@agent-relay/sdk 4.0.2 → 4.0.3

package/dist/provisioner/seeder.d.ts

@@ -0,0 +1,17 @@
+interface WorkflowAclAgent {
+    name: string;
+    acl: Record<string, string[]>;
+}
+interface SeedWorkflowAclsOptions {
+    relayfileUrl: string;
+    adminToken: string;
+    workspace: string;
+    agents: WorkflowAclAgent[];
+}
+export declare function createWorkspaceIfNeeded(baseUrl: string, token: string, workspaceId: string): Promise<void>;
+export declare function seedAclRules(baseUrl: string, token: string, workspaceId: string, aclRules: Record<string, string[]>): Promise<void>;
+export declare function seedWorkspace(baseUrl: string, token: string, workspaceId: string, projectDir: string, excludeDirs: string[]): Promise<number>;
+export declare function seedWorkflowAcls({ relayfileUrl, adminToken, workspace, agents, }: SeedWorkflowAclsOptions): Promise<void>;
+export declare function seedWorkspaceTar(baseUrl: string, token: string, workspaceId: string, projectDir: string, excludeDirs: string[]): Promise<number>;
+export {};
+//# sourceMappingURL=seeder.d.ts.map

package/dist/provisioner/seeder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seeder.d.ts","sourceRoot":"","sources":["../../src/provisioner/seeder.ts"],"names":[],"mappings":"AA6BA,UAAU,gBAAgB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC/B;AAED,UAAU,uBAAuB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAC5B;AA0MD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CA6Df;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC,CA8Bf;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EAAE,GACpB,OAAO,CAAC,MAAM,CAAC,CAyBjB;AA4DD,wBAAsB,gBAAgB,CAAC,EACrC,YAAY,EACZ,UAAU,EACV,SAAS,EACT,MAAM,GACP,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQzC;AA8DD,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EAAE,GACpB,OAAO,CAAC,MAAM,CAAC,CAqDjB"}

package/dist/provisioner/seeder.js

@@ -0,0 +1,419 @@
+import { RelayFileClient } from '@relayfile/sdk';
+import { execSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import * as tar from 'tar';
+const DEFAULT_EXCLUDED_DIRS = ['.relay', '.git', 'node_modules'];
+const DEFAULT_EXCLUDED_FILES = new Set(['.relayfile-mount-state.json']);
+const BATCH_SIZE = 50;
+const utf8Decoder = new TextDecoder('utf-8', { fatal: true });
+function normalizeBaseUrl(baseUrl) {
+    const url = String(baseUrl ?? '').trim();
+    let end = url.length;
+    while (end > 0 && url.charCodeAt(end - 1) === 0x2f) {
+        end--;
+    }
+    return end === url.length ? url : url.slice(0, end);
+}
+function normalizeWorkspaceId(workspaceId) {
+    const value = String(workspaceId ?? '').trim();
+    if (!value) {
+        throw new Error('workspaceId is required');
+    }
+    return value;
+}
+function normalizeExcludeDirs(excludeDirs) {
+    const result = new Set();
+    for (const dir of excludeDirs) {
+        const normalized = String(dir ?? '')
+            .trim()
+            .replace(/^[/\\]+|[/\\]+$/g, '');
+        if (!normalized) {
+            continue;
+        }
+        result.add(normalized);
+    }
+    return result;
+}
+function normalizeAclDirectory(dirPath) {
+    const normalized = String(dirPath ?? '')
+        .trim()
+        .replace(/\\/gu, '/')
+        .replace(/\/+$/u, '');
+    if (!normalized || normalized === '/') {
+        return '/';
+    }
+    return normalized.startsWith('/') ? normalized : `/${normalized}`;
+}
+function isReviewerAgent(agentName) {
+    return /reviewer/iu.test(String(agentName ?? '').trim());
+}
+function createClient(baseUrl, token) {
+    return new RelayFileClient({
+        baseUrl: normalizeBaseUrl(baseUrl),
+        token,
+        retry: { maxRetries: 0 },
+    });
+}
+function isUtf8(raw) {
+    try {
+        utf8Decoder.decode(raw);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function buildSeedFilePayload(filePath, rootDir) {
+    const relative = path.relative(rootDir, filePath).split(path.sep).join('/');
+    const raw = fs.readFileSync(filePath);
+    if (isUtf8(raw)) {
+        return { path: `/${relative}`, content: raw.toString('utf8'), encoding: 'utf-8' };
+    }
