npm - @evalops/maestro - Versions diffs - 0.10.18 → 0.10.21 - Mend

@evalops/maestro 0.10.18 → 0.10.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2490) hide show

package/dist/server/handlers/pending-requests.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"pending-requests.js","sourceRoot":"","sources":["../../../src/server/handlers/pending-requests.ts"],"names":[],"mappings":"AACA,OAAO,EAKN,yCAAyC,GAEzC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAEN,oBAAoB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAMxD,SAAS,eAAe,CAAC,MAAiC;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CACzB,MAAkC,EAClC,QAAgD;IAEhD,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACrC,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,mBAAmB,QAAQ,2BAA2B,MAAM,UAAU,CACtE,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAC1B,OAAqC,EACrC,SAA6B;IAE7B,IAAI,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QACvE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;IAClE,CAAC;AACF,CAAC;AAED,SAAS,uBAAuB,CAC/B,KAA0C;IAE1C,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC;AACvB,CAAC;AAED,SAAS,kBAAkB,CAC1B,KAA0C;IAE1C,IACC,KAAK,CAAC,MAAM,KAAK,OAAO;QACxB,KAAK,CAAC,MAAM,KAAK,MAAM;QACvB,KAAK,CAAC,MAAM,KAAK,OAAO,EACvB,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,wBAAwB,CAChC,KAA0C;IAE1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC;AACtB,CAAC;AAED,SAAS,0BAA0B,CAClC,IAA0C,EAC1C,OAAgB;IAEhB,IAAI,OAAO,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QACzD,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAC5B,OAAqC;IAErC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,gBAAgB;YAClD,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,iBAAiB,CAAC;IACtB,CAAC;IACD,IACC,OAAO,CAAC,IAAI,KAAK,aAAa;QAC9B,OAAO,CAAC,IAAI,KAAK,iBAAiB;QAClC,OAAO,CAAC,IAAI,KAAK,YAAY,EAC5B,CAAC;QACF,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CACnB,OAAqC,EACrC,UAA4C;IAE5C,OAAO;QACN,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACR,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU;YACV,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO;YAC/C,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,iBAAiB,EAAE,oBAAoB,CAAC,OAAO,CAAC;SAChD;KACD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAAiC;IAEjC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEhC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAChC,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACR,CAAC;QAED,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GACV,MAAM,oBAAoB,CACzB,GAAG,EACH,yCAAyC,CACzC,CAAC;QACH,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;QAC1E,CAAC;QAED,iBAAiB,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,kBAAkB,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAEpD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,UAA4C,CAAC;QAEjD,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;YAC7B,KAAK,UAAU,CAAC,CAAC,CAAC;gBACjB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;gBAChD,QAAQ,GAAG,oBAAoB,CAAC,eAAe,CAAC,SAAS,EAAE;oBAC1D,QAAQ,EAAE,QAAQ,KAAK,UAAU;oBACjC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,MAAM;iBAClB,CAAC,CAAC;gBACH,UAAU,GAAG,QAAQ,CAAC;gBACtB,MAAM;YACP,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBACnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBACzC,QAAQ,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,SAAS,EAAE;oBAC3D,MAAM;oBACN,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,MAAM;iBAClB,CAAC,CAAC;gBACH,UAAU;oBACT,MAAM,KAAK,OAAO;wBACjB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,MAAM,KAAK,MAAM;4BAClB,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,SAAS,CAAC;gBACf,MAAM;YACP,CAAC;YACD,KAAK,aAAa,CAAC;YACnB,KAAK,iBAAiB,CAAC;YACvB,KAAK,YAAY,CAAC,CAAC,CAAC;gBACnB,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;gBACvC,QAAQ,GAAG,oBAAoB,CAAC,iBAAiB,CAChD,SAAS,EACT,OAAO,EACP,OAAO,CACP,CAAC;gBACF,UAAU,GAAG,0BAA0B,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACtE,MAAM;YACP,CAAC;QACF,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;QAC1E,CAAC;QAED,QAAQ,CACP,GAAG,EACH,GAAG,EACH,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,EACvC,WAAW,EACX,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;AACF,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport {\n\ttype ComposerPendingRequestKind,\n\ttype ComposerPendingRequestPlatformOperation,\n\ttype ComposerPendingRequestResolution,\n\ttype ComposerPendingRequestResumeRequest,\n\tComposerPendingRequestResumeRequestSchema,\n\ttype ComposerPendingRequestResumeResponse,\n} from \"@evalops/contracts\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport {\n\ttype PendingServerRequestSnapshot,\n\tserverRequestManager,\n} from \"../server-request-manager.js\";\nimport { ApiError, respondWithApiError, sendJson } from \"../server-utils.js\";\nimport { parseAndValidateJson } from \"../validation.js\";\n\ntype PendingRequestRouteParams = {\n\trequestId?: string;\n};\n\nfunction decodeRequestId(params: PendingRequestRouteParams): string {\n\tconst raw = params.requestId?.trim();\n\tif (!raw) {\n\t\tthrow new ApiError(400, \"Pending request id is required\");\n\t}\n\ttry {\n\t\treturn decodeURIComponent(raw);\n\t} catch {\n\t\tthrow new ApiError(400, \"Pending request id is invalid\");\n\t}\n}\n\nfunction assertRequestKind(\n\tactual: ComposerPendingRequestKind,\n\texpected: ComposerPendingRequestKind \| undefined,\n): void {\n\tif (expected && expected !== actual) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`Pending request ${expected} resolver cannot resume ${actual} request`,\n\t\t);\n\t}\n}\n\nfunction assertSessionMatch(\n\trequest: PendingServerRequestSnapshot,\n\tsessionId: string \| undefined,\n): void {\n\tif (sessionId && request.sessionId && sessionId !== request.sessionId) {\n\t\tthrow new ApiError(404, \"Pending request not found for session\");\n\t}\n}\n\nfunction requireApprovalDecision(\n\tinput: ComposerPendingRequestResumeRequest,\n): \"approved\" \| \"denied\" {\n\tif (input.decision !== \"approved\" && input.decision !== \"denied\") {\n\t\tthrow new ApiError(400, \"Approval resume requires decision\");\n\t}\n\treturn input.decision;\n}\n\nfunction requireRetryAction(\n\tinput: ComposerPendingRequestResumeRequest,\n): \"retry\" \| \"skip\" \| \"abort\" {\n\tif (\n\t\tinput.action !== \"retry\" &&\n\t\tinput.action !== \"skip\" &&\n\t\tinput.action !== \"abort\"\n\t) {\n\t\tthrow new ApiError(400, \"Tool retry resume requires action\");\n\t}\n\treturn input.action;\n}\n\nfunction requireClientToolContent(\n\tinput: ComposerPendingRequestResumeRequest,\n): NonNullable<ComposerPendingRequestResumeRequest[\"content\"]> {\n\tif (!Array.isArray(input.content)) {\n\t\tthrow new ApiError(400, \"Client request resume requires content\");\n\t}\n\treturn input.content;\n}\n\nfunction resolutionForClientRequest(\n\tkind: PendingServerRequestSnapshot[\"kind\"],\n\tisError: boolean,\n): ComposerPendingRequestResolution {\n\tif (isError) {\n\t\treturn \"failed\";\n\t}\n\tif (kind === \"mcp_elicitation\" \|\| kind === \"user_input\") {\n\t\treturn \"answered\";\n\t}\n\treturn \"completed\";\n}\n\nfunction platformOperationFor(\n\trequest: PendingServerRequestSnapshot,\n): ComposerPendingRequestPlatformOperation \| undefined {\n\tif (!request.platform) {\n\t\treturn undefined;\n\t}\n\tif (request.kind === \"approval\") {\n\t\treturn request.platform.source === \"tool_execution\"\n\t\t\t? \"ResumeToolExecution\"\n\t\t\t: \"ResolveApproval\";\n\t}\n\tif (\n\t\trequest.kind === \"client_tool\" \|\|\n\t\trequest.kind === \"mcp_elicitation\" \|\|\n\t\trequest.kind === \"user_input\"\n\t) {\n\t\treturn \"ResumeRun\";\n\t}\n\treturn undefined;\n}\n\nfunction responseFor(\n\trequest: PendingServerRequestSnapshot,\n\tresolution: ComposerPendingRequestResolution,\n): ComposerPendingRequestResumeResponse {\n\treturn {\n\t\tsuccess: true,\n\t\trequest: {\n\t\t\tid: request.id,\n\t\t\tkind: request.kind,\n\t\t\tsessionId: request.sessionId,\n\t\t\tresolution,\n\t\t\tsource: request.platform ? \"platform\" : \"local\",\n\t\t\tplatform: request.platform,\n\t\t\tplatformOperation: platformOperationFor(request),\n\t\t},\n\t};\n}\n\nexport async function handlePendingRequestResume(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams: PendingRequestRouteParams,\n) {\n\tconst { corsHeaders } = context;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tres.writeHead(405, corsHeaders);\n\t\t\tres.end();\n\t\t\treturn;\n\t\t}\n\n\t\tconst requestId = decodeRequestId(params);\n\t\tconst input =\n\t\t\tawait parseAndValidateJson<ComposerPendingRequestResumeRequest>(\n\t\t\t\treq,\n\t\t\t\tComposerPendingRequestResumeRequestSchema,\n\t\t\t);\n\t\tconst pendingRequest = serverRequestManager.get(requestId);\n\t\tif (!pendingRequest) {\n\t\t\tthrow new ApiError(404, \"Pending request not found or already resolved\");\n\t\t}\n\n\t\tassertRequestKind(pendingRequest.kind, input.kind);\n\t\tassertSessionMatch(pendingRequest, input.sessionId);\n\n\t\tlet resolved = false;\n\t\tlet resolution: ComposerPendingRequestResolution;\n\n\t\tswitch (pendingRequest.kind) {\n\t\t\tcase \"approval\": {\n\t\t\t\tconst decision = requireApprovalDecision(input);\n\t\t\t\tresolved = serverRequestManager.resolveApproval(requestId, {\n\t\t\t\t\tapproved: decision === \"approved\",\n\t\t\t\t\treason: input.reason,\n\t\t\t\t\tresolvedBy: \"user\",\n\t\t\t\t});\n\t\t\t\tresolution = decision;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"tool_retry\": {\n\t\t\t\tconst action = requireRetryAction(input);\n\t\t\t\tresolved = serverRequestManager.resolveToolRetry(requestId, {\n\t\t\t\t\taction,\n\t\t\t\t\treason: input.reason,\n\t\t\t\t\tresolvedBy: \"user\",\n\t\t\t\t});\n\t\t\t\tresolution =\n\t\t\t\t\taction === \"retry\"\n\t\t\t\t\t\t? \"retried\"\n\t\t\t\t\t\t: action === \"skip\"\n\t\t\t\t\t\t\t? \"skipped\"\n\t\t\t\t\t\t\t: \"aborted\";\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"client_tool\":\n\t\t\tcase \"mcp_elicitation\":\n\t\t\tcase \"user_input\": {\n\t\t\t\tconst content = requireClientToolContent(input);\n\t\t\t\tconst isError = input.isError === true;\n\t\t\t\tresolved = serverRequestManager.resolveClientTool(\n\t\t\t\t\trequestId,\n\t\t\t\t\tcontent,\n\t\t\t\t\tisError,\n\t\t\t\t);\n\t\t\t\tresolution = resolutionForClientRequest(pendingRequest.kind, isError);\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\n\t\tif (!resolved) {\n\t\t\tthrow new ApiError(404, \"Pending request not found or already resolved\");\n\t\t}\n\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\tresponseFor(pendingRequest, resolution),\n\t\t\tcorsHeaders,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 400, corsHeaders, req);\n\t}\n}\n"]}
1	+ {"version":3,"file":"pending-requests.js","sourceRoot":"","sources":["../../../src/server/handlers/pending-requests.ts"],"names":[],"mappings":"AACA,OAAO,EAKN,yCAAyC,GAEzC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAEN,oBAAoB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAqBxD,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAC9C,MAAM,2BAA2B,GAAG,EAAE,GAAG,MAAM,CAAC;AAChD,MAAM,qBAAqB,GAAG,IAAI,GAAG,EASlC,CAAC;AACJ,MAAM,eAAe,GAAG,IAAI,GAAG,EAS5B,CAAC;AAEJ,MAAM,mCAAoC,SAAQ,QAAQ;IACzD,YACC,OAAe,EACN,QAA8C,EAC9C,aAAkC;QAE3C,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAHX,aAAQ,GAAR,QAAQ,CAAsC;QAC9C,kBAAa,GAAb,aAAa,CAAqB;IAG5C,CAAC;CACD;AAED,SAAS,UAAU,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACnD,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,qBAAqB,EAAE,CAAC;QACzD,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAC7B,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,wBAAwB,CAChC,SAAiB,EACjB,KAA0C,EAC1C,QAA8C,EAC9C,OAAe,EACf,aAAmC,EACnC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAChC,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE;QACpC,SAAS,EACR,GAAG;YACH,CAAC,aAAa;gBACb,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,8BAA8B,CAAC;QACnC,gBAAgB,EAAE,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC;QACjE,aAAa;QACb,QAAQ;QACR,OAAO;KACP,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC9B,SAAiB,EACjB,KAA0C,EAC1C,OAAe,EACf,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAUhB,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,iCAAiC,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IACC,MAAM,CAAC,gBAAgB;QACvB,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EACrD,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,iCAAiC,CACzC,QAA8C,EAC9C,KAA0C;IAE1C,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,sBAAsB,CAC9B,KAA0C,EAC1C,OAAmE;IAEnE,OAAO,IAAI,CAAC,SAAS,CAAC;QACrB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO,EAAE,IAAI;QACjC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO,EAAE,SAAS;QAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;QAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;KACpB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CACjC,SAAiB,EACjB,KAA0C,EAC1C,OAAe;IAEf,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,EAAE;QACtD,IAAI,EAAE,QAAQ,CAAC,WAAW;QAC1B,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,IACC,QAAQ,CAAC,OAAO,KAAK,OAAO;QAC5B,QAAQ,CAAC,gBAAgB,KAAK,gBAAgB,EAC7C,CAAC;QACF,OAAO,QAAQ,CAAC,OAAO,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,eAAe,CAAC,MAAiC;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC1D,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CACzB,MAAkC,EAClC,QAAgD;IAEhD,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACrC,MAAM,IAAI,QAAQ,CACjB,GAAG,EACH,mBAAmB,QAAQ,2BAA2B,MAAM,UAAU,CACtE,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAC1B,OAAqC,EACrC,SAA6B;IAE7B,IAAI,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QACvE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;IAClE,CAAC;AACF,CAAC;AAED,SAAS,uBAAuB,CAC/B,KAA0C;IAE1C,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC;AACvB,CAAC;AAED,SAAS,kBAAkB,CAC1B,KAA0C;IAE1C,IACC,KAAK,CAAC,MAAM,KAAK,OAAO;QACxB,KAAK,CAAC,MAAM,KAAK,MAAM;QACvB,KAAK,CAAC,MAAM,KAAK,OAAO,EACvB,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,wBAAwB,CAChC,KAA0C;IAE1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC;AACtB,CAAC;AAED,SAAS,0BAA0B,CAClC,IAA0C,EAC1C,OAAgB;IAEhB,IAAI,OAAO,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QACzD,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,SAAS,oBAAoB,CAC5B,OAAqC;IAErC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,mBAAmB;YACrD,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,SAAS,CAAC;IACd,CAAC;IACD,IACC,OAAO,CAAC,IAAI,KAAK,aAAa;QAC9B,OAAO,CAAC,IAAI,KAAK,iBAAiB;QAClC,OAAO,CAAC,IAAI,KAAK,YAAY,EAC5B,CAAC;QACF,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CACnB,OAAqC,EACrC,UAA4C,EAC5C,iBAA2D;IAE3D,MAAM,SAAS,GAAG,iBAAiB,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACrE,OAAO;QACN,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACR,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU;YACV,MAAM,EACL,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,SAAS,KAAK,WAAW;gBACrD,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,OAAO;YACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,iBAAiB,EAAE,SAAS;SAC5B;KACD,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC9B,IAA0C;IAE1C,OAAO,CACN,IAAI,KAAK,aAAa;QACtB,IAAI,KAAK,iBAAiB;QAC1B,IAAI,KAAK,YAAY,CACrB,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CACjC,OAAqC,EACrC,OAAoC;IAEpC,OAAO,CACN,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC;QACjC,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,sBAAsB,CAAC;QAC5D,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAChE,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAClC,OAAqC,EACrC,OAAoC;IAEpC,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IACpC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,eAAe,GACpB,cAAc,CAAC,MAAM,CAAC,sBAAsB,CAAC;QAC7C,cAAc,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACnD,IACC,eAAe;QACf,OAAO,CAAC,SAAS;QACjB,eAAe,KAAK,OAAO,CAAC,SAAS,EACpC,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,SAAiB;IACzD,OAAO,WAAW,UAAU,CAAC,SAAS,CAAC,SAAS,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB,EAAE,SAAiB;IAChE,OAAO,WAAW,UAAU,CAAC,SAAS,CAAC,WAAW,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC3C,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,OAAO,sCAAsC,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC5C,OAAqC,EACrC,UAA4C,EAC5C,OAAoE,EACpE,OAAgB,EAChB,OAAoC;IAEpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,SAAS,GACd,OAAO,CAAC,4BAA4B,EAAE,SAAS,IAAI,qBAAqB,CAAC;IAC1E,IAAI,CAAC;QACJ,MAAM,SAAS,CAAC;YACf,KAAK;YACL,MAAM,EAAE,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YAC3C,aAAa,EAAE,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE;gBACR,kBAAkB,EAAE,SAAS;gBAC7B,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,YAAY,EAAE,OAAO,CAAC,IAAI;gBAC1B,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,UAAU;gBACV,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,OAAO;gBACjB,OAAO;aACP;SACD,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,mBAAmB,CAAC,qCAAqC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,SAAiB,EACjB,KAA0C,EAC1C,cAA4C,EAC5C,OAAoC;IAEpC,iBAAiB,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,kBAAkB,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAEpD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAA4C,CAAC;IACjD,IAAI,iBAAsE,CAAC;IAE3E,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;QAC7B,KAAK,UAAU,CAAC,CAAC,CAAC;YACjB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAChD,QAAQ,GAAG,oBAAoB,CAAC,eAAe,CAAC,SAAS,EAAE;gBAC1D,QAAQ,EAAE,QAAQ,KAAK,UAAU;gBACjC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,MAAM;aAClB,CAAC,CAAC;YACH,UAAU,GAAG,QAAQ,CAAC;YACtB,MAAM;QACP,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACzC,QAAQ,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,SAAS,EAAE;gBAC3D,MAAM;gBACN,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,MAAM;aAClB,CAAC,CAAC;YACH,UAAU;gBACT,MAAM,KAAK,OAAO;oBACjB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,MAAM,KAAK,MAAM;wBAClB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,SAAS,CAAC;YACf,MAAM;QACP,CAAC;QACD,KAAK,aAAa,CAAC;QACnB,KAAK,iBAAiB,CAAC;QACvB,KAAK,YAAY,CAAC,CAAC,CAAC;YACnB,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;YACvC,UAAU,GAAG,0BAA0B,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACtE,MAAM,OAAO,GAAG,oBAAoB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YAChE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM;YACP,CAAC;YACD,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,MAAM;YACP,CAAC;YACD,IAAI,CAAC;gBACJ,iBAAiB,GAAG,MAAM,8BAA8B,CACvD,OAAO,CAAC,OAAO,EACf,UAAU,EACV,OAAO,EACP,OAAO,EACP,OAAO,CACP,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBAC/D,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,aAAa,CAAC;gBACtB,CAAC;gBACD,MAAM,OAAO,GACZ,KAAK,YAAY,KAAK;oBACrB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,qCAAqC,CAAC;gBAC1C,MAAM,IAAI,mCAAmC,CAAC,OAAO,EAAE,aAAa,EAAE;oBACrE,OAAO;oBACP,OAAO;oBACP,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,UAAU;iBACV,CAAC,CAAC;YACJ,CAAC;YACD,MAAM;QACP,CAAC;IACF,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,WAAW,CAAC,cAAc,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,yBAAyB,CACvC,SAAiB,EACjB,KAA0C,EAC1C,MAGC,EACD,OAAe,EACf,OAAoC;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;IACnC,IAAI,CAAC;QACJ,MAAM,iBAAiB,GAAG,MAAM,8BAA8B,CAC7D,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,EACb,OAAO,CACP,CAAC;QACF,MAAM,QAAQ,GAAG,WAAW,CAC3B,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,UAAU,EAChB,iBAAiB,CACjB,CAAC;QACF,wBAAwB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9D,OAAO,QAAQ,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,QAAQ,CAAC;QACxB,CAAC;QACD,wBAAwB,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5E,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,GAAoB,EACpB,GAAmB,EACnB,OAAyB,EACzB,MAAiC;IAEjC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChC,IAAI,SAA6B,CAAC;IAClC,IAAI,KAAsD,CAAC;IAC3D,IAAI,OAA2B,CAAC;IAEhC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAChC,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACR,CAAC;QAED,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,GAAG,MAAM,oBAAoB,CACjC,GAAG,EACH,yCAAyC,CACzC,CAAC;QACF,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,gBAAgB,GAAG,SAAS,CAAC;QACnC,MAAM,YAAY,GAAG,KAAK,CAAC;QAC3B,MAAM,cAAc,GAAG,OAAO,CAAC;QAC/B,MAAM,QAAQ,GAAG,yBAAyB,CACzC,gBAAgB,EAChB,YAAY,EACZ,cAAc,CACd,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;YACrD,OAAO;QACR,CAAC;QAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAClE,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,sBAAsB,CACpC,gBAAgB,EAChB,YAAY,EACZ,cAAc,CACd,CAAC;YACF,IAAI,MAAM,EAAE,CAAC;gBACZ,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBAC1B,MAAM,YAAY,GAAG,yBAAyB,CAC7C,gBAAgB,EAChB,YAAY,EACZ;wBACC,aAAa,EAAE,MAAM,CAAC,aAAa;wBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;qBACzB,EACD,cAAc,EACd,OAAsC,CACtC,CAAC;oBACF,eAAe,CAAC,GAAG,CAAC,gBAAgB,EAAE;wBACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;wBACzC,OAAO,EAAE,YAAY;wBACrB,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI;wBACzC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS;wBAC5C,OAAO,EAAE,cAAc;qBACvB,CAAC,CAAC;oBACH,IAAI,CAAC;wBACJ,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;wBACpC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;wBAC/C,OAAO;oBACR,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;wBACvD,OAAO;oBACR,CAAC;4BAAS,CAAC;wBACV,IACC,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,OAAO,KAAK,YAAY,EAC9D,CAAC;4BACF,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;wBAC1C,CAAC;oBACF,CAAC;gBACF,CAAC;gBACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;gBACtD,OAAO;YACR,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACvE,MAAM,aAAa,GAAG,OAAsC,CAAC;QAC7D,MAAM,aAAa,GAAG,qBAAqB,CAC1C,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,aAAa,CACb,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACnB,wBAAwB,CACvB,gBAAgB,EAChB,YAAY,EACZ,QAAQ,EACR,cAAc,CACd,CAAC;YACF,OAAO,QAAQ,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,eAAe,CAAC,GAAG,CAAC,gBAAgB,EAAE;YACrC,gBAAgB;YAChB,OAAO,EAAE,aAAa;YACtB,WAAW,EAAE,cAAc,CAAC,IAAI;YAChC,SAAS,EAAE,cAAc,CAAC,SAAS;YACnC,OAAO,EAAE,cAAc;SACvB,CAAC,CAAC;QACH,IAAI,QAA8C,CAAC;QACnD,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,aAAa,CAAC;QAChC,CAAC;gBAAS,CAAC;YACV,IAAI,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,OAAO,KAAK,aAAa,EAAE,CAAC;gBACtE,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC1C,CAAC;QACF,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IACC,KAAK,YAAY,mCAAmC;YACpD,SAAS;YACT,KAAK;YACL,OAAO,EACN,CAAC;YACF,wBAAwB,CACvB,SAAS,EACT,KAAK,EACL,KAAK,CAAC,QAAQ,EACd,OAAO,EACP,KAAK,CAAC,aAAa,CACnB,CAAC;QACH,CAAC;QACD,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;AACF,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport {\n\ttype ComposerPendingRequestKind,\n\ttype ComposerPendingRequestPlatformOperation,\n\ttype ComposerPendingRequestResolution,\n\ttype ComposerPendingRequestResumeRequest,\n\tComposerPendingRequestResumeRequestSchema,\n\ttype ComposerPendingRequestResumeResponse,\n} from \"@evalops/contracts\";\nimport { resumeAgentRuntimeRun } from \"../../platform/agent-runtime-client.js\";\nimport { isAbortError } from \"../../utils/abort-error.js\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport { getAuthSubject } from \"../authz.js\";\nimport {\n\ttype PendingServerRequestSnapshot,\n\tserverRequestManager,\n} from \"../server-request-manager.js\";\nimport { ApiError, respondWithApiError, sendJson } from \"../server-utils.js\";\nimport { parseAndValidateJson } from \"../validation.js\";\n\ntype PendingRequestRouteParams = {\n\trequestId?: string;\n};\n\ntype PendingRequestPlatformResumeOperations = {\n\tresumeRun?: typeof resumeAgentRuntimeRun;\n};\n\ntype PendingRequestResumeContext = WebServerContext & {\n\tplatformPendingRequestResume?: PendingRequestPlatformResumeOperations;\n};\n\ntype PlatformResumeRetry = {\n\tcontent: NonNullable<ComposerPendingRequestResumeRequest[\"content\"]>;\n\tisError: boolean;\n\trequest: PendingServerRequestSnapshot;\n\tresolution: ComposerPendingRequestResolution;\n};\n\nconst RESOLVED_RESPONSE_CACHE_TTL_MS = 60_000;\nconst PLATFORM_RETRY_CACHE_TTL_MS = 30 * 60_000;\nconst resolvedResponseCache = new Map<\n\tstring,\n\t{\n\t\texpiresAt: number;\n\t\tinputFingerprint: string;\n\t\tplatformRetry?: PlatformResumeRetry;\n\t\tresponse: ComposerPendingRequestResumeResponse;\n\t\tsubject: string;\n\t}\n>();\nconst inFlightResumes = new Map<\n\tstring,\n\t{\n\t\tinputFingerprint: string;\n\t\tpromise: Promise<ComposerPendingRequestResumeResponse>;\n\t\trequestKind: ComposerPendingRequestKind;\n\t\tsessionId?: string;\n\t\tsubject: string;\n\t}\n>();\n\nclass PendingRequestResolvedPlatformError extends ApiError {\n\tconstructor(\n\t\tmessage: string,\n\t\treadonly response: ComposerPendingRequestResumeResponse,\n\t\treadonly platformRetry: PlatformResumeRetry,\n\t) {\n\t\tsuper(502, message);\n\t}\n}\n\nfunction safeIdPart(value: string): string {\n\treturn value.replace(/[^A-Za-z0-9_.:-]+/g, \"_\").slice(0, 96) \|\| \"unknown\";\n}\n\nfunction nonEmptyString(value: unknown): string \| undefined {\n\treturn typeof value === \"string\" && value.trim().length > 0\n\t\t? value.trim()\n\t\t: undefined;\n}\n\nfunction pruneResolvedResponseCache(now = Date.now()): void {\n\tfor (const [requestId, cached] of resolvedResponseCache) {\n\t\tif (cached.expiresAt <= now) {\n\t\t\tresolvedResponseCache.delete(requestId);\n\t\t}\n\t}\n}\n\nfunction rememberResolvedResponse(\n\trequestId: string,\n\tinput: ComposerPendingRequestResumeRequest,\n\tresponse: ComposerPendingRequestResumeResponse,\n\tsubject: string,\n\tplatformRetry?: PlatformResumeRetry,\n\tnow = Date.now(),\n): void {\n\tpruneResolvedResponseCache(now);\n\tresolvedResponseCache.set(requestId, {\n\t\texpiresAt:\n\t\t\tnow +\n\t\t\t(platformRetry\n\t\t\t\t? PLATFORM_RETRY_CACHE_TTL_MS\n\t\t\t\t: RESOLVED_RESPONSE_CACHE_TTL_MS),\n\t\tinputFingerprint: resumeInputFingerprint(input, response.request),\n\t\tplatformRetry,\n\t\tresponse,\n\t\tsubject,\n\t});\n}\n\nfunction getCachedResolvedEntry(\n\trequestId: string,\n\tinput: ComposerPendingRequestResumeRequest,\n\tsubject: string,\n\tnow = Date.now(),\n):\n\t\| {\n\t\t\texpiresAt: number;\n\t\t\tinputFingerprint: string;\n\t\t\tplatformRetry?: PlatformResumeRetry;\n\t\t\tresponse: ComposerPendingRequestResumeResponse;\n\t\t\tsubject: string;\n\t }\n\t\| undefined {\n\tpruneResolvedResponseCache(now);\n\tconst cached = resolvedResponseCache.get(requestId);\n\tif (!cached) {\n\t\treturn undefined;\n\t}\n\tif (cached.subject !== subject) {\n\t\treturn undefined;\n\t}\n\tif (input.kind && input.kind !== cached.response.request.kind) {\n\t\treturn undefined;\n\t}\n\tif (!cachedResponseSessionMatchesInput(cached.response, input)) {\n\t\treturn undefined;\n\t}\n\tif (\n\t\tcached.inputFingerprint !==\n\t\tresumeInputFingerprint(input, cached.response.request)\n\t) {\n\t\treturn undefined;\n\t}\n\treturn cached;\n}\n\nfunction cachedResponseSessionMatchesInput(\n\tresponse: ComposerPendingRequestResumeResponse,\n\tinput: ComposerPendingRequestResumeRequest,\n): boolean {\n\tif (!input.sessionId) {\n\t\treturn true;\n\t}\n\treturn response.request.sessionId === input.sessionId;\n}\n\nfunction resumeInputFingerprint(\n\tinput: ComposerPendingRequestResumeRequest,\n\trequest?: { kind?: ComposerPendingRequestKind; sessionId?: string },\n): string {\n\treturn JSON.stringify({\n\t\tkind: input.kind ?? request?.kind,\n\t\tsessionId: input.sessionId ?? request?.sessionId,\n\t\tdecision: input.decision,\n\t\taction: input.action,\n\t\tcontent: input.content,\n\t\tisError: input.isError === true,\n\t\treason: input.reason,\n\t});\n}\n\nfunction getMatchingInFlightResume(\n\trequestId: string,\n\tinput: ComposerPendingRequestResumeRequest,\n\tsubject: string,\n): Promise<ComposerPendingRequestResumeResponse> \| undefined {\n\tconst inFlight = inFlightResumes.get(requestId);\n\tif (!inFlight) {\n\t\treturn undefined;\n\t}\n\tconst inputFingerprint = resumeInputFingerprint(input, {\n\t\tkind: inFlight.requestKind,\n\t\tsessionId: inFlight.sessionId,\n\t});\n\tif (\n\t\tinFlight.subject === subject &&\n\t\tinFlight.inputFingerprint === inputFingerprint\n\t) {\n\t\treturn inFlight.promise;\n\t}\n\tthrow new ApiError(409, \"Pending request resume already in progress\");\n}\n\nfunction decodeRequestId(params: PendingRequestRouteParams): string {\n\tconst raw = params.requestId?.trim();\n\tif (!raw) {\n\t\tthrow new ApiError(400, \"Pending request id is required\");\n\t}\n\ttry {\n\t\treturn decodeURIComponent(raw);\n\t} catch {\n\t\tthrow new ApiError(400, \"Pending request id is invalid\");\n\t}\n}\n\nfunction assertRequestKind(\n\tactual: ComposerPendingRequestKind,\n\texpected: ComposerPendingRequestKind \| undefined,\n): void {\n\tif (expected && expected !== actual) {\n\t\tthrow new ApiError(\n\t\t\t400,\n\t\t\t`Pending request ${expected} resolver cannot resume ${actual} request`,\n\t\t);\n\t}\n}\n\nfunction assertSessionMatch(\n\trequest: PendingServerRequestSnapshot,\n\tsessionId: string \| undefined,\n): void {\n\tif (sessionId && request.sessionId && sessionId !== request.sessionId) {\n\t\tthrow new ApiError(404, \"Pending request not found for session\");\n\t}\n}\n\nfunction requireApprovalDecision(\n\tinput: ComposerPendingRequestResumeRequest,\n): \"approved\" \| \"denied\" {\n\tif (input.decision !== \"approved\" && input.decision !== \"denied\") {\n\t\tthrow new ApiError(400, \"Approval resume requires decision\");\n\t}\n\treturn input.decision;\n}\n\nfunction requireRetryAction(\n\tinput: ComposerPendingRequestResumeRequest,\n): \"retry\" \| \"skip\" \| \"abort\" {\n\tif (\n\t\tinput.action !