@bevel-software/platform-core-backend 0.1.0

package/dist/modules/secrets-vault/secrets-vault.routes.js

@@ -0,0 +1,490 @@
+import express from 'express';
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { DEFAULT_BRANCH } from '@bevel-software/platform-shared';
+import { InvalidSecretError, SecretNotFoundError, SecretOAuthError, scopesCovered, missingScopes, } from './secrets-vault.contract.js';
+import { utcpNamespacedKey } from '../../shared/utcp-namespace.js';
+import { workspaceIdForBranch } from '../workspace/workspace.service.js';
+import '../auth/auth.middleware.js'; // Express Request augmentation (req.userId / req.userEmail)
+function redirectUriFor(publicBackendUrl) {
+    return `${publicBackendUrl}/api/secrets/oauth/callback`;
+}
+/**
+ * Authenticated Secrets Vault CRUD + OAuth start. Every route is scoped to
+ * `req.userId` — secrets are private per user. Mounted behind the JWT middleware.
+ */
+export function createSecretsVaultRoutes(deps) {
+    const { secretsVault, toolManualService, accessControl } = deps;
+    const router = express.Router();
+    const defaultWs = workspaceIdForBranch(DEFAULT_BRANCH);
+    // The vault key = the exact key UTCP looks the var up under (doubles underscores
+    // in the manual namespace), so storage and resolution agree for snake_case ids.
+    const varKey = (manualName, varName) => utcpNamespacedKey(manualName, varName);
+    /** Find an accessible (readable) manual by slug + its DECLARED variable, or null. */
+    async function findManualVar(email, slug, varName) {
+        const manual = (await toolManualService.listAccessible(email)).find((m) => m.slug === slug);
+        if (!manual)
+            return null;
+        const variable = (manual.variables ?? []).find((v) => v.name === varName);
+        return variable ? { manual, variable } : null;
+    }
+    router.get('/secrets', async (req, res) => {
+        const userId = req.userId;
+        if (!userId)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            res.json({ secrets: await secretsVault.list(userId) });
+        }
+        catch (err) {
+            console.error('[secrets] list failed:', err);
+            res.status(500).json({ error: 'Internal error' });
+        }
+    });
+    router.post('/secrets/static', async (req, res) => {
+        const userId = req.userId;
+        if (!userId)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            const body = req.body ?? {};
+            const secret = await secretsVault.putStatic({
+                userId,
+                key: body.key,
+                value: body.value,
+                label: body.label,
+            });
+            res.status(201).json({ secret });
+        }
+        catch (err) {
+            mapError(err, res, 'create static');
+        }
+    });
+    router.post('/secrets/oauth', async (req, res) => {
+        const userId = req.userId;
+        if (!userId)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            const body = req.body ?? {};
+            const secret = await secretsVault.createOAuth({
+                userId,
+                key: body.key,
+                label: body.label,
+                provider: body.provider,
+            });
+            res.status(201).json({ secret });
+        }
+        catch (err) {
+            mapError(err, res, 'create oauth');
+        }
+    });
+    router.delete('/secrets/:id', async (req, res) => {
+        const userId = req.userId;
+        if (!userId)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            await secretsVault.remove(userId, req.params.id);
+            res.status(204).end();
+        }
+        catch (err) {
+            mapError(err, res, 'delete');
+        }
+    });
+    // Return the provider consent URL as JSON (not a 302): the SPA fetches this
+    // with its bearer token, then navigates the browser to the URL.
+    router.get('/secrets/:id/oauth/start', async (req, res) => {
+        const userId = req.userId;
+        if (!userId)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            const secret = await secretsVault.getById(userId, req.params.id);
+            if (!secret)
+                return void res.status(404).json({ error: 'Secret not found' });
+            if (secret.kind !== 'oauth')
+                return void res.status(400).json({ error: 'Secret has no OAuth flow' });
+            const state = signState(deps.stateSecret, {
+                u: userId,
+                i: req.params.id,
+                n: randomBytes(8).toString('hex'),
+            });
+            const url = await secretsVault.beginOAuth(userId, req.params.id, redirectUriFor(deps.publicBackendUrl), state);
+            res.json({ url });
+        }
+        catch (err) {
+            mapError(err, res, 'oauth start');
+        }
+    });
+    // ---- per-tool secrets (two-tier: admin/shared + per-user) ------------------
+    // The caller's accessible `.tool` manuals, each with its declared variables,
+    // per-variable config status, and whether the caller may set ADMIN secrets.
