@arbium/enterprise-agent-connect 0.0.0-stage → 0.1.1

package/dist/packages/connector-kit/src/common.js

@@ -0,0 +1,107 @@
+/** One app's tools from several sets, e.g. SharePoint's files and spreadsheets. */
+export const toolsets = (...sets) => ({
+    names: sets.flatMap((s) => s.names),
+    register: (server, ctx, allowed) => sets.forEach((s) => s.register(server, ctx, allowed)),
+});
+// Refusal of a call the grant does not cover. Its message is returned to the agent.
+export class Denied extends Error {
+}
+// Non-2xx answer from the app. Its message is returned to the agent. `hintTool`: a call a tool
+// makes under another capability (always-on reads, say) names a tool of that capability, whose
+// `forbidden` is then the hint added to a 403.
+export class VendorFailed extends Error {
+    status;
+    hintTool;
+    constructor(status, message, hintTool) {
+        super(message);
+        this.status = status;
+        this.hintTool = hintTool;
+    }
+}
+export function listLimit(limits, id) {
+    const value = limits[id];
+    if (value === undefined)
+        return null;
+    if (!Array.isArray(value))
+        throw new Error(`Limit ${id} must be a list`);
+    return value.length ? value : null;
+}
+export function mapLimit(limits, id) {
+    const value = limits[id];
+    if (value === undefined)
+        return null;
+    if (typeof value !== "object" || Array.isArray(value))
+        throw new Error(`Limit ${id} must be a map`);
+    return Object.keys(value).length ? value : null;
+}
+export function textLimit(limits, id) {
+    const value = limits[id];
+    if (value === undefined || value === "")
+        return null;
+    if (typeof value !== "string")
+        throw new Error(`Limit ${id} must be text`);
+    return value;
+}
+// The audit target of a call refused before any tool ran: what it was sent, shortened.
+export const argumentsTarget = (args) => args === undefined ? null : JSON.stringify(args).slice(0, 300);
+export const json = (data) => ({
+    content: [{ type: "text", text: JSON.stringify(data, null, 2) }],
+});
+// Runs one tool call and writes its audit row whatever the outcome. `retarget` replaces the
+// audited target with what was actually sent, e.g. the project-scoped JQL.
+export async function audited(ctx, tool, target, run) {
+    let status = null;
+    const fail = (text) => ({
+        isError: true,
+        content: [{ type: "text", text }],
+    });
+    let result;
+    try {
+        result = await run((s) => (status = s), (sent) => (target = sent));
+    }
+    catch (error) {
+        if (error instanceof Denied) {
+            await ctx.audit({
+                tool,
+                target,
+                decision: "denied",
+                reason: error.message,
+                // Set when the app answered and the answer was refused, e.g. by an answer limit.
+                vendorStatus: status,
+            });
+            return fail(error.message);
+        }
+        if (error instanceof VendorFailed) {
+            const hint = error.status === 403 ? ctx.forbidden?.[error.hintTool ?? tool] : undefined;
+            const message = hint ? `${error.message.replace(/\.$/, "")}. ${hint}` : error.message;
+            await ctx.audit({
+                tool,
+                target,
+                decision: "failed",
+                reason: message.slice(0, 500),
+                vendorStatus: error.status,
+            });
+            return fail(message);
+        }
+        // Internal details (database, keys, config) stay in the log, not with the agent.
+        console.error(`[agent-connect] ${tool} failed`, error);
+        await ctx.audit({
+            tool,
+            target,
+            decision: "failed",
+            reason: "Internal error",
+            vendorStatus: status,
+        });
+        return fail("The call failed. Try again later.");
+    }
+    // The call already happened (mail sent, record deleted): a failed audit write must not
+    // tell the agent to repeat it.
