@data-club/ai-hub-server 0.0.1

package/dist/letta/client.js

@@ -0,0 +1,529 @@
+/**
+ * Hybrid Letta access layer.
+ *
+ * **Two SDKs, two roles:**
+ *
+ * - **`@letta-ai/letta-client`** owns *direct REST operations* —
+ *   `retrieveAgent`, `createConversation`, `listMessages`. These are
+ *   stable agent / conversation / message CRUD against the Letta
+ *   server's REST surface; they don't involve model routing or
+ *   provider shape.
+ * - **`@letta-ai/letta-code-sdk`** owns the *chat-streaming path* —
+ *   `streamUserMessage`. Spawns a Letta Code CLI subprocess per turn;
+ *   the CLI's internal Pi (Provider Interface) + bundled `models.json`
+ *   handle model selection, reasoning-tier presets, and provider
+ *   fallback routing (e.g. Anthropic → Bedrock Opus 4.7). This is what
+ *   keeps ai-hub current with model releases without code changes.
+ *
+ * **The hard rule from §6.4 is preserved** — every Letta interaction
+ * goes through one of these two SDKs; no raw HTTP, no parallel fetch.
+ *
+ * Configuration source: `admin_setting.letta_base_url` +
+ * `admin_setting.letta_api_key_encrypted` (decrypted with
+ * `AI_HUB_ENCRYPTION_KEY`). The Letta-Client wrapper memoizes one SDK
+ * instance per `(apiKey, baseURL)` pair so super-admin connection
+ * edits propagate without restart. The Letta-Code subprocess inherits
+ * `process.env` (which must carry `LETTA_BASE_URL` + `LETTA_API_KEY` —
+ * the boot script sets these from the same decrypted DB row).
+ *
+ * @see SPECIFICATIONS.md §6.4 — Letta integration
+ * @see SPECIFICATIONS.md §6.4.1 — first-class SDK surfaces
+ */
+import { eq } from "drizzle-orm";
+import LettaSdkDefault, { NotFoundError, } from "@letta-ai/letta-client";
+import { resumeSession, } from "@letta-ai/letta-code-sdk";
+import { decryptString } from "../auth/encryption.js";
+import { adminSetting } from "../db/schema.js";
+import { seedAgentToolsetNone } from "./settingsFileSeed.js";
+import {} from "./subprocessThrottle.js";
+// Re-export so consumers don't need to know about the throttle module.
+export { ServerOverloadedError, SubprocessThrottle } from "./subprocessThrottle.js";
+/**
+ * Thrown when `forkConversation(sourceId)` or `retrieveConversation(id)`
+ * resolves to "no such conversation" (Letta 404). The admin agents
+ * validator catches this and returns `400 fork_source_not_found` inline
+ * on the field; the chat route surfaces it as a 500 (admin-side
+ * validation should have caught it before any user-facing session
+ * create reached the fork path).
+ *
+ * @see docs/server/session-sandboxes.md
+ */
+export class ForkSourceNotFoundError extends Error {
+    conversationId;
+    constructor(conversationId) {
+        super(`Letta conversation not found: ${conversationId}`);
+        this.conversationId = conversationId;
+        this.name = "ForkSourceNotFoundError";
+    }
+}
+/**
+ * Letta Code's bundled tools that are ALWAYS disallowed regardless of
+ * whether a per-session sandbox is configured.
+ *
+ * Includes:
+ * - Memory tools (the v1 no-memory stance keeps these forbidden; see
+ *   docs/admin/agent-management.md).
+ * - Sub-agent management (`Task` / `TaskOutput` / `TaskStop` / `TodoWrite`
+ *   / `Skill`) — not exposed to ai-hub end users.
+ * - Interactive tools (`AskUserQuestion` / `EnterPlanMode` /
+ *   `ExitPlanMode`) — hang the headless code path.
+ * - Web tools (`WebFetch` / `WebSearch`) — operator-curated agents
+ *   should reach the web through ADE-attached MCP tools, not Letta
+ *   Code's defaults.