+    return { path: `/${relative}`, content: raw.toString('base64'), encoding: 'base64' };
+}
+function collectSeedPaths(rootDir, currentRelative, excludeDirs, output) {
+    const absoluteDir = path.join(rootDir, currentRelative);
+    const entries = fs.readdirSync(absoluteDir, { withFileTypes: true });
+    for (const entry of entries) {
+        if (excludeDirs.has(entry.name)) {
+            continue;
+        }
+        if (DEFAULT_EXCLUDED_FILES.has(entry.name)) {
+            continue;
+        }
+        const nextRelative = currentRelative ? `${currentRelative}/${entry.name}` : entry.name;
+        const absolutePath = path.join(rootDir, nextRelative);
+        if (excludeDirs.has(nextRelative)) {
+            continue;
+        }
+        if (entry.isDirectory()) {
+            collectSeedPaths(rootDir, nextRelative, excludeDirs, output);
+            continue;
+        }
+        if (entry.isFile()) {
+            output.push(absolutePath);
+            continue;
+        }
+        if (entry.isSymbolicLink()) {
+            try {
+                const resolved = fs.realpathSync(absolutePath);
+                if (!resolved.startsWith(rootDir + path.sep) && resolved !== rootDir) {
+                    continue;
+                }
+                const stat = fs.statSync(resolved);
+                if (stat.isDirectory()) {
+                    collectSeedPaths(rootDir, nextRelative, excludeDirs, output);
+                    continue;
+                }
+                if (stat.isFile()) {
+                    output.push(absolutePath);
+                }
+            }
+            catch {
+                // Ignore symlinks that cannot be resolved.
+            }
+        }
+    }
+}
+function parseBulkWriteResponse(payload) {
+    if (!payload || typeof payload !== 'object') {
+        return { written: 0, errorCount: 0, errors: [] };
+    }
+    const parsed = payload;
+    return {
+        written: typeof parsed.written === 'number' ? parsed.written : 0,
+        errorCount: typeof parsed.errorCount === 'number' ? parsed.errorCount : 0,
+        errors: parsed.errors ?? [],
+    };
+}
+async function postBulkWrite(baseUrl, token, workspaceId, files, correlationId) {
+    const response = await fetch(`${normalizeBaseUrl(baseUrl)}/v1/workspaces/${encodeURIComponent(workspaceId)}/fs/bulk`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${token}`,
+            'Content-Type': 'application/json',
+            'X-Correlation-Id': correlationId,
+        },
+        body: JSON.stringify({ files }),
+    });
+    const body = await response.text();
+    if (!response.ok) {
+        throw new Error(`failed to seed workspace ${workspaceId}: HTTP ${response.status} ${body}`.trim());
+    }
+    if (!body) {
+        return { written: files.length, errorCount: 0, errors: [] };
+    }
+    try {
+        return parseBulkWriteResponse(JSON.parse(body));
+    }
+    catch {
+        return { written: files.length, errorCount: 0, errors: [] };
+    }
+}
+async function writeBulkWrite(baseUrl, token, workspaceId, files, correlationId) {
+    const client = createClient(baseUrl, token);
+    try {
+        const response = await client.bulkWrite({
+            workspaceId,
+            files,
+            correlationId,
+        });
+        return parseBulkWriteResponse(response);
+    }
+    catch (error) {
+        if (typeof error.status === 'number') {
+            throw error;
+        }
+    }
+    return postBulkWrite(baseUrl, token, workspaceId, files, correlationId);
+}
+export async function createWorkspaceIfNeeded(baseUrl, token, workspaceId) {
+    const workspace = normalizeWorkspaceId(workspaceId);
+    const client = createClient(baseUrl, token);
+    const maybeCreateWorkspace = client;
+    if (typeof maybeCreateWorkspace.createWorkspace === 'function') {
+        for (const arg of [workspace, { id: workspace }, { workspaceId: workspace }, { name: workspace }]) {
+            try {
+                await maybeCreateWorkspace.createWorkspace(arg);
+                return;
+            }
+            catch {
+                // Continue to the next overload candidate, then fallback to HTTP.