== \"retry\" &&\n\t\tinput.action !== \"skip\" &&\n\t\tinput.action !== \"abort\"\n\t) {\n\t\tthrow new ApiError(400, \"Tool retry resume requires action\");\n\t}\n\treturn input.action;\n}\n\nfunction requireClientToolContent(\n\tinput: ComposerPendingRequestResumeRequest,\n): NonNullable<ComposerPendingRequestResumeRequest[\"content\"]> {\n\tif (!Array.isArray(input.content)) {\n\t\tthrow new ApiError(400, \"Client request resume requires content\");\n\t}\n\treturn input.content;\n}\n\nfunction resolutionForClientRequest(\n\tkind: PendingServerRequestSnapshot[\"kind\"],\n\tisError: boolean,\n): ComposerPendingRequestResolution {\n\tif (isError) {\n\t\treturn \"failed\";\n\t}\n\tif (kind === \"mcp_elicitation\" \|\| kind === \"user_input\") {\n\t\treturn \"answered\";\n\t}\n\treturn \"completed\";\n}\n\nfunction platformOperationFor(\n\trequest: PendingServerRequestSnapshot,\n): ComposerPendingRequestPlatformOperation \| undefined {\n\tif (!request.platform) {\n\t\treturn undefined;\n\t}\n\tif (request.kind === \"approval\") {\n\t\treturn request.platform.source === \"approvals_service\"\n\t\t\t? \"ResolveApproval\"\n\t\t\t: undefined;\n\t}\n\tif (\n\t\trequest.kind === \"client_tool\" \|\|\n\t\trequest.kind === \"mcp_elicitation\" \|\|\n\t\trequest.kind === \"user_input\"\n\t) {\n\t\treturn \"ResumeRun\";\n\t}\n\treturn undefined;\n}\n\nfunction responseFor(\n\trequest: PendingServerRequestSnapshot,\n\tresolution: ComposerPendingRequestResolution,\n\tplatformOperation?: ComposerPendingRequestPlatformOperation,\n): ComposerPendingRequestResumeResponse {\n\tconst operation = platformOperation ?? platformOperationFor(request);\n\treturn {\n\t\tsuccess: true,\n\t\trequest: {\n\t\t\tid: request.id,\n\t\t\tkind: request.kind,\n\t\t\tsessionId: request.sessionId,\n\t\t\tresolution,\n\t\t\tsource:\n\t\t\t\tBoolean(request.platform) \|\| operation === \"ResumeRun\"\n\t\t\t\t\t? \"platform\"\n\t\t\t\t\t: \"local\",\n\t\t\tplatform: request.platform,\n\t\t\tplatformOperation: operation,\n\t\t},\n\t};\n}\n\nfunction isAgentRuntimeWaitKind(\n\tkind: PendingServerRequestSnapshot[\"kind\"],\n): kind is \"client_tool\" \| \"mcp_elicitation\" \| \"user_input\" {\n\treturn (\n\t\tkind === \"client_tool\" \|\|\n\t\tkind === \"mcp_elicitation\" \|\|\n\t\tkind === \"user_input\"\n\t);\n}\n\nfunction hostedSessionIdForRequest(\n\trequest: PendingServerRequestSnapshot,\n\tcontext: PendingRequestResumeContext,\n): string \| undefined {\n\treturn (\n\t\tnonEmptyString(request.sessionId) ??\n\t\tnonEmptyString(context.hostedRunner?.activeMaestroSessionId) ??\n\t\tnonEmptyString(context.hostedRunner?.configuredMaestroSessionId)\n\t);\n}\n\nfunction hostedAgentRunIdForRequest(\n\trequest: PendingServerRequestSnapshot,\n\tcontext: PendingRequestResumeContext,\n): string \| undefined {\n\tconst hosted = context.hostedRunner;\n\tconst runId = nonEmptyString(hosted?.agentRunId);\n\tif (!hosted?.enabled \|\| !runId) {\n\t\treturn undefined;\n\t}\n\tconst hostedSessionId =\n\t\tnonEmptyString(hosted.activeMaestroSessionId) ??\n\t\tnonEmptyString(hosted.configuredMaestroSessionId);\n\tif (\n\t\thostedSessionId &&\n\t\trequest.sessionId &&\n\t\thostedSessionId !== request.sessionId\n\t) {\n\t\treturn undefined;\n\t}\n\treturn runId;\n}\n\nfunction hostedWaitId(sessionId: string, requestId: string): string {\n\treturn `maestro:${safeIdPart(sessionId)}:wait:${safeIdPart(requestId)}`;\n}\n\nfunction hostedResumeEventId(sessionId: string, requestId: string): string {\n\treturn `maestro:${safeIdPart(sessionId)}:resume:${safeIdPart(requestId)}`;\n}\n\nfunction platformResumeError(message: string): ApiError {\n\treturn new ApiError(502, `${message}; local pending request was resolved`);\n}\n\nasync function resumePlatformAgentRuntimeWait(\n\trequest: PendingServerRequestSnapshot,\n\tresolution: ComposerPendingRequestResolution,\n\tcontent: NonNullable<ComposerPendingRequestResumeRequest[\"content\"]>,\n\tisError: boolean,\n\tcontext: PendingRequestResumeContext,\n): Promise<ComposerPendingRequestPlatformOperation \| undefined> {\n\tif (!isAgentRuntimeWaitKind(request.kind)) {\n\t\treturn undefined;\n\t}\n\tconst runId = hostedAgentRunIdForRequest(request, context);\n\tconst sessionId = hostedSessionIdForRequest(request, context);\n\tif (!runId \|\| !sessionId) {\n\t\treturn undefined;\n\t}\n\tconst resumeRun =\n\t\tcontext.platformPendingRequestResume?.resumeRun ?? resumeAgentRuntimeRun;\n\ttry {\n\t\tawait resumeRun({\n\t\t\trunId,\n\t\t\twaitId: hostedWaitId(sessionId, request.id),\n\t\t\tresumeEventId: hostedResumeEventId(sessionId, request.id),\n\t\t\tpayload: {\n\t\t\t\tmaestro_session_id: sessionId,\n\t\t\t\trequest_id: request.id,\n\t\t\t\trequest_type: request.kind,\n\t\t\t\tcall_id: request.callId,\n\t\t\t\ttool_name: request.toolName,\n\t\t\t\tresolution,\n\t\t\t\tresolved_by: \"user\",\n\t\t\t\tis_error: isError,\n\t\t\t\tcontent,\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\tif (isAbortError(error)) {\n\t\t\tthrow error;\n\t\t}\n\t\tthrow platformResumeError(\"Platform AgentRuntime resume failed\");\n\t}\n\treturn \"ResumeRun\";\n}\n\nasync function resolvePendingRequest(\n\trequestId: string,\n\tinput: ComposerPendingRequestResumeRequest,\n\tpendingRequest: PendingServerRequestSnapshot,\n\tcontext: PendingRequestResumeContext,\n): Promise<ComposerPendingRequestResumeResponse> {\n\tassertRequestKind(pendingRequest.kind, input.kind);\n\tassertSessionMatch(pendingRequest, input.sessionId);\n\n\tlet resolved = false;\n\tlet resolution: ComposerPendingRequestResolution;\n\tlet platformOperation: ComposerPendingRequestPlatformOperation \| undefined;\n\n\tswitch (pendingRequest.kind) {\n\t\tcase \"approval\": {\n\t\t\tconst decision = requireApprovalDecision(input);\n\t\t\tresolved = serverRequestManager.resolveApproval(requestId, {\n\t\t\t\tapproved: decision === \"approved\",\n\t\t\t\treason: input.reason,\n\t\t\t\tresolvedBy: \"user\",\n\t\t\t});\n\t\t\tresolution = decision;\n\t\t\tbreak;\n\t\t}\n\t\tcase \"tool_retry\": {\n\t\t\tconst action = requireRetryAction(input);\n\t\t\tresolved = serverRequestManager.resolveToolRetry(requestId, {\n\t\t\t\taction,\n\t\t\t\treason: input.reason,\n\t\t\t\tresolvedBy: \"user\",\n\t\t\t});\n\t\t\tresolution =\n\t\t\t\taction === \"retry\"\n\t\t\t\t\t? \"retried\"\n\t\t\t\t\t: action === \"skip\"\n\t\t\t\t\t\t? \"skipped\"\n\t\t\t\t\t\t: \"aborted\";\n\t\t\tbreak;\n\t\t}\n\t\tcase \"client_tool\":\n\t\tcase \"mcp_elicitation\":\n\t\tcase \"user_input\": {\n\t\t\tconst content = requireClientToolContent(input);\n\t\t\tconst isError = input.isError === true;\n\t\t\tresolution = resolutionForClientRequest(pendingRequest.kind, isError);\n\t\t\tconst claimed = serverRequestManager.claimClientTool(requestId);\n\t\t\tif (!claimed) {\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tresolved = claimed.resolve(content, isError);\n\t\t\tif (!resolved) {\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tplatformOperation = await resumePlatformAgentRuntimeWait(\n\t\t\t\t\tclaimed.request,\n\t\t\t\t\tresolution,\n\t\t\t\t\tcontent,\n\t\t\t\t\tisError,\n\t\t\t\t\tcontext,\n\t\t\t\t);\n\t\t\t} catch (error) {\n\t\t\t\tconst localResponse = responseFor(claimed.request, resolution);\n\t\t\t\tif (isAbortError(error)) {\n\t\t\t\t\treturn localResponse;\n\t\t\t\t}\n\t\t\t\tconst message =\n\t\t\t\t\terror instanceof Error\n\t\t\t\t\t\t? error.message\n\t\t\t\t\t\t: \"Platform AgentRuntime resume failed\";\n\t\t\t\tthrow new PendingRequestResolvedPlatformError(message, localResponse, {\n\t\t\t\t\tcontent,\n\t\t\t\t\tisError,\n\t\t\t\t\trequest: claimed.request,\n\t\t\t\t\tresolution,\n\t\t\t\t});\n\t\t\t}\n\t\t\tbreak;\n\t\t}\n\t}\n\n\tif (!resolved) {\n\t\tthrow new ApiError(404, \"Pending request not found or already resolved\");\n\t}\n\n\treturn responseFor(pendingRequest, resolution, platformOperation);\n}\n\nasync function replayCachedPlatformRetry(\n\trequestId: string,\n\tinput: ComposerPendingRequestResumeRequest,\n\tcached: {\n\t\tplatformRetry: PlatformResumeRetry;\n\t\tresponse: ComposerPendingRequestResumeResponse;\n\t},\n\tsubject: string,\n\tcontext: PendingRequestResumeContext,\n): Promise<ComposerPendingRequestResumeResponse> {\n\tconst retry = cached.platformRetry;\n\ttry {\n\t\tconst platformOperation = await resumePlatformAgentRuntimeWait(\n\t\t\tretry.request,\n\t\t\tretry.resolution,\n\t\t\tretry.content,\n\t\t\tretry.isError,\n\t\t\tcontext,\n\t\t);\n\t\tconst response = responseFor(\n\t\t\tretry.request,\n\t\t\tretry.resolution,\n\t\t\tplatformOperation,\n\t\t);\n\t\trememberResolvedResponse(requestId, input, response, subject);\n\t\treturn response;\n\t} catch (error) {\n\t\tif (isAbortError(error)) {\n\t\t\treturn cached.response;\n\t\t}\n\t\trememberResolvedResponse(requestId, input, cached.response, subject, retry);\n\t\tthrow error;\n\t}\n}\n\nexport async function handlePendingRequestResume(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n\tparams: PendingRequestRouteParams,\n) {\n\tconst { corsHeaders } = context;\n\tlet requestId: string \| undefined;\n\tlet input: ComposerPendingRequestResumeRequest \| undefined;\n\tlet subject: string \| undefined;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tres.writeHead(405, corsHeaders);\n\t\t\tres.end();\n\t\t\treturn;\n\t\t}\n\n\t\trequestId = decodeRequestId(params);\n\t\tinput = await parseAndValidateJson<ComposerPendingRequestResumeRequest>(\n\t\t\treq,\n\t\t\tComposerPendingRequestResumeRequestSchema,\n\t\t);\n\t\tsubject = getAuthSubject(req);\n\t\tconst currentRequestId = requestId;\n\t\tconst currentInput = input;\n\t\tconst currentSubject = subject;\n\t\tconst inFlight = getMatchingInFlightResume(\n\t\t\tcurrentRequestId,\n\t\t\tcurrentInput,\n\t\t\tcurrentSubject,\n\t\t);\n\t\tif (inFlight) {\n\t\t\tsendJson(res, 200, await inFlight, corsHeaders, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst pendingRequest = serverRequestManager.get(currentRequestId);\n\t\tif (!pendingRequest) {\n\t\t\tconst cached = getCachedResolvedEntry(\n\t\t\t\tcurrentRequestId,\n\t\t\t\tcurrentInput,\n\t\t\t\tcurrentSubject,\n\t\t\t);\n\t\t\tif (cached) {\n\t\t\t\tif (cached.platformRetry) {\n\t\t\t\t\tconst retryPromise = replayCachedPlatformRetry(\n\t\t\t\t\t\tcurrentRequestId,\n\t\t\t\t\t\tcurrentInput,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tplatformRetry: cached.platformRetry,\n\t\t\t\t\t\t\tresponse: cached.response,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tcurrentSubject,\n\t\t\t\t\t\tcontext as PendingRequestResumeContext,\n\t\t\t\t\t);\n\t\t\t\t\tinFlightResumes.set(currentRequestId, {\n\t\t\t\t\t\tinputFingerprint: cached.inputFingerprint,\n\t\t\t\t\t\tpromise: retryPromise,\n\t\t\t\t\t\trequestKind: cached.response.request.kind,\n\t\t\t\t\t\tsessionId: cached.response.request.sessionId,\n\t\t\t\t\t\tsubject: currentSubject,\n\t\t\t\t\t});\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconst response = await retryPromise;\n\t\t\t\t\t\tsendJson(res, 200, response, corsHeaders, req);\n\t\t\t\t\t\treturn;\n\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\trespondWithApiError(res, error, 400, corsHeaders, req);\n\t\t\t\t\t\treturn;\n\t\t\t\t\t} finally {\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tinFlightResumes.get(currentRequestId)?.promise === retryPromise\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tinFlightResumes.delete(currentRequestId);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tsendJson(res, 200, cached.response, corsHeaders, req);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tthrow new ApiError(404, \"Pending request not found or already resolved\");\n\t\t}\n\n\t\tconst inputFingerprint = resumeInputFingerprint(input, pendingRequest);\n\t\tconst resumeContext = context as PendingRequestResumeContext;\n\t\tconst resumePromise = resolvePendingRequest(\n\t\t\tcurrentRequestId,\n\t\t\tcurrentInput,\n\t\t\tpendingRequest,\n\t\t\tresumeContext,\n\t\t).then((response) => {\n\t\t\trememberResolvedResponse(\n\t\t\t\tcurrentRequestId,\n\t\t\t\tcurrentInput,\n\t\t\t\tresponse,\n\t\t\t\tcurrentSubject,\n\t\t\t);\n\t\t\treturn response;\n\t\t});\n\t\tinFlightResumes.set(currentRequestId, {\n\t\t\tinputFingerprint,\n\t\t\tpromise: resumePromise,\n\t\t\trequestKind: pendingRequest.kind,\n\t\t\tsessionId: pendingRequest.sessionId,\n\t\t\tsubject: currentSubject,\n\t\t});\n\t\tlet response: ComposerPendingRequestResumeResponse;\n\t\ttry {\n\t\t\tresponse = await resumePromise;\n\t\t} finally {\n\t\t\tif (inFlightResumes.get(currentRequestId)?.promise === resumePromise) {\n\t\t\t\tinFlightResumes.delete(currentRequestId);\n\t\t\t}\n\t\t}\n\t\tsendJson(res, 200, response, corsHeaders, req);\n\t} catch (error) {\n\t\tif (\n\t\t\terror instanceof PendingRequestResolvedPlatformError &&\n\t\t\trequestId &&\n\t\t\tinput &&\n\t\t\tsubject\n\t\t) {\n\t\t\trememberResolvedResponse(\n\t\t\t\trequestId,\n\t\t\t\tinput,\n\t\t\t\terror.response,\n\t\t\t\tsubject,\n\t\t\t\terror.platformRetry,\n\t\t\t);\n\t\t}\n\t\trespondWithApiError(res, error, 400, corsHeaders, req);\n\t}\n}\n"]}

package/dist/server/handlers/platform-a2a-push.d.ts ADDED Viewed

@@ -0,0 +1,6 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { WebServerContext } from "../app-context.js";
+export declare const PLATFORM_A2A_PUSH_CALLBACK_PATH = "/api/platform/a2a/push";
+export declare function platformA2APushAuthBoundaryExemptPaths(): readonly string[];
+export declare function handlePlatformA2APushCallback(req: IncomingMessage, res: ServerResponse, context: WebServerContext): Promise<void>;
+//# sourceMappingURL=platform-a2a-push.d.ts.map

package/dist/server/handlers/platform-a2a-push.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"platform-a2a-push.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/platform-a2a-push.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAuB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAS/E,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AAOxE,wBAAgB,sCAAsC,IAAI,SAAS,MAAM,EAAE,CAE1E;AAeD,wBAAsB,6BAA6B,CAClD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,gBAAgB,GACvB,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/server/handlers/platform-a2a-push.js ADDED Viewed

@@ -0,0 +1,136 @@
+import { ApiError, getRequestHeader, readJsonBody, secureCompare, sendJson, } from "../server-utils.js";
+export const PLATFORM_A2A_PUSH_CALLBACK_PATH = "/api/platform/a2a/push";
+const CALLBACK_TOKEN_ENV_VARS = [
+    "MAESTRO_PLATFORM_A2A_CALLBACK_TOKEN",
+    "MAESTRO_A2A_CALLBACK_TOKEN",
+];
+export function platformA2APushAuthBoundaryExemptPaths() {
+    return callbackToken() ? [PLATFORM_A2A_PUSH_CALLBACK_PATH] : [];
+}
+export async function handlePlatformA2APushCallback(req, res, context) {