+ *
+ * The filesystem tools (Read / Write / Edit / etc.) live in
+ * `FILESYSTEM_TOOLS` below and are disallowed ONLY when no sandbox is
+ * configured for the session.
+ *
+ * @see docs/server/session-sandboxes.md — the disallow-list split (Step 12.5)
+ */
+const ALWAYS_DISALLOWED_TOOLS = [
+    // Sub-agent + task management
+    "Task",
+    "TaskOutput",
+    "TaskStop",
+    "TodoWrite",
+    // Skills + slash invocation
+    "Skill",
+    // Memory (Letta Code's built-in memory file convenience tool) — the v1
+    // no-memory stance keeps these forbidden even when a sandbox is enabled.
+    "memory",
+    "memory_apply_patch",
+    "memory_insert",
+    "memory_replace",
+    "memory_rethink",
+    // Interactive tools that require runtime user input
+    "AskUserQuestion",
+    "EnterPlanMode",
+    "ExitPlanMode",
+    // Web tools (Letta Code adds these in the Claude toolset; harmless to
+    // disallow here if absent; future-proofs against upstream additions)
+    "WebFetch",
+    "WebSearch",
+];
+/**
+ * Letta Code's bundled filesystem / shell tools — disallowed when the
+ * session has NO sandbox configured (no `cwd` to confine them to), and
+ * re-enabled when the parent agent's `sandbox_seed_name` is set so the
+ * agent can actually use the seeded files (Step 12.5).
+ */
+const FILESYSTEM_TOOLS = [
+    // File / shell — every preset toolset's core set
+    "Read",
+    "Write",
+    "Edit",
+    "ApplyPatch",
+    "Bash",
+    "Glob",
+    "Grep",
+    // Snake-case variants from the codex_snake / gemini_snake toolsets
+    "read_file_lc",
+    "write_file_lc",
+    "edit_file_lc",
+    "execute_shell_lc",
+];
+/**
+ * Constructs the default `LettaClient` implementation.
+ *
+ * Reads `admin_setting.letta_base_url` + `letta_api_key_encrypted` on
+ * each Letta-Client call (no in-flight polling — fresh-on-demand) and
+ * memoizes the underlying SDK instance against `(apiKey, baseURL)` so
+ * super-admin connection-settings edits propagate without restart.
+ *
+ * Throws on the first Letta-Client call if `admin_setting` has no
+ * `letta_base_url` or no decryptable API key.
+ *
+ * @param deps - see `CreateLettaClientDeps`.
+ * @returns the project-shaped Letta client.
+ *
+ * @see SPECIFICATIONS.md §6.4
+ * @see SPECIFICATIONS.md §11 — `admin_setting` schema
+ */
+export function createDefaultLettaClient(deps) {
+    const SdkCtor = deps.sdkConstructor ?? LettaSdkDefault;
+    const resume = deps.resumeSessionFn ?? resumeSession;
+    let cached = null;
+    const envSource = deps.envSource ?? process.env;
+    /**
+     * Resolves the current `(apiKey, baseURL)` pair and returns a memoized
+     * Letta-Client SDK instance.
+     *
+     * **API key precedence** (per the operator-spec'd model):
+     * 1. If `admin_setting.letta_api_key_encrypted` decrypts to a non-empty,
+     *    non-whitespace string → use that (super-admin set it via the
+     *    admin panel; DB wins over env).
+     * 2. Otherwise → fall back to `env.LETTA_API_KEY` (whitespace-trimmed).
+     * 3. Otherwise → throw — neither source has a usable value.
+     *
+     * Evaluated on every call, so:
+     *  - A super-admin PATCH to /admin/settings takes effect immediately.
+     *  - Clearing the value via the admin panel (empty/whitespace) falls
+     *    back to env on the very next request.
+     *  - A new `.env` after a restart is reflected immediately when the DB
+     *    column is empty.