+    try {
+        await ctx.audit({ tool, target, decision: "allowed", reason: null, vendorStatus: status });
+    }
+    catch (error) {
+        console.error(`[agent-connect] ${tool} audit write failed after a completed call`, error);
+    }
+    return result;
+}
+//# sourceMappingURL=common.js.map

package/dist/packages/connector-kit/src/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../../packages/connector-kit/src/common.ts"],"names":[],"mappings":"AA+BA,mFAAmF;AACnF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAe,EAAW,EAAE,CAAC,CAAC;IACxD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACnC,QAAQ,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;CAC1F,CAAC,CAAC;AAEH,oFAAoF;AACpF,MAAM,OAAO,MAAO,SAAQ,KAAK;CAAG;AAEpC,+FAA+F;AAC/F,+FAA+F;AAC/F,+CAA+C;AAC/C,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B;IAEA;IAHX,YACW,MAAc,EACvB,OAAe,EACN,QAAiB;QAE1B,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,WAAM,GAAN,MAAM,CAAQ;QAEd,aAAQ,GAAR,QAAQ,CAAS;IAG5B,CAAC;CACF;AAED,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,EAAU;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACzE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,EAAU;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,EAAU;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAa,EAAiB,EAAE,CAC9D,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAa,EAAkB,EAAE,CAAC,CAAC;IACtD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;CACjE,CAAC,CAAC;AAEH,4FAA4F;AAC5F,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAgB,EAChB,IAAY,EACZ,MAAqB,EACrB,GAG4B;IAE5B,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAkB,EAAE,CAAC,CAAC;QAC9C,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAClC,CAAC,CAAC;IACH,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAChB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EACnB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,MAAM,EAAE,CAAC;YAC5B,MAAM,GAAG,CAAC,KAAK,CAAC;gBACd,IAAI;gBACJ,MAAM;gBACN,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,KAAK,CAAC,OAAO;gBACrB,iFAAiF;gBACjF,YAAY,EAAE,MAAM;aACrB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YACtF,MAAM,GAAG,CAAC,KAAK,CAAC;gBACd,IAAI;gBACJ,MAAM;gBACN,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC7B,YAAY,EAAE,KAAK,CAAC,MAAM;aAC3B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,iFAAiF;QACjF,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,SAAS,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,GAAG,CAAC,KAAK,CAAC;YACd,IAAI;YACJ,MAAM;YACN,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,gBAAgB;YACxB,YAAY,EAAE,MAAM;SACrB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IACD,uFAAuF;IACvF,+BAA+B;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,4CAA4C,EAAE,KAAK,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/packages/connector-kit/src/connector.js

@@ -0,0 +1,492 @@
+import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { z } from "zod";
+import { fillBrandDeep } from "./branding.js";
+// A connector describes one app agents can use: how an admin connects it, the capabilities
+// they can grant (each a set of tools), the value limits a grant can carry, and how a
+// connection is checked. Each app is a folder in connectors/: its connector.json, and the
+// ConnectorModule (index.ts) with its vendor client and tools.
+const text = z.string().min(1);
+const slug = z.string().regex(/^[a-z][a-z0-9_]*$/);
+const settingSchema = z
+    .object({
+    id: z.string().regex(/^[a-z][A-Za-z]+$/),
+    label: text,
+    help: text.optional(),
+    placeholder: text.optional(),
+    // The whole value must match.
+    pattern: text,
+})
+    .strict();
+// One option of a choice field (`options`), e.g. add_to_teams = on.
+const chosenSchema = z.object({ field: slug, value: slug }).strict();
+const stepSchema = z
+    .object({
+    title: text,
+    body: text,
+    link: z.object({ label: text, href: z.url() }).strict().optional(),
+    // A line containing {scope} repeats once per scope; {scopes} becomes them space-separated.
+    copy: z.array(text).optional(),
+    // The shell `copy` runs in, named above the commands.
+    shell: z.enum(["bash", "powershell"]).optional(),
+    // Lists the in-app permissions the ticked capabilities need, e.g. Jira project permissions.
+    permissions: z.boolean().optional(),
+    // Shows the certificate the service made for the provider connection, to download.
+    certificate: z.boolean().optional(),
+    // The same step in the vendor's admin portals, one screen or choice per item. A step with
+    // both `click` and `copy` is offered both ways.
+    click: z.array(text).min(1).optional(),
+    // The vendor has no portal page for this step, only commands (`copy`): the admin page says
+    // so in place of clicks. Never with `click`, so a step cannot pass as clickable by a
+    // "use the commands" line.
+    clickUnavailable: z.literal(true).optional(),
+    // A site grant step shown only while the site role the ceiling needs is this one, e.g.
+    // raising a read grant to write.
+    siteRole: z.enum(["read", "write"]).optional(),
+    // Shows the live check of the agent's own address (`agentAccess`) after this step.
+    agentCheck: z.boolean().optional(),
+    // The service cannot check this step live, so the admin marks it done. Steps of different apps
+    // with the same id share that mark (e.g. one group both Outlook apps use).
+    confirm: z
+        .string()
+        .regex(/^[a-z0-9-]+$/)
+        .optional(),
+    // Checked live by the app's own setup check under this id (e.g. Teams' Azure role), not by
+    // the permissions check.
+    live: z
+        .string()
+        .regex(/^[a-z0-9-]+$/)
+        .optional(),
+    // Values the admin enters at this step, kept in the provider connection's config under
+    // their ids and filled into steps as {id} (e.g. the Azure subscription for Teams bots).
+    settings: z.array(settingSchema).min(1).optional(),
+    // Shown, and holding back turning on, only while this option is chosen (e.g. Teams' Azure
+    // steps only while the service makes the bots).
+    option: chosenSchema.optional(),
+})
+    .strict();
+// A step of adding one more agent on a provider's page, shown while one of `apps` is on.
+const agentStepSchema = stepSchema
+    .extend({ apps: z.array(z.string().regex(/^[a-z0-9-]+$/)).min(1) })
+    .strict();
+const clickRule = [
+    (s) => !s.clickUnavailable || (!s.click && Boolean(s.copy)),
+    { message: "A step with clickUnavailable has commands (copy) and no click" },
+];
+const step = stepSchema.refine(...clickRule);
+const agentStep = agentStepSchema.refine(...clickRule);
+// A field with `options` is a choice (the first is the default), stored in the app's config
+// under its id. An option's `scopes` are vendor permissions the app then needs too, e.g.
+// reading every site.