+            }
+        }
+    }
+    const endpoint = `${normalizeBaseUrl(baseUrl)}/v1/workspaces`;
+    const bodyCandidates = [
+        { name: workspace },
+        { workspace: workspace },
+        { workspaceId: workspace },
+        { id: workspace },
+    ];
+    let lastFailure = null;
+    for (const body of bodyCandidates) {
+        try {
+            const response = await fetch(endpoint, {
+                method: 'POST',
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                    'Content-Type': 'application/json',
+                    'X-Correlation-Id': `create-workspace-${Date.now()}`,
+                },
+                body: JSON.stringify(body),
+            });
+            if (response.status === 200 ||
+                response.status === 201 ||
+                response.status === 204 ||
+                response.status === 409) {
+                return;
+            }
+            const responseBody = await response.text().catch(() => '');
+            lastFailure = `HTTP ${response.status} ${responseBody}`.trim();
+            if (response.status < 500 && response.status !== 409) {
+                continue;
+            }
+        }
+        catch (error) {
+            lastFailure = String(error);
+        }
+    }
+    if (lastFailure) {
+        throw new Error(`Failed to create workspace ${workspace}: ${lastFailure}`);
+    }
+}
+export async function seedAclRules(baseUrl, token, workspaceId, aclRules) {
+    const workspace = normalizeWorkspaceId(workspaceId);
+    const files = Object.entries(aclRules).map(([dirPath, rules]) => {
+        const normalizedDir = String(dirPath ?? '')
+            .trim()
+            .replace(/\/+$/, '');
+        const aclPath = normalizedDir === '' || normalizedDir === '/' ? '/.relayfile.acl' : `${normalizedDir}/.relayfile.acl`;
+        return {
+            path: aclPath,
+            content: JSON.stringify({ semantics: { permissions: rules } }),
+            encoding: 'utf-8',
+        };
+    });
+    if (files.length === 0) {
+        return;
+    }
+    const result = await writeBulkWrite(baseUrl, token, workspace, files, `seed-acl-${workspace}-${Date.now()}`);
+    if (result.errorCount > 0) {
+        const details = result.errors ? JSON.stringify(result.errors) : '[]';
+        throw new Error(`ACL seeding had ${result.errorCount} error(s) for workspace ${workspace}: ${details}`);
+    }
+}
+export async function seedWorkspace(baseUrl, token, workspaceId, projectDir, excludeDirs) {
+    const workspace = normalizeWorkspaceId(workspaceId);
+    const rootDir = path.resolve(projectDir);
+    const excludes = normalizeExcludeDirs([...DEFAULT_EXCLUDED_DIRS, ...excludeDirs]);
+    const seedPaths = [];
+    collectSeedPaths(rootDir, '', excludes, seedPaths);
+    const allFiles = seedPaths
+        .sort((left, right) => left.localeCompare(right))
+        .map((filePath) => buildSeedFilePayload(filePath, rootDir));
+    let seededCount = 0;
+    for (let index = 0; index < allFiles.length; index += BATCH_SIZE) {
+        const batch = allFiles.slice(index, index + BATCH_SIZE);
+        const batchIndex = Math.floor(index / BATCH_SIZE);
+        const result = await writeBulkWrite(baseUrl, token, workspace, batch, `seed-workspace-${workspace}-${Date.now()}-${batchIndex}`);
+        seededCount += result.written;
+    }
+    return seededCount;
+}
+function buildWorkflowAclRules(agents) {
+    const directories = new Set();
+    const normalizedAgents = agents.map((agent) => ({
+        name: String(agent.name ?? '').trim(),
+        acl: Object.fromEntries(Object.entries(agent.acl ?? {}).map(([dirPath, rules]) => [
+            normalizeAclDirectory(dirPath),
+            Array.isArray(rules) ? rules : [],
+        ])),
+    }));
+    const reviewerNames = normalizedAgents
+        .map((agent) => agent.name)
+        .filter((name) => name !== '' && isReviewerAgent(name));
+    for (const agent of normalizedAgents) {
+        for (const dirPath of Object.keys(agent.acl)) {
+            directories.add(dirPath);
+        }
+    }
+    const merged = new Map();
+    for (const dirPath of [...directories].sort((left, right) => left.localeCompare(right))) {
+        const rules = new Set();
+        for (const reviewerName of reviewerNames) {
+            rules.add(`allow:agent:${reviewerName}:read`);
+        }
+        for (const agent of normalizedAgents) {
+            if (!agent.name) {
+                continue;
+            }
+            const agentRules = agent.acl[dirPath] ?? [];
+            const hasRead = agentRules.includes('read') || agentRules.includes('write');
+            const hasWrite = agentRules.includes('write');
+            if (hasRead) {
+                rules.add(`allow:agent:${agent.name}:read`);
+            }