+    // `?path=` narrows to a single tool (used by the `.tool` editor sidebar).
+    router.get('/secrets/tools', async (req, res) => {
+        const userId = req.userId;
+        const email = req.userEmail;
+        if (!userId || !email)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            const pathFilter = typeof req.query.path === 'string' ? req.query.path : null;
+            let manuals = await toolManualService.listAccessible(email);
+            if (pathFilter)
+                manuals = manuals.filter((m) => m.path === pathFilter);
+            const allKeys = manuals.flatMap((m) => (m.variables ?? []).map((v) => varKey(m.name, v.name)));
+            const status = await secretsVault.statusFor(userId, allKeys);
+            const statusByKey = new Map(status.map((s) => [s.key, s]));
+            const tools = await Promise.all(manuals.map(async (m) => ({
+                slug: m.slug,
+                name: m.name,
+                path: m.path,
+                type: m.type,
+                setup: m.setup ?? null,
+                canWrite: await accessControl.canWrite(defaultWs, email, m.path),
+                variables: (m.variables ?? []).map((v) => {
+                    const key = varKey(m.name, v.name);
+                    const st = statusByKey.get(key);
+                    const isOAuth = v.oauth != null;
+                    const authorized = isOAuth ? (st?.userAuthorized ?? false) : undefined;
+                    // For an OAuth var: which declared permissions the token doesn't cover,
+                    // so the panel can say WHAT it works for and what it doesn't. Only
+                    // meaningful once authorized (an unauthorized var has no token at all).
+                    const missing = isOAuth && authorized ? missingScopes(v.oauth?.scopes, st?.grantedScopes) : [];
+                    return {
+                        name: v.name,
+                        scope: v.scope,
+                        label: v.label ?? null,
+                        key,
+                        adminConfigured: st?.adminConfigured ?? false,
+                        userConfigured: st?.userConfigured ?? false,
+                        oauth: isOAuth,
+                        authorized,
+                        needsReauth: isOAuth && authorized === true && missing.length > 0,
+                        missingScopes: missing,
+                    };
+                }),
+            })));
+            res.json({ tools });
+        }
+        catch (err) {
+            console.error('[secrets] list tools failed:', err);
+            res.status(500).json({ error: 'Internal error' });
+        }
+    });
+    // The aggregated "connect your tools" view for a single user: every accessible
+    // tool with ONLY its per-user (`user`-scoped) variables and whether the caller
+    // has set each, plus the caller's OAuth secrets and their authorized state. This
+    // is the surface an external-agent user lands on from the needs-authorization
+    // link — it shows exactly what THEY must provide, never the admin/shared items.
+    router.get('/connect/pending', async (req, res) => {
+        const userId = req.userId;
+        const email = req.userEmail;
+        if (!userId || !email)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            const manuals = await toolManualService.listAccessible(email);
+            const allKeys = manuals.flatMap((m) => (m.variables ?? []).filter((v) => v.scope === 'user').map((v) => varKey(m.name, v.name)));
+            const status = await secretsVault.statusFor(userId, allKeys);
+            const statusByKey = new Map(status.map((s) => [s.key, s]));
+            const tools = manuals
+                .map((m) => ({
+                slug: m.slug,
+                name: m.name,
+                path: m.path,
+                type: m.type,
+                // Plain (non-OAuth) per-user vars render as key inputs under "Keys".
+                variables: (m.variables ?? [])
+                    .filter((v) => v.scope === 'user' && !v.oauth)
+                    .map((v) => {
+                    const key = varKey(m.name, v.name);
+                    return {
+                        name: v.name,
+                        label: v.label ?? null,
+                        key,
+                        configured: statusByKey.get(key)?.userConfigured ?? false,
+                    };
+                }),
+            }))
+                // Only surface tools that actually have per-user items to configure.
+                .filter((t) => t.variables.length > 0);
+            // OAuth-backed per-user vars render as Authorize buttons under "Sign-ins".
