources like AGENTS.md, LEARNINGS.md, jobs/*.md, agents/*.md, and remote-agents/*.json when appropriate.\n- Use recurring jobs for scheduled behavior.\n- Use custom agent profiles in agents/*.md for local spawned work and remote-agents/*.json for remote A2A apps.\n- When answering whether workspace apps expose agent cards or A2A endpoints, call list-workspace-apps with includeAgentCards=true. If you have not requested that probe, absence of agent-card fields means unchecked, not unavailable.\n\nWhen a user asks for something like a digest, reminder, routing rule, or saved behavior:\n- First decide whether it should be a resource, a recurring job, a destination, or a delegated task.\n- Keep responses concise and operational.\n- Avoid inventing integrations or destinations that are not configured yet.`,\n});\n"]}

package/dist/server/plugins/auth.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Defer config + plugin construction until the Nitro plugin actually fires.
+ * This way `setupDispatch(config)` can run after plugin module-load order
+ * (Nitro doesn't guarantee load order across plugin files) and still feed
+ * `googleOnly` / `marketing` into `createAuthPlugin`.
+ */
+declare const dispatchAuthPlugin: (nitroApp: any) => Promise<void>;
+export default dispatchAuthPlugin;
+//# sourceMappingURL=auth.d.ts.map

package/dist/server/plugins/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/plugins/auth.ts"],"names":[],"mappings":"AAcA;;;;;GAKG;AACH,QAAA,MAAM,kBAAkB,GAAU,UAAU,GAAG,kBAW9C,CAAC;AAEF,eAAe,kBAAkB,CAAC"}

package/dist/server/plugins/auth.js

@@ -0,0 +1,30 @@
+import { createAuthPlugin } from "@agent-native/core/server";
+import { getDispatchConfig } from "../index.js";
+const DEFAULT_MARKETING = {
+    appName: "Agent-Native Dispatch",
+    tagline: "Your AI agent manages secrets, orchestrates other agents, and routes messages across your workspace.",
+    features: [
+        "Centralized vault for secrets with granular per-app grants",
+        "Cross-agent orchestration and delegation to specialist apps",
+        "Slack and Telegram routing with approval workflows",
+    ],
+};
+/**
+ * Defer config + plugin construction until the Nitro plugin actually fires.
+ * This way `setupDispatch(config)` can run after plugin module-load order
+ * (Nitro doesn't guarantee load order across plugin files) and still feed
+ * `googleOnly` / `marketing` into `createAuthPlugin`.
+ */
+const dispatchAuthPlugin = async (nitroApp) => {
+    const { auth: authConfig = {} } = getDispatchConfig();
+    const googleOnly = authConfig.googleOnly ?? false;
+    const marketing = authConfig.marketing ??
+        DEFAULT_MARKETING;
+    const plugin = createAuthPlugin({
+        googleOnly,
+        marketing: marketing,
+    });
+    return plugin(nitroApp);
+};
+export default dispatchAuthPlugin;
+//# sourceMappingURL=auth.js.map

package/dist/server/plugins/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/server/plugins/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,iBAAiB,GAAG;IACxB,OAAO,EAAE,uBAAuB;IAChC,OAAO,EACL,sGAAsG;IACxG,QAAQ,EAAE;QACR,4DAA4D;QAC5D,6DAA6D;QAC7D,oDAAoD;KACrD;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,KAAK,EAAE,QAAa,EAAE,EAAE;IACjD,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,iBAAiB,EAAE,CAAC;IACtD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,KAAK,CAAC;IAClD,MAAM,SAAS,GACZ,UAAU,CAAC,SAAiD;QAC7D,iBAAiB,CAAC;IACpB,MAAM,MAAM,GAAG,gBAAgB,CAAC;QAC9B,UAAU;QACV,SAAS,EAAE,SAAgB;KAC5B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,eAAe,kBAAkB,CAAC","sourcesContent":["import { createAuthPlugin } from \"@agent-native/core/server\";\nimport { getDispatchConfig } from \"../index.js\";\n\nconst DEFAULT_MARKETING = {\n  appName: \"Agent-Native Dispatch\",\n  tagline:\n    \"Your AI agent manages secrets, orchestrates other agents, and routes messages across your workspace.\",\n  features: [\n    \"Centralized vault for secrets with granular per-app grants\",\n    \"Cross-agent orchestration and delegation to specialist apps\",\n    \"Slack and Telegram routing with approval workflows\",\n  ],\n} as const;\n\n/**\n * Defer config + plugin construction until the Nitro plugin actually fires.\n * This way `setupDispatch(config)` can run after plugin module-load order\n * (Nitro doesn't guarantee load order across plugin files) and still feed\n * `googleOnly` / `marketing` into `createAuthPlugin`.\n */\nconst dispatchAuthPlugin = async (nitroApp: any) => {\n  const { auth: authConfig = {} } = getDispatchConfig();\n  const googleOnly = authConfig.googleOnly ?? false;\n  const marketing =\n    (authConfig.marketing as Record<string, unknown> | undefined) ??\n    DEFAULT_MARKETING;\n  const plugin = createAuthPlugin({\n    googleOnly,\n    marketing: marketing as any,\n  });\n  return plugin(nitroApp);\n};\n\nexport default dispatchAuthPlugin;\n"]}

package/dist/server/plugins/core-routes.d.ts

@@ -0,0 +1,3 @@
+declare const _default: (nitroApp: any) => void | Promise<void>;
+export default _default;
+//# sourceMappingURL=core-routes.d.ts.map

package/dist/server/plugins/core-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-routes.d.ts","sourceRoot":"","sources":["../../../src/server/plugins/core-routes.ts"],"names":[],"mappings":";AAGA,wBAEG"}