+     */
+    function resolveApiKey() {
+        const settings = deps.db
+            .select()
+            .from(adminSetting)
+            .where(eq(adminSetting.id, 1))
+            .get();
+        if (settings?.lettaApiKeyEncrypted) {
+            const decrypted = decryptString(deps.encryptionKey, settings.lettaApiKeyEncrypted);
+            if (decrypted.trim().length > 0) {
+                return { apiKey: decrypted, source: "db" };
+            }
+        }
+        const envKey = envSource.LETTA_API_KEY;
+        if (envKey && envKey.trim().length > 0) {
+            return { apiKey: envKey, source: "env" };
+        }
+        throw new Error("No Letta API key configured. Set LETTA_API_KEY in .env, OR PATCH it via /admin/settings.");
+    }
+    function getSdk() {
+        const settings = deps.db
+            .select()
+            .from(adminSetting)
+            .where(eq(adminSetting.id, 1))
+            .get();
+        if (!settings?.lettaBaseUrl) {
+            throw new Error("admin_setting.letta_base_url is empty — configure it via /admin/settings or LETTA_BASE_URL.");
+        }
+        const { apiKey } = resolveApiKey();
+        // The Letta Client SDK appends its own `/v1/...` paths, so a
+        // `letta_base_url` like `http://localhost:8283/v1` produces
+        // double-v1 calls. Strip a trailing `/v1` defensively.
+        const baseURL = settings.lettaBaseUrl.replace(/\/v1\/?$/i, "");
+        if (cached && cached.apiKey === apiKey && cached.baseURL === baseURL) {
+            return cached.sdk;
+        }
+        const sdk = new SdkCtor({ apiKey, baseURL });
+        cached = { apiKey, baseURL, sdk };
+        return sdk;
+    }
+    return {
+        async retrieveAgent(lettaAgentId) {
+            const sdk = getSdk();
+            try {
+                const state = await sdk.agents.retrieve(lettaAgentId);
+                return { id: state.id, name: state.name, model: state.model ?? "" };
+            }
+            catch (err) {
+                if (err instanceof NotFoundError)
+                    return null;
+                throw err;
+            }
+        },
+        async createConversation(lettaAgentId) {
+            const sdk = getSdk();
+            const conv = await sdk.conversations.create({ agent_id: lettaAgentId });
+            return { id: conv.id };
+        },
+        async retrieveConversation(conversationId) {
+            const sdk = getSdk();
+            try {
+                const conv = await sdk.conversations.retrieve(conversationId);
+                return { id: conv.id, agentId: conv.agent_id };
+            }
+            catch (err) {
+                if (err instanceof NotFoundError)
+                    return null;
+                throw err;
+            }
+        },
+        async forkConversation(sourceConversationId) {
+            const sdk = getSdk();
+            try {
+                // The Letta-Client SDK exposes `fork(conversationId, params?)`.
+                // We don't pass a body — defaults are fine for our use case
+                // (forked conversation is not hidden, no extra params needed).
+                const conv = await sdk.conversations.fork(sourceConversationId);
+                return { id: conv.id, agentId: conv.agent_id };
+            }
+            catch (err) {
+                if (err instanceof NotFoundError) {
+                    throw new ForkSourceNotFoundError(sourceConversationId);
+                }
+                throw err;
+            }
+        },
+        async listMessages(conversationId) {
+            const sdk = getSdk();
+            const out = [];
+            const page = await sdk.conversations.messages.list(conversationId);
+            for await (const msg of page) {
+                out.push(msg);
+            }
+            return out;
+        },
+        async deleteMessage(lettaAgentId, messageId) {
+            const sdk = getSdk();
+            try {
+                // The typed `conversations.messages` resource is create/list-only;
+                // the message-delete capability lives on the agent-scoped REST route.
+                // Same raw-HTTP escape hatch `getRunUsageStats` uses for `sdk.get`.
+                await sdk.delete(`/v1/agents/${encodeURIComponent(lettaAgentId)}/messages/${encodeURIComponent(messageId)}`);
+            }
+            catch (err) {
+                // Already gone is fine — the goal state (message absent) is reached.
+                if (err instanceof NotFoundError)
+                    return;
+                throw err;
+            }
+        },
+        async deleteConversation(conversationId) {
+            const sdk = getSdk();
+            try {
+                await sdk.conversations.delete(conversationId);
+            }
+            catch (err) {
+                if (err instanceof NotFoundError)
+                    return;
+                throw err;
+            }
+        },
+        async getRunUsageStats(runId) {
+            const sdk = getSdk();
+            // Two endpoints in parallel:
+            //   - `/v1/runs/{id}/messages` carries persisted assistant
+            //     messages — we need the LAST one's id to stamp the badge.
