@cat-factory/worker 0.99.0 → 0.99.2

package/dist/infrastructure/container.d.ts

@@ -1,18 +1,279 @@
-import { type Clock, type IdGenerator, type ResolveBinaryArtifactStore } from '@cat-factory/kernel';
+import { type AgentContextRecorder, type AgentExecutor, type CachedRepoRead, type Clock, type ExecutionEventPublisher, type GroupCacheHandle, type IdGenerator, type ResolveBinaryArtifactStore, type VcsIdentityRegistry, type WorkRunner, type ProviderRegistry } from '@cat-factory/kernel';
+import { type AgentKindRegistry } from '@cat-factory/agents';
+import { type EnvironmentBackendRegistry, PersonalSubscriptionService, ProviderSubscriptionService } from '@cat-factory/integrations';
 import { type CoreDependencies } from '@cat-factory/orchestration';
-import { type ServerContainer } from '@cat-factory/server';
+import { ContainerEnvConfigRepairer, type ServerContainer } from '@cat-factory/server';
+import { type AppConfig } from './config';
 import type { Env } from './env';
+import { type ResolveRepoTarget, type ResolveRunnerTransport } from './ai/ContainerAgentExecutor';
+import { ContainerRepoBootstrapper } from './ai/ContainerRepoBootstrapper';
 import { type GateProviderOverrides } from '@cat-factory/gates';
+import { GitHubAppRegistry } from './github/GitHubAppRegistry';
 import type { D1Database } from '@cloudflare/workers-types';
 export type Container = ServerContainer;
+/**
+ * Pick the agent that performs pipeline steps: real LLM work via the Vercel AI
+ * SDK, composed with a per-run sandbox for the repo-operating steps (`coder`,
+ * `mocker`, `playwright`, …). Container-based implementation is ALWAYS on — the
+ * sandbox is a hard requirement, so this throws at startup if it can't be built.
+ * Tests bypass this entirely by overriding `agentExecutor` with a fake.
+ *
+ * There is intentionally NO inline fallback for the sandbox kinds — a one-shot
+ * LLM call cannot clone/edit/commit/open a PR, so a degraded inline implementer is
+ * silently broken rather than usefully degraded. If the sandbox prerequisites are
+ * missing we fail the deploy loudly here rather than starting with a half-wired
+ * implementer that would only fault the moment a repo-operating step is dispatched.
+ */
+/**
+ * The shared prerequisites both the composite executor selection and its container leg
+ * need — the Worker's infra handles (`env`/`config`/`db`/`clock`), the resolved runner
+ * transport, the agent-kind registry, and the optional subscription / observability seams.
+ * Bundled so the two builders take one dependency object rather than nine positional args.
+ */
+interface WorkerExecutorDeps {
+    env: Env;
+    config: AppConfig;
+    db: D1Database;
+    clock: Clock;
+    resolveTransport: ResolveRunnerTransport | null;
+    agentKindRegistry: AgentKindRegistry;
+    subscriptions?: ProviderSubscriptionService;
+    personalSubscriptions?: PersonalSubscriptionService;
+    agentContextObservability?: AgentContextRecorder;
+}
+export declare function selectAgentExecutor(deps: WorkerExecutorDeps): AgentExecutor;
+/**
+ * Wrap the standard executor with the optional consensus mechanism when
+ * `CONSENSUS_ENABLED` is set: register the consensus capability traits (so the builder
+ * offers "Enable Consensus" on eligible steps) and route consensus-enabled steps through
+ * a multi-model process, persisting + pushing the transcript. Off ⇒ returns `standard`
+ * unchanged (no traits, no wrapping), so behaviour is identical to before.
+ */
+export declare function maybeWrapConsensus(standard: AgentExecutor, env: Env, config: AppConfig, db: D1Database, eventPublisher: ExecutionEventPublisher | undefined, agentKindRegistry: AgentKindRegistry): AgentExecutor;
+/**
+ * Build the container-based implementation executor, or return null when its
+ * prerequisites are missing (a runner backend — Cloudflare Containers and/or a
+ * self-hosted pool — plus a configured GitHub App, the proxy's public URL and the
+ * signing secret) — the caller then falls back to inline work.