+            else if (!isReviewerAgent(agent.name)) {
+                rules.add(`deny:agent:${agent.name}`);
+            }
+            if (hasWrite) {
+                rules.add(`allow:agent:${agent.name}:write`);
+            }
+        }
+        if (rules.size > 0) {
+            merged.set(dirPath, rules);
+        }
+    }
+    return Object.fromEntries([...merged.entries()].map(([dirPath, rules]) => [dirPath, [...rules].sort()]));
+}
+export async function seedWorkflowAcls({ relayfileUrl, adminToken, workspace, agents, }) {
+    const aclRules = buildWorkflowAclRules(agents);
+    if (Object.keys(aclRules).length === 0) {
+        return;
+    }
+    await seedAclRules(relayfileUrl, adminToken, workspace, aclRules);
+}
+function getGitTrackedFiles(rootDir) {
+    try {
+        const output = execSync('git ls-files -z --cached --others --exclude-standard', {
+            cwd: rootDir,
+            encoding: 'utf-8',
+            maxBuffer: 50 * 1024 * 1024,
+        });
+        const files = output.split('\0').filter(Boolean);
+        return files;
+    }
+    catch {
+        return null;
+    }
+}
+function collectAllFiles(rootDir, excludeDirs) {
+    const files = [];
+    const stack = [''];
+    while (stack.length > 0) {
+        const currentRelative = stack.pop();
+        const absoluteDir = path.join(rootDir, currentRelative);
+        let entries;
+        try {
+            entries = fs.readdirSync(absoluteDir, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            if (excludeDirs.has(entry.name))
+                continue;
+            if (DEFAULT_EXCLUDED_FILES.has(entry.name))
+                continue;
+            const nextRelative = currentRelative ? `${currentRelative}/${entry.name}` : entry.name;
+            if (excludeDirs.has(nextRelative))
+                continue;
+            if (entry.isDirectory()) {
+                stack.push(nextRelative);
+            }
+            else if (entry.isFile()) {
+                files.push(nextRelative);
+            }
+        }
+    }
+    return files;
+}
+async function createTarBuffer(rootDir, files) {
+    const tarStream = tar.create({ gzip: true, cwd: rootDir, portable: true, follow: true }, files);
+    const chunks = [];
+    for await (const chunk of tarStream) {
+        chunks.push(Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks);
+}
+export async function seedWorkspaceTar(baseUrl, token, workspaceId, projectDir, excludeDirs) {
+    const workspace = normalizeWorkspaceId(workspaceId);
+    const rootDir = path.resolve(projectDir);
+    const excludes = normalizeExcludeDirs([...DEFAULT_EXCLUDED_DIRS, ...excludeDirs]);
+    const gitFiles = getGitTrackedFiles(rootDir);
+    const rawFiles = gitFiles ?? collectAllFiles(rootDir, excludes);
+    const files = gitFiles
+        ? rawFiles.filter((f) => {
+            const segments = f.split('/');
+            if (DEFAULT_EXCLUDED_FILES.has(segments[segments.length - 1]))
+                return false;
+            return !segments.some((seg) => excludes.has(seg));
+        })
+        : rawFiles;
+    if (files.length === 0) {
+        return 0;
+    }
+    const tarball = await createTarBuffer(rootDir, files);
+    const url = `${normalizeBaseUrl(baseUrl)}/v1/workspaces/${encodeURIComponent(workspace)}/fs/import`;
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${token}`,
+            'Content-Type': 'application/gzip',
+            'X-Correlation-Id': `seed-tar-${workspace}-${Date.now()}`,
+        },
+        body: tarball.buffer.slice(tarball.byteOffset, tarball.byteOffset + tarball.byteLength),
+    });
+    if (response.status === 404) {
+        // Tar import not supported — fall back to batch upload
+        return seedWorkspace(baseUrl, token, workspaceId, projectDir, excludeDirs);
+    }
+    if (!response.ok) {
+        const body = await response.text().catch(() => '');
+        throw new Error(`tar import failed for workspace ${workspace}: HTTP ${response.status} ${body}`.trim());
+    }
+    const raw = await response.text();
+    if (!raw.trim()) {
+        return files.length;
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        return typeof parsed.imported === 'number' ? parsed.imported : files.length;
+    }
+    catch {
+        return files.length;
+    }
+}
+//# sourceMappingURL=seeder.js.map