+            //     The `usage_statistics` SDK stream event is NOT persisted
+            //     here; we used to look for it but it's stream-only.
+            //   - `/v1/runs/{id}/steps` carries per-LLM-call usage with the
+            //     full cache breakdown (`cached_input_tokens`,
+            //     `cache_write_tokens`, `reasoning_tokens`). For multi-step
+            //     turns we sum across steps; for single-step turns we just
+            //     read the one row.
+            //
+            // Best-effort: any failure on either side returns null and the
+            // badge just doesn't render. Never blocks the chat turn.
+            let messagesRaw;
+            let stepsRaw;
+            try {
+                [messagesRaw, stepsRaw] = await Promise.all([
+                    sdk.get(`/v1/runs/${runId}/messages`),
+                    sdk.get(`/v1/runs/${runId}/steps`),
+                ]);
+            }
+            catch {
+                return null;
+            }
+            // Pull the last assistant message id (anchor for the badge).
+            let lastAssistantMessageId = null;
+            if (Array.isArray(messagesRaw)) {
+                for (const item of messagesRaw) {
+                    if (!item || typeof item !== "object")
+                        continue;
+                    const m = item;
+                    if (m["message_type"] === "assistant_message" && typeof m["id"] === "string") {
+                        lastAssistantMessageId = m["id"];
+                    }
+                }
+            }
+            // Sum tokens across steps. Missing fields stay null in the sum
+            // (the sum only goes non-null if at least one step reported it),
+            // so providers that don't expose cache_write keep it null at the
+            // top level rather than silently appearing as 0.
+            if (!Array.isArray(stepsRaw))
+                return null;
+            const sum = {
+                promptTokens: null,
+                completionTokens: null,
+                totalTokens: null,
+                cachedInputTokens: null,
+                cacheWriteTokens: null,
+                reasoningTokens: null,
+                contextTokens: null,
+            };
+            const addInto = (key, v) => {
+                if (typeof v !== "number")
+                    return;
+                sum[key] = (sum[key] ?? 0) + v;
+            };
+            let anyStep = false;
+            for (const item of stepsRaw) {
+                if (!item || typeof item !== "object")
+                    continue;
+                anyStep = true;
+                const s = item;
+                addInto("promptTokens", s["prompt_tokens"]);
+                addInto("completionTokens", s["completion_tokens"]);
+                addInto("totalTokens", s["total_tokens"]);
+                addInto("cachedInputTokens", s["cached_input_tokens"]);
+                addInto("cacheWriteTokens", s["cache_write_tokens"]);
+                addInto("reasoningTokens", s["reasoning_tokens"]);
+            }
+            if (!anyStep)
+                return null;
+            return {
+                lastAssistantMessageId,
+                ...sum,
+            };
+        },
+        async streamUserMessage(opts) {
+            // Throttle gate first — synchronous, throws ServerOverloadedError.
+            // Caller's chat-route catch turns that into HTTP 503.
+            const lease = deps.subprocessThrottle.acquire();
+            // Sync `process.env.LETTA_API_KEY` to the currently-resolved value
+            // (DB > env precedence — see `resolveApiKey`). The Letta Code
+            // subprocess inherits `{...process.env}`, so whatever is in
+            // process.env at spawn time is what the CLI sends to Letta. Mutating
+            // it here on every spawn means a super-admin's PATCH to
+            // /admin/settings takes effect on the very next chat turn without
+            // a process restart — matches the same hot-reload behavior the
+            // direct-REST `getSdk()` path already had via SDK memoization on
+            // the `(apiKey, baseURL)` pair.
+            //
+            // If resolveApiKey throws (no usable value anywhere), we release
+            // the throttle lease before propagating — otherwise the slot would
+            // be leaked.