+    if (req.method !== "POST") {
+        throw new ApiError(405, "Method not allowed");
+    }
+    assertCallbackToken(req);
+    const body = await readJsonBody(req);
+    const snapshot = platformA2APushSnapshot(body);
+    if (!snapshot) {
+        throw new ApiError(400, "Invalid A2A push notification payload");
+    }
+    const hostedRunner = context.hostedRunner;
+    if (hostedRunner?.a2aTaskId &&
+        snapshot.taskId &&
+        hostedRunner.a2aTaskId !== snapshot.taskId) {
+        throw new ApiError(404, "A2A task not found");
+    }
+    if (hostedRunner) {
+        recordHostedRunnerA2APush(hostedRunner, snapshot);
+    }
+    sendJson(res, 202, { accepted: true, ...snapshot }, context.corsHeaders, req);
+}
+function assertCallbackToken(req) {
+    const expected = callbackToken();
+    if (!expected) {
+        return;
+    }
+    const provided = getRequestHeader(req, "x-a2a-notification-token");
+    if (!provided || !secureCompare(provided, expected)) {
+        throw new ApiError(401, "Invalid A2A notification token");
+    }
+}
+function platformA2APushSnapshot(payload) {
+    if (!isJsonObject(payload)) {
+        return null;
+    }
+    if (isJsonObject(payload.statusUpdate)) {
+        const taskId = stringField(payload.statusUpdate, "taskId");
+        if (!taskId) {
+            return null;
+        }
+        return {
+            kind: "statusUpdate",
+            taskId,
+            contextId: stringField(payload.statusUpdate, "contextId"),
+            state: statusState(payload.statusUpdate),
+            final: booleanField(payload.statusUpdate, "final"),
+            receivedAt: new Date().toISOString(),
+            runtimeEventId: metadataString(payload.statusUpdate, "runtimeEventId"),
+            runtimeEventType: metadataString(payload.statusUpdate, "runtimeEventType"),
+        };
+    }
+    if (isJsonObject(payload.task)) {
+        const taskId = stringField(payload.task, "id");
+        if (!taskId) {
+            return null;
+        }
+        return {
+            kind: "task",
+            taskId,
+            contextId: stringField(payload.task, "contextId"),
+            state: statusState(payload.task),
+            receivedAt: new Date().toISOString(),
+        };
+    }
+    if (isJsonObject(payload.artifactUpdate)) {
+        const taskId = stringField(payload.artifactUpdate, "taskId");
+        if (!taskId) {
+            return null;
+        }
+        return {
+            kind: "artifactUpdate",
+            taskId,
+            contextId: stringField(payload.artifactUpdate, "contextId"),
+            receivedAt: new Date().toISOString(),
+        };
+    }
+    if (isJsonObject(payload.message)) {
+        const taskId = stringField(payload.message, "taskId");
+        if (!taskId) {
+            return null;
+        }
+        return {
+            kind: "message",
+            taskId,
+            contextId: stringField(payload.message, "contextId"),
+            receivedAt: new Date().toISOString(),
+        };
+    }
+    return null;
+}
+function recordHostedRunnerA2APush(hostedRunner, snapshot) {
+    hostedRunner.lastPlatformA2APush = snapshot;
+    if (snapshot.taskId && !hostedRunner.a2aTaskId) {
+        hostedRunner.a2aTaskId = snapshot.taskId;
+    }
+}
+function statusState(value) {
+    const status = isJsonObject(value.status) ? value.status : undefined;
+    return status ? stringField(status, "state") : undefined;
+}
+function metadataString(value, key) {
+    const metadata = isJsonObject(value.metadata) ? value.metadata : undefined;
+    return metadata ? stringField(metadata, key) : undefined;
+}
+function stringField(value, key) {
+    const field = value[key];
+    return typeof field === "string" && field.trim().length > 0
+        ? field.trim()
+        : undefined;
+}
+function booleanField(value, key) {
+    const field = value[key];
+    return typeof field === "boolean" ? field : undefined;
+}
+function isJsonObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function callbackToken() {
+    for (const name of CALLBACK_TOKEN_ENV_VARS) {
+        const value = process.env[name]?.trim();
+        if (value) {
+            return value;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=platform-a2a-push.js.map

package/dist/server/handlers/platform-a2a-push.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"platform-a2a-push.js","sourceRoot":"","sources":["../../../src/server/handlers/platform-a2a-push.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAExE,MAAM,uBAAuB,GAAG;IAC/B,qCAAqC;IACrC,4BAA4B;CACnB,CAAC;AAEX,MAAM,UAAU,sCAAsC;IACrD,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAU,GAAG,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,IACC,YAAY,EAAE,SAAS;QACvB,QAAQ,CAAC,MAAM;QACf,YAAY,CAAC,SAAS,KAAK,QAAQ,CAAC,MAAM,EACzC,CAAC;QACF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QAClB,yBAAyB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAoB;IAChD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC;AAED,SAAS,uBAAuB,CAC/B,OAAgB;IAEhB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO;YACN,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;YACzD,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC;YACxC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC;YAClD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,cAAc,EAAE,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,gBAAgB,CAAC;YACtE,gBAAgB,EAAE,cAAc,CAC/B,OAAO,CAAC,YAAY,EACpB,kBAAkB,CAClB;SACD,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO;YACN,IAAI,EAAE,MAAM;YACZ,MAAM;YACN,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;YACjD,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO;YACN,IAAI,EAAE,gBAAgB;YACtB,MAAM;YACN,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC;YAC3D,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO;YACN,IAAI,EAAE,SAAS;YACf,MAAM;YACN,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;YACpD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,yBAAyB,CACjC,YAAiC,EACjC,QAAiC;IAEjC,YAAY,CAAC,mBAAmB,GAAG,QAAQ,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAChD,YAAY,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC1C,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB,EAAE,GAAW;IACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,OAAO,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB,EAAE,GAAW;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa;IACrB,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { HostedRunnerContext, WebServerContext } from \"../app-context.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\treadJsonBody,\n\tsecureCompare,\n\tsendJson,\n} from \"../server-utils.js\";\n\nexport const PLATFORM_A2A_PUSH_CALLBACK_PATH = \"/api/platform/a2a/push\";\n\nconst CALLBACK_TOKEN_ENV_VARS = [\n\t\"MAESTRO_PLATFORM_A2A_CALLBACK_TOKEN\",\n\t\"MAESTRO_A2A_CALLBACK_TOKEN\",\n] as const;\n\nexport function platformA2APushAuthBoundaryExemptPaths(): readonly string[] {\n\treturn callbackToken() ? [PLATFORM_A2A_PUSH_CALLBACK_PATH] : [];\n}\n\ntype JsonObject = Record<string, unknown>;\n\ninterface PlatformA2APushSnapshot {\n\tkind: \"statusUpdate\" | \"artifactUpdate\" | \"task\" | \"message\";\n\ttaskId?: string;\n\tcontextId?: string;\n\tstate?: string;\n\tfinal?: boolean;\n\treceivedAt: string;\n\truntimeEventId?: string;\n\truntimeEventType?: string;\n}\n\nexport async function handlePlatformA2APushCallback(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n): Promise<void> {\n\tif (req.method !== \"POST\") {\n\t\tthrow new ApiError(405, \"Method not allowed\");\n\t}\n\tassertCallbackToken(req);\n\tconst body = await readJsonBody<unknown>(req);\n\tconst snapshot = platformA2APushSnapshot(body);\n\tif (!snapshot) {\n\t\tthrow new ApiError(400, \"Invalid A2A push notification payload\");\n\t}\n\tconst hostedRunner = context.hostedRunner;\n\tif (\n\t\thostedRunner?.a2aTaskId &&\n\t\tsnapshot.taskId &&\n\t\thostedRunner.a2aTaskId !== snapshot.taskId\n\t) {\n\t\tthrow new ApiError(404, \"A2A task not found\");\n\t}\n\tif (hostedRunner) {\n\t\trecordHostedRunnerA2APush(hostedRunner, snapshot);\n\t}\n\tsendJson(res, 202, { accepted: true, ...snapshot }, context.corsHeaders, req);\n}\n\nfunction assertCallbackToken(req: IncomingMessage): void {\n\tconst expected = callbackToken();\n\tif (!expected) {\n\t\treturn;\n\t}\n\tconst provided = getRequestHeader(req, \"x-a2a-notification-token\");\n\tif (!provided || !secureCompare(provided, expected)) {\n\t\tthrow new ApiError(401, \"Invalid A2A notification token\");\n\t}\n}\n\nfunction platformA2APushSnapshot(\n\tpayload: unknown,\n): PlatformA2APushSnapshot | null {\n\tif (!isJsonObject(payload)) {\n\t\treturn null;\n\t}\n\tif (isJsonObject(payload.statusUpdate)) {\n\t\tconst taskId = stringField(payload.statusUpdate, \"taskId\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\tkind: \"statusUpdate\",\n\t\t\ttaskId,\n\t\t\tcontextId: stringField(payload.statusUpdate, \"contextId\"),\n\t\t\tstate: statusState(payload.statusUpdate),\n\t\t\tfinal: booleanField(payload.statusUpdate, \"final\"),\n\t\t\treceivedAt: new Date().toISOString(),\n\t\t\truntimeEventId: metadataString(payload.statusUpdate, \"runtimeEventId\"),\n\t\t\truntimeEventType: metadataString(\n\t\t\t\tpayload.statusUpdate,\n\t\t\t\t\"runtimeEventType\",\n\t\t\t),\n\t\t};\n\t}\n\tif (isJsonObject(payload.task)) {\n\t\tconst taskId = stringField(payload.task, \"id\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\tkind: \"task\",\n\t\t\ttaskId,\n\t\t\tcontextId: stringField(payload.task, \"contextId\"),\n\t\t\tstate: statusState(payload.task),\n\t\t\treceivedAt: new Date().toISOString(),\n\t\t};\n\t}\n\tif (isJsonObject(payload.artifactUpdate)) {\n\t\tconst taskId = stringField(payload.artifactUpdate, \"taskId\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\tkind: \"artifactUpdate\",\n\t\t\ttaskId,\n\t\t\tcontextId: stringField(payload.artifactUpdate, \"contextId\"),\n\t\t\treceivedAt: new Date().toISOString(),\n\t\t};\n\t}\n\tif (isJsonObject(payload.message)) {\n\t\tconst taskId = stringField(payload.message, \"taskId\");\n\t\tif (!taskId) {\n\t\t\treturn null;\n\t\t}\n\t\treturn {\n\t\t\tkind: \"message\",\n\t\t\ttaskId,\n\t\t\tcontextId: stringField(payload.message, \"contextId\"),\n\t\t\treceivedAt: new Date().toISOString(),\n\t\t};\n\t}\n\treturn null;\n}\n\nfunction recordHostedRunnerA2APush(\n\thostedRunner: HostedRunnerContext,\n\tsnapshot: PlatformA2APushSnapshot,\n): void {\n\thostedRunner.lastPlatformA2APush = snapshot;\n\tif (snapshot.taskId && !hostedRunner.a2aTaskId) {\n\t\thostedRunner.a2aTaskId = snapshot.taskId;\n\t}\n}\n\nfunction statusState(value: JsonObject): string | undefined {\n\tconst status = isJsonObject(value.status) ? value.status : undefined;\n\treturn status ? stringField(status, \"state\") : undefined;\n}\n\nfunction metadataString(value: JsonObject, key: string): string | undefined {\n\tconst metadata = isJsonObject(value.metadata) ? value.metadata : undefined;\n\treturn metadata ? stringField(metadata, key) : undefined;\n}\n\nfunction stringField(value: JsonObject, key: string): string | undefined {\n\tconst field = value[key];\n\treturn typeof field === \"string\" && field.trim().length > 0\n\t\t? field.trim()\n\t\t: undefined;\n}\n\nfunction booleanField(value: JsonObject, key: string): boolean | undefined {\n\tconst field = value[key];\n\treturn typeof field === \"boolean\" ? field : undefined;\n}\n\nfunction isJsonObject(value: unknown): value is JsonObject {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction callbackToken(): string | undefined {\n\tfor (const name of CALLBACK_TOKEN_ENV_VARS) {\n\t\tconst value = process.env[name]?.trim();\n\t\tif (value) {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n"]}

package/dist/server/handlers/sessions.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/sessions.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA4CjE,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACX,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,GACjB,MAAM,0BAA0B,CAAC;AAGlC,eAAO,MAAM,gBAAgB,QAAsB,CAAC;~~AAuBpD~~;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACrC,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAC/C,OAAO,EAAE,MAAM,GACb,OAAO,CAiBT;AAyGD;;GAEG;AACH,wBAAsB,cAAc,CACnC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,~~iBA4N5B~~;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACvC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiG5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA8C5B;AAED;;;;;;GAMG;AACH,wBAAsB,6BAA6B,CAClD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAC/C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA4D5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAyI5B"}
1	+ {"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/sessions.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA4CjE,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACX,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,GACjB,MAAM,0BAA0B,CAAC;AAGlC,eAAO,MAAM,gBAAgB,QAAsB,CAAC;AAmCpD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACrC,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAC/C,OAAO,EAAE,MAAM,GACb,OAAO,CAiBT;AAyGD;;GAEG;AACH,wBAAsB,cAAc,CACnC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAgP5B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACvC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAiG5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA8C5B;AAED;;;;;;GAMG;AACH,wBAAsB,6BAA6B,CAClD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAC/C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBA4D5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAyI5B"}

package/dist/server/handlers/sessions.js CHANGED Viewed

@@ -53,6 +53,15 @@ export { checkShareRateLimit, resetShareRateLimit, stopShareRateLimiter, } from
 const logger = createLogger("sessions-handler");
 export const sessionIdPattern = /^[a-zA-Z0-9._-]+$/;
 const attachmentIdPattern = /^[a-zA-Z0-9._-]+$/;
+function parseSessionMessagesView(value) {
+    if (value === null || value === "" || value === "full") {
+        return "full";
+    }
+    if (value === "summary" || value === "notLoaded") {
+        return value;
+    }
+    return null;
+}
 function sendSensitiveContentBlockedResponse(req, res, cors, action, findings) {
     sendJson(res, 409, {
         error: `Sensitive content detected. Review and confirm before continuing with this ${action}.`,
@@ -191,7 +200,17 @@ export async function handleSessions(req, res, params, cors) {
                 sendJson(res, 400, { error: "Invalid session id" }, cors, req);
                 return;
             }
-            const session = await sessionManager.loadSession(sessionId);
+            const messagesView = parseSessionMessagesView(url.searchParams.get("messagesView") ??