package/dist/provisioner/seeder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seeder.js","sourceRoot":"","sources":["../../src/provisioner/seeder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAoB3B,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AACjE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC;AACxE,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAc9D,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,OAAO,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,GAAG,EAAE,CAAC;IACR,CAAC;IACD,OAAO,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAmB;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAqB;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;aACjC,IAAI,EAAE;aACN,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SACrC,IAAI,EAAE;SACN,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAExB,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,OAAO,IAAI,eAAe,CAAC;QACzB,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC;QAClC,KAAK;QACL,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC;QACH,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,OAAe;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACvF,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAe,EACf,eAAuB,EACvB,WAAwB,EACxB,MAAgB;IAEhB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,eAAe,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACvF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEtD,IAAI,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC/C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACrE,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACvB,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;oBAC7D,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;oBAClB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgB;IAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,OAAiC,CAAC;IACjD,OAAO;QACL,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChE,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,OAAe,EACf,KAAa,EACb,WAAmB,EACnB,KAAiB,EACjB,aAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,gBAAgB,CAAC,OAAO,CAAC,kBAAkB,kBAAkB,CAAC,WAAW,CAAC,UAAU,EACvF;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;YAClC,kBAAkB,EAAE,aAAa;SAClC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;KAChC,CACF,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,4BAA4B,WAAW,UAAU,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAe,EACf,KAAa,EACb,WAAmB,EACnB,KAAiB,EACjB,aAAqB;IAErB,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC;YACtC,WAAW;YACX,KAAK;YACL,aAAa;SACd,CAAC,CAAC;QACH,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAQ,KAA6B,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAe,EACf,KAAa,EACb,WAAmB;IAEnB,MAAM,SAAS,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAE5C,MAAM,oBAAoB,GAAG,MAE5B,CAAC;IACF,IAAI,OAAO,oBAAoB,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QAC/D,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YAClG,IAAI,CAAC;gBACH,MAAM,oBAAoB,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC9D,MAAM,cAAc,GAAkC;QACpD,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,SAAS,EAAE,SAAS,EAAE;QACxB,EAAE,WAAW,EAAE,SAAS,EAAE;QAC1B,EAAE,EAAE,EAAE,SAAS,EAAE;KAClB,CAAC;IACF,IAAI,WAAW,GAAkB,IAAI,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,cAAc,EAAE,kBAAkB;oBAClC,kBAAkB,EAAE,oBAAoB,IAAI,CAAC,GAAG,EAAE,EAAE;iBACrD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YAEH,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,QAAQ,CAAC,MAAM,KAAK,GAAG,EACvB,CAAC;gBACD,OAAO;YACT,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3D,WAAW,GAAG,QAAQ,QAAQ,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC;YAC/D,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrD,SAAS;YACX,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,KAAK,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,KAAa,EACb,WAAmB,EACnB,QAAkC;IAElC,MAAM,SAAS,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE;QAC9D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;aACxC,IAAI,EAAE;aACN,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvB,MAAM,OAAO,GACX,aAAa,KAAK,EAAE,IAAI,aAAa,KAAK,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,aAAa,iBAAiB,CAAC;QACxG,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9D,QAAQ,EAAE,OAAgB;SAC3B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,OAAO,EACP,KAAK,EACL,SAAS,EACT,KAAK,EACL,YAAY,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CACtC,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,UAAU,2BAA2B,SAAS,KAAK,OAAO,EAAE,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,KAAa,EACb,WAAmB,EACnB,UAAkB,EAClB,WAAqB;IAErB,MAAM,SAAS,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,CAAC,GAAG,qBAAqB,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;IAClF,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,gBAAgB,CAAC,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,SAAS;SACvB,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SAChD,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAE9D,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,UAAU,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,UAAU,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,OAAO,EACP,KAAK,EACL,SAAS,EACT,KAAK,EACL,kBAAkB,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAC1D,CAAC;QACF,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC;IAChC,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA0B;IACvD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACrC,GAAG,EAAE,MAAM,CAAC,WAAW,CACrB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YACxD,qBAAqB,CAAC,OAAO,CAAC;YAC9B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;SAClC,CAAC,CACH;KACF,CAAC,CAAC,CAAC;IACJ,MAAM,aAAa,GAAG,gBAAgB;SACnC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IAE1D,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE9C,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAEhC,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;YACzC,KAAK,CAAC,GAAG,CAAC,eAAe,YAAY,OAAO,CAAC,CAAC;QAChD,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC5E,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAE9C,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,KAAK,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACxC,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,YAAY,EACZ,UAAU,EACV,SAAS,EACT,MAAM,GACkB;IACxB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAE/C,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO;IACT,CAAC;IAED,MAAM,YAAY,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACpE,CAAC;AAQD,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,sDAAsD,EAAE;YAC9E,GAAG,EAAE,OAAO;YACZ,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,WAAwB;IAChE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;IAEnB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,eAAe,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACxD,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC1C,IAAI,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACrD,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,eAAe,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACvF,IAAI,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC;gBAAE,SAAS;YAE5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,KAAe;IAC7D,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAChG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,KAAa,EACb,WAAmB,EACnB,UAAkB,EAClB,WAAqB;IAErB,MAAM,SAAS,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,CAAC,GAAG,qBAAqB,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;IAElF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,QAAQ,IAAI,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,QAAQ;QACpB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC5E,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC;QACJ,CAAC,CAAC,QAAQ,CAAC;IAEb,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEtD,MAAM,GAAG,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,kBAAkB,kBAAkB,CAAC,SAAS,CAAC,YAAY,CAAC;IACpG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;YAClC,kBAAkB,EAAE,YAAY,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;SAC1D;QACD,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAgB;KACvG,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,uDAAuD;QACvD,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,UAAU,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACtD,OAAO,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/provisioner/token.d.ts

@@ -0,0 +1,38 @@
+export declare const DEFAULT_WORKFLOW_TOKEN_TTL_SECONDS: number;
+export declare const DEFAULT_ADMIN_AGENT_NAME = "relay-admin";
+export declare const DEFAULT_ADMIN_SCOPES: string[];
+export interface TokenClaims {
+    sub: string;
+    org: string;
+    wks: string;
+    workspace_id: string;
+    agent_name: string;
+    scopes: string[];
+    sponsorId: string;
+    sponsorChain: string[];
+    token_type: string;
+    iss: string;
+    aud: string[];
+    iat: number;
+    exp: number;
+    jti: string;
+}
+export interface MintAgentTokenOptions {
+    secret: string;
+    agentName: string;
+    workspace: string;
+    scopes: string[];
+    ttlSeconds?: number;
+}
+export declare function mintAgentToken(opts: MintAgentTokenOptions): string;
+export declare class WorkflowTokenFactory {
+    private readonly secret;
+    private readonly workspace;
+    private readonly tokens;
+    private readonly ttlSeconds;
+    constructor(secret: string, workspace: string, ttlSeconds?: number);
+    mintForAgent(agentName: string, scopes: string[], ttlSeconds?: number): string;
+    mintAdmin(ttlSeconds?: number): string;
+    getToken(agentName: string): string | undefined;
+}
+//# sourceMappingURL=token.d.ts.map