+const optionSchema = z
+    .object({ value: slug, label: text, description: text, scopes: z.array(text).optional() })
+    .strict();
+const fieldSchema = z
+    .object({
+    id: slug,
+    label: text,
+    help: text.optional(),
+    placeholder: text.optional(),
+    secret: z.boolean(),
+    options: z.array(optionSchema).min(2).optional(),
+    // Asked only while an earlier choice is this option; otherwise its first option holds.
+    requires: chosenSchema.optional(),
+})
+    .strict();
+// "map": one optional value per value of the list limit `keys`, e.g. a folder per site.
+const limitSchema = z
+    .object({
+    id: slug,
+    label: text,
+    help: text,
+    kind: z.enum(["list", "text", "map"]),
+    required: z.boolean(),
+    // Each value must match this, e.g. a Jira project key or a mailbox address.
+    pattern: z.string().optional(),
+    keys: slug.optional(),
+})
+    .strict()
+    .refine((l) => (l.kind === "map") === Boolean(l.keys), {
+    message: "A map limit names the list limit it is keyed by (keys), and only it",
+});
+const httpProbeSchema = z
+    .object({
+    method: z.enum(["GET", "POST"]),
+    path: z.string().startsWith("/"),
+    label: text,
+    show: text,
+    // Keeps only list items whose fields equal these values, e.g. objects agents can query.
+    match: z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])).optional(),
+    body: z.record(z.string(), z.unknown()).optional(),
+    // Shown to the admin when the probe finds nothing, e.g. a missing project permission.
+    ifEmpty: text.optional(),
+})
+    .strict();
+// A check no single API call answers, e.g. the permissions inside a token. The vendor client
+// implements it under this name (Vendor.checks).
+const vendorProbeSchema = z
+    .object({
+    label: text,
+    check: slug,
+    ifEmpty: text.optional(),
+})
+    .strict();
+const probeSchema = z.union([httpProbeSchema, vendorProbeSchema]);
+// An app described entirely here, e.g. a company's internal REST API: the generic http module
+// (connectors/http) runs it, so it needs no code. Auth values are the ids of connect form fields.
+const httpAuthSchema = z.discriminatedUnion("type", [
+    z
+        .object({ type: z.literal("header"), header: z.string().regex(/^[A-Za-z0-9-]+$/), value: slug })
+        .strict(),
+    z.object({ type: z.literal("bearer"), token: slug }).strict(),
+    z.object({ type: z.literal("basic"), username: slug, password: slug }).strict(),
+    z
+        .object({
+        type: z.literal("oauth2"),
+        tokenUrl: z.url({ protocol: /^https?$/ }),
+        clientId: slug,
+        clientSecret: slug,
+    })
+        .strict(),
+]);
+const httpParamSchema = z
+    .object({
+    type: z.enum(["string", "number", "integer", "boolean"]),
+    description: text,
+    // Where it goes; a {name} in the path template is always "path".
+    in: z.enum(["path", "query", "body"]),
+    required: z.boolean().default(true),
+    // The value must be one of the agent's values of this list limit, while it has any.
+    limit: slug.optional(),
+})
+    .strict();
+const httpToolSchema = z
+    .object({
+    name: slug,
+    description: text,
+    method: z.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]),
+    // Under baseUrl, with {param} for path params, e.g. /orders/{id}.
+    path: z.string().regex(/^\/[^?#]*$/),
+    params: z.record(slug, httpParamSchema).default({}),
+    // Deletes or overwrites: its capability must be destructive. DELETE always is.
+    destructive: z.boolean().default(false),
+    // Checked in the answer, for calls whose params cannot be limited (e.g. an order by id):
+    // while the agent has values of `limit`, the answer's `field` (a dot path; every item of a
+    // list) must be one of them, else nothing is returned. A missing field is refused.
+    answerLimits: z
+        .array(z
+        .object({ field: z.string().regex(/^[A-Za-z0-9_]+(\.[A-Za-z0-9_]+)*$/), limit: slug })
+        .strict())
+        .default([]),
+})
+    .strict()
+    .refine((t) => {
+    const inPath = [...t.path.matchAll(/\{([a-z][a-z0-9_]*)\}/g)].map((m) => m[1]);
+    const declared = Object.entries(t.params).filter(([, p]) => p.in === "path");
+    return (inPath.every((n) => t.params[n]?.in === "path" && t.params[n].required) &&
+        declared.every(([n]) => inPath.includes(n)));
+}, { message: "Each {param} in a tool's path is a required path param, and only those" })
+    .refine((t) => !Object.values(t.params).some((p) => p.in === "body") || t.method !== "GET", {
+    message: "A GET tool has no body params",
+})
+    // Checked after the call, so only for reads: a write would already have happened.
+    .refine((t) => !t.answerLimits.length || t.method === "GET", {
+    message: "answerLimits are for GET tools only",
+});
+const httpSchema = z
+    .object({
+    // Every call goes to this origin, under this path, and nowhere else: redirects are refused.
+    baseUrl: z.url({ protocol: /^https?$/ }).refine((u) => !/[?#]/.test(u), "No query or fragment"),
+    auth: httpAuthSchema,
+    tools: z.array(httpToolSchema).min(1),
+    // Plain http for baseUrl and the token URL, e.g. an app inside the cluster. Off by default.