+                url.searchParams.get("itemsView"));
+            if (!messagesView) {
+                sendJson(res, 400, {
+                    error: "Invalid messagesView. Expected full, summary, or notLoaded.",
+                }, cors, req);
+                return;
+            }
+            const session = await sessionManager.loadSession(sessionId, {
+                messagesView,
+            });
             if (!session) {
                 sendJson(res, 404, { error: "Session not found" }, cors, req);
                 return;
@@ -211,6 +230,7 @@ export async function handleSessions(req, res, params, cors) {
                 messageCount: session.messageCount,
                 favorite: session.favorite,
                 tags: session.tags,
+                messagesView: session.messagesView,
                 messages: convertAppMessagesToComposer(session.messages || [], {
                     includeAttachmentContent: false,
                 }),

package/dist/server/handlers/sessions.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/server/handlers/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAMvC,OAAO,EACN,4BAA4B,EAC5B,kCAAkC,GAClC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EACN,uBAAuB,EACvB,YAAY,EACZ,mBAAmB,EACnB,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EACN,iCAAiC,EACjC,+BAA+B,EAC/B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAIN,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAElB,cAAc,GACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAC;AAOlC,MAAM,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AACpD,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEhD,SAAS,mCAAmC,CAC3C,GAAoB,EACpB,GAAmB,EACnB,IAA4B,EAC5B,MAA0B,EAC1B,QAA+D;IAE/D,QAAQ,CACP,GAAG,EACH,GAAG,EACH;QACC,KAAK,EAAE,8EAA8E,MAAM,GAAG;QAC9F,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,QAAQ;KACjB,EACD,IAAI,EACJ,GAAG,CACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACrC,OAA+C,EAC/C,OAAe;IAEf,6BAA6B;IAC7B,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxD,OAAO,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC;IAClC,CAAC;IAED,iDAAiD;IACjD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC;IACpC,CAAC;IAED,uCAAuC;IACvC,oEAAoE;IACpE,qEAAqE;IACrE,+CAA+C;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,OAAO,CAAC;IACzE,OAAO,CAAC,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAC/B,OAAsC,EACtC,YAAoB;IAOpB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,gBAAgB,GAAI,GAAiC,CAAC,WAAW,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAAE,SAAS;QAE/C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,SAAS;YAC9C,MAAM,CAAC,GAAG,GAMT,CAAC;YACF,IAAI,CAAC,CAAC,EAAE,KAAK,YAAY;gBAAE,SAAS;YACpC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC7D,OAAO;gBACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,aAAa,EAAE,CAAC,CAAC,OAAO;gBACxB,IAAI,EACH,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;oBACpD,CAAC,CAAC,CAAC,CAAC,IAAI;oBACR,CAAC,CAAC,SAAS;aACb,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,UAAkB,EAClB,IAA4B;IAE5B,MAAM,QAAQ,GACZ,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACjE,GAAG,CAAC,MAAM,CAAC,aAAa;QACxB,SAAS,CAAC;IACX,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,KAAK,EAAE,mBAAmB;YAC1B,UAAU,EAAE,SAAS,CAAC,iBAAiB;SACvC,EACD,IAAI,EACJ,GAAG,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC3B,QAAQ,YAAY,CAAC,MAAM,EAAE,CAAC;YAC7B,KAAK,WAAW;gBACf,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAC5C,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO,IAAI,CAAC;YACb,KAAK,SAAS;gBACb,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBACrC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC;YACb,KAAK,cAAc;gBAClB,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,yCAAyC,EAAE,EACpD,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO,IAAI,CAAC;QACd,CAAC;IACF,CAAC;IAED,OAAO,YAAY,CAAC,SAAS,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,GAAoB,EACpB,GAAmB,EACnB,MAAuB,EACvB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,eAAe,EAAE,kBAAkB,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,YAAY,GAAG,WAAW;QAC/B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAClC,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,KAAK,GACV,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;QAC1B,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GACX,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAChE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC;QAC3B,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,mBAAmB,GACxB,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC;YACzD,MAAM,QAAQ,GAAG,CAChB,MAAM,cAAc,CAAC,YAAY,CAChC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CACnD,CACD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACpD,MAAM,aAAa,GAAG,mBAAmB;gBACxC,CAAC,CAAC,QAAQ,CAAC,KAAK,CACd,MAAM,IAAI,CAAC,EACX,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,CAC1C;gBACF,CAAC,CAAC,QAAQ,CAAC;YACZ,MAAM,WAAW,GAA6B,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvE,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBAC/C,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClD,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClD,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC;gBACjC,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;aACZ,CAAC,CAAC,CAAC;YAEJ,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAE5D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,MAAM,YAAY,GAAoB;gBACrC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;oBAC9D,wBAAwB,EAAE,KAAK;iBAC/B,CAAC;gBACF,GAAG,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAC;aAC7C,CAAC;YAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAqB,GAAG,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,YAAY,GAAoB;gBACrC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;oBAC9D,wBAAwB,EAAE,KAAK;iBAC/B,CAAC;aACF,CAAC;YAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,SAAS,EAAE,CAAC;YAChD,0BAA0B;YAC1B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAoB,GAAG,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAE5D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5C,MAAM,cAAc,CAAC,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACP,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBACjE,IAAI,CAAC,WAAW,EAAE,CAAC;oBAClB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBACnE,OAAO;gBACR,CAAC;gBAED,qFAAqF;gBACrF,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACpC,cAAc,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClE,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBACjC,cAAc,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5D,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAChC,cAAc,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;YAED,oFAAoF;YACpF,QAAQ,CACP,GAAG,EACH,GAAG,EACH;gBACC,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;gBACrC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;gBAC9C,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;aAClC,EACD,IAAI,EACJ,GAAG,CACH,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAC9C,yBAAyB,CAAC,8BAA8B,EAAE;gBACzD,SAAS;gBACT,WAAW,EAAE,mCAAmC;gBAChD,YAAY,EAAE,qBAAqB;gBACnC,WAAW,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE;gBACtC,GAAG,EAAE,kBAAkB,EAAE;gBACzB,QAAQ,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE;aACzC,CAAC,CAAC;YAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzB,GAAG,CAAC,GAAG,EAAE,CAAC;QACX,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBAClB,cAAc,EAAE,kBAAkB;gBAClC,GAAG,IAAI;aACP,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,GAAoB,EACpB,GAAmB,EACnB,MAAsB,EACtB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAE5B,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,+DAA+D;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAEhC,GAAG,CAAC,CAAC;QACP,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa;QACjF,MAAM,WAAW,GAChB,OAAO,CAAC,WAAW,KAAK,IAAI;YAC3B,CAAC,CAAC,IAAI,CAAC,qBAAqB;YAC5B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,gCAAgC;QAE7E,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,4BAA4B,CAAC;gBACzC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;aAChC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,mCAAmC,CAClC,GAAG,EACH,GAAG,EACH,IAAI,EACJ,OAAO,EACP,kCAAkC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CACzD,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QAED,yBAAyB;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEzE,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAEhE,4CAA4C;QAC5C,MAAM,uBAAuB,CAC5B,eAAe,EACf,UAAU,EACV,SAAS,EACT,WAAW,CACX,CAAC;QAEF,uCAAuC;QACvC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,UAAU;YACV,QAAQ,EAAE,wBAAwB,UAAU,EAAE;YAC9C,WAAW,EAAE,UAAU,UAAU,EAAE;YACnC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,WAAW;SACX,EACD,IAAI,EACJ,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,GAAoB,EACpB,GAAmB,EACnB,MAAyB,EACzB,IAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;IAEhC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CACzD,GAAG,EACH,GAAG,EACH,UAAU,EACV,IAAI,CACJ,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO;QACR,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,+BAA+B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,yCAAyC;QACzC,MAAM,YAAY,GAAoB;YACrC,0FAA0F;YAC1F,EAAE,EAAE,UAAU,UAAU,EAAE;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;gBAC9D,wBAAwB,EAAE,KAAK;aAC/B,CAAC;SACF,CAAC;QAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,GAAoB,EACpB,GAAmB,EACnB,MAA+C,EAC/C,IAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;IAChC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAEzC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CACzD,GAAG,EACH,GAAG,EACH,UAAU,EACV,IAAI,CACJ,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO;QACR,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,+BAA+B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO;QACR,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,MAAM,CAAC;QAE/D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,UAAU,CAAC,QAAQ;YACnC,gBAAgB,EAAE,KAAK,CAAC,MAAM;YAC9B,eAAe,EAAE,uBAAuB;YACxC,GAAG,CAAC,cAAc;gBACjB,CAAC,CAAC;oBACA,qBAAqB,EAAE,uBAAuB,CAAC,UAAU,CAAC,QAAQ,CAAC;iBACnE;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,IAAI;SACP,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,GAAoB,EACpB,GAAmB,EACnB,MAAsB,EACtB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAE5B,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,iEAAiE;QACjE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAEhC,GAAG,CAAC,CAAC;QACP,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxC,IAAI,YAAY,GAAsC,SAAS,CAAC;QAChE,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAC3C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACxB,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5C,YAAY,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;gBAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBAC9D,OAAO;gBACR,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,gBAAgB,GAAG,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBAChE,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBACnE,OAAO;gBACR,CAAC;gBACD,YAAY,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;gBACxD,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnB,OAAO;gBACR,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,4BAA4B,CAAC;gBACzC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;aAC9D,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,mCAAmC,CAClC,GAAG,EACH,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,kCAAkC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CACzD,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QAED,IAAI,OAAe,CAAC;QACpB,IAAI,WAAmB,CAAC;QACxB,IAAI,QAAgB,CAAC;QAErB,QAAQ,MAAM,EAAE,CAAC;YAChB,KAAK,OAAO,CAAC,CAAC,CAAC;gBACd,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC5C,OAAO,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxF,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;wBACnE,OAAO;oBACR,CAAC;oBACD,OAAO,GAAG,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;gBAClD,CAAC;gBACD,WAAW,GAAG,sBAAsB,CAAC;gBACrC,QAAQ,GAAG,WAAW,SAAS,QAAQ,CAAC;gBACxC,MAAM;YACP,CAAC;YACD,KAAK,UAAU;gBACd,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC9C,WAAW,GAAG,eAAe,CAAC;gBAC9B,QAAQ,GAAG,WAAW,SAAS,KAAK,CAAC;gBACrC,MAAM;YACP,KAAK,MAAM;gBACV,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC1C,WAAW,GAAG,YAAY,CAAC;gBAC3B,QAAQ,GAAG,WAAW,SAAS,MAAM,CAAC;gBACtC,MAAM;YACP;gBACC,OAAO,GAAG,IAAI,CAAC,SAAS,CACvB;oBACC,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,QAAQ,EAAE,4BAA4B,CAAC,QAAQ,EAAE;wBAChD,wBAAwB,EAAE,IAAI;qBAC9B,CAAC;iBACF,EACD,IAAI,EACJ,CAAC,CACD,CAAC;gBACF,WAAW,GAAG,kBAAkB,CAAC;gBACjC,QAAQ,GAAG,WAAW,SAAS,OAAO,CAAC;gBACvC,MAAM;QACR,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,WAAW;YAC3B,qBAAqB,EAAE,uBAAuB,CAAC,QAAQ,CAAC;YACxD,GAAG,IAAI;SACP,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC","sourcesContent":["/*\n @fileoverview Session Management HTTP Handlers\n \n This module provides REST API endpoints for managing Composer sessions,\n * including CRUD operations, session sharing, and export functionality.\n \n ## Endpoints\n \n \| Method \| Path \| Description \|\n * \|--------\|------\|-------------\|\n * \| GET \| `/api/sessions` \| List all sessions with pagination \|\n * \| GET \| `/api/sessions/:id` \| Get a specific session with messages \|\n * \| GET \| `/api/sessions/:id/timeline` \| Get a redacted run timeline \|\n * \| POST \| `/api/sessions` \| Create a new session \|\n * \| PATCH \| `/api/sessions/:id` \| Update session metadata (title, tags, favorite) \|\n * \| DELETE \| `/api/sessions/:id` \| Delete a session \|\n * \| POST \| `/api/sessions/:id/share` \| Generate a shareable link \|\n * \| GET \| `/api/sessions/shared/:token` \| Access a shared session \|\n * \| POST \| `/api/sessions/:id/export` \| Export session in various formats \|\n \n ## Session Sharing\n \n Sessions can be shared via time-limited, access-limited tokens:\n * - Configurable expiration (default 24h, max 1 week)\n * - Optional access count limits\n * - Rate limiting to prevent brute-force attacks\n * - Atomic access counting to prevent race conditions\n \n ## Storage\n \n - Session data: JSONL files in `~/.maestro/agent/sessions/`\n * - Share tokens: PostgreSQL (with in-memory fallback)\n * - Rate limits: Redis (with in-memory fallback)\n \n @module web/handlers/sessions\n /\nimport crypto from \"node:crypto\";\nimport { readFileSync } from \"node:fs\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type {\n\tComposerSession,\n\tComposerSessionSummary,\n} from \"@evalops/contracts\";\nimport {\n\tscanOutboundSensitiveContent,\n\tsummarizeOutboundSensitiveFindings,\n} from \"../../safety/outbound-secret-preflight.js\";\nimport { safeReadSessionEntries } from \"../../session/session-context.js\";\nimport type { SessionEntry } from \"../../session/types.js\";\nimport { recordMaestroSessionEvent } from \"../../telemetry/maestro-event-bus.js\";\nimport { createLogger } from \"../../utils/logger.js\";\nimport { getAuthSubject } from \"../authz.js\";\nimport { isHostedSessionManager } from \"../hosted-session-manager.js\";\nimport { getPendingServerRequestPayload } from \"../pending-request-payload.js\";\nimport {\n\tbuildContentDisposition,\n\treadJsonBody,\n\trespondWithApiError,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { webSessionEventEnv } from \"../session-event-env.js\";\nimport {\n\tcreateWebSessionManagerForRequest,\n\tcreateWebSessionManagerForScope,\n\tdecodeScopedSessionId,\n\tencodeScopedSessionId,\n\tresolveSessionScope,\n} from \"../session-scope.js\";\nimport { convertAppMessagesToComposer } from \"../session-serialization.js\";\nimport { exportToMarkdown, exportToText } from \"./session-export-formatters.js\";\nimport {\n\ttype SessionExportFormat,\n\ttype SessionShareOptions,\n\ttype SessionUpdateBody,\n\tcheckShareRateLimit,\n\tcreateSharedSessionInDb,\n\tdeleteExpiredShares,\n\tdeleteShareByToken,\n\tgetSharedSessionFromDb,\n\ttryAccessShare,\n} from \"./session-share-store.js\";\n\nexport {\n\tcheckShareRateLimit,\n\tresetShareRateLimit,\n\tstopShareRateLimiter,\n} from \"./session-share-store.js\";\nexport type {\n\tSessionExportFormat,\n\tSessionShareOptions,\n\tSessionUpdateBody,\n} from \"./session-share-store.js\";\n\nconst logger = createLogger(\"sessions-handler\");\nexport const sessionIdPattern = /^[a-zA-Z0-9._-]+$/;\nconst attachmentIdPattern = /^[a-zA-Z0-9._-]+$/;\n\nfunction sendSensitiveContentBlockedResponse(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcors: Record<string, string>,\n\taction: \"export\" \| \"share\",\n\tfindings: ReturnType<typeof summarizeOutboundSensitiveFindings>,\n): void {\n\tsendJson(\n\t\tres,\n\t\t409,\n\t\t{\n\t\t\terror: `Sensitive content detected. Review and confirm before continuing with this ${action}.`,\n\t\t\tcode: \"sensitive_content_detected\",\n\t\t\tdetails: findings,\n\t\t},\n\t\tcors,\n\t\treq,\n\t);\n}\n\n/\n Verify that the authenticated subject has access to the session.\n * Prevents IDOR attacks by checking session ownership fields.\n \n Returns true if access is allowed, false otherwise.\n /\nexport function verifySessionOwnership(\n\tsession: { owner?: unknown; subject?: unknown },\n\tsubject: string,\n): boolean {\n\t// Check explicit owner field\n\tif (typeof session.owner === \"string\" && session.owner) {\n\t\treturn session.owner === subject;\n\t}\n\n\t// Check subject field (for API-created sessions)\n\tif (typeof session.subject === \"string\" && session.subject) {\n\t\treturn session.subject === subject;\n\t}\n\n\t// For sessions without ownership info:\n\t// In strict mode (multi-user), deny access to prevent IDOR attacks.\n\t// Sessions created via CLI don't have ownership info, but API access\n\t// should be restricted in hosted environments.\n\tconst strictMode = process.env.MAESTRO_STRICT_SESSION_ACCESS !== \"false\";\n\treturn !strictMode;\n}\n\nfunction findAttachmentInSession(\n\tsession: { messages?: Array<unknown> },\n\tattachmentId: string,\n): {\n\tfileName: string;\n\tmimeType: string;\n\tcontentBase64: string;\n\tsize?: number;\n} \| null {\n\tconst messages = Array.isArray(session.messages) ? session.messages : [];\n\tfor (const msg of messages) {\n\t\tif (!msg \|\| typeof msg !