+            // Keyed by slug+var (the caller's row may not exist yet), with authorized
+            // state from the oauth-aware status.
+            const toolOAuth = manuals.flatMap((m) => (m.variables ?? [])
+                .filter((v) => v.scope === 'user' && v.oauth)
+                .map((v) => {
+                const st = statusByKey.get(varKey(m.name, v.name));
+                const authorized = st?.userAuthorized ?? false;
+                // Signed in, but the token's granted scopes no longer cover what the
+                // tool declares → surface as needing re-authorization, not as connected.
+                const needsReauth = authorized && !scopesCovered(v.oauth?.scopes, st?.grantedScopes);
+                return {
+                    slug: m.slug,
+                    varName: v.name,
+                    toolName: m.name,
+                    key: varKey(m.name, v.name),
+                    label: v.label ?? null,
+                    authorized,
+                    needsReauth,
+                };
+            }));
+            // Standalone sign-ins = oauth secrets the user registered directly on the
+            // Secrets page. A TOOL sign-in provisions a per-user row in the same
+            // table (keyed `<manual>_<VAR>`), so exclude every tool-var key here or
+            // an authorized tool sign-in would render twice — once as a toolOAuth
+            // row and again as a "standalone" one.
+            const toolOAuthKeys = new Set(toolOAuth.map((o) => o.key));
+            const secrets = await secretsVault.list(userId);
+            const oauth = secrets
+                .filter((s) => s.kind === 'oauth' && !toolOAuthKeys.has(s.key))
+                .map((s) => ({ id: s.id, key: s.key, label: s.label, authorized: s.authorized ?? false }));
+            res.json({ tools, oauth, toolOAuth });
+        }
+        catch (err) {
+            console.error('[secrets] connect/pending failed:', err);
+            res.status(500).json({ error: 'Internal error' });
+        }
+    });
+    // Set/replace a tool's ADMIN (shared) secret — requires WRITE on the `.tool` file.
+    router.put('/secrets/tools/:slug/vars/:var/admin', async (req, res) => {
+        const userId = req.userId;
+        const email = req.userEmail;
+        if (!userId || !email)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            const found = await findManualVar(email, req.params.slug, req.params.var);
+            if (!found)
+                return void res.status(404).json({ error: 'Tool or variable not found' });
+            if (found.variable.scope !== 'admin') {
+                return void res.status(422).json({ error: 'This variable is set by each user, not the tool owner.' });
+            }
+            if (!(await accessControl.canWrite(defaultWs, email, found.manual.path))) {
+                return void res.status(403).json({ error: 'You need write access to this tool to set its shared secrets.' });
+            }
+            const body = req.body ?? {};
+            const secret = await secretsVault.putSharedStatic({
+                key: varKey(found.manual.name, found.variable.name),
+                value: body.value,
+                label: body.label,
+            });
+            res.status(201).json({ secret });
+        }
+        catch (err) {
+            mapError(err, res, 'set admin var');
+        }
+    });
+    // Set/replace the CALLER's per-user secret for a user-scope variable.
+    router.put('/secrets/tools/:slug/vars/:var/user', async (req, res) => {
+        const userId = req.userId;
+        const email = req.userEmail;
+        if (!userId || !email)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            const found = await findManualVar(email, req.params.slug, req.params.var);
+            if (!found)
+                return void res.status(404).json({ error: 'Tool or variable not found' });
+            if (found.variable.scope !== 'user') {
+                return void res.status(422).json({ error: 'This variable is set by the tool owner, not per user.' });
+            }
+            const body = req.body ?? {};
+            const secret = await secretsVault.putStatic({
+                userId,
+                key: varKey(found.manual.name, found.variable.name),
+                value: body.value,
+                label: body.label,
+            });
+            res.status(201).json({ secret });
+        }
+        catch (err) {
+            mapError(err, res, 'set user var');
+        }
+    });
+    // Set the confidential client secret for a tool's OAuth-backed variable — the
+    // ONLY place the secret is provided. Requires WRITE on the `.tool`. The provider
+    // config comes from the variable's own `oauth` declaration (stored WITH the
+    // secret so a later `.tool` edit can't redirect it).