+ */
+/**
+ * Build the multi-App registry (ADR 0005): the default App always, plus the
+ * privileged App when configured. It resolves which App's key to use per
+ * installation (from the binding's recorded appId), so every token mint / app-JWT
+ * call routes correctly. Callers guard on `config.github.enabled`, which requires
+ * GITHUB_APP_PRIVATE_KEY, so the default key is present.
+ */
+export declare function buildAppRegistry(env: Env, config: AppConfig, db: D1Database, clock: Clock): GitHubAppRegistry;
+/**
+ * Resolve the repo linked to a running block's enclosing service, via the shared
+ * runtime-neutral `buildResolveRepoTarget` (the ancestry walk + no-fallback policy
+ * live in `@cat-factory/server` so the Worker and Node service can't drift). This
+ * wrapper just binds the D1 repositories. Shared by the container executor, the CI
+ * status provider and the PR merger.
+ *
+ * No `repoProjectionCache` is threaded here (unlike the Node facade, which caches the
+ * whole-projection re-list per workspace — caching-layer slice 3): the repo projection
+ * is our own mutable D1 state, and the Worker's isolate-safe profile makes that cache
+ * pass-through (no cross-isolate invalidation bus), so an in-isolate TTL would serve
+ * stale repos after a write on another isolate. Reading live IS the isolate-safe
+ * behaviour. The shared GitHub sync/webhook services still receive the (pass-through)
+ * handle via `createGitHubModule`, so their invalidation code path stays symmetric.
+ */
+export declare function buildResolveRepoTarget(db: D1Database): ResolveRepoTarget;
+export declare function selectMergeLifecycleDeps(env: Env, config: AppConfig, db: D1Database, clock: Clock, idGenerator: IdGenerator, providerRegistry: ProviderRegistry): Partial<CoreDependencies>;
+/**
+ * Wire the observability post-release-health gate when enabled (+ ENCRYPTION_KEY): the
+ * connection + per-block config repos, the cipher that seals the credentials, the pluggable
+ * release-health provider the gate probes (a registry of vendor adapters — Datadog today),
+ * and (optionally) the PagerDuty / incident.io enrichment providers. Off → the gate is a
+ * pass-through and the release-health module isn't built.
+ */
+export declare function selectReleaseHealthDeps(env: Env, config: AppConfig, db: D1Database, providerRegistry: ProviderRegistry): Partial<CoreDependencies>;
+/**
+ * Wire the per-workspace private package-registry integration (npm private orgs, GitHub
+ * Packages). Wired whenever the shared encryption key is present (the cipher must exist
+ * to seal/unseal); a workspace with no entries is a no-op. The decrypted entries reach
+ * agent containers via the executor's `resolvePackageRegistries` seam.
+ */
+export declare function selectPackageRegistryDeps(env: Env, db: D1Database): Partial<CoreDependencies>;
+/**
+ * Wire the per-workspace incident-enrichment integration (PagerDuty + incident.io). The
+ * credentials moved out of env into a sealed per-workspace row; the provider resolves +
+ * decrypts them at enrichment time. Wired whenever the shared encryption key is present
+ * (the cipher must exist to unseal); a workspace with no connection is a no-op. The
+ * on-call enrichment provider itself now lives in `@cat-factory/gates`, so the
+ * workspace-backed provider is wired into the gate suite via `wireIncidentEnrichment`;
+ * the connection repo + cipher stay on CoreDependencies to power the management API.
+ */
+export declare function selectIncidentEnrichmentDeps(env: Env, db: D1Database, providerRegistry: ProviderRegistry): Partial<CoreDependencies>;
 /**
  * Build the per-account binary-artifact store resolver outside the full container (the
  * retention cron runs in its own context). Mirrors the container wiring, with its own
  * account-settings instance (a separate short-TTL cache is fine for a periodic sweep).
