@evalops/maestro 0.10.17 → 0.10.20

package/dist/server/handlers/pending-requests.js.map

@@ -1 +1 @@
-{"version":3,"file":"pending-requests.js","sourceRoot":"","sources":["../../../src/server/handlers/pending-requests.ts"],"names":[],"mappings":"AACA,OAAO,EAKN,yCAAyC,GAEzC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAEN,oBAAoB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAMxD,SAAS,eAAe,CAAC,MAAiC;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CACzB,MAAkC,EAClC,QAAgD;IAEhD,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACrC,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,mBAAmB,QAAQ,2BAA2B,MAAM,UAAU,CACtE,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAC1B,OAAqC,EACrC,SAA6B;IAE7B,IAAI,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QACvE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;IAClE,CAAC;AACF,CAAC;AAED,SAAS,uBAAuB,CAC/B,KAA0C;IAE1C,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC;AACvB,CAAC;AAED,SAAS,kBAAkB,CAC1B,KAA0C;IAE1C,IACC,KAAK,CAAC,MAAM,KAAK,OAAO;QACxB,KAAK,CAAC,MAAM,KAAK,MAAM;QACvB,KAAK,CAAC,MAAM,KAAK,OAAO,EACvB,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,wBAAwB,CAChC,KAA0C;IAE1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC;AACtB,CAAC;AAED,SAAS,0BAA0B,CAClC,IAA0C,EAC1C,OAAgB;IAEhB,IAAI,OAAO,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QACzD,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAC5B,OAAqC;IAErC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,gBAAgB;YAClD,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,iBAAiB,CAAC;IACtB,CAAC;IACD,IACC,OAAO,CAAC,IAAI,KAAK,aAAa;QAC9B,OAAO,CAAC,IAAI,KAAK,iBAAiB;QAClC,OAAO,CAAC,IAAI,KAAK,YAAY,EAC5B,CAAC;QACF,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CACnB,OAAqC,EACrC,UAA4C;IAE5C,OAAO;QACN,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACR,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU;YACV,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO;YAC/C,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,iBAAiB,EAAE,oBAAoB,CAAC,OAAO,CAAC;SAChD;KACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAAiC;IAEjC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEhC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAChC,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACR,CAAC;QAED,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GACV,MAAM,oBAAoB,CACzB,GAAG,EACH,yCAAyC,CACzC,CAAC;QACH,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;QAC1E,CAAC;QAED,iBAAiB,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,kBAAkB,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAEpD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,UAA4C,CAAC;QAEjD,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;YAC7B,KAAK,UAAU,CAAC,CAAC,CAAC;gBACjB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;gBAChD,QAAQ,GAAG,oBAAoB,CAAC,eAAe,CAAC,SAAS,EAAE;oBAC1D,QAAQ,EAAE,QAAQ,KAAK,UAAU;oBACjC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,MAAM;iBAClB,CAAC,CAAC;gBACH,UAAU,GAAG,QAAQ,CAAC;gBACtB,MAAM;YACP,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBACnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBACzC,QAAQ,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,SAAS,EAAE;oBAC3D,MAAM;oBACN,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,MAAM;iBAClB,CAAC,CAAC;gBACH,UAAU;oBACT,MAAM,KAAK,OAAO;wBACjB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,MAAM,KAAK,MAAM;4BAClB,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,SAAS,CAAC;gBACf,MAAM;YACP,CAAC;YACD,KAAK,aAAa,CAAC;YACnB,KAAK,iBAAiB,CAAC;YACvB,KAAK,YAAY,CAAC,CAAC,CAAC;gBACnB,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;gBACvC,QAAQ,GAAG,oBAAoB,CAAC,iBAAiB,CAChD,SAAS,EACT,OAAO,EACP,OAAO,CACP,CAAC;gBACF,UAAU,GAAG,0BAA0B,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACtE,MAAM;YACP,CAAC;QACF,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;QAC1E,CAAC;QAED,QAAQ,CACP,GAAG,EACH,GAAG,EACH,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,EACvC,WAAW,EACX,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;AACF,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport {\n\ttype ComposerPendingRequestKind,\n\ttype ComposerPendingRequestPlatformOperation,\n\ttype ComposerPendingRequestResolution,\n\ttype ComposerPendingRequestResumeRequest,\n\tComposerPendingRequestResumeRequestSchema,\n\ttype ComposerPendingRequestResumeResponse,\n} from \"@evalops/contracts\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport {\n\ttype PendingServerRequestSnapshot,\n\tserverRequestManager,\n} from \"../server-request-manager.js\";\nimport { ApiError, respondWithApiError, sendJson } from \"../server-utils.js\";\nimport { parseAndValidateJson } from \"../validation.js\";\n\ntype PendingRequestRouteParams = {\n\trequestId?: string;\n};\n\nfunction decodeRequestId(params: PendingRequestRouteParams): string {\n\tconst raw = params.requestId?.trim();\n\tif (!raw) {\n\t\tthrow new ApiError(400, \"Pending request id is required\");\n\t}\n\ttry {\n\t\treturn decodeURIComponent(raw);\n\t} catch {\n\t\tthrow new ApiError(400, \"Pending request id is invalid\");\n\t}\n}\n\nfunction assertRequestKind(\n\tactual: ComposerPendingRequestKind,\n\texpected: ComposerPendingRequestKind | undefined,\n): void {\n\tif (expected && expected !== actual) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`Pending request ${expected} resolver cannot resume ${actual} request`,\n\t\t);\n\t}\n}\n\nfunction assertSessionMatch(\n\trequest: PendingServerRequestSnapshot,\n\tsessionId: string | undefined,\n): void {\n\tif (sessionId && request.sessionId && sessionId !== request.sessionId) {\n\t\tthrow new ApiError(404, \"Pending request not found for session\");\n\t}\n}\n\nfunction requireApprovalDecision(\n\tinput: ComposerPendingRequestResumeRequest,\n): \"approved\" | \"denied\" {\n\tif (input.decision !== \"approved\" && input.decision !== \"denied\") {\n\t\tthrow new ApiError(400, \"Approval resume requires decision\");\n\t}\n\treturn input.decision;\n}\n\nfunction requireRetryAction(\n\tinput: ComposerPendingRequestResumeRequest,\n): \"retry\" | \"skip\" | \"abort\" {\n\tif (\n\t\tinput.action !== \"retry\" &&\n\t\tinput.action !== \"skip\" &&\n\t\tinput.action !== \"abort\"\n\t) {\n\t\tthrow new ApiError(400, \"Tool retry resume requires action\");\n\t}\n\treturn input.action;\n}\n\nfunction requireClientToolContent(\n\tinput: ComposerPendingRequestResumeRequest,\n): NonNullable<ComposerPendingRequestResumeRequest[\"content\"]> {\n\tif (!Array.isArray(input.content)) {\n\t\tthrow new ApiError(400, \"Client request resume requires content\");\n\t}\n\treturn input.content;\n}\n\nfunction resolutionForClientRequest(\n\tkind: PendingServerRequestSnapshot[\"kind\"],\n\tisError: boolean,\n): ComposerPendingRequestResolution {\n\tif (isError) {\n\t\treturn \"failed\";\n\t}\n\tif (kind === \"mcp_elicitation\" || kind === \"user_input\") {\n\t\treturn \"answered\";\n\t}\n\treturn \"completed\";\n}\n\nfunction platformOperationFor(\n\trequest: PendingServerRequestSnapshot,\n): ComposerPendingRequestPlatformOperation | undefined {\n\tif (!request.platform) {\n\t\treturn undefined;\n\t}\n\tif (request.kind === \"approval\") {\n\t\treturn request.platform.source === \"tool_execution\"\n\t\t\t? \"ResumeToolExecution\"\n\t\t\t: \"ResolveApproval\";\n\t}\n\tif (\n\t\trequest.kind === \"client_tool\" ||\n\t\trequest.kind === \"mcp_elicitation\" ||\n\t\trequest.kind === \"user_input\"\n\t) {\n\t\treturn \"ResumeRun\";\n\t}\n\treturn undefined;\n}\n\nfunction responseFor(\n\trequest: PendingServerRequestSnapshot,\n\tresolution: ComposerPendingRequestResolution,\n): ComposerPendingRequestResumeResponse {\n\treturn {\n\t\tsuccess: true,\n\t\trequest: {\n\t\t\tid: request.id,\n\t\t\tkind: request.kind,\n\t\t\tsessionId: request.sessionId,\n\t\t\tresolution,\n\t\t\tsource: request.platform ? \"platform\" : \"local\",\n\t\t\tplatform: request.platform,\n\t\t\tplatformOperation: platformOperationFor(request),\n\t\t},\n\t};\n}\n\nexport async function handlePendingRequestResume(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams: PendingRequestRouteParams,\n) {\n\tconst { corsHeaders } = context;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tres.writeHead(405, corsHeaders);\n\t\t\tres.end();\n\t\t\treturn;\n\t\t}\n\n\t\tconst requestId = decodeRequestId(params);\n\t\tconst input =\n\t\t\tawait parseAndValidateJson<ComposerPendingRequestResumeRequest>(\n\t\t\t\treq,\n\t\t\t\tComposerPendingRequestResumeRequestSchema,\n\t\t\t);\n\t\tconst pendingRequest = serverRequestManager.get(requestId);\n\t\tif (!pendingRequest) {\n\t\t\tthrow new ApiError(404, \"Pending request not found or already resolved\");\n\t\t}\n\n\t\tassertRequestKind(pendingRequest.kind, input.kind);\n\t\tassertSessionMatch(pendingRequest, input.sessionId);\n\n\t\tlet resolved = false;\n\t\tlet resolution: ComposerPendingRequestResolution;\n\n\t\tswitch (pendingRequest.kind) {\n\t\t\tcase \"approval\": {\n\t\t\t\tconst decision = requireApprovalDecision(input);\n\t\t\t\tresolved = serverRequestManager.resolveApproval(requestId, {\n\t\t\t\t\tapproved: decision === \"approved\",\n\t\t\t\t\treason: input.reason,\n\t\t\t\t\tresolvedBy: \"user\",\n\t\t\t\t});\n\t\t\t\tresolution = decision;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"tool_retry\": {\n\t\t\t\tconst action = requireRetryAction(input);\n\t\t\t\tresolved = serverRequestManager.resolveToolRetry(requestId, {\n\t\t\t\t\taction,\n\t\t\t\t\treason: input.reason,\n\t\t\t\t\tresolvedBy: \"user\",\n\t\t\t\t});\n\t\t\t\tresolution =\n\t\t\t\t\taction === \"retry\"\n\t\t\t\t\t\t? \"retried\"\n\t\t\t\t\t\t: action === \"skip\"\n\t\t\t\t\t\t\t? \"skipped\"\n\t\t\t\t\t\t\t: \"aborted\";\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"client_tool\":\n\t\t\tcase \"mcp_elicitation\":\n\t\t\tcase \"user_input\": {\n\t\t\t\tconst content = requireClientToolContent(input);\n\t\t\t\tconst isError = input.isError === true;\n\t\t\t\tresolved = serverRequestManager.resolveClientTool(\n\t\t\t\t\trequestId,\n\t\t\t\t\tcontent,\n\t\t\t\t\tisError,\n\t\t\t\t);\n\t\t\t\tresolution = resolutionForClientRequest(pendingRequest.kind, isError);\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\n\t\tif (!resolved) {\n\t\t\tthrow new ApiError(404, \"Pending request not found or already resolved\");\n\t\t}\n\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\tresponseFor(pendingRequest, resolution),\n\t\t\tcorsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 400, corsHeaders, req);\n\t}\n}\n"]}
+{"version":3,"file":"pending-requests.js","sourceRoot":"","sources":["../../../src/server/handlers/pending-requests.ts"],"names":[],"mappings":"AACA,OAAO,EAKN,yCAAyC,GAEzC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAEN,oBAAoB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAqBxD,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAC9C,MAAM,2BAA2B,GAAG,EAAE,GAAG,MAAM,CAAC;AAChD,MAAM,qBAAqB,GAAG,IAAI,GAAG,EASlC,CAAC;AACJ,MAAM,eAAe,GAAG,IAAI,GAAG,EAS5B,CAAC;AAEJ,MAAM,mCAAoC,SAAQ,QAAQ;IACzD,YACC,OAAe,EACN,QAA8C,EAC9C,aAAkC;QAE3C,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAHX,aAAQ,GAAR,QAAQ,CAAsC;QAC9C,kBAAa,GAAb,aAAa,CAAqB;IAG5C,CAAC;CACD;AAED,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACnD,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,qBAAqB,EAAE,CAAC;QACzD,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAC7B,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,wBAAwB,CAChC,SAAiB,EACjB,KAA0C,EAC1C,QAA8C,EAC9C,OAAe,EACf,aAAmC,EACnC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAChC,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE;QACpC,SAAS,EACR,GAAG;YACH,CAAC,aAAa;gBACb,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,8BAA8B,CAAC;QACnC,gBAAgB,EAAE,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC;QACjE,aAAa;QACb,QAAQ;QACR,OAAO;KACP,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC9B,SAAiB,EACjB,KAA0C,EAC1C,OAAe,EACf,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAUhB,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,iCAAiC,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IACC,MAAM,CAAC,gBAAgB;QACvB,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EACrD,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,iCAAiC,CACzC,QAA8C,EAC9C,KAA0C;IAE1C,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,sBAAsB,CAC9B,KAA0C,EAC1C,OAAmE;IAEnE,OAAO,IAAI,CAAC,SAAS,CAAC;QACrB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO,EAAE,IAAI;QACjC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO,EAAE,SAAS;QAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;QAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;KACpB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CACjC,SAAiB,EACjB,KAA0C,EAC1C,OAAe;IAEf,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,EAAE;QACtD,IAAI,EAAE,QAAQ,CAAC,WAAW;QAC1B,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,IACC,QAAQ,CAAC,OAAO,KAAK,OAAO;QAC5B,QAAQ,CAAC,gBAAgB,KAAK,gBAAgB,EAC7C,CAAC;QACF,OAAO,QAAQ,CAAC,OAAO,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,eAAe,CAAC,MAAiC;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CACzB,MAAkC,EAClC,QAAgD;IAEhD,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACrC,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,mBAAmB,QAAQ,2BAA2B,MAAM,UAAU,CACtE,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAC1B,OAAqC,EACrC,SAA6B;IAE7B,IAAI,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QACvE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;IAClE,CAAC;AACF,CAAC;AAED,SAAS,uBAAuB,CAC/B,KAA0C;IAE1C,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC;AACvB,CAAC;AAED,SAAS,kBAAkB,CAC1B,KAA0C;IAE1C,IACC,KAAK,CAAC,MAAM,KAAK,OAAO;QACxB,KAAK,CAAC,MAAM,KAAK,MAAM;QACvB,KAAK,CAAC,MAAM,KAAK,OAAO,EACvB,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,wBAAwB,CAChC,KAA0C;IAE1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC;AACtB,CAAC;AAED,SAAS,0BAA0B,CAClC,IAA0C,EAC1C,OAAgB;IAEhB,IAAI,OAAO,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QACzD,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAC5B,OAAqC;IAErC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,mBAAmB;YACrD,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,SAAS,CAAC;IACd,CAAC;IACD,IACC,OAAO,CAAC,IAAI,KAAK,aAAa;QAC9B,OAAO,CAAC,IAAI,KAAK,iBAAiB;QAClC,OAAO,CAAC,IAAI,KAAK,YAAY,EAC5B,CAAC;QACF,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CACnB,OAAqC,EACrC,UAA4C,EAC5C,iBAA2D;IAE3D,MAAM,SAAS,GAAG,iBAAiB,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACrE,OAAO;QACN,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACR,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU;YACV,MAAM,EACL,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