package/dist/provisioner/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/provisioner/token.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kCAAkC,QAAc,CAAC;AAC9D,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AACtD,eAAO,MAAM,oBAAoB,UAShC,CAAC;AAIF,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAcD,wBAAgB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAuBlE;AAED,qBAAa,oBAAoB;IAK7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAL5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAGjB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EAClC,UAAU,SAAqC;IAKjD,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,UAAU,SAAkB,GAAG,MAAM;IAavF,SAAS,CAAC,UAAU,SAAkB,GAAG,MAAM;IAI/C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;CAGhD"}

package/dist/provisioner/token.js

@@ -0,0 +1,74 @@
+import { createHmac, randomUUID } from 'node:crypto';
+export const DEFAULT_WORKFLOW_TOKEN_TTL_SECONDS = 2 * 60 * 60;
+export const DEFAULT_ADMIN_AGENT_NAME = 'relay-admin';
+export const DEFAULT_ADMIN_SCOPES = [
+    'relayauth:*:manage:*',
+    'relayauth:*:read:*',
+    'relayfile:*:*:*',
+    'fs:read',
+    'fs:write',
+    'sync:trigger',
+    'ops:read',
+    'admin:read',
+];
+const JWT_HEADER = { alg: 'HS256', typ: 'JWT' };
+function base64urlEncode(value) {
+    return Buffer.from(JSON.stringify(value)).toString('base64url');
+}
+function normalizeTtlSeconds(ttlSeconds) {
+    if (ttlSeconds === undefined) {
+        return DEFAULT_WORKFLOW_TOKEN_TTL_SECONDS;
+    }
+    return Math.max(1, Math.floor(ttlSeconds));
+}
+export function mintAgentToken(opts) {
+    const now = Math.floor(Date.now() / 1000);
+    const payload = {
+        sub: `agent_${opts.agentName}`,
+        org: 'org_relay',
+        wks: opts.workspace,
+        workspace_id: opts.workspace,
+        agent_name: opts.agentName,
+        scopes: [...opts.scopes],
+        sponsorId: 'relay-local',
+        sponsorChain: ['relay-local'],
+        token_type: 'access',
+        iss: 'relayauth:local',
+        aud: ['relayauth', 'relayfile'],
+        iat: now,
+        exp: now + normalizeTtlSeconds(opts.ttlSeconds),
+        jti: `tok-${now}-${randomUUID()}`,
+    };
+    const unsigned = `${base64urlEncode(JWT_HEADER)}.${base64urlEncode(payload)}`;
+    const signature = createHmac('sha256', opts.secret).update(unsigned).digest('base64url');
+    return `${unsigned}.${signature}`;
+}
+export class WorkflowTokenFactory {
+    secret;
+    workspace;
+    tokens = new Map();
+    ttlSeconds;
+    constructor(secret, workspace, ttlSeconds = DEFAULT_WORKFLOW_TOKEN_TTL_SECONDS) {
+        this.secret = secret;
+        this.workspace = workspace;
+        this.ttlSeconds = normalizeTtlSeconds(ttlSeconds);
+    }
+    mintForAgent(agentName, scopes, ttlSeconds = this.ttlSeconds) {
+        const token = mintAgentToken({
+            secret: this.secret,
+            workspace: this.workspace,
+            agentName,
+            scopes,
+            ttlSeconds,
+        });
+        this.tokens.set(agentName, token);
+        return token;
+    }
+    mintAdmin(ttlSeconds = this.ttlSeconds) {
+        return this.mintForAgent(DEFAULT_ADMIN_AGENT_NAME, DEFAULT_ADMIN_SCOPES, ttlSeconds);
+    }
+    getToken(agentName) {
+        return this.tokens.get(agentName);
+    }
+}
+//# sourceMappingURL=token.js.map

package/dist/provisioner/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/provisioner/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,aAAa,CAAC;AACtD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,sBAAsB;IACtB,oBAAoB;IACpB,iBAAiB;IACjB,SAAS;IACT,UAAU;IACV,cAAc;IACd,UAAU;IACV,YAAY;CACb,CAAC;AAEF,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAW,CAAC;AA2BzD,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAmB;IAC9C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAA2B;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAgB;QAC3B,GAAG,EAAE,SAAS,IAAI,CAAC,SAAS,EAAE;QAC9B,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,IAAI,CAAC,SAAS;QACnB,YAAY,EAAE,IAAI,CAAC,SAAS;QAC5B,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACxB,SAAS,EAAE,aAAa;QACxB,YAAY,EAAE,CAAC,aAAa,CAAC;QAC7B,UAAU,EAAE,QAAQ;QACpB,GAAG,EAAE,iBAAiB;QACtB,GAAG,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;QAC/B,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;QAC/C,GAAG,EAAE,OAAO,GAAG,IAAI,UAAU,EAAE,EAAE;KAClC,CAAC;IAEF,MAAM,QAAQ,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEzF,OAAO,GAAG,QAAQ,IAAI,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,OAAO,oBAAoB;IAKZ;IACA;IALF,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnC,UAAU,CAAS;IAEpC,YACmB,MAAc,EACd,SAAiB,EAClC,UAAU,GAAG,kCAAkC;QAF9B,WAAM,GAAN,MAAM,CAAQ;QACd,cAAS,GAAT,SAAS,CAAQ;QAGlC,IAAI,CAAC,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IAED,YAAY,CAAC,SAAiB,EAAE,MAAgB,EAAE,UAAU,GAAG,IAAI,CAAC,UAAU;QAC5E,MAAM,KAAK,GAAG,cAAc,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS;YACT,MAAM;YACN,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;QACpC,OAAO,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,oBAAoB,EAAE,UAAU,CAAC,CAAC;IACvF,CAAC;IAED,QAAQ,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;CACF"}