  */
 export declare function buildCloudflareArtifactStoreResolver(env: Env, db: D1Database, clock: Clock, idGenerator: IdGenerator): ResolveBinaryArtifactStore;
+/**
+ * Wire the Slack management module (per-account connect + per-workspace routing +
+ * member map). Wired only when the integration is enabled; the actual delivery is
+ * the channel composed in by {@link selectMergeLifecycleDeps}. OAuth credentials
+ * are optional — manual bot-token onboarding works without them.
+ */
+export declare function selectSlackDeps(config: AppConfig, db: D1Database): Partial<CoreDependencies>;
+/**
+ * Wire account invitations + per-account email senders. Invitations are always
+ * available (an invite link works without email); the email-connection store + its
+ * cipher are wired only when EMAIL is enabled (an encryption key is mandatory), so
+ * an account can onboard a SendGrid/Resend key in the UI and have invites emailed.
+ */
+export declare function selectEmailInvitationDeps(config: AppConfig, db: D1Database): Partial<CoreDependencies>;
+export declare function selectTraceSink(config: AppConfig): Partial<CoreDependencies>;
+/**
+ * Wire the recurring-pipeline + issue-tracker ports. The schedule + tracker-setting
+ * repositories are always available (the feature is workspace-scoped CRUD); the
+ * `ticketTrackerProvider` files the tech-debt pipeline's issue and degrades
+ * gracefully — it files GitHub issues only when the App is configured (so it can
+ * resolve the service's repo + mint a token) and Jira only when the tasks
+ * integration's encryption key is set (so it can read the workspace's stored Jira
+ * credentials). With neither, the `tracker` step passes through.
+ */
+export declare function selectRecurringDeps(env: Env, config: AppConfig, db: D1Database, clock: Clock, idGenerator: IdGenerator): Partial<CoreDependencies>;
+/**
+ * Pick how runs are driven:
+ *   - a Workflows binding present → durable, server-driven execution
+ *   - otherwise                   → no-op (e.g. tests, which override this anyway)
+ * Tests override `workRunner` with a fake and drive the engine via advanceInstance.
+ */
+export declare function selectWorkRunner(env: Env): WorkRunner;
+/**
+ * Build the GitHub integration's concrete ports when an App is configured,
+ * mirroring `selectWorkRunner`. Returns an empty object otherwise, so `createCore`
+ * leaves the `github` module unassembled and the feature stays opt-in.
+ */
+export declare function selectGitHubDeps(env: Env, config: AppConfig, db: D1Database, clock: Clock, idGenerator: IdGenerator, repoFilesCache: GroupCacheHandle<CachedRepoRead>): Partial<CoreDependencies>;
+/**
+ * Build the document-source integration's concrete ports: the configured source
+ * providers (Confluence, Notion, …) plus the two D1 repositories. The integration is
+ * always on (config load fails loudly without the encryption key), so this is wired
+ * on every deployment. The model provider is wired only in 'llm' planner mode (it
+ * just needs a provider credential); the planner degrades to its deterministic parser
+ * if no model is usable.
+ */
+export declare function selectDocumentsDeps(env: Env, config: AppConfig, db: D1Database, clock: Clock, idGenerator: IdGenerator): Partial<CoreDependencies>;
+/**
+ * Build the task-source integration's concrete ports. Mirrors `selectDocumentsDeps`
+ * but with no planner — issues are linked for context, not expanded into board
+ * structure. Always on (config load fails loudly without the encryption key), so this
+ * is wired on every deployment.
+ */
+export declare function selectTasksDeps(env: Env, config: AppConfig, db: D1Database, clock: Clock, idGenerator: IdGenerator): Partial<CoreDependencies>;
+/**
+ * Wire the requirements-review feature. The repository is always available, and a
+ * model provider + the agents' default ref are supplied so the stateless reviewer
+ * works whenever an LLM is configured — independent of the documents integration.
+ * (Supplying the provider here is harmless when documents are off or set to the
+ * heading-based planner: that planner only engages when `documentPlannerModel` is
+ * also set, which this does not touch.)