+            try {
+                const resolved = resolveApiKey();
+                process.env.LETTA_API_KEY = resolved.apiKey;
+            }
+            catch (err) {
+                lease.release();
+                throw err;
+            }
+            // Letta Code's CLI reads `LETTA_BASE_URL` from env and appends
+            // `/v1/...` to it. If the operator set the env to
+            // `http://localhost:8283/v1` (matching the Letta Client SDK's
+            // expectation), the CLI produces double-v1 URLs that 404 — the
+            // CLI surfaces this as "Failed to connect to Letta server /
+            // credentials may be invalid", which is misleading. Strip the
+            // trailing `/v1` in process.env on every spawn (idempotent —
+            // already-stripped values pass through unchanged). Operators
+            // who use the bare-host form aren't affected. (Also done in
+            // `bootstrap.ts` at boot for the primary case; this is
+            // defense-in-depth.)
+            const rawBaseUrl = process.env.LETTA_BASE_URL;
+            if (rawBaseUrl) {
+                const stripped = rawBaseUrl.replace(/\/v1\/?$/i, "");
+                if (stripped !== rawBaseUrl) {
+                    process.env.LETTA_BASE_URL = stripped;
+                }
+            }
+            // Re-seed `~/.letta/settings.json` with `{toolset: "none"}` for
+            // this agent on every spawn. Necessary because concurrent CLI
+            // subprocesses race on settings-file writes (each maintains its
+            // own in-memory snapshot, writes back on exit, last-writer-wins)
+            // and the agent-registration-time seed can be wiped between
+            // spawns. Idempotent — when the entry already matches, this is
+            // a no-op (doesn't touch the file's mtime). Best-effort: a
+            // write failure logs but doesn't block the chat turn (the shim
+            // is the primary mechanism; the settings file is defense-in-
+            // depth + TUI-compatibility).
+            try {
+                seedAgentToolsetNone({
+                    agentId: opts.lettaAgentId,
+                    lettaBaseUrl: process.env.LETTA_BASE_URL,
+                });
+            }
+            catch {
+                // intentionally ignored — see above
+            }
+            // Point the SDK at our CLI shim. The shim injects `--tools ""`
+            // into argv before invoking the real Letta Code CLI, which
+            // mimics the TUI `/toolset none` action — both end up with an
+            // empty `toolRegistry` so the LLM sees only the agent's
+            // ADE-attached tools (no Read/Write/Bash/etc. from Letta
+            // Code's bundled presets). See `lettaCliShim.mjs` for the
+            // full rationale + traceability to the Letta Code source.
+            //
+            // This is set once per spawn (cheap — just a process.env write).
+            // We use the migration's source path so the shim is in the
+            // same repo and ships with ai-hub-server.
+            if (process.env.LETTA_CLI_PATH === undefined) {
+                const { dirname, join } = await import("node:path");
+                const { fileURLToPath } = await import("node:url");
+                const here = dirname(fileURLToPath(import.meta.url));
+                process.env.LETTA_CLI_PATH = join(here, "lettaCliShim.mjs");
+            }
+            // We send the raw user message verbatim; the admin's system prompt
+            // flows through Letta's normal channel (the agent's persisted
+            // `system` field).
+            const userContent = opts.userMessage;
+            // Step-12.5 — disallow-list composition.
+            //
+            // When the parent session has a sandbox folder (opts.cwd set), the
+            // filesystem tools are RE-ENABLED so the agent can use the seeded
+            // files. Without a sandbox, those tools stay disallowed (today's
+            // stateless agent shape; regression-locked by a snapshot test).
+            //
+            // The always-disallowed group (memory / sub-agent / interactive /
+            // web) stays disallowed regardless — the v1 no-memory stance is
+            // unchanged. See docs/server/session-sandboxes.md.
+            const disallowedTools = opts.cwd === undefined
+                ? [...ALWAYS_DISALLOWED_TOOLS, ...FILESYSTEM_TOOLS]
+                : [...ALWAYS_DISALLOWED_TOOLS];
+            let session = null;
+            try {
+                session = resume(opts.conversationId, {
+                    permissionMode: "bypassPermissions",
+                    skillSources: [],
+                    systemInfoReminder: false,
+                    memfsStartup: "skip",
+                    // `disallowedTools` mirrors the effect of TUI `/toolset none` —
+                    // the persisted-setting approach (`~/.letta/settings.json`) is
+                    // only consulted by Letta Code's interactive code path, NOT
+                    // the headless `--input-format stream-json` mode the SDK uses.