== \"object\") continue;\n\t\tconst maybeAttachments = (msg as { attachments?: unknown }).attachments;\n\t\tif (!Array.isArray(maybeAttachments)) continue;\n\n\t\tfor (const att of maybeAttachments) {\n\t\t\tif (!att \|\| typeof att !== \"object\") continue;\n\t\t\tconst a = att as {\n\t\t\t\tid?: unknown;\n\t\t\t\tfileName?: unknown;\n\t\t\t\tmimeType?: unknown;\n\t\t\t\tcontent?: unknown;\n\t\t\t\tsize?: unknown;\n\t\t\t};\n\t\t\tif (a.id !== attachmentId) continue;\n\t\t\tif (typeof a.fileName !== \"string\" \|\| !a.fileName) return null;\n\t\t\tif (typeof a.mimeType !== \"string\" \|\| !a.mimeType) return null;\n\t\t\tif (typeof a.content !== \"string\" \|\| !a.content) return null;\n\t\t\treturn {\n\t\t\t\tfileName: a.fileName,\n\t\t\t\tmimeType: a.mimeType,\n\t\t\t\tcontentBase64: a.content,\n\t\t\t\tsize:\n\t\t\t\t\ttypeof a.size === \"number\" && Number.isFinite(a.size)\n\t\t\t\t\t\t? a.size\n\t\t\t\t\t\t: undefined,\n\t\t\t};\n\t\t}\n\t}\n\treturn null;\n}\n\nasync function resolveSharedSessionAccess(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tshareToken: string,\n\tcors: Record<string, string>,\n): Promise<string \| null> {\n\tconst clientIp =\n\t\t(req.headers[\"x-forwarded-for\"] as string)?.split(\",\")[0]?.trim() \|\|\n\t\treq.socket.remoteAddress \|\|\n\t\t\"unknown\";\n\tconst rateLimit = await checkShareRateLimit(clientIp);\n\tif (!rateLimit.allowed) {\n\t\tres.setHeader(\"Retry-After\", String(rateLimit.retryAfterSeconds ?? 60));\n\t\tsendJson(\n\t\t\tres,\n\t\t\t429,\n\t\t\t{\n\t\t\t\terror: \"Too many requests\",\n\t\t\t\tretryAfter: rateLimit.retryAfterSeconds,\n\t\t\t},\n\t\t\tcors,\n\t\t\treq,\n\t\t);\n\t\treturn null;\n\t}\n\n\tconst accessResult = await tryAccessShare(shareToken);\n\tif (!accessResult.allowed) {\n\t\tswitch (accessResult.reason) {\n\t\t\tcase \"not_found\":\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t404,\n\t\t\t\t\t{ error: \"Share link not found or expired\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn null;\n\t\t\tcase \"expired\":\n\t\t\t\tawait deleteShareByToken(shareToken);\n\t\t\t\tsendJson(res, 410, { error: \"Share link has expired\" }, cors, req);\n\t\t\t\treturn null;\n\t\t\tcase \"max_accesses\":\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t410,\n\t\t\t\t\t{ error: \"Share link has reached maximum accesses\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn null;\n\t\t}\n\t}\n\n\treturn accessResult.sessionId ?? null;\n}\n\n// ============================================================================\n// SESSION HANDLERS\n// ============================================================================\n\n/\n Handle session list and CRUD operations\n /\nexport async function handleSessions(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id?: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\tconst url = new URL(req.url \|\| \"/api/sessions\", \"http://localhost\");\n\tconst limitParam = url.searchParams.get(\"limit\");\n\tconst offsetParam = url.searchParams.get(\"offset\");\n\tconst parsedLimit = limitParam ? Number.parseInt(limitParam, 10) : undefined;\n\tconst parsedOffset = offsetParam\n\t\t? Number.parseInt(offsetParam, 10)\n\t\t: undefined;\n\tconst limit =\n\t\ttypeof parsedLimit === \"number\" && Number.isFinite(parsedLimit)\n\t\t\t? Math.max(1, parsedLimit)\n\t\t\t: undefined;\n\tconst offset =\n\t\ttypeof parsedOffset === \"number\" && Number.isFinite(parsedOffset)\n\t\t\t? Math.max(0, parsedOffset)\n\t\t\t: undefined;\n\n\ttry {\n\t\tif (req.method === \"GET\" && !sessionId) {\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tconst paginationRequested =\n\t\t\t\ttypeof limit === \"number\" \|\| typeof offset === \"number\";\n\t\t\tconst sessions = (\n\t\t\t\tawait sessionManager.listSessions(\n\t\t\t\t\tpaginationRequested ? undefined : { limit, offset },\n\t\t\t\t)\n\t\t\t).filter((s) => verifySessionOwnership(s, subject));\n\t\t\tconst pagedSessions = paginationRequested\n\t\t\t\t? sessions.slice(\n\t\t\t\t\t\toffset ?? 0,\n\t\t\t\t\t\t(offset ?? 0) + (limit ?? sessions.length),\n\t\t\t\t\t)\n\t\t\t\t: sessions;\n\t\t\tconst sessionList: ComposerSessionSummary[] = pagedSessions.map((s) => ({\n\t\t\t\tid: s.id,\n\t\t\t\ttitle: s.title \|\| `Session ${s.id.slice(0, 8)}`,\n\t\t\t\tresumeSummary: s.resumeSummary,\n\t\t\t\tcreatedAt: s.createdAt \|\| new Date().toISOString(),\n\t\t\t\tupdatedAt: s.updatedAt \|\| new Date().toISOString(),\n\t\t\t\tmessageCount: s.messageCount \|\| 0,\n\t\t\t\tfavorite: s.favorite,\n\t\t\t\ttags: s.tags,\n\t\t\t}));\n\n\t\t\tsendJson(res, 200, { sessions: sessionList }, cors, req);\n\t\t} else if (req.method === \"GET\" && sessionId) {\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst session = await sessionManager.loadSession(sessionId);\n\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst responseBody: ComposerSession = {\n\t\t\t\tid: session.id,\n\t\t\t\ttitle: session.title,\n\t\t\t\tresumeSummary: session.resumeSummary,\n\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\tfavorite: session.favorite,\n\t\t\t\ttags: session.tags,\n\t\t\t\tmessages: convertAppMessagesToComposer(session.messages \|\| [], {\n\t\t\t\t\tincludeAttachmentContent: false,\n\t\t\t\t}),\n\t\t\t\t...getPendingServerRequestPayload(session.id),\n\t\t\t};\n\n\t\t\tsendJson(res, 200, responseBody, cors, req);\n\t\t} else if (req.method === \"POST\" && !sessionId) {\n\t\t\tconst { title } = await readJsonBody<{ title?: string }>(req);\n\t\t\tconst session = await sessionManager.createSession({ title });\n\t\t\tconst responseBody: ComposerSession = {\n\t\t\t\tid: session.id,\n\t\t\t\ttitle: session.title,\n\t\t\t\tresumeSummary: session.resumeSummary,\n\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\tfavorite: false,\n\t\t\t\ttags: undefined,\n\t\t\t\tmessages: convertAppMessagesToComposer(session.messages \|\| [], {\n\t\t\t\t\tincludeAttachmentContent: false,\n\t\t\t\t}),\n\t\t\t};\n\n\t\t\tsendJson(res, 201, responseBody, cors, req);\n\t\t} else if (req.method === \"PATCH\" && sessionId) {\n\t\t\t// Update session metadata\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst updates = await readJsonBody<SessionUpdateBody>(req);\n\t\t\tconst session = await sessionManager.loadSession(sessionId);\n\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\tawait sessionManager.updateSessionMetadata(sessionId, updates);\n\t\t\t} else {\n\t\t\t\tconst sessionPath = sessionManager.getSessionFileById(sessionId);\n\t\t\t\tif (!sessionPath) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\t// Apply updates - SessionManager supports favorite, title, and tags via meta entries\n\t\t\t\tif (updates.favorite !== undefined) {\n\t\t\t\t\tsessionManager.setSessionFavorite(sessionPath, updates.favorite);\n\t\t\t\t}\n\t\t\t\tif (updates.title !== undefined) {\n\t\t\t\t\tsessionManager.setSessionTitle(sessionPath, updates.title);\n\t\t\t\t}\n\t\t\t\tif (updates.tags !== undefined) {\n\t\t\t\t\tsessionManager.setSessionTags(sessionPath, updates.tags);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Return the updated values directly (writes are applied synchronously to the file)\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t200,\n\t\t\t\t{\n\t\t\t\t\tid: sessionId,\n\t\t\t\t\ttitle: updates.title ?? session.title,\n\t\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\t\tupdatedAt: new Date().toISOString(),\n\t\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\t\tfavorite: updates.favorite ?? session.favorite,\n\t\t\t\t\ttags: updates.tags ?? session.tags,\n\t\t\t\t},\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t} else if (req.method === \"DELETE\" && sessionId) {\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Load session to verify ownership before deletion\n\t\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tawait sessionManager.deleteSession(sessionId);\n\t\t\trecordMaestroSessionEvent(\"MAESTRO_SESSION_STATE_CLOSED\", {\n\t\t\t\tsessionId,\n\t\t\t\tcloseReason: \"MAESTRO_CLOSE_REASON_USER_STOPPED\",\n\t\t\t\tcloseMessage: \"Web session deleted\",\n\t\t\t\tcorrelation: { principal_id: subject },\n\t\t\t\tenv: webSessionEventEnv(),\n\t\t\t\tmetadata: { operation: \"session.delete\" },\n\t\t\t});\n\n\t\t\tres.writeHead(204, cors);\n\t\t\tres.end();\n\t\t} else {\n\t\t\tres.writeHead(404, {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t...cors,\n\t\t\t});\n\t\t\tres.end(JSON.stringify({ error: \"Not found\" }));\n\t\t}\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/\n Handle session sharing - generate a shareable link\n /\nexport async function handleSessionShare(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Verify session ownership to prevent sharing others' sessions\n\t\tconst subject = getAuthSubject(req);\n\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst options = await readJsonBody<\n\t\t\tSessionShareOptions & { allowSensitiveContent?: boolean }\n\t\t>(req);\n\t\tconst expiresInHours = Math.min(options.expiresInHours ?? 24, 168); // Max 1 week\n\t\tconst maxAccesses =\n\t\t\toptions.maxAccesses === null\n\t\t\t\t? null // explicit unlimited\n\t\t\t\t: Math.max(1, options.maxAccesses ?? 100); // default finite, clamp minimum\n\n\t\tif (!options.allowSensitiveContent) {\n\t\t\tconst scan = scanOutboundSensitiveContent({\n\t\t\t\ttitle: session.title,\n\t\t\t\tmessages: session.messages \|\| [],\n\t\t\t});\n\t\t\tif (scan.blockingFindings.length > 0) {\n\t\t\t\tsendSensitiveContentBlockedResponse(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tcors,\n\t\t\t\t\t\"share\",\n\t\t\t\t\tsummarizeOutboundSensitiveFindings(scan.blockingFindings),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\n\t\t// Generate a share token\n\t\tconst shareToken = crypto.randomBytes(32).toString(\"base64url\");\n\t\tconst expiresAt = new Date(Date.now() + expiresInHours 60 * 60 * 1000);\n\n\t\tconst scope = resolveSessionScope(req);\n\t\tconst scopedSessionId = encodeScopedSessionId(scope, sessionId);\n\n\t\t// Store in database (or fallback to memory)\n\t\tawait createSharedSessionInDb(\n\t\t\tscopedSessionId,\n\t\t\tshareToken,\n\t\t\texpiresAt,\n\t\t\tmaxAccesses,\n\t\t);\n\n\t\t// Cleanup expired shares in background\n\t\tdeleteExpiredShares().catch((err) => {\n\t\t\tlogger.error(\"Failed to cleanup expired shares\", err);\n\t\t});\n\n\t\tsendJson(\n\t\t\tres,\n\t\t\t201,\n\t\t\t{\n\t\t\t\tshareToken,\n\t\t\t\tshareUrl: `/api/sessions/shared/${shareToken}`,\n\t\t\t\twebShareUrl: `/share/${shareToken}`,\n\t\t\t\texpiresAt: expiresAt.toISOString(),\n\t\t\t\tmaxAccesses,\n\t\t\t},\n\t\t\tcors,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/*\n Handle accessing a shared session\n /\nexport async function handleSharedSession(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { token: string },\n\tcors: Record<string, string>,\n) {\n\tconst shareToken = params.token;\n\n\ttry {\n\t\tif (req.method !== \"GET\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst resolvedSessionId = await resolveSharedSessionAccess(\n\t\t\treq,\n\t\t\tres,\n\t\t\tshareToken,\n\t\t\tcors,\n\t\t);\n\t\tif (!resolvedSessionId) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst { scope, sessionId } = decodeScopedSessionId(resolvedSessionId);\n\t\tconst sessionManager = createWebSessionManagerForScope(scope, true);\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Return a read-only view of the session\n\t\tconst responseBody: ComposerSession = {\n\t\t\t// Don't leak the underlying session id through share links; treat token as the public id.\n\t\t\tid: `shared:${shareToken}`,\n\t\t\ttitle: session.title,\n\t\t\tresumeSummary: session.resumeSummary,\n\t\t\tcreatedAt: session.createdAt,\n\t\t\tupdatedAt: session.updatedAt,\n\t\t\tmessageCount: session.messageCount,\n\t\t\tmessages: convertAppMessagesToComposer(session.messages \|\| [], {\n\t\t\t\tincludeAttachmentContent: false,\n\t\t\t}),\n\t\t};\n\n\t\tsendJson(res, 200, { ...responseBody, isShared: true }, cors, req);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/\n Fetch a shared session attachment by token (for lazy-loaded attachment content).\n \n This does NOT increment accessCount (unlike handleSharedSession), so users\n * can fetch attachments after opening the shared session even when maxAccesses\n * is low (e.g., 1).\n /\nexport async function handleSharedSessionAttachment(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { token: string; attachmentId: string },\n\tcors: Record<string, string>,\n) {\n\tconst shareToken = params.token;\n\tconst attachmentId = params.attachmentId;\n\n\ttry {\n\t\tif (req.method !== \"GET\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!attachmentIdPattern.test(attachmentId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid attachment id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst resolvedSessionId = await resolveSharedSessionAccess(\n\t\t\treq,\n\t\t\tres,\n\t\t\tshareToken,\n\t\t\tcors,\n\t\t);\n\t\tif (!resolvedSessionId) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst { scope, sessionId } = decodeScopedSessionId(resolvedSessionId);\n\t\tconst sessionManager = createWebSessionManagerForScope(scope, true);\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst attachment = findAttachmentInSession(session, attachmentId);\n\t\tif (!attachment) {\n\t\t\tsendJson(res, 404, { error: \"Attachment not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst bytes = Buffer.from(attachment.contentBase64, \"base64\");\n\t\tconst requestUrl = new URL(req.url \|\| \"/\", \"http://localhost\");\n\t\tconst download = requestUrl.searchParams.get(\"download\");\n\t\tconst shouldDownload = download === \"1\" \|\| download === \"true\";\n\n\t\tres.writeHead(200, {\n\t\t\t\"Content-Type\": attachment.mimeType,\n\t\t\t\"Content-Length\": bytes.length,\n\t\t\t\"Cache-Control\": \"private, max-age=3600\",\n\t\t\t...(shouldDownload\n\t\t\t\t? {\n\t\t\t\t\t\t\"Content-Disposition\": buildContentDisposition(attachment.fileName),\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\t...cors,\n\t\t});\n\t\tres.end(bytes);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/\n Handle session export\n */\nexport async function handleSessionExport(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Verify session ownership to prevent exporting others' sessions\n\t\tconst subject = getAuthSubject(req);\n\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst options = await readJsonBody<\n\t\t\tSessionExportFormat & { allowSensitiveContent?: boolean }\n\t\t>(req);\n\t\tconst format = options.format \|\| \"json\";\n\t\tconst messages = session.messages \|\| [];\n\t\tlet jsonlEntries: SessionEntry[] \| null \| undefined = undefined;\n\t\tlet jsonlSessionFile: string \| null = null;\n\t\tif (format === \"jsonl\") {\n\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\tjsonlEntries = await sessionManager.loadEntries(sessionId);\n\t\t\t\tif (!jsonlEntries) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tjsonlSessionFile = sessionManager.getSessionFileById(sessionId);\n\t\t\t\tif (!jsonlSessionFile) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tjsonlEntries = safeReadSessionEntries(jsonlSessionFile);\n\t\t\t\tif (!jsonlEntries) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (!options.allowSensitiveContent) {\n\t\t\tconst scan = scanOutboundSensitiveContent({\n\t\t\t\ttitle: session.title,\n\t\t\t\tmessages: format === \"jsonl\" ? (jsonlEntries ?? []) : messages,\n\t\t\t});\n\t\t\tif (scan.blockingFindings.length > 0) {\n\t\t\t\tsendSensitiveContentBlockedResponse(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tcors,\n\t\t\t\t\t\"export\",\n\t\t\t\t\tsummarizeOutboundSensitiveFindings(scan.blockingFindings),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\n\t\tlet content: string;\n\t\tlet contentType: string;\n\t\tlet filename: string;\n\n\t\tswitch (format) {\n\t\t\tcase \"jsonl\": {\n\t\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\t\tcontent = `${(jsonlEntries ?? []).map((entry) => JSON.stringify(entry)).join(\"\\n\")}\\n`;\n\t\t\t\t} else {\n\t\t\t\t\tif (!jsonlSessionFile) {\n\t\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tcontent = readFileSync(jsonlSessionFile, \"utf8\");\n\t\t\t\t}\n\t\t\t\tcontentType = \"application/x-ndjson\";\n\t\t\t\tfilename = `session-${sessionId}.jsonl`;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"markdown\":\n\t\t\t\tcontent = exportToMarkdown(session, messages);\n\t\t\t\tcontentType = \"text/markdown\";\n\t\t\t\tfilename = `session-${sessionId}.md`;\n\t\t\t\tbreak;\n\t\t\tcase \"text\":\n\t\t\t\tcontent = exportToText(session, messages);\n\t\t\t\tcontentType = \"text/plain\";\n\t\t\t\tfilename = `session-${sessionId}.txt`;\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\tcontent = JSON.stringify(\n\t\t\t\t\t{\n\t\t\t\t\t\tid: session.id,\n\t\t\t\t\t\ttitle: session.title,\n\t\t\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\t\t\tmessages: convertAppMessagesToComposer(messages, {\n\t\t\t\t\t\t\tincludeAttachmentContent: true,\n\t\t\t\t\t\t}),\n\t\t\t\t\t},\n\t\t\t\t\tnull,\n\t\t\t\t\t2,\n\t\t\t\t);\n\t\t\t\tcontentType = \"application/json\";\n\t\t\t\tfilename = `session-${sessionId}.json`;\n\t\t\t\tbreak;\n\t\t}\n\n\t\tres.writeHead(200, {\n\t\t\t\"Content-Type\": contentType,\n\t\t\t\"Content-Disposition\": buildContentDisposition(filename),\n\t\t\t...cors,\n\t\t});\n\t\tres.end(content);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n"]}