+    allowInsecureHttp: z.boolean().default(false),
+})
+    .strict()
+    .refine((h) => h.allowInsecureHttp ||
+    [h.baseUrl, ...(h.auth.type === "oauth2" ? [h.auth.tokenUrl] : [])].every((u) => u.startsWith("https://")), { message: "baseUrl and tokenUrl must be https unless allowInsecureHttp is true" });
+export const connectorSchema = z
+    .object({
+    id: z.string().regex(/^[a-z0-9-]+$/),
+    name: text,
+    description: text,
+    // A path under the admin app's public folder.
+    logo: z.string().regex(/^\/brand\/[a-z0-9/-]+\.svg$/),
+    identity: text,
+    // "agentBot": calls go out as the agent's own identity (its Teams bot), not the provider's
+    // shared sign-in. A grant only gives tools once that agent has a connected bot.
+    signsInAs: z.enum(["agentBot"]).optional(),
+    // A provider connection (providers/<id>.json) this app signs in through, shared with the
+    // provider's other apps: its credentials are entered once, not per app.
+    provider: z
+        .string()
+        .regex(/^[a-z0-9-]+$/)
+        .optional(),
+    // Position among its provider's apps on the Integrations tab, where they are grouped.
+    order: z.number().int().optional(),
+    connectionKind: z.enum(["guided"]),
+    // The connection config value naming the account reached (site, org, tenant). Agents'
+    // grants are cleared when a reconnect reaches a different one.
+    accountKey: z.string().regex(/^[A-Za-z]+$/),
+    // Vendor scopes every ceiling needs, whatever is ticked (e.g. what adding agents' Teams
+    // bots takes), filled into {scope}/{scopes} with the capabilities' own.
+    scopes: z.array(text).optional(),
+    setup: z.array(step),
+    afterConnect: z.array(step),
+    fields: z.array(fieldSchema),
+    capabilities: z
+        .array(z
+        .object({
+        id: slug,
+        label: text,
+        description: text,
+        // Always on: every connection and every agent has it.
+        required: z.boolean().default(false),
+        // Off unless the admin confirms a warning.
+        destructive: z.boolean().default(false),
+        // Spends money on the account (e.g. buys shipping labels): shown as that instead
+        // of "Deletes data". Destructive too, so it still asks first.
+        costs: z.boolean().optional(),
+        // Vendor scopes or roles, filled into {scope}/{scopes} in setup steps.
+        scopes: z.array(text),
+        // The permissions a provider's access token must carry for this capability, when
+        // they are not `scopes` (e.g. mail scopes are Exchange roles, not token roles).
+        roles: z.array(text).optional(),
+        // Permissions granted inside the app, listed by steps with `permissions`.
+        permissions: z.array(text),
+        // Values for {name} placeholders in setup steps while this capability is ticked;
+        // a later ticked capability overrides an earlier one (e.g. site role read → write).
+        fill: z.record(z.string().regex(/^[a-z_]+$/), text).optional(),
+        // A caution shown with the checkbox, e.g. that it reaches the whole organization.
+        note: text.optional(),
+        // Added to the agent's error when the app answers 403 to one of its tools: what
+        // Microsoft (or the vendor) still needs, with {scopes} filled.
+        forbidden: text.optional(),
+        // Its answers use the organization's Claude API key, a setup step while ticked.
+        claudeKey: z.boolean().optional(),
+        tools: z.array(slug).min(1),
+    })
+        .strict()
+        .refine((c) => !(c.required && c.destructive), {
+        message: "A required capability cannot be destructive",
+    })
+        .refine((c) => !c.costs || c.destructive, {
+        message: "A capability that spends money must be destructive, so it asks first",
+    }))
+        .min(1),
+    limits: z.array(limitSchema),
+    // Sites the admin adds one at a time after connecting (config.sites), each given to the
+    // app outside the service. `grant`: steps showing how, with {site}, {siteHost} and {sitePath}
+    // filled per site; `request`: a note to send IT asking for it.
+    // `write`: the capabilities that need write access to each site, so Check access also
+    // proves the app can change files there while one of them is in the ceiling.
+    siteAccess: z
+        .object({
+        grant: z.array(step).min(1),
+        request: text,
+        write: z.array(slug).default([]),
+    })
+        .strict()
+        .optional(),
+    // Each agent's own address in this app (e.g. its mailbox), held in the text limit `limit`.
+    // `path` (with {value}) is read with the app's sign-in to show whether the app can reach
+    // it yet; `label` names that check; the messages answer 2xx, 401/403, 404.
+    agentAccess: z
+        .object({
+        limit: slug,
+        label: text,
+        path: z.string().startsWith("/").includes("{value}"),
+        granted: text,
+        notGranted: text,
+        notFound: text,
+        // Per capability: a call that proves the app may also do that there, changing
+        // nothing (Exchange refuses a missing role with 401/403 before reading the body).
+        // `allowed`: the statuses that mean it may. `missing` names those it may not yet,
+        // {missing} filled with their labels and roles.