,SAAS,KAAK,WAAW;gBACrD,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,OAAO;YACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,iBAAiB,EAAE,SAAS;SAC5B;KACD,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC9B,IAA0C;IAE1C,OAAO,CACN,IAAI,KAAK,aAAa;QACtB,IAAI,KAAK,iBAAiB;QAC1B,IAAI,KAAK,YAAY,CACrB,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAqC,EACrC,OAAoC;IAEpC,OAAO,CACN,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC;QACjC,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,sBAAsB,CAAC;QAC5D,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAChE,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAClC,OAAqC,EACrC,OAAoC;IAEpC,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IACpC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,eAAe,GACpB,cAAc,CAAC,MAAM,CAAC,sBAAsB,CAAC;QAC7C,cAAc,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACnD,IACC,eAAe;QACf,OAAO,CAAC,SAAS;QACjB,eAAe,KAAK,OAAO,CAAC,SAAS,EACpC,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,SAAiB;IACzD,OAAO,WAAW,UAAU,CAAC,SAAS,CAAC,SAAS,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB,EAAE,SAAiB;IAChE,OAAO,WAAW,UAAU,CAAC,SAAS,CAAC,WAAW,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC3C,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,OAAO,sCAAsC,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC5C,OAAqC,EACrC,UAA4C,EAC5C,OAAoE,EACpE,OAAgB,EAChB,OAAoC;IAEpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,SAAS,GACd,OAAO,CAAC,4BAA4B,EAAE,SAAS,IAAI,qBAAqB,CAAC;IAC1E,IAAI,CAAC;QACJ,MAAM,SAAS,CAAC;YACf,KAAK;YACL,MAAM,EAAE,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YAC3C,aAAa,EAAE,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE;gBACR,kBAAkB,EAAE,SAAS;gBAC7B,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,YAAY,EAAE,OAAO,CAAC,IAAI;gBAC1B,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,UAAU;gBACV,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,OAAO;gBACjB,OAAO;aACP;SACD,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,mBAAmB,CAAC,qCAAqC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,SAAiB,EACjB,KAA0C,EAC1C,cAA4C,EAC5C,OAAoC;IAEpC,iBAAiB,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,kBAAkB,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAEpD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAA4C,CAAC;IACjD,IAAI,iBAAsE,CAAC;IAE3E,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;QAC7B,KAAK,UAAU,CAAC,CAAC,CAAC;YACjB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAChD,QAAQ,GAAG,oBAAoB,CAAC,eAAe,CAAC,SAAS,EAAE;gBAC1D,QAAQ,EAAE,QAAQ,KAAK,UAAU;gBACjC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,MAAM;aAClB,CAAC,CAAC;YACH,UAAU,GAAG,QAAQ,CAAC;YACtB,MAAM;QACP,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACzC,QAAQ,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,SAAS,EAAE;gBAC3D,MAAM;gBACN,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,MAAM;aAClB,CAAC,CAAC;YACH,UAAU;gBACT,MAAM,KAAK,OAAO;oBACjB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,MAAM,KAAK,MAAM;wBAClB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,SAAS,CAAC;YACf,MAAM;QACP,CAAC;QACD,KAAK,aAAa,CAAC;QACnB,KAAK,iBAAiB,CAAC;QACvB,KAAK,YAAY,CAAC,CAAC,CAAC;YACnB,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;YACvC,UAAU,GAAG,0BAA0B,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,oBAAoB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YAChE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM;YACP,CAAC;YACD,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,MAAM;YACP,CAAC;YACD,IAAI,CAAC;gBACJ,iBAAiB,GAAG,MAAM,8BAA8B,CACvD,OAAO,CAAC,OAAO,EACf,UAAU,EACV,OAAO,EACP,OAAO,EACP,OAAO,CACP,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBAC/D,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,aAAa,CAAC;gBACtB,CAAC;gBACD,MAAM,OAAO,GACZ,KAAK,YAAY,KAAK;oBACrB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,qCAAqC,CAAC;gBAC1C,MAAM,IAAI,mCAAmC,CAAC,OAAO,EAAE,aAAa,EAAE;oBACrE,OAAO;oBACP,OAAO;oBACP,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,UAAU;iBACV,CAAC,CAAC;YACJ,CAAC;YACD,MAAM;QACP,CAAC;IACF,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,WAAW,CAAC,cAAc,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,yBAAyB,CACvC,SAAiB,EACjB,KAA0C,EAC1C,MAGC,EACD,OAAe,EACf,OAAoC;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;IACnC,IAAI,CAAC;QACJ,MAAM,iBAAiB,GAAG,MAAM,8BAA8B,CAC7D,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,OAAO,CACP,CAAC;QACF,MAAM,QAAQ,GAAG,WAAW,CAC3B,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,UAAU,EAChB,iBAAiB,CACjB,CAAC;QACF,wBAAwB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9D,OAAO,QAAQ,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,QAAQ,CAAC;QACxB,CAAC;QACD,wBAAwB,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5E,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAAiC;IAEjC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChC,IAAI,SAA6B,CAAC;IAClC,IAAI,KAAsD,CAAC;IAC3D,IAAI,OAA2B,CAAC;IAEhC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAChC,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACR,CAAC;QAED,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,GAAG,MAAM,oBAAoB,CACjC,GAAG,EACH,yCAAyC,CACzC,CAAC;QACF,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,gBAAgB,GAAG,SAAS,CAAC;QACnC,MAAM,YAAY,GAAG,KAAK,CAAC;QAC3B,MAAM,cAAc,GAAG,OAAO,CAAC;QAC/B,MAAM,QAAQ,GAAG,yBAAyB,CACzC,gBAAgB,EAChB,YAAY,EACZ,cAAc,CACd,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;YACrD,OAAO;QACR,CAAC;QAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAClE,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,sBAAsB,CACpC,gBAAgB,EAChB,YAAY,EACZ,cAAc,CACd,CAAC;YACF,IAAI,MAAM,EAAE,CAAC;gBACZ,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBAC1B,MAAM,YAAY,GAAG,yBAAyB,CAC7C,gBAAgB,EAChB,YAAY,EACZ;wBACC,aAAa,EAAE,MAAM,CAAC,aAAa;wBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;qBACzB,EACD,cAAc,EACd,OAAsC,CACtC,CAAC;oBACF,eAAe,CAAC,GAAG,CAAC,gBAAgB,EAAE;wBACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;wBACzC,OAAO,EAAE,YAAY;wBACrB,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI;wBACzC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS;wBAC5C,OAAO,EAAE,cAAc;qBACvB,CAAC,CAAC;oBACH,IAAI,CAAC;wBACJ,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;wBACpC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;wBAC/C,OAAO;oBACR,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;wBACvD,OAAO;oBACR,CAAC;4BAAS,CAAC;wBACV,IACC,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,OAAO,KAAK,YAAY,EAC9D,CAAC;4BACF,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;wBAC1C,CAAC;oBACF,CAAC;gBACF,CAAC;gBACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;gBACtD,OAAO;YACR,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,OAAsC,CAAC;QAC7D,MAAM,aAAa,GAAG,qBAAqB,CAC1C,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,aAAa,CACb,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACnB,wBAAwB,CACvB,gBAAgB,EAChB,YAAY,EACZ,QAAQ,EACR,cAAc,CACd,CAAC;YACF,OAAO,QAAQ,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,eAAe,CAAC,GAAG,CAAC,gBAAgB,EAAE;YACrC,gBAAgB;YAChB,OAAO,EAAE,aAAa;YACtB,WAAW,EAAE,cAAc,CAAC,IAAI;YAChC,SAAS,EAAE,cAAc,CAAC,SAAS;YACnC,OAAO,EAAE,cAAc;SACvB,CAAC,CAAC;QACH,IAAI,QAA8C,CAAC;QACnD,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,aAAa,CAAC;QAChC,CAAC;gBAAS,CAAC;YACV,IAAI,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,OAAO,KAAK,aAAa,EAAE,CAAC;gBACtE,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC1C,CAAC;QACF,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IACC,KAAK,YAAY,mCAAmC;YACpD,SAAS;YACT,KAAK;YACL,OAAO,EACN,CAAC;YACF,wBAAwB,CACvB,SAAS,EACT,KAAK,EACL,KAAK,CAAC,QAAQ,EACd,OAAO,EACP,KAAK,CAAC,aAAa,CACnB,CAAC;QACH,CAAC;QACD,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;AACF,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport {\n\ttype ComposerPendingRequestKind,\n\ttype ComposerPendingRequestPlatformOperation,\n\ttype ComposerPendingRequestResolution,\n\ttype ComposerPendingRequestResumeRequest,\n\tComposerPendingRequestResumeRequestSchema,\n\ttype ComposerPendingRequestResumeResponse,\n} from \"@evalops/contracts\";\nimport { resumeAgentRuntimeRun } from \"../../platform/agent-runtime-client.js\";\nimport { isAbortError } from \"../../utils/abort-error.js\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport { getAuthSubject } from \"../authz.js\";\nimport {\n\ttype PendingServerRequestSnapshot,\n\tserverRequestManager,\n} from \"../server-request-manager.js\";\nimport { ApiError, respondWithApiError, sendJson } from \"../server-utils.js\";\nimport { parseAndValidateJson } from \"../validation.js\";\n\ntype PendingRequestRouteParams = {\n\trequestId?: string;\n};\n\ntype PendingRequestPlatformResumeOperations = {\n\tresumeRun?: typeof resumeAgentRuntimeRun;\n};\n\ntype PendingRequestResumeContext = WebServerContext & {\n\tplatformPendingRequestResume?: PendingRequestPlatformResumeOperations;\n};\n\ntype PlatformResumeRetry = {\n\tcontent: NonNullable<ComposerPendingRequestResumeRequest[\"content\"]>;\n\tisError: boolean;\n\trequest: PendingServerRequestSnapshot;\n\tresolution: ComposerPendingRequestResolution;\n};\n\nconst RESOLVED_RESPONSE_CACHE_TTL_MS = 60_000;\nconst PLATFORM_RETRY_CACHE_TTL_MS = 30 * 60_000;\nconst resolvedResponseCache = new Map<\n\tstring,\n\t{\n\t\texpiresAt: number;\n\t\tinputFingerprint: string;\n\t\tplatformRetry?: PlatformResumeRetry;\n\t\tresponse: ComposerPendingRequestResumeResponse;\n\t\tsubject: string;\n\t}\n>();\nconst inFlightResumes = new Map<\n\tstring,\n\t{\n\t\tinputFingerprint: string;\n\t\tpromise: Promise<ComposerPendingRequestResumeResponse>;\n\t\trequestKind: ComposerPendingRequestKind;\n\t\tsessionId?: string;\n\t\tsubject: string;\n\t}\n>();\n\nclass PendingRequestResolvedPlatformError extends ApiError {\n\tconstructor(\n\t\tmessage: string,\n\t\treadonly response: ComposerPendingRequestResumeResponse,\n\t\treadonly platformRetry: PlatformResumeRetry,\n\t) {\n\t\tsuper(502, message);\n\t}\n}\n\nfunction safeIdPart(value: string): string {\n\treturn value.replace(/[^A-Za-z0-9_.:-]+/g, \"_\").slice(0, 96) || \"unknown\";\n}\n\nfunction nonEmptyString(value: unknown): string | undefined {\n\treturn typeof value === \"string\" && value.trim().length > 0\n\t\t? value.trim()\n\t\t: undefined;\n}\n\nfunction pruneResolvedResponseCache(now = Date.now()): void {\n\tfor (const [requestId, cached] of resolvedResponseCache) {\n\t\tif (cached.expiresAt <= now) {\n\t\t\tresolvedResponseCache.delete(requestId);\n\t\t}\n\t}\n}\n\nfunction rememberResolvedResponse(\n\trequestId: string,\n\tinput: ComposerPendingRequestResumeRequest,\n\tresponse: ComposerPendingRequestResumeResponse,\n\tsubject: string,\n\tplatformRetry?: PlatformResumeRetry,\n\tnow = Date.now(),\n): void {\n\tpruneResolvedResponseCache(now);\n\tresolvedResponseCache.set(requestId, {\n\t\texpiresAt:\n\t\t\tnow +\n\t\t\t(platformRetry\n\t\t\t\t? PLATFORM_RETRY_CACHE_TTL_MS\n\t\t\t\t: RESOLVED_RESPONSE_CACHE_TTL_MS),\n\t\tinputFingerprint: resumeInputFingerprint(input, response.request),\n\t\tplatformRetry,\n\t\tresponse,\n\t\tsubject,\n\t});\n}\n\nfunction getCachedResolvedEntry(\n\trequestId: string,\n\tinput: ComposerPendingRequestResumeRequest,\n\tsubject: string,\n\tnow = Date.now(),\n):\n\t| {\n\t\t\texpiresAt: number;\n\t\t\tinputFingerprint: string;\n\t\t\tplatformRetry?: PlatformResumeRetry;\n\t\t\tresponse: ComposerPendingRequestResumeResponse;\n\t\t\tsubject: string;\n\t  }\n\t| undefined {\n\tpruneResolvedResponseCache(now);\n\tconst cached = resolvedResponseCache.get(requestId);\n\tif (!cached) {\n\t\treturn undefined;\n\t}\n\tif (cached.subject !== subject) {\n\t\treturn undefined;\n\t}\n\tif (input.kind && input.kind !== cached.response.request.kind) {\n\t\treturn undefined;\n\t}\n\tif (!cachedResponseSessionMatchesInput(cached.response, input)) {\n\t\treturn undefined;\n\t}\n\tif (\n\t\tcached.inputFingerprint !==\n\t\tresumeInputFingerprint(input, cached.response.request)\n\t) {\n\t\treturn undefined;\n\t}\n\treturn cached;\n}\n\nfunction cachedResponseSessionMatchesInput(\n\tresponse: ComposerPendingRequestResumeResponse,\n\tinput: ComposerPendingRequestResumeRequest,\n): boolean {\n\tif (!input.sessionId) {\n\t\treturn true;\n\t}\n\treturn response.request.sessionId === input.sessionId;\n}\n\nfunction resumeInputFingerprint(\n\tinput: ComposerPendingRequestResumeRequest,\n\trequest?: { kind?: ComposerPendingRequestKind; sessionId?: string },\n): string {\n\treturn JSON.stringify({\n\t\tkind: input.kind ?? request?.kind,\n\t\tsessionId: input.sessionId ?? request?.sessionId,\n\t\tdecision: input.decision,\n\t\taction: input.action,\n\t\tcontent: input.content,\n\t\tisError: input.isError === true,\n\t\treason: input.reason,\n\t});\n}\n\nfunction getMatchingInFlightResume(\n\trequestId: string,\n\tinput: ComposerPendingRequestResumeRequest,\n\tsubject: string,\n): Promise<ComposerPendingRequestResumeResponse> | undefined {\n\tconst inFlight = inFlightResumes.get(requestId);\n\tif (!inFlight) {\n\t\treturn undefined;\n\t}\n\tconst inputFingerprint = resumeInputFingerprint(input, {\n\t\tkind: inFlight.requestKind,\n\t\tsessionId: inFlight.sessionId,\n\t});\n\tif (\n\t\tinFlight.subject === subject &&\n\t\tinFlight.inputFingerprint === inputFingerprint\n\t) {\n\t\treturn inFlight.promise;\n\t}\n\tthrow new ApiError(409, \"Pending request resume already in progress\");\n}\n\nfunction decodeRequestId(params: PendingRequestRouteParams): string {\n\tconst raw = params.requestId?.trim();\n\tif (!raw) {\n\t\tthrow new ApiError(400, \"Pending request id is required\");\n\t}\n\ttry {\n\t\treturn decodeURIComponent(raw);\n\t} catch {\n\t\tthrow new ApiError(400, \"Pending request id is invalid\");\n\t}\n}\n\nfunction assertRequestKind(\n\tactual: ComposerPendingRequestKind,\n\texpected: ComposerPendingRequestKind | undefined,\n): void {\n\tif (expected && expected !== actual) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`Pending request ${expected} resolver cannot resume ${actual} request`,\n\t\t);\n\t}\n}\n\nfunction assertSessionMatch(\n\trequest: PendingServerRequestSnapshot,\n\tsessionId: string | undefined,\n): void {\n\tif (sessionId && request.sessionId && sessionId !== request.sessionId) {\n\t\tthrow new ApiError(404, \"Pending request not found for session\");\n\t}\n}\n\nfunction requireApprovalDecision(\n\tinput: ComposerPendingRequestResumeRequest,\n): \"approved\" | \"denied\" {\n\tif (input.decision !== \"approved\" && input.decision !== \"denied\") {\n\t\tthrow new ApiError(400, \"Approval resume requires decision\");\n\t}\n\treturn input.decision;\n}\n\nfunction requireRetryAction(\n\tinput: ComposerPendingRequestResumeRequest,\n): \"retry\" | \"skip\" | \"abort\" {\n\tif (\n\t\tinput.action !