1	+ {"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/server/handlers/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAMvC,OAAO,EACN,4BAA4B,EAC5B,kCAAkC,GAClC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EACN,uBAAuB,EACvB,YAAY,EACZ,mBAAmB,EACnB,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EACN,iCAAiC,EACjC,+BAA+B,EAC/B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAIN,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAElB,cAAc,GACd,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACpB,MAAM,0BAA0B,CAAC;AAOlC,MAAM,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AACpD,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEhD,SAAS,wBAAwB,CAChC,KAAoB;IAEpB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACxD,OAAO,MAAM,CAAC;IACf,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,mCAAmC,CAC3C,GAAoB,EACpB,GAAmB,EACnB,IAA4B,EAC5B,MAA0B,EAC1B,QAA+D;IAE/D,QAAQ,CACP,GAAG,EACH,GAAG,EACH;QACC,KAAK,EAAE,8EAA8E,MAAM,GAAG;QAC9F,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,QAAQ;KACjB,EACD,IAAI,EACJ,GAAG,CACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACrC,OAA+C,EAC/C,OAAe;IAEf,6BAA6B;IAC7B,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxD,OAAO,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC;IAClC,CAAC;IAED,iDAAiD;IACjD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC;IACpC,CAAC;IAED,uCAAuC;IACvC,oEAAoE;IACpE,qEAAqE;IACrE,+CAA+C;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,OAAO,CAAC;IACzE,OAAO,CAAC,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAC/B,OAAsC,EACtC,YAAoB;IAOpB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,gBAAgB,GAAI,GAAiC,CAAC,WAAW,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAAE,SAAS;QAE/C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,SAAS;YAC9C,MAAM,CAAC,GAAG,GAMT,CAAC;YACF,IAAI,CAAC,CAAC,EAAE,KAAK,YAAY;gBAAE,SAAS;YACpC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC/D,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC7D,OAAO;gBACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,aAAa,EAAE,CAAC,CAAC,OAAO;gBACxB,IAAI,EACH,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;oBACpD,CAAC,CAAC,CAAC,CAAC,IAAI;oBACR,CAAC,CAAC,SAAS;aACb,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,UAAkB,EAClB,IAA4B;IAE5B,MAAM,QAAQ,GACZ,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACjE,GAAG,CAAC,MAAM,CAAC,aAAa;QACxB,SAAS,CAAC;IACX,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,KAAK,EAAE,mBAAmB;YAC1B,UAAU,EAAE,SAAS,CAAC,iBAAiB;SACvC,EACD,IAAI,EACJ,GAAG,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC3B,QAAQ,YAAY,CAAC,MAAM,EAAE,CAAC;YAC7B,KAAK,WAAW;gBACf,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAC5C,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO,IAAI,CAAC;YACb,KAAK,SAAS;gBACb,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBACrC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC;YACb,KAAK,cAAc;gBAClB,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,yCAAyC,EAAE,EACpD,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO,IAAI,CAAC;QACd,CAAC;IACF,CAAC;IAED,OAAO,YAAY,CAAC,SAAS,IAAI,IAAI,CAAC;AACvC,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,GAAoB,EACpB,GAAmB,EACnB,MAAuB,EACvB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,eAAe,EAAE,kBAAkB,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,YAAY,GAAG,WAAW;QAC/B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAClC,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,KAAK,GACV,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;QAC1B,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GACX,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAChE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC;QAC3B,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,mBAAmB,GACxB,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC;YACzD,MAAM,QAAQ,GAAG,CAChB,MAAM,cAAc,CAAC,YAAY,CAChC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CACnD,CACD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACpD,MAAM,aAAa,GAAG,mBAAmB;gBACxC,CAAC,CAAC,QAAQ,CAAC,KAAK,CACd,MAAM,IAAI,CAAC,EACX,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,CAC1C;gBACF,CAAC,CAAC,QAAQ,CAAC;YACZ,MAAM,WAAW,GAA6B,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvE,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBAC/C,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClD,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClD,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC;gBACjC,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;aACZ,CAAC,CAAC,CAAC;YAEJ,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YACD,MAAM,YAAY,GAAG,wBAAwB,CAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC;gBACnC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAClC,CAAC;YACF,IAAI,CAAC,YAAY,EAAE,CAAC;gBACnB,QAAQ,CACP,GAAG,EACH,GAAG,EACH;oBACC,KAAK,EACJ,6DAA6D;iBAC9D,EACD,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC3D,YAAY;aACZ,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,MAAM,YAAY,GAAoB;gBACrC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;oBAC9D,wBAAwB,EAAE,KAAK;iBAC/B,CAAC;gBACF,GAAG,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAC;aAC7C,CAAC;YAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAqB,GAAG,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,YAAY,GAAoB;gBACrC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;oBAC9D,wBAAwB,EAAE,KAAK;iBAC/B,CAAC;aACF,CAAC;YAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,SAAS,EAAE,CAAC;YAChD,0BAA0B;YAC1B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAoB,GAAG,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAE5D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5C,MAAM,cAAc,CAAC,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACP,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBACjE,IAAI,CAAC,WAAW,EAAE,CAAC;oBAClB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBACnE,OAAO;gBACR,CAAC;gBAED,qFAAqF;gBACrF,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACpC,cAAc,CAAC,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClE,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBACjC,cAAc,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5D,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAChC,cAAc,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;YAED,oFAAoF;YACpF,QAAQ,CACP,GAAG,EACH,GAAG,EACH;gBACC,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;gBACrC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;gBAC9C,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;aAClC,EACD,IAAI,EACJ,GAAG,CACH,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,mDAAmD;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YAED,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAC9C,yBAAyB,CAAC,8BAA8B,EAAE;gBACzD,SAAS;gBACT,WAAW,EAAE,mCAAmC;gBAChD,YAAY,EAAE,qBAAqB;gBACnC,WAAW,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE;gBACtC,GAAG,EAAE,kBAAkB,EAAE;gBACzB,QAAQ,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE;aACzC,CAAC,CAAC;YAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzB,GAAG,CAAC,GAAG,EAAE,CAAC;QACX,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBAClB,cAAc,EAAE,kBAAkB;gBAClC,GAAG,IAAI;aACP,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,GAAoB,EACpB,GAAmB,EACnB,MAAsB,EACtB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAE5B,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,+DAA+D;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAEhC,GAAG,CAAC,CAAC;QACP,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa;QACjF,MAAM,WAAW,GAChB,OAAO,CAAC,WAAW,KAAK,IAAI;YAC3B,CAAC,CAAC,IAAI,CAAC,qBAAqB;YAC5B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,gCAAgC;QAE7E,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,4BAA4B,CAAC;gBACzC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;aAChC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,mCAAmC,CAClC,GAAG,EACH,GAAG,EACH,IAAI,EACJ,OAAO,EACP,kCAAkC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CACzD,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QAED,yBAAyB;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEzE,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAEhE,4CAA4C;QAC5C,MAAM,uBAAuB,CAC5B,eAAe,EACf,UAAU,EACV,SAAS,EACT,WAAW,CACX,CAAC;QAEF,uCAAuC;QACvC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,UAAU;YACV,QAAQ,EAAE,wBAAwB,UAAU,EAAE;YAC9C,WAAW,EAAE,UAAU,UAAU,EAAE;YACnC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,WAAW;SACX,EACD,IAAI,EACJ,GAAG,CACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,GAAoB,EACpB,GAAmB,EACnB,MAAyB,EACzB,IAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;IAEhC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CACzD,GAAG,EACH,GAAG,EACH,UAAU,EACV,IAAI,CACJ,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO;QACR,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,+BAA+B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,yCAAyC;QACzC,MAAM,YAAY,GAAoB;YACrC,0FAA0F;YAC1F,EAAE,EAAE,UAAU,UAAU,EAAE;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE;gBAC9D,wBAAwB,EAAE,KAAK;aAC/B,CAAC;SACF,CAAC;QAEF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,GAAoB,EACpB,GAAmB,EACnB,MAA+C,EAC/C,IAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;IAChC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAEzC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CACzD,GAAG,EACH,GAAG,EACH,UAAU,EACV,IAAI,CACJ,CAAC;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO;QACR,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,+BAA+B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO;QACR,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,MAAM,CAAC;QAE/D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,UAAU,CAAC,QAAQ;YACnC,gBAAgB,EAAE,KAAK,CAAC,MAAM;YAC9B,eAAe,EAAE,uBAAuB;YACxC,GAAG,CAAC,cAAc;gBACjB,CAAC,CAAC;oBACA,qBAAqB,EAAE,uBAAuB,CAAC,UAAU,CAAC,QAAQ,CAAC;iBACnE;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,IAAI;SACP,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,GAAoB,EACpB,GAAmB,EACnB,MAAsB,EACtB,IAA4B;IAE5B,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAE5B,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACR,CAAC;QAED,iEAAiE;QACjE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,IAAI,EACJ,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAEhC,GAAG,CAAC,CAAC;QACP,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxC,IAAI,YAAY,GAAsC,SAAS,CAAC;QAChE,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAC3C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACxB,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5C,YAAY,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;gBAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBAC9D,OAAO;gBACR,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,gBAAgB,GAAG,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBAChE,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBACnE,OAAO;gBACR,CAAC;gBACD,YAAY,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;gBACxD,IAAI,CAAC,YAAY,EAAE,CAAC;oBACnB,OAAO;gBACR,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,4BAA4B,CAAC;gBACzC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;aAC9D,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,mCAAmC,CAClC,GAAG,EACH,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,kCAAkC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CACzD,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QAED,IAAI,OAAe,CAAC;QACpB,IAAI,WAAmB,CAAC;QACxB,IAAI,QAAgB,CAAC;QAErB,QAAQ,MAAM,EAAE,CAAC;YAChB,KAAK,OAAO,CAAC,CAAC,CAAC;gBACd,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC5C,OAAO,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxF,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;wBACnE,OAAO;oBACR,CAAC;oBACD,OAAO,GAAG,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;gBAClD,CAAC;gBACD,WAAW,GAAG,sBAAsB,CAAC;gBACrC,QAAQ,GAAG,WAAW,SAAS,QAAQ,CAAC;gBACxC,MAAM;YACP,CAAC;YACD,KAAK,UAAU;gBACd,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC9C,WAAW,GAAG,eAAe,CAAC;gBAC9B,QAAQ,GAAG,WAAW,SAAS,KAAK,CAAC;gBACrC,MAAM;YACP,KAAK,MAAM;gBACV,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC1C,WAAW,GAAG,YAAY,CAAC;gBAC3B,QAAQ,GAAG,WAAW,SAAS,MAAM,CAAC;gBACtC,MAAM;YACP;gBACC,OAAO,GAAG,IAAI,CAAC,SAAS,CACvB;oBACC,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,QAAQ,EAAE,4BAA4B,CAAC,QAAQ,EAAE;wBAChD,wBAAwB,EAAE,IAAI;qBAC9B,CAAC;iBACF,EACD,IAAI,EACJ,CAAC,CACD,CAAC;gBACF,WAAW,GAAG,kBAAkB,CAAC;gBACjC,QAAQ,GAAG,WAAW,SAAS,OAAO,CAAC;gBACvC,MAAM;QACR,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,WAAW;YAC3B,qBAAqB,EAAE,uBAAuB,CAAC,QAAQ,CAAC;YACxD,GAAG,IAAI;SACP,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC","sourcesContent":["/*\n @fileoverview Session Management HTTP Handlers\n \n This module provides REST API endpoints for managing Composer sessions,\n * including CRUD operations, session sharing, and export functionality.\n \n ## Endpoints\n \n \| Method \| Path \| Description \|\n * \|--------\|------\|-------------\|\n * \| GET \| `/api/sessions` \| List all sessions with pagination \|\n * \| GET \| `/api/sessions/:id` \| Get a specific session with messages \|\n * \| GET \| `/api/sessions/:id/timeline` \| Get a redacted run timeline \|\n * \| POST \| `/api/sessions` \| Create a new session \|\n * \| PATCH \| `/api/sessions/:id` \| Update session metadata (title, tags, favorite) \|\n * \| DELETE \| `/api/sessions/:id` \| Delete a session \|\n * \| POST \| `/api/sessions/:id/share` \| Generate a shareable link \|\n * \| GET \| `/api/sessions/shared/:token` \| Access a shared session \|\n * \| POST \| `/api/sessions/:id/export` \| Export session in various formats \|\n \n ## Session Sharing\n \n Sessions can be shared via time-limited, access-limited tokens:\n * - Configurable expiration (default 24h, max 1 week)\n * - Optional access count limits\n * - Rate limiting to prevent brute-force attacks\n * - Atomic access counting to prevent race conditions\n \n ## Storage\n \n - Session data: JSONL files in `~/.maestro/agent/sessions/`\n * - Share tokens: PostgreSQL (with in-memory fallback)\n * - Rate limits: Redis (with in-memory fallback)\n \n @module web/handlers/sessions\n /\nimport crypto from \"node:crypto\";\nimport { readFileSync } from \"node:fs\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type {\n\tComposerSession,\n\tComposerSessionSummary,\n} from \"@evalops/contracts\";\nimport {\n\tscanOutboundSensitiveContent,\n\tsummarizeOutboundSensitiveFindings,\n} from \"../../safety/outbound-secret-preflight.js\";\nimport { safeReadSessionEntries } from \"../../session/session-context.js\";\nimport type { SessionEntry, SessionMessagesView } from \"../../session/types.js\";\nimport { recordMaestroSessionEvent } from \"../../telemetry/maestro-event-bus.js\";\nimport { createLogger } from \"../../utils/logger.js\";\nimport { getAuthSubject } from \"../authz.js\";\nimport { isHostedSessionManager } from \"../hosted-session-manager.js\";\nimport { getPendingServerRequestPayload } from \"../pending-request-payload.js\";\nimport {\n\tbuildContentDisposition,\n\treadJsonBody,\n\trespondWithApiError,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { webSessionEventEnv } from \"../session-event-env.js\";\nimport {\n\tcreateWebSessionManagerForRequest,\n\tcreateWebSessionManagerForScope,\n\tdecodeScopedSessionId,\n\tencodeScopedSessionId,\n\tresolveSessionScope,\n} from \"../session-scope.js\";\nimport { convertAppMessagesToComposer } from \"../session-serialization.js\";\nimport { exportToMarkdown, exportToText } from \"./session-export-formatters.js\";\nimport {\n\ttype SessionExportFormat,\n\ttype SessionShareOptions,\n\ttype SessionUpdateBody,\n\tcheckShareRateLimit,\n\tcreateSharedSessionInDb,\n\tdeleteExpiredShares,\n\tdeleteShareByToken,\n\tgetSharedSessionFromDb,\n\ttryAccessShare,\n} from \"./session-share-store.js\";\n\nexport {\n\tcheckShareRateLimit,\n\tresetShareRateLimit,\n\tstopShareRateLimiter,\n} from \"./session-share-store.js\";\nexport type {\n\tSessionExportFormat,\n\tSessionShareOptions,\n\tSessionUpdateBody,\n} from \"./session-share-store.js\";\n\nconst logger = createLogger(\"sessions-handler\");\nexport const sessionIdPattern = /^[a-zA-Z0-9._-]+$/;\nconst attachmentIdPattern = /^[a-zA-Z0-9._-]+$/;\n\nfunction parseSessionMessagesView(\n\tvalue: string \| null,\n): SessionMessagesView \| null {\n\tif (value === null \|\| value === \"\" \|\| value === \"full\") {\n\t\treturn \"full\";\n\t}\n\tif (value === \"summary\" \|\| value === \"notLoaded\") {\n\t\treturn value;\n\t}\n\treturn null;\n}\n\nfunction sendSensitiveContentBlockedResponse(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcors: Record<string, string>,\n\taction: \"export\" \| \"share\",\n\tfindings: ReturnType<typeof summarizeOutboundSensitiveFindings>,\n): void {\n\tsendJson(\n\t\tres,\n\t\t409,\n\t\t{\n\t\t\terror: `Sensitive content detected. Review and confirm before continuing with this ${action}.`,\n\t\t\tcode: \"sensitive_content_detected\",\n\t\t\tdetails: findings,\n\t\t},\n\t\tcors,\n\t\treq,\n\t);\n}\n\n/\n Verify that the authenticated subject has access to the session.\n * Prevents IDOR attacks by checking session ownership fields.\n \n Returns true if access is allowed, false otherwise.\n /\nexport function verifySessionOwnership(\n\tsession: { owner?: unknown; subject?: unknown },\n\tsubject: string,\n): boolean {\n\t// Check explicit owner field\n\tif (typeof session.owner === \"string\" && session.owner) {\n\t\treturn session.owner === subject;\n\t}\n\n\t// Check subject field (for API-created sessions)\n\tif (typeof session.subject === \"string\" && session.subject) {\n\t\treturn session.subject === subject;\n\t}\n\n\t// For sessions without ownership info:\n\t// In strict mode (multi-user), deny access to prevent IDOR attacks.\n\t// Sessions created via CLI don't have ownership info, but API access\n\t// should be restricted in hosted environments.\n\tconst strictMode = process.env.MAESTRO_STRICT_SESSION_ACCESS !== \"false\";\n\treturn !strictMode;\n}\n\nfunction findAttachmentInSession(\n\tsession: { messages?: Array<unknown> },\n\tattachmentId: string,\n): {\n\tfileName: string;\n\tmimeType: string;\n\tcontentBase64: string;\n\tsize?: number;\n} \| null {\n\tconst messages = Array.isArray(session.messages) ? session.messages : [];\n\tfor (const msg of messages) {\n\t\tif (!msg \|\| typeof msg !== \"object\") continue;\n\t\tconst maybeAttachments = (msg as { attachments?: unknown }).attachments;\n\t\tif (!Array.isArray(maybeAttachments)) continue;\n\n\t\tfor (const att of maybeAttachments) {\n\t\t\tif (!att \|\| typeof att !== \"object\") continue;\n\t\t\tconst a = att as {\n\t\t\t\tid?: unknown;\n\t\t\t\tfileName?: unknown;\n\t\t\t\tmimeType?: unknown;\n\t\t\t\tcontent?: unknown;\n\t\t\t\tsize?: unknown;\n\t\t\t};\n\t\t\tif (a.id !== attachmentId) continue;\n\t\t\tif (typeof a.fileName !== \"string\" \|\| !a.fileName) return null;\n\t\t\tif (typeof a.mimeType !== \"string\" \|\| !a.mimeType) return null;\n\t\t\tif (typeof a.content !