+                    // And `--toolset none` is rejected as a CLI arg in headless
+                    // mode (only auto/codex/default/gemini accepted there).
+                    //
+                    // Adding tools to this list as Letta Code adds them upstream
+                    // is maintenance debt — grep `ALWAYS_DISALLOWED_TOOLS` /
+                    // `FILESYSTEM_TOOLS` to find the constants. The longer-term
+                    // fix is upstream: either accept `--toolset none` in headless
+                    // mode or expose a `--no-tools` flag. Filed against
+                    // letta-ai/letta-code (TBD).
+                    disallowedTools,
+                    // Step-12.5 — per-session sandbox folder; see opts.cwd JSDoc.
+                    ...(opts.cwd !== undefined ? { cwd: opts.cwd } : {}),
+                });
+                await session.initialize();
+                await session.send(userContent);
+            }
+            catch (err) {
+                // Spawn / init / send failure — release lease + tear down the
+                // subprocess if we got that far, then re-throw for the caller.
+                if (session) {
+                    try {
+                        session.close();
+                    }
+                    catch {
+                        // best-effort
+                    }
+                }
+                lease.release();
+                throw err;
+            }
+            const activeSession = session;
+            let closed = false;
+            return {
+                events: activeSession.stream(),
+                async abort() {
+                    try {
+                        await activeSession.abort();
+                    }
+                    catch {
+                        // The CLI may already be tearing down — swallow to keep
+                        // the cancel route idempotent. `close()` still runs.
+                    }
+                },
+                close() {
+                    if (closed)
+                        return;
+                    closed = true;
+                    try {
+                        activeSession.close();
+                    }
+                    catch {
+                        // best-effort
+                    }
+                    lease.release();
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/letta/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/letta/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,eAAe,EAAE,EACtB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,aAAa,GAGd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAGN,MAAM,yBAAyB,CAAC;AAOjC,uEAAuE;AACvE,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEpF;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACpB;IAA5B,YAA4B,cAAsB;QAChD,KAAK,CAAC,iCAAiC,cAAc,EAAE,CAAC,CAAC;QAD/B,mBAAc,GAAd,cAAc,CAAQ;QAEhD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,uBAAuB,GAA0B;IACrD,8BAA8B;IAC9B,MAAM;IACN,YAAY;IACZ,UAAU;IACV,WAAW;IACX,4BAA4B;IAC5B,OAAO;IACP,uEAAuE;IACvE,yEAAyE;IACzE,QAAQ;IACR,oBAAoB;IACpB,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,oDAAoD;IACpD,iBAAiB;IACjB,eAAe;IACf,cAAc;IACd,sEAAsE;IACtE,qEAAqE;IACrE,UAAU;IACV,WAAW;CACZ,CAAC;AAEF;;;;;GAKG;AACH,MAAM,gBAAgB,GAA0B;IAC9C,iDAAiD;IACjD,MAAM;IACN,OAAO;IACP,MAAM;IACN,YAAY;IACZ,MAAM;IACN,MAAM;IACN,MAAM;IACN,mEAAmE;IACnE,cAAc;IACd,eAAe;IACf,cAAc;IACd,kBAAkB;CACnB,CAAC;AAuSF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAA2B;IAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,eAAe,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,IAAI,aAAa,CAAC;IACrD,IAAI,MAAM,GAEC,IAAI,CAAC;IAEhB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAK,OAAO,CAAC,GAA0C,CAAC;IAExF;;;;;;;;;;;;;;;;;OAiBG;IACH,SAAS,aAAa;