== \"retry\" &&\n\t\tinput.action !== \"skip\" &&\n\t\tinput.action !== \"abort\"\n\t) {\n\t\tthrow new ApiError(400, \"Tool retry resume requires action\");\n\t}\n\treturn input.action;\n}\n\nfunction requireClientToolContent(\n\tinput: ComposerPendingRequestResumeRequest,\n): NonNullable<ComposerPendingRequestResumeRequest[\"content\"]> {\n\tif (!Array.isArray(input.content)) {\n\t\tthrow new ApiError(400, \"Client request resume requires content\");\n\t}\n\treturn input.content;\n}\n\nfunction resolutionForClientRequest(\n\tkind: PendingServerRequestSnapshot[\"kind\"],\n\tisError: boolean,\n): ComposerPendingRequestResolution {\n\tif (isError) {\n\t\treturn \"failed\";\n\t}\n\tif (kind === \"mcp_elicitation\" || kind === \"user_input\") {\n\t\treturn \"answered\";\n\t}\n\treturn \"completed\";\n}\n\nfunction platformOperationFor(\n\trequest: PendingServerRequestSnapshot,\n): ComposerPendingRequestPlatformOperation | undefined {\n\tif (!request.platform) {\n\t\treturn undefined;\n\t}\n\tif (request.kind === \"approval\") {\n\t\treturn request.platform.source === \"approvals_service\"\n\t\t\t? \"ResolveApproval\"\n\t\t\t: undefined;\n\t}\n\tif (\n\t\trequest.kind === \"client_tool\" ||\n\t\trequest.kind === \"mcp_elicitation\" ||\n\t\trequest.kind === \"user_input\"\n\t) {\n\t\treturn \"ResumeRun\";\n\t}\n\treturn undefined;\n}\n\nfunction responseFor(\n\trequest: PendingServerRequestSnapshot,\n\tresolution: ComposerPendingRequestResolution,\n\tplatformOperation?: ComposerPendingRequestPlatformOperation,\n): ComposerPendingRequestResumeResponse {\n\tconst operation = platformOperation ?? platformOperationFor(request);\n\treturn {\n\t\tsuccess: true,\n\t\trequest: {\n\t\t\tid: request.id,\n\t\t\tkind: request.kind,\n\t\t\tsessionId: request.sessionId,\n\t\t\tresolution,\n\t\t\tsource:\n\t\t\t\tBoolean(request.platform) || operation === \"ResumeRun\"\n\t\t\t\t\t? \"platform\"\n\t\t\t\t\t: \"local\",\n\t\t\tplatform: request.platform,\n\t\t\tplatformOperation: operation,\n\t\t},\n\t};\n}\n\nfunction isAgentRuntimeWaitKind(\n\tkind: PendingServerRequestSnapshot[\"kind\"],\n): kind is \"client_tool\" | \"mcp_elicitation\" | \"user_input\" {\n\treturn (\n\t\tkind === \"client_tool\" ||\n\t\tkind === \"mcp_elicitation\" ||\n\t\tkind === \"user_input\"\n\t);\n}\n\nfunction hostedSessionIdForRequest(\n\trequest: PendingServerRequestSnapshot,\n\tcontext: PendingRequestResumeContext,\n): string | undefined {\n\treturn (\n\t\tnonEmptyString(request.sessionId) ??\n\t\tnonEmptyString(context.hostedRunner?.activeMaestroSessionId) ??\n\t\tnonEmptyString(context.hostedRunner?.configuredMaestroSessionId)\n\t);\n}\n\nfunction hostedAgentRunIdForRequest(\n\trequest: PendingServerRequestSnapshot,\n\tcontext: PendingRequestResumeContext,\n): string | undefined {\n\tconst hosted = context.hostedRunner;\n\tconst runId = nonEmptyString(hosted?.agentRunId);\n\tif (!hosted?.enabled || !runId) {\n\t\treturn undefined;\n\t}\n\tconst hostedSessionId =\n\t\tnonEmptyString(hosted.activeMaestroSessionId) ??\n\t\tnonEmptyString(hosted.configuredMaestroSessionId);\n\tif (\n\t\thostedSessionId &&\n\t\trequest.sessionId &&\n\t\thostedSessionId !== request.sessionId\n\t) {\n\t\treturn undefined;\n\t}\n\treturn runId;\n}\n\nfunction hostedWaitId(sessionId: string, requestId: string): string {\n\treturn `maestro:${safeIdPart(sessionId)}:wait:${safeIdPart(requestId)}`;\n}\n\nfunction hostedResumeEventId(sessionId: string, requestId: string): string {\n\treturn `maestro:${safeIdPart(sessionId)}:resume:${safeIdPart(requestId)}`;\n}\n\nfunction platformResumeError(message: string): ApiError {\n\treturn new ApiError(502, `${message}; local pending request was resolved`);\n}\n\nasync function resumePlatformAgentRuntimeWait(\n\trequest: PendingServerRequestSnapshot,\n\tresolution: ComposerPendingRequestResolution,\n\tcontent: NonNullable<ComposerPendingRequestResumeRequest[\"content\"]>,\n\tisError: boolean,\n\tcontext: PendingRequestResumeContext,\n): Promise<ComposerPendingRequestPlatformOperation | undefined> {\n\tif (!isAgentRuntimeWaitKind(request.kind)) {\n\t\treturn undefined;\n\t}\n\tconst runId = hostedAgentRunIdForRequest(request, context);\n\tconst sessionId = hostedSessionIdForRequest(request, context);\n\tif (!runId || !sessionId) {\n\t\treturn undefined;\n\t}\n\tconst resumeRun =\n\t\tcontext.platformPendingRequestResume?.resumeRun ?? resumeAgentRuntimeRun;\n\ttry {\n\t\tawait resumeRun({\n\t\t\trunId,\n\t\t\twaitId: hostedWaitId(sessionId, request.id),\n\t\t\tresumeEventId: hostedResumeEventId(sessionId, request.id),\n\t\t\tpayload: {\n\t\t\t\tmaestro_session_id: sessionId,\n\t\t\t\trequest_id: request.id,\n\t\t\t\trequest_type: request.kind,\n\t\t\t\tcall_id: request.callId,\n\t\t\t\ttool_name: request.toolName,\n\t\t\t\tresolution,\n\t\t\t\tresolved_by: \"user\",\n\t\t\t\tis_error: isError,\n\t\t\t\tcontent,\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\tif (isAbortError(error)) {\n\t\t\tthrow error;\n\t\t}\n\t\tthrow platformResumeError(\"Platform AgentRuntime resume failed\");\n\t}\n\treturn \"ResumeRun\";\n}\n\nasync function resolvePendingRequest(\n\trequestId: string,\n\tinput: ComposerPendingRequestResumeRequest,\n\tpendingRequest: PendingServerRequestSnapshot,\n\tcontext: PendingRequestResumeContext,\n): Promise<ComposerPendingRequestResumeResponse> {\n\tassertRequestKind(pendingRequest.kind, input.kind);\n\tassertSessionMatch(pendingRequest, input.sessionId);\n\n\tlet resolved = false;\n\tlet resolution: ComposerPendingRequestResolution;\n\tlet platformOperation: ComposerPendingRequestPlatformOperation | undefined;\n\n\tswitch (pendingRequest.kind) {\n\t\tcase \"approval\": {\n\t\t\tconst decision = requireApprovalDecision(input);\n\t\t\tresolved = serverRequestManager.resolveApproval(requestId, {\n\t\t\t\tapproved: decision === \"approved\",\n\t\t\t\treason: input.reason,\n\t\t\t\tresolvedBy: \"user\",\n\t\t\t});\n\t\t\tresolution = decision;\n\t\t\tbreak;\n\t\t}\n\t\tcase \"tool_retry\": {\n\t\t\tconst action = requireRetryAction(input);\n\t\t\tresolved = serverRequestManager.resolveToolRetry(requestId, {\n\t\t\t\taction,\n\t\t\t\treason: input.reason,\n\t\t\t\tresolvedBy: \"user\",\n\t\t\t});\n\t\t\tresolution =\n\t\t\t\taction === \"retry\"\n\t\t\t\t\t? \"retried\"\n\t\t\t\t\t: action === \"skip\"\n\t\t\t\t\t\t? \"skipped\"\n\t\t\t\t\t\t: \"aborted\";\n\t\t\tbreak;\n\t\t}\n\t\tcase \"client_tool\":\n\t\tcase \"mcp_elicitation\":\n\t\tcase \"user_input\": {\n\t\t\tconst content = requireClientToolContent(input);\n\t\t\tconst isError = input.isError === true;\n\t\t\tresolution = resolutionForClientRequest(pendingRequest.kind, isError);\n\t\t\tconst claimed = serverRequestManager.claimClientTool(requestId);\n\t\t\tif (!claimed) {\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tresolved = claimed.resolve(content, isError);\n\t\t\tif (!resolved) {\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tplatformOperation = await resumePlatformAgentRuntimeWait(\n\t\t\t\t\tclaimed.request,\n\t\t\t\t\tresolution,\n\t\t\t\t\tcontent,\n\t\t\t\t\tisError,\n\t\t\t\t\tcontext,\n\t\t\t\t);\n\t\t\t} catch (error) {\n\t\t\t\tconst localResponse = responseFor(claimed.request, resolution);\n\t\t\t\tif (isAbortError(error)) {\n\t\t\t\t\treturn localResponse;\n\t\t\t\t}\n\t\t\t\tconst message =\n\t\t\t\t\terror instanceof Error\n\t\t\t\t\t\t? error.message\n\t\t\t\t\t\t: \"Platform AgentRuntime resume failed\";\n\t\t\t\tthrow new PendingRequestResolvedPlatformError(message, localResponse, {\n\t\t\t\t\tcontent,\n\t\t\t\t\tisError,\n\t\t\t\t\trequest: claimed.request,\n\t\t\t\t\tresolution,\n\t\t\t\t});\n\t\t\t}\n\t\t\tbreak;\n\t\t}\n\t}\n\n\tif (!resolved) {\n\t\tthrow new ApiError(404, \"Pending request not found or already resolved\");\n\t}\n\n\treturn responseFor(pendingRequest, resolution, platformOperation);\n}\n\nasync function replayCachedPlatformRetry(\n\trequestId: string,\n\tinput: ComposerPendingRequestResumeRequest,\n\tcached: {\n\t\tplatformRetry: PlatformResumeRetry;\n\t\tresponse: ComposerPendingRequestResumeResponse;\n\t},\n\tsubject: string,\n\tcontext: PendingRequestResumeContext,\n): Promise<ComposerPendingRequestResumeResponse> {\n\tconst retry = cached.platformRetry;\n\ttry {\n\t\tconst platformOperation = await resumePlatformAgentRuntimeWait(\n\t\t\tretry.request,\n\t\t\tretry.resolution,\n\t\t\tretry.content,\n\t\t\tretry.isError,\n\t\t\tcontext,\n\t\t);\n\t\tconst response = responseFor(\n\t\t\tretry.request,\n\t\t\tretry.resolution,\n\t\t\tplatformOperation,\n\t\t);\n\t\trememberResolvedResponse(requestId, input, response, subject);\n\t\treturn response;\n\t} catch (error) {\n\t\tif (isAbortError(error)) {\n\t\t\treturn cached.response;\n\t\t}\n\t\trememberResolvedResponse(requestId, input, cached.response, subject, retry);\n\t\tthrow error;\n\t}\n}\n\nexport async function handlePendingRequestResume(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams: PendingRequestRouteParams,\n) {\n\tconst { corsHeaders } = context;\n\tlet requestId: string | undefined;\n\tlet input: ComposerPendingRequestResumeRequest | undefined;\n\tlet subject: string | undefined;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tres.writeHead(405, corsHeaders);\n\t\t\tres.end();\n\t\t\treturn;\n\t\t}\n\n\t\trequestId = decodeRequestId(params);\n\t\tinput = await parseAndValidateJson<ComposerPendingRequestResumeRequest>(\n\t\t\treq,\n\t\t\tComposerPendingRequestResumeRequestSchema,\n\t\t);\n\t\tsubject = getAuthSubject(req);\n\t\tconst currentRequestId = requestId;\n\t\tconst currentInput = input;\n\t\tconst currentSubject = subject;\n\t\tconst inFlight = getMatchingInFlightResume(\n\t\t\tcurrentRequestId,\n\t\t\tcurrentInput,\n\t\t\tcurrentSubject,\n\t\t);\n\t\tif (inFlight) {\n\t\t\tsendJson(res, 200, await inFlight, corsHeaders, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst pendingRequest = serverRequestManager.get(currentRequestId);\n\t\tif (!pendingRequest) {\n\t\t\tconst cached = getCachedResolvedEntry(\n\t\t\t\tcurrentRequestId,\n\t\t\t\tcurrentInput,\n\t\t\t\tcurrentSubject,\n\t\t\t);\n\t\t\tif (cached) {\n\t\t\t\tif (cached.platformRetry) {\n\t\t\t\t\tconst retryPromise = replayCachedPlatformRetry(\n\t\t\t\t\t\tcurrentRequestId,\n\t\t\t\t\t\tcurrentInput,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tplatformRetry: cached.platformRetry,\n\t\t\t\t\t\t\tresponse: cached.response,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tcurrentSubject,\n\t\t\t\t\t\tcontext as PendingRequestResumeContext,\n\t\t\t\t\t);\n\t\t\t\t\tinFlightResumes.set(currentRequestId, {\n\t\t\t\t\t\tinputFingerprint: cached.inputFingerprint,\n\t\t\t\t\t\tpromise: retryPromise,\n\t\t\t\t\t\trequestKind: cached.response.request.kind,\n\t\t\t\t\t\tsessionId: cached.response.request.sessionId,\n\t\t\t\t\t\tsubject: currentSubject,\n\t\t\t\t\t});\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconst response = await retryPromise;\n\t\t\t\t\t\tsendJson(res, 200, response, corsHeaders, req);\n\t\t\t\t\t\treturn;\n\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\trespondWithApiError(res, error, 400, corsHeaders, req);\n\t\t\t\t\t\treturn;\n\t\t\t\t\t} finally {\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tinFlightResumes.get(currentRequestId)?.promise === retryPromise\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tinFlightResumes.delete(currentRequestId);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tsendJson(res, 200, cached.response, corsHeaders, req);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tthrow new ApiError(404, \"Pending request not found or already resolved\");\n\t\t}\n\n\t\tconst inputFingerprint = resumeInputFingerprint(input, pendingRequest);\n\t\tconst resumeContext = context as PendingRequestResumeContext;\n\t\tconst resumePromise = resolvePendingRequest(\n\t\t\tcurrentRequestId,\n\t\t\tcurrentInput,\n\t\t\tpendingRequest,\n\t\t\tresumeContext,\n\t\t).then((response) => {\n\t\t\trememberResolvedResponse(\n\t\t\t\tcurrentRequestId,\n\t\t\t\tcurrentInput,\n\t\t\t\tresponse,\n\t\t\t\tcurrentSubject,\n\t\t\t);\n\t\t\treturn response;\n\t\t});\n\t\tinFlightResumes.set(currentRequestId, {\n\t\t\tinputFingerprint,\n\t\t\tpromise: resumePromise,\n\t\t\trequestKind: pendingRequest.kind,\n\t\t\tsessionId: pendingRequest.sessionId,\n\t\t\tsubject: currentSubject,\n\t\t});\n\t\tlet response: ComposerPendingRequestResumeResponse;\n\t\ttry {\n\t\t\tresponse = await resumePromise;\n\t\t} finally {\n\t\t\tif (inFlightResumes.get(currentRequestId)?.promise === resumePromise) {\n\t\t\t\tinFlightResumes.delete(currentRequestId);\n\t\t\t}\n\t\t}\n\t\tsendJson(res, 200, response, corsHeaders, req);\n\t} catch (error) {\n\t\tif (\n\t\t\terror instanceof PendingRequestResolvedPlatformError &&\n\t\t\trequestId &&\n\t\t\tinput &&\n\t\t\tsubject\n\t\t) {\n\t\t\trememberResolvedResponse(\n\t\t\t\trequestId,\n\t\t\t\tinput,\n\t\t\t\terror.response,\n\t\t\t\tsubject,\n\t\t\t\terror.platformRetry,\n\t\t\t);\n\t\t}\n\t\trespondWithApiError(res, error, 400, corsHeaders, req);\n\t}\n}\n"]}

package/dist/server/handlers/platform-a2a-push.d.ts

@@ -0,0 +1,6 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { WebServerContext } from "../app-context.js";
+export declare const PLATFORM_A2A_PUSH_CALLBACK_PATH = "/api/platform/a2a/push";
+export declare function platformA2APushAuthBoundaryExemptPaths(): readonly string[];
+export declare function handlePlatformA2APushCallback(req: IncomingMessage, res: ServerResponse, context: WebServerContext): Promise<void>;
+//# sourceMappingURL=platform-a2a-push.d.ts.map

package/dist/server/handlers/platform-a2a-push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-a2a-push.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/platform-a2a-push.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAuB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAS/E,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AAOxE,wBAAgB,sCAAsC,IAAI,SAAS,MAAM,EAAE,CAE1E;AAeD,wBAAsB,6BAA6B,CAClD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,GACvB,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/server/handlers/platform-a2a-push.js

@@ -0,0 +1,136 @@
+import { ApiError, getRequestHeader, readJsonBody, secureCompare, sendJson, } from "../server-utils.js";
+export const PLATFORM_A2A_PUSH_CALLBACK_PATH = "/api/platform/a2a/push";
+const CALLBACK_TOKEN_ENV_VARS = [
+    "MAESTRO_PLATFORM_A2A_CALLBACK_TOKEN",
+    "MAESTRO_A2A_CALLBACK_TOKEN",
+];
+export function platformA2APushAuthBoundaryExemptPaths() {
+    return callbackToken() ? [PLATFORM_A2A_PUSH_CALLBACK_PATH] : [];
+}
+export async function handlePlatformA2APushCallback(req, res, context) {