+        probes: z
+            .record(slug, z
+            .object({
+            method: z.enum(["GET", "POST", "PATCH"]),
+            path: z.string().startsWith("/").includes("{value}"),
+            body: z.unknown().optional(),
+            allowed: z.array(z.number().int()).min(1),
+        })
+            .strict())
+            .default({}),
+        missing: text.optional(),
+    })
+        .strict()
+        .optional(),
+    verify: probeSchema,
+    discover: probeSchema.optional(),
+    revoke: text,
+    http: httpSchema.optional(),
+})
+    .strict()
+    .refine((c) => {
+    if (!c.http)
+        return true;
+    const field = (id, secret) => c.fields.some((f) => f.id === id && f.secret === secret && !f.options);
+    const a = c.http.auth;
+    const secretsOk = a.type === "header"
+        ? field(a.value, true)
+        : a.type === "bearer"
+            ? field(a.token, true)
+            : a.type === "basic"
+                ? field(a.username, false) && field(a.password, true)
+                : field(a.clientId, false) && field(a.clientSecret, true);
+    const lists = new Set(c.limits.filter((l) => l.kind === "list").map((l) => l.id));
+    return (secretsOk &&
+        !c.provider &&
+        (c.accountKey === "host" || c.fields.some((f) => f.id === c.accountKey && !f.secret)) &&
+        c.http.tools.every((t) => Object.values(t.params).every((p) => !p.limit || lists.has(p.limit)) &&
+            t.answerLimits.every((a) => lists.has(a.limit))));
+}, {
+    message: "An http app's auth names its fields (secrets as secret fields), its accountKey is host or a plain field, a param's or answer's limit names a list limit, and it has no provider",
+})
+    .refine((c) => !c.agentAccess || c.limits.some((l) => l.id === c.agentAccess.limit && l.kind === "text"), { message: "agentAccess.limit must be one of the connector's text limits" })
+    .refine((c) => [...Object.keys(c.agentAccess?.probes ?? {}), ...(c.siteAccess?.write ?? [])].every((id) => c.capabilities.some((x) => x.id === id)) &&
+    (!Object.keys(c.agentAccess?.probes ?? {}).length || c.agentAccess?.missing !== undefined), { message: "agentAccess probes and siteAccess.write name capabilities; probes need missing" })
+    .refine((c) => new Set(c.fields.map((f) => f.id)).size === c.fields.length, {
+    message: "Field ids must be unique",
+})
+    .refine((c) => new Set(c.capabilities.map((l) => l.id)).size === c.capabilities.length, {
+    message: "Capability ids must be unique",
+})
+    .refine((c) => {
+    const tools = c.capabilities.flatMap((l) => l.tools);
+    return new Set(tools).size === tools.length;
+}, { message: "A tool belongs to one capability only" })
+    .refine((c) => c.provider !== undefined || ![...c.setup, ...c.afterConnect].some((s) => s.settings), { message: "Step settings are kept on a provider connection: only a provider's app has them" })
+    .refine((c) => {
+    const isOption = (o, fields) => fields.some((f) => f.id === o.field && f.options?.some((x) => x.value === o.value));
+    return ([...c.setup, ...c.afterConnect].every((s) => !s.option || isOption(s.option, c.fields)) &&
+        c.fields.every((f, i) => !f.requires || (f.options && isOption(f.requires, c.fields.slice(0, i)))));
+}, { message: "A step's option and a field's requires name an option of an earlier choice" })
+    .refine((c) => c.provider !== undefined || c.fields.length > 0, {
+    message: "A guided connector needs connect form fields",
+})
+    .refine((c) => c.limits.every((l, i) => !l.keys || c.limits.slice(0, i).some((k) => k.id === l.keys && k.kind === "list")), { message: "A map limit's keys must be a list limit listed before it" });
+// One sign-in shared by several apps, e.g. a customer's Microsoft Entra app used by mail and
+// files. Its setup steps are shown with the first of its apps the admin connects.
+export const providerSchema = z
+    .object({
+    id: z.string().regex(/^[a-z0-9-]+$/),
+    name: text,
+    logo: z.string().regex(/^\/brand\/[a-z0-9/-]+\.svg$/),
+    identity: text,
+    // `identity` while the connection uses the deployment's shared app instead of the customer's own.
+    sharedIdentity: text.optional(),
+    accountKey: z.string().regex(/^[A-Za-z]+$/),
+    // Config values naming who signs in (e.g. the app and its service principal). A change in
+    // any, like a change of account, disconnects the provider's apps: what the admin granted
+    // outside the service (mailbox roles, site grants) belongs to the old one.
+    principalKeys: z.array(z.string().regex(/^[A-Za-z]+$/)).default([]),
+    // The service can make a key pair whose certificate the admin uploads to their app.
+    certificate: z.boolean(),
+    setup: z.array(step),
+    fields: z.array(fieldSchema.extend({ optional: z.boolean().default(false) }).strict()).min(1),
+    // What one more agent needs outside the service (e.g. its mailbox), shown when its API key is
+    // made with one of the apps each step names.