+    router.put('/secrets/tools/:slug/vars/:var/oauth/admin', async (req, res) => {
+        const userId = req.userId;
+        const email = req.userEmail;
+        if (!userId || !email)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            const found = await findManualVar(email, req.params.slug, req.params.var);
+            if (!found)
+                return void res.status(404).json({ error: 'Tool or variable not found' });
+            if (!found.variable.oauth) {
+                return void res.status(422).json({ error: 'This variable is not an OAuth sign-in.' });
+            }
+            if (!(await accessControl.canWrite(defaultWs, email, found.manual.path))) {
+                return void res.status(403).json({ error: 'You need write access to this tool to set its client secret.' });
+            }
+            const clientSecret = (req.body ?? {}).clientSecret;
+            await secretsVault.putSharedOAuthClientSecret({
+                key: varKey(found.manual.name, found.variable.name),
+                clientSecret,
+                provider: {
+                    authorizationUrl: found.variable.oauth.authorizationUrl,
+                    tokenUrl: found.variable.oauth.tokenUrl,
+                    clientId: found.variable.oauth.clientId,
+                    scopes: found.variable.oauth.scopes,
+                    // Static authorize params (e.g. Google's `access_type=offline`) so the
+                    // provider returns a refresh token — stored with the secret so a later
+                    // `.tool` edit can't redirect the flow.
+                    authParams: found.variable.oauth.authParams,
+                },
+            });
+            res.status(201).json({ ok: true });
+        }
+        catch (err) {
+            mapError(err, res, 'set oauth client secret');
+        }
+    });
+    // Start sign-in for a tool's OAuth-backed variable. Provisions the caller's row
+    // from the owner-set secret and returns the provider consent URL; the callback
+    // bounces back to /connect (via `r` in the signed state).
+    router.post('/secrets/tools/:slug/vars/:var/oauth/start', async (req, res) => {
+        const userId = req.userId;
+        const email = req.userEmail;
+        if (!userId || !email)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            const found = await findManualVar(email, req.params.slug, req.params.var);
+            if (!found)
+                return void res.status(404).json({ error: 'Tool or variable not found' });
+            if (!found.variable.oauth) {
+                return void res.status(422).json({ error: 'This variable is not an OAuth sign-in.' });
+            }
+            const key = varKey(found.manual.name, found.variable.name);
+            // Provision the caller's oauth row (from the owner-set secret) FIRST — its id
+            // is what the un-authed callback keys on. Pass an empty state placeholder; we
+            // sign the real state below with the returned id and swap it into the URL, so
+            // the callback resolves it byte-for-byte like the standalone flow.
+            const { id, url } = await secretsVault.beginToolOAuthByKey({
+                userId,
+                key,
+                redirectUri: redirectUriFor(deps.publicBackendUrl),
+                state: '',
+                // Request the permissions the tool file declares RIGHT NOW (not the frozen
+                // copy on the owner-set row), so adding a scope to the `.tool` takes effect
+                // on the next sign-in. The secret/clientId/addresses stay owner-pinned.
+                scopes: found.variable.oauth.scopes,
+            });
+            const state = signState(deps.stateSecret, {
+                u: userId,
+                i: id,
+                n: randomBytes(8).toString('hex'),
+                r: 'connect',
+            });
+            const consentUrl = new URL(url);
+            consentUrl.searchParams.set('state', state);
+            res.json({ url: consentUrl.toString() });
+        }
+        catch (err) {
+            mapError(err, res, 'tool oauth start');
+        }
+    });
+    router.delete('/secrets/tools/:slug/vars/:var/admin', async (req, res) => {
+        const userId = req.userId;
+        const email = req.userEmail;
+        if (!userId || !email)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            const found = await findManualVar(email, req.params.slug, req.params.var);
+            if (!found)
+                return void res.status(404).json({ error: 'Tool or variable not found' });
+            if (!(await accessControl.canWrite(defaultWs, email, found.manual.path))) {
+                return void res.status(403).json({ error: 'You need write access to this tool to remove its shared secrets.' });
+            }
+            await secretsVault.removeShared(varKey(found.manual.name, found.variable.name));
+            res.status(204).end();
+        }
+        catch (err) {
+            mapError(err, res, 'delete admin var');
+        }
+    });
+    router.delete('/secrets/tools/:slug/vars/:var/user', async (req, res) => {
+        const userId = req.userId;
+        const email = req.userEmail;
+        if (!userId || !email)
+            return void res.status(401).json({ error: 'Not authenticated' });
+        try {
+            const found = await findManualVar(email, req.params.slug, req.params.var);
+            if (!found)
+                return void res.status(404).json({ error: 'Tool or variable not found' });
+            await secretsVault.removeUserByKey(userId, varKey(found.manual.name, found.variable.name));
+            res.status(204).end();
+        }
+        catch (err) {
+            mapError(err, res, 'delete user var');
+        }
+    });
+    return router;
+}
+/**
+ * The un-authenticated OAuth callback. Mounted BEFORE the JWT middleware: the
+ * provider redirects the browser here with no Authorization header, so the
+ * caller's identity rides in the signed `state`.