+    if (req.method !== "POST") {
+        throw new ApiError(405, "Method not allowed");
+    }
+    assertCallbackToken(req);
+    const body = await readJsonBody(req);
+    const snapshot = platformA2APushSnapshot(body);
+    if (!snapshot) {
+        throw new ApiError(400, "Invalid A2A push notification payload");
+    }
+    const hostedRunner = context.hostedRunner;
+    if (hostedRunner?.a2aTaskId &&
+        snapshot.taskId &&
+        hostedRunner.a2aTaskId !== snapshot.taskId) {
+        throw new ApiError(404, "A2A task not found");
+    }
+    if (hostedRunner) {
+        recordHostedRunnerA2APush(hostedRunner, snapshot);
+    }
+    sendJson(res, 202, { accepted: true, ...snapshot }, context.corsHeaders, req);
+}
+function assertCallbackToken(req) {
+    const expected = callbackToken();
+    if (!expected) {
+        return;
+    }
+    const provided = getRequestHeader(req, "x-a2a-notification-token");
+    if (!provided || !secureCompare(provided, expected)) {
+        throw new ApiError(401, "Invalid A2A notification token");
+    }
+}
+function platformA2APushSnapshot(payload) {
+    if (!isJsonObject(payload)) {
+        return null;
+    }
+    if (isJsonObject(payload.statusUpdate)) {
+        const taskId = stringField(payload.statusUpdate, "taskId");
+        if (!taskId) {
+            return null;
+        }
+        return {
+            kind: "statusUpdate",
+            taskId,
+            contextId: stringField(payload.statusUpdate, "contextId"),
+            state: statusState(payload.statusUpdate),
+            final: booleanField(payload.statusUpdate, "final"),
+            receivedAt: new Date().toISOString(),
+            runtimeEventId: metadataString(payload.statusUpdate, "runtimeEventId"),
+            runtimeEventType: metadataString(payload.statusUpdate, "runtimeEventType"),
+        };
+    }
+    if (isJsonObject(payload.task)) {
+        const taskId = stringField(payload.task, "id");
+        if (!taskId) {
+            return null;
+        }
+        return {
+            kind: "task",
+            taskId,
+            contextId: stringField(payload.task, "contextId"),
+            state: statusState(payload.task),
+            receivedAt: new Date().toISOString(),
+        };
+    }
+    if (isJsonObject(payload.artifactUpdate)) {
+        const taskId = stringField(payload.artifactUpdate, "taskId");
+        if (!taskId) {
+            return null;
+        }
+        return {
+            kind: "artifactUpdate",
+            taskId,
+            contextId: stringField(payload.artifactUpdate, "contextId"),
+            receivedAt: new Date().toISOString(),
+        };
+    }
+    if (isJsonObject(payload.message)) {
+        const taskId = stringField(payload.message, "taskId");
+        if (!taskId) {
+            return null;
+        }
+        return {
+            kind: "message",
+            taskId,
+            contextId: stringField(payload.message, "contextId"),
+            receivedAt: new Date().toISOString(),
+        };
+    }
+    return null;
+}
+function recordHostedRunnerA2APush(hostedRunner, snapshot) {
+    hostedRunner.lastPlatformA2APush = snapshot;
+    if (snapshot.taskId && !hostedRunner.a2aTaskId) {
+        hostedRunner.a2aTaskId = snapshot.taskId;
+    }
+}
+function statusState(value) {
+    const status = isJsonObject(value.status) ? value.status : undefined;
+    return status ? stringField(status, "state") : undefined;
+}
+function metadataString(value, key) {
+    const metadata = isJsonObject(value.metadata) ? value.metadata : undefined;
+    return metadata ? stringField(metadata, key) : undefined;
+}
+function stringField(value, key) {
+    const field = value[key];
+    return typeof field === "string" && field.trim().length > 0
+        ? field.trim()
+        : undefined;
+}
+function booleanField(value, key) {
+    const field = value[key];
+    return typeof field === "boolean" ? field : undefined;
+}
+function isJsonObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function callbackToken() {
+    for (const name of CALLBACK_TOKEN_ENV_VARS) {
+        const value = process.env[name]?.trim();
+        if (value) {
+            return value;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=platform-a2a-push.js.map

package/dist/server/handlers/platform-a2a-push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-a2a-push.js","sourceRoot":"","sources":["../../../src/server/handlers/platform-a2a-push.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAExE,MAAM,uBAAuB,GAAG;IAC/B,qCAAqC;IACrC,4BAA4B;CACnB,CAAC;AAEX,MAAM,UAAU,sCAAsC;IACrD,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAU,GAAG,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IACC,YAAY,EAAE,SAAS;QACvB,QAAQ,CAAC,MAAM;QACf,YAAY,CAAC,SAAS,KAAK,QAAQ,CAAC,MAAM,EACzC,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QAClB,yBAAyB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAoB;IAChD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC;AAED,SAAS,uBAAuB,CAC/B,OAAgB;IAEhB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO;YACN,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;YACzD,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC;YACxC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC;YAClD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,gBAAgB,CAAC;YACtE,gBAAgB,EAAE,cAAc,CAC/B,OAAO,CAAC,YAAY,EACpB,kBAAkB,CAClB;SACD,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO;YACN,IAAI,EAAE,MAAM;YACZ,MAAM;YACN,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;YACjD,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO;YACN,IAAI,EAAE,gBAAgB;YACtB,MAAM;YACN,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC;YAC3D,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO;YACN,IAAI,EAAE,SAAS;YACf,MAAM;YACN,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;YACpD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,yBAAyB,CACjC,YAAiC,EACjC,QAAiC;IAEjC,YAAY,CAAC,mBAAmB,GAAG,QAAQ,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAChD,YAAY,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC1C,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB,EAAE,GAAW;IACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,OAAO,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB,EAAE,GAAW;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa;IACrB,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { HostedRunnerContext, WebServerContext } from \"../app-context.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\treadJsonBody,\n\tsecureCompare,\n\tsendJson,\n} from \"../server-utils.js\";\n\nexport const PLATFORM_A2A_PUSH_CALLBACK_PATH = \"/api/platform/a2a/push\";\n\nconst CALLBACK_TOKEN_ENV_VARS = [\n\t\"MAESTRO_PLATFORM_A2A_CALLBACK_TOKEN\",\n\t\"MAESTRO_A2A_CALLBACK_TOKEN\",\n] as const;\n\nexport function platformA2APushAuthBoundaryExemptPaths(): readonly string[] {\n\treturn callbackToken() ? [PLATFORM_A2A_PUSH_CALLBACK_PATH] : [];\n}\n\ntype JsonObject = Record<string, unknown>;\n\ninterface PlatformA2APushSnapshot {\n\tkind: \"statusUpdate\" | \"artifactUpdate\" | \"task\" | \"message\";\n\ttaskId?: string;\n\tcontextId?: string;\n\tstate?: string;\n\tfinal?: boolean;\n\treceivedAt: string;\n\truntimeEventId?: string;\n\truntimeEventType?: string;\n}\n\nexport async function handlePlatformA2APushCallback(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n): Promise<void> {\n\tif (req.method !== \"POST\") {\n\t\tthrow new ApiError(405, \"Method not allowed\");\n\t}\n\tassertCallbackToken(req);\n\tconst body = await readJsonBody<unknown>(req);\n\tconst snapshot = platformA2APushSnapshot(body);\n\tif (!snapshot) {\n\t\tthrow new ApiError(400, \"Invalid A2A push notification payload\");\n\t}\n\tconst hostedRunner = context.hostedRunner;\n\tif (\n\t\thostedRunner?.a2aTaskId &&\n\t\tsnapshot.taskId &&\n\t\thostedRunner.a2aTaskId !== snapshot.taskId\n\t) {\n\t\tthrow new ApiError(404, \"A2A task not found\");\n\t}\n\tif (hostedRunner) {\n\t\trecordHostedRunnerA2APush(hostedRunner, snapshot);\n\t}\n\tsendJson(res, 202, { accepted: true, ...snapshot }, context.corsHeaders, req);\n}\n\nfunction assertCallbackToken(req: IncomingMessage): void {\n\tconst expected = callbackToken();\n\tif (!expected) {\n\t\treturn;\n\t}\n\tconst provided = getRequestHeader(req, \"x-a2a-notification-token\");\n\tif (!provided || !secureCompare(provided, expected)) {\n\t\tthrow new ApiError(401, \"Invalid A2A notification token\");\n\t}\n}\n\nfunction platformA2APushSnapshot(\n\tpayload: unknown,\n): PlatformA2APushSnapshot | null {\n\tif (!isJsonObject(payload)) {\n\t\treturn null;\n\t}\n\tif (isJsonObject(payload.statusUpdate)) {\n\t\tconst taskId = stringField(payload.statusUpdate, \"taskId\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\tkind: \"statusUpdate\",\n\t\t\ttaskId,\n\t\t\tcontextId: stringField(payload.statusUpdate, \"contextId\"),\n\t\t\tstate: statusState(payload.statusUpdate),\n\t\t\tfinal: booleanField(payload.statusUpdate, \"final\"),\n\t\t\treceivedAt: new Date().toISOString(),\n\t\t\truntimeEventId: metadataString(payload.statusUpdate, \"runtimeEventId\"),\n\t\t\truntimeEventType: metadataString(\n\t\t\t\tpayload.statusUpdate,\n\t\t\t\t\"runtimeEventType\",\n\t\t\t),\n\t\t};\n\t}\n\tif (isJsonObject(payload.task)) {\n\t\tconst taskId = stringField(payload.task, \"id\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\tkind: \"task\",\n\t\t\ttaskId,\n\t\t\tcontextId: stringField(payload.task, \"contextId\"),\n\t\t\tstate: statusState(payload.task),\n\t\t\treceivedAt: new Date().toISOString(),\n\t\t};\n\t}\n\tif (isJsonObject(payload.artifactUpdate)) {\n\t\tconst taskId = stringField(payload.artifactUpdate, \"taskId\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\tkind: \"artifactUpdate\",\n\t\t\ttaskId,\n\t\t\tcontextId: stringField(payload.artifactUpdate, \"contextId\"),\n\t\t\treceivedAt: new Date().toISOString(),\n\t\t};\n\t}\n\tif (isJsonObject(payload.message)) {\n\t\tconst taskId = stringField(payload.message, \"taskId\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\tkind: \"message\",\n\t\t\ttaskId,\n\t\t\tcontextId: stringField(payload.message, \"contextId\"),\n\t\t\treceivedAt: new Date().toISOString(),\n\t\t};\n\t}\n\treturn null;\n}\n\nfunction recordHostedRunnerA2APush(\n\thostedRunner: HostedRunnerContext,\n\tsnapshot: PlatformA2APushSnapshot,\n): void {\n\thostedRunner.lastPlatformA2APush = snapshot;\n\tif (snapshot.taskId && !hostedRunner.a2aTaskId) {\n\t\thostedRunner.a2aTaskId = snapshot.taskId;\n\t}\n}\n\nfunction statusState(value: JsonObject): string | undefined {\n\tconst status = isJsonObject(value.status) ? value.status : undefined;\n\treturn status ? stringField(status, \"state\") : undefined;\n}\n\nfunction metadataString(value: JsonObject, key: string): string | undefined {\n\tconst metadata = isJsonObject(value.metadata) ? value.metadata : undefined;\n\treturn metadata ? stringField(metadata, key) : undefined;\n}\n\nfunction stringField(value: JsonObject, key: string): string | undefined {\n\tconst field = value[key];\n\treturn typeof field === \"string\" && field.trim().length > 0\n\t\t? field.trim()\n\t\t: undefined;\n}\n\nfunction booleanField(value: JsonObject, key: string): boolean | undefined {\n\tconst field = value[key];\n\treturn typeof field === \"boolean\" ? field : undefined;\n}\n\nfunction isJsonObject(value: unknown): value is JsonObject {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction callbackToken(): string | undefined {\n\tfor (const name of CALLBACK_TOKEN_ENV_VARS) {\n\t\tconst value = process.env[name]?.trim();\n\t\tif (value) {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n"]}

package/dist/server/handlers/sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/sessions.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA4CjE,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACX,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,GACjB,MAAM,0BAA0B,CAAC;AAGlC,eAAO,MAAM,gBAAgB,QAAsB,CAAC;AAuBpD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACrC,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAC/C,OAAO,EAAE,MAAM,GACb,OAAO,CAiBT;AAyGD;;GAEG;AACH,wBAAsB,cAAc,CACnC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA4N5B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACvC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiG5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA8C5B;AAED;;;;;;GAMG;AACH,wBAAsB,6BAA6B,CAClD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAC/C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA4D5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAyI5B"}
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/sessions.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA4CjE,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACX,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,GACjB,MAAM,0BAA0B,CAAC;AAGlC,eAAO,MAAM,gBAAgB,QAAsB,CAAC;AAmCpD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACrC,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAC/C,OAAO,EAAE,MAAM,GACb,OAAO,CAiBT;AAyGD;;GAEG;AACH,wBAAsB,cAAc,CACnC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAgP5B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACvC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiG5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA8C5B;AAED;;;;;;GAMG;AACH,wBAAsB,6BAA6B,CAClD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAC/C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA4D5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAyI5B"}

package/dist/server/handlers/sessions.js

@@ -53,6 +53,15 @@ export { checkShareRateLimit, resetShareRateLimit, stopShareRateLimiter, } from
 const logger = createLogger("sessions-handler");
 export const sessionIdPattern = /^[a-zA-Z0-9._-]+$/;
 const attachmentIdPattern = /^[a-zA-Z0-9._-]+$/;
+function parseSessionMessagesView(value) {
+    if (value === null || value === "" || value === "full") {
+        return "full";
+    }
+    if (value === "summary" || value === "notLoaded") {
+        return value;
+    }
+    return null;
+}
 function sendSensitiveContentBlockedResponse(req, res, cors, action, findings) {
     sendJson(res, 409, {
         error: `Sensitive content detected. Review and confirm before continuing with this ${action}.`,
@@ -191,7 +200,17 @@ export async function handleSessions(req, res, params, cors) {
                 sendJson(res, 400, { error: "Invalid session id" }, cors, req);
                 return;
             }
-            const session = await sessionManager.loadSession(sessionId);
+            const messagesView = parseSessionMessagesView(url.searchParams.get("messagesView") ??