+ */
+export declare function selectRequirementsDeps(env: Env, config: AppConfig, db: D1Database): Partial<CoreDependencies>;
+/**
+ * The Sandbox (parallel prompt/model testing) persistence — five repos over the
+ * DEDICATED `SANDBOX_DB` D1 database. Opt-in: absent binding ⇒ `{}` (the module isn't
+ * assembled and the API answers 503), so a deployment that hasn't provisioned the
+ * sandbox database is unaffected. The inline reviewer model config from
+ * {@link selectRequirementsDeps} is reused by the run-driver (cells resolve their catalog
+ * id like a pipeline step). Mirrored by the Node facade's `createDrizzleSandboxDeps`
+ * (a Postgres `sandbox` schema).
+ */
+export declare function selectSandboxDeps(sandboxDb: D1Database | undefined): Partial<CoreDependencies>;
+/**
+ * Build the ephemeral environment integration's concrete ports. It assembles
+ * whenever the encryption key is set (the shared master key that seals per-tenant
+ * credentials), so the generic HTTP provider, the D1 repositories and the Web Crypto
+ * cipher are wired together. Returns `{}` only when no key is configured, so
+ * `createCore` leaves the `environments` module unassembled. There is no separate
+ * enable flag: whether a workspace provisions anything is decided by its registered
+ * connection + whether its pipeline runs a `deployer`/`tester` step.
+ */
+export declare function selectEnvironmentsDeps(env: Env, config: AppConfig, db: D1Database): Partial<CoreDependencies>;
+/**
+ * Wire the async, container-backed Kubernetes deploy lifecycle (slice 9's
+ * `EnvironmentProvisioningService` seams) onto the Worker facade: a `deployJobClient` that
+ * dispatches/polls/releases a `deploy`-kind job on the per-run `DeployContainer` (the separate
+ * deploy-harness image — real `kubectl`/`kustomize`/`helm`), plus `resolveDeployCloneTarget` to
+ * hand the container concrete manifests-repo clone coords + a short-lived install token.
+ *
+ * Gated on the environments module, the `DEPLOY_CONTAINER` binding AND the GitHub App
+ * (the clone-target seam needs to mint install tokens + resolve a block's repo). Absent any
+ * prerequisite ⇒ `{}` — a render-needing config then fails loudly (the synchronous raw-manifest
+ * REST path is unaffected), exactly the unwired behaviour slice 9 shipped. Mirrors Node's pool
+ * deploy wiring; the deploy container is the Worker's analogue of Node's self-hosted pool.
+ */
+export declare function selectDeployDeps(env: Env, config: AppConfig, db: D1Database, clock: Clock): Partial<CoreDependencies>;
+/**
+ * Build the self-hosted runner-pool integration's concrete ports when opted in:
+ * the D1 connection repository and a dedicated Web Crypto cipher (its own master
+ * key + HKDF domain, separate from the environment module's). This assembles
+ * `Core.runners` (the connection-management API); the per-job transport selection
+ * lives in `buildResolveTransport` above. Returns `{}` when disabled.
+ */
+export declare function selectRunnersDeps(env: Env, config: AppConfig, db: D1Database): Partial<CoreDependencies>;
+/**
+ * Build the container-backed repo bootstrapper for the "bootstrap repo" task,
+ * gated on the same prerequisites as the implementation container (the binding, a
+ * configured GitHub App, the proxy's public URL and signing secret). Returns
+ * undefined otherwise, leaving reference-architecture CRUD available while the run
+ * path reports itself unavailable.
+ */
+export declare function selectRepoBootstrapper(env: Env, config: AppConfig, db: D1Database, clock: Clock, idGenerator: IdGenerator, resolveTransport: ResolveRunnerTransport | null): ContainerRepoBootstrapper | undefined;
+/**
+ * Build the live ENVIRONMENT-PROVIDER CONFIG REPAIR agent (PR #416 increment 2) when its
+ * prerequisites are met — the same container prerequisites as the bootstrapper PLUS an
+ * injected provider that actually supports agent repair (`describeRepairAgent`). A stock
+ * deployment runs the generic manifest provider (no repair support), so this stays
+ * undefined there; it wires only when a native adapter is injected. Built
+ * over the FINAL provider (post-overrides), so the dispatcher repairs through the same
+ * provider the engine validates with. NOT to be confused with the repo bootstrapper: this
+ * is an ordinary clone→edit→push coding job (no history reset / force-push).