== \"string\" \|\| !a.content) return null;\n\t\t\treturn {\n\t\t\t\tfileName: a.fileName,\n\t\t\t\tmimeType: a.mimeType,\n\t\t\t\tcontentBase64: a.content,\n\t\t\t\tsize:\n\t\t\t\t\ttypeof a.size === \"number\" && Number.isFinite(a.size)\n\t\t\t\t\t\t? a.size\n\t\t\t\t\t\t: undefined,\n\t\t\t};\n\t\t}\n\t}\n\treturn null;\n}\n\nasync function resolveSharedSessionAccess(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tshareToken: string,\n\tcors: Record<string, string>,\n): Promise<string \| null> {\n\tconst clientIp =\n\t\t(req.headers[\"x-forwarded-for\"] as string)?.split(\",\")[0]?.trim() \|\|\n\t\treq.socket.remoteAddress \|\|\n\t\t\"unknown\";\n\tconst rateLimit = await checkShareRateLimit(clientIp);\n\tif (!rateLimit.allowed) {\n\t\tres.setHeader(\"Retry-After\", String(rateLimit.retryAfterSeconds ?? 60));\n\t\tsendJson(\n\t\t\tres,\n\t\t\t429,\n\t\t\t{\n\t\t\t\terror: \"Too many requests\",\n\t\t\t\tretryAfter: rateLimit.retryAfterSeconds,\n\t\t\t},\n\t\t\tcors,\n\t\t\treq,\n\t\t);\n\t\treturn null;\n\t}\n\n\tconst accessResult = await tryAccessShare(shareToken);\n\tif (!accessResult.allowed) {\n\t\tswitch (accessResult.reason) {\n\t\t\tcase \"not_found\":\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t404,\n\t\t\t\t\t{ error: \"Share link not found or expired\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn null;\n\t\t\tcase \"expired\":\n\t\t\t\tawait deleteShareByToken(shareToken);\n\t\t\t\tsendJson(res, 410, { error: \"Share link has expired\" }, cors, req);\n\t\t\t\treturn null;\n\t\t\tcase \"max_accesses\":\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t410,\n\t\t\t\t\t{ error: \"Share link has reached maximum accesses\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn null;\n\t\t}\n\t}\n\n\treturn accessResult.sessionId ?? null;\n}\n\n// ============================================================================\n// SESSION HANDLERS\n// ============================================================================\n\n/\n Handle session list and CRUD operations\n /\nexport async function handleSessions(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id?: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\tconst url = new URL(req.url \|\| \"/api/sessions\", \"http://localhost\");\n\tconst limitParam = url.searchParams.get(\"limit\");\n\tconst offsetParam = url.searchParams.get(\"offset\");\n\tconst parsedLimit = limitParam ? Number.parseInt(limitParam, 10) : undefined;\n\tconst parsedOffset = offsetParam\n\t\t? Number.parseInt(offsetParam, 10)\n\t\t: undefined;\n\tconst limit =\n\t\ttypeof parsedLimit === \"number\" && Number.isFinite(parsedLimit)\n\t\t\t? Math.max(1, parsedLimit)\n\t\t\t: undefined;\n\tconst offset =\n\t\ttypeof parsedOffset === \"number\" && Number.isFinite(parsedOffset)\n\t\t\t? Math.max(0, parsedOffset)\n\t\t\t: undefined;\n\n\ttry {\n\t\tif (req.method === \"GET\" && !sessionId) {\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tconst paginationRequested =\n\t\t\t\ttypeof limit === \"number\" \|\| typeof offset === \"number\";\n\t\t\tconst sessions = (\n\t\t\t\tawait sessionManager.listSessions(\n\t\t\t\t\tpaginationRequested ? undefined : { limit, offset },\n\t\t\t\t)\n\t\t\t).filter((s) => verifySessionOwnership(s, subject));\n\t\t\tconst pagedSessions = paginationRequested\n\t\t\t\t? sessions.slice(\n\t\t\t\t\t\toffset ?? 0,\n\t\t\t\t\t\t(offset ?? 0) + (limit ?? sessions.length),\n\t\t\t\t\t)\n\t\t\t\t: sessions;\n\t\t\tconst sessionList: ComposerSessionSummary[] = pagedSessions.map((s) => ({\n\t\t\t\tid: s.id,\n\t\t\t\ttitle: s.title \|\| `Session ${s.id.slice(0, 8)}`,\n\t\t\t\tresumeSummary: s.resumeSummary,\n\t\t\t\tcreatedAt: s.createdAt \|\| new Date().toISOString(),\n\t\t\t\tupdatedAt: s.updatedAt \|\| new Date().toISOString(),\n\t\t\t\tmessageCount: s.messageCount \|\| 0,\n\t\t\t\tfavorite: s.favorite,\n\t\t\t\ttags: s.tags,\n\t\t\t}));\n\n\t\t\tsendJson(res, 200, { sessions: sessionList }, cors, req);\n\t\t} else if (req.method === \"GET\" && sessionId) {\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst messagesView = parseSessionMessagesView(\n\t\t\t\turl.searchParams.get(\"messagesView\") ??\n\t\t\t\t\turl.searchParams.get(\"itemsView\"),\n\t\t\t);\n\t\t\tif (!messagesView) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t400,\n\t\t\t\t\t{\n\t\t\t\t\t\terror:\n\t\t\t\t\t\t\t\"Invalid messagesView. Expected full, summary, or notLoaded.\",\n\t\t\t\t\t},\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst session = await sessionManager.loadSession(sessionId, {\n\t\t\t\tmessagesView,\n\t\t\t});\n\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst responseBody: ComposerSession = {\n\t\t\t\tid: session.id,\n\t\t\t\ttitle: session.title,\n\t\t\t\tresumeSummary: session.resumeSummary,\n\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\tfavorite: session.favorite,\n\t\t\t\ttags: session.tags,\n\t\t\t\tmessagesView: session.messagesView,\n\t\t\t\tmessages: convertAppMessagesToComposer(session.messages \|\| [], {\n\t\t\t\t\tincludeAttachmentContent: false,\n\t\t\t\t}),\n\t\t\t\t...getPendingServerRequestPayload(session.id),\n\t\t\t};\n\n\t\t\tsendJson(res, 200, responseBody, cors, req);\n\t\t} else if (req.method === \"POST\" && !sessionId) {\n\t\t\tconst { title } = await readJsonBody<{ title?: string }>(req);\n\t\t\tconst session = await sessionManager.createSession({ title });\n\t\t\tconst responseBody: ComposerSession = {\n\t\t\t\tid: session.id,\n\t\t\t\ttitle: session.title,\n\t\t\t\tresumeSummary: session.resumeSummary,\n\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\tfavorite: false,\n\t\t\t\ttags: undefined,\n\t\t\t\tmessages: convertAppMessagesToComposer(session.messages \|\| [], {\n\t\t\t\t\tincludeAttachmentContent: false,\n\t\t\t\t}),\n\t\t\t};\n\n\t\t\tsendJson(res, 201, responseBody, cors, req);\n\t\t} else if (req.method === \"PATCH\" && sessionId) {\n\t\t\t// Update session metadata\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst updates = await readJsonBody<SessionUpdateBody>(req);\n\t\t\tconst session = await sessionManager.loadSession(sessionId);\n\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\tawait sessionManager.updateSessionMetadata(sessionId, updates);\n\t\t\t} else {\n\t\t\t\tconst sessionPath = sessionManager.getSessionFileById(sessionId);\n\t\t\t\tif (!sessionPath) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\t// Apply updates - SessionManager supports favorite, title, and tags via meta entries\n\t\t\t\tif (updates.favorite !== undefined) {\n\t\t\t\t\tsessionManager.setSessionFavorite(sessionPath, updates.favorite);\n\t\t\t\t}\n\t\t\t\tif (updates.title !== undefined) {\n\t\t\t\t\tsessionManager.setSessionTitle(sessionPath, updates.title);\n\t\t\t\t}\n\t\t\t\tif (updates.tags !== undefined) {\n\t\t\t\t\tsessionManager.setSessionTags(sessionPath, updates.tags);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\t// Return the updated values directly (writes are applied synchronously to the file)\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t200,\n\t\t\t\t{\n\t\t\t\t\tid: sessionId,\n\t\t\t\t\ttitle: updates.title ?? session.title,\n\t\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\t\tupdatedAt: new Date().toISOString(),\n\t\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\t\tfavorite: updates.favorite ?? session.favorite,\n\t\t\t\t\ttags: updates.tags ?? session.tags,\n\t\t\t\t},\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t} else if (req.method === \"DELETE\" && sessionId) {\n\t\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Load session to verify ownership before deletion\n\t\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\t\tif (!session) {\n\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Verify session ownership to prevent IDOR attacks\n\t\t\tconst subject = getAuthSubject(req);\n\t\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t403,\n\t\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tawait sessionManager.deleteSession(sessionId);\n\t\t\trecordMaestroSessionEvent(\"MAESTRO_SESSION_STATE_CLOSED\", {\n\t\t\t\tsessionId,\n\t\t\t\tcloseReason: \"MAESTRO_CLOSE_REASON_USER_STOPPED\",\n\t\t\t\tcloseMessage: \"Web session deleted\",\n\t\t\t\tcorrelation: { principal_id: subject },\n\t\t\t\tenv: webSessionEventEnv(),\n\t\t\t\tmetadata: { operation: \"session.delete\" },\n\t\t\t});\n\n\t\t\tres.writeHead(204, cors);\n\t\t\tres.end();\n\t\t} else {\n\t\t\tres.writeHead(404, {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t...cors,\n\t\t\t});\n\t\t\tres.end(JSON.stringify({ error: \"Not found\" }));\n\t\t}\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/\n Handle session sharing - generate a shareable link\n /\nexport async function handleSessionShare(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Verify session ownership to prevent sharing others' sessions\n\t\tconst subject = getAuthSubject(req);\n\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst options = await readJsonBody<\n\t\t\tSessionShareOptions & { allowSensitiveContent?: boolean }\n\t\t>(req);\n\t\tconst expiresInHours = Math.min(options.expiresInHours ?? 24, 168); // Max 1 week\n\t\tconst maxAccesses =\n\t\t\toptions.maxAccesses === null\n\t\t\t\t? null // explicit unlimited\n\t\t\t\t: Math.max(1, options.maxAccesses ?? 100); // default finite, clamp minimum\n\n\t\tif (!options.allowSensitiveContent) {\n\t\t\tconst scan = scanOutboundSensitiveContent({\n\t\t\t\ttitle: session.title,\n\t\t\t\tmessages: session.messages \|\| [],\n\t\t\t});\n\t\t\tif (scan.blockingFindings.length > 0) {\n\t\t\t\tsendSensitiveContentBlockedResponse(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tcors,\n\t\t\t\t\t\"share\",\n\t\t\t\t\tsummarizeOutboundSensitiveFindings(scan.blockingFindings),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\n\t\t// Generate a share token\n\t\tconst shareToken = crypto.randomBytes(32).toString(\"base64url\");\n\t\tconst expiresAt = new Date(Date.now() + expiresInHours 60 * 60 * 1000);\n\n\t\tconst scope = resolveSessionScope(req);\n\t\tconst scopedSessionId = encodeScopedSessionId(scope, sessionId);\n\n\t\t// Store in database (or fallback to memory)\n\t\tawait createSharedSessionInDb(\n\t\t\tscopedSessionId,\n\t\t\tshareToken,\n\t\t\texpiresAt,\n\t\t\tmaxAccesses,\n\t\t);\n\n\t\t// Cleanup expired shares in background\n\t\tdeleteExpiredShares().catch((err) => {\n\t\t\tlogger.error(\"Failed to cleanup expired shares\", err);\n\t\t});\n\n\t\tsendJson(\n\t\t\tres,\n\t\t\t201,\n\t\t\t{\n\t\t\t\tshareToken,\n\t\t\t\tshareUrl: `/api/sessions/shared/${shareToken}`,\n\t\t\t\twebShareUrl: `/share/${shareToken}`,\n\t\t\t\texpiresAt: expiresAt.toISOString(),\n\t\t\t\tmaxAccesses,\n\t\t\t},\n\t\t\tcors,\n\t\t\treq,\n\t\t);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/*\n Handle accessing a shared session\n /\nexport async function handleSharedSession(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { token: string },\n\tcors: Record<string, string>,\n) {\n\tconst shareToken = params.token;\n\n\ttry {\n\t\tif (req.method !== \"GET\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst resolvedSessionId = await resolveSharedSessionAccess(\n\t\t\treq,\n\t\t\tres,\n\t\t\tshareToken,\n\t\t\tcors,\n\t\t);\n\t\tif (!resolvedSessionId) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst { scope, sessionId } = decodeScopedSessionId(resolvedSessionId);\n\t\tconst sessionManager = createWebSessionManagerForScope(scope, true);\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Return a read-only view of the session\n\t\tconst responseBody: ComposerSession = {\n\t\t\t// Don't leak the underlying session id through share links; treat token as the public id.\n\t\t\tid: `shared:${shareToken}`,\n\t\t\ttitle: session.title,\n\t\t\tresumeSummary: session.resumeSummary,\n\t\t\tcreatedAt: session.createdAt,\n\t\t\tupdatedAt: session.updatedAt,\n\t\t\tmessageCount: session.messageCount,\n\t\t\tmessages: convertAppMessagesToComposer(session.messages \|\| [], {\n\t\t\t\tincludeAttachmentContent: false,\n\t\t\t}),\n\t\t};\n\n\t\tsendJson(res, 200, { ...responseBody, isShared: true }, cors, req);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/\n Fetch a shared session attachment by token (for lazy-loaded attachment content).\n \n This does NOT increment accessCount (unlike handleSharedSession), so users\n * can fetch attachments after opening the shared session even when maxAccesses\n * is low (e.g., 1).\n /\nexport async function handleSharedSessionAttachment(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { token: string; attachmentId: string },\n\tcors: Record<string, string>,\n) {\n\tconst shareToken = params.token;\n\tconst attachmentId = params.attachmentId;\n\n\ttry {\n\t\tif (req.method !== \"GET\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!attachmentIdPattern.test(attachmentId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid attachment id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst resolvedSessionId = await resolveSharedSessionAccess(\n\t\t\treq,\n\t\t\tres,\n\t\t\tshareToken,\n\t\t\tcors,\n\t\t);\n\t\tif (!resolvedSessionId) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst { scope, sessionId } = decodeScopedSessionId(resolvedSessionId);\n\t\tconst sessionManager = createWebSessionManagerForScope(scope, true);\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst attachment = findAttachmentInSession(session, attachmentId);\n\t\tif (!attachment) {\n\t\t\tsendJson(res, 404, { error: \"Attachment not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst bytes = Buffer.from(attachment.contentBase64, \"base64\");\n\t\tconst requestUrl = new URL(req.url \|\| \"/\", \"http://localhost\");\n\t\tconst download = requestUrl.searchParams.get(\"download\");\n\t\tconst shouldDownload = download === \"1\" \|\| download === \"true\";\n\n\t\tres.writeHead(200, {\n\t\t\t\"Content-Type\": attachment.mimeType,\n\t\t\t\"Content-Length\": bytes.length,\n\t\t\t\"Cache-Control\": \"private, max-age=3600\",\n\t\t\t...(shouldDownload\n\t\t\t\t? {\n\t\t\t\t\t\t\"Content-Disposition\": buildContentDisposition(attachment.fileName),\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\t...cors,\n\t\t});\n\t\tres.end(bytes);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n\n/\n Handle session export\n */\nexport async function handleSessionExport(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tparams: { id: string },\n\tcors: Record<string, string>,\n) {\n\tconst sessionManager = createWebSessionManagerForRequest(req, true);\n\tconst sessionId = params.id;\n\n\ttry {\n\t\tif (req.method !== \"POST\") {\n\t\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (!sessionIdPattern.test(sessionId)) {\n\t\t\tsendJson(res, 400, { error: \"Invalid session id\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// Verify session ownership to prevent exporting others' sessions\n\t\tconst subject = getAuthSubject(req);\n\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst options = await readJsonBody<\n\t\t\tSessionExportFormat & { allowSensitiveContent?: boolean }\n\t\t>(req);\n\t\tconst format = options.format \|\| \"json\";\n\t\tconst messages = session.messages \|\| [];\n\t\tlet jsonlEntries: SessionEntry[] \| null \| undefined = undefined;\n\t\tlet jsonlSessionFile: string \| null = null;\n\t\tif (format === \"jsonl\") {\n\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\tjsonlEntries = await sessionManager.loadEntries(sessionId);\n\t\t\t\tif (!jsonlEntries) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tjsonlSessionFile = sessionManager.getSessionFileById(sessionId);\n\t\t\t\tif (!jsonlSessionFile) {\n\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tjsonlEntries = safeReadSessionEntries(jsonlSessionFile);\n\t\t\t\tif (!jsonlEntries) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tif (!options.allowSensitiveContent) {\n\t\t\tconst scan = scanOutboundSensitiveContent({\n\t\t\t\ttitle: session.title,\n\t\t\t\tmessages: format === \"jsonl\" ? (jsonlEntries ?? []) : messages,\n\t\t\t});\n\t\t\tif (scan.blockingFindings.length > 0) {\n\t\t\t\tsendSensitiveContentBlockedResponse(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tcors,\n\t\t\t\t\t\"export\",\n\t\t\t\t\tsummarizeOutboundSensitiveFindings(scan.blockingFindings),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\n\t\tlet content: string;\n\t\tlet contentType: string;\n\t\tlet filename: string;\n\n\t\tswitch (format) {\n\t\t\tcase \"jsonl\": {\n\t\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\t\tcontent = `${(jsonlEntries ?? []).map((entry) => JSON.stringify(entry)).join(\"\\n\")}\\n`;\n\t\t\t\t} else {\n\t\t\t\t\tif (!jsonlSessionFile) {\n\t\t\t\t\t\tsendJson(res, 404, { error: \"Session file not found\" }, cors, req);\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tcontent = readFileSync(jsonlSessionFile, \"utf8\");\n\t\t\t\t}\n\t\t\t\tcontentType = \"application/x-ndjson\";\n\t\t\t\tfilename = `session-${sessionId}.jsonl`;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"markdown\":\n\t\t\t\tcontent = exportToMarkdown(session, messages);\n\t\t\t\tcontentType = \"text/markdown\";\n\t\t\t\tfilename = `session-${sessionId}.md`;\n\t\t\t\tbreak;\n\t\t\tcase \"text\":\n\t\t\t\tcontent = exportToText(session, messages);\n\t\t\t\tcontentType = \"text/plain\";\n\t\t\t\tfilename = `session-${sessionId}.txt`;\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\tcontent = JSON.stringify(\n\t\t\t\t\t{\n\t\t\t\t\t\tid: session.id,\n\t\t\t\t\t\ttitle: session.title,\n\t\t\t\t\t\tcreatedAt: session.createdAt,\n\t\t\t\t\t\tupdatedAt: session.updatedAt,\n\t\t\t\t\t\tmessageCount: session.messageCount,\n\t\t\t\t\t\tmessages: convertAppMessagesToComposer(messages, {\n\t\t\t\t\t\t\tincludeAttachmentContent: true,\n\t\t\t\t\t\t}),\n\t\t\t\t\t},\n\t\t\t\t\tnull,\n\t\t\t\t\t2,\n\t\t\t\t);\n\t\t\t\tcontentType = \"application/json\";\n\t\t\t\tfilename = `session-${sessionId}.json`;\n\t\t\t\tbreak;\n\t\t}\n\n\t\tres.writeHead(200, {\n\t\t\t\"Content-Type\": contentType,\n\t\t\t\"Content-Disposition\": buildContentDisposition(filename),\n\t\t\t...cors,\n\t\t});\n\t\tres.end(content);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n"]}