+    addAgent: z.array(agentStep).default([]),
+    revoke: text,
+})
+    .strict();
+/** The repo's connectors/ folder, beside packages/ (and so beside dist/packages/ once built). */
+export const CONNECTORS_DIR = new URL("../../../connectors/", import.meta.url);
+// Each subfolder of dir holding `file` is one definition, whose id is the folder's name.
+// Subfolders may be links: Kubernetes mounts ConfigMap and Secret folders that way.
+function loadDir(dir, file, schema) {
+    return readdirSync(dir)
+        .filter((name) => existsSync(new URL(`${name}/${file}`, dir)))
+        .sort()
+        .map((name) => {
+        const where = `${name}/${file}`;
+        const raw = JSON.parse(readFileSync(new URL(where, dir), "utf8"));
+        let filled;
+        try {
+            filled = fillBrandDeep(raw);
+        }
+        catch (error) {
+            throw new Error(`${where}: ${error.message}`);
+        }
+        const parsed = schema.safeParse(filled);
+        if (!parsed.success)
+            throw new Error(`${where}: ${z.prettifyError(parsed.error)}`);
+        if (parsed.data.id !== name)
+            throw new Error(`${where}: id must match the folder name`);
+        return parsed.data;
+    });
+}
+export function loadConnectors(dir = CONNECTORS_DIR) {
+    return loadDir(dir, "connector.json", connectorSchema);
+}
+export function loadProviders(dir = CONNECTORS_DIR) {
+    return loadDir(dir, "provider.json", providerSchema);
+}
+/** The ids of an app's choice fields: what its connection keeps from the admin's form. */
+export const choiceFields = (connector) => connector.fields.filter((f) => f.options).map((f) => f.id);
+/** The option chosen for each choice field: the stored one, else the first, which also holds
+ *  while the earlier choice it `requires` is not made. */
+export function chosenOptions(connector, config = {}) {
+    const chosen = {};
+    return connector.fields.flatMap((f) => {
+        if (!f.options)
+            return [];
+        const asked = !f.requires || chosen[f.requires.field] === f.requires.value;
+        const option = (asked && f.options.find((o) => o.value === config[f.id])) || f.options[0];
+        chosen[f.id] = option.value;
+        return [option];
+    });
+}
+/** The permissions a provider's token needs for these capabilities and the chosen options. */
+export function tokenRolesFor(connector, capabilities, config = {}) {
+    return [
+        ...new Set([
+            ...(connector.scopes ?? []),
+            ...connector.capabilities
+                .filter((c) => capabilities.includes(c.id))
+                .flatMap((c) => c.roles ?? c.scopes),
+            ...chosenOptions(connector, config).flatMap((o) => o.scopes ?? []),
+        ]),
+    ];
+}
+// What an agent may actually do: its capabilities that the connection also allows.
+export function effectiveCapabilities(connector, grant, ceiling) {
+    return connector.capabilities.filter((c) => grant.includes(c.id) && ceiling.includes(c.id));
+}
+// Keys of a provider connection's own config, which a setting saved beside them must not replace.
+const RESERVED_SETTINGS = new Set(["tenantId", "clientId", "auth", "certificate", "sites"]);
+/** The settings a provider's apps ask for in their steps, by id. */
+export function providerSettings(connectors, provider) {
+    const out = new Map();
+    for (const c of connectors)
+        if (c.provider === provider)
+            for (const s of [...c.setup, ...c.afterConnect])
+                for (const setting of s.settings ?? []) {
+                    if (RESERVED_SETTINGS.has(setting.id))
+                        throw new Error(`${c.id}: setting id ${setting.id} is the connection's own`);
+                    out.set(setting.id, setting);
+                }
+    return out;
+}
+export function expandCopy(lines, scopes) {
+    return lines
+        .flatMap((line) => line.includes("{scope}") ? scopes.map((s) => line.replaceAll("{scope}", s)) : [line])
+        .map((line) => line.replaceAll("{scopes}", scopes.join(" ")))
+        .join("\n");
+}
+// Reads `a.b` / `values[].name` paths out of a JSON response for display.