+ */
+export declare function selectEnvConfigRepairer(deps: {
+    env: Env;
+    config: AppConfig;
+    db: D1Database;
+    clock: Clock;
+    resolveTransport: ResolveRunnerTransport | null;
+    override: CoreDependencies['environmentProvider'];
+    environmentBackendRegistry: EnvironmentBackendRegistry;
+}): ContainerEnvConfigRepairer | undefined;
+/**
+ * Build the prompt-fragment library's concrete ports when opted in (ADR 0006):
+ * the two D1 repositories, the relevance selector (LLM when configured, else the
+ * core deterministic matcher via `fragmentSelector: undefined`), and the
+ * installation resolver repo-source sync uses to read guideline repos through the
+ * tier's GitHub installation. Returns `{}` when disabled, so `createCore` leaves
+ * the `fragmentLibrary` module unassembled and the engine uses manual fragmentIds.
+ */
+export declare function selectFragmentLibraryDeps(env: Env, config: AppConfig, db: D1Database): Partial<CoreDependencies>;
+/**
+ * Build the repo-sourced Claude Skills library's concrete ports when opted in
+ * (docs/initiatives/repo-skills.md). Skills live in ONE tier (the account), so the
+ * installation resolver is account-only. Gated on the same `fragmentLibrary.enabled`
+ * flag as the fragment library (both are the repo-sourced prompt library). Returns
+ * `{}` when disabled, so `createCore` leaves the skill module unassembled.
+ */
+export declare function selectSkillLibraryDeps(_env: Env, config: AppConfig, db: D1Database): Partial<CoreDependencies>;
+/**
+ * The hosted PAT-login registry: lets a user sign in by pasting their OWN source-control PAT,
+ * which the shared `/auth/pat` flow resolves to the account it belongs to (and holds to the
+ * server's login/org/domain allowlist — see `AuthController`). GitHub is always available;
+ * GitLab is added when a GitLab connection is configured. A remote deployment is multi-user, so
+ * there is NO `configuredToken` — each user supplies their own PAT. Symmetric with the Node
+ * facade's `buildNodeVcsIdentityRegistry` per "keep the runtimes symmetric": a GitLab-only Worker
+ * deployment must let a GitLab user sign in, not just gate/merge on GitLab under the hood.
+ */
+export declare function buildWorkerVcsIdentityRegistry(config: AppConfig): VcsIdentityRegistry;
 export declare function buildContainer(env: Env, overrides?: Partial<CoreDependencies>, opts?: {
     cloudflareModelsEnabled?: boolean;
     gateProviders?: GateProviderOverrides;
 }): Container;
+export {};
 //# sourceMappingURL=container.d.ts.map

package/dist/infrastructure/container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../src/infrastructure/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,KAAK,EASV,KAAK,WAAW,EAOhB,KAAK,0BAA0B,EAShC,MAAM,qBAAqB,CAAA;AAsD5B,OAAO,EAGL,KAAK,gBAAgB,EAOtB,MAAM,4BAA4B,CAAA;AAInC,OAAO,EAgCL,KAAK,eAAe,EAErB,MAAM,qBAAqB,CAAA;AAK5B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AA8GhC,OAAO,EACL,KAAK,qBAAqB,EAS3B,MAAM,oBAAoB,CAAA;AAqC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAU3D,MAAM,MAAM,SAAS,GAAG,eAAe,CAAA;AAqqBvC;;;;GAIG;AACH,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,WAAW,GACvB,0BAA0B,CAW5B;AAwjCD,wBAAgB,cAAc,CAC5B,GAAG,EAAE,GAAG,EACR,SAAS,GAAE,OAAO,CAAC,gBAAgB,CAAM,EACzC,IAAI,GAAE;IAAE,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,qBAAqB,CAAA;CAAO,GACtF,SAAS,CAilBX"}