+                url.searchParams.get("itemsView"));
+            if (!messagesView) {
+                sendJson(res, 400, {
+                    error: "Invalid messagesView. Expected full, summary, or notLoaded.",
+                }, cors, req);
+                return;
+            }
+            const session = await sessionManager.loadSession(sessionId, {
+                messagesView,
+            });
             if (!session) {
                 sendJson(res, 404, { error: "Session not found" }, cors, req);
                 return;
@@ -211,6 +230,7 @@ export async function handleSessions(req, res, params, cors) {
                 messageCount: session.messageCount,
                 favorite: session.favorite,
                 tags: session.tags,
+                messagesView: session.messagesView,
                 messages: convertAppMessagesToComposer(session.messages || [], {
                     includeAttachmentContent: false,
                 }),

package/dist/server/handlers/sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/server/handlers/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAMvC,OAAO,EACN,4BAA4B,EAC5B,kCAAkC,GAClC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EACN,uBAAuB,EACvB,YAAY,EACZ,mBAAmB,EACnB,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EACN,iCAAiC,EACjC,+BAA+B,EAC/B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAIN,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAElB,cAAc,GACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAC;AAOlC,MAAM,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AACpD,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEhD,SAAS,mCAAmC,CAC3C,GAAoB,EACpB,GAAmB,EACnB,IAA4B,EAC5B,MAA0B,EAC1B,QAA+D;IAE/D,QAAQ,CACP,GAAG,EACH,GAAG,EACH;QACC,KAAK,EAAE,8EAA8E,MAAM,GAAG;QAC9F,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,QAAQ;KACjB,EACD,IAAI,EACJ,GAAG,CACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACrC,OAA+C,EAC/C,OAAe;IAEf,6BAA6B;IAC7B,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxD,OAAO,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC;IAClC,CAAC;IAED,iDAAiD;IACjD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC;IACpC,CAAC;IAED,uCAAuC;IACvC,oEAAoE;IACpE,qEAAqE;IACrE,+CAA+C;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,OAAO,CAAC;IACzE,OAAO,CAAC,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAC/B,OAAsC,EACtC,YAAoB;IAOpB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,gBAAgB,GAAI,GAAiC,CAAC,WAAW,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAAE,SAAS;QAE/C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,SAAS;YAC9C,MAAM,CAAC,GAAG,GAMT,CAAC;YACF,IAAI,CAAC,CAAC,EAAE,KAAK,YAAY;gBAAE,SAAS;YACpC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC7D,OAAO;gBACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,aAAa,EAAE,CAAC,CAAC,OAAO;gBACxB,IAAI,EACH,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;oBACpD,CAAC,CAAC,CAAC,CAAC,IAAI;oBACR,CAAC,CAAC,SAAS;aACb,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,UAAkB,EAClB,IAA4B;IAE5B,MAAM,QAAQ,GACZ,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACjE,GAAG,CAAC,MAAM,CAAC,aAAa;QACxB,SAAS,CAAC;IACX,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,KAAK,EAAE,mBAAmB;YAC1B,UAAU,EAAE,SAAS,CAAC,iBAAiB;SACvC,EACD,IAAI,EACJ,GAAG,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC3B,QAAQ,YAAY,CAAC,MAAM,EAAE,CAAC;YAC7B,KAAK,WAAW;gBACf,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAC5C,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO,IAAI,CAAC;YACb,KAAK,SAAS;gBACb,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBACrC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC;YACb,KAAK,cAAc;gBAClB,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,yCAAyC,EAAE,EACpD,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO,IAAI,CAAC;QACd,CAAC;IACF,CAAC;IAED,OAAO,YAAY,CAAC,SAAS,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,GAAoB,EACpB,GAAmB,EACnB,MAAuB,EACvB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,eAAe,EAAE,kBAAkB,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,YAAY,GAAG,WAAW;QAC/B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAClC,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,KAAK,GACV,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;QAC1B,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GACX,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAChE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC;QAC3B,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,mBAAmB,GACxB,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC;YACzD,MAAM,QAAQ,GAAG,CAChB,MAAM,cAAc,CAAC,YAAY,CAChC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CACnD,CACD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACpD,MAAM,aAAa,GAAG,mBAAmB;gBACxC,CAAC,CAAC,QAAQ,CAAC,KAAK,CACd,MAAM,IAAI,CAAC,EACX,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,CAC1C;gBACF,CAAC,CAAC,QAAQ,CAAC;YACZ,MAAM,WAAW,GAA6B,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvE,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBAC/C,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClD,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClD,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC;gBACjC,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;aACZ,CAAC,CAAC,CAAC;YAEJ,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAE5D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,MAAM,YAAY,GAAoB;gBACrC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;oBAC9D,wBAAwB,EAAE,KAAK;iBAC/B,CAAC;gBACF,GAAG,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAC;aAC7C,CAAC;YAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAqB,GAAG,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,YAAY,GAAoB;gBACrC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;oBAC9D,wBAAwB,EAAE,KAAK;iBAC/B,CAAC;aACF,CAAC;YAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,SAAS,EAAE,CAAC;YAChD,0BAA0B;YAC1B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAoB,GAAG,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAE5D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5C,MAAM,cAAc,CAAC,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACP,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBACjE,IAAI,CAAC,WAAW,EAAE,CAAC;oBAClB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBACnE,OAAO;gBACR,CAAC;gBAED,qFAAqF;gBACrF,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACpC,cAAc,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClE,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBACjC,cAAc,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5D,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAChC,cAAc,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;YAED,oFAAoF;YACpF,QAAQ,CACP,GAAG,EACH,GAAG,EACH;gBACC,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;gBACrC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;gBAC9C,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;aAClC,EACD,IAAI,EACJ,GAAG,CACH,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAC9C,yBAAyB,CAAC,8BAA8B,EAAE;gBACzD,SAAS;gBACT,WAAW,EAAE,mCAAmC;gBAChD,YAAY,EAAE,qBAAqB;gBACnC,WAAW,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE;gBACtC,GAAG,EAAE,kBAAkB,EAAE;gBACzB,QAAQ,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE;aACzC,CAAC,CAAC;YAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzB,GAAG,CAAC,GAAG,EAAE,CAAC;QACX,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBAClB,cAAc,EAAE,kBAAkB;gBAClC,GAAG,IAAI;aACP,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,GAAoB,EACpB,GAAmB,EACnB,MAAsB,EACtB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAE5B,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,+DAA+D;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAEhC,GAAG,CAAC,CAAC;QACP,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa;QACjF,MAAM,WAAW,GAChB,OAAO,CAAC,WAAW,KAAK,IAAI;YAC3B,CAAC,CAAC,IAAI,CAAC,qBAAqB;YAC5B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,gCAAgC;QAE7E,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,4BAA4B,CAAC;gBACzC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;aAChC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,mCAAmC,CAClC,GAAG,EACH,GAAG,EACH,IAAI,EACJ,OAAO,EACP,kCAAkC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CACzD,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QAED,yBAAyB;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEzE,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAEhE,4CAA4C;QAC5C,MAAM,uBAAuB,CAC5B,eAAe,EACf,UAAU,EACV,SAAS,EACT,WAAW,CACX,CAAC;QAEF,uCAAuC;QACvC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,UAAU;YACV,QAAQ,EAAE,wBAAwB,UAAU,EAAE;YAC9C,WAAW,EAAE,UAAU,UAAU,EAAE;YACnC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,WAAW;SACX,EACD,IAAI,EACJ,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,GAAoB,EACpB,GAAmB,EACnB,MAAyB,EACzB,IAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;IAEhC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CACzD,GAAG,EACH,GAAG,EACH,UAAU,EACV,IAAI,CACJ,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO;QACR,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,+BAA+B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,yCAAyC;QACzC,MAAM,YAAY,GAAoB;YACrC,0FAA0F;YAC1F,EAAE,EAAE,UAAU,UAAU,EAAE;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;gBAC9D,wBAAwB,EAAE,KAAK;aAC/B,CAAC;SACF,CAAC;QAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,GAAoB,EACpB,GAAmB,EACnB,MAA+C,EAC/C,IAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;IAChC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAEzC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CACzD,GAAG,EACH,GAAG,EACH,UAAU,EACV,IAAI,CACJ,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO;QACR,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,+BAA+B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO;QACR,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,MAAM,CAAC;QAE/D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,UAAU,CAAC,QAAQ;YACnC,gBAAgB,EAAE,KAAK,CAAC,MAAM;YAC9B,eAAe,EAAE,uBAAuB;YACxC,GAAG,CAAC,cAAc;gBACjB,CAAC,CAAC;oBACA,qBAAqB,EAAE,uBAAuB,CAAC,UAAU,CAAC,QAAQ,CAAC;iBACnE;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,IAAI;SACP,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,GAAoB,EACpB,GAAmB,EACnB,MAAsB,EACtB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAE5B,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,iEAAiE;QACjE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAEhC,GAAG,CAAC,CAAC;QACP,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxC,IAAI,YAAY,GAAsC,SAAS,CAAC;QAChE,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAC3C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACxB,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5C,YAAY,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;gBAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBAC9D,OAAO;gBACR,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,gBAAgB,GAAG,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBAChE,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBACnE,OAAO;gBACR,CAAC;gBACD,YAAY,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;gBACxD,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnB,OAAO;gBACR,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,4BAA4B,CAAC;gBACzC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;aAC9D,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,mCAAmC,CAClC,GAAG,EACH,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,kCAAkC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CACzD,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QAED,IAAI,OAAe,CAAC;QACpB,IAAI,WAAmB,CAAC;QACxB,IAAI,QAAgB,CAAC;QAErB,QAAQ,MAAM,EAAE,CAAC;YAChB,KAAK,OAAO,CAAC,CAAC,CAAC;gBACd,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC5C,OAAO,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxF,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;wBACnE,OAAO;oBACR,CAAC;oBACD,OAAO,GAAG,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;gBAClD,CAAC;gBACD,WAAW,GAAG,sBAAsB,CAAC;gBACrC,QAAQ,GAAG,WAAW,SAAS,QAAQ,CAAC;gBACxC,MAAM;YACP,CAAC;YACD,KAAK,UAAU;gBACd,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC9C,WAAW,GAAG,eAAe,CAAC;gBAC9B,QAAQ,GAAG,WAAW,SAAS,KAAK,CAAC;gBACrC,MAAM;YACP,KAAK,MAAM;gBACV,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC1C,WAAW,GAAG,YAAY,CAAC;gBAC3B,QAAQ,GAAG,WAAW,SAAS,MAAM,CAAC;gBACtC,MAAM;YACP;gBACC,OAAO,GAAG,IAAI,CAAC,SAAS,CACvB;oBACC,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,QAAQ,EAAE,4BAA4B,CAAC,QAAQ,EAAE;wBAChD,wBAAwB,EAAE,IAAI;qBAC9B,CAAC;iBACF,EACD,IAAI,EACJ,CAAC,CACD,CAAC;gBACF,WAAW,GAAG,kBAAkB,CAAC;gBACjC,QAAQ,GAAG,WAAW,SAAS,OAAO,CAAC;gBACvC,MAAM;QACR,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,WAAW;YAC3B,qBAAqB,EAAE,uBAAuB,CAAC,QAAQ,CAAC;YACxD,GAAG,IAAI;SACP,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC","sourcesContent":["/**\n * @fileoverview Session Management HTTP Handlers\n *\n * This module provides REST API endpoints for managing Composer sessions,\n * including CRUD operations, session sharing, and export functionality.\n *\n * ## Endpoints\n *\n * | Method | Path | Description |\n * |--------|------|-------------|\n * | GET | `/api/sessions` | List all sessions with pagination |\n * | GET | `/api/sessions/:id` | Get a specific session with messages |\n * | GET | `/api/sessions/:id/timeline` | Get a redacted run timeline |\n * | POST | `/api/sessions` | Create a new session |\n * | PATCH | `/api/sessions/:id` | Update session metadata (title, tags, favorite) |\n * | DELETE | `/api/sessions/:id` | Delete a session |\n * | POST | `/api/sessions/:id/share` | Generate a shareable link |\n * | GET | `/api/sessions/shared/:token` | Access a shared session |\n * | POST | `/api/sessions/:id/export` | Export session in various formats |\n *\n * ## Session Sharing\n *\n * Sessions can be shared via time-limited, access-limited tokens:\n * - Configurable expiration (default 24h, max 1 week)\n * - Optional access count limits\n * - Rate limiting to prevent brute-force attacks\n * - Atomic access counting to prevent race conditions\n *\n * ## Storage\n *\n * - Session data: JSONL files in `~/.maestro/agent/sessions/`\n * - Share tokens: PostgreSQL (with in-memory fallback)\n * - Rate limits: Redis (with in-memory fallback)\n *\n * @module web/handlers/sessions\n */\nimport crypto from \"node:crypto\";\nimport { readFileSync } from \"node:fs\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type {\n\tComposerSession,\n\tComposerSessionSummary,\n} from \"@evalops/contracts\";\nimport {\n\tscanOutboundSensitiveContent,\n\tsummarizeOutboundSensitiveFindings,\n} from \"../../safety/outbound-secret-preflight.js\";\nimport { safeReadSessionEntries } from \"../../session/session-context.js\";\nimport type { SessionEntry } from \"../../session/types.js\";\nimport { recordMaestroSessionEvent } from \"../../telemetry/maestro-event-bus.js\";\nimport { createLogger } from \"../../utils/logger.js\";\nimport { getAuthSubject } from \"../authz.js\";\nimport { isHostedSessionManager } from \"../hosted-session-manager.js\";\nimport { getPendingServerRequestPayload } from \"../pending-request-payload.js\";\nimport {\n\tbuildContentDisposition,\n\treadJsonBody,\n\trespondWithApiError,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { webSessionEventEnv } from \"../session-event-env.js\";\nimport {\n\tcreateWebSessionManagerForRequest,\n\tcreateWebSessionManagerForScope,\n\tdecodeScopedSessionId,\n\tencodeScopedSessionId,\n\tresolveSessionScope,\n} from \"../session-scope.js\";\nimport { convertAppMessagesToComposer } from \"../session-serialization.js\";\nimport { exportToMarkdown, exportToText } from \"./session-export-formatters.js\";\nimport {\n\ttype SessionExportFormat,\n\ttype SessionShareOptions,\n\ttype SessionUpdateBody,\n\tcheckShareRateLimit,\n\tcreateSharedSessionInDb,\n\tdeleteExpiredShares,\n\tdeleteShareByToken,\n\tgetSharedSessionFromDb,\n\ttryAccessShare,\n} from \"./session-share-store.js\";\n\nexport {\n\tcheckShareRateLimit,\n\tresetShareRateLimit,\n\tstopShareRateLimiter,\n} from \"./session-share-store.js\";\nexport type {\n\tSessionExportFormat,\n\tSessionShareOptions,\n\tSessionUpdateBody,\n} from \"./session-share-store.js\";\n\nconst logger = createLogger(\"sessions-handler\");\nexport const sessionIdPattern = /^[a-zA-Z0-9._-]+$/;\nconst attachmentIdPattern = /^[a-zA-Z0-9._-]+$/;\n\nfunction sendSensitiveContentBlockedResponse(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcors: Record<string, string>,\n\taction: \"export\" | \"share\",\n\tfindings: ReturnType<typeof summarizeOutboundSensitiveFindings>,\n): void {\n\tsendJson(\n\t\tres,\n\t\t409,\n\t\t{\n\t\t\terror: `Sensitive content detected. Review and confirm before continuing with this ${action}.`,\n\t\t\tcode: \"sensitive_content_detected\",\n\t\t\tdetails: findings,\n\t\t},\n\t\tcors,\n\t\treq,\n\t);\n}\n\n/**\n * Verify that the authenticated subject has access to the session.\n * Prevents IDOR attacks by checking session ownership fields.\n *\n * Returns true if access is allowed, false otherwise.\n */\nexport function verifySessionOwnership(\n\tsession: { owner?: unknown; subject?: unknown },\n\tsubject: string,\n): boolean {\n\t// Check explicit owner field\n\tif (typeof session.owner === \"string\" && session.owner) {\n\t\treturn session.owner === subject;\n\t}\n\n\t// Check subject field (for API-created sessions)\n\tif (typeof session.subject === \"string\" && session.subject) {\n\t\treturn session.subject === subject;\n\t}\n\n\t// For sessions without ownership info:\n\t// In strict mode (multi-user), deny access to prevent IDOR attacks.\n\t// Sessions created via CLI don't have ownership info, but API access\n\t// should be restricted in hosted environments.\n\tconst strictMode = process.env.MAESTRO_STRICT_SESSION_ACCESS !