+ */
+export function createSecretsVaultPublicRoutes(deps) {
+    const { secretsVault } = deps;
+    const router = express.Router();
+    router.get('/secrets/oauth/callback', async (req, res) => {
+        const code = typeof req.query.code === 'string' ? req.query.code : '';
+        const stateRaw = typeof req.query.state === 'string' ? req.query.state : '';
+        // The landing page depends on where the flow started (the `r` field in the
+        // signed state): a tool-var sign-in returns to /connect, the standalone
+        // Secrets page to /secrets. Pre-verification errors can't know `r`, so they
+        // fall back to /secrets.
+        const back = (frag, dest = '/secrets') => res.redirect(`${deps.publicFrontendUrl}${dest}#${frag}`);
+        if (!code || !stateRaw)
+            return void back(`error=${encodeURIComponent('Invalid OAuth callback.')}`);
+        const state = verifyState(deps.stateSecret, stateRaw);
+        if (!state)
+            return void back(`error=${encodeURIComponent('OAuth state mismatch.')}`);
+        const dest = state.r === 'connect' ? '/connect' : '/secrets';
+        try {
+            await secretsVault.completeOAuth(state.u, state.i, code, redirectUriFor(deps.publicBackendUrl));
+            back(`authorized=${encodeURIComponent(state.i)}`, dest);
+        }
+        catch (err) {
+            console.error('[secrets] oauth callback failed:', err instanceof Error ? err.message : String(err));
+            back(`error=${encodeURIComponent('Authorization failed. Check the provider configuration and try again.')}`, dest);
+        }
+    });
+    return router;
+}
+function mapError(err, res, op) {
+    if (err instanceof InvalidSecretError)
+        return void res.status(422).json({ error: err.message });
+    if (err instanceof SecretNotFoundError)
+        return void res.status(404).json({ error: err.message });
+    if (err instanceof SecretOAuthError)
+        return void res.status(409).json({ error: err.message });
+    console.error(`[secrets] ${op} failed:`, err);
+    res.status(500).json({ error: 'Internal error' });
+}
+const OAUTH_STATE_MAX_AGE_MS = 10 * 60_000;
+const OAUTH_STATE_SKEW_MS = 60_000;
+function signState(secret, state) {
+    const full = { ...state, iat: Date.now() };
+    const body = Buffer.from(JSON.stringify(full)).toString('base64url');
+    const sig = createHmac('sha256', secret).update(body).digest('base64url');
+    return `${body}.${sig}`;
+}
+function verifyState(secret, token) {
+    const [body, sig] = token.split('.');
+    if (!body || !sig)
+        return null;
+    const expected = createHmac('sha256', secret).update(body).digest('base64url');
+    const a = Buffer.from(sig);
+    const b = Buffer.from(expected);
+    if (a.length !== b.length || !timingSafeEqual(a, b))
+        return null;
+    try {
+        const parsed = JSON.parse(Buffer.from(body, 'base64url').toString());
+        if (typeof parsed.iat !== 'number' || !parsed.u || !parsed.i)
+            return null;
+        const age = Date.now() - parsed.iat;
+        if (age > OAUTH_STATE_MAX_AGE_MS || age < -OAUTH_STATE_SKEW_MS)
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=secrets-vault.routes.js.map

package/dist/modules/secrets-vault/secrets-vault.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-vault.routes.js","sourceRoot":"","sources":["../../../src/modules/secrets-vault/secrets-vault.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,aAAa,GAEd,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,4BAA4B,CAAC,CAAC,4DAA4D;AAgBjG,SAAS,cAAc,CAAC,gBAAwB;IAC9C,OAAO,GAAG,gBAAgB,6BAA6B,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAA4B;IACnE,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;IAEvD,iFAAiF;IACjF,gFAAgF;IAChF,MAAM,MAAM,GAAG,CAAC,UAAkB,EAAE,OAAe,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAE/F,qFAAqF;IACrF,KAAK,UAAU,aAAa,CAC1B,KAAa,EACb,IAAY,EACZ,OAAe;QAEf,MAAM,MAAM,GAAG,CAAC,MAAM,iBAAiB,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QAC1E,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC;gBAC1C,MAAM;gBACN,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC;gBAC5C,MAAM;gBACN,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC7E,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACrG,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE;gBACxC,CAAC,EAAE,MAAM;gBACT,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE;gBAChB,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;aAClC,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,UAAU,CACvC,MAAM,EACN,