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../src/infrastructure/container.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,KAAK,EAIV,KAAK,uBAAuB,EAG5B,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAOhB,KAAK,0BAA0B,EAK/B,KAAK,mBAAmB,EAExB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAEL,KAAK,iBAAiB,EAKvB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EASL,KAAK,0BAA0B,EAI/B,2BAA2B,EAC3B,2BAA2B,EAqB5B,MAAM,2BAA2B,CAAA;AAUlC,OAAO,EAGL,KAAK,gBAAgB,EAMtB,MAAM,4BAA4B,CAAA;AAInC,OAAO,EAGL,0BAA0B,EAwB1B,KAAK,eAAe,EAErB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,KAAK,SAAS,EAAoD,MAAM,UAAU,CAAA;AAI3F,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAKhC,OAAO,EAEL,KAAK,iBAAiB,EAEtB,KAAK,sBAAsB,EAC5B,MAAM,6BAA6B,CAAA;AAOpC,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAyE1E,OAAO,EACL,KAAK,qBAAqB,EAO3B,MAAM,oBAAoB,CAAA;AAc3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAuB9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAU3D,MAAM,MAAM,SAAS,GAAG,eAAe,CAAA;AA2EvC;;;;;;;;;;;;GAYG;AACH;;;;;GAKG;AACH,UAAU,kBAAkB;IAC1B,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,SAAS,CAAA;IACjB,EAAE,EAAE,UAAU,CAAA;IACd,KAAK,EAAE,KAAK,CAAA;IACZ,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAC/C,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,aAAa,CAAC,EAAE,2BAA2B,CAAA;IAC3C,qBAAqB,CAAC,EAAE,2BAA2B,CAAA;IACnD,yBAAyB,CAAC,EAAE,oBAAoB,CAAA;CACjD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,GAAG,aAAa,CA6B3E;AAOD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,aAAa,EACvB,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,EACd,cAAc,EAAE,uBAAuB,GAAG,SAAS,EACnD,iBAAiB,EAAE,iBAAiB,GACnC,aAAa,CAaf;AAqGD;;;;;GAKG;AACH;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,iBAAiB,CAyBnB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,UAAU,GAAG,iBAAiB,CAOxE;AAmED,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,WAAW,EACxB,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAwE3B;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,EACd,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,gBAAgB,CAAC,CA2B3B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAU7F;AA+CD;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAqB3B;AAsDD;;;;GAIG;AACH,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,WAAW,GACvB,0BAA0B,CAW5B;AA6CD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAS5F;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,GACb,OAAO,CAAC,gBAAgB,CAAC,CAkB3B;AA4DD,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAG5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,gBAAgB,CAAC,CA2G3B;AAiMD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAQrD;AAiBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,WAAW,EACxB,cAAc,EAAE,gBAAgB,CAAC,cAAc,CAAC,GAC/C,OAAO,CAAC,gBAAgB,CAAC,CAkF3B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAiD3B;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAoC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,GACb,OAAO,CAAC,gBAAgB,CAAC,CAgB3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAS9F;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,GACb,OAAO,CAAC,gBAAgB,CAAC,CAwB3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,gBAAgB,CAAC,CA0B3B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,GACb,OAAO,CAAC,gBAAgB,CAAC,CAiB3B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,WAAW,EACxB,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,GAC9C,yBAAyB,GAAG,SAAS,CAwCvC;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,SAAS,CAAA;IACjB,EAAE,EAAE,UAAU,CAAA;IACd,KAAK,EAAE,KAAK,CAAA;IACZ,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAC/C,QAAQ,EAAE,gBAAgB,CAAC,qBAAqB,CAAC,CAAA;IACjD,0BAA0B,EAAE,0BAA0B,CAAA;CACvD,GAAG,0BAA0B,GAAG,SAAS,CAgDzC;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,GACb,OAAO,CAAC,gBAAgB,CAAC,CA2B3B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,GAAG,EACT,MAAM,EAAE,SAAS,EACjB,EAAE,EAAE,UAAU,GACb,OAAO,CAAC,gBAAgB,CAAC,CAY3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,SAAS,GAAG,mBAAmB,CAUrF;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,GAAG,EACR,SAAS,GAAE,OAAO,CAAC,gBAAgB,CAAM,EACzC,IAAI,GAAE;IAAE,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,qBAAqB,CAAA;CAAO,GACtF,SAAS,CAwRX"}