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;aACrB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;aAC7B,GAAG,EAAE,CAAC;QACT,IAAI,QAAQ,EAAE,oBAAoB,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACnF,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,CAAC;QACvC,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,SAAS,MAAM;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;aACrB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;aAC7B,GAAG,EAAE,CAAC;QACT,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QACnC,6DAA6D;QAC7D,4DAA4D;QAC5D,uDAAuD;QACvD,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YACrE,OAAO,MAAM,CAAC,GAAG,CAAC;QACpB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7C,MAAM,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAClC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,YAAY;YAC9B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBACtD,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACtE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,aAAa;oBAAE,OAAO,IAAI,CAAC;gBAC9C,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,YAAY;YACnC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;YACxE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,cAAc;YACvC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBAC9D,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,aAAa;oBAAE,OAAO,IAAI,CAAC;gBAC9C,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,oBAAoB;YACzC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,gEAAgE;gBAChE,4DAA4D;gBAC5D,+DAA+D;gBAC/D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAChE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;oBACjC,MAAM,IAAI,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,cAAc;YAC/B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;YACrB,MAAM,GAAG,GAAmB,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnE,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,SAAS;YACzC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,mEAAmE;gBACnE,sEAAsE;gBACtE,oEAAoE;gBACpE,MAAM,GAAG,CAAC,MAAM,CACd,cAAc,kBAAkB,CAAC,YAAY,CAAC,aAAa,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAC3F,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,IAAI,GAAG,YAAY,aAAa;oBAAE,OAAO;gBACzC,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,cAAc;YACrC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,aAAa;oBAAE,OAAO;gBACzC,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,KAAK;YAC1B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;YACrB,6BAA6B;YAC7B,2DAA2D;YAC3D,+DAA+D;YAC/D,+DAA+D;YAC/D,yDAAyD;YACzD,gEAAgE;YAChE,mDAAmD;YACnD,gEAAgE;YAChE,+DAA+D;YAC/D,wBAAwB;YACxB,EAAE;YACF,+DAA+D;YAC/D,yDAAyD;YACzD,IAAI,WAAoB,CAAC;YACzB,IAAI,QAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBAC1C,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,WAAW,CAAC;oBACrC,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC;iBACnC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YAED,6DAA6D;YAC7D,IAAI,sBAAsB,GAAkB,IAAI,CAAC;YACjD,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC/B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;wBAAE,SAAS;oBAChD,MAAM,CAAC,GAAG,IAA+B,CAAC;oBAC1C,IAAI,CAAC,CAAC,cAAc,CAAC,KAAK,mBAAmB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;wBAC7E,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,iEAAiE;YACjE,iEAAiE;YACjE,iDAAiD;YACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,GAAG,GAAG;gBACV,YAAY,EAAE,IAAqB;gBACnC,gBAAgB,EAAE,IAAqB;gBACvC,WAAW,EAAE,IAAqB;gBAClC,iBAAiB,EAAE,IAAqB;gBACxC,gBAAgB,EAAE,IAAqB;gBACvC,eAAe,EAAE,IAAqB;gBACtC,aAAa,EAAE,IAAqB;aACrC,CAAC;YACF,MAAM,OAAO,GAAG,CAAC,GAAqB,EAAE,CAAU,EAAQ,EAAE;gBAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,OAAO;gBAClC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC,CAAC;YACF,