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,EACrC,KAAK,CACN,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAE/E,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9E,IAAI,OAAO,GAAG,MAAM,iBAAiB,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC5D,IAAI,UAAU;gBAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;YAEvE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/F,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;gBACtB,QAAQ,EAAE,MAAM,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;gBAChE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACvC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;oBACnC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAChC,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC;oBAChC,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACvE,wEAAwE;oBACxE,mEAAmE;oBACnE,wEAAwE;oBACxE,MAAM,OAAO,GAAG,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/F,OAAO;wBACL,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;wBACtB,GAAG;wBACH,eAAe,EAAE,EAAE,EAAE,eAAe,IAAI,KAAK;wBAC7C,cAAc,EAAE,EAAE,EAAE,cAAc,IAAI,KAAK;wBAC3C,KAAK,EAAE,OAAO;wBACd,UAAU;wBACV,WAAW,EAAE,OAAO,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;wBACjE,aAAa,EAAE,OAAO;qBACvB,CAAC;gBACJ,CAAC,CAAC;aACH,CAAC,CAAC,CACJ,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;YACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,+EAA+E;IAC/E,iFAAiF;IACjF,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACpC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CACzF,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3D,MAAM,KAAK,GAAG,OAAO;iBAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,qEAAqE;gBACrE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;qBAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;qBAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACT,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;oBACnC,OAAO;wBACL,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;wBACtB,GAAG;wBACH,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,cAAc,IAAI,KAAK;qBAC1D,CAAC;gBACJ,CAAC,CAAC;aACL,CAAC,CAAC;gBACH,qEAAqE;iBACpE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAEzC,2EAA2E;YAC3E,0EAA0E;YAC1E,qCAAqC;YACrC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;iBAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;iBAC5C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnD,MAAM,UAAU,GAAG,EAAE,EAAE,cAAc,IAAI,KAAK,CAAC;gBAC/C,qEAAqE;gBACrE,yEAAyE;gBACzE,MAAM,WAAW,GACf,UAAU,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;gBACnE,OAAO;oBACL,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,CAAC,CAAC,IAAI;oBACf,QAAQ,EAAE,CAAC,CAAC,IAAI;oBAChB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;oBAC3B,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;oBACtB,UAAU;oBACV,WAAW;iBACZ,CAAC;YACJ,CAAC,CAAC,CACL,CAAC;YAEF,0EAA0E;YAC1E,qEAAqE;YACrE,wEAAwE;YACxE,sEAAsE;YACtE,uCAAuC;YACvC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,OAAO;iBAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;iBAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;YAE7F,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mFAAmF;IACnF,MAAM,CAAC,GAAG,CAAC,sCAAsC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACtF,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBACrC,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACzE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+DAA+D,EAAE,CAAC,CAAC;YAC/G,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC;gBAChD,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,sEAAsE;IACtE,MAAM,CAAC,GAAG,CAAC,qCAAqC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACtF,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBACpC,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uDAAuD,EAAE,CAAC,CAAC;YACvG,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC;gBAC1C,MAAM;gBACN,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,iFAAiF;IACjF,4EAA4E;IAC5E,qDAAqD;IACrD,MAAM,CAAC,GAAG,CAAC,4CAA4C,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAC1B,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACzE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8DAA8D,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC;YACnD,MAAM,YAAY,CAAC,0BAA0B,CAAC;gBAC5C,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnD,YAAY;gBACZ,QAAQ,EAAE;oBACR,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB;oBACvD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ;oBACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ;oBACvC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM;oBACnC,uEAAuE;oBACvE,uEAAuE;oBACvE,wCAAwC;oBACxC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU;iBAC5C;aACF,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,gFAAgF;IAChF,+EAA+E;IAC/E,0DAA0D;IAC1D,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAC1B,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3D,8EAA8E;YAC9E,8EAA8E;YAC9E,8EAA8E;YAC9E,mEAAmE;YACnE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,YAAY,CAAC,mBAAmB,CAAC;gBACzD,MAAM;gBACN,GAAG;gBACH,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBAClD,KAAK,EAAE,EAAE;gBACT,2EAA2E;gBAC3E,4EAA4E;gBAC5E,wEAAwE;gBACxE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM;aACpC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE;gBACxC,CAAC,EAAE,MAAM;gBACT,CAAC,EAAE,EAAE;gBACL,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACjC,CAAC,EAAE,SAAS;aACb,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,sCAAsC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACvE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACzE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kEAAkE,EAAE,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAChF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,qCAAqC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACtF,MAAM,YAAY,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,IAA4B;IACzE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,2EAA2E;QAC3E,wEAAwE;QACxE,4EAA4E;QAC5E,yBAAyB;QACzB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAAI,GAAG,UAAU,EAAE,EAAE,CAC/C,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,iBAAiB,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,IAAI,CAAC,SAAS,kBAAkB,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;QAEnG,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,IAAI,CAAC,SAAS,kBAAkB,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QAE7D,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAChG,IAAI,CAAC,cAAc,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACpG,IAAI,CAAC,SAAS,kBAAkB,CAAC,uEAAuE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACrH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY,EAAE,GAAqB,EAAE,EAAU;IAC/D,IAAI,GAAG,YAAY,kBAAkB;QAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAChG,IAAI,GAAG,YAAY,mBAAmB;QAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACjG,IAAI,GAAG,YAAY,gBAAgB;QAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9F,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACpD,CAAC;AAYD,MAAM,sBAAsB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC3C,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,SAAS,SAAS,CAAC,MAAc,EAAE,KAA8B;IAC/D,MAAM,IAAI,GAAe,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1E,OAAO,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,KAAa;IAChD,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/E,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAe,CAAC;QACnF,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC;QACpC,IAAI,GAAG,GAAG,sBAAsB,IAAI,GAAG,GAAG,CAAC,mBAAmB;YAAE,OAAO,IAAI,CAAC;QAC5E,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/modules/skills/index.d.ts

@@ -0,0 +1,5 @@
+export { SkillService } from './skills.service.js';
+export { registerSkillsTools } from './skills.tools.js';
+export { createSkillsRoutes } from './skills.routes.js';
+export type { ISkillService, Skill, SkillSummary, SkillFileContent, GetSkillResult, } from './skills.contract.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/skills/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/modules/skills/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EACV,aAAa,EACb,KAAK,EACL,YAAY,EACZ,gBAAgB,EAChB,cAAc,GACf,MAAM,sBAAsB,CAAC"}

package/dist/modules/skills/index.js

@@ -0,0 +1,4 @@
+export { SkillService } from './skills.service.js';
+export { registerSkillsTools } from './skills.tools.js';
+export { createSkillsRoutes } from './skills.routes.js';
+//# sourceMappingURL=index.js.map

package/dist/modules/skills/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/skills/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/modules/skills/skills.contract.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Skills are reusable specialist instructions living under `Skills/<name>/SKILL.md`
+ * in the KB repo. Discovery/loading is pinned to the DEFAULT branch — the catalog
+ * is a single global, released set (a skill on a draft isn't discoverable until
+ * merged). Progressive disclosure: `listSkills` = name + description (level 1),
+ * `getSkill` = full body + bundled-file paths (level 2), `getSkill(file)` = a
+ * bundled file's content (level 3).