== \"false\";\n\treturn !strictMode;\n}\n\nfunction findAttachmentInSession(\n\tsession: { messages?: Array<unknown> },\n\tattachmentId: string,\n): {\n\tfileName: string;\n\tmimeType: string;\n\tcontentBase64: string;\n\tsize?: number;\n} | null {\n\tconst messages = Array.isArray(session.messages) ? session.messages : [];\n\tfor (const msg of messages) {\n\t\tif (!msg || typeof msg !== \"object\") continue;\n\t\tconst maybeAttachments = (msg as { attachments?: unknown }).attachments;\n\t\tif (!Array.isArray(maybeAttachments)) continue;\n\n\t\tfor (const att of maybeAttachments) {\n\t\t\tif (!att || typeof att !== \"object\") continue;\n\t\t\tconst a = att as {\n\t\t\t\tid?: unknown;\n\t\t\t\tfileName?: unknown;\n\t\t\t\tmimeType?: unknown;\n\t\t\t\tcontent?: unknown;\n\t\t\t\tsize?: unknown;\n\t\t\t};\n\t\t\tif (a.id !== attachmentId) continue;\n\t\t\tif (typeof a.fileName !== \"string\" || !a.fileName) return null;\n\t\t\tif (typeof a.mimeType !== \"string\" || !a.mimeType) return null;\n\t\t\tif (typeof a.content !== \"string\" || !a.content) return null;\n\t\t\treturn {\n\t\t\t\tfileName: a.fileName,\n\t\t\t\tmimeType: a.mimeType,\n\t\t\t\tcontentBase64: a.content,\n\t\t\t\tsize:\n\t\t\t\t\ttypeof a.size === \"number\" && Number.isFinite(a.size)\n\t\t\t\t\t\t? a.size\n\t\t\t\t\t\t: undefined,\n\t\t\t};\n\t\t}\n\t}\n\treturn null;\n}\n\nasync function resolveSharedSessionAccess(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tshareToken: string,\n\tcors: Record<string, string>,\n): Promise<string | null> {\n\tconst clientIp =\n\t\t(req.headers[\"x-forwarded-for\"] as string)?.split(\",\")[0]?.trim() ||\n\t\treq.socket.remoteAddress ||\n\t\t\"unknown\";\n\tconst rateLimit = await checkShareRateLimit(clientIp);\n\tif (!rateLimit.allowed) {\n\t\tres.setHeader(\"Retry-After\", String(rateLimit.retryAfterSeconds ?? 60));\n\t\tsendJson(\n\t\t\tres,\n\t\t\t429,\n\t\t\t{\n\t\t\t\terror: \"Too many requests\",\n\t\t\t\tretryAfter: rateLimit.retryAfterSeconds,\n\t\t\t},\n\t\t\tcors,\n\t\t\treq,\n\t\t);\n\t\treturn null;\n\t}\n\n\tconst accessResult = await tryAccessShare(shareToken);\n\tif (!accessResult.allowed) {\n\t\tswitch (accessResult.reason) {\n\t\t\tcase \"not_found\":\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t404,\n\t\t\t\t\t{ error: \"Share link not found or expired\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn null;\n\t\t\tcase \"expired\":\n\t\t\t\tawait deleteShareByToken(shareToken);\n\t\t\t\tsendJson(res, 410, { error: \"Share link has expired\" }, cors, req);\n\t\t\t\treturn null;\n\t\t\tcase \"max_accesses\":\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t410,\n\t\t\t\t\t{ error: \"Share link has reached maximum accesses\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn null;\n\t\t}\n\t}\n\n\treturn accessResult.sessionId ?? null;\n}\n\n// ============================================================================\n// SESSION HANDLERS\n// ============================================================================\n\n/**\n * Handle session list and CRUD operations\n */\nexport async function handleSessions(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id?: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\tconst url = new URL(req.url || \"/api/sessions\", \"http://localhost\");\n\tconst limitParam = url.searchParams.get(\"limit\");\n\tconst offsetParam = url.searchParams.get(\"offset\");\n\tconst parsedLimit = limitParam ? Number.parseInt(limitParam, 10) : undefined;\n\tconst parsedOffset = offsetParam\n\t\t? Number.parseInt(offsetParam, 10)\n\t\t: undefined;\n\tconst limit =\n\t\ttypeof parsedLimit === \"number\" && Number.isFinite(parsedLimit)\n\t\t\t? Math.max(1, parsedLimit)\n\t\t\t: undefined;\n\tconst offset =\n\t\ttypeof parsedOffset === \"number\" && Number.isFinite(parsedOffset)\n\t\t\t? Math.max(0, parsedOffset)\n\t\t\t: undefined;\n\n\ttry {\n\t\tif (req.method === \"GET\" && !sessionId) {\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tconst paginationRequested =\n\t\t\t\ttypeof limit === \"number\" || typeof offset === \"number\";\n\t\t\tconst sessions = (\n\t\t\t\tawait sessionManager.listSessions(\n\t\t\t\t\tpaginationRequested ? undefined : { limit, offset },\n\t\t\t\t)\n\t\t\t).filter((s) => verifySessionOwnership(s, subject));\n\t\t\tconst pagedSessions = paginationRequested\n\t\t\t\t? sessions.slice(\n\t\t\t\t\t\toffset ?? 0,\n\t\t\t\t\t\t(offset ?? 0) + (limit ?? sessions.length),\n\t\t\t\t\t)\n\t\t\t\t: sessions;\n\t\t\tconst sessionList: ComposerSessionSummary[] = pagedSessions.map((s) => ({\n\t\t\t\tid: s.id,\n\t\t\t\ttitle: s.title || `Session ${s.id.slice(0, 8)}`,\n\t\t\t\tresumeSummary: s.resumeSummary,\n\t\t\t\tcreatedAt: s.createdAt || new Date().toISOString(),\n\t\t\t\tupdatedAt: s.updatedAt || new Date().toISOString(),\n\t\t\t\tmessageCount: s.messageCount || 0,\n\t\t\t\tfavorite: s.favorite,\n\t\t\t\ttags: s.tags,\n\t\t\t}));\n\n\t\t\tsendJson(res, 200, { sessions: sessionList }, cors, req);\n\t\t} else if (req.method === \"GET\" && sessionId) {\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst session = await sessionManager.loadSession(sessionId);\n\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst responseBody: ComposerSession = {\n\t\t\t\tid: session.id,\n\t\t\t\ttitle: session.title,\n\t\t\t\tresumeSummary: session.resumeSummary,\n\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\tfavorite: session.favorite,\n\t\t\t\ttags: session.tags,\n\t\t\t\tmessages: convertAppMessagesToComposer(session.messages || [], {\n\t\t\t\t\tincludeAttachmentContent: false,\n\t\t\t\t}),\n\t\t\t\t...getPendingServerRequestPayload(session.id),\n\t\t\t};\n\n\t\t\tsendJson(res, 200, responseBody, cors, req);\n\t\t} else if (req.method === \"POST\" && !sessionId) {\n\t\t\tconst { title } = await readJsonBody<{ title?: string }>(req);\n\t\t\tconst session = await sessionManager.createSession({ title });\n\t\t\tconst responseBody: ComposerSession = {\n\t\t\t\tid: session.id,\n\t\t\t\ttitle: session.title,\n\t\t\t\tresumeSummary: session.resumeSummary,\n\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\tfavorite: false,\n\t\t\t\ttags: undefined,\n\t\t\t\tmessages: convertAppMessagesToComposer(session.messages || [], {\n\t\t\t\t\tincludeAttachmentContent: false,\n\t\t\t\t}),\n\t\t\t};\n\n\t\t\tsendJson(res, 201, responseBody, cors, req);\n\t\t} else if (req.method === \"PATCH\" && sessionId) {\n\t\t\t// Update session metadata\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst updates = await readJsonBody<SessionUpdateBody>(req);\n\t\t\tconst session = await sessionManager.loadSession(sessionId);\n\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\tawait sessionManager.updateSessionMetadata(sessionId, updates);\n\t\t\t} else {\n\t\t\t\tconst sessionPath = sessionManager.getSessionFileById(sessionId);\n\t\t\t\tif (!sessionPath) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\t// Apply updates - SessionManager supports favorite, title, and tags via meta entries\n\t\t\t\tif (updates.favorite !== undefined) {\n\t\t\t\t\tsessionManager.setSessionFavorite(sessionPath, updates.favorite);\n\t\t\t\t}\n\t\t\t\tif (updates.title !== undefined) {\n\t\t\t\t\tsessionManager.setSessionTitle(sessionPath, updates.title);\n\t\t\t\t}\n\t\t\t\tif (updates.tags !== undefined) {\n\t\t\t\t\tsessionManager.setSessionTags(sessionPath, updates.tags);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Return the updated values directly (writes are applied synchronously to the file)\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t200,\n\t\t\t\t{\n\t\t\t\t\tid: sessionId,\n\t\t\t\t\ttitle: updates.title ?? session.title,\n\t\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\t\tupdatedAt: new Date().toISOString(),\n\t\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\t\tfavorite: updates.favorite ?? session.favorite,\n\t\t\t\t\ttags: updates.tags ?? session.tags,\n\t\t\t\t},\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t} else if (req.method === \"DELETE\" && sessionId) {\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Load session to verify ownership before deletion\n\t\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tawait sessionManager.deleteSession(sessionId);\n\t\t\trecordMaestroSessionEvent(\"MAESTRO_SESSION_STATE_CLOSED\", {\n\t\t\t\tsessionId,\n\t\t\t\tcloseReason: \"MAESTRO_CLOSE_REASON_USER_STOPPED\",\n\t\t\t\tcloseMessage: \"Web session deleted\",\n\t\t\t\tcorrelation: { principal_id: subject },\n\t\t\t\tenv: webSessionEventEnv(),\n\t\t\t\tmetadata: { operation: \"session.delete\" },\n\t\t\t});\n\n\t\t\tres.writeHead(204, cors);\n\t\t\tres.end();\n\t\t} else {\n\t\t\tres.writeHead(404, {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t...cors,\n\t\t\t});\n\t\t\tres.end(JSON.stringify({ error: \"Not found\" }));\n\t\t}\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/**\n * Handle session sharing - generate a shareable link\n */\nexport async function handleSessionShare(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Verify session ownership to prevent sharing others' sessions\n\t\tconst subject = getAuthSubject(req);\n\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst options = await readJsonBody<\n\t\t\tSessionShareOptions & { allowSensitiveContent?: boolean }\n\t\t>(req);\n\t\tconst expiresInHours = Math.min(options.expiresInHours ?? 24, 168); // Max 1 week\n\t\tconst maxAccesses =\n\t\t\toptions.maxAccesses === null\n\t\t\t\t? null // explicit unlimited\n\t\t\t\t: Math.max(1, options.maxAccesses ?? 100); // default finite, clamp minimum\n\n\t\tif (!options.allowSensitiveContent) {\n\t\t\tconst scan = scanOutboundSensitiveContent({\n\t\t\t\ttitle: session.title,\n\t\t\t\tmessages: session.messages || [],\n\t\t\t});\n\t\t\tif (scan.blockingFindings.length > 0) {\n\t\t\t\tsendSensitiveContentBlockedResponse(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tcors,\n\t\t\t\t\t\"share\",\n\t\t\t\t\tsummarizeOutboundSensitiveFindings(scan.blockingFindings),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\n\t\t// Generate a share token\n\t\tconst shareToken = crypto.randomBytes(32).toString(\"base64url\");\n\t\tconst expiresAt = new Date(Date.now() + expiresInHours * 60 * 60 * 1000);\n\n\t\tconst scope = resolveSessionScope(req);\n\t\tconst scopedSessionId = encodeScopedSessionId(scope, sessionId);\n\n\t\t// Store in database (or fallback to memory)\n\t\tawait createSharedSessionInDb(\n\t\t\tscopedSessionId,\n\t\t\tshareToken,\n\t\t\texpiresAt,\n\t\t\tmaxAccesses,\n\t\t);\n\n\t\t// Cleanup expired shares in background\n\t\tdeleteExpiredShares().catch((err) => {\n\t\t\tlogger.error(\"Failed to cleanup expired shares\", err);\n\t\t});\n\n\t\tsendJson(\n\t\t\tres,\n\t\t\t201,\n\t\t\t{\n\t\t\t\tshareToken,\n\t\t\t\tshareUrl: `/api/sessions/shared/${shareToken}`,\n\t\t\t\twebShareUrl: `/share/${shareToken}`,\n\t\t\t\texpiresAt: expiresAt.toISOString(),\n\t\t\t\tmaxAccesses,\n\t\t\t},\n\t\t\tcors,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/**\n * Handle accessing a shared session\n */\nexport async function handleSharedSession(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { token: string },\n\tcors: Record<string, string>,\n) {\n\tconst shareToken = params.token;\n\n\ttry {\n\t\tif (req.method !== \"GET\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst resolvedSessionId = await resolveSharedSessionAccess(\n\t\t\treq,\n\t\t\tres,\n\t\t\tshareToken,\n\t\t\tcors,\n\t\t);\n\t\tif (!resolvedSessionId) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst { scope, sessionId } = decodeScopedSessionId(resolvedSessionId);\n\t\tconst sessionManager = createWebSessionManagerForScope(scope, true);\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Return a read-only view of the session\n\t\tconst responseBody: ComposerSession = {\n\t\t\t// Don't leak the underlying session id through share links; treat token as the public id.\n\t\t\tid: `shared:${shareToken}`,\n\t\t\ttitle: session.title,\n\t\t\tresumeSummary: session.resumeSummary,\n\t\t\tcreatedAt: session.createdAt,\n\t\t\tupdatedAt: session.updatedAt,\n\t\t\tmessageCount: session.messageCount,\n\t\t\tmessages: convertAppMessagesToComposer(session.messages || [], {\n\t\t\t\tincludeAttachmentContent: false,\n\t\t\t}),\n\t\t};\n\n\t\tsendJson(res, 200, { ...responseBody, isShared: true }, cors, req);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/**\n * Fetch a shared session attachment by token (for lazy-loaded attachment content).\n *\n * This does NOT increment accessCount (unlike handleSharedSession), so users\n * can fetch attachments after opening the shared session even when maxAccesses\n * is low (e.g., 1).\n */\nexport async function handleSharedSessionAttachment(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { token: string; attachmentId: string },\n\tcors: Record<string, string>,\n) {\n\tconst shareToken = params.token;\n\tconst attachmentId = params.attachmentId;\n\n\ttry {\n\t\tif (req.method !== \"GET\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!attachmentIdPattern.test(attachmentId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid attachment id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst resolvedSessionId = await resolveSharedSessionAccess(\n\t\t\treq,\n\t\t\tres,\n\t\t\tshareToken,\n\t\t\tcors,\n\t\t);\n\t\tif (!resolvedSessionId) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst { scope, sessionId } = decodeScopedSessionId(resolvedSessionId);\n\t\tconst sessionManager = createWebSessionManagerForScope(scope, true);\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst attachment = findAttachmentInSession(session, attachmentId);\n\t\tif (!attachment) {\n\t\t\tsendJson(res, 404, { error: \"Attachment not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst bytes = Buffer.from(attachment.contentBase64, \"base64\");\n\t\tconst requestUrl = new URL(req.url || \"/\", \"http://localhost\");\n\t\tconst download = requestUrl.searchParams.get(\"download\");\n\t\tconst shouldDownload = download === \"1\" || download === \"true\";\n\n\t\tres.writeHead(200, {\n\t\t\t\"Content-Type\": attachment.mimeType,\n\t\t\t\"Content-Length\": bytes.length,\n\t\t\t\"Cache-Control\": \"private, max-age=3600\",\n\t\t\t...(shouldDownload\n\t\t\t\t? {\n\t\t\t\t\t\t\"Content-Disposition\": buildContentDisposition(attachment.fileName),\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\t...cors,\n\t\t});\n\t\tres.end(bytes);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/**\n * Handle session export\n */\nexport async function handleSessionExport(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Verify session ownership to prevent exporting others' sessions\n\t\tconst subject = getAuthSubject(req);\n\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst options = await readJsonBody<\n\t\t\tSessionExportFormat & { allowSensitiveContent?: boolean }\n\t\t>(req);\n\t\tconst format = options.format || \"json\";\n\t\tconst messages = session.messages || [];\n\t\tlet jsonlEntries: SessionEntry[] | null | undefined = undefined;\n\t\tlet jsonlSessionFile: string | null = null;\n\t\tif (format === \"jsonl\") {\n\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\tjsonlEntries = await sessionManager.loadEntries(sessionId);\n\t\t\t\tif (!jsonlEntries) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tjsonlSessionFile = sessionManager.getSessionFileById(sessionId);\n\t\t\t\tif (!jsonlSessionFile) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tjsonlEntries = safeReadSessionEntries(jsonlSessionFile);\n\t\t\t\tif (!jsonlEntries) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (!options.allowSensitiveContent) {\n\t\t\tconst scan = scanOutboundSensitiveContent({\n\t\t\t\ttitle: session.title,\n\t\t\t\tmessages: format === \"jsonl\" ? (jsonlEntries ?? []) : messages,\n\t\t\t});\n\t\t\tif (scan.blockingFindings.length > 0) {\n\t\t\t\tsendSensitiveContentBlockedResponse(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tcors,\n\t\t\t\t\t\"export\",\n\t\t\t\t\tsummarizeOutboundSensitiveFindings(scan.blockingFindings),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\n\t\tlet content: string;\n\t\tlet contentType: string;\n\t\tlet filename: string;\n\n\t\tswitch (format) {\n\t\t\tcase \"jsonl\": {\n\t\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\t\tcontent = `${(jsonlEntries ?? []).map((entry) => JSON.stringify(entry)).join(\"\\n\")}\\n`;\n\t\t\t\t} else {\n\t\t\t\t\tif (!jsonlSessionFile) {\n\t\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tcontent = readFileSync(jsonlSessionFile, \"utf8\");\n\t\t\t\t}\n\t\t\t\tcontentType = \"application/x-ndjson\";\n\t\t\t\tfilename = `session-${sessionId}.jsonl`;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"markdown\":\n\t\t\t\tcontent = exportToMarkdown(session, messages);\n\t\t\t\tcontentType = \"text/markdown\";\n\t\t\t\tfilename = `session-${sessionId}.md`;\n\t\t\t\tbreak;\n\t\t\tcase \"text\":\n\t\t\t\tcontent = exportToText(session, messages);\n\t\t\t\tcontentType = \"text/plain\";\n\t\t\t\tfilename = `session-${sessionId}.txt`;\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\tcontent = JSON.stringify(\n\t\t\t\t\t{\n\t\t\t\t\t\tid: session.id,\n\t\t\t\t\t\ttitle: session.title,\n\t\t\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\t\t\tmessages: convertAppMessagesToComposer(messages, {\n\t\t\t\t\t\t\tincludeAttachmentContent: true,\n\t\t\t\t\t\t}),\n\t\t\t\t\t},\n\t\t\t\t\tnull,\n\t\t\t\t\t2,\n\t\t\t\t);\n\t\t\t\tcontentType = \"application/json\";\n\t\t\t\tfilename = `session-${sessionId}.json`;\n\t\t\t\tbreak;\n\t\t}\n\n\t\tres.writeHead(200, {\n\t\t\t\"Content-Type\": contentType,\n\t\t\t\"Content-Disposition\": buildContentDisposition(filename),\n\t\t\t...cors,\n\t\t});\n\t\tres.end(content);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n"]}