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBAChD,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,GAAG,IAA+B,CAAC;gBAC1C,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;gBAC5C,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBACpD,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;gBAC1C,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBACvD,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;gBACrD,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC1B,OAAO;gBACL,sBAAsB;gBACtB,GAAG,GAAG;aACP,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,IAAI;YAC1B,mEAAmE;YACnE,sDAAsD;YACtD,MAAM,KAAK,GAAkB,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;YAE/D,mEAAmE;YACnE,8DAA8D;YAC9D,4DAA4D;YAC5D,qEAAqE;YACrE,wDAAwD;YACxD,kEAAkE;YAClE,+DAA+D;YAC/D,iEAAiE;YACjE,gCAAgC;YAChC,EAAE;YACF,iEAAiE;YACjE,mEAAmE;YACnE,aAAa;YACb,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC9C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,OAAO,EAAE,CAAC;gBAChB,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,+DAA+D;YAC/D,kDAAkD;YAClD,8DAA8D;YAC9D,+DAA+D;YAC/D,4DAA4D;YAC5D,8DAA8D;YAC9D,6DAA6D;YAC7D,6DAA6D;YAC7D,4DAA4D;YAC5D,uDAAuD;YACvD,qBAAqB;YACrB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAC9C,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACrD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAC5B,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,QAAQ,CAAC;gBACxC,CAAC;YACH,CAAC;YAED,gEAAgE;YAChE,8DAA8D;YAC9D,gEAAgE;YAChE,iEAAiE;YACjE,4DAA4D;YAC5D,+DAA+D;YAC/D,2DAA2D;YAC3D,+DAA+D;YAC/D,6DAA6D;YAC7D,8BAA8B;YAC9B,IAAI,CAAC;gBACH,oBAAoB,CAAC;oBACnB,OAAO,EAAE,IAAI,CAAC,YAAY;oBAC1B,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;iBACzC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;YAED,+DAA+D;YAC/D,2DAA2D;YAC3D,8DAA8D;YAC9D,wDAAwD;YACxD,yDAAyD;YACzD,0DAA0D;YAC1D,0DAA0D;YAC1D,EAAE;YACF,iEAAiE;YACjE,2DAA2D;YAC3D,0CAA0C;YAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;gBACpD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;gBACnD,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;YAC9D,CAAC;YAED,mEAAmE;YACnE,8DAA8D;YAC9D,mBAAmB;YACnB,MAAM,WAAW,GAAW,IAAI,CAAC,WAAW,CAAC;YAE7C,yCAAyC;YACzC,EAAE;YACF,mEAAmE;YACnE,kEAAkE;YAClE,iEAAiE;YACjE,gEAAgE;YAChE,EAAE;YACF,kEAAkE;YAClE,gEAAgE;YAChE,mDAAmD;YACnD,MAAM,eAAe,GACnB,IAAI,CAAC,GAAG,KAAK,SAAS;gBACpB,CAAC,CAAC,CAAC,GAAG,uBAAuB,EAAE,GAAG,gBAAgB,CAAC;gBACnD,CAAC,CAAC,CAAC,GAAG,uBAAuB,CAAC,CAAC;YAEnC,IAAI,OAAO,GAAmB,IAAI,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;oBACpC,cAAc,EAAE,mBAAmB;oBACnC,YAAY,EAAE,EAAE;oBAChB,kBAAkB,EAAE,KAAK;oBACzB,YAAY,EAAE,MAAM;oBACpB,gEAAgE;oBAChE,+DAA+D;oBAC/D,4DAA4D;oBAC5D,+DAA+D;oBAC/D,4DAA4D;oBAC5D,wDAAwD;oBACxD,EAAE;oBACF,6DAA6D;oBAC7D,yDAAyD;oBACzD,4DAA4D;oBAC5D,8DAA8D;oBAC9D,oDAAoD;oBACpD,6BAA6B;oBAC7B,eAAe;oBACf,8DAA8D;oBAC9D,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrD,CAAC,CAAC;gBACH,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC3B,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,8DAA8D;gBAC9D,+DAA+D;gBAC/D,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC;wBACH,OAAO,CAAC,KAAK,EAAE,CAAC;oBAClB,CAAC;oBAAC,MAAM,CAAC;wBACP,cAAc;oBAChB,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,OAAO,EAAE,CAAC;gBAChB,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,MAAM,aAAa,GAAG,OAAO,CAAC;YAC9B,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE;gBAC9B,KAAK,CAAC,KAAK;oBACT,IAAI,CAAC;wBACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;oBAC9B,CAAC;oBAAC,MAAM,CAAC;wBACP,wDAAwD;wBACxD,qDAAqD;oBACvD,CAAC;gBACH,CAAC;gBACD,KAAK;oBACH,IAAI,MAAM;wBAAE,OAAO;oBACnB,MAAM,GAAG,IAAI,CAAC;oBACd,IAAI,CAAC;wBACH,aAAa,CAAC,KAAK,EAAE,CAAC;oBACxB,CAAC;oBAAC,MAAM,CAAC;wBACP,cAAc;oBAChB,CAAC;oBACD,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}