+ */
+export interface SkillSummary {
+    /** Canonical id = the skill's folder name (e.g. `rfi`). */
+    name: string;
+    description: string;
+    version?: string;
+    /** Repo-root-relative skill folder, e.g. `Skills/rfi`. */
+    path: string;
+}
+export interface Skill extends SkillSummary {
+    /** The SKILL.md markdown body (instructions to follow). */
+    body: string;
+    /** Pre-approved tools from the `allowed-tools` frontmatter, if declared. */
+    allowedTools?: string[];
+    /** Repo-root-relative bundled file paths, e.g. `Skills/rfi/scripts/build_xlsx.py`. */
+    files: string[];
+}
+export interface SkillFileContent {
+    /** The skill name. */
+    name: string;
+    /** The bundled file, relative to the skill folder (e.g. `scripts/build_xlsx.py`). */
+    file: string;
+    /** Repo-root-relative path of the file. */
+    path: string;
+    content: string;
+}
+export type GetSkillResult = {
+    ok: true;
+    kind: 'skill';
+    skill: Skill;
+} | {
+    ok: true;
+    kind: 'file';
+    file: SkillFileContent;
+} | {
+    ok: false;
+    error: 'not_found' | 'forbidden' | 'invalid_file';
+};
+export interface ISkillService {
+    /**
+     * The default-branch skill catalog. When `userEmail` is given, filtered to
+     * skills that user may read (`canRead`); omit it for the global set (used to
+     * compose the tool descriptions in the manual).
+     */
+    listSkills(userEmail?: string): Promise<SkillSummary[]>;
+    /** Load a skill's body (+ files), or a bundled file's content when `file` is given. */
+    getSkill(userEmail: string, name: string, file?: string): Promise<GetSkillResult>;
+    /** Drop the cached catalog (call after a merge to the default branch). */
+    invalidate(): void;
+}
+//# sourceMappingURL=skills.contract.d.ts.map

package/dist/modules/skills/skills.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.contract.d.ts","sourceRoot":"","sources":["../../../src/modules/skills/skills.contract.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,YAAY;IAC3B,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,KAAM,SAAQ,YAAY;IACzC,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,sFAAsF;IACtF,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAClD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,WAAW,GAAG,WAAW,GAAG,cAAc,CAAA;CAAE,CAAC;AAErE,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACxD,uFAAuF;IACvF,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAClF,0EAA0E;IAC1E,UAAU,IAAI,IAAI,CAAC;CACpB"}

package/dist/modules/skills/skills.contract.js

@@ -0,0 +1,10 @@
+/**
+ * Skills are reusable specialist instructions living under `Skills/<name>/SKILL.md`
+ * in the KB repo. Discovery/loading is pinned to the DEFAULT branch — the catalog
+ * is a single global, released set (a skill on a draft isn't discoverable until
+ * merged). Progressive disclosure: `listSkills` = name + description (level 1),
+ * `getSkill` = full body + bundled-file paths (level 2), `getSkill(file)` = a
+ * bundled file's content (level 3).
+ */
+export {};
+//# sourceMappingURL=skills.contract.js.map

package/dist/modules/skills/skills.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.contract.js","sourceRoot":"","sources":["../../../src/modules/skills/skills.contract.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/modules/skills/skills.routes.d.ts

@@ -0,0 +1,15 @@
+import express from 'express';
+import '../auth/auth.middleware.js';
+import type { ISkillService } from './skills.contract.js';
+/**
+ * Browser-facing (JWT) skill routes for the `/`-command menu, mounted behind
+ * `authMiddleware`. Backed by the SAME `SkillService` as the agent tool surface,
+ * so discovery, default-branch pinning, and per-user `canRead` filtering live
+ * ONCE — the frontend never re-implements skill discovery or bypasses access.
+ *
+ *   GET /api/skills            → { skills: SkillSummary[] }   (filtered to this user)
+ *   GET /api/skills/:name      → GetSkillResult               (body + files)
+ *   GET /api/skills/:name?file=… → GetSkillResult             (a bundled file's content)
+ */
+export declare function createSkillsRoutes(skillService: ISkillService): express.Router;
+//# sourceMappingURL=skills.routes.d.ts.map