+export function pickDisplay(data, path, match = {}) {
+    const matches = (v) => Object.entries(match).every(([k, want]) => v && typeof v === "object" && v[k] === want);
+    let values = [data];
+    for (const part of path.split(".")) {
+        const many = part.endsWith("[]");
+        const key = many ? part.slice(0, -2) : part;
+        values = values.flatMap((v) => {
+            const next = v && typeof v === "object" ? v[key] : undefined;
+            return many ? (Array.isArray(next) ? next.filter(matches) : []) : [next];
+        });
+    }
+    return values.filter((v) => v !== undefined && v !== null).map(String);
+}
+//# sourceMappingURL=connector.js.map

package/dist/packages/connector-kit/src/connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../../packages/connector-kit/src/connector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAI9C,2FAA2F;AAC3F,sFAAsF;AACtF,0FAA0F;AAC1F,+DAA+D;AAE/D,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAEnD,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACxC,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;IACrB,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE;IAC5B,8BAA8B;IAC9B,OAAO,EAAE,IAAI;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,oEAAoE;AACpE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAErE,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClE,2FAA2F;IAC3F,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC9B,sDAAsD;IACtD,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,4FAA4F;IAC5F,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,mFAAmF;IACnF,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,0FAA0F;IAC1F,gDAAgD;IAChD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,2FAA2F;IAC3F,qFAAqF;IACrF,2BAA2B;IAC3B,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,uFAAuF;IACvF,iCAAiC;IACjC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,mFAAmF;IACnF,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,+FAA+F;IAC/F,2EAA2E;IAC3E,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,KAAK,CAAC,cAAc,CAAC;SACrB,QAAQ,EAAE;IACb,2FAA2F;IAC3F,yBAAyB;IACzB,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,KAAK,CAAC,cAAc,CAAC;SACrB,QAAQ,EAAE;IACb,uFAAuF;IACvF,wFAAwF;IACxF,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClD,0FAA0F;IAC1F,gDAAgD;IAChD,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,yFAAyF;AACzF,MAAM,eAAe,GAAG,UAAU;KAC/B,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,MAAM,EAAE,CAAC;AAEZ,MAAM,SAAS,GAAG;IAChB,CAAC,CAAiE,EAAE,EAAE,CACpE,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtD,EAAE,OAAO,EAAE,+DAA+D,EAAE;CACpE,CAAC;AACX,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC;AAC7C,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC;AAEvD,4FAA4F;AAC5F,yFAAyF;AACzF,sBAAsB;AACtB,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;KACzF,MAAM,EAAE,CAAC;AAEZ,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;IACrB,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,uFAAuF;IACvF,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,wFAAwF;AACxF,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,4EAA4E;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;CACtB,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;IACrD,OAAO,EAAE,qEAAqE;CAC/E,CAAC,CAAC;AAEL,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;IAChC,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI;IACV,wFAAwF;IACxF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,sFAAsF;IACtF,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,6FAA6F;AAC7F,iDAAiD;AACjD,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAGlE,8FAA8F;AAC9F,kGAAkG;AAClG,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClD,CAAC;SACE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SAC/F,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/E,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QACzC,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;KACnB,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxD,WAAW,EAAE,IAAI;IACjB,iEAAiE;IACjE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,oFAAoF;IACpF,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE;CACvB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,IAAI,EAAE,IAAI;IACV,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,kEAAkE;IAClE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,+EAA+E;IAC/E,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,yFAAyF;IACzF,2FAA2F;IAC3F,mFAAmF;IACnF,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC;SACE,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mCAAmC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACrF,MAAM,EAAE,CACZ;SACA,OAAO,CAAC,EAAE,CAAC;CACf,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE;IACJ,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC7E,OAAO,CACL,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAC5C,CAAC;AACJ,CAAC,EACD,EAAE,OAAO,EAAE,wEAAwE,EAAE,CACtF;KACA,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,EAAE;IAC1F,OAAO,EAAE,+BAA+B;CACzC,CAAC;IACF,kFAAkF;KACjF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,EAAE;IAC3D,OAAO,EAAE,qCAAqC;CAC/C,CAAC,CAAC;AAEL,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,4FAA4F;IAC5F,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC;IAC/F,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,4FAA4F;IAC5F,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC9C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,iBAAiB;IACnB,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9E,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CACzB,EACH,EAAE,OAAO,EAAE,qEAAqE,EAAE,CACnF,CAAC;AAGJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;IACpC,IAAI,EAAE,IAAI;IACV,WAAW,EAAE,IAAI;IACjB,8CAA8C;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC;IACrD,QAAQ,EAAE,IAAI;IACd,2FAA2F;IAC3F,gFAAgF;IAChF,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,yFAAyF;IACzF,wEAAwE;IACxE,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,KAAK,CAAC,cAAc,CAAC;SACrB,QAAQ,EAAE;IACb,sFAAsF;IACtF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClC,sFAAsF;IACtF,+DAA+D;IAC/D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;IAC3C,wFAAwF;IACxF,wEAAwE;IACxE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACpB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC5B,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,IAAI;QACX,WAAW,EAAE,IAAI;QACjB,sDAAsD;QACtD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACpC,2CAA2C;QAC3C,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACvC,iFAAiF;QACjF,8DAA8D;QAC9D,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC7B,uEAAuE;QACvE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACrB,iFAAiF;QACjF,gFAAgF;QAChF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC/B,0EAA0E;QAC1E,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1B,iFAAiF;QACjF,oFAAoF;QACpF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC9D,kFAAkF;QAClF,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;QACrB,gFAAgF;QAChF,+DAA+D;QAC/D,