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/server/handlers/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAMvC,OAAO,EACN,4BAA4B,EAC5B,kCAAkC,GAClC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EACN,uBAAuB,EACvB,YAAY,EACZ,mBAAmB,EACnB,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EACN,iCAAiC,EACjC,+BAA+B,EAC/B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAIN,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAElB,cAAc,GACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAC;AAOlC,MAAM,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AACpD,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEhD,SAAS,wBAAwB,CAChC,KAAoB;IAEpB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACxD,OAAO,MAAM,CAAC;IACf,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,mCAAmC,CAC3C,GAAoB,EACpB,GAAmB,EACnB,IAA4B,EAC5B,MAA0B,EAC1B,QAA+D;IAE/D,QAAQ,CACP,GAAG,EACH,GAAG,EACH;QACC,KAAK,EAAE,8EAA8E,MAAM,GAAG;QAC9F,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,QAAQ;KACjB,EACD,IAAI,EACJ,GAAG,CACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACrC,OAA+C,EAC/C,OAAe;IAEf,6BAA6B;IAC7B,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxD,OAAO,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC;IAClC,CAAC;IAED,iDAAiD;IACjD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC;IACpC,CAAC;IAED,uCAAuC;IACvC,oEAAoE;IACpE,qEAAqE;IACrE,+CAA+C;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,OAAO,CAAC;IACzE,OAAO,CAAC,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAC/B,OAAsC,EACtC,YAAoB;IAOpB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,gBAAgB,GAAI,GAAiC,CAAC,WAAW,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAAE,SAAS;QAE/C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,SAAS;YAC9C,MAAM,CAAC,GAAG,GAMT,CAAC;YACF,IAAI,CAAC,CAAC,EAAE,KAAK,YAAY;gBAAE,SAAS;YACpC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC7D,OAAO;gBACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,aAAa,EAAE,CAAC,CAAC,OAAO;gBACxB,IAAI,EACH,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;oBACpD,CAAC,CAAC,CAAC,CAAC,IAAI;oBACR,CAAC,CAAC,SAAS;aACb,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,UAAkB,EAClB,IAA4B;IAE5B,MAAM,QAAQ,GACZ,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACjE,GAAG,CAAC,MAAM,CAAC,aAAa;QACxB,SAAS,CAAC;IACX,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,KAAK,EAAE,mBAAmB;YAC1B,UAAU,EAAE,SAAS,CAAC,iBAAiB;SACvC,EACD,IAAI,EACJ,GAAG,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC3B,QAAQ,YAAY,CAAC,MAAM,EAAE,CAAC;YAC7B,KAAK,WAAW;gBACf,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAC5C,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO,IAAI,CAAC;YACb,KAAK,SAAS;gBACb,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBACrC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC;YACb,KAAK,cAAc;gBAClB,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,yCAAyC,EAAE,EACpD,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO,IAAI,CAAC;QACd,CAAC;IACF,CAAC;IAED,OAAO,YAAY,CAAC,SAAS,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,GAAoB,EACpB,GAAmB,EACnB,MAAuB,EACvB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,eAAe,EAAE,kBAAkB,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,YAAY,GAAG,WAAW;QAC/B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAClC,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,KAAK,GACV,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;QAC1B,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GACX,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAChE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC;QAC3B,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,mBAAmB,GACxB,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC;YACzD,MAAM,QAAQ,GAAG,CAChB,MAAM,cAAc,CAAC,YAAY,CAChC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CACnD,CACD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACpD,MAAM,aAAa,GAAG,mBAAmB;gBACxC,CAAC,CAAC,QAAQ,CAAC,KAAK,CACd,MAAM,IAAI,CAAC,EACX,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,CAC1C;gBACF,CAAC,CAAC,QAAQ,CAAC;YACZ,MAAM,WAAW,GAA6B,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvE,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBAC/C,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClD,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClD,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC;gBACjC,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;aACZ,CAAC,CAAC,CAAC;YAEJ,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YACD,MAAM,YAAY,GAAG,wBAAwB,CAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC;gBACnC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAClC,CAAC;YACF,IAAI,CAAC,YAAY,EAAE,CAAC;gBACnB,QAAQ,CACP,GAAG,EACH,GAAG,EACH;oBACC,KAAK,EACJ,6DAA6D;iBAC9D,EACD,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC3D,YAAY;aACZ,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,MAAM,YAAY,GAAoB;gBACrC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;oBAC9D,wBAAwB,EAAE,KAAK;iBAC/B,CAAC;gBACF,GAAG,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAC;aAC7C,CAAC;YAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAqB,GAAG,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,YAAY,GAAoB;gBACrC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;oBAC9D,wBAAwB,EAAE,KAAK;iBAC/B,CAAC;aACF,CAAC;YAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,SAAS,EAAE,CAAC;YAChD,0BAA0B;YAC1B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAoB,GAAG,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAE5D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5C,MAAM,cAAc,CAAC,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACP,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBACjE,IAAI,CAAC,WAAW,EAAE,CAAC;oBAClB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBACnE,OAAO;gBACR,CAAC;gBAED,qFAAqF;gBACrF,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACpC,cAAc,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClE,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBACjC,cAAc,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5D,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAChC,cAAc,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;YAED,oFAAoF;YACpF,QAAQ,CACP,GAAG,EACH,GAAG,EACH;gBACC,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;gBACrC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;gBAC9C,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;aAClC,EACD,IAAI,EACJ,GAAG,CACH,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAC9C,yBAAyB,CAAC,8BAA8B,EAAE;gBACzD,SAAS;gBACT,WAAW,EAAE,mCAAmC;gBAChD,YAAY,EAAE,qBAAqB;gBACnC,WAAW,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE;gBACtC,GAAG,EAAE,kBAAkB,EAAE;gBACzB,QAAQ,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE;aACzC,CAAC,CAAC;YAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzB,GAAG,CAAC,GAAG,EAAE,CAAC;QACX,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBAClB,cAAc,EAAE,kBAAkB;gBAClC,GAAG,IAAI;aACP,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,GAAoB,EACpB,GAAmB,EACnB,MAAsB,EACtB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAE5B,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,+DAA+D;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAEhC,GAAG,CAAC,CAAC;QACP,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa;QACjF,MAAM,WAAW,GAChB,OAAO,CAAC,WAAW,KAAK,IAAI;YAC3B,CAAC,CAAC,IAAI,CAAC,qBAAqB;YAC5B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,gCAAgC;QAE7E,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,4BAA4B,CAAC;gBACzC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;aAChC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,mCAAmC,CAClC,GAAG,EACH,GAAG,EACH,IAAI,EACJ,OAAO,EACP,kCAAkC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CACzD,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QAED,yBAAyB;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEzE,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAEhE,4CAA4C;QAC5C,MAAM,uBAAuB,CAC5B,eAAe,EACf,UAAU,EACV,SAAS,EACT,WAAW,CACX,CAAC;QAEF,uCAAuC;QACvC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,UAAU;YACV,QAAQ,EAAE,wBAAwB,UAAU,EAAE;YAC9C,WAAW,EAAE,UAAU,UAAU,EAAE;YACnC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,WAAW;SACX,EACD,IAAI,EACJ,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,GAAoB,EACpB,GAAmB,EACnB,MAAyB,EACzB,IAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;IAEhC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CACzD,GAAG,EACH,GAAG,EACH,UAAU,EACV,IAAI,CACJ,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO;QACR,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,+BAA+B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,yCAAyC;QACzC,MAAM,YAAY,GAAoB;YACrC,0FAA0F;YAC1F,EAAE,EAAE,UAAU,UAAU,EAAE;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;gBAC9D,wBAAwB,EAAE,KAAK;aAC/B,CAAC;SACF,CAAC;QAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,GAAoB,EACpB,GAAmB,EACnB,MAA+C,EAC/C,IAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;IAChC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAEzC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CACzD,GAAG,EACH,GAAG,EACH,UAAU,EACV,IAAI,CACJ,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO;QACR,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,+BAA+B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO;QACR,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,MAAM,CAAC;QAE/D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,UAAU,CAAC,QAAQ;YACnC,gBAAgB,EAAE,KAAK,CAAC,MAAM;YAC9B,eAAe,EAAE,uBAAuB;YACxC,GAAG,CAAC,cAAc;gBACjB,CAAC,CAAC;oBACA,qBAAqB,EAAE,uBAAuB,CAAC,UAAU,CAAC,QAAQ,CAAC;iBACnE;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,IAAI;SACP,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,GAAoB,EACpB,GAAmB,EACnB,MAAsB,EACtB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAE5B,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,iEAAiE;QACjE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAEhC,GAAG,CAAC,CAAC;QACP,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxC,IAAI,YAAY,GAAsC,SAAS,CAAC;QAChE,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAC3C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACxB,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5C,YAAY,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;gBAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBAC9D,OAAO;gBACR,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,gBAAgB,GAAG,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBAChE,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBACnE,OAAO;gBACR,CAAC;gBACD,YAAY,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;gBACxD,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnB,OAAO;gBACR,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,4BAA4B,CAAC;gBACzC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;aAC9D,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,mCAAmC,CAClC,GAAG,EACH,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,kCAAkC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CACzD,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QAED,IAAI,OAAe,CAAC;QACpB,IAAI,WAAmB,CAAC;QACxB,IAAI,QAAgB,CAAC;QAErB,QAAQ,MAAM,EAAE,CAAC;YAChB,KAAK,OAAO,CAAC,CAAC,CAAC;gBACd,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC5C,OAAO,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxF,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;wBACnE,OAAO;oBACR,CAAC;oBACD,OAAO,GAAG,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;gBAClD,CAAC;gBACD,WAAW,GAAG,sBAAsB,CAAC;gBACrC,QAAQ,GAAG,WAAW,SAAS,QAAQ,CAAC;gBACxC,MAAM;YACP,CAAC;YACD,KAAK,UAAU;gBACd,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC9C,WAAW,GAAG,eAAe,CAAC;gBAC9B,QAAQ,GAAG,WAAW,SAAS,KAAK,CAAC;gBACrC,MAAM;YACP,KAAK,MAAM;gBACV,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC1C,WAAW,GAAG,YAAY,CAAC;gBAC3B,QAAQ,GAAG,WAAW,SAAS,MAAM,CAAC;gBACtC,MAAM;YACP;gBACC,OAAO,GAAG,IAAI,CAAC,SAAS,CACvB;oBACC,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,QAAQ,EAAE,4BAA4B,CAAC,QAAQ,EAAE;wBAChD,wBAAwB,EAAE,IAAI;qBAC9B,CAAC;iBACF,EACD,IAAI,EACJ,CAAC,CACD,CAAC;gBACF,WAAW,GAAG,kBAAkB,CAAC;gBACjC,QAAQ,GAAG,WAAW,SAAS,OAAO,CAAC;gBACvC,MAAM;QACR,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,WAAW;YAC3B,qBAAqB,EAAE,uBAAuB,CAAC,QAAQ,CAAC;YACxD,GAAG,IAAI;SACP,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC","sourcesContent":["/**\n * @fileoverview Session Management HTTP Handlers\n *\n * This module provides REST API endpoints for managing Composer sessions,\n * including CRUD operations, session sharing, and export functionality.\n *\n * ## Endpoints\n *\n * | Method | Path | Description |\n * |--------|------|-------------|\n * | GET | `/api/sessions` | List all sessions with pagination |\n * | GET | `/api/sessions/:id` | Get a specific session with messages |\n * | GET | `/api/sessions/:id/timeline` | Get a redacted run timeline |\n * | POST | `/api/sessions` | Create a new session |\n * | PATCH | `/api/sessions/:id` | Update session metadata (title, tags, favorite) |\n * | DELETE | `/api/sessions/:id` | Delete a session |\n * | POST | `/api/sessions/:id/share` | Generate a shareable link |\n * | GET | `/api/sessions/shared/:token` | Access a shared session |\n * | POST | `/api/sessions/:id/export` | Export session in various formats |\n *\n * ## Session Sharing\n *\n * Sessions can be shared via time-limited, access-limited tokens:\n * - Configurable expiration (default 24h, max 1 week)\n * - Optional access count limits\n * - Rate limiting to prevent brute-force attacks\n * - Atomic access counting to prevent race conditions\n *\n * ## Storage\n *\n * - Session data: JSONL files in `~/.maestro/agent/sessions/`\n * - Share tokens: PostgreSQL (with in-memory fallback)\n * - Rate limits: Redis (with in-memory fallback)\n *\n * @module web/handlers/sessions\n */\nimport crypto from \"node:crypto\";\nimport { readFileSync } from \"node:fs\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type {\n\tComposerSession,\n\tComposerSessionSummary,\n} from \"@evalops/contracts\";\nimport {\n\tscanOutboundSensitiveContent,\n\tsummarizeOutboundSensitiveFindings,\n} from \"../../safety/outbound-secret-preflight.js\";\nimport { safeReadSessionEntries } from \"../../session/session-context.js\";\nimport type { SessionEntry, SessionMessagesView } from \"../../session/types.js\";\nimport { recordMaestroSessionEvent } from \"../../telemetry/maestro-event-bus.js\";\nimport { createLogger } from \"../../utils/logger.js\";\nimport { getAuthSubject } from \"../authz.js\";\nimport { isHostedSessionManager } from \"../hosted-session-manager.js\";\nimport { getPendingServerRequestPayload } from \"../pending-request-payload.js\";\nimport {\n\tbuildContentDisposition,\n\treadJsonBody,\n\trespondWithApiError,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { webSessionEventEnv } from \"../session-event-env.js\";\nimport {\n\tcreateWebSessionManagerForRequest,\n\tcreateWebSessionManagerForScope,\n\tdecodeScopedSessionId,\n\tencodeScopedSessionId,\n\tresolveSessionScope,\n} from \"../session-scope.js\";\nimport { convertAppMessagesToComposer } from \"../session-serialization.js\";\nimport { exportToMarkdown, exportToText } from \"./session-export-formatters.js\";\nimport {\n\ttype SessionExportFormat,\n\ttype SessionShareOptions,\n\ttype SessionUpdateBody,\n\tcheckShareRateLimit,\n\tcreateSharedSessionInDb,\n\tdeleteExpiredShares,\n\tdeleteShareByToken,\n\tgetSharedSessionFromDb,\n\ttryAccessShare,\n} from \"./session-share-store.js\";\n\nexport {\n\tcheckShareRateLimit,\n\tresetShareRateLimit,\n\tstopShareRateLimiter,\n} from \"./session-share-store.js\";\nexport type {\n\tSessionExportFormat,\n\tSessionShareOptions,\n\tSessionUpdateBody,\n} from \"./session-share-store.js\";\n\nconst logger = createLogger(\"sessions-handler\");\nexport const sessionIdPattern = /^[a-zA-Z0-9._-]+$/;\nconst attachmentIdPattern = /^[a-zA-Z0-9._-]+$/;\n\nfunction parseSessionMessagesView(\n\tvalue: string | null,\n): SessionMessagesView | null {\n\tif (value === null || value === \"\" || value === \"full\") {\n\t\treturn \"full\";\n\t}\n\tif (value === \"summary\" || value === \"notLoaded\") {\n\t\treturn value;\n\t}\n\treturn null;\n}\n\nfunction sendSensitiveContentBlockedResponse(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcors: Record<string, string>,\n\taction: \"export\" | \"share\",\n\tfindings: ReturnType<typeof summarizeOutboundSensitiveFindings>,\n): void {\n\tsendJson(\n\t\tres,\n\t\t409,\n\t\t{\n\t\t\terror: `Sensitive content detected. Review and confirm before continuing with this ${action}.`,\n\t\t\tcode: \"sensitive_content_detected\",\n\t\t\tdetails: findings,\n\t\t},\n\t\tcors,\n\t\treq,\n\t);\n}\n\n/**\n * Verify that the authenticated subject has access to the session.\n * Prevents IDOR attacks by checking session ownership fields.\n *\n * Returns true if access is allowed, false otherwise.\n */\nexport function verifySessionOwnership(\n\tsession: { owner?: unknown; subject?: unknown },\n\tsubject: string,\n): boolean {\n\t// Check explicit owner field\n\tif (typeof session.owner === \"string\" && session.owner) {\n\t\treturn session.owner === subject;\n\t}\n\n\t// Check subject field (for API-created sessions)\n\tif (typeof session.subject === \"string\" && session.subject) {\n\t\treturn session.subject === subject;\n\t}\n\n\t// For sessions without ownership info:\n\t// In strict mode (multi-user), deny access to prevent IDOR attacks.\n\t// Sessions created via CLI don't have ownership info, but API access\n\t// should be restricted in hosted environments.\n\tconst strictMode = process.env.MAESTRO_STRICT_SESSION_ACCESS !== \"false\";\n\treturn !strictMode;\n}\n\nfunction findAttachmentInSession(\n\tsession: { messages?: Array<unknown> },\n\tattachmentId: string,\n): {\n\tfileName: string;\n\tmimeType: string;\n\tcontentBase64: string;\n\tsize?: number;\n} | null {\n\tconst messages = Array.isArray(session.messages) ? session.messages : [];\n\tfor (const msg of messages) {\n\t\tif (!msg || typeof msg !