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE;QAC1B,gFAAgF;QAChF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACjC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;KAC5B,CAAC;SACD,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE;QAC7C,OAAO,EAAE,6CAA6C;KACvD,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,WAAW,EAAE;QACxC,OAAO,EAAE,sEAAsE;KAChF,CAAC,CACL;SACA,GAAG,CAAC,CAAC,CAAC;IACT,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC5B,wFAAwF;IACxF,8FAA8F;IAC9F,+DAA+D;IAC/D,sFAAsF;IACtF,6EAA6E;IAC7E,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACjC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,2FAA2F;IAC3F,yFAAyF;IACzF,2EAA2E;IAC3E,WAAW,EAAE,CAAC;SACX,MAAM,CAAC;QACN,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QACpD,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,IAAI;QACd,8EAA8E;QAC9E,kFAAkF;QAClF,kFAAkF;QAClF,gDAAgD;QAChD,MAAM,EAAE,CAAC;aACN,MAAM,CACL,IAAI,EACJ,CAAC;aACE,MAAM,CAAC;YACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;YACpD,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;SAC1C,CAAC;aACD,MAAM,EAAE,CACZ;aACA,OAAO,CAAC,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE;KACzB,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,MAAM,EAAE,WAAW;IACnB,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE;IACJ,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,MAAe,EAAE,EAAE,CAC5C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACtB,MAAM,SAAS,GACb,CAAC,CAAC,IAAI,KAAK,QAAQ;QACjB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC;QACtB,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ;YACnB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC;YACtB,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO;gBAClB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC;gBACrD,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClF,OAAO,CACL,SAAS;QACT,CAAC,CAAC,CAAC,QAAQ;QACX,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACrF,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAChB,CAAC,CAAC,EAAE,EAAE,CACJ,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACpE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAClD,CACF,CAAC;AACJ,CAAC,EACD;IACE,OAAO,EACL,iLAAiL;CACpL,CACF;KACA,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,WAAY,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAC5F,EAAE,OAAO,EAAE,8DAA8D,EAAE,CAC5E;KACA,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CACzF,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CACxC;IACD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,WAAW,EAAE,OAAO,KAAK,SAAS,CAAC,EAC5F,EAAE,OAAO,EAAE,gFAAgF,EAAE,CAC9F;KACA,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE;IAC1E,OAAO,EAAE,0BAA0B;CACpC,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE;IACtF,OAAO,EAAE,+BAA+B;CACzC,CAAC;KACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE;IACJ,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC;AAC9C,CAAC,EACD,EAAE,OAAO,EAAE,uCAAuC,EAAE,CACrD;KACA,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAC3F,EAAE,OAAO,EAAE,iFAAiF,EAAE,CAC/F;KACA,MAAM,CACL,CAAC,CAAC,EAAE,EAAE;IACJ,MAAM,QAAQ,GAAG,CAAC,CAAmC,EAAE,MAAuB,EAAE,EAAE,CAChF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,OAAO,CACL,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACvF,CAAC,CAAC,MAAM,CAAC,KAAK,CACZ,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CACnF,CACF,CAAC;AACJ,CAAC,EACD,EAAE,OAAO,EAAE,4EAA4E,EAAE,CAC1F;KACA,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;IAC9D,OAAO,EAAE,8CAA8C;CACxD,CAAC;KACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,CAAC,KAAK,CACZ,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAC5F,EACH,EAAE,OAAO,EAAE,0DAA0D,EAAE,CACxE,CAAC;AAKJ,6FAA6F;AAC7F,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;IACpC,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC;IACrD,QAAQ,EAAE,IAAI;IACd,kGAAkG;IAClG,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;IAC3C,0FAA0F;IAC1F,yFAAyF;IACzF,2EAA2E;IAC3E,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnE,oFAAoF;IACpF,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACpB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7F,8FAA8F;IAC9F,6CAA6C;IAC7C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,MAAM,EAAE,IAAI;CACb,CAAC;KACD,MAAM,EAAE,CAAC;AAaZ,iGAAiG;AACjG,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/E,yFAAyF;AACzF,oFAAoF;AACpF,SAAS,OAAO,CAAI,GAAQ,EAAE,IAAY,EAAE,MAAqC;IAC/E,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;SAC7D,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAClE,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnF,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;QACxF,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAG,GAAG,cAAc;IACjD,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAG,GAAG,cAAc;IAChD,OAAO,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;AACvD,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,SAAoB,EAAE,EAAE,CACnD,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE7D;0DAC0D;AAC1D,MAAM,UAAU,aAAa,CAAC,SAAoB,EAAE,SAAiC,EAAE;IACrF,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,OAAO,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3E,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,aAAa,CAC3B,SAAoB,EACpB,YAA+B,EAC/B,SAAiC,EAAE;IAEnC,OAAO;QACL,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;YAC3B,GAAG,SAAS,CAAC,YAAY;iBACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;iBAC1C,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;YACtC,GAAG,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;SACnE,CAAC;KACH,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CACnC,SAAoB,EACpB,KAAwB,EACxB,OAA0B;IAE1B,OAAO,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,kGAAkG;AAClG,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5F,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,UAAuB,EAAE,QAAgB;IACxE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,UAAU;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;YACzB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;gBAC7C,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;oBACvC,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;wBACnC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;oBAC/E,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC/B,CAAC;IACP,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAe,EAAE,MAAgB;IAC1D,OAAO,KAAK;SACT,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAChB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CACrF;SACA,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;SAC5D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,WAAW,CACzB,IAAa,EACb,IAAY,EACZ,QAAiC,EAAE;IAEnC,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,EAAE,CAC7B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CACzB,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAK,CAA6B,CAAC,CAAC,CAAC,KAAK,IAAI,CACxF,CAAC;IACJ,IAAI,MAAM,GAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5B,MAAM,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACzE,CAAC"}