== \"object\") continue;\n\t\tconst maybeAttachments = (msg as { attachments?: unknown }).attachments;\n\t\tif (!Array.isArray(maybeAttachments)) continue;\n\n\t\tfor (const att of maybeAttachments) {\n\t\t\tif (!att || typeof att !== \"object\") continue;\n\t\t\tconst a = att as {\n\t\t\t\tid?: unknown;\n\t\t\t\tfileName?: unknown;\n\t\t\t\tmimeType?: unknown;\n\t\t\t\tcontent?: unknown;\n\t\t\t\tsize?: unknown;\n\t\t\t};\n\t\t\tif (a.id !== attachmentId) continue;\n\t\t\tif (typeof a.fileName !== \"string\" || !a.fileName) return null;\n\t\t\tif (typeof a.mimeType !== \"string\" || !a.mimeType) return null;\n\t\t\tif (typeof a.content !== \"string\" || !a.content) return null;\n\t\t\treturn {\n\t\t\t\tfileName: a.fileName,\n\t\t\t\tmimeType: a.mimeType,\n\t\t\t\tcontentBase64: a.content,\n\t\t\t\tsize:\n\t\t\t\t\ttypeof a.size === \"number\" && Number.isFinite(a.size)\n\t\t\t\t\t\t? a.size\n\t\t\t\t\t\t: undefined,\n\t\t\t};\n\t\t}\n\t}\n\treturn null;\n}\n\nasync function resolveSharedSessionAccess(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tshareToken: string,\n\tcors: Record<string, string>,\n): Promise<string | null> {\n\tconst clientIp =\n\t\t(req.headers[\"x-forwarded-for\"] as string)?.split(\",\")[0]?.trim() ||\n\t\treq.socket.remoteAddress ||\n\t\t\"unknown\";\n\tconst rateLimit = await checkShareRateLimit(clientIp);\n\tif (!rateLimit.allowed) {\n\t\tres.setHeader(\"Retry-After\", String(rateLimit.retryAfterSeconds ?? 60));\n\t\tsendJson(\n\t\t\tres,\n\t\t\t429,\n\t\t\t{\n\t\t\t\terror: \"Too many requests\",\n\t\t\t\tretryAfter: rateLimit.retryAfterSeconds,\n\t\t\t},\n\t\t\tcors,\n\t\t\treq,\n\t\t);\n\t\treturn null;\n\t}\n\n\tconst accessResult = await tryAccessShare(shareToken);\n\tif (!accessResult.allowed) {\n\t\tswitch (accessResult.reason) {\n\t\t\tcase \"not_found\":\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t404,\n\t\t\t\t\t{ error: \"Share link not found or expired\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn null;\n\t\t\tcase \"expired\":\n\t\t\t\tawait deleteShareByToken(shareToken);\n\t\t\t\tsendJson(res, 410, { error: \"Share link has expired\" }, cors, req);\n\t\t\t\treturn null;\n\t\t\tcase \"max_accesses\":\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t410,\n\t\t\t\t\t{ error: \"Share link has reached maximum accesses\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn null;\n\t\t}\n\t}\n\n\treturn accessResult.sessionId ?? null;\n}\n\n// ============================================================================\n// SESSION HANDLERS\n// ============================================================================\n\n/**\n * Handle session list and CRUD operations\n */\nexport async function handleSessions(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id?: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\tconst url = new URL(req.url || \"/api/sessions\", \"http://localhost\");\n\tconst limitParam = url.searchParams.get(\"limit\");\n\tconst offsetParam = url.searchParams.get(\"offset\");\n\tconst parsedLimit = limitParam ? Number.parseInt(limitParam, 10) : undefined;\n\tconst parsedOffset = offsetParam\n\t\t? Number.parseInt(offsetParam, 10)\n\t\t: undefined;\n\tconst limit =\n\t\ttypeof parsedLimit === \"number\" && Number.isFinite(parsedLimit)\n\t\t\t? Math.max(1, parsedLimit)\n\t\t\t: undefined;\n\tconst offset =\n\t\ttypeof parsedOffset === \"number\" && Number.isFinite(parsedOffset)\n\t\t\t? Math.max(0, parsedOffset)\n\t\t\t: undefined;\n\n\ttry {\n\t\tif (req.method === \"GET\" && !sessionId) {\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tconst paginationRequested =\n\t\t\t\ttypeof limit === \"number\" || typeof offset === \"number\";\n\t\t\tconst sessions = (\n\t\t\t\tawait sessionManager.listSessions(\n\t\t\t\t\tpaginationRequested ? undefined : { limit, offset },\n\t\t\t\t)\n\t\t\t).filter((s) => verifySessionOwnership(s, subject));\n\t\t\tconst pagedSessions = paginationRequested\n\t\t\t\t? sessions.slice(\n\t\t\t\t\t\toffset ?? 0,\n\t\t\t\t\t\t(offset ?? 0) + (limit ?? sessions.length),\n\t\t\t\t\t)\n\t\t\t\t: sessions;\n\t\t\tconst sessionList: ComposerSessionSummary[] = pagedSessions.map((s) => ({\n\t\t\t\tid: s.id,\n\t\t\t\ttitle: s.title || `Session ${s.id.slice(0, 8)}`,\n\t\t\t\tresumeSummary: s.resumeSummary,\n\t\t\t\tcreatedAt: s.createdAt || new Date().toISOString(),\n\t\t\t\tupdatedAt: s.updatedAt || new Date().toISOString(),\n\t\t\t\tmessageCount: s.messageCount || 0,\n\t\t\t\tfavorite: s.favorite,\n\t\t\t\ttags: s.tags,\n\t\t\t}));\n\n\t\t\tsendJson(res, 200, { sessions: sessionList }, cors, req);\n\t\t} else if (req.method === \"GET\" && sessionId) {\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst messagesView = parseSessionMessagesView(\n\t\t\t\turl.searchParams.get(\"messagesView\") ??\n\t\t\t\t\turl.searchParams.get(\"itemsView\"),\n\t\t\t);\n\t\t\tif (!messagesView) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t400,\n\t\t\t\t\t{\n\t\t\t\t\t\terror:\n\t\t\t\t\t\t\t\"Invalid messagesView. Expected full, summary, or notLoaded.\",\n\t\t\t\t\t},\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst session = await sessionManager.loadSession(sessionId, {\n\t\t\t\tmessagesView,\n\t\t\t});\n\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst responseBody: ComposerSession = {\n\t\t\t\tid: session.id,\n\t\t\t\ttitle: session.title,\n\t\t\t\tresumeSummary: session.resumeSummary,\n\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\tfavorite: session.favorite,\n\t\t\t\ttags: session.tags,\n\t\t\t\tmessagesView: session.messagesView,\n\t\t\t\tmessages: convertAppMessagesToComposer(session.messages || [], {\n\t\t\t\t\tincludeAttachmentContent: false,\n\t\t\t\t}),\n\t\t\t\t...getPendingServerRequestPayload(session.id),\n\t\t\t};\n\n\t\t\tsendJson(res, 200, responseBody, cors, req);\n\t\t} else if (req.method === \"POST\" && !sessionId) {\n\t\t\tconst { title } = await readJsonBody<{ title?: string }>(req);\n\t\t\tconst session = await sessionManager.createSession({ title });\n\t\t\tconst responseBody: ComposerSession = {\n\t\t\t\tid: session.id,\n\t\t\t\ttitle: session.title,\n\t\t\t\tresumeSummary: session.resumeSummary,\n\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\tfavorite: false,\n\t\t\t\ttags: undefined,\n\t\t\t\tmessages: convertAppMessagesToComposer(session.messages || [], {\n\t\t\t\t\tincludeAttachmentContent: false,\n\t\t\t\t}),\n\t\t\t};\n\n\t\t\tsendJson(res, 201, responseBody, cors, req);\n\t\t} else if (req.method === \"PATCH\" && sessionId) {\n\t\t\t// Update session metadata\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst updates = await readJsonBody<SessionUpdateBody>(req);\n\t\t\tconst session = await sessionManager.loadSession(sessionId);\n\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\tawait sessionManager.updateSessionMetadata(sessionId, updates);\n\t\t\t} else {\n\t\t\t\tconst sessionPath = sessionManager.getSessionFileById(sessionId);\n\t\t\t\tif (!sessionPath) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\t// Apply updates - SessionManager supports favorite, title, and tags via meta entries\n\t\t\t\tif (updates.favorite !== undefined) {\n\t\t\t\t\tsessionManager.setSessionFavorite(sessionPath, updates.favorite);\n\t\t\t\t}\n\t\t\t\tif (updates.title !== undefined) {\n\t\t\t\t\tsessionManager.setSessionTitle(sessionPath, updates.title);\n\t\t\t\t}\n\t\t\t\tif (updates.tags !== undefined) {\n\t\t\t\t\tsessionManager.setSessionTags(sessionPath, updates.tags);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Return the updated values directly (writes are applied synchronously to the file)\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t200,\n\t\t\t\t{\n\t\t\t\t\tid: sessionId,\n\t\t\t\t\ttitle: updates.title ?? session.title,\n\t\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\t\tupdatedAt: new Date().toISOString(),\n\t\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\t\tfavorite: updates.favorite ?? session.favorite,\n\t\t\t\t\ttags: updates.tags ?? session.tags,\n\t\t\t\t},\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t} else if (req.method === \"DELETE\" && sessionId) {\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Load session to verify ownership before deletion\n\t\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tawait sessionManager.deleteSession(sessionId);\n\t\t\trecordMaestroSessionEvent(\"MAESTRO_SESSION_STATE_CLOSED\", {\n\t\t\t\tsessionId,\n\t\t\t\tcloseReason: \"MAESTRO_CLOSE_REASON_USER_STOPPED\",\n\t\t\t\tcloseMessage: \"Web session deleted\",\n\t\t\t\tcorrelation: { principal_id: subject },\n\t\t\t\tenv: webSessionEventEnv(),\n\t\t\t\tmetadata: { operation: \"session.delete\" },\n\t\t\t});\n\n\t\t\tres.writeHead(204, cors);\n\t\t\tres.end();\n\t\t} else {\n\t\t\tres.writeHead(404, {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t...cors,\n\t\t\t});\n\t\t\tres.end(JSON.stringify({ error: \"Not found\" }));\n\t\t}\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/**\n * Handle session sharing - generate a shareable link\n */\nexport async function handleSessionShare(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Verify session ownership to prevent sharing others' sessions\n\t\tconst subject = getAuthSubject(req);\n\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst options = await readJsonBody<\n\t\t\tSessionShareOptions & { allowSensitiveContent?: boolean }\n\t\t>(req);\n\t\tconst expiresInHours = Math.min(options.expiresInHours ?? 24, 168); // Max 1 week\n\t\tconst maxAccesses =\n\t\t\toptions.maxAccesses === null\n\t\t\t\t? null // explicit unlimited\n\t\t\t\t: Math.max(1, options.maxAccesses ?? 100); // default finite, clamp minimum\n\n\t\tif (!options.allowSensitiveContent) {\n\t\t\tconst scan = scanOutboundSensitiveContent({\n\t\t\t\ttitle: session.title,\n\t\t\t\tmessages: session.messages || [],\n\t\t\t});\n\t\t\tif (scan.blockingFindings.length > 0) {\n\t\t\t\tsendSensitiveContentBlockedResponse(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tcors,\n\t\t\t\t\t\"share\",\n\t\t\t\t\tsummarizeOutboundSensitiveFindings(scan.blockingFindings),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\n\t\t// Generate a share token\n\t\tconst shareToken = crypto.randomBytes(32).toString(\"base64url\");\n\t\tconst expiresAt = new Date(Date.now() + expiresInHours * 60 * 60 * 1000);\n\n\t\tconst scope = resolveSessionScope(req);\n\t\tconst scopedSessionId = encodeScopedSessionId(scope, sessionId);\n\n\t\t// Store in database (or fallback to memory)\n\t\tawait createSharedSessionInDb(\n\t\t\tscopedSessionId,\n\t\t\tshareToken,\n\t\t\texpiresAt,\n\t\t\tmaxAccesses,\n\t\t);\n\n\t\t// Cleanup expired shares in background\n\t\tdeleteExpiredShares().catch((err) => {\n\t\t\tlogger.error(\"Failed to cleanup expired shares\", err);\n\t\t});\n\n\t\tsendJson(\n\t\t\tres,\n\t\t\t201,\n\t\t\t{\n\t\t\t\tshareToken,\n\t\t\t\tshareUrl: `/api/sessions/shared/${shareToken}`,\n\t\t\t\twebShareUrl: `/share/${shareToken}`,\n\t\t\t\texpiresAt: expiresAt.toISOString(),\n\t\t\t\tmaxAccesses,\n\t\t\t},\n\t\t\tcors,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/**\n * Handle accessing a shared session\n */\nexport async function handleSharedSession(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { token: string },\n\tcors: Record<string, string>,\n) {\n\tconst shareToken = params.token;\n\n\ttry {\n\t\tif (req.method !== \"GET\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst resolvedSessionId = await resolveSharedSessionAccess(\n\t\t\treq,\n\t\t\tres,\n\t\t\tshareToken,\n\t\t\tcors,\n\t\t);\n\t\tif (!resolvedSessionId) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst { scope, sessionId } = decodeScopedSessionId(resolvedSessionId);\n\t\tconst sessionManager = createWebSessionManagerForScope(scope, true);\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Return a read-only view of the session\n\t\tconst responseBody: ComposerSession = {\n\t\t\t// Don't leak the underlying session id through share links; treat token as the public id.\n\t\t\tid: `shared:${shareToken}`,\n\t\t\ttitle: session.title,\n\t\t\tresumeSummary: session.resumeSummary,\n\t\t\tcreatedAt: session.createdAt,\n\t\t\tupdatedAt: session.updatedAt,\n\t\t\tmessageCount: session.messageCount,\n\t\t\tmessages: convertAppMessagesToComposer(session.messages || [], {\n\t\t\t\tincludeAttachmentContent: false,\n\t\t\t}),\n\t\t};\n\n\t\tsendJson(res, 200, { ...responseBody, isShared: true }, cors, req);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/**\n * Fetch a shared session attachment by token (for lazy-loaded attachment content).\n *\n * This does NOT increment accessCount (unlike handleSharedSession), so users\n * can fetch attachments after opening the shared session even when maxAccesses\n * is low (e.g., 1).\n */\nexport async function handleSharedSessionAttachment(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { token: string; attachmentId: string },\n\tcors: Record<string, string>,\n) {\n\tconst shareToken = params.token;\n\tconst attachmentId = params.attachmentId;\n\n\ttry {\n\t\tif (req.method !== \"GET\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!attachmentIdPattern.test(attachmentId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid attachment id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst resolvedSessionId = await resolveSharedSessionAccess(\n\t\t\treq,\n\t\t\tres,\n\t\t\tshareToken,\n\t\t\tcors,\n\t\t);\n\t\tif (!resolvedSessionId) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst { scope, sessionId } = decodeScopedSessionId(resolvedSessionId);\n\t\tconst sessionManager = createWebSessionManagerForScope(scope, true);\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst attachment = findAttachmentInSession(session, attachmentId);\n\t\tif (!attachment) {\n\t\t\tsendJson(res, 404, { error: \"Attachment not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst bytes = Buffer.from(attachment.contentBase64, \"base64\");\n\t\tconst requestUrl = new URL(req.url || \"/\", \"http://localhost\");\n\t\tconst download = requestUrl.searchParams.get(\"download\");\n\t\tconst shouldDownload = download === \"1\" || download === \"true\";\n\n\t\tres.writeHead(200, {\n\t\t\t\"Content-Type\": attachment.mimeType,\n\t\t\t\"Content-Length\": bytes.length,\n\t\t\t\"Cache-Control\": \"private, max-age=3600\",\n\t\t\t...(shouldDownload\n\t\t\t\t? {\n\t\t\t\t\t\t\"Content-Disposition\": buildContentDisposition(attachment.fileName),\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\t...cors,\n\t\t});\n\t\tres.end(bytes);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/**\n * Handle session export\n */\nexport async function handleSessionExport(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Verify session ownership to prevent exporting others' sessions\n\t\tconst subject = getAuthSubject(req);\n\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst options = await readJsonBody<\n\t\t\tSessionExportFormat & { allowSensitiveContent?: boolean }\n\t\t>(req);\n\t\tconst format = options.format || \"json\";\n\t\tconst messages = session.messages || [];\n\t\tlet jsonlEntries: SessionEntry[] | null | undefined = undefined;\n\t\tlet jsonlSessionFile: string | null = null;\n\t\tif (format === \"jsonl\") {\n\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\tjsonlEntries = await sessionManager.loadEntries(sessionId);\n\t\t\t\tif (!jsonlEntries) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tjsonlSessionFile = sessionManager.getSessionFileById(sessionId);\n\t\t\t\tif (!jsonlSessionFile) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tjsonlEntries = safeReadSessionEntries(jsonlSessionFile);\n\t\t\t\tif (!jsonlEntries) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (!options.allowSensitiveContent) {\n\t\t\tconst scan = scanOutboundSensitiveContent({\n\t\t\t\ttitle: session.title,\n\t\t\t\tmessages: format === \"jsonl\" ? (jsonlEntries ?? []) : messages,\n\t\t\t});\n\t\t\tif (scan.blockingFindings.length > 0) {\n\t\t\t\tsendSensitiveContentBlockedResponse(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tcors,\n\t\t\t\t\t\"export\",\n\t\t\t\t\tsummarizeOutboundSensitiveFindings(scan.blockingFindings),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\n\t\tlet content: string;\n\t\tlet contentType: string;\n\t\tlet filename: string;\n\n\t\tswitch (format) {\n\t\t\tcase \"jsonl\": {\n\t\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\t\tcontent = `${(jsonlEntries ?? []).map((entry) => JSON.stringify(entry)).join(\"\\n\")}\\n`;\n\t\t\t\t} else {\n\t\t\t\t\tif (!jsonlSessionFile) {\n\t\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tcontent = readFileSync(jsonlSessionFile, \"utf8\");\n\t\t\t\t}\n\t\t\t\tcontentType = \"application/x-ndjson\";\n\t\t\t\tfilename = `session-${sessionId}.jsonl`;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"markdown\":\n\t\t\t\tcontent = exportToMarkdown(session, messages);\n\t\t\t\tcontentType = \"text/markdown\";\n\t\t\t\tfilename = `session-${sessionId}.md`;\n\t\t\t\tbreak;\n\t\t\tcase \"text\":\n\t\t\t\tcontent = exportToText(session, messages);\n\t\t\t\tcontentType = \"text/plain\";\n\t\t\t\tfilename = `session-${sessionId}.txt`;\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\tcontent = JSON.stringify(\n\t\t\t\t\t{\n\t\t\t\t\t\tid: session.id,\n\t\t\t\t\t\ttitle: session.title,\n\t\t\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\t\t\tmessages: convertAppMessagesToComposer(messages, {\n\t\t\t\t\t\t\tincludeAttachmentContent: true,\n\t\t\t\t\t\t}),\n\t\t\t\t\t},\n\t\t\t\t\tnull,\n\t\t\t\t\t2,\n\t\t\t\t);\n\t\t\t\tcontentType = \"application/json\";\n\t\t\t\tfilename = `session-${sessionId}.json`;\n\t\t\t\tbreak;\n\t\t}\n\n\t\tres.writeHead(200, {\n\t\t\t\"Content-Type\": contentType,\n\t\t\t\"Content-Disposition\": buildContentDisposition(filename),\n\t\t\t...cors,\n\t\t});\n\t\tres.end(content);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n"]}